@oracle-agent/oracle 0.13.1 → 0.14.0

package/src/tui/theme.mjs

@@ -0,0 +1,81 @@
+export const THEME = Object.freeze({
+  accent: "#B8F0FF",
+  prompt: "#B8F0FF",
+  banner_title: "#B8F0FF",
+  banner_accent: "#91C2D7",
+  ui_label: "#A5D9EB",
+  banner_text: "#EAF2F8",
+  status_bar_strong: "#EAF2F8",
+  banner_border: "#455867",
+  input_rule: "#455867",
+  session_border: "#455867",
+  banner_dim: "#60717F",
+  status_bar_dim: "#60717F",
+  status_bar_bg: "#11161B",
+  status_bar_text: "#91A2B1",
+  ok: "#7EE7B5",
+  error: "#FF7B7B",
+  warn: "#F0C674",
+  bad: "#FF9B71",
+  selection_bg: "#23313B",
+});
+
+export function hexToRgb(hex) {
+  if (typeof hex !== "string") return null;
+  const value = hex.startsWith("#") ? hex.slice(1) : hex;
+  if (!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(value)) return null;
+  const expanded = value.length === 3
+    ? [...value].map((character) => character.repeat(2)).join("")
+    : value;
+  return {
+    r: Number.parseInt(expanded.slice(0, 2), 16),
+    g: Number.parseInt(expanded.slice(2, 4), 16),
+    b: Number.parseInt(expanded.slice(4, 6), 16),
+  };
+}
+
+function colorSequence(code, hex, text) {
+  const rgb = hexToRgb(hex);
+  if (!rgb) return String(text);
+  return `\u001B[${code};2;${rgb.r};${rgb.g};${rgb.b}m${String(text)}\u001B[0m`;
+}
+
+export function createPalette({ color = true } = {}) {
+  const enabled = color && !Object.hasOwn(process.env, "NO_COLOR");
+  if (!enabled) {
+    return Object.freeze({
+      fg: (_hex, text) => String(text),
+      bg: (_hex, text) => String(text),
+      bold: (text) => String(text),
+      dim: (text) => String(text),
+    });
+  }
+  return Object.freeze({
+    fg: (hex, text) => colorSequence(38, hex, text),
+    bg: (hex, text) => colorSequence(48, hex, text),
+    bold: (text) => `\u001B[1m${String(text)}\u001B[0m`,
+    dim: (text) => `\u001B[2m${String(text)}\u001B[0m`,
+  });
+}
+
+const defaultPalette = createPalette();
+
+export function fg(hex, text) {
+  return defaultPalette.fg(hex, text);
+}
+
+export function bg(hex, text) {
+  return defaultPalette.bg(hex, text);
+}
+
+export function bold(text) {
+  return defaultPalette.bold(text);
+}
+
+export function dim(text) {
+  return defaultPalette.dim(text);
+}
+
+export function stripAnsi(text) {
+  return String(text).replace(/\u001B\[[0-9;]*m/g, "");
+}

package/src/vault-attestation.mjs

@@ -0,0 +1,146 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { Interface, isAddress } from "ethers";
+import { routeCalldataHash } from "./route-attestation.mjs";
+import { resolveAttestationSecret } from "./attestation-secret.mjs";
+import { assertFreshWindow } from "./fresh-window.mjs";
+
+const DEFAULT_VAULT_ATTESTATION_TTL_MS = 20_000;
+const ERC20 = new Interface(["function approve(address spender,uint256 amount) returns (bool)"]);
+
+function canonicalJson(value) {
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  if (value && typeof value === "object") {
+    return `{${Object.keys(value).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson(value[k])}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+
+function normalAddress(value, label) {
+  const text = String(value || "").trim();
+  if (!isAddress(text)) throw new Error(`${label} must be an address`);
+  return text.toLowerCase();
+}
+
+function amountString(value, label = "vault amount") {
+  try {
+    const n = BigInt(String(value));
+    if (n <= 0n) throw new Error("nonpositive");
+    return n.toString();
+  } catch {
+    throw new Error(`${label} must be a positive integer string`);
+  }
+}
+
+function decodeApproveCalldata(data) {
+  const hex = String(data || "").toLowerCase();
+  if (!hex.startsWith("0x095ea7b3")) throw new Error("approval calldata required");
+  const [spender, amount] = ERC20.decodeFunctionData("approve", hex);
+  return { spender: normalAddress(spender, "approval spender"), amount: amountString(amount, "approval amount") };
+}
+
+function hmac(secret, payload) {
+  return `0x${createHmac("sha256", String(secret)).update(payload).digest("hex")}`;
+}
+
+function sameSignature(a, b) {
+  const left = Buffer.from(String(a || "").replace(/^0x/, ""), "hex");
+  const right = Buffer.from(String(b || "").replace(/^0x/, ""), "hex");
+  return left.length === right.length && left.length > 0 && timingSafeEqual(left, right);
+}
+
+function attestationSecret(secret) {
+  return resolveAttestationSecret(
+    secret,
+    "ORACLE_ROUTE_ATTESTATION_SECRET",
+    "MAD_ROUTE_ATTESTATION_SECRET",
+  );
+}
+
+function unsigned(attestation) {
+  const { signature: _signature, ...payload } = attestation;
+  return payload;
+}
+
+export function createVaultAttestation({
+  provider = "morpho",
+  chainId,
+  action,
+  vault,
+  asset,
+  owner,
+  receiver,
+  amount,
+  data,
+  calldataHash,
+  minSharesOut,
+  maxSharesIn,
+  totalAssetsUsd,
+  nowMs = Date.now(),
+  ttlMs = DEFAULT_VAULT_ATTESTATION_TTL_MS,
+  secret,
+} = {}) {
+  const normalizedAction = String(action || "").trim().toLowerCase();
+  if (!["deposit", "withdraw"].includes(normalizedAction)) throw new Error("vault attestation action must be deposit or withdraw");
+  const attestation = {
+    mode: "vault-attestation",
+    version: 1,
+    provider: String(provider || "").trim() || "morpho",
+    chainId: Number(chainId),
+    action: normalizedAction,
+    vault: normalAddress(vault, "vault"),
+    asset: normalAddress(asset, "vault asset"),
+    owner: normalAddress(owner, "vault owner"),
+    receiver: normalAddress(receiver || owner, "vault receiver"),
+    amount: amountString(amount),
+    calldataHash: data ? routeCalldataHash(data) : calldataHash,
+    value: "0",
+    issuedAtMs: Number(nowMs),
+    expiresAtMs: Number(nowMs) + Number(ttlMs),
+  };
+  if (!Number.isFinite(attestation.chainId)) throw new Error("vault attestation chainId required");
+  if (minSharesOut != null) attestation.minSharesOut = amountString(minSharesOut, "minSharesOut");
+  if (maxSharesIn != null) attestation.maxSharesIn = amountString(maxSharesIn, "maxSharesIn");
+  if (totalAssetsUsd != null) attestation.totalAssetsUsd = Number(totalAssetsUsd);
+  const payload = canonicalJson(attestation);
+  return { ...attestation, signature: hmac(attestationSecret(secret), payload) };
+}
+
+export function assertVaultAttestation(attestation, tx = {}, { chainId, nowMs = Date.now(), secret } = {}) {
+  // Time is a security parameter: an unusable clock must fail CLOSED,
+  // otherwise NaN/null/-Infinity silently makes this attestation eternal.
+  assertFreshWindow(attestation || {}, nowMs, "vault attestation");
+  if (!attestation || attestation.mode !== "vault-attestation") throw new Error("vault attestation required");
+  if (Number(attestation.expiresAtMs) <= Number(nowMs)) throw new Error("vault attestation expired");
+  const txChainId = Number(chainId ?? tx.chainId);
+  if (Number(attestation.chainId) !== txChainId) throw new Error("vault attestation chain mismatch");
+  const to = normalAddress(tx.to, "vault tx.to");
+  if (normalAddress(attestation.vault, "vault") !== to) throw new Error("vault attestation destination mismatch");
+  if (tx.from && normalAddress(attestation.owner, "vault owner") !== normalAddress(tx.from, "vault tx.from")) {
+    throw new Error("vault attestation owner mismatch");
+  }
+  const value = tx.value == null ? "0" : String(BigInt(String(tx.value).startsWith("0x") ? String(tx.value) : String(tx.value)));
+  if (value !== "0") throw new Error("vault attestation value mismatch");
+  if (attestation.calldataHash !== routeCalldataHash(tx.data || "0x")) throw new Error("vault attestation calldata mismatch");
+  const expected = hmac(attestationSecret(secret), canonicalJson(unsigned(attestation)));
+  if (!sameSignature(attestation.signature, expected)) throw new Error("vault attestation signature mismatch");
+  return true;
+}
+
+export function assertVaultApprovalAttestation(attestation, tx = {}, guard = {}, { chainId, nowMs = Date.now(), secret } = {}) {
+  if (!attestation || attestation.mode !== "vault-attestation") throw new Error("vault attestation required");
+  if (String(attestation.action) !== "deposit") throw new Error("vault approval requires deposit attestation");
+  assertFreshWindow(attestation, nowMs, "vault approval attestation");
+  if (Number(attestation.expiresAtMs) <= Number(nowMs)) throw new Error("vault attestation expired");
+  const expected = hmac(attestationSecret(secret), canonicalJson(unsigned(attestation)));
+  if (!sameSignature(attestation.signature, expected)) throw new Error("vault attestation signature mismatch");
+  const txChainId = Number(tx.chainId ?? chainId);
+  if (Number(attestation.chainId) !== txChainId) throw new Error("vault attestation chain mismatch");
+  const decoded = decodeApproveCalldata(tx.data);
+  if (normalAddress(attestation.asset, "vault asset") !== normalAddress(tx.to, "approval token")) throw new Error("vault attestation asset mismatch");
+  if (normalAddress(attestation.vault, "vault") !== decoded.spender) throw new Error("vault attestation spender mismatch");
+  if (String(attestation.amount) !== decoded.amount || String(guard.amount) !== decoded.amount) {
+    throw new Error("vault attestation amount mismatch");
+  }
+  if (guard.provider && String(guard.provider) !== String(attestation.provider)) throw new Error("vault attestation provider mismatch");
+  return true;
+}

package/src/venues.mjs

@@ -0,0 +1,206 @@
+// Per-chain venue registry — the curated, code-reviewed set of contracts the
+// agent wallet is allowed to transact with on each chain. This is how the dest
+// allowlist "just works when you go to a new chain" WITHOUT the footgun of
+// auto-trusting whatever address a tx points at: venues come from THIS vetted
+// map, never from the transaction itself.
+//
+// The policy layer (exec-policy.mjs) unions three sources for the effective
+// destination allowlist on a given chain:
+//   1. MAD_DEST_ALLOWLIST         (env; global, applies to every chain)
+//   2. VENUES[chainId]            (this file; per-chain known-good contracts)
+//   3. CROSS_CHAIN_VENUES         (this file; same address on all chains, e.g. Permit2)
+//
+// To enable trading on a new chain: add its router/quoter/venue addresses here
+// in ONE reviewed edit. After that, trades on that chain pass the allowlist with
+// no per-trade friction. Every address is lowercased; verify each before adding.
+
+// Uniswap Permit2 — CREATE2-deployed to the SAME address on every EVM chain.
+// Verified canonical. Safe as a cross-chain constant.
+export const CROSS_CHAIN_VENUES = [
+  "0x000000000022d473030f116ddee9f6b43ac78ba3", // Permit2
+];
+
+// Per-chain vetted venues. Only entries verified against a trusted source.
+// Empty arrays are intentional: that chain has no approved venues yet, so a
+// value/contract tx there is REFUSED until you add its real venues here.
+export const VENUES = {
+  // Robinhood Chain — verified from rhbot server/swap.js SWAP_CONFIG (2026-07-22).
+  4663: [
+    "0xcaf681a66d020601342297493863e78c959e5cb2", // router
+    "0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7", // quoter
+    "0x1f7d7550b1b028f7571e69a784071f0205fd2efa", // factory
+    "0x0bd7d308f8e1639fab988df18a8011f41eacad73", // weth
+    "0x5fc5360d0400a0fd4f2af552add042d716f1d168", // usdg
+    "0xb477751b76cf82d00a686a1232f5fcd772414af3", // LI.FI diamond on RH (verified via li.quest /chains diamondAddress, 2026-07-23)
+    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+  ],
+
+  // Base (8453) — Uniswap v3. Verified 2026-07-22 against official Uniswap
+  // deployments docs (developers.uniswap.org) + on-chain eth_getCode.
+  8453: [
+    "0x2626664c2603336e57b271c5c0b26f421741e481", // SwapRouter02
+    "0x6ff5693b99212da76ad316178a184ab56d299b43", // UniversalRouter
+    "0x3d4e44eb1374240ce5f1b871ab261cd16335b76a", // QuoterV2
+    "0x33128a8fc17869897dce68ed026d694621f6fdfd", // UniswapV3Factory
+    "0x4200000000000000000000000000000000000006", // WETH
+    "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913", // USDC
+    "0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5", // Aerodrome Slipstream SwapRouter (slipstream README + eth_getCode + live quote, 2026-07-24)
+    "0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0", // Aerodrome Slipstream QuoterV2 (slipstream README + eth_getCode + live quote, 2026-07-24)
+    "0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a", // Aerodrome Slipstream PoolFactory (slipstream README + eth_getCode, 2026-07-24)
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI canonical diamond (verified via li.quest /chains diamondAddress, 2026-07-23)
+    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router (official deployments + eth_getCode, 2026-07-23)
+    "0x3f170631ed9821ca51a59d996ab095162438dc10", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
+    "0x4f37a9d177470499a2dd084621020b023fcffc1f", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+    "0xc92e8bdf79f0507f65a392b0ab4667716bfe0110", // CoW VaultRelayer (CoW contracts networks.json v1.8.0, 2026-07-24)
+  ],
+
+  // Arbitrum One (42161) — Uniswap v3. Verified 2026-07-22 against arbiscan
+  // (Uniswap V3: Router 2 label) + swap-router-contracts release + on-chain code.
+  42161: [
+    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // SwapRouter02
+    "0x61ffe014ba17989e743c5f6cb21bf9697530b21e", // QuoterV2
+    "0x82af49447d8a07e3bd95bd0d56f35241523fbab1", // WETH
+    "0xaf88d065e77c8cc2239327c5edb3a432268e5831", // USDC (native)
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI canonical diamond (verified via li.quest, 2026-07-23) — Leg2 Arb->Stable bridge
+    "0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9", // USDT0 on Arbitrum (ERC20 approve target for Leg2 bridge)
+    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router (official deployments + eth_getCode, 2026-07-23)
+    "0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
+    "0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+    "0xc92e8bdf79f0507f65a392b0ab4667716bfe0110", // CoW VaultRelayer (CoW contracts networks.json v1.8.0, 2026-07-24)
+    "0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41", // GMX v2 ExchangeRouter (gmx-synthetics deployments/arbitrum, 2026-07-24)
+    "0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6", // GMX v2 Router approval spender (gmx-synthetics deployments/arbitrum, 2026-07-24)
+  ],
+
+  // Add verified venues per chain before trading there. Left empty on purpose:
+  // an empty chain refuses non-allowlisted destinations (fail-closed by design).
+  1: [
+    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // Uniswap SwapRouter02
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI canonical diamond (verified via li.quest, 2026-07-23) — ETH->Arb gas bridge
+    "0x4cd00e387622c35bddb9b4c962c136462338bc31", // Relay Depository (api.relay.link quote target + Etherscan label, 2026-07-23)
+    "0x6a000f20005980200259b80c5102003040001068", // ParaSwap/Velora Augustus V6.2 (Velora docs + priceRoute target, 2026-07-23)
+    "0xae563e3f8219521950555f5962419c8919758ea2", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
+    "0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+    "0xc92e8bdf79f0507f65a392b0ab4667716bfe0110", // CoW VaultRelayer (CoW contracts networks.json v1.8.0, 2026-07-24)
+  ],      // Ethereum
+  137: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
+    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+  ],    // Polygon
+  10: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
+    "0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
+    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+  ],     // Optimism
+  56: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
+    "0xa72c85c258a81761433b4e8da60505fe3dd551cc", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+  ],     // BSC
+  43114: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
+    "0xf39ca6ede9bf7820a952b52f3c94af526bab9015", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
+    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+    "0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2", // GMX v2 ExchangeRouter (gmx-synthetics deployments/avalanche, 2026-07-24)
+    "0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68", // GMX v2 Router approval spender (gmx-synthetics deployments/avalanche, 2026-07-24)
+  ],  // Avalanche
+  999: [
+    "0x0a0758d937d1059c356d4714e57f5df0239bce1a", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
+    "0xd2002373543ce3527023c75e7518c274a51ce712", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+  ],    // HyperEVM
+  2741: [
+    "0x4f8c9056bb8a3616693a76922fa35d53c056e5b3", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
+  ],   // Abstract
+  988: [
+    "0x026f252016a7c47cdef1f05a3fc9e20c92a49c37", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
+    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
+    "0x817997ca8394e26cce3de3a076a4889b27dbf9de", // WgUSDT (wrapped native USDT0, WETH-style deposit/transfer)
+    "0x3dea4be5615974f31624404ef288ba3b36dfeb83", // FEFER/WgUSDT UniV2 pair (raw swap target, verified on-chain)
+    "0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83", // FEFER token (approve/transfer for sell-back)
+    "0x779ded0c9e1022225f8e0630b35a9b54be713736", // USDT0 canonical (native mirror)
+    "0xbc6f7725f08232c151b528bdfcaaf89993ca86ee", // Atomic FEFER raw-pair buyer; deployed by executor, owner verified on-chain (2026-07-23)
+  ],    // Stable
+};
+
+// Destinations that can move value according to a market quote. Calldata sent
+// to these contracts must carry a fresh bounded auto-slippage guard through the
+// signer boundary. Tokens, wrappers, quoters, factories, and Permit2 are
+// intentionally excluded because approvals/deposits are not swaps.
+export const SWAP_VENUES = {
+  1: [
+    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // SwapRouter02
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
+    "0x4cd00e387622c35bddb9b4c962c136462338bc31", // Relay Depository
+    "0x6a000f20005980200259b80c5102003040001068", // ParaSwap/Velora Augustus V6.2
+    "0xae563e3f8219521950555f5962419c8919758ea2", // Balancer v3 Router
+    "0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e", // Curve RouterNG
+  ],
+  10: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
+    "0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b", // Balancer v3 Router
+    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG
+  ],
+  56: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
+    "0xa72c85c258a81761433b4e8da60505fe3dd551cc", // Curve RouterNG
+  ],
+  137: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
+    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG
+  ],
+  988: [
+    "0x026f252016a7c47cdef1f05a3fc9e20c92a49c37", // LI.FI diamond
+    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG
+    "0x3dea4be5615974f31624404ef288ba3b36dfeb83", // verified raw V2 pair
+    "0xbc6f7725f08232c151b528bdfcaaf89993ca86ee", // atomic raw-pair helper
+  ],
+  999: [
+    "0x0a0758d937d1059c356d4714e57f5df0239bce1a", // LI.FI diamond
+    "0xd2002373543ce3527023c75e7518c274a51ce712", // Curve RouterNG
+  ],
+  2741: [
+    "0x4f8c9056bb8a3616693a76922fa35d53c056e5b3", // LI.FI diamond
+  ],
+  4663: [
+    "0xcaf681a66d020601342297493863e78c959e5cb2", // SwapRouter02
+    "0xb477751b76cf82d00a686a1232f5fcd772414af3", // LI.FI diamond
+    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG
+  ],
+  8453: [
+    "0x2626664c2603336e57b271c5c0b26f421741e481", // SwapRouter02
+    "0x6ff5693b99212da76ad316178a184ab56d299b43", // UniversalRouter
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
+    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router
+    "0x3f170631ed9821ca51a59d996ab095162438dc10", // Balancer v3 Router
+    "0x4f37a9d177470499a2dd084621020b023fcffc1f", // Curve RouterNG
+  ],
+  42161: [
+    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // SwapRouter02
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
+    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router
+    "0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e", // Balancer v3 Router
+    "0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d", // Curve RouterNG
+  ],
+  43114: [
+    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
+    "0xf39ca6ede9bf7820a952b52f3c94af526bab9015", // Balancer v3 Router
+    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG
+  ],
+};
+
+export function isSwapVenue(chainId, address) {
+  const target = String(address || "").trim().toLowerCase();
+  if (!target) return false;
+  return (SWAP_VENUES[Number(chainId)] || []).includes(target);
+}
+
+/**
+ * Known-good destinations for a chain: the union of that chain's vetted venues
+ * and the cross-chain constants. Returns a Set of lowercased addresses.
+ * @param {number} chainId
+ * @returns {Set<string>}
+ */
+export function venuesFor(chainId) {
+  const perChain = VENUES[Number(chainId)] || [];
+  return new Set(
+    [...perChain, ...CROSS_CHAIN_VENUES].map((a) => String(a).trim().toLowerCase()).filter(Boolean)
+  );
+}

package/src/watch-preferences.mjs

@@ -0,0 +1,85 @@
+/** Notification classes supported by Oracle watches. */
+export const WATCH_CATEGORIES = Object.freeze([
+  'price',
+  'wallet',
+  'risk',
+  'execution',
+  'security',
+  'nft',
+  'governance',
+  'system',
+]);
+
+const CATEGORY_SET = new Set(WATCH_CATEGORIES);
+
+function assertCategory(category) {
+  if (!CATEGORY_SET.has(category)) {
+    throw new TypeError(`Unknown watch category: ${String(category)}`);
+  }
+  return category;
+}
+
+function subscribedCategories(preferences = {}) {
+  const categories = preferences.subscribedCategories ?? [];
+  if (!Array.isArray(categories)) {
+    throw new TypeError('subscribedCategories must be an array');
+  }
+  return categories;
+}
+
+/** New users receive no category notifications until they explicitly opt in. */
+export function defaultPreferences() {
+  return { subscribedCategories: [] };
+}
+
+/** Return a new preference value with exactly one notification class enabled. */
+export function subscribe(preferences, category) {
+  assertCategory(category);
+  const current = subscribedCategories(preferences);
+  if (current.includes(category)) return { ...preferences, subscribedCategories: [...current] };
+  return { ...preferences, subscribedCategories: [...current, category] };
+}
+
+/** Return a new preference value with the requested notification class disabled. */
+export function unsubscribe(preferences, category) {
+  assertCategory(category);
+  const current = subscribedCategories(preferences);
+  return {
+    ...preferences,
+    subscribedCategories: current.filter((candidate) => candidate !== category),
+  };
+}
+
+/** Create a direct watch. Notifications are opt-in independently for every watch. */
+export function createWatch({ category, notify = false, ...watch } = {}) {
+  assertCategory(category);
+  if (typeof notify !== 'boolean') throw new TypeError('watch notify must be a boolean');
+  return { ...watch, category, notify };
+}
+
+function isMatchingNotifyingWatch(alert, watch) {
+  if (!watch || watch.notify !== true || watch.category !== alert.category) return false;
+  if (alert.watchId !== undefined && watch.id !== alert.watchId) return false;
+  return true;
+}
+
+/**
+ * Decide whether an alert may be delivered. This function only describes policy;
+ * it performs no scheduling or delivery.
+ */
+export function evaluateAlert(alert, preferences = defaultPreferences(), watch) {
+  if (!alert || typeof alert !== 'object') throw new TypeError('alert must be an object');
+  assertCategory(alert.category);
+
+  if (subscribedCategories(preferences).includes(alert.category)) {
+    return { deliver: true, reason: 'category-subscribed' };
+  }
+  if (isMatchingNotifyingWatch(alert, watch)) {
+    return { deliver: true, reason: 'watch-opt-in' };
+  }
+  return { deliver: false, reason: 'not-subscribed' };
+}
+
+export function shouldDeliverAlert(alert, preferences, watch) {
+  return evaluateAlert(alert, preferences, watch).deliver;
+}

package/dist/action-receipts.mjs

@@ -1 +0,0 @@
-import{createHash as m}from"node:crypto";import{wordlists as g}from"ethers";var A=1,E=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),x=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],$=new Set([12,15,18,21,24]);function S(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return $.has(t.length)&&t.every(r=>g.en.getWordIndex(r)>=0)}var H=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,O=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,j=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function T(e){let t=b(e);return j.has(t)||O.test(t)}var f=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function b(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function C(e){let t=b(e);return[...E].some(r=>t.includes(r))}function _(e,t,r){if(typeof t=="string"){if(x.some(o=>o.test(t))||S(t))throw new f(r);if(H.test(t)&&!T(e))throw new f(r)}}function a(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return _(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((n,i)=>a(n,`${t}[${i}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let n of Object.keys(e).sort()){let i=`${t}.${n}`;if(C(n))throw new f(i);e[n]!==void 0&&(o[n]=a(e[n],i,n))}return o}function L(e){return a(e)}function d(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(d).join(",")}]`:`{${Object.keys(e).map(t=>`${JSON.stringify(t)}:${d(e[t])}`).join(",")}}`}function R(e){return d(a(e))}function k(e){if(!e||typeof e!="object"||Array.isArray(e))throw new TypeError("action receipt: object required");let{receiptId:t,summary:r,...o}=e;return m("sha256").update(R(o)).digest("hex")}function c(e,...t){for(let r of t)if(e[r]!==void 0)return e[r]}function s(e,t,r){let o=c(e,...t);if(o==null)throw new TypeError(`action receipt: ${r} required`);return o}function I(e){let t=c(e,"balances","balanceChanges"),r=c(e,"beforeBalances","balancesBefore","before"),o=c(e,"afterBalances","balancesAfter","after");return t!==void 0?{balances:t}:r===void 0&&o===void 0?{}:{balances:{...r===void 0?{}:{before:r},...o===void 0?{}:{after:o}}}}function N(e={}){if(!e||typeof e!="object"||Array.isArray(e))throw new TypeError("action receipt: input object required");a(e);let t=c(e,"txHash","transactionHash"),r=c(e,"phase","stage","resultType")??(t==null?"prepare":"execute");if(r!=="prepare"&&r!=="execute")throw new TypeError('action receipt: phase must be "prepare" or "execute"');let o={receiptVersion:A,phase:r,intent:s(e,["intent"],"intent"),route:s(e,["route"],"route"),decodedAction:s(e,["decodedAction","action"],"decodedAction"),policyChecks:s(e,["policyChecks","checks"],"policyChecks"),allowlistHits:s(e,["allowlistHits","allowlistMatches"],"allowlistHits"),prepareHash:s(e,["prepareHash"],"prepareHash"),...t==null?{}:{txHash:t},...I(e)},n=a(o);return Object.freeze({...n,receiptId:k(n)})}var q=N;function u(e,t=[]){if(typeof e=="string"||typeof e=="number")return String(e);for(let r of t)if(e?.[r]!=null)return String(e[r]);return"recorded"}function y(e){if(typeof e=="boolean")return e;if(e&&typeof e=="object"){if(typeof e.ok=="boolean")return e.ok;if(typeof e.allowed=="boolean")return e.allowed;if(typeof e.passed=="boolean")return e.passed}return null}function z(e){if(!e||typeof e!="object")throw new TypeError("action receipt: object required");let t=u(e.decodedAction,["type","action","method","name"]),r=u(e.route,["name","provider","venue","id"]),o=Array.isArray(e.policyChecks)?e.policyChecks:Object.values(e.policyChecks||{}),n=o.filter(l=>y(l)===!0).length,i=o.filter(l=>y(l)===!1).length,p=Array.isArray(e.allowlistHits)?e.allowlistHits.length:Object.keys(e.allowlistHits||{}).length,h=e.txHash==null?"no transaction hash":`tx ${e.txHash}`,w=e.balances==null?"balances not provided":"before/after balances recorded";return`${e.phase} ${t} via ${r}; policy ${n} passed, ${i} failed; ${p} allowlist hit${p===1?"":"s"}; ${h}; ${w}; receipt ${e.receiptId}`}var F=z;export{A as ACTION_RECEIPT_VERSION,f as ActionReceiptSecretError,L as assertNoReceiptSecrets,R as canonicalReceiptJson,k as computeReceiptId,q as createActionReceipt,F as formatActionReceipt,N as normalizeActionReceipt,z as summarizeActionReceipt};

package/dist/action-semantics.mjs

@@ -1 +0,0 @@
-var o=Object.freeze({ALERT_ONLY:"alert_only",EXECUTE:"execute"}),i=new Set(["watch","watch this","ping","ping me","alert","notify"]),r=new Set(["watching","armed"]);function a(t){if(typeof t!="string"||!t.trim())throw new TypeError("explicit action verb required");let e=t.trim().toLowerCase().replace(/\s+/g," ");if(i.has(e))return o.ALERT_ONLY;if(e==="arm")return o.EXECUTE;throw new TypeError(`unsupported action verb: ${e}`)}function c(t={}){let{verb:e,...n}=t;return{...n,active:!0,actionMode:a(e)}}function u(t){if(!t||typeof t!="object"||typeof t.active!="boolean")throw new TypeError("active must be boolean");if(!Object.values(o).includes(t.actionMode))throw new TypeError("actionMode must be alert_only or execute");return t}function E(t){return t?.active===!0&&t?.actionMode===o.ALERT_ONLY}function s(t){return t?.active===!0&&t?.actionMode===o.EXECUTE}function p(t={}){if(t.actionMode!==void 0&&t.actionMode!==o.ALERT_ONLY)throw new TypeError("non-alert record cannot enter alert-only watch migration");let e=typeof t.active=="boolean"?t.active:r.has(String(t.status||"").toLowerCase());return{...t,active:e,actionMode:o.ALERT_ONLY}}export{o as ACTION_MODES,a as actionModeForVerb,u as assertActionRecord,c as createActionRecord,E as isActiveAlert,s as isActiveExecution,p as migrateLegacyWatchRecord};

package/dist/address-book.mjs

@@ -1,2 +0,0 @@
-import c from"node:fs";import l from"node:path";import{homedir as m}from"node:os";import{join as p}from"node:path";var k=process.env.ORACLE_PUBLIC_DESKTOP==="1",S=k?process.env.ORACLE_CONFIG_DIR||p(m(),".config","oracle"):p(m(),".config","oracle"),z=k?S:p(m(),".config","mad-desk");function A(e,r,t=""){let o=process.env[e];if(o!=null&&String(o).trim()!=="")return o;let s=r?process.env[r]:void 0;return s!=null&&String(s).trim()!==""?s:t}var E=/^0x[0-9a-fA-F]{40}$/,x=new Set(["privatekey","private_key","secret","seed","mnemonic","passphrase","signature","keystore"]),D=["privatekey","privkey","secretkey","secret","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","signature","wif","xprv","xpriv","apikey","bearer","credential"],I=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/,/\b(?:[a-z]{3,8}\s+){11,}[a-z]{3,8}\b/i],L=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/;function y(e){return String(e).toLowerCase().replace(/[^a-z0-9]/g,"")}function R(e,r){let t=y(e);if(x.has(String(e).toLowerCase())||D.some(o=>t.includes(o)))throw new Error(`address-book: ${r} is forbidden; the book stores labels, never key material`)}function N(e,r){if(typeof e=="string"&&(I.some(t=>t.test(e))||L.test(e)))throw new Error(`address-book: ${r} looks like key material; the book stores labels, never key material`)}function C(){let e=A("ORACLE_ADDRESS_BOOK","MAD_ADDRESS_BOOK","");if(e)return l.resolve(e);let r=A("ORACLE_CONFIG_DIR","MAD_CONFIG_DIR",S);return l.join(r,"address-book.json")}function b(e,r="field"){if(Array.isArray(e)){e.forEach((t,o)=>b(t,`${r}[${o}]`));return}if(!e||typeof e!="object"){N(e,r);return}for(let[t,o]of Object.entries(e))R(t,t),b(o,t)}function h(e){let r=String(e||"").trim();if(!E.test(r))throw new Error("address-book: address must be 0x + 40 hex characters");return r.toLowerCase()}function a(e,r){return e==null||e===""?null:String(e).slice(0,r)}function g(){return{version:1,updatedAt:null,entries:[]}}function _(e){return{address:String(e.address).toLowerCase(),label:a(e.label,80)||"unknown",who:a(e.who,120),role:a(e.role,40),chainIds:Array.isArray(e.chainIds)?e.chainIds.map(Number).filter(Number.isFinite):[],notes:a(e.notes,500),source:a(e.source,80),firstSeenAt:e.firstSeenAt||null,lastSeenAt:e.lastSeenAt||null}}function d(){try{let e=JSON.parse(c.readFileSync(C(),"utf8"));if(!e||typeof e!="object")return g();let r=Array.isArray(e.entries)?e.entries:[];return{version:1,updatedAt:e.updatedAt||null,entries:r.filter(t=>t&&typeof t=="object"&&E.test(String(t.address||""))).map(_)}}catch{return g()}}function O(e){let r=C();c.mkdirSync(l.dirname(r),{recursive:!0,mode:448});let t={...e,version:1,updatedAt:new Date().toISOString()},o=l.join(l.dirname(r),`.address-book.${process.pid}.tmp`);c.writeFileSync(o,`${JSON.stringify(t,null,2)}
-`,{mode:384}),c.renameSync(o,r);try{c.chmodSync(r,384)}catch{}return t}function G(e={}){let r=d(),t=r.entries;if(e.role&&(t=t.filter(o=>o.role===String(e.role))),e.who){let o=String(e.who).toLowerCase();t=t.filter(s=>(s.who||"").toLowerCase().includes(o)||(s.label||"").toLowerCase().includes(o))}if(e.q){let o=String(e.q).toLowerCase();t=t.filter(s=>s.address.includes(o)||(s.label||"").toLowerCase().includes(o)||(s.who||"").toLowerCase().includes(o)||(s.notes||"").toLowerCase().includes(o))}return{updatedAt:r.updatedAt,count:t.length,entries:t}}function q(e){let r=h(e),t=d().entries.filter(o=>o.address===r);return{address:r,found:t.length>0,entries:t}}function T(e={}){b(e);let r=h(e.address),t=a(e.label??e.role,80)||"wallet",o=new Date().toISOString(),s=d(),i=s.entries.findIndex(n=>n.address===r&&n.label===t),u=_({address:r,label:t,who:e.who,role:e.role,chainIds:e.chainIds,notes:e.notes,source:e.source||"agent",firstSeenAt:i>=0&&s.entries[i].firstSeenAt||o,lastSeenAt:o});i>=0?s.entries[i]=u:s.entries.push(u);let w=n=>n==="agent"?0:n==="owner"?1:2;s.entries.sort((n,f)=>w(n.role)-w(f.role)||n.label.localeCompare(f.label)||n.address.localeCompare(f.address));let v=O(s);return{ok:!0,entry:u,count:v.entries.length}}function Y(e,r=null){let t=h(e),o=d(),s=o.entries.length;return o.entries=o.entries.filter(i=>i.address!==t?!0:r==null?!1:i.label!==String(r)),O(o),{ok:!0,removed:s-o.entries.length,count:o.entries.length}}export{C as addressBookPath,Y as forgetAddress,G as listAddresses,q as lookupAddress,d as readAddressBook,T as rememberAddress};