@oracle-agent/oracle 0.14.1 → 0.16.0

package/src/tui/theme.mjs

@@ -1,81 +0,0 @@
-export const THEME = Object.freeze({
-  accent: "#B8F0FF",
-  prompt: "#B8F0FF",
-  banner_title: "#B8F0FF",
-  banner_accent: "#91C2D7",
-  ui_label: "#A5D9EB",
-  banner_text: "#EAF2F8",
-  status_bar_strong: "#EAF2F8",
-  banner_border: "#455867",
-  input_rule: "#455867",
-  session_border: "#455867",
-  banner_dim: "#60717F",
-  status_bar_dim: "#60717F",
-  status_bar_bg: "#11161B",
-  status_bar_text: "#91A2B1",
-  ok: "#7EE7B5",
-  error: "#FF7B7B",
-  warn: "#F0C674",
-  bad: "#FF9B71",
-  selection_bg: "#23313B",
-});
-
-export function hexToRgb(hex) {
-  if (typeof hex !== "string") return null;
-  const value = hex.startsWith("#") ? hex.slice(1) : hex;
-  if (!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(value)) return null;
-  const expanded = value.length === 3
-    ? [...value].map((character) => character.repeat(2)).join("")
-    : value;
-  return {
-    r: Number.parseInt(expanded.slice(0, 2), 16),
-    g: Number.parseInt(expanded.slice(2, 4), 16),
-    b: Number.parseInt(expanded.slice(4, 6), 16),
-  };
-}
-
-function colorSequence(code, hex, text) {
-  const rgb = hexToRgb(hex);
-  if (!rgb) return String(text);
-  return `\u001B[${code};2;${rgb.r};${rgb.g};${rgb.b}m${String(text)}\u001B[0m`;
-}
-
-export function createPalette({ color = true } = {}) {
-  const enabled = color && !Object.hasOwn(process.env, "NO_COLOR");
-  if (!enabled) {
-    return Object.freeze({
-      fg: (_hex, text) => String(text),
-      bg: (_hex, text) => String(text),
-      bold: (text) => String(text),
-      dim: (text) => String(text),
-    });
-  }
-  return Object.freeze({
-    fg: (hex, text) => colorSequence(38, hex, text),
-    bg: (hex, text) => colorSequence(48, hex, text),
-    bold: (text) => `\u001B[1m${String(text)}\u001B[0m`,
-    dim: (text) => `\u001B[2m${String(text)}\u001B[0m`,
-  });
-}
-
-const defaultPalette = createPalette();
-
-export function fg(hex, text) {
-  return defaultPalette.fg(hex, text);
-}
-
-export function bg(hex, text) {
-  return defaultPalette.bg(hex, text);
-}
-
-export function bold(text) {
-  return defaultPalette.bold(text);
-}
-
-export function dim(text) {
-  return defaultPalette.dim(text);
-}
-
-export function stripAnsi(text) {
-  return String(text).replace(/\u001B\[[0-9;]*m/g, "");
-}

package/src/vault-attestation.mjs

@@ -1,146 +0,0 @@
-import { createHmac, timingSafeEqual } from "node:crypto";
-import { Interface, isAddress } from "ethers";
-import { routeCalldataHash } from "./route-attestation.mjs";
-import { resolveAttestationSecret } from "./attestation-secret.mjs";
-import { assertFreshWindow } from "./fresh-window.mjs";
-
-const DEFAULT_VAULT_ATTESTATION_TTL_MS = 20_000;
-const ERC20 = new Interface(["function approve(address spender,uint256 amount) returns (bool)"]);
-
-function canonicalJson(value) {
-  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
-  if (value && typeof value === "object") {
-    return `{${Object.keys(value).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson(value[k])}`).join(",")}}`;
-  }
-  return JSON.stringify(value);
-}
-
-function normalAddress(value, label) {
-  const text = String(value || "").trim();
-  if (!isAddress(text)) throw new Error(`${label} must be an address`);
-  return text.toLowerCase();
-}
-
-function amountString(value, label = "vault amount") {
-  try {
-    const n = BigInt(String(value));
-    if (n <= 0n) throw new Error("nonpositive");
-    return n.toString();
-  } catch {
-    throw new Error(`${label} must be a positive integer string`);
-  }
-}
-
-function decodeApproveCalldata(data) {
-  const hex = String(data || "").toLowerCase();
-  if (!hex.startsWith("0x095ea7b3")) throw new Error("approval calldata required");
-  const [spender, amount] = ERC20.decodeFunctionData("approve", hex);
-  return { spender: normalAddress(spender, "approval spender"), amount: amountString(amount, "approval amount") };
-}
-
-function hmac(secret, payload) {
-  return `0x${createHmac("sha256", String(secret)).update(payload).digest("hex")}`;
-}
-
-function sameSignature(a, b) {
-  const left = Buffer.from(String(a || "").replace(/^0x/, ""), "hex");
-  const right = Buffer.from(String(b || "").replace(/^0x/, ""), "hex");
-  return left.length === right.length && left.length > 0 && timingSafeEqual(left, right);
-}
-
-function attestationSecret(secret) {
-  return resolveAttestationSecret(
-    secret,
-    "ORACLE_ROUTE_ATTESTATION_SECRET",
-    "MAD_ROUTE_ATTESTATION_SECRET",
-  );
-}
-
-function unsigned(attestation) {
-  const { signature: _signature, ...payload } = attestation;
-  return payload;
-}
-
-export function createVaultAttestation({
-  provider = "morpho",
-  chainId,
-  action,
-  vault,
-  asset,
-  owner,
-  receiver,
-  amount,
-  data,
-  calldataHash,
-  minSharesOut,
-  maxSharesIn,
-  totalAssetsUsd,
-  nowMs = Date.now(),
-  ttlMs = DEFAULT_VAULT_ATTESTATION_TTL_MS,
-  secret,
-} = {}) {
-  const normalizedAction = String(action || "").trim().toLowerCase();
-  if (!["deposit", "withdraw"].includes(normalizedAction)) throw new Error("vault attestation action must be deposit or withdraw");
-  const attestation = {
-    mode: "vault-attestation",
-    version: 1,
-    provider: String(provider || "").trim() || "morpho",
-    chainId: Number(chainId),
-    action: normalizedAction,
-    vault: normalAddress(vault, "vault"),
-    asset: normalAddress(asset, "vault asset"),
-    owner: normalAddress(owner, "vault owner"),
-    receiver: normalAddress(receiver || owner, "vault receiver"),
-    amount: amountString(amount),
-    calldataHash: data ? routeCalldataHash(data) : calldataHash,
-    value: "0",
-    issuedAtMs: Number(nowMs),
-    expiresAtMs: Number(nowMs) + Number(ttlMs),
-  };
-  if (!Number.isFinite(attestation.chainId)) throw new Error("vault attestation chainId required");
-  if (minSharesOut != null) attestation.minSharesOut = amountString(minSharesOut, "minSharesOut");
-  if (maxSharesIn != null) attestation.maxSharesIn = amountString(maxSharesIn, "maxSharesIn");
-  if (totalAssetsUsd != null) attestation.totalAssetsUsd = Number(totalAssetsUsd);
-  const payload = canonicalJson(attestation);
-  return { ...attestation, signature: hmac(attestationSecret(secret), payload) };
-}
-
-export function assertVaultAttestation(attestation, tx = {}, { chainId, nowMs = Date.now(), secret } = {}) {
-  // Time is a security parameter: an unusable clock must fail CLOSED,
-  // otherwise NaN/null/-Infinity silently makes this attestation eternal.
-  assertFreshWindow(attestation || {}, nowMs, "vault attestation");
-  if (!attestation || attestation.mode !== "vault-attestation") throw new Error("vault attestation required");
-  if (Number(attestation.expiresAtMs) <= Number(nowMs)) throw new Error("vault attestation expired");
-  const txChainId = Number(chainId ?? tx.chainId);
-  if (Number(attestation.chainId) !== txChainId) throw new Error("vault attestation chain mismatch");
-  const to = normalAddress(tx.to, "vault tx.to");
-  if (normalAddress(attestation.vault, "vault") !== to) throw new Error("vault attestation destination mismatch");
-  if (tx.from && normalAddress(attestation.owner, "vault owner") !== normalAddress(tx.from, "vault tx.from")) {
-    throw new Error("vault attestation owner mismatch");
-  }
-  const value = tx.value == null ? "0" : String(BigInt(String(tx.value).startsWith("0x") ? String(tx.value) : String(tx.value)));
-  if (value !== "0") throw new Error("vault attestation value mismatch");
-  if (attestation.calldataHash !== routeCalldataHash(tx.data || "0x")) throw new Error("vault attestation calldata mismatch");
-  const expected = hmac(attestationSecret(secret), canonicalJson(unsigned(attestation)));
-  if (!sameSignature(attestation.signature, expected)) throw new Error("vault attestation signature mismatch");
-  return true;
-}
-
-export function assertVaultApprovalAttestation(attestation, tx = {}, guard = {}, { chainId, nowMs = Date.now(), secret } = {}) {
-  if (!attestation || attestation.mode !== "vault-attestation") throw new Error("vault attestation required");
-  if (String(attestation.action) !== "deposit") throw new Error("vault approval requires deposit attestation");
-  assertFreshWindow(attestation, nowMs, "vault approval attestation");
-  if (Number(attestation.expiresAtMs) <= Number(nowMs)) throw new Error("vault attestation expired");
-  const expected = hmac(attestationSecret(secret), canonicalJson(unsigned(attestation)));
-  if (!sameSignature(attestation.signature, expected)) throw new Error("vault attestation signature mismatch");
-  const txChainId = Number(tx.chainId ?? chainId);
-  if (Number(attestation.chainId) !== txChainId) throw new Error("vault attestation chain mismatch");
-  const decoded = decodeApproveCalldata(tx.data);
-  if (normalAddress(attestation.asset, "vault asset") !== normalAddress(tx.to, "approval token")) throw new Error("vault attestation asset mismatch");
-  if (normalAddress(attestation.vault, "vault") !== decoded.spender) throw new Error("vault attestation spender mismatch");
-  if (String(attestation.amount) !== decoded.amount || String(guard.amount) !== decoded.amount) {
-    throw new Error("vault attestation amount mismatch");
-  }
-  if (guard.provider && String(guard.provider) !== String(attestation.provider)) throw new Error("vault attestation provider mismatch");
-  return true;
-}

package/src/venues.mjs

@@ -1,206 +0,0 @@
-// Per-chain venue registry — the curated, code-reviewed set of contracts the
-// agent wallet is allowed to transact with on each chain. This is how the dest
-// allowlist "just works when you go to a new chain" WITHOUT the footgun of
-// auto-trusting whatever address a tx points at: venues come from THIS vetted
-// map, never from the transaction itself.
-//
-// The policy layer (exec-policy.mjs) unions three sources for the effective
-// destination allowlist on a given chain:
-//   1. MAD_DEST_ALLOWLIST         (env; global, applies to every chain)
-//   2. VENUES[chainId]            (this file; per-chain known-good contracts)
-//   3. CROSS_CHAIN_VENUES         (this file; same address on all chains, e.g. Permit2)
-//
-// To enable trading on a new chain: add its router/quoter/venue addresses here
-// in ONE reviewed edit. After that, trades on that chain pass the allowlist with
-// no per-trade friction. Every address is lowercased; verify each before adding.
-
-// Uniswap Permit2 — CREATE2-deployed to the SAME address on every EVM chain.
-// Verified canonical. Safe as a cross-chain constant.
-export const CROSS_CHAIN_VENUES = [
-  "0x000000000022d473030f116ddee9f6b43ac78ba3", // Permit2
-];
-
-// Per-chain vetted venues. Only entries verified against a trusted source.
-// Empty arrays are intentional: that chain has no approved venues yet, so a
-// value/contract tx there is REFUSED until you add its real venues here.
-export const VENUES = {
-  // Robinhood Chain — verified from rhbot server/swap.js SWAP_CONFIG (2026-07-22).
-  4663: [
-    "0xcaf681a66d020601342297493863e78c959e5cb2", // router
-    "0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7", // quoter
-    "0x1f7d7550b1b028f7571e69a784071f0205fd2efa", // factory
-    "0x0bd7d308f8e1639fab988df18a8011f41eacad73", // weth
-    "0x5fc5360d0400a0fd4f2af552add042d716f1d168", // usdg
-    "0xb477751b76cf82d00a686a1232f5fcd772414af3", // LI.FI diamond on RH (verified via li.quest /chains diamondAddress, 2026-07-23)
-    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-  ],
-
-  // Base (8453) — Uniswap v3. Verified 2026-07-22 against official Uniswap
-  // deployments docs (developers.uniswap.org) + on-chain eth_getCode.
-  8453: [
-    "0x2626664c2603336e57b271c5c0b26f421741e481", // SwapRouter02
-    "0x6ff5693b99212da76ad316178a184ab56d299b43", // UniversalRouter
-    "0x3d4e44eb1374240ce5f1b871ab261cd16335b76a", // QuoterV2
-    "0x33128a8fc17869897dce68ed026d694621f6fdfd", // UniswapV3Factory
-    "0x4200000000000000000000000000000000000006", // WETH
-    "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913", // USDC
-    "0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5", // Aerodrome Slipstream SwapRouter (slipstream README + eth_getCode + live quote, 2026-07-24)
-    "0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0", // Aerodrome Slipstream QuoterV2 (slipstream README + eth_getCode + live quote, 2026-07-24)
-    "0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a", // Aerodrome Slipstream PoolFactory (slipstream README + eth_getCode, 2026-07-24)
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI canonical diamond (verified via li.quest /chains diamondAddress, 2026-07-23)
-    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router (official deployments + eth_getCode, 2026-07-23)
-    "0x3f170631ed9821ca51a59d996ab095162438dc10", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
-    "0x4f37a9d177470499a2dd084621020b023fcffc1f", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-    "0xc92e8bdf79f0507f65a392b0ab4667716bfe0110", // CoW VaultRelayer (CoW contracts networks.json v1.8.0, 2026-07-24)
-  ],
-
-  // Arbitrum One (42161) — Uniswap v3. Verified 2026-07-22 against arbiscan
-  // (Uniswap V3: Router 2 label) + swap-router-contracts release + on-chain code.
-  42161: [
-    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // SwapRouter02
-    "0x61ffe014ba17989e743c5f6cb21bf9697530b21e", // QuoterV2
-    "0x82af49447d8a07e3bd95bd0d56f35241523fbab1", // WETH
-    "0xaf88d065e77c8cc2239327c5edb3a432268e5831", // USDC (native)
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI canonical diamond (verified via li.quest, 2026-07-23) — Leg2 Arb->Stable bridge
-    "0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9", // USDT0 on Arbitrum (ERC20 approve target for Leg2 bridge)
-    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router (official deployments + eth_getCode, 2026-07-23)
-    "0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
-    "0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-    "0xc92e8bdf79f0507f65a392b0ab4667716bfe0110", // CoW VaultRelayer (CoW contracts networks.json v1.8.0, 2026-07-24)
-    "0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41", // GMX v2 ExchangeRouter (gmx-synthetics deployments/arbitrum, 2026-07-24)
-    "0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6", // GMX v2 Router approval spender (gmx-synthetics deployments/arbitrum, 2026-07-24)
-  ],
-
-  // Add verified venues per chain before trading there. Left empty on purpose:
-  // an empty chain refuses non-allowlisted destinations (fail-closed by design).
-  1: [
-    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // Uniswap SwapRouter02
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI canonical diamond (verified via li.quest, 2026-07-23) — ETH->Arb gas bridge
-    "0x4cd00e387622c35bddb9b4c962c136462338bc31", // Relay Depository (api.relay.link quote target + Etherscan label, 2026-07-23)
-    "0x6a000f20005980200259b80c5102003040001068", // ParaSwap/Velora Augustus V6.2 (Velora docs + priceRoute target, 2026-07-23)
-    "0xae563e3f8219521950555f5962419c8919758ea2", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
-    "0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-    "0xc92e8bdf79f0507f65a392b0ab4667716bfe0110", // CoW VaultRelayer (CoW contracts networks.json v1.8.0, 2026-07-24)
-  ],      // Ethereum
-  137: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
-    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-  ],    // Polygon
-  10: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
-    "0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
-    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-  ],     // Optimism
-  56: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
-    "0xa72c85c258a81761433b4e8da60505fe3dd551cc", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-  ],     // BSC
-  43114: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
-    "0xf39ca6ede9bf7820a952b52f3c94af526bab9015", // Balancer v3 Router (official deployments + eth_getCode, 2026-07-23)
-    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-    "0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2", // GMX v2 ExchangeRouter (gmx-synthetics deployments/avalanche, 2026-07-24)
-    "0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68", // GMX v2 Router approval spender (gmx-synthetics deployments/avalanche, 2026-07-24)
-  ],  // Avalanche
-  999: [
-    "0x0a0758d937d1059c356d4714e57f5df0239bce1a", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
-    "0xd2002373543ce3527023c75e7518c274a51ce712", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-  ],    // HyperEVM
-  2741: [
-    "0x4f8c9056bb8a3616693a76922fa35d53c056e5b3", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
-  ],   // Abstract
-  988: [
-    "0x026f252016a7c47cdef1f05a3fc9e20c92a49c37", // LI.FI diamond (li.quest /chains + eth_getCode, 2026-07-23)
-    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG (official docs + eth_getCode, 2026-07-24)
-    "0x817997ca8394e26cce3de3a076a4889b27dbf9de", // WgUSDT (wrapped native USDT0, WETH-style deposit/transfer)
-    "0x3dea4be5615974f31624404ef288ba3b36dfeb83", // FEFER/WgUSDT UniV2 pair (raw swap target, verified on-chain)
-    "0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83", // FEFER token (approve/transfer for sell-back)
-    "0x779ded0c9e1022225f8e0630b35a9b54be713736", // USDT0 canonical (native mirror)
-    "0xbc6f7725f08232c151b528bdfcaaf89993ca86ee", // Atomic FEFER raw-pair buyer; deployed by executor, owner verified on-chain (2026-07-23)
-  ],    // Stable
-};
-
-// Destinations that can move value according to a market quote. Calldata sent
-// to these contracts must carry a fresh bounded auto-slippage guard through the
-// signer boundary. Tokens, wrappers, quoters, factories, and Permit2 are
-// intentionally excluded because approvals/deposits are not swaps.
-export const SWAP_VENUES = {
-  1: [
-    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // SwapRouter02
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
-    "0x4cd00e387622c35bddb9b4c962c136462338bc31", // Relay Depository
-    "0x6a000f20005980200259b80c5102003040001068", // ParaSwap/Velora Augustus V6.2
-    "0xae563e3f8219521950555f5962419c8919758ea2", // Balancer v3 Router
-    "0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e", // Curve RouterNG
-  ],
-  10: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
-    "0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b", // Balancer v3 Router
-    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG
-  ],
-  56: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
-    "0xa72c85c258a81761433b4e8da60505fe3dd551cc", // Curve RouterNG
-  ],
-  137: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
-    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG
-  ],
-  988: [
-    "0x026f252016a7c47cdef1f05a3fc9e20c92a49c37", // LI.FI diamond
-    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG
-    "0x3dea4be5615974f31624404ef288ba3b36dfeb83", // verified raw V2 pair
-    "0xbc6f7725f08232c151b528bdfcaaf89993ca86ee", // atomic raw-pair helper
-  ],
-  999: [
-    "0x0a0758d937d1059c356d4714e57f5df0239bce1a", // LI.FI diamond
-    "0xd2002373543ce3527023c75e7518c274a51ce712", // Curve RouterNG
-  ],
-  2741: [
-    "0x4f8c9056bb8a3616693a76922fa35d53c056e5b3", // LI.FI diamond
-  ],
-  4663: [
-    "0xcaf681a66d020601342297493863e78c959e5cb2", // SwapRouter02
-    "0xb477751b76cf82d00a686a1232f5fcd772414af3", // LI.FI diamond
-    "0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1", // Curve RouterNG
-  ],
-  8453: [
-    "0x2626664c2603336e57b271c5c0b26f421741e481", // SwapRouter02
-    "0x6ff5693b99212da76ad316178a184ab56d299b43", // UniversalRouter
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
-    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router
-    "0x3f170631ed9821ca51a59d996ab095162438dc10", // Balancer v3 Router
-    "0x4f37a9d177470499a2dd084621020b023fcffc1f", // Curve RouterNG
-  ],
-  42161: [
-    "0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45", // SwapRouter02
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
-    "0x888888888889758f76e7103c6cbf23abbf58f946", // Pendle Router
-    "0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e", // Balancer v3 Router
-    "0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d", // Curve RouterNG
-  ],
-  43114: [
-    "0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae", // LI.FI diamond
-    "0xf39ca6ede9bf7820a952b52f3c94af526bab9015", // Balancer v3 Router
-    "0x0dcded3545d565ba3b19e683431381007245d983", // Curve RouterNG
-  ],
-};
-
-export function isSwapVenue(chainId, address) {
-  const target = String(address || "").trim().toLowerCase();
-  if (!target) return false;
-  return (SWAP_VENUES[Number(chainId)] || []).includes(target);
-}
-
-/**
- * Known-good destinations for a chain: the union of that chain's vetted venues
- * and the cross-chain constants. Returns a Set of lowercased addresses.
- * @param {number} chainId
- * @returns {Set<string>}
- */
-export function venuesFor(chainId) {
-  const perChain = VENUES[Number(chainId)] || [];
-  return new Set(
-    [...perChain, ...CROSS_CHAIN_VENUES].map((a) => String(a).trim().toLowerCase()).filter(Boolean)
-  );
-}

package/src/watch-preferences.mjs

@@ -1,85 +0,0 @@
-/** Notification classes supported by Oracle watches. */
-export const WATCH_CATEGORIES = Object.freeze([
-  'price',
-  'wallet',
-  'risk',
-  'execution',
-  'security',
-  'nft',
-  'governance',
-  'system',
-]);
-
-const CATEGORY_SET = new Set(WATCH_CATEGORIES);
-
-function assertCategory(category) {
-  if (!CATEGORY_SET.has(category)) {
-    throw new TypeError(`Unknown watch category: ${String(category)}`);
-  }
-  return category;
-}
-
-function subscribedCategories(preferences = {}) {
-  const categories = preferences.subscribedCategories ?? [];
-  if (!Array.isArray(categories)) {
-    throw new TypeError('subscribedCategories must be an array');
-  }
-  return categories;
-}
-
-/** New users receive no category notifications until they explicitly opt in. */
-export function defaultPreferences() {
-  return { subscribedCategories: [] };
-}
-
-/** Return a new preference value with exactly one notification class enabled. */
-export function subscribe(preferences, category) {
-  assertCategory(category);
-  const current = subscribedCategories(preferences);
-  if (current.includes(category)) return { ...preferences, subscribedCategories: [...current] };
-  return { ...preferences, subscribedCategories: [...current, category] };
-}
-
-/** Return a new preference value with the requested notification class disabled. */
-export function unsubscribe(preferences, category) {
-  assertCategory(category);
-  const current = subscribedCategories(preferences);
-  return {
-    ...preferences,
-    subscribedCategories: current.filter((candidate) => candidate !== category),
-  };
-}
-
-/** Create a direct watch. Notifications are opt-in independently for every watch. */
-export function createWatch({ category, notify = false, ...watch } = {}) {
-  assertCategory(category);
-  if (typeof notify !== 'boolean') throw new TypeError('watch notify must be a boolean');
-  return { ...watch, category, notify };
-}
-
-function isMatchingNotifyingWatch(alert, watch) {
-  if (!watch || watch.notify !== true || watch.category !== alert.category) return false;
-  if (alert.watchId !== undefined && watch.id !== alert.watchId) return false;
-  return true;
-}
-
-/**
- * Decide whether an alert may be delivered. This function only describes policy;
- * it performs no scheduling or delivery.
- */
-export function evaluateAlert(alert, preferences = defaultPreferences(), watch) {
-  if (!alert || typeof alert !== 'object') throw new TypeError('alert must be an object');
-  assertCategory(alert.category);
-
-  if (subscribedCategories(preferences).includes(alert.category)) {
-    return { deliver: true, reason: 'category-subscribed' };
-  }
-  if (isMatchingNotifyingWatch(alert, watch)) {
-    return { deliver: true, reason: 'watch-opt-in' };
-  }
-  return { deliver: false, reason: 'not-subscribed' };
-}
-
-export function shouldDeliverAlert(alert, preferences, watch) {
-  return evaluateAlert(alert, preferences, watch).deliver;
-}