@oracle-agent/oracle 0.14.1 → 0.16.0

package/dist/nft-gas-war-guard.mjs

@@ -0,0 +1 @@
+var x=/^(0|[1-9][0-9]*)$/,l=class extends Error{constructor(t){super(`nft gas-war limit: ${t.reason}`),this.name="NftGasWarLimitError",this.verdict=t}};function n(e,t,{required:s=!0,allowZero:a=!1}={}){if(e==null||e===""){if(s)throw new Error(`${t} required`);return null}let i;if(typeof e=="bigint")i=e;else if(typeof e=="number"){if(!Number.isSafeInteger(e))throw new Error(`${t} must be a safe integer`);i=BigInt(e)}else if(typeof e=="string"){let r=e.trim();if(r.startsWith("0x")||r.startsWith("0X"))i=BigInt(r);else{if(!x.test(r))throw new Error(`${t} must be an integer wei string`);i=BigInt(r)}}else throw new Error(`${t} must be bigint, number, or integer string`);if(i<0n||!a&&i===0n)throw new Error(`${t} must be ${a?"non-negative":"positive"}`);return i}function G(e){let t=Number(e);if(!Number.isSafeInteger(t)||t<=0)throw new Error("chainId must be a positive integer");return t}function W(e={}){return e.maxFeePerGas!=null?n(e.maxFeePerGas,"maxFeePerGas"):e.gasPrice!=null?n(e.gasPrice,"gasPrice"):null}function P(e={}){try{let t=G(e.chainId??e.tx?.chainId),s=e.tx||e,a=e.policy||e,i=a.grant?.maxGasWei??e.grant?.maxGasWei,r=n(a.maxTotalGasWei??a.maxGasWei??i,"maxTotalGasWei"),f=n(s.gasLimit??s.gas,"gasLimit"),o=W(s);if(o==null)throw new Error("maxFeePerGas or gasPrice required");let m=n(a.maxFeePerGasWei,"maxFeePerGasWei",{required:!1}),c=n(a.maxPriorityFeePerGasWei,"maxPriorityFeePerGasWei",{required:!1}),u=s.maxPriorityFeePerGas==null?null:n(s.maxPriorityFeePerGas,"maxPriorityFeePerGas"),g=f*o;return g>r?{ok:!1,status:"BLOCK",reason:`total gas ${g} exceeds cap ${r}`,chainId:t,totalGasWei:g.toString(),maxTotalGasWei:r.toString()}:m!=null&&o>m?{ok:!1,status:"BLOCK",reason:`unit fee ${o} exceeds cap ${m}`,chainId:t,unitFeeWei:o.toString(),maxFeePerGasWei:m.toString(),totalGasWei:g.toString(),maxTotalGasWei:r.toString()}:u!=null&&c!=null&&u>c?{ok:!1,status:"BLOCK",reason:`priority fee ${u} exceeds cap ${c}`,chainId:t,priorityFeeWei:u.toString(),maxPriorityFeePerGasWei:c.toString(),totalGasWei:g.toString(),maxTotalGasWei:r.toString()}:{ok:!0,status:"PASS",reason:"gas envelope within NFT mint gas-war caps",chainId:t,totalGasWei:g.toString(),maxTotalGasWei:r.toString(),unitFeeWei:o.toString(),maxFeePerGasWei:m?.toString()??null,priorityFeeWei:u?.toString()??null,maxPriorityFeePerGasWei:c?.toString()??null}}catch(t){return{ok:!1,status:"BLOCK",reason:String(t?.message||t)}}}function F(e={}){let t=P(e);if(!t.ok)throw new l(t);return t}export{l as NftGasWarLimitError,F as assertNftMintGasWar,P as validateNftMintGasWar};

package/dist/onboarding/harness-configs.mjs

@@ -0,0 +1,4 @@
+var y="@oracle-agent/oracle";var m=["-y","--package",y,"oracle-data-mcp"],E=/(?:^|_)(?:PRIVATE_KEY|SECRET|TOKEN|PASSWORD|PASSPHRASE|MNEMONIC|SEED)(?:_|$)/i;function l(e,t){if(typeof e!="string"||!e.trim())throw new TypeError(`${t} must be a non-empty string`);if(/\r|\n|\0/.test(e))throw new TypeError(`${t} must be a single-line string`);return e.trim()}function f(e){let t=l(e,"url"),r;try{r=new URL(t)}catch{throw new TypeError("url must be a valid http(s) URL")}if(!/^https?:$/.test(r.protocol)||r.username||r.password)throw new TypeError("url must be a credential-free http(s) URL");for(let n of r.searchParams.keys())if(E.test(n)||/^(?:key|api[_-]?key|auth)$/i.test(n))throw new TypeError(`url must not contain secret-shaped query parameter: ${n}`);return r.href}function g(e){let t=l(e,"key");if(/^[A-Z][A-Z0-9_]*\s*=/.test(t)||/-----BEGIN [A-Z ]*PRIVATE KEY-----/.test(t))throw new TypeError("key must be an Oracle agent key, not an environment assignment or private key");if(/^(?:0x)?[0-9a-f]{64}$/i.test(t)||t.trim().split(/\s+/).length>=12)throw new TypeError("key looks like private signing material");return t}function d(e){let t=l(e,"label");if(!/^[a-z0-9][a-z0-9_-]{0,62}$/i.test(t))throw new TypeError("label must contain only letters, digits, underscores, and hyphens");if(E.test(t))throw new TypeError("label must not be a secret-shaped environment name");return t}function p(e){return`${JSON.stringify(e,null,2)}
+`}function a(e){return JSON.stringify(e)}function s(e){return JSON.stringify(e)}function h({url:e,key:t,label:r="oracle-data"}={}){let n=f(e),i=g(t),o=d(r),u={command:"npx",args:[...m],env:{ORACLE_DATA_URL:n,ORACLE_AGENT_KEY:i}},c={mcpServers:{[o]:u}};return{hermes:["mcp_servers:",`  ${o}:`,`    command: ${a("npx")}`,"    args:",...m.map(A=>`      - ${a(A)}`),"    env:",`      ORACLE_DATA_URL: ${a(n)}`,`      ORACLE_AGENT_KEY: ${a(i)}`,""].join(`
+`),claudeCode:p(c),codex:[`[mcp_servers.${s(o)}]`,`command = ${s("npx")}`,`args = [${m.map(s).join(", ")}]`,"",`[mcp_servers.${s(o)}.env]`,`ORACLE_DATA_URL = ${s(n)}`,`ORACLE_AGENT_KEY = ${s(i)}`,""].join(`
+`),cursor:p(c),genericMcp:p(c)}}var _=h;export{_ as createHarnessConfigs,h as emitHarnessConfigs};

package/dist/portfolio-risk.mjs

@@ -0,0 +1 @@
+var x=Object.freeze({assetHighPct:50,assetMediumPct:25,chainHighPct:75,venueHighPct:60,stablecoinHighPct:70}),L=new Set(["USDC","USDT","USDT0","DAI","FRAX","LUSD","TUSD","USDP","GUSD","PYUSD","USDE"]);function K(n){if(n===null||n===""||n===void 0)return null;let e=Number(n);return Number.isFinite(e)&&e>=0?e:null}function b(n){return Math.round((n+Number.EPSILON)*1e8)/1e8}function P(n,e){return e>0?b(n/e*100):null}function V(n){return n.address||n.owner||n.walletAddress||n.wallet?.address||null}function E(n){let e=Array.isArray(n)?n:Array.isArray(n?.entries)?n.entries:[],a=new Map;for(let s of e){if(!s?.address)continue;let l=String(s.address).toLowerCase();a.has(l)||a.set(l,s)}return a}function f(n,e,a={}){if(!e||typeof e!="object")return;let s=String(e.symbol??e.coin??e.name??e.collection??e.tokenId??"unknown"),l=K(e.usdValue??e.valueUsd??e.knownUsd??e.estimatedValueUsd??e.floorValueUsd),o=e.kind==="nft"||e.type==="nft"||e.collection||e.tokenId!=null?"nft":"fungible";n.push({symbol:s,usdValue:l,chain:String(e.chain??e.chainName??a.chain??"unknown"),venue:String(e.venue??e.protocol??e.platform??a.venue??"wallet"),address:e.address??a.address??null,kind:o,stablecoin:e.stablecoin===!0||L.has(s.toUpperCase())})}function T(n){let e=[],a=V(n);for(let s of n.assets||n.holdings||[])f(e,s,{address:a,chain:n.chain,venue:n.venue});for(let s of n.chains||[]){let l=s.chain??s.name??s.slug??(s.chainId!=null?String(s.chainId):s.family)??"unknown",o={address:s.address??a,chain:l,venue:s.venue};s.native&&(s.native.amount==null||Number(s.native.amount)!==0)&&f(e,{...s.native,symbol:s.native.symbol??s.symbol??l},o);for(let r of s.assets||s.fungibleTokens?.assets||[])f(e,r,o);for(let r of s.collectibles?.assets||s.nfts||[])f(e,{...r,kind:"nft"},o);for(let r of s.spot?.balances||[])f(e,r,{...o,venue:"Hyperliquid spot"});let p=K(s.perps?.accountValueUsd);p!=null&&f(e,{symbol:"perps account",usdValue:p},{...o,venue:"Hyperliquid perps"})}for(let s of n.inventory?.items||n.nfts?.items||[])f(e,{...s,kind:"nft"},{address:a,chain:s.chain??n.chain,venue:s.marketplace??n.venue});return e}function M(n,e){let a=V(n),s=n.chain??n.chainId??n.family??"*";return a?`${String(a).toLowerCase()}|${String(s).toLowerCase()}`:`snapshot:${e}`}function I(n,e,a){let s=new Map;for(let l of n){if(l.usdValue==null)continue;let o=l[e];s.set(o,(s.get(o)||0)+l.usdValue)}return[...s].map(([l,o])=>({name:l,knownUsd:b(o),percentOfKnown:P(o,a)})).sort((l,o)=>o.knownUsd-l.knownUsd||l.name.localeCompare(o.name))}function z(n={},e={}){let a=Array.isArray(n)?n:Array.isArray(n.snapshots)?n.snapshots:n.snapshot?[n.snapshot]:[],s=E(e.labels??e.addressBook??n.labels??n.addressBook),l={...x,...n.thresholds||{},...e.thresholds||{}},o=[],p=new Set,r=0;a.forEach((t,c)=>{if(!t||typeof t!="object")return;let O=M(t,c);p.has(O)?r+=1:(p.add(O),o.push(t))});let y=o.flatMap(T),m=y.filter(t=>t.usdValue!=null),C=y.filter(t=>t.usdValue==null),D=o.reduce((t,c)=>t+Number(c.valuation?.unpricedNonzeroItems||c.unpricedNonzeroItems||0),0),i=b(m.reduce((t,c)=>t+c.usdValue,0)),h=C.length+D,v=I(m,"chain",i),g=I(m,"venue",i),w=I(m,"symbol",i);for(let t of v)t.chain=t.name;for(let t of g)t.venue=t.name;for(let t of w)t.asset=t.name,t.symbol=t.name;let S=b(m.filter(t=>t.stablecoin).reduce((t,c)=>t+c.usdValue,0)),k=y.filter(t=>t.kind==="nft"),N=o.reduce((t,c)=>t+Number(c.valuation?.nftUnvaluedItems||0),0),U=k.filter(t=>t.usdValue==null).length+N,H=k.filter(t=>t.usdValue!=null).length,u=w[0]||null,A=u?u.percentOfKnown>=l.assetHighPct?"high":u.percentOfKnown>=l.assetMediumPct?"medium":"low":"unknown",d=[];h&&d.push(`${h} nonzero holding(s) have unknown USD value; they are excluded from totals and percentages.`),U&&d.push("NFT valuation coverage is partial; estimates are not executable bids and unvalued NFTs are not treated as zero."),r&&d.push(`${r} duplicate address/chain snapshot(s) were ignored.`),u&&A!=="low"&&d.push(`Asset concentration is ${A}: ${u.name} is ${u.percentOfKnown}% of known value.`),v[0]?.percentOfKnown>=l.chainHighPct&&d.push(`Chain concentration is high: ${v[0].name} is ${v[0].percentOfKnown}% of known value.`),g[0]?.percentOfKnown>=l.venueHighPct&&d.push(`Venue concentration is high: ${g[0].name} is ${g[0].percentOfKnown}% of known value.`);let $=o.map(V).filter(Boolean).map(t=>{let c=s.get(String(t).toLowerCase());return{address:t,label:c?.label??null,who:c?.who??null,role:c?.role??null}});return{totalKnownUsd:i,coverage:{complete:o.length>0&&h===0&&o.every(t=>t.valuation?.complete!==!1&&t.coverage?.complete!==!1),label:h===0&&o.length&&o.every(t=>t.valuation?.complete!==!1&&t.coverage?.complete!==!1)?"complete for the supplied snapshots":"known priced value only; portfolio coverage is partial or unverified",unknownUsd:h?null:0,pricedItemCount:m.length,unknownItemCount:h,snapshotCount:o.length,duplicatesIgnored:r},chainExposures:v,venueExposures:g,topAssets:w.slice(0,Math.max(1,Number(e.topAssets??n.topAssets??10))),concentrationRisk:{level:A,topAsset:u?.name??null,topAssetPercent:u?.percentOfKnown??null,thresholds:{mediumPct:l.assetMediumPct,highPct:l.assetHighPct}},stablecoinExposure:{knownUsd:S,percentOfKnown:P(S,i),high:i>0&&P(S,i)>=l.stablecoinHighPct},nftCoverage:{status:k.length||N?U?"partial":"valued":"not-observed",valuedItems:H,unvaluedItems:U,knownUsd:b(k.filter(t=>t.usdValue!=null).reduce((t,c)=>t+c.usdValue,0))},addresses:$,warnings:[...new Set(d)]}}var F=z;export{x as DEFAULT_RISK_THRESHOLDS,F as portfolioRiskSummary,z as summarizePortfolioRisk};

package/dist/prepare-envelope.mjs

@@ -0,0 +1 @@
+import{createHash as P,createHmac as l,timingSafeEqual as b}from"node:crypto";var R=2,m=300*1e3,S=(()=>{let r=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(r)&&r>0?r:1800*1e3})();function $(r){let e=r==null||r===""?m:Number(r);return!Number.isFinite(e)||e<0?m:Math.min(e,S)}function d(r){return r===null||typeof r!="object"?JSON.stringify(r):Array.isArray(r)?`[${r.map(d).join(",")}]`:`{${Object.keys(r).sort().map(n=>`${JSON.stringify(n)}:${d(r[n])}`).join(",")}}`}function M(r){let e=String(r?.ORACLE_STAMP_HMAC_SECRET||"").trim();return e.length>=16?e:""}function g(r=process.env){return M(process.env)||M(r)}function y(r=process.env){return String(process.env.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"||String(r?.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"}function C(r){let{oraclePrepared:e,prepareHash:n,prepareMac:o,note:i,...t}=r||{};return t}function _(r){let e=C(r);return P("sha256").update(d(e)).digest("hex")}function x(r,e=g()){return e?l("sha256",e).update(String(r)).digest("hex"):""}function H(r,e){try{let n=Buffer.from(String(r),"hex"),o=Buffer.from(String(e),"hex");return n.length===0||n.length!==o.length?!1:b(n,o)}catch{return!1}}function v(r,{provider:e,kind:n,env:o=process.env}={}){if(!r||typeof r!="object")throw new Error("stampPrepared: payload object required");let i={...r,provider:r.provider||e,kind:r.kind||n,requiresUserSignature:r.requiresUserSignature!==!1,signingReady:!1,broadcastReady:!1,executionReady:!1};if(!i.provider)throw new Error("stampPrepared: provider required");if(!i.kind)throw new Error("stampPrepared: kind required");let t=Date.now(),f=t+m,s={...i,preparedAt:t,expiresAt:f,prepareVersion:R},a=_(s),p=g(o),c=p?x(a,p):void 0,u={...s,oraclePrepared:!0,prepareHash:a};return c&&(u.prepareMac=c),u}function k(r,{maxAgeMs:e=m,nowMs:n=Date.now(),providers:o=null,kinds:i=null,label:t="operator",env:f=process.env}={}){if(!r||typeof r!="object")throw new Error(`${t}: prepared envelope object required`);if(r.oraclePrepared!==!0)throw new Error(`${t}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(r.prepareVersion)!==R)throw new Error(`${t}: unsupported prepareVersion ${r.prepareVersion}`);let h=_(r);if(String(r.prepareHash||"")!==h)throw new Error(`${t}: prepareHash mismatch \u2014 payload was altered after prepare`);let s=g(f),a=String(r.prepareMac||"");if(y(f)||a||s){if(!s)throw new Error(`${t}: prepareMac present or ORACLE_STAMP_REQUIRE_MAC=1 but ORACLE_STAMP_HMAC_SECRET missing in signer`);let w=x(h,s);if(!a||!H(a,w))throw new Error(`${t}: prepareMac mismatch \u2014 stamp not from trusted preparer`)}let p=Number(r.preparedAt),c=Number(r.expiresAt),u=$(e),E=n-p,A=c-p;if(!Number.isFinite(E)||!Number.isFinite(c)||!Number.isFinite(A)||E<0||A<=0||A>S||E>u||n>c)throw new Error(`${t}: prepare envelope expired or clock-skewed (ageMs=${E}, max=${u})`);if(o&&!new Set(o).has(r.provider))throw new Error(`${t}: provider ${r.provider} not allowed here`);if(i&&!new Set(i).has(r.kind))throw new Error(`${t}: kind ${r.kind} not allowed here`);return!0}export{S as PREPARE_HARD_MAX_AGE_MS,m as PREPARE_MAX_AGE_MS,R as PREPARE_VERSION,k as assertPreparedEnvelope,_ as computePrepareHash,x as computePrepareMac,C as prepareBodyForHash,$ as resolvePrepareMaxAgeMs,v as stampPrepared};

package/dist/public-api/agent-grants.mjs

@@ -0,0 +1,3 @@
+var He=Object.defineProperty;var pe=(e,t)=>{for(var n in t)He(e,n,{get:t[n],enumerable:!0})};var be={};pe(be,{GRANT_VERSION:()=>_,GrantValidationError:()=>S,MAX_ACTIONS:()=>re,MAX_GRANT_TTL_SECONDS:()=>ee,MAX_NONCE_LENGTH:()=>te,MAX_REVOCATION_KEY_LENGTH:()=>ne,MAX_SLIPPAGE_BPS:()=>Q,MAX_TARGETS:()=>se,READONLY_ACTION_VERBS:()=>ye,REQUIRED_FIELDS:()=>Z,canonicalizeGrant:()=>H,grantId:()=>w,isExpired:()=>L,isReadonlyAction:()=>j,normalizeGrant:()=>G,validateGrant:()=>T});import{createHash as Xe}from"node:crypto";var _=1,Z=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),ye=Object.freeze(["read","simulate"]),Q=1e4,ee=1440*60,te=128,ne=256,re=64,se=256,ge=/^0x[0-9a-fA-F]{40}$/,Ye=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,Je=/^[a-z][a-z0-9_-]*:\*$/,Ze=/^[A-Za-z0-9._:-]+$/,Qe=/^[A-Za-z0-9._:-]+$/,xe=/^(0|[1-9][0-9]*)$/,S=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function Ae(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function et(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return xe.test(t)?t:null}return null}function k(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!xe.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function j(e){let t=String(e).split(":")[0];return ye.includes(t)}function T(e,t={}){let n=[],r=(i,c)=>n.push({field:i,message:c});if(!Ae(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let i of Object.keys(e))Z.includes(i)||r(i,"unknown field is not allowed");for(let i of Z)(!(i in e)||e[i]==null)&&r(i,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let s={},o=k(e.chainId);o==null||o<=0?r("chainId","must be a positive integer chain id"):s.chainId=o;for(let i of["agentAddress","accountAddress"]){let c=e[i];typeof c!="string"||!ge.test(c.trim())?r(i,"must be a 0x-prefixed 20-byte hex address"):s[i]=c.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>re)r("actions",`too many actions (max ${re})`);else{let i=[];for(let c of e.actions){let m=typeof c=="string"?c.trim():null;if(!m){r("actions","action entries must be non-empty strings");continue}if(m.includes("*")){t.allowWildcardActions===!0&&Je.test(m)?i.push(m):r("actions",`broad wildcard action "${m}" is rejected (fail closed)`);continue}if(!Ye.test(m)){r("actions",`malformed action "${m}" (expected verb:resource)`);continue}i.push(m)}s.actions=[...new Set(i)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>se)r("targets",`too many targets (max ${se})`);else{let i=[];for(let c of e.targets){let m=typeof c=="string"?c.trim():null;if(!m||!ge.test(m)){r("targets",`target "${c}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}i.push(m.toLowerCase())}if(s.targets=[...new Set(i)].sort(),s.targets.length===0&&Array.isArray(s.actions)){let c=s.actions.filter(m=>!j(m));(c.length>0||s.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${c.join(", ")||"no valid actions"})`)}}for(let i of["maxValueWei","maxGasWei"]){let c=et(e[i]);c==null?r(i,"must be a non-negative integer wei amount"):s[i]=c}let a=k(e.maxSlippageBps);a==null||a>Q?r("maxSlippageBps",`must be an integer between 0 and ${Q}`):s.maxSlippageBps=a;let u=864e10,f=k(e.expiresAt);if(f==null||f<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(f>u)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(s.expiresAt=f,t.now!=null){let i=k(t.now);i==null?r("expiresAt","opts.now must be a unix-seconds integer"):f<=i?r("expiresAt",`grant is expired (expiresAt ${f} <= now ${i})`):f-i>ee&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${ee} seconds)`)}let d=typeof e.nonce=="string"?e.nonce.trim():k(e.nonce)!=null?String(k(e.nonce)):null;!d||d.length>te||!Ze.test(d)?r("nonce",`must be a non-empty string (max ${te} chars, [A-Za-z0-9._:-])`):s.nonce=d;let l=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!l||l.length>ne||!Qe.test(l)?r("revocationKey",`must be a non-empty public identifier (max ${ne} chars, [A-Za-z0-9._:-])`):s.revocationKey=l,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:s}}function G(e,t={}){let{ok:n,errors:r,grant:s}=T(e,t);if(!n)throw new S(r);return s}function H(e,t={}){let n=G(e,t),s=Object.keys(n).sort().map(o=>`${JSON.stringify(o)}:${JSON.stringify(n[o])}`);return`{"version":${_},${s.join(",")}}`}function w(e,t={}){return Xe("sha256").update(H(e,t),"utf8").digest("hex")}function L(e,t){let n=k(t),r=k(Ae(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var tt="oracle-connect-request",nt="oracle-unsigned-grant",Se="oracle-grant-canonical-json-utf8-v1",W=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},rt=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,st=Object.freeze(["privkey","wif","xprv","seed"]);function he(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return rt.test(t)||st.includes(n)}var it=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),ot=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function I(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let s=ot.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:o,re:a}of it)if(!(s&&o.startsWith("raw-32-byte-hex"))&&a.test(e))throw new W(t,o);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[s,o]of e.entries()){if(typeof s=="string"&&he(s))throw new W(`${t}[${JSON.stringify(s)}]`,"forbidden-key-name");I(s,`${t}[key]`,n),I(o,`${t}[${String(s)}]`,n)}return e}if(e instanceof Set){let s=0;for(let o of e.values())I(o,`${t}[${s++}]`,n);return e}if(Array.isArray(e))return e.forEach((s,o)=>I(s,`${t}[${o}]`,n)),e;for(let[s,o]of Object.entries(e)){if(he(s))throw new W(`${t}.${s}`,"forbidden-key-name");I(o,`${t}.${s}`,n,s)}return e}function X(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))X(t)}return e}function at(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new S([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function ct(e){if(e?.now==null)throw new S([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return at(e.now,"opts.now")}function ut(e){return new Date(e*1e3).toISOString()}function dt(e,t){let n=e.actions.every(r=>j(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${_}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${ut(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
+`)}function ie(e={},t={}){let n=ct(t),r=e&&e.kind===tt?e.grant:e,s=G(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),o=H(s),a=w(s),u=Buffer.from(o,"utf8"),f=X({kind:nt,unsigned:!0,payload:X({version:_,grantId:a,grant:s,canonical:o}),signing:X({scheme:Se,message:o,bytesHex:`0x${u.toString("hex")}`,byteLength:u.length,sha256:a}),render:dt(s,a)});return I(f)}var z=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function we(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function ft(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function oe(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function lt(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(s=>e.has(s)):Array.isArray(e)?r.some(s=>e.includes(s)):typeof e.has=="function"?r.some(s=>e.has(s)):!1}function ae(e,{now:t,revoked:n}={}){let r=oe(t),{grant:s,revoked:o}=ft(e),{ok:a,grant:u}=T(s);if(!a)return{status:z.INVALID,id:null,grant:null};let f=w(u);return o||lt(n,f,u)?{status:z.REVOKED,id:f,grant:u}:L(u,r)?{status:z.EXPIRED,id:f,grant:u}:{status:z.ACTIVE,id:f,grant:u}}function mt(e,{now:t,revoked:n,agentAddress:r,accountAddress:s,chainId:o}={}){let a=oe(t),u=r!=null?String(r).trim().toLowerCase():null,f=s!=null?String(s).trim().toLowerCase():null,d=o!=null?Number(o):null,l=[];for(let i of we(e)){let{status:c,id:m,grant:x}=ae(i,{now:a,revoked:n});c===z.ACTIVE&&(u!=null&&x.agentAddress!==u||f!=null&&x.accountAddress!==f||d!=null&&x.chainId!==d||l.push(Object.freeze({id:m,grant:x})))}return l.sort((i,c)=>i.id<c.id?-1:i.id>c.id?1:0),I(Object.freeze(l))}function pt(e,t,{now:n,revoked:r}={}){let s=oe(n),o=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(o))return null;for(let a of we(e)){let u=ae(a,{now:s,revoked:r});if(u.status!==z.INVALID&&u.id===o)return I(Object.freeze({id:u.id,status:u.status,grant:u.grant}))}return null}var gt=Object.freeze(["grantCreated","grantActivated","grantRevoked","grantExpired"]),M=Object.freeze({ACTIVE:"active",PENDING:"pending",REVOKED:"revoked",EXPIRED:"expired",UNKNOWN:"unknown",INVALID:"invalid"}),yt=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]);function Ie(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function Ee(e){return typeof e=="bigint"?Number(e):typeof e=="number"&&Number.isFinite(e)?e:typeof e=="string"&&e.trim()!==""&&Number.isFinite(Number(e.trim()))?Number(e.trim()):null}function Ne(e,t=512){if(typeof e!="string")return null;let n=e.trim();return n?n.length>t?n.slice(0,t):n:null}function xt(e){let t={};for(let n of yt)t[n]=e[n];return t}function At(e,t){if(!Ie(e))return{ok:!1,error:{type:null,at:null,grantId:null,message:"event must be a plain object"}};let n=typeof e.type=="string"?e.type:null,r=Ee(e.at),s=typeof e.grantId=="string"&&e.grantId.trim()?e.grantId.trim():null;if(!gt.includes(n))return{ok:!1,error:{type:n,at:r,grantId:s,message:`unknown event type "${String(n)}"`}};if(r==null)return{ok:!1,error:{type:n,at:null,grantId:s,message:"event.at must be a unix-seconds number"}};if(n==="grantCreated"){if(!Ie(e.grant))return{ok:!1,error:{type:n,at:r,grantId:s,message:"grantCreated requires a grant payload"}};let a;try{a=G(e.grant,{allowWildcardActions:t.allowWildcardActions})}catch(f){let d=f instanceof S?f.message:String(f?.message||f);return{ok:!1,error:{type:n,at:r,grantId:s,message:d}}}let u=w(e.grant,{allowWildcardActions:t.allowWildcardActions});return s&&s!==u?{ok:!1,error:{type:n,at:r,grantId:s,message:"grantId does not match content-derived grant identity (fail closed)"}}:{ok:!0,event:{type:n,at:r,grantId:u,grant:a}}}if(!s)return{ok:!1,error:{type:n,at:r,grantId:null,message:`${n} requires a grantId`}};let o=n==="grantRevoked"?Ne(e.reason):null;return{ok:!0,event:{type:n,at:r,grantId:s,reason:o}}}function ce(e){return e.length?e.reduce((t,n)=>Math.min(t,n)):null}function Oe(e,t={}){let n=Ee(t.now);if(n==null)throw new Error("grant-indexer: opts.now (unix seconds) is required");if(!Array.isArray(e))throw new Error("grant-indexer: events must be an array");let r=[],s=new Map;function o(d){return s.has(d)||s.set(d,{created:[],activated:[],revoked:[],expired:[]}),s.get(d)}for(let d of e){let l=At(d,t);if(!l.ok){r.push(l.error);continue}let i=l.event;if(i.at>n)continue;let c=o(i.grantId);if(i.type==="grantCreated"){let m=c.created[0];(!m||i.at<m.at)&&(c.created=[i])}else i.type==="grantActivated"?c.activated.push(i):i.type==="grantRevoked"?c.revoked.push(i):i.type==="grantExpired"&&c.expired.push(i)}let a=[];for(let[d,l]of s.entries()){let i=l.created[0]||null,c=i?i.at:null,m=ce(l.activated.map(g=>g.at)),x=ce(l.revoked.map(g=>g.at)),E=ce(l.expired.map(g=>g.at)),b=i?i.grant:null,V=b?L(b,n):!1,C=E??(V?b.expiresAt:null),N;i?l.revoked.length>0?N=M.REVOKED:E!=null||V?N=M.EXPIRED:l.activated.length>0?N=M.ACTIVE:N=M.PENDING:N=M.UNKNOWN;let h={grantId:d,status:N,createdAt:c,activatedAt:m,revokedAt:x,expiredAt:C,reason:l.revoked.length>0?Ne(l.revoked.map(g=>g.reason).find(Boolean)||null):null,grant:b?xt(b):null};a.push(h)}a.sort((d,l)=>d.grantId<l.grantId?-1:d.grantId>l.grantId?1:0),r.sort((d,l)=>{let i=(d.at??-1/0)-(l.at??-1/0);if(i!==0)return i;let c=d.grantId||"",m=l.grantId||"";return c<m?-1:c>m?1:0});let u=a.filter(d=>d.status===M.ACTIVE),f=a.filter(d=>d.status!==M.ACTIVE);return Object.freeze({active:Object.freeze(u),historical:Object.freeze(f),all:Object.freeze(a),invalidEvents:Object.freeze(r)})}import{createHash as St}from"node:crypto";function $e(e,t="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${t} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let n=String(e??"").trim();if(n==="")throw new Error(`${t} is required`);if(!/^-?\d+$/.test(n)&&!/^0x[0-9a-fA-F]+$/.test(n))throw new Error(`${t} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(n)}`);try{return BigInt(n)}catch{throw new Error(`${t} must be an integer, got ${JSON.stringify(n)}`)}}function bt(e,t,n="guard"){let r=Number(t);if(t==null||!Number.isFinite(r))throw new Error(`${n}: current time must be a finite number (got ${ht(t)})`);let s=Number(e?.issuedAtMs),o=Number(e?.expiresAtMs);if(!Number.isFinite(o))throw new Error(`${n}: expiresAtMs is required and must be a finite number`);if(r>o)throw new Error(`${n} expired at ${o}, now ${r}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(s))throw new Error(`${n}: issuedAtMs must be a finite number when present`);if(o<=s)throw new Error(`${n}: expiry must be after issuance`)}return{now:r,issuedAtMs:s,expiresAtMs:o}}function ke(e,t,{inclusive:n=!1}={}){try{let{now:r,expiresAtMs:s}=bt(e,t);return!(n&&r>=s)}catch{return!1}}function ht(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var de=Object.freeze({SAFE:"safe",KERNEL_ZERODEV:"kernel-zerodev",BICONOMY_NEXUS:"biconomy-nexus",PERMISSIONLESS_VIEM:"permissionless-viem"}),Ge=Object.freeze(Object.values(de)),P=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked"}),Re=1440*60*1e3,wt=["read:","simulate:"],It=/^0x[0-9a-fA-F]{40}$/;function Et(e){let t=String(e||"");return wt.some(n=>t.startsWith(n))}function y(e){throw new Error(`session: ${e}`)}function ue(e,t){let n=String(e??"").trim().toLowerCase();return It.test(n)||y(`${t} must be a 0x-prefixed 20-byte address`),n}function Nt(e){let t=String(e??"").trim().toLowerCase();return t||y("action ids must be non-empty strings"),t.length>128&&y("action id too long"),t}function Ot(e,t){let n=Number(e);return(!Number.isFinite(n)||!Number.isInteger(n)||n<=0)&&y(`${t} must be a positive integer`),n}function ve(e,t,{allowZero:n=!0}={}){if(e==null||e==="")return"0";let r;try{r=$e(e,t)}catch(s){y(s.message)}return r<0n&&y(`${t} must not be negative`),!n&&r===0n&&y(`${t} must be greater than zero`),r.toString()}function F(e){return e==null?"null":typeof e!="object"?JSON.stringify(e):Array.isArray(e)?"["+e.map(F).join(",")+"]":"{"+Object.keys(e).sort().map(n=>JSON.stringify(n)+":"+F(e[n])).join(",")+"}"}function fe(e){let t=St("sha256");return t.update(F(e),"utf8"),`0x${t.digest("hex")}`}function _e({provider:e,owner:t,agent:n,chainId:r,actions:s,targets:o=[],maxValueWei:a="0",maxGasWei:u,expiresAtMs:f,nonce:d=0,issuedAtMs:l=Date.now()}={}){let i=String(e??"").trim().toLowerCase();Ge.includes(i)||y(`provider must be one of ${Ge.join(", ")}`);let c=ue(t,"owner"),m=ue(n,"agent");c===m&&y("agent key must differ from owner wallet");let x=Ot(r,"chainId");(!Array.isArray(s)||s.length===0)&&y("actions must be a non-empty array");let E=[...new Set(s.map(Nt))].sort();Array.isArray(o)||y("targets must be an array");let b=[...new Set(o.map(qe=>ue(qe,"target")))].sort(),V=E.every(Et);b.length===0&&!V&&y("empty target allowlist is only allowed when every action is read/simulate");let C=ve(a,"maxValueWei"),N=u==null?null:ve(u,"maxGasWei"),h=Number(l);Number.isFinite(h)||y("issuedAtMs must be a finite number");let g=Number(f);Number.isFinite(g)||y("expiresAtMs must be a finite number"),g<=h&&y("expiresAtMs must be after issuedAtMs"),g-h>Re&&y(`session grant exceeds the hard 24-hour TTL (${Re} ms)`);let J=String(d??0),v={mode:"oracle-session-grant",version:1,provider:i,owner:c,agent:m,chainId:x,actions:E,targets:b,maxValueWei:C,maxGasWei:N,issuedAtMs:h,expiresAtMs:g,nonce:J},Ue={id:fe(v),...v};return Object.freeze(Ue)}function Te(){let e=new Map;return{revoke(t,{nowMs:n=Date.now(),reason:r=null}={}){return t||y("revoke requires a sessionId"),e.has(t)||e.set(t,{revokedAtMs:Number(n),reason:r}),e.get(t)},isRevoked(t){return e.has(t)},revokedAt(t){return e.get(t)?.revokedAtMs??null},get size(){return e.size}}}function $t(e,t){return t?typeof t.isRevoked=="function"?t.isRevoked(e.id):t instanceof Set?t.has(e.id):Array.isArray(t)?t.includes(e.id):!1:!1}function ze(e,{nowMs:t=Date.now(),revocation:n}={}){return(!e||e.mode!=="oracle-session-grant")&&y("invalid session grant"),$t(e,n)?P.REVOKED:ke({expiresAtMs:e.expiresAtMs},t,{inclusive:!0})?P.ACTIVE:P.EXPIRED}import{encodeFunctionData as De,keccak256 as kt,stringToHex as Gt,numberToHex as R,isAddress as B,isHex as Y,getAddress as D}from"viem";var Rt="0x0000000071727De22E5E9d8BAf0edAc6f37da032",vt=[{type:"function",name:"getNonce",stateMutability:"view",inputs:[{name:"sender",type:"address"},{name:"key",type:"uint192"}],outputs:[{name:"nonce",type:"uint256"}]}],Ve=[{type:"function",name:"installSessionKey",stateMutability:"nonpayable",inputs:[{name:"sessionId",type:"bytes32"},{name:"agent",type:"address"},{name:"validAfter",type:"uint48"},{name:"validUntil",type:"uint48"},{name:"actionsHash",type:"bytes32"},{name:"targets",type:"address[]"},{name:"maxValueWei",type:"uint256"},{name:"maxGasWei",type:"uint256"}],outputs:[]},{type:"function",name:"revokeSessionKey",stateMutability:"nonpayable",inputs:[{name:"sessionId",type:"bytes32"}],outputs:[]}];function p(e){throw new Error(`aa-adapter: ${e}`)}function je(e){return(typeof e!="string"||!B(e))&&p("opts.moduleAddress is required and must be a valid 0x address of the deployed session-key module on the owner's smart account (this adapter never guesses/hardcodes a contract address)"),D(e)}function Ce(e){(!e||e.mode!=="oracle-session-grant")&&p("input is not a valid session-key-model grant (missing/wrong mode)");let{id:t,...n}=e;fe(n)!==t&&p("grant integrity check failed: id does not match grant fields (tampered or hand-built object)")}function _t(e,t={}){Ce(e);let n=ze(e,t);n!==P.ACTIVE&&p(`refusing to encode calldata for a ${n} session (${e.id})`)}function Me(e,t){let n=Math.floor(Number(e)/1e3);return(!Number.isFinite(n)||n<0||n>0xffffffffffff)&&p(`${t} does not fit a uint48 seconds timestamp`),BigInt(n)}function Le(e,t={}){_t(e,t);let n=je(t.moduleAddress),r=t.abi??Ve,s=D(e.agent),o=e.targets.map(c=>D(c)),a=Me(e.issuedAtMs,"issuedAtMs"),u=Me(e.expiresAtMs,"expiresAtMs"),f=kt(Gt(F(e.actions))),d=BigInt(e.maxValueWei),l=e.maxGasWei==null?0n:BigInt(e.maxGasWei),i=De({abi:r,functionName:"installSessionKey",args:[e.id,s,a,u,f,o,d,l]});return{to:n,data:i,value:"0x0"}}function We(e,t={}){let n;typeof e=="string"?n=e:e&&e.mode==="oracle-session-grant"?(Ce(e),n=e.id):p("revokeSessionKey requires a session-key-model grant object or a raw session id string"),(!Y(n)||n.length!==66)&&p("session id must be a 0x-prefixed 32-byte hash (as produced by computeSessionId)");let r=je(t.moduleAddress),s=t.abi??Ve,o=De({abi:s,functionName:"revokeSessionKey",args:[n]});return{to:r,data:o,value:"0x0"}}var Tt=["callGasLimit","verificationGasLimit","preVerificationGas","maxFeePerGas","maxPriorityFeePerGas"];function O(e,t){e==null&&p(`${t} is required`);let n;try{n=typeof e=="bigint"?e:BigInt(e)}catch{p(`${t} must be an integer, bigint, or 0x-hex string`)}return n<0n&&p(`${t} must not be negative`),n}async function Pe(e={}){let{client:t,entryPoint:n=Rt,sender:r,callData:s,nonce:o,nonceKey:a=0n,factory:u,factoryData:f,paymaster:d,paymasterVerificationGasLimit:l,paymasterPostOpGasLimit:i,paymasterData:c="0x"}=e;(typeof r!="string"||!B(r))&&p("params.sender must be a valid 0x address"),(typeof s!="string"||!Y(s))&&p("params.callData must be 0x-prefixed hex"),(typeof n!="string"||!B(n))&&p("params.entryPoint must be a valid 0x address");let m=D(r),x=D(n);for(let v of Tt)e[v]==null&&p(`params.${v} is required (this adapter does not estimate gas)`);let E=O(e.callGasLimit,"callGasLimit"),b=O(e.verificationGasLimit,"verificationGasLimit"),V=O(e.preVerificationGas,"preVerificationGas"),C=O(e.maxFeePerGas,"maxFeePerGas"),N=O(e.maxPriorityFeePerGas,"maxPriorityFeePerGas");u==null!=(f==null)&&p("factory and factoryData must both be set (counterfactual deploy) or both omitted"),u!=null&&(typeof u!="string"||!B(u))&&p("params.factory must be a valid 0x address"),f!=null&&(typeof f!="string"||!Y(f))&&p("params.factoryData must be 0x-prefixed hex");let h=d!=null;h&&((typeof d!="string"||!B(d))&&p("params.paymaster must be a valid 0x address"),(l==null||i==null)&&p("paymasterVerificationGasLimit and paymasterPostOpGasLimit are required when paymaster is set")),c!=null&&(typeof c!="string"||!Y(c))&&p("params.paymasterData must be 0x-prefixed hex");let g;if(o!=null)g=O(o,"nonce");else{(!t||typeof t.readContract!="function")&&p("params.nonce was omitted and no usable client was provided \u2014 pass an explicit nonce or a client with an async readContract({address, abi, functionName, args}) method (a real viem PublicClient in production, a mock in tests; this adapter makes no network call itself)");let v=O(a,"nonceKey");g=await t.readContract({address:x,abi:vt,functionName:"getNonce",args:[m,v]}),g=O(g,"resolved nonce")}let J={sender:m,nonce:R(g),factory:u!=null?D(u):null,factoryData:f??null,callData:s,callGasLimit:R(E),verificationGasLimit:R(b),preVerificationGas:R(V),maxFeePerGas:R(C),maxPriorityFeePerGas:R(N),paymaster:h?D(d):null,paymasterVerificationGasLimit:h?R(O(l,"paymasterVerificationGasLimit")):null,paymasterPostOpGasLimit:h?R(O(i,"paymasterPostOpGasLimit")):null,paymasterData:h?c:null,signature:"0x"};return Object.freeze(J)}import{getBytes as zt,verifyMessage as Mt}from"ethers";var K=Object.freeze({PLAN:"oracle-session-plan",ACTIVATION:"oracle-session-activation",REVOCATION:"oracle-session-revocation",DESCRIPTION:"oracle-session-description"});function $(e){throw new Error(`session-orchestrator: ${e}`)}var Dt=Object.freeze(["id","sessionId"]),Vt=/^0x[0-9a-fA-F]{64}$/;function le(e,t){if(e==null||typeof e!="object")return typeof e=="string"&&Dt.includes(t)&&Vt.test(e)?`session-id:${e.slice(2)}`:e;if(Array.isArray(e))return e.map(r=>le(r,null));let n={};for(let[r,s]of Object.entries(e)){if(r==="signature"){s!=="0x"&&$('refusing to return a userOp whose signature is not the empty "0x" placeholder (this module never signs)');continue}n[r]=le(s,r)}return n}function U(e){return I(le(e,null)),e}function q(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))q(t)}return e}function jt(e,t={}){let n=T(e,{now:t.now});if(!n.ok)throw new S(n.errors);let r=ie(n.grant,{now:t.now}),s=q({kind:K.PLAN,unsigned:!0,grantId:r.payload.grantId,grant:n.grant,unsignedGrant:r,signingBytes:r.signing,render:r.render});return U(s)}function Ct(e){(typeof e!="string"||e.trim()==="")&&$("ownerSignature is required (the owner must have signed the grant in their own wallet)");let t=e.trim();return(!/^0x[0-9a-fA-F]+$/.test(t)||t==="0x")&&$("ownerSignature must be non-empty 0x-prefixed hex"),t}async function Lt({grant:e,ownerSignature:t,verifyOwnerSignature:n,nowSeconds:r}){let s=Ct(t),o=ie(e,{now:r});if(typeof n=="function"){await n({grant:e,ownerSignature:s,signingBytes:o.signing})!==!0&&$("ownerSignature verification failed");return}try{Mt(zt(o.signing.bytesHex),s).toLowerCase()!==e.accountAddress.toLowerCase()&&$("ownerSignature signer does not match grant accountAddress")}catch(a){if(String(a?.message||"").startsWith("session-orchestrator:"))throw a;$("ownerSignature could not be verified; smart accounts must provide verifyOwnerSignature")}}async function Fe({grant:e,ownerSignature:t,sessionKeyModel:n}={},r){(n==null||typeof n!="object")&&$("sessionKeyModel is required ({ provider?, moduleAddress, issuedAtMs, userOp })");let{provider:s=de.PERMISSIONLESS_VIEM,moduleAddress:o,issuedAtMs:a,abi:u,userOp:f}=n;Number.isFinite(Number(a))||$("sessionKeyModel.issuedAtMs (epoch MILLISECONDS) is required for a deterministic session grant"),(f==null||typeof f!="object")&&$("sessionKeyModel.userOp (gas/fee/nonce params for buildUserOperation) is required");let d=Math.floor(Number(a)/1e3),l=T(e,{now:d});if(!l.ok)throw new S(l.errors);let i=l.grant;await Lt({grant:i,ownerSignature:t,verifyOwnerSignature:r,nowSeconds:d});let c=i.expiresAt*1e3,m=_e({provider:s,owner:i.accountAddress,agent:i.agentAddress,chainId:i.chainId,actions:i.actions,targets:i.targets,maxValueWei:i.maxValueWei,maxGasWei:i.maxGasWei,expiresAtMs:c,nonce:i.nonce,issuedAtMs:Number(a)}),x=Le(m,{moduleAddress:o,abi:u,nowMs:Number(a)}),E=await Pe({...f,sender:i.accountAddress,callData:x.data}),b=q({kind:K.ACTIVATION,unsigned:!0,grantId:w(i),sessionId:m.id,sessionGrant:m,install:x,userOp:E,units:{expiresAtSeconds:i.expiresAt,expiresAtMs:m.expiresAtMs}});return U(b)}async function Wt(e={}){return Fe(e,void 0)}function Pt({verifyOwnerSignature:e}={}){typeof e!="function"&&$("createSessionOrchestrator requires a trusted verifyOwnerSignature function");let t=e;return Object.freeze({activateSession(n={}){return Fe(n,t)}})}function Ft(e,t={}){let n=We(e,{moduleAddress:t.moduleAddress,abi:t.abi}),r=typeof e=="string"?e:e.id,s=t.registry??Te(),o=s.revoke(r,{nowMs:t.nowMs??Date.now(),reason:t.reason??null}),a={kind:K.REVOCATION,sessionId:r,revoke:n,revocation:Object.freeze({revokedAtMs:o.revokedAtMs,reason:o.reason}),registry:s};return Object.freeze(a),q(a.revoke),U(a)}function Bt(e,t){let n=Oe(e,{now:t}),r=q({kind:K.DESCRIPTION,now:t,active:n.active,count:n.active.length,index:n});return U(r)}var Ke={};pe(Ke,{formatBps:()=>Be,formatWei:()=>me,renderGrant:()=>qt});var Kt=14;function A(e,t){return`${(e+":").padEnd(Kt)}${t}`}function Ut(e){return new Date(e*1e3).toISOString()}function Be(e){return`${e} bps (${(e/100).toFixed(2)}%)`}function me(e){return`${String(e).replace(/\B(?=(\d{3})+(?!\d))/g,",")} wei`}function qt(e,t={}){let n=G(e,t),r=w(n),s=n.actions.every(a=>j(a));return["ORACLE CONTROL GRANT (deterministic authorization)","==================================================",A("Grant ID",r),A("Version",String(_)),A("Chain",String(n.chainId)),A("Agent",n.agentAddress),A("Account",n.accountAddress),A("Actions",n.actions.join(", ")),A("Targets",n.targets.length?n.targets.join(", "):"(none \u2014 read/simulate only)"),A("Max value",me(n.maxValueWei)),A("Max gas",me(n.maxGasWei)),A("Max slippage",Be(n.maxSlippageBps)),A("Expires",`${Ut(n.expiresAt)} (unix ${n.expiresAt})`),A("Nonce",n.nonce),A("Revocation",n.revocationKey),"--------------------------------------------------",s?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this grant contains public data only and can be revoked at any time via the revocation key."].join(`
+`)}var wn=Object.freeze({userSigns:!0,houseCustody:!1,storesPrivateKeys:!1,revocable:!0,timeBoxed:!0,deterministicReads:!0,note:"Oracle prepares and validates grants. The user signs; Oracle never holds a key."});export{wn as GRANTS_POSTURE,z as GRANT_STATUS,K as ORCHESTRATOR_KINDS,Wt as activateSession,ae as classifyGrant,Pt as createSessionOrchestrator,Bt as describeActive,pt as getGrant,mt as listActiveGrants,jt as planConnection,be as policy,Ke as render,Ft as revokeSession,U as scanPublicReturn};

package/dist/public-control/policy-schema.mjs

@@ -0,0 +1 @@
+import{createHash as I}from"node:crypto";var w=1,p=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),O=Object.freeze(["read","simulate"]),x=1e4,A=1440*60,y=128,b=256,_=64,h=256,E=/^0x[0-9a-fA-F]{40}$/,R=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,T=/^[a-z][a-z0-9_-]*:\*$/,C=/^[A-Za-z0-9._:-]+$/,k=/^[A-Za-z0-9._:-]+$/,S=/^(0|[1-9][0-9]*)$/,m=class extends Error{constructor(s){let r=s.map(t=>`${t.field}: ${t.message}`);super(`invalid grant (${s.length} error${s.length===1?"":"s"}): ${r.join("; ")}`),this.name="GrantValidationError",this.errors=s}};function N(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function z(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let s=e.trim();return S.test(s)?s:null}return null}function c(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let s=e.trim();if(!S.test(s))return null;let r=Number(s);return Number.isSafeInteger(r)?r:null}return null}function G(e){let s=String(e).split(":")[0];return O.includes(s)}function j(e,s={}){let r=[],t=(n,i)=>r.push({field:n,message:i});if(!N(e))return t("grant","grant must be a plain object"),{ok:!1,errors:r,grant:null};for(let n of Object.keys(e))p.includes(n)||t(n,"unknown field is not allowed");for(let n of p)(!(n in e)||e[n]==null)&&t(n,"required field is missing");if(r.length)return{ok:!1,errors:r,grant:null};let o={},f=c(e.chainId);f==null||f<=0?t("chainId","must be a positive integer chain id"):o.chainId=f;for(let n of["agentAddress","accountAddress"]){let i=e[n];typeof i!="string"||!E.test(i.trim())?t(n,"must be a 0x-prefixed 20-byte hex address"):o[n]=i.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)t("actions","must be a non-empty array of action scopes");else if(e.actions.length>_)t("actions",`too many actions (max ${_})`);else{let n=[];for(let i of e.actions){let a=typeof i=="string"?i.trim():null;if(!a){t("actions","action entries must be non-empty strings");continue}if(a.includes("*")){s.allowWildcardActions===!0&&T.test(a)?n.push(a):t("actions",`broad wildcard action "${a}" is rejected (fail closed)`);continue}if(!R.test(a)){t("actions",`malformed action "${a}" (expected verb:resource)`);continue}n.push(a)}o.actions=[...new Set(n)].sort()}if(!Array.isArray(e.targets))t("targets","must be an array of contract addresses");else if(e.targets.length>h)t("targets",`too many targets (max ${h})`);else{let n=[];for(let i of e.targets){let a=typeof i=="string"?i.trim():null;if(!a||!E.test(a)){t("targets",`target "${i}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}n.push(a.toLowerCase())}if(o.targets=[...new Set(n)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let i=o.actions.filter(a=>!G(a));(i.length>0||o.actions.length===0)&&t("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${i.join(", ")||"no valid actions"})`)}}for(let n of["maxValueWei","maxGasWei"]){let i=z(e[n]);i==null?t(n,"must be a non-negative integer wei amount"):o[n]=i}let d=c(e.maxSlippageBps);d==null||d>x?t("maxSlippageBps",`must be an integer between 0 and ${x}`):o.maxSlippageBps=d;let $=864e10,l=c(e.expiresAt);if(l==null||l<=0)t("expiresAt","must be a positive unix-seconds timestamp");else if(l>$)t("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,s.now!=null){let n=c(s.now);n==null?t("expiresAt","opts.now must be a unix-seconds integer"):l<=n?t("expiresAt",`grant is expired (expiresAt ${l} <= now ${n})`):l-n>A&&t("expiresAt",`grant exceeds the hard 24-hour TTL (${A} seconds)`)}let u=typeof e.nonce=="string"?e.nonce.trim():c(e.nonce)!=null?String(c(e.nonce)):null;!u||u.length>y||!C.test(u)?t("nonce",`must be a non-empty string (max ${y} chars, [A-Za-z0-9._:-])`):o.nonce=u;let g=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!g||g.length>b||!k.test(g)?t("revocationKey",`must be a non-empty public identifier (max ${b} chars, [A-Za-z0-9._:-])`):o.revocationKey=g,r.length?{ok:!1,errors:r,grant:null}:{ok:!0,errors:[],grant:o}}function L(e,s={}){let{ok:r,errors:t,grant:o}=j(e,s);if(!r)throw new m(t);return o}function D(e,s={}){let r=L(e,s),o=Object.keys(r).sort().map(f=>`${JSON.stringify(f)}:${JSON.stringify(r[f])}`);return`{"version":${w},${o.join(",")}}`}function X(e,s={}){return I("sha256").update(D(e,s),"utf8").digest("hex")}function B(e,s){let r=c(s),t=c(N(e)?e.expiresAt:null);return r==null||t==null?!0:t<=r}export{w as GRANT_VERSION,m as GrantValidationError,_ as MAX_ACTIONS,A as MAX_GRANT_TTL_SECONDS,y as MAX_NONCE_LENGTH,b as MAX_REVOCATION_KEY_LENGTH,x as MAX_SLIPPAGE_BPS,h as MAX_TARGETS,O as READONLY_ACTION_VERBS,p as REQUIRED_FIELDS,D as canonicalizeGrant,X as grantId,B as isExpired,G as isReadonlyAction,L as normalizeGrant,j as validateGrant};

package/dist/router/index.mjs

@@ -0,0 +1,2 @@
+var at=Object.defineProperty;var O=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var it=(e,t)=>{for(var r in t)at(e,r,{get:t[r],enumerable:!0})};import{createHash as st}from"node:crypto";function pt(e){let t=String(e||"").toLowerCase();return me.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function dt(e){let t={};for(let[r,n]of Object.entries(e||{}))pt(r)||(t[r]=n);return t}function mt(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function ft(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function ht(e,t,r){let n={};for(let[c,p]of Object.entries(r||{}))n[c.toLowerCase()]=p;let o=Object.keys(n).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),a=[...new Set([...me,...o])].sort().map(c=>`${c}=${n[c]??""}`).join(`
+`),s=st("sha256").update(a).digest("hex").slice(0,32);return`${e} ${t} ${s}`}function wt(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,pe):Math.min(250*2**e,pe)+Math.floor(Math.random()*100)}async function bt(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i}){let a=new AbortController,s=setTimeout(()=>a.abort(),i);try{let c=String(e),p={...n||{}};for(let d=0;d<=de;d+=1){let l=await t(c,{method:r,headers:p,body:o,signal:a.signal,redirect:"manual"}),u=await l.text(),m=null;if(u)try{m=JSON.parse(u)}catch{m=null}if(lt.has(l.status)){if(r!=="GET"&&r!=="HEAD"){let h=new Error(`HTTP ${l.status} ${r} ${c} redirected non-idempotent request`);throw h.status=l.status,h.body=m??u.slice(0,300),h}if(d===de)throw new Error(`HTTP redirect loop for ${e}`);let f=mt(l.headers?.get?.("location"),c);ft(f,c)||(p=dt(p)),c=f;continue}if(!l.ok){let f=new Error(`HTTP ${l.status} ${r} ${c}`);throw f.status=l.status,f.retryAfter=l.headers?.get?.("retry-after")??null,f.body=m??u.slice(0,300),f}return m??u}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(s)}}async function b(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let n=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},a=t.body;a!=null&&typeof a!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",a=JSON.stringify(a));let s=Number.isInteger(t.retries)?Math.max(t.retries,0):ut,c=async()=>{let m;for(let f=0;f<=s;f++)try{return await bt(e,{fetchImpl:r,method:o,headers:i,body:a,timeoutMs:n})}catch(h){m=h;let w=h?.status,g=h?.name==="AbortError",P=new Set([408,425,429]),_=w!=null?P.has(w)||ct.has(w)&&le.has(o):!g&&le.has(o);if(f===s||!_)throw h;await gt(wt(f,h?.retryAfter))}throw m};if(!(t.dedupe!==!1&&o==="GET"&&a==null))return c();let d=ht(o,e,i),l=X.get(d);if(l)return l;let u=c().finally(()=>X.delete(d));return X.set(d,u),u}var ct,le,ut,pe,me,lt,de,X,gt,y=O(()=>{ct=new Set([408,425,429,500,502,503,504]),le=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),ut=2,pe=4e3,me=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],lt=new Set([301,302,303,307,308]),de=3;X=new Map;gt=e=>new Promise(t=>setTimeout(t,e))});import{readFileSync as Et}from"node:fs";import{homedir as At}from"node:os";import{join as F}from"node:path";function xt(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let r=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return r?[r]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),t=At();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let r=(process.env.ORACLE_CONFIG_DIR||F(t,".config","oracle")).trim();return[e,F(r,"exec.env")].filter(Boolean)}return[e,F(t,".config","oracle","exec.env"),F(t,".config","mad-desk","exec.env")].filter(Boolean)}function fe(e,t,r){let n=e??process.env[t]??process.env[r];if(!String(n||"").trim())for(let o of xt())try{let i=Et(o,"utf8"),a=i.match(new RegExp(`^${t}=(.*)$`,"m"))||i.match(new RegExp(`^${r}=(.*)$`,"m"));if(a&&(n=a[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${t} required for attestation. Set it in the environment, or place ${t}=<value> in ~/.config/oracle/exec.env`);return n}var he=O(()=>{});var we=O(()=>{});import{createHash as yt,createHmac as St,timingSafeEqual as nn}from"node:crypto";function W(e){return Array.isArray(e)?`[${e.map(W).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${W(e[t])}`).join(",")}}`:JSON.stringify(e??null)}function It(e,{required:t=!1}={}){try{return fe(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(r){if(t)throw r;return null}}function Ee(e){let{signature:t,...r}=e;return r}function Ae(e,{secret:t}={}){let r=It(t);return r?{...e,signature:St("sha256",r).update(W(Ee(e))).digest("hex")}:e}function Ct(e){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<10||t.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return yt("sha256").update(Buffer.from(t.slice(2),"hex")).digest("hex")}function R(e,{chainId:t,venue:r,data:n,secret:o}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");if(Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(String(e.venue).toLowerCase()!==String(r||"").toLowerCase())throw new Error("auto-slippage guard venue mismatch");return Ae({...Ee(e),calldataHash:Ct(n)},{secret:o})}function Q(e,t=0){let r=Number(e);return Number.isFinite(r)?r:t}function vt(e){let t=e==null?ge:Number(e);if(!Number.isInteger(t)||t<0)throw new Error("auto-slippage cap must be a non-negative integer bps value");return Math.min(t,ge)}function S({liquidityUsd:e,priceChange5m:t=0,quoteAgeMs:r=0,crossChain:n=!1,requestedCapBps:o}={}){let i=Q(e,0),a=i>0?i>=25e4?5:i>=1e5?10:i>=5e4?20:i>=1e4?40:70:n?30:10,s=Math.min(60,Math.abs(Q(t,0))*2),c=Math.min(40,Math.floor(Math.max(0,Q(r,0))/5e3)*5),p=Math.max(25,Math.ceil(20+a+s+c)),d=vt(o);return{mode:"auto",requiredBps:p,selectedBps:Math.min(p,d),capBps:d,executable:p<=d}}function kt({chainId:e,venue:t,quoteAmountOut:r,liquidityUsd:n,priceChange5m:o=0,quoteAgeMs:i=0,crossChain:a=!1,requestedCapBps:s,quotedAtMs:c=Date.now(),ttlMs:p=be,secret:d}={}){let l=BigInt(r??0);if(l<=0n)throw new Error("auto-slippage guard requires positive quoteAmountOut");let u=S({liquidityUsd:n,priceChange5m:o,quoteAgeMs:i,crossChain:a,requestedCapBps:s});if(!u.executable)throw new Error(`auto-slippage requires ${u.requiredBps} bps above hard/requested cap ${u.capBps}; route blocked`);let m=Number(c);if(!Number.isFinite(m))throw new Error("auto-slippage: quotedAtMs must be a finite number");let f=Math.min(3e4,Math.max(1e3,Number(p)||be)),h=l*BigInt(1e4-u.selectedBps),w=h/10000n;if(h%10000n!==0n&&(w+=1n),w>l&&(w=l),l>0n&&w<=0n)throw new Error(`auto-slippage: quote ${l} is too small to express a ${u.selectedBps} bps floor without rounding to zero`);let g=Number((l-w)*10000n/(l===0n?1n:l));if(g>u.capBps)throw new Error(`auto-slippage: realised floor implies ${g} bps, above cap ${u.capBps} \u2014 refusing to issue a guard weaker than advertised`);return Ae({mode:"auto",chainId:Number(e),venue:String(t||"unknown"),quoteAmountOut:l.toString(),minAmountOut:w.toString(),requiredBps:u.requiredBps,selectedBps:u.selectedBps,capBps:u.capBps,quotedAtMs:m,expiresAtMs:m+f},{secret:d})}function E(e,{chainId:t,venue:r,amountOut:n,liquidityUsd:o,priceChange5m:i,crossChain:a,requestedCapBps:s,quotedAtMs:c=Date.now(),ttlMs:p}={}){let d=kt({chainId:t,venue:r,quoteAmountOut:n,liquidityUsd:o,priceChange5m:i,crossChain:a,requestedCapBps:s,quotedAtMs:c,ttlMs:p});return{...e,autoSlippage:d,amountOutMinimum:d.minAmountOut}}var ge,be,I=O(()=>{he();we();ge=100,be=2e4});function xe(e){let t=String(e||"").trim();return/^0x[0-9a-fA-F]{40}$/.test(t)?t:T}var T,U=O(()=>{T="0x000000000000000000000000000000000000dEaD"});import{createHash as _t,createHmac as Ot,timingSafeEqual as ln}from"node:crypto";function J(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(J).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${J(e[r])}`).join(",")}}`}function ye(e){let t=String(e?.ORACLE_STAMP_HMAC_SECRET||"").trim();return t.length>=16?t:""}function Se(e=process.env){return ye(process.env)||ye(e)}function Nt(e){let{oraclePrepared:t,prepareHash:r,prepareMac:n,note:o,...i}=e||{};return i}function Bt(e){let t=Nt(e);return _t("sha256").update(J(t)).digest("hex")}function Lt(e,t=Se()){return t?Ot("sha256",t).update(String(e)).digest("hex"):""}function C(e,{provider:t,kind:r,env:n=process.env}={}){if(!e||typeof e!="object")throw new Error("stampPrepared: payload object required");let o={...e,provider:e.provider||t,kind:e.kind||r,requiresUserSignature:e.requiresUserSignature!==!1,signingReady:!1,broadcastReady:!1,executionReady:!1};if(!o.provider)throw new Error("stampPrepared: provider required");if(!o.kind)throw new Error("stampPrepared: kind required");let i=Date.now(),a=i+Tt,c={...o,preparedAt:i,expiresAt:a,prepareVersion:Rt},p=Bt(c),d=Se(n),l=d?Lt(p,d):void 0,u={...c,oraclePrepared:!0,prepareHash:p};return l&&(u.prepareMac=l),u}var Rt,Tt,pn,v=O(()=>{Rt=2,Tt=300*1e3,pn=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});var re={};it(re,{ACROSS_API:()=>We,HOP_API:()=>Je,RELAY_API:()=>Ze,acrossHealth:()=>Pr,acrossSuggestedFees:()=>et,hopHealth:()=>$r,hopQuote:()=>tt,relayHealth:()=>Dr,relayPrepare:()=>Fr,relayQuote:()=>te});async function Pr(e={}){try{return{ok:!0,estimatedFillTimeSec:(await et({token:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",destinationToken:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",originChainId:1,destinationChainId:42161,amount:"1000000000000000"},e)).estimatedFillTimeSec}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function et(e={},t={}){let{token:r,destinationToken:n=r,originChainId:o,destinationChainId:i,amount:a}=e;if(!r||o==null||i==null||!a)throw new Error("acrossSuggestedFees requires token, originChainId, destinationChainId, amount");let s=new URLSearchParams({token:r,destinationToken:n,originChainId:String(o),destinationChainId:String(i),amount:String(a)}),c=(t.baseUrl||process.env.ACROSS_API_URL||We).replace(/\/$/,"");return b(`${c}/suggested-fees?${s}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3})}async function $r(e={}){try{let t=await tt({amount:"1000000000000000",token:"ETH",fromChain:"ethereum",toChain:"arbitrum",slippage:.5},e);return{ok:!0,estimatedRecieved:t.estimatedRecieved||t.estimatedReceived}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function tt(e={},t={}){let{amount:r,token:n="ETH",fromChain:o="ethereum",toChain:i="arbitrum"}=e;if(!r)throw new Error("hopQuote requires amount");let a=e.slippage==null?void 0:Math.round(Number(e.slippage)*100),s=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:o!==i,requestedCapBps:e.maxSlippageBps??e.slippageBps??a});if(!s.executable)throw new Error(`hop: route requires ${s.requiredBps} bps above cap ${s.capBps}`);let c=new URLSearchParams({amount:String(r),token:n,fromChain:o,toChain:i,slippage:String(s.selectedBps/100)}),p=(t.baseUrl||process.env.HOP_API_URL||Je).replace(/\/$/,""),d=await b(`${p}/quote?${c}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),l=d?.estimatedRecieved||d?.estimatedReceived;return l?E(d,{chainId:Number(e.originChainId||e.chainId||Lr[o]||0),venue:d?.tx?.to||"hop",amountOut:l,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:o!==i,requestedCapBps:e.maxSlippageBps??e.slippageBps??a}):{...d,autoSlippagePolicy:s}}async function Dr(e={}){try{let t=await te({user:T,originChainId:1,destinationChainId:8453,originCurrency:"0x0000000000000000000000000000000000000000",destinationCurrency:"0x0000000000000000000000000000000000000000",amount:"1000000000000000",tradeType:"EXACT_INPUT"},e);return{ok:!0,hasSteps:Array.isArray(t.steps),stepCount:t.steps?.length||0}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function te(e={},t={}){let{user:r=T,originChainId:n,destinationChainId:o,originCurrency:i="0x0000000000000000000000000000000000000000",destinationCurrency:a="0x0000000000000000000000000000000000000000",amount:s,tradeType:c="EXACT_INPUT"}=e;if(n==null||o==null||!s)throw new Error("relayQuote requires originChainId, destinationChainId, amount");let p=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(o),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!p.executable)throw new Error(`relay: route requires ${p.requiredBps} bps above cap ${p.capBps}`);let d=(t.baseUrl||process.env.RELAY_API_URL||Ze).replace(/\/$/,""),l=await b(`${d}/quote`,{method:"POST",body:{user:r,originChainId:Number(n),destinationChainId:Number(o),originCurrency:i,destinationCurrency:a,amount:String(s),tradeType:c,slippageTolerance:String(p.selectedBps)},fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),u=l?.details?.currencyOut?.amount;return!u||!/^\d+$/.test(String(u))?{...l,autoSlippagePolicy:p}:E(l,{chainId:Number(n),venue:l?.steps?.[0]?.items?.[0]?.data?.to||"relay",amountOut:u,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(o),requestedCapBps:e.maxSlippageBps??e.slippageBps})}async function Fr(e={},t={}){let r=await te(e,t),n=Number(e.originChainId),o=(r.steps||[]).flatMap(s=>(s.items||[]).filter(c=>c?.data?.to&&c?.data?.data).map(c=>({stepId:s.id,...c.data})));if(!o.length)throw new Error("relay: quote returned no executable transaction items");let i=String(r?.autoSlippage?.venue||"").toLowerCase();if(o.some(s=>String(s.to).toLowerCase()!==i))throw new Error("relay: route includes a separate approval/transaction that is not yet safely bound");let a=o.map(s=>({chainId:n,from:s.from||e.user,to:s.to,data:s.data,value:s.value??"0x0",...s.gasLimit!=null||s.gas!=null?{gasLimit:s.gasLimit??s.gas}:{},slippageGuard:R(r.autoSlippage,{chainId:n,venue:s.to,data:s.data})}));return C({provider:"relay",calldataReady:!0,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,chainId:n,quote:r,autoSlippage:r.autoSlippage,transactions:a},{provider:"relay",kind:"relay-tx"})}var We,Je,Ze,Lr,ne=O(()=>{y();I();U();v();We="https://across.to/api",Je="https://api.hop.exchange/v1",Ze="https://api.relay.link",Lr={ethereum:1,optimism:10,bsc:56,polygon:137,arbitrum:42161,avalanche:43114,base:8453}});var Hr=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),qr=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),Vr=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var A=Object.freeze({FULL:"FULL",NO_GAS:"NO_GAS",FAILED:"FAILED"}),se={1:"coingecko:ethereum",10:"coingecko:ethereum",56:"coingecko:binancecoin",137:"coingecko:matic-network",8453:"coingecko:ethereum",42161:"coingecko:ethereum",43114:"coingecko:avalanche-2",999:"coingecko:ethereum"},$=e=>{try{return e==null||e===""?null:BigInt(String(e).split(".")[0])}catch{return null}};function ie(e){let{source:t,amountOut:r,minOut:n=null,gasUsd:o=null,feeUsd:i=null,estimatedGas:a=null,error:s=null,executionReady:c=!1,meta:p={}}=e||{};if(s||r==null)return{source:t,quality:A.FAILED,amountOut:null,error:s||"no amountOut returned"};let d=$(r);return d==null||d<=0n?{source:t,quality:A.FAILED,amountOut:null,error:"non-positive amountOut"}:{source:t,quality:o==null?A.NO_GAS:A.FULL,amountOut:d.toString(),minOut:$(n)?.toString()??null,gasUsd:o,feeUsd:i,estimatedGas:a==null?null:String(a),executionReady:c,meta:p}}async function ce(e,t,{divisor:r=1000n}={}){let n=$(t);if(n==null||n<=0n)return null;let o=n/r>0n?n/r:1n;if(o>=n)return null;let i,a;try{[i,a]=await Promise.all([e(o),e(n)])}catch{return null}let s=$(i),c=$(a);if(s==null||c==null||s<=0n)return null;let p=Number(s)/Number(o),d=Number(c)/Number(n);return!Number.isFinite(p)||!Number.isFinite(d)||p<=0?null:{impactPct:(1-d/p)*100,probeAmountIn:o.toString(),probeAmountOut:s.toString(),fullAmountOut:c.toString()}}function ue(e,t,{maxImpactPct:r=25}={}){let n=[],o=[],i=(e.routes??[]).filter(s=>{let c=t?.[s.source];return c?c.impactPct>r?(n.push({source:s.source,impactPct:Number(c.impactPct.toFixed(2)),reason:`price impact ${c.impactPct.toFixed(1)}% exceeds ${r}% ceiling -- the venue cannot absorb this size near the quoted price`}),!1):!0:(o.push(s.source),!0)}),a=[...e.warnings??[]];return n.length&&a.push(`dropped ${n.length} route(s) on price impact: `+n.map(s=>`${s.source} (${s.impactPct}%)`).join(", ")),o.length&&a.push(`price impact NOT measured for: ${o.join(", ")}. These are unproven against thin liquidity, not proven safe.`),{...e,routes:i,best:i[0]??null,impactRejected:n,impactUnmeasured:o,warnings:a}}function K(e,{destPriceUsd:t=null,destDecimals:r=null}={}){let n=e.filter(l=>l.quality!==A.FAILED),o=e.filter(l=>l.quality===A.FAILED),i=t!=null&&t>0&&r!=null&&r>=0,a=n.map(l=>{let u=BigInt(l.amountOut),m=0n,f=!1;if(i){let w=(l.gasUsd??0)+(l.feeUsd??0);if(w>0){let g=w/t*10**r;Number.isFinite(g)&&g>=0&&(m=BigInt(Math.floor(g)),f=!0)}else l.gasUsd===0&&(f=!0)}let h=u>m?u-m:0n;return{...l,grossOut:u.toString(),netOut:h.toString(),costInDest:m.toString(),costAccounted:f}});a.sort((l,u)=>BigInt(u.netOut)>BigInt(l.netOut)?1:-1);let s=a.filter(l=>!l.costAccounted).map(l=>l.source),c=[];i?s.length&&c.push(`gas not reported by: ${s.join(", ")}. These are ranked on gross output and may be overstated relative to gas-measured routes.`):c.push("destination price/decimals unavailable: ranked on GROSS output. Gas is not included, so a cheap-looking route may cost more to execute.");let p=null,d=null;if(a.length>=2&&a[0].costAccounted&&a[1].costAccounted){let l=BigInt(a[0].netOut),u=BigInt(a[1].netOut);u>0n&&(p=Number((l-u)*10000n/u),d=`${a[0].source} vs ${a[1].source}`)}return{best:a[0]??null,routes:a,failed:o,improvementBps:p,spreadBasis:d,rankedOn:i?"net-of-cost":"gross",warnings:c}}async function D(e,{timeoutMs:t=12e3}={}){let r=(o,i)=>Promise.race([o,new Promise((a,s)=>setTimeout(()=>s(new Error(`${i}: timeout`)),t))]);return(await Promise.allSettled(e.map(o=>r(Promise.resolve().then(o.run),o.source)))).map((o,i)=>{let a=e[i].source;return o.status==="rejected"?ie({source:a,error:String(o.reason?.message||o.reason)}):ie({source:a,...o.value})})}y();I();U();v();import{Contract as Pt,JsonRpcProvider as $t}from"ethers";var Dt="0x62FCFAf7573AD8B41a0FBF347AfEb85e06599A75",Ft=999,Ut="https://rpc.hyperliquid.xyz/evm",Mt=["function balanceOf(address owner) view returns (uint256)"],Ht=/^0x[a-fA-F0-9]{40}$/;function qt(e){return Ht.test(String(e||""))}async function Ie(e,{contract:t=Dt,rpc:r=Ut,chainId:n=Ft,balanceOf:o}={}){if(!qt(e))throw new Error("invalid-address");if(o)return BigInt(await o(e));let i=new $t(r,n,{staticNetwork:!0}),a=new Pt(t,Mt,i);return BigInt(await a.balanceOf(e))}var Vt=100,jt=5,Ce=Object.freeze({swap:5,bridge:15,perps:0,nft:0});function zt(e){let t=String(e||"swap").toLowerCase();return Object.prototype.hasOwnProperty.call(Ce,t)?Ce[t]:jt}var Gt="ORACLE_INTEGRATOR_FEE_BPS",Yt="ORACLE_INTEGRATOR_FEE_RECIPIENT",Kt="ORACLE_INTEGRATOR_ID",Xt="oracle";function Qt(e,{fallback:t=0}={}){if(e==null)return t;if(String(e).trim()==="")return 0;let r=Number(e);return!Number.isFinite(r)||r<=0?0:Math.min(Math.floor(r),Vt)}function Wt({env:e=process.env,action:t="swap"}={}){let r=String(e[Yt]||"").trim(),n=zt(t),o=Qt(e[Gt],{fallback:r?n:0}),i=Math.min(o,n),a=String(e[Kt]||Xt).trim();return i?/^0x[a-fA-F0-9]{40}$/.test(r)?{bps:i,recipient:r,integrator:a,action:t,applies:!0,reason:"configured"}:{bps:0,recipient:"",integrator:a,action:t,applies:!1,reason:"no-recipient"}:{bps:0,recipient:"",integrator:a,action:t,applies:!1,reason:"not-configured"}}async function M({wallet:e,env:t=process.env,action:r="swap",holderCheck:n={}}={}){let o=Wt({env:t,action:r}),i=String(e||"").trim().toLowerCase();if(!/^0x[a-f0-9]{40}$/.test(i))return{...o,holderVerificationStatus:"wallet-required"};try{return BigInt(await Ie(i,n))>0n?{...o,bps:0,applies:!1,reason:"locals-only-holder",holderVerificationStatus:"holder"}:{...o,holderVerificationStatus:"non-holder"}}catch{return{...o,holderVerificationStatus:"unavailable"}}}function ve(e){return e?.applies?{integrator:e.integrator,fee:String(e.bps/1e4)}:{}}function ke(e){return e?.applies?{partner:e.integrator,partnerFeeBps:String(e.bps),partnerAddress:e.recipient}:{}}var Jt="https://li.quest/v1";function Zt(e={}){return(e.baseUrl||process.env.LIFI_API_URL||Jt).replace(/\/$/,"")}var er="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";async function Z(e={},t={}){let{fromChain:r,toChain:n=r,fromToken:o=er,toToken:i,fromAmount:a,fromAddress:s=T}=e;if(r==null||!i||!a)throw new Error("lifiQuote requires fromChain, toToken, fromAmount");let c=new URLSearchParams({fromChain:String(r),toChain:String(n),fromToken:o,toToken:i,fromAmount:String(a),fromAddress:s}),p=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!p.executable)throw new Error(`lifi: route requires ${p.requiredBps} bps above cap ${p.capBps}`);c.set("slippage",String(p.selectedBps/1e4));let d=await M({wallet:e.fromAddress,env:t.env,action:e.feeAction||"swap",holderCheck:t.holderCheck});for(let[w,g]of Object.entries(ve(d)))c.set(w,g);let l=await b(`${Zt(t)}/quote?${c}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),u=l?.estimate?.toAmount||l?.toAmount;if(!u)return{...l,autoSlippagePolicy:p,oracleFee:d};let m=l?.transactionRequest?.to||l?.estimate?.approvalAddress||"lifi",f=E(l,{chainId:Number(r),venue:m,amountOut:u,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps}),h=l?.estimate?.toAmountMin||l?.toAmountMin;if(h!=null&&BigInt(h)<BigInt(f.amountOutMinimum))throw new Error("lifi: provider transaction is under-protected versus bounded auto-slippage floor");return{...f,oracleFee:d}}y();I();v();var tr="https://api.paraswap.io",rr=(e={})=>(e.baseUrl||process.env.PARASWAP_API_URL||tr).replace(/\/$/,"");function _e(e,t){let r=String(e||"");if(!/^0x[0-9a-fA-F]{40}$/.test(r))throw new Error(`${t} must be a 20-byte token address`);return r.toLowerCase()}async function Oe(e={},t={}){let r=Number(e.chainId||e.network||1);if(e.amount==null)throw new Error("amount required");let n=new URLSearchParams({srcToken:_e(e.srcToken,"srcToken"),destToken:_e(e.destToken,"destToken"),amount:String(e.amount),srcDecimals:String(Number(e.srcDecimals)),destDecimals:String(Number(e.destDecimals)),side:String(e.side||"SELL").toUpperCase(),network:String(r),version:String(e.version||"6.2")});e.includeDEXS&&n.set("includeDEXS",String(e.includeDEXS)),e.excludeDEXS&&n.set("excludeDEXS",String(e.excludeDEXS));let o=await M({wallet:e.userAddress||e.fromAddress,env:t.env,action:e.feeAction||"swap",holderCheck:t.holderCheck});for(let[s,c]of Object.entries(ke(o)))n.set(s,c);let i=await b(`${rr(t)}/prices?${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),a=i?.priceRoute?.destAmount;return a?{...E(i,{chainId:r,venue:i?.priceRoute?.contractAddress||"paraswap-quote",amountOut:a,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,quoteAgeMs:0,requestedCapBps:e.maxSlippageBps??e.slippageBps}),executionReady:!1,executionBlocker:"call prepare to bind the price route to a validated transaction",oracleFee:o}:{...i,executionReady:!1,oracleFee:o}}y();I();var Re="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function H({provider:e,defaultUrl:t,hosts:r=[],url:n,strict:o=!1}){let a=(String(n??"").trim()||String(t)).replace(/\/$/,"");if(a===String(t).replace(/\/$/,""))return{baseUrl:a,trusted:!0,host:Te(t)};let s;try{s=new URL(a)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(s.protocol!=="http:"&&s.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let c=s.host;if(!c)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Te(t),...r]).has(c)){let d=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(c);return s.protocol==="http:"&&!d?{baseUrl:a,trusted:!1,host:c,reason:"plaintext http downgrade"}:{baseUrl:a,trusted:!0,host:c}}if(String(process.env[Re]||"")==="1")return{baseUrl:a,trusted:!1,host:c};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${c} (set ${Re}=1 to permit it)`);return{baseUrl:a,trusted:!1,host:c}}function Te(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function q(e,t,r){let n={...e};if(!r)return n;for(let[o,i]of Object.entries(t||{}))i&&(n[o]=i);return n}v();var nr="https://api.0x.org";function Ne(e={}){return H({provider:"zerox",defaultUrl:nr,hosts:["api.0x.org"],url:e.baseUrl||process.env.ZEROX_API_URL})}function or(e={}){return Ne(e).baseUrl}function Be(e={}){return e.apiKey||process.env.ZEROX_API_KEY||process.env.OX_API_KEY||process.env["0X_API_KEY"]||""}function ar(e={}){return q({"0x-version":"v2",accept:"application/json"},{"0x-api-key":Be(e)},Ne(e).trusted)}async function Le(e={},t={}){if(!Be(t))throw new Error("ZEROX_API_KEY required for 0x");let{chainId:r=8453,sellToken:n,buyToken:o,sellAmount:i,taker:a}=e;if(!n||!o||!i)throw new Error("zeroxQuote requires sellToken, buyToken, sellAmount");let s=S({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!s.executable)throw new Error(`0x: route requires ${s.requiredBps} bps above cap ${s.capBps}`);let c=new URLSearchParams({chainId:String(r),sellToken:n,buyToken:o,sellAmount:String(i),slippageBps:String(s.selectedBps)});a&&c.set("taker",a);let p=await b(`${or(t)}/swap/allowance-holder/quote?${c}`,{headers:ar(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),d=p?.buyAmount||p?.grossBuyAmount;return d?E(p,{chainId:r,venue:p?.transaction?.to||p?.to||"0x",amountOut:d,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps}):{...p,autoSlippagePolicy:s}}y();I();v();var ir="https://api.1inch.dev/swap/v6.0";function Pe(e={}){return H({provider:"oneinch",defaultUrl:ir,hosts:["api.1inch.dev"],url:e.baseUrl||process.env.ONEINCH_API_URL})}function sr(e={}){return Pe(e).baseUrl}function $e(e={}){return e.apiKey||process.env.ONEINCH_API_KEY||process.env.ONE_INCH_API_KEY||""}function cr(e={}){let t=$e(e);return q({accept:"application/json"},{Authorization:t?`Bearer ${t}`:""},Pe(e).trusted)}async function De(e={},t={}){if(!$e(t))throw new Error("ONEINCH_API_KEY required for 1inch");let r=Number(e.chainId??1),{src:n,dst:o,amount:i}=e;if(!n||!o||!i)throw new Error("oneinchQuote requires src, dst, amount");let a=new URLSearchParams({src:n,dst:o,amount:String(i)}),s=await b(`${sr(t)}/${r}/quote?${a}`,{headers:cr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3});return s?.dstAmount?E(s,{chainId:r,venue:"1inch-quote",amountOut:s.dstAmount,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps}):s}y();I();import{TypedDataEncoder as zn,getAddress as Gn,isAddress as Yn}from"ethers";var Mn=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"}),Hn=Object.freeze({"evm:prepare":["ORACLE_EVM_ADDRESS","EVM_KEYSTORE_FILE","ORACLE_SIGNER_ADDRESS"],"evm:execute":["EVM_KEYSTORE_FILE","ORACLE_KEYSTORE_FILE"],"btc:execute":["BTC_WIF_FILE","ORACLE_BTC_WIF_FILE"],"solana:execute":["SOLANA_KEYPAIR_FILE","ORACLE_SOLANA_KEYPAIR_FILE"],"nft:buy":[],"nft:mint":[],"cow:submit":[]});U();v();var ur={1:"https://api.cow.fi/mainnet/api/v1",100:"https://api.cow.fi/xdai/api/v1",42161:"https://api.cow.fi/arbitrum_one/api/v1",8453:"https://api.cow.fi/base/api/v1"},eo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),to=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),Fe={1:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",8453:"0x4200000000000000000000000000000000000006",42161:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1"},lr={1:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",8453:"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",42161:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831"},ro=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),no=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});function pr(e,t={}){if(t.baseUrl)return t.baseUrl.replace(/\/$/,"");let r=ur[Number(e)];if(!r)throw new Error(`cowswap: unsupported chainId ${e}`);return r}async function Ue(e={},t={}){let r=Number(e.chainId??1),n=xe(e.from||e.owner),o=e.sellToken||Fe[r],i=e.buyToken||lr[r],a=String(e.sellAmountBeforeFee||e.sellAmount||"0");if(!o||!i||a==="0")throw new Error("cowQuote requires sellToken, buyToken, sellAmountBeforeFee");if(/eeeeeeee|native|^eth$/i.test(o)&&(o=Fe[r],!o))throw new Error("no WETH mapping for chain");let s={sellToken:o,buyToken:i,from:n,receiver:e.receiver||n,sellAmountBeforeFee:a,kind:e.kind||"sell",signingScheme:e.signingScheme||"eip1271"},c=await b(`${pr(r,t)}/quote`,{method:"POST",body:s,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),p=c?.quote?.buyAmount||c?.buyAmount;return p?E(c,{chainId:r,venue:"cowswap-order",amountOut:p,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps}):c}import{Interface as ze,getAddress as j,isAddress as br}from"ethers";y();var Me={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},dr=new Map(Object.values(Me).map(e=>[e.chainId,e]));function He(e){return dr.get(Number(e))||null}function qe(e,t=process.env){let r=He(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}import{Interface as mr,getAddress as lo}from"ethers";var po=new mr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var fr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function hr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=qe(e,r);return n||fr[Number(e)]||null}var wr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function gr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!wr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}async function V(e,t,r=[],n={}){let o=String(t||"");gr(o);let i=hr(e,n);if(!i)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let s=await b(i,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:r},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(s?.error){let c=new Error(s.error.message||JSON.stringify(s.error));throw c.code=s.error.code,c}return s.result}I();v();var N={1:{name:"ethereum",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",usdc:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},8453:{name:"base",quoter:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",router:"0x2626664c2603336E57B271c5C0b26F421741e481",weth:"0x4200000000000000000000000000000000000006",usdc:"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"},42161:{name:"arbitrum",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",usdc:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831"},4663:{name:"robinhood",quoter:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",router:"0xcaf681a66d020601342297493863e78c959e5cb2",weth:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",usdc:"0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168"},999:{name:"hyperevm",weth:"0x5555555555555555555555555555555555555555",usdc:"0xB8CE59FC3717ada4C02eaDF9682A9e934F625ebb"},10:{name:"optimism",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0x4200000000000000000000000000000000000006",usdc:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85"},56:{name:"bsc",quoter:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",router:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",weth:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",usdc:"0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d"},137:{name:"polygon",quoter:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",router:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",weth:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",usdc:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359"},43114:{name:"avalanche",quoter:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",router:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",weth:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",usdc:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"}},Er=[100,500,3e3,1e4],Ve=new ze(["function quoteExactInputSingle((address tokenIn, address tokenOut, uint256 amountIn, uint24 fee, uint160 sqrtPriceLimitX96) params) returns (uint256 amountOut, uint160 sqrtPriceX96After, uint32 initializedTicksCrossed, uint256 gasEstimate)","function quoteExactInput(bytes path, uint256 amountIn) returns (uint256 amountOut, uint160[] sqrtPriceX96AfterList, uint32[] initializedTicksCrossedList, uint256 gasEstimate)"]),bo=new ze(["function exactInputSingle((address tokenIn,address tokenOut,uint24 fee,address recipient,uint256 amountIn,uint256 amountOutMinimum,uint160 sqrtPriceLimitX96) params) payable returns (uint256 amountOut)","function multicall(uint256 deadline,bytes[] data) payable returns (bytes[] results)"]),Ar="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE",xr="0x0000000000000000000000000000000000000000",ee=[100,500,2500,1e4],yr={56:{pancakeswap:{name:"pancakeswap",quoter:"0xB048Bbc1Ee6b733FFfCFb9e9CeF7375518e25997",router:"0x13f4EA83D0bd40E75C8222255bc855a974568Dd4",feeTiers:ee}},8453:{pancakeswap:{name:"pancakeswap",quoter:"0xB048Bbc1Ee6b733FFfCFb9e9CeF7375518e25997",router:"0x13f4EA83D0bd40E75C8222255bc855a974568Dd4",feeTiers:ee}},42161:{pancakeswap:{name:"pancakeswap",quoter:"0xB048Bbc1Ee6b733FFfCFb9e9CeF7375518e25997",router:"0x13f4EA83D0bd40E75C8222255bc855a974568Dd4",feeTiers:ee}},999:{hyperswap:{name:"hyperswap",quoter:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",router:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D"}}};function Sr(e,t){let r=Number(e),n=N[r];if(!n)throw new Error(`uniswap-v3: unsupported chainId ${e} (supported: ${Object.keys(N).join(", ")})`);let o=yr[r]||{};if(!t){if(!n.quoter||!n.router){let c=Object.keys(o).join(", ")||"none registered";throw new Error(`uniswap-v3: chain ${r} (${n.name}) has no canonical Uniswap v3 deployment -- name a venue explicitly (known: ${c})`)}return{chainId:r,venue:n.name,...n}}let i=String(t).toLowerCase();if(i===n.name&&n.quoter&&n.router)return{chainId:r,venue:n.name,...n};let a=o,s=a[i];if(!s){let c=[...n.quoter&&n.router?[n.name]:[],...Object.keys(a)].join(", ");throw new Error(`uniswap-v3: unknown venue "${t}" on chain ${r} (known: ${c})`)}return{chainId:r,venue:i,...n,quoter:s.quoter,router:s.router,feeTiers:s.feeTiers||null}}function je(e,t){let r=N[Number(t)];if(!e||e===Ar||e===xr||/^eth$/i.test(String(e)))return j(r.weth);let n=String(e);if(/^weth$/i.test(n))return j(r.weth);if(/^usdc$/i.test(n))return j(r.usdc);if(!br(n))throw new Error(`invalid token address: ${e}`);return j(n)}async function Ge(e={},t={}){let{chainId:r,quoter:n,router:o,feeTiers:i}=Sr(e.chainId??8453,e.venue),a=je(e.tokenIn||"WETH",r),s=je(e.tokenOut||N[r].usdc,r),c=BigInt(e.amountIn??0);if(c<=0n)throw new Error("amountIn required (raw base units)");let p=i&&i.length?i:Er,d=e.fee!=null?[Number(e.fee)]:e.tryFees===!1?[p[Math.min(2,p.length-1)]]:[...p],l=[],u=null;for(let m of d){let f=Ve.encodeFunctionData("quoteExactInputSingle",[{tokenIn:a,tokenOut:s,amountIn:c,fee:m,sqrtPriceLimitX96:0n}]);try{let h=await V(r,"eth_call",[{to:n,data:f},"latest"],t);if(!h||h==="0x"){l.push({fee:m,ok:!1,error:"empty result"});continue}let w=Ve.decodeFunctionResult("quoteExactInputSingle",h),g={fee:m,ok:!0,amountOut:w[0].toString(),sqrtPriceX96After:w[1].toString(),initializedTicksCrossed:Number(w[2]),gasEstimate:w[3].toString()};l.push(g),(!u||BigInt(g.amountOut)>BigInt(u.amountOut))&&(u=g)}catch(h){l.push({fee:m,ok:!1,error:String(h.message||h).slice(0,160)})}}if(!u){let m=l.map(f=>`${f.fee}:${f.error||"fail"}`).join("; ");throw new Error(`uniswap-v3 quote failed chain=${r}: ${m}`)}return E({venue:"uniswap-v3",chainId:r,chain:N[r].name,quoter:n,tokenIn:a,tokenOut:s,amountIn:c.toString(),fee:u.fee,amountOut:u.amountOut,gasEstimate:u.gasEstimate,sqrtPriceX96After:u.sqrtPriceX96After,initializedTicksCrossed:u.initializedTicksCrossed,triedFees:l,best:!0},{chainId:r,venue:o,amountOut:u.amountOut,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps})}import{AbiCoder as Ir,Interface as Xe,getAddress as x,isAddress as z,keccak256 as Cr}from"ethers";I();v();var vr=Ir.defaultAbiCoder(),L="0x0000000000000000000000000000000000000000",B={1:{name:"ethereum",poolManager:"0x000000000004444c5dc75cB358380D2e3dE08A90",quoter:"0x52f0e24d1c21c8a0cb1e5a5dd6198556bd9e1203",stateView:"0x7ffe42c4a5deea5b0fec41c94c136cf115597227",universalRouter:"0x66a9893cc07d91d95644aedd05d03f95e1dba8af",weth:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",usdc:"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48"},10:{name:"optimism",poolManager:"0x9a13f98cb987694c9f086b1f5eb990eea8264ec3",quoter:"0x1f3131a13296fb91c90870043742c3cdbff1a8d7",stateView:"0xc18a3169788f4f75a170290584eca6395c75ecdb",universalRouter:"0x851116d9223fabed8e56c0e6b8ad0c31d98b3507",weth:"0x4200000000000000000000000000000000000006",usdc:"0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85"},56:{name:"bsc",poolManager:"0x28e2ea090877bf75740558f6bfb36a5ffee9e9df",quoter:"0x9f75dd27d6664c475b90e105573e550ff69437b0",stateView:"0xd13dd3d6e93f276fafc9db9e6bb47c1180aee0c4",universalRouter:"0x1906c1d672b88cd1b9ac7593301ca990f94eae07",weth:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",usdc:"0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d"},137:{name:"polygon",poolManager:"0x67366782805870060151383f4bbff9dab53e5cd6",quoter:"0xb3d5c3dfc3a7aebff71895a7191796bffc2c81b9",stateView:"0x5ea1bd7974c8a611cbab0bdcafcb1d9cc9b3ba5a",universalRouter:"0x1095692a6237d83c6a72f3f5efedb9a670c49223",weth:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",usdc:"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359"},8453:{name:"base",poolManager:"0x498581fF718922c3f8e6A244956aF099B2652b2b",quoter:"0x0d5e0f971ed27fbff6c2837bf31316121532048d",stateView:"0xa3c0c9b65bad0b08107aa264b0f3db444b867a71",universalRouter:"0x6ff5693b99212da76ad316178a184ab56d299b43",weth:"0x4200000000000000000000000000000000000006",usdc:"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"},42161:{name:"arbitrum",poolManager:"0x360e68faccca8ca495c1b759fd9eee466db9fb32",quoter:"0x3972c00f7ed4885e145823eb7c655375d275a1c5",stateView:"0x76fd297e2d437cd7f76d50f01afe6160f86e9990",universalRouter:"0xa51afafe0263b40edaef0df8781ea9aa03e381a3",weth:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",usdc:"0xaf88d065e77c8cC2239327C5EDb3A432268e5831"},43114:{name:"avalanche",poolManager:"0x06380c0e0912312b5150364b9dc4542ba0dbbc85",quoter:"0xbe40675bb704506a3c2ccfb762dcfd1e979845c2",stateView:"0xc3c9e198c735a4b97e3e683f391ccbdd60b69286",universalRouter:"0x94b75331ae8d42c1b61065089b7d48fe14aa73b7",weth:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",usdc:"0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"},4663:{name:"robinhood",poolManager:"0x8366a39cc670b4001a1121b8f6a443a643e40951",quoter:"0x8dc178efb8111bb0973dd9d722ebeff267c98f94",stateView:"0xf3334192d15450cdd385c8b70e03f9a6bd9e673b",universalRouter:"0x8876789976dEcBfCbBbe364623C63652db8C0904",weth:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",usdc:"0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168"}},kr=[{fee:100,tickSpacing:1},{fee:500,tickSpacing:10},{fee:3e3,tickSpacing:60},{fee:1e4,tickSpacing:200},{fee:25e3,tickSpacing:8}],Ye=new Xe(["function quoteExactInputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountOut, uint256 gasEstimate)"]),Io=new Xe(["function execute(bytes commands,bytes[] inputs,uint256 deadline) payable"]);var _r="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";function Or(e){let t=Number(e),r=B[t];if(!r)throw new Error(`uniswap-v4: unsupported chainId ${e} (supported: ${Object.keys(B).join(", ")})`);return{chainId:t,...r}}function Ke(e,t){let r=B[Number(t)];if(!e||e===_r||e===L||/^eth$/i.test(String(e)))return x(r.weth);let n=String(e);if(/^weth$/i.test(n))return x(r.weth);if(/^usdc$/i.test(n)||/^usdg$/i.test(n))return x(r.usdc);if(!z(n))throw new Error(`invalid token address: ${e}`);return x(n)}function Rr({currency0:e,currency1:t,fee:r,tickSpacing:n,hooks:o=L}){let i=x(e),a=x(t);if(i.toLowerCase()===a.toLowerCase())throw new Error("poolKey currencies must differ");let[s,c]=i.toLowerCase()<a.toLowerCase()?[i,a]:[a,i],p=o&&z(o)?x(o):L;return Cr(vr.encode(["address","address","uint24","int24","address"],[s,c,Number(r),Number(n),p]))}function Tr({tokenIn:e,tokenOut:t,fee:r,tickSpacing:n,hooks:o=L}){let i=x(e),a=x(t),[s,c]=i.toLowerCase()<a.toLowerCase()?[i,a]:[a,i],p=i.toLowerCase()===s.toLowerCase();return{poolKey:{currency0:s,currency1:c,fee:Number(r),tickSpacing:Number(n),hooks:o&&z(o)?x(o):L},zeroForOne:p}}async function Qe(e={},t={}){let{chainId:r,quoter:n,poolManager:o,universalRouter:i}=Or(e.chainId??8453),a=Ke(e.tokenIn||"WETH",r),s=Ke(e.tokenOut||B[r].usdc,r),c=BigInt(e.amountIn??0);if(c<=0n)throw new Error("amountIn required (raw base units)");if(c>0xffffffffffffffffffffffffffffffffn)throw new Error("amountIn exceeds uint128");let p=e.fee!=null&&e.tickSpacing!=null?[{fee:Number(e.fee),tickSpacing:Number(e.tickSpacing)}]:e.tryTiers===!1?[{fee:500,tickSpacing:10}]:[...kr],d=e.hooks||L,l=[],u=null;for(let m of p){let{poolKey:f,zeroForOne:h}=Tr({tokenIn:a,tokenOut:s,fee:m.fee,tickSpacing:m.tickSpacing,hooks:d}),w=Ye.encodeFunctionData("quoteExactInputSingle",[{poolKey:f,zeroForOne:h,exactAmount:c,hookData:"0x"}]);try{let g=await V(r,"eth_call",[{to:n,data:w},"latest"],t);if(!g||g==="0x"){l.push({...m,ok:!1,error:"empty result"});continue}let P=Ye.decodeFunctionResult("quoteExactInputSingle",g),_={fee:m.fee,tickSpacing:m.tickSpacing,ok:!0,amountOut:P[0].toString(),gasEstimate:P[1].toString(),poolKey:f,zeroForOne:h,poolId:Rr({...f})};l.push(_),(!u||BigInt(_.amountOut)>BigInt(u.amountOut))&&(u=_)}catch(g){l.push({...m,ok:!1,error:String(g.message||g).slice(0,160)})}}if(!u){let m=l.map(f=>`${f.fee}/${f.tickSpacing}:${f.error||"fail"}`).join("; ");throw new Error(`uniswap-v4 quote failed chain=${r}: ${m}`)}return E({venue:"uniswap-v4",chainId:r,chain:B[r].name,poolManager:o,quoter:n,universalRouter:i||null,tokenIn:a,tokenOut:s,amountIn:c.toString(),fee:u.fee,tickSpacing:u.tickSpacing,hooks:u.poolKey.hooks,poolId:u.poolId,zeroForOne:u.zeroForOne,amountOut:u.amountOut,gasEstimate:u.gasEstimate,triedTiers:l,best:!0,executionReady:!1,prepareReady:typeof e.recipient=="string"&&z(e.recipient)&&e.slippageBps!=null},{chainId:r,venue:i||n,amountOut:u.amountOut,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,requestedCapBps:e.maxSlippageBps??e.slippageBps})}y();var Nr="https://coins.llama.fi";function Br(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||Nr).replace(/\/$/,"")}async function G(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return b(`${Br(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}var k=e=>{let t=Number(e);return Number.isFinite(t)?t:null};function Y(e){if(!Array.isArray(e))return null;let t=0,r=!1;for(let n of e){let o=k(n?.amountUSD);o!=null&&(t+=o,r=!0)}return r?t:null}async function rt(e,t={}){let r=se[Number(e)];if(!r)return null;try{let n=await G([r],t);return k(n?.coins?.[r]?.price)}catch{return null}}function oe({chainId:e,tokenIn:t,tokenOut:r,amountIn:n,taker:o,slippageBps:i,decimalsIn:a,decimalsOut:s,nativePriceUsd:c=null,destDecimalsPromise:p=null,opts:d={}}){let l=[];return l.push({source:"lifi",run:async()=>{let u=await Z({fromChain:e,toChain:e,fromToken:t,toToken:r,fromAmount:n},d),m=u?.estimate??u?.[0]?.estimate;return{amountOut:m?.toAmount,minOut:m?.toAmountMin,gasUsd:Y(m?.gasCosts),feeUsd:Y(m?.feeCosts),meta:{tool:u?.tool??u?.toolDetails?.name}}}}),a!=null&&l.push({source:"paraswap",run:async()=>{let u=s??(await Promise.resolve(p))?.decimals;if(u==null)throw new Error("paraswap needs destination decimals; none supplied or resolvable");let f=(await Oe({chainId:e,srcToken:t,destToken:r,amount:n,srcDecimals:a,destDecimals:u},d))?.priceRoute;return{amountOut:f?.destAmount,gasUsd:k(f?.gasCostUSD),meta:{bestRoute:f?.bestRoute?.[0]?.swaps?.[0]?.swapExchanges?.[0]?.exchange}}}}),process.env.ZEROX_API_KEY&&l.push({source:"0x",run:async()=>{let u=await Le({chainId:e,sellToken:t,buyToken:r,sellAmount:n,taker:o},d),m=null,f=u?.totalNetworkFee,h=await Promise.resolve(c);return f!=null&&h&&(m=Number(f)/1e18*h),{amountOut:u?.buyAmount,minOut:u?.minBuyAmount,gasUsd:m,meta:{source:u?.route?.fills?.[0]?.source}}}}),process.env.ONEINCH_API_KEY&&l.push({source:"1inch",run:async()=>{let u=await De({chainId:e,src:t,dst:r,amount:n},d),m=null;return u?.gas!=null&&c&&(m=null),{amountOut:u?.dstAmount,gasUsd:m,meta:{gasUnits:u?.gas}}}}),l.push({source:"cow",run:async()=>{let u=await Ue({chainId:e,sellToken:t,buyToken:r,sellAmountBeforeFee:String(n),from:o},d),m=u?.quote??u,f=m?.feeAmount;return{amountOut:m?.buyAmount,gasUsd:0,meta:{intent:!0,feeAmountInSellToken:f,settlement:"solver-executed"}}}}),N[Number(e)]&&l.push({source:"uniswap-v3",run:async()=>{let u=await Ge({chainId:e,tokenIn:t,tokenOut:r,amountIn:n},d);return{amountOut:u?.amountOut,minOut:u?.minOut??u?.amountOutMinimum??null,gasUsd:null,meta:{onchain:!0,fee:u?.fee,gasUnits:u?.gasEstimate,quoter:u?.quoter}}}}),B[Number(e)]&&l.push({source:"uniswap-v4",run:async()=>{let u=await Qe({chainId:e,tokenIn:t,tokenOut:r,amountIn:n,recipient:o,slippageBps:i},d);return{amountOut:u?.amountOut,minOut:u?.minOut??u?.amountOutMinimum??null,gasUsd:null,meta:{onchain:!0,venue:"uniswap-v4",fee:u?.fee,tickSpacing:u?.tickSpacing,poolId:u?.poolId,hooks:u?.hooks,gasUnits:u?.gasEstimate,quoter:u?.quoter,poolManager:u?.poolManager,prepareReady:u?.prepareReady===!0,executionReady:!1}}}}),l}function nt({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:o,taker:i,opts:a={}}){let s=[];return s.push({source:"lifi",run:async()=>{let c=await Z({fromChain:e,toChain:t,fromToken:r,toToken:n,fromAmount:o},a),p=c?.estimate??c?.[0]?.estimate;return{amountOut:p?.toAmount,minOut:p?.toAmountMin,gasUsd:Y(p?.gasCosts),feeUsd:Y(p?.feeCosts),meta:{tool:c?.tool??c?.toolDetails?.name,durationSeconds:k(p?.executionDuration)}}}}),s.push({source:"relay",run:async()=>{let{relayQuote:c}=await Promise.resolve().then(()=>(ne(),re)),d=(await c({user:i,originChainId:e,destinationChainId:t,originCurrency:r,destinationCurrency:n,amount:String(o)},a))?.details;return{amountOut:d?.currencyOut?.amount,minOut:d?.currencyOut?.minimumAmount,gasUsd:k(d?.totalImpact?.usd)!=null?Math.abs(k(d.totalImpact.usd)):null,meta:{durationSeconds:k(d?.timeEstimate),rate:d?.rate}}}}),s.push({source:"across",run:async()=>{let{acrossSuggestedFees:c}=await Promise.resolve().then(()=>(ne(),re)),p=await c({token:r,destinationToken:n,originChainId:e,destinationChainId:t,amount:String(o)},a),d=p?.totalRelayFee?.total,l=null;if(d!=null)try{let u=BigInt(String(o))-BigInt(String(d));u>0n&&(l=u.toString())}catch{}return{amountOut:l,gasUsd:null,meta:{derivedFromFees:!0,durationSeconds:k(p?.estimatedFillTimeSec),limits:p?.limits?{min:p.limits.minDeposit,max:p.limits.maxDeposit}:void 0}}}}),s}var Ur={1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax"};async function ot(e,t,r){let n=Ur[Number(e)];if(!n)return{priceUsd:null,decimals:null};let o=`${n}:${t}`;try{let a=(await G([o],r))?.coins?.[o],s=Number(a?.price),c=Number(a?.decimals);return{priceUsd:Number.isFinite(s)?s:null,decimals:Number.isFinite(c)?c:null}}catch{return{priceUsd:null,decimals:null}}}async function Go(e,t={}){let{chainId:r,tokenIn:n,tokenOut:o,amountIn:i}=e;if(r==null||!n||!o||i==null)throw new Error("bestSwapRoute requires chainId, tokenIn, tokenOut, amountIn");let a=rt(r,t),s=ot(r,o,t),c=oe({...e,nativePriceUsd:a,decimalsOut:e.decimalsOut,destDecimalsPromise:s,opts:t}),[p,d]=await Promise.all([D(c,{timeoutMs:t.timeoutMs??12e3}),s]);a.catch(()=>{});let l=K(p,{destPriceUsd:d.priceUsd,destDecimals:e.decimalsOut??d.decimals}),u=t.maxImpactPct===void 0?25:t.maxImpactPct;if(u!=null&&l.best){let m=l.best.source,h=await ce(async w=>{let g=oe({...e,amountIn:w.toString(),nativePriceUsd:a,decimalsOut:e.decimalsOut,destDecimalsPromise:s,opts:t}).filter(_=>_.source===m);return g.length?(await D(g,{timeoutMs:t.timeoutMs??12e3}))?.[0]?.amountOut??null:null},i);if(h){let w=ue(l,{[m]:h},{maxImpactPct:u});return{kind:"swap",chainId:r,tokenIn:n,tokenOut:o,amountIn:String(i),...w,sourcesTried:c.length,sourcesAnswered:p.filter(g=>g.quality!==A.FAILED).length,note:ae(w,c.length),priceImpact:{[m]:Number(h.impactPct.toFixed(2))}}}}return{kind:"swap",chainId:r,tokenIn:n,tokenOut:o,amountIn:String(i),...l,sourcesTried:c.length,sourcesAnswered:p.filter(m=>m.quality!==A.FAILED).length,note:ae(l,c.length)}}async function Yo(e,t={}){let{fromChainId:r,toChainId:n,tokenIn:o,tokenOut:i,amountIn:a}=e;if(r==null||n==null||!o||!i||a==null)throw new Error("bestBridgeRoute requires fromChainId, toChainId, tokenIn, tokenOut, amountIn");if(Number(r)===Number(n))throw new Error("bestBridgeRoute is for cross-chain; use bestSwapRoute for same-chain");let s=ot(n,i,t),c=nt({...e,opts:t}),[p,d]=await Promise.all([D(c,{timeoutMs:t.timeoutMs??15e3}),s]),l=K(p,{destPriceUsd:d.priceUsd,destDecimals:e.decimalsOut??d.decimals}),u=l.routes.map(m=>({source:m.source,seconds:m.meta?.durationSeconds??null})).filter(m=>m.seconds!=null);return{kind:"bridge",fromChainId:r,toChainId:n,tokenIn:o,tokenOut:i,amountIn:String(a),...l,durations:u,sourcesTried:c.length,sourcesAnswered:p.filter(m=>m.quality!==A.FAILED).length,note:ae(l,c.length)}}function ae(e,t){if(!e.best)return"no source returned a usable route";let r=e.routes.length;if(r===1)return`only 1 of ${t} sources answered, so this is the ONLY route, not a proven best one. Treat it as unbenchmarked.`;if(e.improvementBps!=null){let n=e.improvementBps,o=n/100;if(n<.01)return`best of ${r} routes, ranked on ${e.rankedOn}: effectively tied with the runner-up (${e.spreadBasis}), inside quote noise. Re-quote before you size up.`;let i=o>=.01?`${o.toFixed(2)}%`:`${n.toFixed(2)}bps`;return`best of ${r} routes, ranked on ${e.rankedOn}: ${i} better than the runner-up (${e.spreadBasis})`}return`best of ${r} routes, ranked on ${e.rankedOn}. No spread quoted: the top routes report cost differently, so the margin is not comparable.`}export{A as QUALITY,Yo as bestBridgeRoute,Go as bestSwapRoute,ae as formatComparisonNote};

package/dist/scanner/index.mjs

@@ -0,0 +1,4 @@
+var x=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),b=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),f=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"}),oe=/^0x[0-9a-fA-F]{40}$/;function ie(e={}){let t=[],o=[];if(!e||typeof e!="object")return{ok:!1,errors:["definition must be an object"],warnings:o};if((!Number.isInteger(e.chainId)||e.chainId<=0)&&t.push("chainId must be a positive integer"),(typeof e.key!="string"||!/^[a-z][a-z0-9-]*$/.test(e.key||""))&&t.push('key must be a lowercase slug (e.g. "base")'),(typeof e.name!="string"||!e.name.trim())&&t.push("name is required"),!Array.isArray(e.rpcEnv)||e.rpcEnv.length===0)t.push("rpcEnv must list at least one environment variable name");else for(let r of e.rpcEnv)(typeof r!="string"||!/^[A-Z][A-Z0-9_]*$/.test(r))&&t.push(`rpcEnv entry "${r}" should be an UPPER_SNAKE env var name`);if(e.nativeCurrency){let r=e.nativeCurrency;(typeof r.symbol!="string"||!r.symbol)&&t.push("nativeCurrency.symbol is required when nativeCurrency is set"),Number.isInteger(r.decimals)||t.push("nativeCurrency.decimals must be an integer")}for(let[r,n]of(e.venues||[]).entries()){let i=`venues[${r}]`;if(!n||typeof n!="object"){t.push(`${i} must be an object`);continue}oe.test(n.address||"")||t.push(`${i}.address is not a valid 20-byte address`),/^0x0{40}$/.test(n.address||"")&&t.push(`${i}.address is the zero address -- placeholder left in place?`),n.kind||t.push(`${i}.kind is required (router|quoter|factory|...)`),n.verified?(n.verified.method||t.push(`${i}.verified.method is required`),n.verified.source||t.push(`${i}.verified.source is required`),n.verified.date||o.push(`${i}.verified.date missing -- add one so staleness is visible`)):t.push(`${i} must record verification: { verified: { method, source, date } }. An unverified venue stays blocked.`)}let a=e.capabilities||{};for(let r of Object.keys(a))x.includes(r)?typeof a[r]!="function"&&t.push(`capability "${r}" must be a function`):t.push(`unknown capability "${r}"`);return Object.keys(a).length===0&&o.push("scanner implements no capabilities -- it can only be registered, not used"),a.prepareUnsignedTx&&!a.quote&&o.push("prepareUnsignedTx without quote: no priced expectation to validate the built tx against"),a.prepareUnsignedTx&&!a.sellSimulation&&o.push("prepareUnsignedTx without sellSimulation: cannot prove an asset is exitable before buying"),{ok:t.length===0,errors:t,warnings:o}}function se(e){let{ok:t,errors:o,warnings:a}=ie(e);if(!t)throw new Error(`invalid scanner for ${e?.key??"<unknown>"}:
+  - ${o.join(`
+  - `)}`);let r=e.capabilities||{},n=x.filter(s=>typeof r[s]=="function"),i={key:e.key,chainId:e.chainId,name:e.name,rpcEnv:[...e.rpcEnv],nativeCurrency:e.nativeCurrency?{...e.nativeCurrency}:null,explorer:e.explorer||null,venues:(e.venues||[]).map(s=>({...s})),warnings:a,capabilities(){return{chainId:e.chainId,key:e.key,supported:[...n],unsupported:x.filter(s=>!n.includes(s))}},supports(s){return n.includes(s)}};for(let s of x)n.includes(s)?i[s]=async(...c)=>r[s](...c,{scanner:i}):i[s]=async()=>{throw new Error(`${e.key} (chain ${e.chainId}) does not implement "${s}". Supported: ${n.join(", ")||"none"}. An unimplemented capability is absent, not assumed -- implement it or treat this chain as fail-closed for that operation.`)};return Object.freeze(i)}var S=new Map;function R(e){let t=se(e);return S.set(t.chainId,t),t}function Fe(e){return S.get(Number(e))||null}function Pe(){return[...S.values()]}function De(){S.clear()}function $e(){let e={};for(let t of S.values())e[t.chainId]={key:t.key,name:t.name,...t.capabilities(),venueCount:t.venues.length,failClosed:t.venues.length===0};return{generatedAt:new Date().toISOString(),chainCount:S.size,capabilities:[...x],chains:e}}import{createHash as ce}from"node:crypto";var ue=new Set([408,425,429,500,502,503,504]),D=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),de=2,$=4e3,H=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],le=new Set([301,302,303,307,308]),V=3;function pe(e){let t=String(e||"").toLowerCase();return H.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function he(e){let t={};for(let[o,a]of Object.entries(e||{}))pe(o)||(t[o]=a);return t}function me(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let o=new URL(String(e),String(t));if(o.protocol!=="http:"&&o.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${o.protocol}`);return o.toString()}function fe(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var T=new Map;function be(e,t,o){let a={};for(let[c,u]of Object.entries(o||{}))a[c.toLowerCase()]=u;let r=Object.keys(a).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),i=[...new Set([...H,...r])].sort().map(c=>`${c}=${a[c]??""}`).join(`
+`),s=ce("sha256").update(i).digest("hex").slice(0,32);return`${e} ${t} ${s}`}function ve(e,t){let o=Number(t);return Number.isFinite(o)&&o>0?Math.min(o*1e3,$):Math.min(250*2**e,$)+Math.floor(Math.random()*100)}var ye=e=>new Promise(t=>setTimeout(t,e));async function ge(e,{fetchImpl:t,method:o,headers:a,body:r,timeoutMs:n}){let i=new AbortController,s=setTimeout(()=>i.abort(),n);try{let c=String(e),u={...a||{}};for(let l=0;l<=V;l+=1){let d=await t(c,{method:o,headers:u,body:r,signal:i.signal,redirect:"manual"}),m=await d.text(),h=null;if(m)try{h=JSON.parse(m)}catch{h=null}if(le.has(d.status)){if(o!=="GET"&&o!=="HEAD"){let v=new Error(`HTTP ${d.status} ${o} ${c} redirected non-idempotent request`);throw v.status=d.status,v.body=h??m.slice(0,300),v}if(l===V)throw new Error(`HTTP redirect loop for ${e}`);let p=me(d.headers?.get?.("location"),c);fe(p,c)||(u=he(u)),c=p;continue}if(!d.ok){let p=new Error(`HTTP ${d.status} ${o} ${c}`);throw p.status=d.status,p.retryAfter=d.headers?.get?.("retry-after")??null,p.body=h??m.slice(0,300),p}return h??m}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(s)}}async function U(e,t={}){let o=t.fetchImpl||globalThis.fetch;if(typeof o!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let a=t.timeoutMs??12e3,r=(t.method||"GET").toUpperCase(),n={Accept:"application/json",...t.headers||{}},i=t.body;i!=null&&typeof i!="string"&&(n["Content-Type"]=n["Content-Type"]||"application/json",i=JSON.stringify(i));let s=Number.isInteger(t.retries)?Math.max(t.retries,0):de,c=async()=>{let h;for(let p=0;p<=s;p++)try{return await ge(e,{fetchImpl:o,method:r,headers:n,body:i,timeoutMs:a})}catch(v){h=v;let y=v?.status,I=v?.name==="AbortError",C=new Set([408,425,429]),k=y!=null?C.has(y)||ue.has(y)&&D.has(r):!I&&D.has(r);if(p===s||!k)throw v;await ye(ve(p,v?.retryAfter))}throw h};if(!(t.dedupe!==!1&&r==="GET"&&i==null))return c();let l=be(r,e,n),d=T.get(l);if(d)return d;let m=c().finally(()=>T.delete(l));return T.set(l,m),m}var M={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},we=new Map(Object.values(M).map(e=>[e.chainId,e]));function j(e){return we.get(Number(e))||null}function K(e,t=process.env){let o=j(e);if(!o)return null;for(let a of o.rpcEnv){let r=(t[a]||"").trim();if(r)return r}return null}import{Interface as Ee,getAddress as Se}from"ethers";var W=new Ee(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function z(e,t){try{return Se(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}var Ie={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Ce(e,{rpcUrl:t,env:o=process.env}={}){if(t)return t;let a=K(e,o);return a||Ie[Number(e)]||null}var xe=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Ae(e){let t=String(e||""),o=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!xe.test(o))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return o}async function w(e,t,o=[],a={}){let r=String(t||"");Ae(r);let n=Ce(e,a);if(!n)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let s=await U(n,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:o},fetchImpl:a.fetchImpl,timeoutMs:a.timeoutMs??12e3});if(s?.error){let c=new Error(s.error.message||JSON.stringify(s.error));throw c.code=s.error.code,c}return s.result}async function G(e,t={}){let o=await w(e,"eth_blockNumber",[],t);return parseInt(o,16)}async function Y(e,t,o={}){if(!t)throw new Error("rpcGetBalance requires address");let a=await w(e,"eth_getBalance",[t,"latest"],o);return{chainId:Number(e),address:t,balanceWei:BigInt(a).toString(),balanceHex:a}}async function Q(e={},t={}){let o=Number(e.chainId??t.chainId??1),a=z(e.token||e.tokenAddress,"token"),r=z(e.account||e.owner||e.address,"account"),n=W.encodeFunctionData("balanceOf",[r]),i=await w(o,"eth_call",[{to:a,data:n},e.blockTag||"latest"],t),s=W.decodeFunctionResult("balanceOf",i),c=BigInt(s[0]);return{chainId:o,token:a,account:r,balance:c.toString(),balanceHex:`0x${c.toString(16)}`,blockTag:e.blockTag||"latest"}}var Ne="https://api.dexscreener.com";function Ue(e={}){return(e.baseUrl||process.env.DEXSCREENER_API_URL||Ne).replace(/\/$/,"")}async function X(e,t={}){if(!e)throw new Error("tokenAddress required");return U(`${Ue(t)}/latest/dex/tokens/${e}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3})}var q={getAmountsOut:"d06ca61f",swapExactTokensForTokens:"38ed1739",swapExactETHForTokens:"7ff36ab5"},g=e=>BigInt(e).toString(16).padStart(64,"0"),A=e=>e.slice(2).toLowerCase().padStart(64,"0");function _e(e,t){return`0x${q.getAmountsOut}`+g(e)+g(64)+g(t.length)+t.map(A).join("")}function ke(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length<128)return null;let o=Number(BigInt(`0x${t.slice(64,128)}`));if(!Number.isFinite(o)||o<1||o>16)return null;let a=[];for(let r=0;r<o;r++){let n=128+r*64;if(t.length<n+64)return null;a.push(BigInt(`0x${t.slice(n,n+64)}`))}return a}function L(e,t="router"){return(e?.venues||[]).find(a=>a.kind===t)?.address??null}var B=100;function Re(e,t){let o=Number(t);if(!Number.isFinite(o)||o<0)throw new Error("slippageBps must be a non-negative number");if(o>B)throw new Error(`slippageBps ${o} exceeds the ${B} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(o))/10000n}function J(e){let{chainId:t,wrappedNative:o}=e;async function a(r,n,i,s){let c=await w(t,"eth_call",[{to:r,data:_e(n,i)},"latest"],s);return ke(c?.result??c)}return{async quote({tokenIn:r,tokenOut:n,amountIn:i,path:s},c={}){let u=L(c.scanner);if(!u)return{chainId:t,evidence:b.UNAVAILABLE,reason:"no verified router configured for this chain; quoting stays fail-closed rather than guessing a venue address"};let l=s||[r,n];if(l.some(m=>!/^0x[0-9a-fA-F]{40}$/.test(m||"")))throw new Error("quote requires valid 20-byte addresses");let d=await a(u,i,l,c);return d?{chainId:t,router:u,path:l,amountIn:String(i),amountOut:d[d.length-1].toString(),hops:l.length-1,evidence:b.LIVE,note:"exact-input quote at current reserves; not a guaranteed fill"}:{chainId:t,router:u,path:l,evidence:b.UNKNOWN,reason:"router returned no amounts -- no pool for this path, or the call reverted"}},async sellSimulation({token:r,amountIn:n,base:i},s={}){let c=L(s.scanner),u=i||o;if(u&&String(r).toLowerCase()===String(u).toLowerCase())return{chainId:t,token:r,verdict:f.UNKNOWN,evidence:b.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!c||!u)return{chainId:t,token:r,verdict:f.UNKNOWN,evidence:b.UNAVAILABLE,reason:c?"no wrappedNative configured for this chain, so no base asset to round-trip against":"no verified router configured for this chain"};let l=await a(c,n,[u,r],s);if(!l)return{chainId:t,token:r,verdict:f.FAIL,evidence:b.LIVE,leg:"buy",reason:"buy leg returned no amounts -- no route in"};let d=l[l.length-1];if(d===0n)return{chainId:t,token:r,verdict:f.FAIL,evidence:b.LIVE,leg:"buy",reason:"buy leg quotes zero output"};let m=await a(c,d,[r,u],s);if(!m)return{chainId:t,token:r,verdict:f.FAIL,evidence:b.LIVE,leg:"sell",bought:d.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let h=m[m.length-1],p=Number(h*10000n/BigInt(n)),v=f.PASS,y="round trip completes with expected fee/impact loss";return p<5e3?(v=f.FAIL,y=`round trip returns only ${(p/100).toFixed(2)}% -- punitive tax or no real liquidity`):p<9e3&&(v=f.CAUTION,y=`round trip returns ${(p/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,token:r,base:u,router:c,verdict:v,reason:y,amountIn:String(n),bought:d.toString(),returned:h.toString(),retentionBps:p,evidence:b.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:r,tokenOut:n,amountIn:i,recipient:s,slippageBps:c=50,deadlineSeconds:u=900,path:l},d={}){let m=d.scanner,h=L(m);if(!h)throw new Error(`chain ${t} has no verified router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!/^0x[0-9a-fA-F]{40}$/.test(s||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let p=l||[r,n],v=await this.quote({tokenIn:r,tokenOut:n,amountIn:i,path:p},d);if(v.evidence!==b.LIVE)throw new Error(`cannot prepare without a live quote (${v.evidence}: ${v.reason??"no reason given"})`);let y=Re(v.amountOut,c);if(y<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let I=BigInt(Math.floor(Date.now()/1e3)+Number(u)),C=o&&p[0].toLowerCase()===o.toLowerCase()&&d.useNative,k=C?`0x${q.swapExactETHForTokens}`+g(y)+g(128)+A(s)+g(I)+g(p.length)+p.map(A).join(""):`0x${q.swapExactTokensForTokens}`+g(i)+g(y)+g(160)+A(s)+g(I)+g(p.length)+p.map(A).join("");return{unsigned:!0,signedBy:"user-wallet",chainId:t,tx:{to:h,data:k,value:C?`0x${BigInt(i).toString(16)}`:"0x0"},guard:{quotedOut:v.amountOut,minOut:y.toString(),slippageBps:c,maxSlippageBps:B,deadline:I.toString()},requires:C?[]:[{step:"approve",token:p[0],spender:h,amount:String(i)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var Te=[100,500,3e3,1e4],Z={quoteExactInputSingle:"c6a5026a",exactInputSingle:"04e45aaf"},E=e=>BigInt(e).toString(16).padStart(64,"0"),N=e=>e.slice(2).toLowerCase().padStart(64,"0"),ee=/^0x[0-9a-fA-F]{40}$/,F=100;function Le(e,t){let o=Number(t);if(!Number.isFinite(o)||o<0)throw new Error("slippageBps must be a non-negative number");if(o>F)throw new Error(`slippageBps ${o} exceeds the ${F} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(o))/10000n}function O(e,t){return(e?.venues||[]).find(o=>o.kind===t)?.address??null}function te(e){let{chainId:t,wrappedNative:o}=e;async function a({quoter:n,tokenIn:i,tokenOut:s,amountIn:c,fee:u},l){let d=`0x${Z.quoteExactInputSingle}`+N(i)+N(s)+E(c)+E(u)+E(0),m=await w(t,"eth_call",[{to:n,data:d},"latest"],l).catch(()=>null),h=m?.result??m;if(!h||h==="0x"||h.length<66)return null;let p=BigInt(`0x${h.slice(2,66)}`);return p>0n?p:null}async function r({quoter:n,tokenIn:i,tokenOut:s,amountIn:c},u){let l=[],d=null;for(let m of Te){let h=await a({quoter:n,tokenIn:i,tokenOut:s,amountIn:c,fee:m},u);l.push({fee:m,amountOut:h?h.toString():null}),h&&(!d||h>d.amountOut)&&(d={fee:m,amountOut:h})}return{best:d,tried:l}}return{async quote({tokenIn:n,tokenOut:i,amountIn:s},c={}){let u=O(c.scanner,"quoter");if(!u)return{chainId:t,evidence:b.UNAVAILABLE,reason:"no verified quoter configured for this chain; quoting stays fail-closed rather than guessing a venue address"};for(let m of[n,i])if(!ee.test(m||""))throw new Error("quote requires valid 20-byte addresses");let{best:l,tried:d}=await r({quoter:u,tokenIn:n,tokenOut:i,amountIn:s},c);return l?{chainId:t,venue:"uniswap-v3",quoter:u,tokenIn:n,tokenOut:i,amountIn:String(s),amountOut:l.amountOut.toString(),fee:l.fee,triedFeeTiers:d,evidence:b.LIVE,note:"exact-input single-hop quote at current tick; not a guaranteed fill"}:{chainId:t,quoter:u,tokenIn:n,tokenOut:i,triedFeeTiers:d,evidence:b.UNKNOWN,reason:"no fee tier returned a quote -- no V3 pool for this pair, or no liquidity"}},async sellSimulation({token:n,amountIn:i,base:s},c={}){let u=O(c.scanner,"quoter"),l=s||o;if(l&&String(n).toLowerCase()===String(l).toLowerCase())return{chainId:t,token:n,verdict:f.UNKNOWN,evidence:b.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!u||!l)return{chainId:t,token:n,verdict:f.UNKNOWN,evidence:b.UNAVAILABLE,reason:u?"no wrappedNative configured, so there is no base asset to round-trip against":"no verified quoter configured for this chain"};let d=await r({quoter:u,tokenIn:l,tokenOut:n,amountIn:i},c);if(!d.best)return{chainId:t,token:n,verdict:f.FAIL,evidence:b.LIVE,leg:"buy",reason:"no V3 pool priced the buy leg on any fee tier"};let m=await r({quoter:u,tokenIn:n,tokenOut:l,amountIn:d.best.amountOut},c);if(!m.best)return{chainId:t,token:n,verdict:f.FAIL,evidence:b.LIVE,leg:"sell",bought:d.best.amountOut.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let h=m.best.amountOut,p=Number(h*10000n/BigInt(i)),v=f.PASS,y="round trip completes with expected fee/impact loss";return p<5e3?(v=f.FAIL,y=`round trip returns only ${(p/100).toFixed(2)}% -- punitive tax or no real liquidity`):p<9e3&&(v=f.CAUTION,y=`round trip returns ${(p/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,venue:"uniswap-v3",token:n,base:l,verdict:v,reason:y,amountIn:String(i),bought:d.best.amountOut.toString(),returned:h.toString(),retentionBps:p,buyFee:d.best.fee,sellFee:m.best.fee,evidence:b.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:n,tokenOut:i,amountIn:s,recipient:c,slippageBps:u=50,fee:l},d={}){let m=O(d.scanner,"router");if(!m)throw new Error(`chain ${t} has no verified V3 router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!ee.test(c||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let h=await this.quote({tokenIn:n,tokenOut:i,amountIn:s},d);if(h.evidence!==b.LIVE)throw new Error(`cannot prepare without a live quote (${h.evidence}: ${h.reason??"no reason given"})`);let p=l??h.fee,v=Le(h.amountOut,u);if(v<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let y=`0x${Z.exactInputSingle}`+N(n)+N(i)+E(p)+N(c)+E(s)+E(v)+E(0);return{unsigned:!0,signedBy:"user-wallet",chainId:t,venue:"uniswap-v3",tx:{to:m,data:y,value:"0x0"},guard:{quotedOut:h.amountOut,minOut:v.toString(),slippageBps:u,maxSlippageBps:F,fee:p},requires:[{step:"approve",token:n,spender:m,amount:String(s)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var _={decimals:"0x313ce567",symbol:"0x95d89b41",name:"0x06fdde03",totalSupply:"0x18160ddd",owner:"0x8da5cb5b"};function ne(e){if(!e||e==="0x")return null;try{return BigInt(e)}catch{return null}}function re(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length>=128){let a=Number(BigInt(`0x${t.slice(64,128)}`));if(a>0&&a<=256&&t.length>=128+a*2){let r=t.slice(128,128+a*2),n=Buffer.from(r,"hex").toString("utf8").replace(/\0+$/,"");if(n)return n}}return Buffer.from(t.slice(0,64),"hex").toString("utf8").replace(/\0+$/,"")||null}function qe(e){let{chainId:t}=e;async function o(a,r,n){return w(t,"eth_call",[{to:a,data:r},"latest"],n)}return{async blockNumber(a={}){let r=await G(t,a);return{chainId:t,blockNumber:r?.blockNumber??r,evidence:b.LIVE}},async nativeBalance(a,r={}){let n=await Y(t,a,r);return{chainId:t,address:a,wei:n?.wei??n?.balance??null,symbol:e.nativeCurrency?.symbol??null,decimals:e.nativeCurrency?.decimals??18,evidence:b.LIVE}},async tokenBalance({token:a,owner:r},n={}){let i=await Q({chainId:t,token:a,owner:r},n);return{chainId:t,token:a,owner:r,raw:i?.balance??i,evidence:b.LIVE}},async resolveToken(a,r={}){if(!/^0x[0-9a-fA-F]{40}$/.test(a||""))return{chainId:t,token:a,evidence:b.UNKNOWN,error:"resolveToken needs a 20-byte address; symbol lookup is a market-data concern"};let[n,i,s,c]=await Promise.all([o(a,_.decimals,r).catch(()=>null),o(a,_.symbol,r).catch(()=>null),o(a,_.name,r).catch(()=>null),o(a,_.totalSupply,r).catch(()=>null)]),u=ne(n?.result??n),l=u!==null||i?.result||s?.result;return{chainId:t,address:a,decimals:u===null?null:Number(u),symbol:re(i?.result??i),name:re(s?.result??s),totalSupply:(ne(c?.result??c)??null)?.toString()??null,evidence:l?b.LIVE:b.UNKNOWN,warning:l?void 0:"no ERC-20 metadata returned -- may not be a token contract"}},async resolvePools(a,r={}){let n=e.dexscreenerSlug;if(!n)return{chainId:t,token:a,pools:[],evidence:b.UNAVAILABLE,reason:"no dexscreenerSlug configured for this chain; pool discovery is unavailable rather than guessed"};let i=await X(a,r).catch(()=>null),c=(i?.pairs||i?.data?.pairs||[]).filter(u=>String(u.chainId).toLowerCase()===String(n).toLowerCase()).map(u=>({pair:u.pairAddress,dex:u.dexId,base:u.baseToken?.address,quote:u.quoteToken?.address,liquidityUsd:u.liquidity?.usd??null,priceUsd:u.priceUsd??null,volume24hUsd:u.volume?.h24??null,createdAt:u.pairCreatedAt??null})).sort((u,l)=>(l.liquidityUsd??0)-(u.liquidityUsd??0));return{chainId:t,token:a,pools:c,evidence:c.length?b.LIVE:b.UNKNOWN}},async scanBlocks({fromBlock:a,toBlock:r,address:n,topics:i,chunkSize:s=2e3}={},c={}){if(!Number.isInteger(a)||!Number.isInteger(r))throw new Error("scanBlocks requires integer fromBlock and toBlock");if(r<a)throw new Error("toBlock must be >= fromBlock");let u=[],l=[];for(let d=a;d<=r;d+=s){let m=Math.min(d+s-1,r);l.push([d,m])}for(let[d,m]of l){let h={fromBlock:`0x${d.toString(16)}`,toBlock:`0x${m.toString(16)}`};n&&(h.address=n),i&&(h.topics=i);let p=await w(t,"eth_getLogs",[h],c).catch(v=>({error:String(v?.message||v)}));if(p?.error)return{chainId:t,fromBlock:a,toBlock:r,logs:u,complete:!1,failedAt:[d,m],error:p.error,evidence:b.UNKNOWN};for(let v of p?.result??p??[])u.push(v)}return{chainId:t,fromBlock:a,toBlock:r,logs:u,complete:!0,chunks:l.length,evidence:b.LIVE}},async scoreRisk(a,r={}){let n=[],i=f.PASS,s=l=>{let d={[f.PASS]:0,[f.CAUTION]:1,[f.UNKNOWN]:2,[f.FAIL]:3};d[l]>d[i]&&(i=l)},c=await this.resolveToken(a,r);c.evidence!==b.LIVE?(n.push({check:"erc20-metadata",result:f.UNKNOWN,detail:c.warning}),s(f.UNKNOWN)):n.push({check:"erc20-metadata",result:f.PASS,detail:`${c.symbol} / ${c.decimals}d`});let u=await this.resolvePools(a,r);if(u.evidence===b.UNAVAILABLE)n.push({check:"liquidity",result:f.UNKNOWN,detail:u.reason}),s(f.UNKNOWN);else if(!u.pools.length)n.push({check:"liquidity",result:f.FAIL,detail:"no pool with liquidity found"}),s(f.FAIL);else{let l=u.pools[0],d=l.liquidityUsd??0;d<5e3?(n.push({check:"liquidity",result:f.CAUTION,detail:`top pool only $${d}`}),s(f.CAUTION)):n.push({check:"liquidity",result:f.PASS,detail:`$${d} on ${l.dex}`}),l.createdAt&&Date.now()-l.createdAt<24*3600*1e3&&(n.push({check:"age",result:f.CAUTION,detail:"pool under 24h old"}),s(f.CAUTION))}if(typeof this.sellSimulation=="function"){let l=await this.sellSimulation({token:a,amountIn:(10n**16n).toString()},r).catch(d=>({verdict:f.UNKNOWN,reason:String(d?.message||d)}));n.push({check:"sellability",result:l.verdict,detail:l.retentionBps!=null?`round trip returns ${(l.retentionBps/100).toFixed(2)}% -- ${l.reason}`:l.reason}),s(l.verdict)}else n.push({check:"sellability",result:f.UNKNOWN,detail:"no verified router on this chain, so a round-trip sell simulation cannot run. Treat as unproven -- a buy path is not an exit path."}),s(f.UNKNOWN);return{chainId:t,token:a,verdict:i,checks:n,note:"Structural checks only. UNKNOWN is not PASS. A token is not tradeable until a sell simulation succeeds."}}}}function P(e){let o={...qe(e)},a=new Set((e.venues||[]).map(n=>n.kind));e.venueKind==="uniswap-v3"&&a.has("quoter")&&a.has("router")?Object.assign(o,te({chainId:e.chainId,wrappedNative:e.wrappedNative})):e.venueKind==="uniswap-v2"&&a.has("router")&&Object.assign(o,J({chainId:e.chainId,wrappedNative:e.wrappedNative}));let r={};for(let[n,i]of Object.entries(o))r[n]=i.bind(o);return{key:e.key,chainId:e.chainId,name:e.name,rpcEnv:e.rpcEnv,nativeCurrency:e.nativeCurrency,explorer:e.explorer,venues:e.venues||[],capabilities:r}}var ae=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);function Be(){return ae.map(e=>R(P(e)))}function Oe(e){return R(P(e))}export{ae as CHAIN_CONFIGS,b as EVIDENCE,f as RISK,x as SCANNER_CAPABILITIES,De as __clearScanners,se as createScanner,Fe as getScanner,Pe as listScanners,Be as registerBuiltinScanners,Oe as registerCustomChain,R as registerScanner,$e as scannerCoverage,ie as validateScanner};

package/dist/signals/index.mjs

@@ -0,0 +1 @@
+var T=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),I=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),e=(l,n=0,o=1)=>Math.min(o,Math.max(n,l)),a=l=>Number.isFinite(Number(l))?Number(l):null,p=l=>Math.round(l*1e4)/1e4;function b(l){let n=String(l?.type??l?.surface??l?.kind??"").toLowerCase();return I[n]??n}function C(l,n){return String(l?.id??l?.signalId??l?.asset??l?.market??l?.pool??l?.collection??`${b(l)}:${n}`)}function u(l,n,o,t=!0){!t||o===null||!Number.isFinite(o)||l.push({feature:n,value:p(o)})}function L(l,n){let o=a(l.repeatBuys??l.repeat_buys??l.buyCount),t=a(l.walletWinRate??l.winRate);u(n,"repeat_buys",o===null?null:e((o-1)/4)*.38),u(n,"wallet_win_rate",t===null?null:(e(t)-.5)*.5)}function R(l,n){let o=a(l.ageHours??l.poolAgeHours),t=a(l.liquidityUsd??l.liquidity),i=l.liquidityLocked??l.locked;u(n,"pool_age",o===null?null:o<24?-.42:e(o/720)*.12),u(n,"liquidity",t===null?null:(e(Math.log10(Math.max(1,t))/7)-.5)*.28),u(n,"liquidity_lock",i==null?null:i?.12:-.28)}function F(l,n){let o=a(l.floorChange??l.floorChangePct),t=a(l.sales??l.saleCount);u(n,"floor_change",o===null?null:e(o,-1,1)*.35),u(n,"sales_depth",t===null?null:e(t/50)*.18)}function P(l,n){let o=a(l.flowImbalance??l.imbalance),t=a(l.fundingRate??l.funding);u(n,"flow_imbalance",o===null?null:e(o,-1,1)*.42),u(n,"funding",t===null?null:-e(t*100,-1,1)*.12)}function q(l,n){let o=a(l.marketProbability??l.marketPrice??l.probability),t=a(l.fairProbability??l.referenceProbability??l.fairValue);u(n,"probability_mispricing",o===null||t===null?null:e(t-o,-1,1)*.65);let i=a(l.liquidityUsd??l.liquidity);u(n,"market_liquidity",i===null?null:e(Math.log10(Math.max(1,i))/6)*.12)}var x=Object.freeze({wallet:L,pool:R,nft_floor:F,hl_flow:P,prediction_market:q});function D(l,n,o){let t=o.filter(r=>{let s=r?.signalId??r?.eventId??r?.id??r?.asset??r?.market;return s!=null&&String(s)===n});if(t.length===0)return null;let i=t.map(r=>a(r.return??r.markout??r.pnl??r.value)).filter(r=>r!==null);return i.length===0?null:i.reduce((r,s)=>r+s,0)/i.length}function E(l=[],n=[],o={}){if(!Array.isArray(l)||!Array.isArray(n))throw new TypeError("events and markouts must be arrays");let t=e(a(o.minimumCoverage)??.5);return l.map((i,r)=>{let s=b(i),g=C(i,r),_=x[s],d=[];_&&_(i,d);let O=s==="wallet"?2:s==="pool"?3:2,m=p(e(d.length/O)),k=d.reduce((A,S)=>A+S.value,0),c=D(i,g,n),y=c===null?0:e(c,-1,1)*.35;c!==null&&u(d,"shadow_markout",y);let w=p(e(.5+k+y)),N=c===null?.8:e(.85+c*.3,.35,1),h=p(e(m*N)),f=["COLD_INTELLIGENCE_ONLY","NO_HOT_EXECUTION"];return _||f.push("UNSUPPORTED_SIGNAL_TYPE"),m<t&&f.push("LOW_COVERAGE","NO_TRADE"),h<.5&&f.push("LOW_CONFIDENCE","NO_TRADE"),s==="pool"&&(a(i.ageHours??i.poolAgeHours)??1/0)<24&&f.push("NEW_POOL_RISK","NO_TRADE"),c!==null&&c<0&&f.push("NEGATIVE_MARKOUT"),{id:g,type:s,score:w,confidence:h,coverage:m,contributions:d,flags:[...new Set(f)],noTrade:f.includes("NO_TRADE"),executionAllowed:!1}}).sort((i,r)=>r.score-i.score||r.confidence-i.confidence||i.id.localeCompare(r.id))}function M(l={}){return Object.freeze({score(n,o=[],t={}){return E(n,o,{...l,...t})}})}export{T as SIGNAL_TYPES,M as createSignalsEngine,E as scoreSignals};