@oracle-agent/oracle 0.24.6 → 0.24.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/dist/assets/skills/oracle-desk-product/SKILL.md +1 -1
  2. package/dist/bin/desk-server.mjs +31 -31
  3. package/dist/bin/oracle-public-server.mjs +4 -4
  4. package/dist/data/desk-data.mjs +23 -23
  5. package/dist/index.mjs +28 -28
  6. package/package.json +1 -1
package/dist/bin/oracle-public-server.mjs CHANGED
@@ -1,5 +1,5 @@
1
1
  #!/usr/bin/env node
2
- import{createServer as ns}from"node:http";import{readFileSync as Bn,existsSync as rs}from"node:fs";import{dirname as os,join as ct,normalize as ss,sep as is}from"node:path";import{fileURLToPath as as}from"node:url";import{createHash as Wn}from"node:crypto";var ce=1,mt=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Gn=Object.freeze(["read","simulate"]),ht=1e4,bt=1440*60,yt=128,gt=256,wt=64,St=256,vt=/^0x[0-9a-fA-F]{40}$/,Yn=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,Jn=/^[a-z][a-z0-9_-]*:\*$/,Xn=/^[A-Za-z0-9._:-]+$/,Qn=/^[A-Za-z0-9._:-]+$/,At=/^(0|[1-9][0-9]*)$/,O=class extends Error{constructor(t){let r=t.map(n=>`${n.field}: ${n.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${r.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function Et(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function Zn(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return At.test(t)?t:null}return null}function F(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!At.test(t))return null;let r=Number(t);return Number.isSafeInteger(r)?r:null}return null}function Ne(e){let t=String(e).split(":")[0];return Gn.includes(t)}function Ce(e,t={}){let r=[],n=(p,h)=>r.push({field:p,message:h});if(!Et(e))return n("grant","grant must be a plain object"),{ok:!1,errors:r,grant:null};for(let p of Object.keys(e))mt.includes(p)||n(p,"unknown field is not allowed");for(let p of mt)(!(p in e)||e[p]==null)&&n(p,"required field is missing");if(r.length)return{ok:!1,errors:r,grant:null};let o={},s=F(e.chainId);s==null||s<=0?n("chainId","must be a positive integer chain id"):o.chainId=s;for(let p of["agentAddress","accountAddress"]){let h=e[p];typeof h!="string"||!vt.test(h.trim())?n(p,"must be a 0x-prefixed 20-byte hex address"):o[p]=h.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)n("actions","must be a non-empty array of action scopes");else if(e.actions.length>wt)n("actions",`too many actions (max ${wt})`);else{let p=[];for(let h of e.actions){let u=typeof h=="string"?h.trim():null;if(!u){n("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&Jn.test(u)?p.push(u):n("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!Yn.test(u)){n("actions",`malformed action "${u}" (expected verb:resource)`);continue}p.push(u)}o.actions=[...new Set(p)].sort()}if(!Array.isArray(e.targets))n("targets","must be an array of contract addresses");else if(e.targets.length>St)n("targets",`too many targets (max ${St})`);else{let p=[];for(let h of e.targets){let u=typeof h=="string"?h.trim():null;if(!u||!vt.test(u)){n("targets",`target "${h}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}p.push(u.toLowerCase())}if(o.targets=[...new Set(p)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let h=o.actions.filter(u=>!Ne(u));(h.length>0||o.actions.length===0)&&n("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${h.join(", ")||"no valid actions"})`)}}for(let p of["maxValueWei","maxGasWei"]){let h=Zn(e[p]);h==null?n(p,"must be a non-negative integer wei amount"):o[p]=h}let i=F(e.maxSlippageBps);i==null||i>ht?n("maxSlippageBps",`must be an integer between 0 and ${ht}`):o.maxSlippageBps=i;let a=864e10,c=F(e.expiresAt);if(c==null||c<=0)n("expiresAt","must be a positive unix-seconds timestamp");else if(c>a)n("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=c,t.now!=null){let p=F(t.now);p==null?n("expiresAt","opts.now must be a unix-seconds integer"):c<=p?n("expiresAt",`grant is expired (expiresAt ${c} <= now ${p})`):c-p>bt&&n("expiresAt",`grant exceeds the hard 24-hour TTL (${bt} seconds)`)}let d=typeof e.nonce=="string"?e.nonce.trim():F(e.nonce)!=null?String(F(e.nonce)):null;!d||d.length>yt||!Xn.test(d)?n("nonce",`must be a non-empty string (max ${yt} chars, [A-Za-z0-9._:-])`):o.nonce=d;let l=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!l||l.length>gt||!Qn.test(l)?n("revocationKey",`must be a non-empty public identifier (max ${gt} chars, [A-Za-z0-9._:-])`):o.revocationKey=l,r.length?{ok:!1,errors:r,grant:null}:{ok:!0,errors:[],grant:o}}function fe(e,t={}){let{ok:r,errors:n,grant:o}=Ce(e,t);if(!r)throw new O(n);return o}function Te(e,t={}){let r=fe(e,t),o=Object.keys(r).sort().map(s=>`${JSON.stringify(s)}:${JSON.stringify(r[s])}`);return`{"version":${ce},${o.join(",")}}`}function me(e,t={}){return Wn("sha256").update(Te(e,t),"utf8").digest("hex")}function xt(e,t){let r=F(t),n=F(Et(e)?e.expiresAt:null);return r==null||n==null?!0:n<=r}var kt="oracle-connect-request",er="oracle-unsigned-grant",tr="oracle-grant-canonical-json-utf8-v1",$=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},nr=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,rr=Object.freeze(["privkey","wif","xprv","seed"]);function Re(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return nr.test(t)||rr.includes(r)}var _t=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),It=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function or(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>It.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Nt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new $("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=or(t);for(let{rule:o,re:s}of _t)if(s.test(r))throw new $("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new $("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,s)=>{if(o&&Re(o))throw new $(`$<serialized>.${o}`,"forbidden-key-name");return s}),t}function U(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=It.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:s,re:i}of _t)if(!(o&&s.startsWith("raw-32-byte-hex"))&&i.test(e))throw new $(t,s);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,s]of e.entries()){if(typeof o=="string"&&Re(o))throw new $(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");U(o,`${t}[key]`,r),U(s,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let s of e.values())U(s,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,s)=>U(o,`${t}[${s}]`,r)),e;for(let[o,s]of Object.entries(e)){if(Re(o))throw new $(`${t}.${o}`,"forbidden-key-name");U(s,`${t}.${o}`,r,o)}return e}function le(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))le(t)}return e}function Ct(e,t){let r=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(r)||r<=0)throw new O([{field:t,message:"must be a positive unix-seconds integer"}]);return r}function Tt(e){if(e?.now==null)throw new O([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return Ct(e.now,"opts.now")}function sr(e){return new Date(e*1e3).toISOString()}function ir(e,t){let r=e.actions.every(n=>Ne(n));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID: ${t}`,`Version: ${ce}`,`Chain: ${e.chainId}`,`Agent: ${e.agentAddress}`,`Your account: ${e.accountAddress}`,`Actions: ${e.actions.join(", ")}`,`Targets: ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value: ${e.maxValueWei} wei`,`Max gas: ${e.maxGasWei} wei`,`Max slippage: ${e.maxSlippageBps} bps`,`Expires: ${sr(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce: ${e.nonce}`,`Revocation: ${e.revocationKey}`,"-----------------------------------------------------------------",r?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
3
- `)}function Rt(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new O([{field:"request",message:"request must be a plain object"}]);let r=Tt(t),{ttlSeconds:n,...o}=e,s={...o};if(n!=null){if(s.expiresAt!=null)throw new O([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let c=Ct(n,"ttlSeconds");s.expiresAt=r+c}let i=fe(s,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),a=le({kind:kt,version:ce,grant:i});return U(a)}function Pt(e={},t={}){let r=Tt(t),n=e&&e.kind===kt?e.grant:e,o=fe(n,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),s=Te(o),i=me(o),a=Buffer.from(s,"utf8"),c=le({kind:er,unsigned:!0,payload:le({version:ce,grantId:i,grant:o,canonical:s}),signing:le({scheme:tr,message:s,bytesHex:`0x${a.toString("hex")}`,byteLength:a.length,sha256:i}),render:ir(o,i)});return U(c)}var Z=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function Lt(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function ar(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function Pe(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function cr(e,t,r){if(e==null)return!1;if(typeof e=="function")return e(t,r)===!0;let n=[t,r.revocationKey];return e instanceof Set?n.some(o=>e.has(o)):Array.isArray(e)?n.some(o=>e.includes(o)):typeof e.has=="function"?n.some(o=>e.has(o)):!1}function Ut(e,{now:t,revoked:r}={}){let n=Pe(t),{grant:o,revoked:s}=ar(e),{ok:i,grant:a}=Ce(o);if(!i)return{status:Z.INVALID,id:null,grant:null};let c=me(a);return s||cr(r,c,a)?{status:Z.REVOKED,id:c,grant:a}:xt(a,n)?{status:Z.EXPIRED,id:c,grant:a}:{status:Z.ACTIVE,id:c,grant:a}}function $t(e,{now:t,revoked:r,agentAddress:n,accountAddress:o,chainId:s}={}){let i=Pe(t),a=n!=null?String(n).trim().toLowerCase():null,c=o!=null?String(o).trim().toLowerCase():null,d=s!=null?Number(s):null,l=[];for(let p of Lt(e)){let{status:h,id:u,grant:S}=Ut(p,{now:i,revoked:r});h===Z.ACTIVE&&(a!=null&&S.agentAddress!==a||c!=null&&S.accountAddress!==c||d!=null&&S.chainId!==d||l.push(Object.freeze({id:u,grant:S})))}return l.sort((p,h)=>p.id<h.id?-1:p.id>h.id?1:0),U(Object.freeze(l))}function Ot(e,t,{now:r,revoked:n}={}){let o=Pe(r),s=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(s))return null;for(let i of Lt(e)){let a=Ut(i,{now:o,revoked:n});if(a.status!==Z.INVALID&&a.id===s)return U(Object.freeze({id:a.id,status:a.status,grant:a.grant}))}return null}import{Interface as Xt,getAddress as Nr,id as Qt}from"ethers";import{createHash as lr}from"node:crypto";var ur=new Set([408,425,429,500,502,503,504]),Mt=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),dr=2,Bt=4e3,qt=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],pr=new Set([301,302,303,307,308]),Dt=3;function fr(e){let t=String(e||"").toLowerCase();return qt.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function mr(e){let t={};for(let[r,n]of Object.entries(e||{}))fr(r)||(t[r]=n);return t}function hr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function br(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Le=new Map;function yr(e,t,r){let n={};for(let[c,d]of Object.entries(r||{}))n[c.toLowerCase()]=d;let o=Object.keys(n).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),i=[...new Set([...qt,...o])].sort().map(c=>`${c}=${n[c]??""}`).join(`
4
- `),a=lr("sha256").update(i).digest("hex").slice(0,32);return`${e} ${t} ${a}`}function gr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Bt):Math.min(250*2**e,Bt)+Math.floor(Math.random()*100)}var wr=e=>new Promise(t=>setTimeout(t,e));async function Sr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:s}){let i=new AbortController,a=setTimeout(()=>i.abort(),s);try{let c=String(e),d={...n||{}};for(let l=0;l<=Dt;l+=1){let p=await t(c,{method:r,headers:d,body:o,signal:i.signal,redirect:"manual"}),h=await p.text(),u=null;if(h)try{u=JSON.parse(h)}catch{u=null}if(pr.has(p.status)){if(r!=="GET"&&r!=="HEAD"){let w=new Error(`HTTP ${p.status} ${r} ${c} redirected non-idempotent request`);throw w.status=p.status,w.body=u??h.slice(0,300),w}if(l===Dt)throw new Error(`HTTP redirect loop for ${e}`);let S=hr(p.headers?.get?.("location"),c);br(S,c)||(d=mr(d)),c=S;continue}if(!p.ok){let S=new Error(`HTTP ${p.status} ${r} ${c}`);throw S.status=p.status,S.retryAfter=p.headers?.get?.("retry-after")??null,S.body=u??h.slice(0,300),S}return u??h}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(a)}}async function T(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let n=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),s={Accept:"application/json",...t.headers||{}},i=t.body;i!=null&&typeof i!="string"&&(s["Content-Type"]=s["Content-Type"]||"application/json",i=JSON.stringify(i));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):dr,c=async()=>{let u;for(let S=0;S<=a;S++)try{return await Sr(e,{fetchImpl:r,method:o,headers:s,body:i,timeoutMs:n})}catch(w){u=w;let g=w?.status,E=w?.name==="AbortError",N=new Set([408,425,429]),B=g!=null?N.has(g)||ur.has(g)&&Mt.has(o):!E&&Mt.has(o);if(S===a||!B)throw w;await wr(gr(S,w?.retryAfter))}throw u};if(!(t.dedupe!==!1&&o==="GET"&&i==null))return c();let l=yr(o,e,s),p=Le.get(l);if(p)return p;let h=c().finally(()=>Le.delete(l));return Le.set(l,h),h}async function I(e){let t=Date.now();try{let r=await e();return{ok:!0,ms:Date.now()-t,data:r}}catch(r){return{ok:!1,ms:Date.now()-t,error:String(r.message||r),status:r.status??null}}}async function V(e,t,r){let n=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,n.length||1)),s=new Array(n.length),i=0;return await Promise.all(Array.from({length:o},async()=>{for(;i<n.length;){let a=i++;s[a]=await r(n[a],a)}})),s}var Ft={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},vr=new Map(Object.values(Ft).map(e=>[e.chainId,e]));function Vt(e){return vr.get(Number(e))||null}function Ht(e,t=process.env){let r=Vt(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}import{Interface as Ar,getAddress as Er}from"ethers";var zt=new Ar(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function Ue(e,t){try{return Er(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}var xr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function kr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=Ht(e,r);return n||xr[Number(e)]||null}var _r=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Ir(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!_r.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}async function M(e,t,r=[],n={}){let o=String(t||"");Ir(o);let s=kr(e,n);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let a=await T(s,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:r},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(a?.error){let c=new Error(a.error.message||JSON.stringify(a.error));throw c.code=a.error.code,c}return a.result}async function $e(e,t={}){let r=await M(e,"eth_blockNumber",[],t);return parseInt(r,16)}async function Oe(e,t,r={}){if(!t)throw new Error("rpcGetBalance requires address");let n=await M(e,"eth_getBalance",[t,"latest"],r);return{chainId:Number(e),address:t,balanceWei:BigInt(n).toString(),balanceHex:n}}async function Kt(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=Ue(e.token||e.tokenAddress,"token"),o=Ue(e.owner,"owner"),s=Ue(e.spender,"spender"),i=zt.encodeFunctionData("allowance",[o,s]),a=await M(r,"eth_call",[{to:n,data:i},e.blockTag||"latest"],t),c=zt.decodeFunctionResult("allowance",a),d=BigInt(c[0]);return{chainId:r,token:n,owner:o,spender:s,allowance:d.toString(),allowanceHex:`0x${d.toString(16)}`,blockTag:e.blockTag||"latest"}}var si=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var ai=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),Me=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),Be=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var he=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);var jt=new Xt(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),Wt=new Xt(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),Cr=Qt("Approval(address,address,uint256)"),Ui=Qt("ApprovalForAll(address,address,bool)"),Tr=1e4,Rr=2e5,Pr=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),Lr=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),Ur=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),$r=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),Or=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),Mr=(1n<<256n)-1n,Br=Mr/2n,Dr=4320*60*60*1e3,qr=360*60*1e3,Fr=600*1e3,Vr=45*1e3,Hr=512,zr=128,Gt=new Map,De=new Map,Yt=new Map;function ee(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function Fe(e,t,r){let n=e.get(t);return n?Date.now()-n.at>r?(e.delete(t),null):n:null}function be(e,t,r,n){for(e.delete(t),e.set(t,{at:Date.now(),value:r});e.size>n;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function Kr(e,t){try{return Nr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function jr(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function Jt(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Wr({unlimited:e,spenderLabel:t,lastActivityAt:r}){if(e)return"unlimited";if(!t)return"unknown-spender";if(r){let n=Date.parse(r);if(Number.isFinite(n)&&Date.now()-n>Dr)return"stale"}return"scoped"}function Gr(e,t,r){if(r)return"UNLIMITED";if(t==null)return e.toString();let n=10n**BigInt(t),o=e/n,s=e%n;if(s===0n)return o.toLocaleString("en-US");let i=s.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${i?`.${i}`:""}`}async function Yr(e,t,r,n){let o=`${e}:${t}`,s=n?.get(o);if(s)return s;if(ee(r)){let a=Fe(Gt,o,qr);if(a)return a.value}let i=(async()=>{let a=async p=>{try{let h=jt.encodeFunctionData(p,[]),u=await M(e,"eth_call",[{to:t,data:h},"latest"],r);return!u||u==="0x"?null:jt.decodeFunctionResult(p,u)[0]}catch{return null}},[c,d]=await Promise.all([a("decimals"),a("symbol")]),l={decimals:c==null?null:Number(c),symbol:d==null?null:String(d).slice(0,24)};return ee(r)&&be(Gt,o,l,Hr),l})();return n?.set(o,i),i}async function Jr(e,t,r){let n=Math.min(Math.max(Number(r.lookbackBlocks)||Tr,1),Rr),o=await $e(e,r);if(!Number.isFinite(o))throw new Error("chain head unavailable");let s=Math.max(0,o-n),i=await M(e,"eth_getLogs",[{fromBlock:`0x${s.toString(16)}`,toBlock:"latest",topics:[Cr,jr(t)]}],r);if(!Array.isArray(i))throw new Error("log scan returned no array");let a=new Map;for(let c of i){let d=String(c?.address||"").toLowerCase(),l=c?.topics?.[2];!d||!l||a.set(`${d}:${Jt(l)}`,{token:d,spender:Jt(l)})}return{pairs:[...a.values()],fromBlock:s,toBlock:o}}function Xr(e){return(Or[e]||[]).flatMap(r=>Lr.map(n=>({token:r.address,spender:n.address,symbol:r.symbol,decimals:r.decimals})))}async function Qr(e,t,r={}){let n=[],o="direct-probe",s=null,i=Xr(e),a=qe(e),c=ee(r)&&Fe(De,e,Fr)?.value===!1;if(i.length===0&&a.length===0&&c)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let d=await Jr(e,t,r);n=d.pairs,o="log-scan",s={fromBlock:d.fromBlock,toBlock:d.toBlock},ee(r)&&be(De,e,!0,64)}catch{if(ee(r)&&be(De,e,!1,64),n=i,n.length===0&&a.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let d=new Map,p=(await V(n,r.concurrency||4,async u=>{try{let S=await Kt({chainId:e,token:u.token,owner:t,spender:u.spender},r),w=BigInt(S.allowance);if(w<=0n)return null;let g=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Yr(e,u.token,r,d),E=w>=Br,N=Pr[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:g.symbol,decimals:g.decimals,spender:u.spender,spenderLabel:N,allowance:w.toString(),allowanceDisplay:Gr(w,g.decimals,E),unlimited:E,lastActivityAt:null,risk:Wr({unlimited:E,spenderLabel:N,lastActivityAt:null})}}catch{return null}})).filter(Boolean),h=await eo(e,t,r);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:n.length,collectionsProbed:qe(e).length,...s||{}},approvals:[...p,...h]}}catch(d){return{scan:{chainId:e,status:"unavailable",method:o,error:String(d?.message||d).slice(0,200)},approvals:[]}}}async function Zr(e,t,r,n,o){try{let s=Wt.encodeFunctionData("isApprovedForAll",[r,n]),i=await M(e,"eth_call",[{to:t,data:s},"latest"],o);return!i||i==="0x"?null:!!Wt.decodeFunctionResult("isApprovedForAll",i)[0]}catch{return null}}function qe(e){return($r[e]||[]).flatMap(r=>Ur.map(n=>({collection:r.address,collectionName:r.name,operator:n.address,operatorLabel:n.label})))}async function eo(e,t,r){let n=qe(e);return n.length===0?[]:(await V(n,r.concurrency||4,async s=>await Zr(e,s.collection,t,s.operator,r)!==!0?null:{id:`${e}:${s.collection}:${s.operator}:all`,chainId:e,standard:"erc721",token:s.collection,tokenSymbol:s.collectionName,decimals:null,spender:s.operator,spenderLabel:s.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function Zt(e={},t={}){let r=Kr(e.owner||e.address,"owner"),n=new Map(he.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>n.has(u)):[...n.keys()],s=`${r}:${[...o].sort((u,S)=>u-S).join(",")}:${e.lookbackBlocks??""}`,i=ee(t)&&!e.refresh;if(i){let u=Fe(Yt,s,Vr);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let a=await V(o,e.concurrency||3,u=>Qr(u,r,{...t,lookbackBlocks:e.lookbackBlocks})),c=a.flatMap(u=>u.approvals),d=a.map(u=>u.scan),l=d.find(u=>u.method==="log-scan"&&u.toBlock),p=d.some(u=>u.method==="direct-probe"&&u.status==="ok"),h={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:r,scannedRange:l?`last ${l.toBlock-l.fromBlock} blocks`:p?"known routers, live allowance probe":null,approvals:c,scans:d,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return i&&be(Yt,s,h,zr),{...h,cached:!1,cachedAgeMs:0}}import{getAddress as xo}from"ethers";var en="mainnet-beta",to="https://api.mainnet-beta.solana.com",Ve="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function no(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||to).trim()}function W(e,t="address"){let r=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(r))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return r}function ro(e,t){return t?[...e,{commitment:t}]:e}async function tn(e,t=[],r={}){let n=String(e||"");if(n==="sendTransaction"||n==="sendRawTransaction"||n==="requestAirdrop"||n==="requestAirDrop"||/airdrop/i.test(n)||/^send/i.test(n))throw new Error(`solana-rpc: ${n} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await T(no(r),{method:"POST",body:{jsonrpc:"2.0",id:r.id||1,method:e,params:t},fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function nn(e={},t={}){let r=W(e.address||e.owner,"address"),n=await tn("getBalance",ro([r],e.commitment),t);return{provider:"solana-rpc",cluster:en,address:r,lamports:String(n?.value??0),slot:n?.context?.slot??null,raw:n}}function oo(e={}){let t=e.account?.data?.parsed?.info||{},r=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(r.amount??"0"),decimals:r.decimals??null,uiAmount:r.uiAmount??null,uiAmountString:r.uiAmountString??null,raw:e}}async function He(e={},t={}){let r=W(e.owner||e.address,"owner"),n=e.mint?{mint:W(e.mint,"mint")}:{programId:W(e.programId||Ve,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let s=await tn("getTokenAccountsByOwner",[r,n,o],t),i=Array.isArray(s?.value)?s.value.map(oo):[];return{provider:"solana-rpc",cluster:en,owner:r,filter:n,slot:s?.context?.slot??null,accounts:i,raw:s}}var so="mainnet",io="https://mempool.space/api",ao="https://mempool.space/testnet/api";function rn(e={}){return String(e.network||process.env.BTC_NETWORK||so).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function co(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):rn(e)==="testnet"?ao:io}function H(e,t="address"){let r=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(r)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(r))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return r}async function lo(e,t={}){let r=`${co(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(r,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),s=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${s.slice(0,160)}`);return s}async function uo(e,t={}){let r=await lo(e,t);try{return JSON.parse(r)}catch{return r}}async function on(e={},t={}){let r=H(e.address||e.addr,"address"),n=await uo(`/address/${r}`,t),o=n.chain_stats||{},s=n.mempool_stats||{},i=Number(o.funded_txo_sum||0)+Number(s.funded_txo_sum||0),a=Number(o.spent_txo_sum||0)+Number(s.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:rn(t),address:r,balanceSats:String(i-a),chainStats:o,mempoolStats:s,raw:n}}var sn="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function te({provider:e,defaultUrl:t,hosts:r=[],url:n,strict:o=!1}){let i=(String(n??"").trim()||String(t)).replace(/\/$/,"");if(i===String(t).replace(/\/$/,""))return{baseUrl:i,trusted:!0,host:an(t)};let a;try{a=new URL(i)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let c=a.host;if(!c)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([an(t),...r]).has(c)){let l=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(c);return a.protocol==="http:"&&!l?{baseUrl:i,trusted:!1,host:c,reason:"plaintext http downgrade"}:{baseUrl:i,trusted:!0,host:c}}if(String(process.env[sn]||"")==="1")return{baseUrl:i,trusted:!1,host:c};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${c} (set ${sn}=1 to permit it)`);return{baseUrl:i,trusted:!1,host:c}}function an(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function G(e,t,r){let n={...e};if(!r)return n;for(let[o,s]of Object.entries(t||{}))s&&(n[o]=s);return n}function ze(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var po=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function fo(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",r=!1;try{let n=ze(e);if(n){let o=new URL(n).host,s=new URL(n).protocol,i=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);r=po.includes(o)&&(s==="https:"||i)}}catch{r=!1}return G({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},r)}async function cn(e,t={}){let n=await(t.fetchImpl||fetch)(e,{method:"GET",headers:fo(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await n.text(),s;try{s=JSON.parse(o)}catch{s=o}if(!n.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${n.status} ${String(o).slice(0,160)}`);return s}async function ln(e={},t={}){let r=H(e.address||e.addr,"address"),n=ze(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${n}/v1/indexer/address/${r}/runes/balance-list?start=0&limit=100`,`${n}/v1/runes/address/${r}`,`${n}/runes/balance/${r}`,`${n}/address/${r}/runes`],s=null;for(let i of o)try{let a=await cn(i,t),c=mo(a);return{provider:"bitcoin-meta",address:r,ok:!0,count:c.length,balances:c,source:i}}catch(a){s=a}return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:String(s?.message||s||"all indexer paths failed")}}function mo(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({rune:n.rune||n.runeid||n.runeId||n.spacedRune||n.name||n.ticker||null,runeId:n.runeid||n.runeId||n.id||null,amount:String(n.amount??n.balance??n.total??n.qty??"0"),symbol:n.symbol||null,divisibility:n.divisibility??n.div??null,raw:n}))}async function ye(e={},t={}){let r=H(e.address||e.addr,"address"),n=ze(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),s=[`${n}/v1/indexer/address/${r}/inscription-data?cursor=0&size=${o}`,`${n}/v1/inscriptions/address/${r}?limit=${o}`,`${n}/address/${r}/inscriptions?limit=${o}`],i=null;for(let a of s)try{let c=await cn(a,t),d=ho(c);return{provider:"bitcoin-meta",address:r,ok:!0,count:d.length,inscriptions:d,source:a}}catch(c){i=c}return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:String(i?.message||i||"all indexer paths failed")}}function ho(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({id:n.inscriptionId||n.id||n.inscription_id||null,number:n.inscriptionNumber??n.number??null,sat:n.sat||n.satoshi||null,contentType:n.contentType||n.content_type||null,utxo:n.utxo||n.output||(n.txid!=null?`${n.txid}:${n.vout??n.n}`:null),raw:n}))}var bo="https://api.hyperliquid.xyz/info",yo="https://api.hyperliquid-testnet.xyz/info";function go({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let r=process.env.HL_API_URL.replace(/\/$/,"");return r.endsWith("/info")?r:`${r}/info`}return e||process.env.HL_TESTNET==="1"?yo:bo}async function Ke(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let r=go(t);return T(r,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function un(e={}){return Ke({type:"allMids"},e)}async function dn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return Ke({type:"spotClearinghouseState",user:e},t)}async function pn(e,t={}){if(!e)throw new Error("hlUserState requires user");return Ke({type:"clearinghouseState",user:e},t)}var wo="https://coins.llama.fi";function So(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||wo).replace(/\/$/,"")}async function je(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return T(`${So(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}var fn=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,vo=/[<>&`*_~[\]()|\\]/g,Ao=/[\u0000-\u001F\u007F]/g;function We(e,{max:t=32,fallback:r=""}={}){return e==null?r:String(e).normalize("NFKC").replace(fn,"").replace(Ao,"").replace(vo,"").replace(/\s+/g," ").trim().slice(0,t).trim()||r}function Ge(e){if(e==null)return!1;let t=String(e);return fn.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var mn=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function Eo(e,t={}){let r=Number(e),n=t.baseUrl||mn[r];if(!n)throw new Error(`Blockscout not configured for chainId ${r}`);return n.replace(/\/$/,"")}function hn(e){return!!mn[Number(e)]}async function bn(e={},t={}){if(!e.address)throw new Error("address required");let r=Number(e.chainId||1),n=`${Eo(r,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await T(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function yn(e=[],{fungibleOnly:t=!0}={}){let r=[];for(let n of e){if(!n||typeof n!="object")continue;let o=n.token&&typeof n.token=="object"?n.token:{},s=String(o.type||n.token_type||"").toUpperCase();if(t&&s&&!s.includes("ERC-20")&&s!=="ERC20")continue;let i=o.address_hash||o.address||n.token_address||n.tokenAddress||null;if(!i||typeof i!="string")continue;let a=String(n.value??n.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(a)||a==="0")continue;let c=o.decimals??n.decimals;typeof c=="string"&&/^\d+$/.test(c)&&(c=Number(c)),(typeof c!="number"||!Number.isInteger(c)||c<0||c>36)&&(c=18);let d=We(o.symbol||o.name,{max:32,fallback:"TOKEN"}),l=We(o.name,{max:80,fallback:""})||null;r.push({address:i.toLowerCase().startsWith("0x")?i:`0x${i}`,symbol:d,name:l,decimals:c,amountRaw:a,tokenType:s||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:Ge(o.symbol)||Ge(o.name)||void 0})}return r}var ko="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",wn=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function z(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function ge(e,...t){for(let r of t){let n=String(e?.[r]||"").trim();if(n)return n}return null}function gn(e){if(!e)return null;try{return xo(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function Xe(e={},t=process.env){let r=e.addresses||{},n=gn(r.evm||e.evmAddress||ge(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=r.solana||e.solanaAddress||ge(t,"ORACLE_SOLANA_ADDRESS"),s=r.bitcoin||e.bitcoinAddress||ge(t,"ORACLE_BITCOIN_ADDRESS"),i=gn(r.hyperliquid||e.hyperliquidAddress||ge(t,"ORACLE_HYPERLIQUID_ADDRESS")||n);return{evm:n,solana:o?W(o,"portfolio Solana address"):null,bitcoin:s?H(s,"portfolio Bitcoin address"):null,hyperliquid:i}}function ue(e,t){let r=BigInt(String(e||"0")),n=Number(t);if(!Number.isInteger(n)||n<0||n>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(n===0)return r.toString();let o=r<0n,s=o?-r:r,i=10n**BigInt(n),a=s/i,c=String(s%i).padStart(n,"0").replace(/0+$/,"");return`${o?"-":""}${a}${c?`.${c}`:""}`}function ne(e){let t=Number(e);return Number.isFinite(t)?t:null}function we(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function K(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Sn(e,t){let r=wn[t],n=r?e?.coins?.[r]:null,o=Number(n?.price);return{key:r||null,priceUsd:Number.isFinite(o)?o:null,timestamp:n?.timestamp??null,confidence:n?.confidence??null}}function _o(e){let t=new Map;for(let r of e)if(r?.ok)for(let n of r.data?.accounts||[]){let o=BigInt(String(n.amount||"0"));if(o===0n||!n.mint)continue;let s=`${n.mint}:${n.decimals??"unknown"}`,i=t.get(s)||{mint:n.mint,amountRaw:0n,decimals:n.decimals??null,programs:new Set,accounts:0};i.amountRaw+=o,i.accounts+=1,r.program&&i.programs.add(r.program),t.set(s,i)}return[...t.values()].map(r=>{let n=r.amountRaw.toString(),o=r.decimals==null?null:ue(n,r.decimals),s=r.decimals===0&&r.amountRaw===1n;return{mint:r.mint,amountRaw:n,amount:o,decimals:r.decimals,tokenPrograms:[...r.programs],accountCount:r.accounts,verification:"unverified",classification:s?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function Ye(e,t){return{family:e,status:"unsupported",reason:t}}function Je(e,t){if(!e||e.status!=="ok")return e;let r=Sn(t,e.symbol),n=ne(e.amount),o=n!=null&&r.priceUsd!=null?we(n*r.priceUsd):null;return{...e,price:r,usdValue:o}}async function vn(e={},t={}){let r=new Date().toISOString(),n=Xe(e,t.env||process.env),o=e.includePrices!==!1,s=e.includeTokens!==!1,i=e.includeCollectibles!==!1,a=new Map(he.map(f=>[f.chainId,f])),c=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...a.keys()],d=[...new Set(Object.values(wn))],l=o?I(()=>je(d,z(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),p=V(c,e.concurrency||5,async f=>{let b=a.get(f);if(!b)return{family:"evm",chainId:f,name:null,address:n.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!n.evm)return{family:"evm",chainId:f,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let v={...z(t,"evm"),rpcUrl:e.rpcUrls?.[f]||t.evm?.rpcUrls?.[f]},k=await I(()=>Oe(f,n.evm,v));if(!k.ok)return{family:"evm",chainId:f,name:b.name,address:n.evm,status:"unavailable",latencyMs:k.ms,error:k.error};let C=b.nativeCurrency?.decimals??18,L=b.nativeCurrency?.symbol||"NATIVE",y=k.data.balanceWei,x={status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(s&&hn(f)){let j=await I(()=>bn({chainId:f,address:n.evm},{...z(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));j.ok?x={status:"ok",assets:yn(j.data,{fungibleOnly:!0}).map(ie=>{let ae=ue(ie.amountRaw,ie.decimals);return{...ie,amount:ae,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:j.ms}:x={status:"unavailable",assets:[],reason:j.error||"blockscout token-balances failed",source:"blockscout",latencyMs:j.ms}}return{family:"evm",chainId:f,name:b.name,address:n.evm,status:"ok",latencyMs:k.ms,native:{status:"ok",symbol:L,amountRaw:y,decimals:C,amount:ue(y,C)},fungibleTokens:x,collectibles:{status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:x.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),h=(async()=>{if(!n.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let f=z(t,"solana"),b=await I(()=>nn({address:n.solana},f)),v=s||i?await Promise.all([I(()=>He({owner:n.solana,programId:Ve},f)).then(x=>({...x,program:"spl-token"})),I(()=>He({owner:n.solana,programId:ko},f)).then(x=>({...x,program:"token-2022"}))]):[],k=_o(v),C=k.filter(x=>x.classification==="collectible-candidate"),L=k.filter(x=>x.classification!=="collectible-candidate"),y=v.filter(x=>!x.ok).map(x=>x.error);return{family:"solana",name:"Solana Mainnet",address:n.solana,status:b.ok||v.some(x=>x.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:ue(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:s?y.length===v.length?"unavailable":y.length?"partial":"ok":"not-requested",assets:s?L:[],errors:y,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:i?y.length===v.length?"unavailable":"partial":"not-requested",assets:i?C:[],errors:y,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!n.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let f=z(t,"bitcoin"),b=z(t,"bitcoinMeta"),[v,k,C]=await Promise.all([I(()=>on({address:n.bitcoin},f)),s?I(()=>ln({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),i?I(()=>ye({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),L=k.ok?k.data:null,y=C.ok?C.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:n.bitcoin,status:v.ok||L?.ok||y?.ok?"ok":"unavailable",native:v.ok?{status:"ok",symbol:"BTC",amountRaw:v.data.balanceSats,decimals:8,amount:ue(v.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:v.error},fungibleTokens:{status:s?L?.ok?"ok":"unavailable":"not-requested",assets:L?.balances||[],error:L?.ok?null:L?.error||k.error,verification:"indexer-reported"},collectibles:{status:i?y?.ok?"ok":"unavailable":"not-requested",assets:y?.inscriptions||[],error:y?.ok?null:y?.error||C.error,unknownNotEmpty:!!y?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),S=(async()=>{if(!n.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let f=z(t,"hyperliquid"),[b,v,k]=await Promise.all([I(()=>dn(n.hyperliquid,f)),I(()=>pn(n.hyperliquid,f)),I(()=>un(f))]),C=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(y=>K(y.total)||K(y.hold)).map(y=>({coin:y.coin||null,total:String(y.total??"0"),hold:String(y.hold??"0"),priceUsd:null,usdValue:null})),L=(v.ok&&Array.isArray(v.data?.assetPositions)?v.data.assetPositions:[]).map(y=>y.position||y).filter(y=>K(y.szi)).map(y=>({coin:y.coin||null,size:String(y.szi??"0"),entryPrice:y.entryPx??null,positionValueUsd:y.positionValue??null,unrealizedPnlUsd:y.unrealizedPnl??null,liquidationPrice:y.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:n.hyperliquid,status:b.ok||v.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:C,error:b.ok?null:b.error},perps:{status:v.ok?"ok":"unavailable",accountValueUsd:v.data?.marginSummary?.accountValue??null,withdrawableUsd:v.data?.withdrawable??null,positions:L,error:v.ok?null:v.error},mids:k.ok?k.data:{},source:"hyperliquid-info"}})(),[w,g,E,N,B]=await Promise.all([p,h,u,S,l]),m=B.ok?B.data:null,A=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),_=[];for(let f of w){if(f.family!=="evm"||f.fungibleTokens?.status!=="ok")continue;let b=A[f.chainId];if(b)for(let v of f.fungibleTokens.assets||[])v.address&&_.push(`${b}:${String(v.address).toLowerCase()}`)}let D=null;if(o&&_.length){let f=[...new Set(_)],b=await I(()=>je(f,z(t,"prices")));b.ok&&(D=b.data)}let Y=w.map(f=>{let b=f.native?{...f,native:Je(f.native,m)}:f;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let v=A[b.chainId],k=b.fungibleTokens.assets.map(C=>{let L=String(C.symbol||"").toUpperCase(),y=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(L)&&(y=1),y==null&&v&&C.address&&D?.coins){let ft=`${v}:${String(C.address).toLowerCase()}`,ie=D.coins[ft],ae=Number(ie?.price);Number.isFinite(ae)&&ae>0&&(y=ae)}let x=ne(C.amount),j=x!=null&&y!=null?we(x*y):null;return{...C,priceUsd:y,usdValue:j}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:k}}}return b});g.native&&(g.native=Je(g.native,m)),E.native&&(E.native=Je(E.native,m));let oe=0,se=0,J=0;for(let f of[...Y,g,E]){f.native?.status==="ok"&&K(f.native.amount)&&(f.native.usdValue!=null?(oe+=f.native.usdValue,se+=1):J+=1);for(let b of f.fungibleTokens?.assets||[])!K(b.amount)&&!K(b.amountRaw)||(b.usdValue!=null?(oe+=b.usdValue,se+=1):J+=1)}let Hn=Sn(m,"HYPE");for(let f of N.spot?.balances||[]){let b=String(f.coin||"").toUpperCase(),v=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?Hn.priceUsd||ne(N.mids?.HYPE):ne(N.mids?.[f.coin]),k=ne(f.total);f.priceUsd=v,f.usdValue=k!=null&&v!=null?we(k*v):null,K(f.total)&&(f.usdValue!=null?(oe+=f.usdValue,se+=1):J+=1)}let xe=ne(N.perps?.accountValueUsd);xe!=null&&xe!==0&&(oe+=xe,se+=1);let zn=[...g.fungibleTokens?.assets||[],...g.collectibles?.assets||[]].filter(f=>K(f.amount)).length,Kn=(E.fungibleTokens?.assets||[]).length+(E.collectibles?.assets||[]).length;J+=zn+Kn;let ke=[...Y,g,E,N],X=f=>ke.filter(b=>b.status===f).length,Q=[],_e=Y.filter(f=>f.fungibleTokens?.status==="unavailable"),pt=Y.filter(f=>f.fungibleTokens?.status==="ok");_e.length&&!pt.length?Q.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):_e.length&&Q.push(`EVM token discovery partial: Blockscout covered ${pt.length} chain(s); ${_e.length} chain(s) still native-only.`),(g.fungibleTokens?.assets?.length||g.collectibles?.assets?.length)&&Q.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),E.collectibles?.unknownNotEmpty&&Q.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),B.ok||Q.push(`Price provider unavailable: ${B.error}`);let Ie=[Ye("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),Ye("sui","Sui balance adapter is not installed"),Ye("aptos","Aptos balance adapter is not installed")],jn=ke.some(f=>["unavailable","partial","not-configured"].includes(f.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(f.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:r,addresses:n,coverage:{requestedSurfaces:ke.length,ok:X("ok"),unavailable:X("unavailable"),notConfigured:X("not-configured"),unsupported:X("unsupported")+Ie.length,evmChainsRequested:c.length,evmChainsOk:Y.filter(f=>f.status==="ok").length},valuation:{knownUsd:we(oe),label:"known priced value, not a complete portfolio total",pricedItems:se,unpricedNonzeroItems:J,complete:J===0&&!jn&&X("unavailable")===0&&X("not-configured")===0&&Ie.length===0,priceSource:o?"DefiLlama":null,priceStatus:B.ok?"ok":"unavailable",priceQueriedAt:r},chains:[...Y,g,E,N],unsupportedFamilies:Ie,warnings:Q}}import{readFileSync as Io,existsSync as No}from"node:fs";import{getAddress as Co}from"ethers";var la=300*1e3,ua=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var To="https://api.opensea.io/api/v2",Ro=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),Po=new Set(Ro),Lo=new Set(["solana","flow"]);function Uo(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!No(e))return"";try{for(let t of Io(e,"utf8").split(`
5
- `)){let r=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(r)return r[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function Ze(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||Uo()}function En(e={}){return te({provider:"opensea",defaultUrl:To,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function xn(e={}){return En(e).baseUrl}function kn(e={}){return G({accept:"application/json"},{"x-api-key":Ze(e)},En(e).trusted)}function $o(e){let t=String(e||"ethereum").trim().toLowerCase();if(!Po.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function An(e,t="address"){try{return Co(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function _n(e,t=null){let r=String(e||"").trim();if(!r)throw new Error("opensea: account address required");if(t&&!Lo.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(r))return An(r,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(r))throw new Error("opensea: invalid account address");return r}function Oo(e={},t,r){return{chain:t,owner:r,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function et(e={},t={}){if(!Ze(t))throw new Error("OPENSEA_API_KEY required");let r=$o(e.chain),n=_n(e.address||e.owner,r),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),s=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),i=[],a=e.next?String(e.next):null,c=0;do{let d=new URL(`${xn(t)}/chain/${encodeURIComponent(r)}/account/${encodeURIComponent(n)}/nfts`);d.searchParams.set("limit",String(o)),e.collection&&d.searchParams.set("collection",String(e.collection)),a&&d.searchParams.set("next",a);let l=await T(d.toString(),{headers:kn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let p of Array.isArray(l?.nfts)?l.nfts:[])i.push(Oo(p,r,n));a=l?.next?String(l.next):null,c+=1}while(a&&c<s);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:r,owner:n,count:i.length,pages:c,complete:!a,next:a,nfts:i,exec:!1,readOnly:!0}}async function In(e={},t={}){if(!Ze(t))throw new Error("OPENSEA_API_KEY required");let r=_n(e.address||e.owner),n=await T(`${xn(t)}/account/${encodeURIComponent(r)}/pnl`,{headers:kn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:r,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:n?.realized_pnl_usd??null,unrealizedPnlUsd:n?.unrealized_pnl_usd??null,totalPnlUsd:n?.total_pnl_usd??null,netInvestedUsd:n?.net_invested_usd??null,currentValueUsd:n?.current_value_usd??null,returnPercentage:n?.return_percentage??null,itemLevelPnlAvailable:!1,raw:n,exec:!1,readOnly:!0}}var Bo="https://api.satflow.com/v1";function Nn(e={}){return te({provider:"satflow",defaultUrl:Bo,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function Do(e={}){return Nn(e).baseUrl}function Cn(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function qo(e={}){return G({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":Cn(e)},Nn(e).trusted)}async function Fo(e,{method:t="GET",body:r,opts:n={}}={}){if(!Cn(n))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let s=`${Do(n)}${e.startsWith("/")?e:`/${e}`}`,a=await(n.fetchImpl||fetch)(s,{method:t,headers:qo(n),body:r!=null?JSON.stringify(r):void 0,signal:AbortSignal.timeout(n.timeoutMs??2e4)}),c=await a.text(),d;try{d=JSON.parse(c)}catch{d=c}if(!a.ok)throw new Error(`satflow ${t} ${e}: HTTP ${a.status} ${String(c).slice(0,200)}`);return d}async function Tn(e={},t={}){let r=H(e.address||e.addr,"address"),n=new URLSearchParams({address:r});e.type&&n.set("type",e.type),e.limit!=null&&n.set("limit",String(e.limit)),e.offset!=null&&n.set("offset",String(e.offset));let o=await Fo(`/address/wallet-contents?${n}`,{opts:t});return{provider:"satflow",address:r,contents:o}}var Ra=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Vo=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],Ho=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,zo=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Ko(e={}){let t=[],r=String(e.name||""),n=String(e.description||""),o=`${r} ${n}`;Ho.test(r)&&t.push("url-in-name");let s=Vo.filter(d=>d.test(o)).length;s>0&&t.push(`lure-language:${s}`),zo.test(r)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(r)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let i=e.estimatedValueUsd==null&&e.estimatedValueSats==null,a=!Array.isArray(e.traits)||e.traits.length===0;i&&a&&s>0&&t.push("valueless-airdrop-with-lure");let c=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:c,risk:c?"high":t.length>0?"low":"none",reasons:t}}function Rn(e={}){let t=Ko(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var jo=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Wo=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function tt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function de(e,t){let r=await I(t);return r.ok?{ok:!0,data:r.data}:{ok:!1,error:`${e}: ${r.error}`.slice(0,300)}}function Go(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function Yo(e={},t){let r=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:r==null?null:String(r),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(r?`Inscription ${r}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function Jo(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function Pn(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function Xo(e){let t=new Map;if(Array.isArray(e)){for(let r of e)r?.assetKey&&t.set(String(r.assetKey).toLowerCase(),r);return t}if(e&&typeof e=="object")for(let[r,n]of Object.entries(e))t.set(r.toLowerCase(),n);return t}function Qo(e,t){let r=Pn(e),n=t.get(r),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!n)return{...e,assetKey:r};let s=Number(n.costUsd),i=Number(n.feesUsd??0);if(!Number.isFinite(s)||s<0||!Number.isFinite(i)||i<0)return{...e,assetKey:r,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let a=Math.round((s+i)*100)/100;return Number.isFinite(o)?{...e,assetKey:r,acquisitionCost:{costUsd:s,feesUsd:i,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-a)*100)/100,currentValueUsd:o,totalCostUsd:a,realizedUsd:null}}:{...e,assetKey:r,acquisitionCost:{costUsd:s,feesUsd:i,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Zo(e){let t=new Map;for(let r of e){let n=Pn(r);t.has(n)||t.set(n,r)}return[...t.values()]}function es(e,t){let r=e.filter(s=>s.itemPnl?.status==="estimated"),n=e.length-r.length,o=Math.round(r.reduce((s,i)=>s+Number(i.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:n===0&&e.length?"estimated-complete-for-held-items":r.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:r.length,unknownItems:n,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function Ln(e={},t={}){let r=new Date().toISOString(),n=Xe(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,s=jo.filter(m=>!o||o.has(m.chain)),i=[],a=[],c=tt(t,"opensea"),d=n.evm?s.filter(m=>m.family!=="solana"):[],l=await V(d,4,async m=>({row:m,result:await de(`opensea-${m.chain}`,()=>et({chain:m.chain,address:n.evm,pageSize:e.pageSize,maxPages:e.maxPages},c),t.timeoutMs??35e3)}));for(let{row:m,result:A}of l)if(A.ok){let _=A.data.nfts.map(D=>({...D,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));a.push(..._),i.push({family:m.family,chain:m.chain,chainId:m.chainId,status:A.data.complete?"ok":"partial",count:_.length,complete:A.data.complete,next:A.data.next,source:"opensea"})}else i.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:A.error,source:"opensea"});if(!n.evm)for(let m of s.filter(A=>A.family!=="solana"))i.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(n.solana&&(!o||o.has("solana"))){let m=await de("opensea-solana",()=>et({chain:"solana",address:n.solana,pageSize:e.pageSize,maxPages:e.maxPages},c),t.timeoutMs??35e3);if(m.ok){let A=m.data.nfts.map(_=>({..._,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));a.push(...A),i.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:A.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else i.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&i.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(n.bitcoin&&(!o||o.has("bitcoin"))){let m=await de("satflow-wallet-contents",()=>Tn({address:n.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},tt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let A=Go(m.data.contents).map(D=>Yo(D,n.bitcoin));a.push(...A);let _=A.length<Number(e.bitcoinLimit??100);i.push({family:"bitcoin",chain:"bitcoin",status:_?"ok":"partial",count:A.length,complete:_,source:"satflow"})}else{let A=await de("bitcoin-meta-inscriptions",()=>ye({address:n.bitcoin},tt(t,"bitcoinMeta")),t.timeoutMs??35e3),_=A.ok&&A.data?.ok&&Array.isArray(A.data.inscriptions)?A.data.inscriptions:[];a.push(..._.map(D=>Jo(D,n.bitcoin))),i.push({family:"bitcoin",chain:"bitcoin",status:_.length?"partial":"unavailable",count:_.length,complete:!1,source:_.length?"bitcoin-meta":"satflow",error:_.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&i.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let p=[];if(e.includePnl!==!1)for(let m of[...new Set([n.evm,n.solana].filter(Boolean))]){let A=await de(`opensea-pnl-${m}`,()=>In({address:m},c),t.timeoutMs??35e3);p.push(A.ok?{status:"ok",...A.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:A.error})}let h=Xo(e.costBasis),u=Zo(a).map(m=>Qo(m,h)).map(m=>Rn(m)),S=u.filter(m=>!m.spam),w=u.filter(m=>m.spam),g=S.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),E=Math.round(g.reduce((m,A)=>m+Number(A.estimatedValueUsd),0)*100)/100,N=S.length-g.length,B=i.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:r,addresses:n,coverage:i,unsupported:Wo,inventory:{count:u.length,visibleCount:S.length,flaggedCount:w.length,items:u,visibleItems:S,flaggedItems:w},valuation:{estimatedCurrentValueUsd:E,valuedItems:g.length,unvaluedItems:N,complete:N===0&&B.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:es(S,p),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as nt}from"node:os";import{join as rt}from"node:path";var Un=process.env.ORACLE_PUBLIC_DESKTOP==="1",ts=Un?process.env.ORACLE_CONFIG_DIR||rt(nt(),".config","oracle"):rt(nt(),".config","oracle"),Ja=Un?ts:rt(nt(),".config","mad-desk");function ot(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var cs=JSON.parse(Bn(new URL("../../package.json",import.meta.url),"utf8")),re="public",ls="127.0.0.1",us=8799,ve=cs.version,ds=new Set(["127.0.0.1","localhost","::1"]),ps=ct(os(as(import.meta.url)),"../.."),st=ct(ps,"public","oracle-console"),$n=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),fs=1e6,P=class extends Error{constructor(t,r,n){super(n||r),this.status=t,this.code=r}};function q(e,t,r){let n=t,o;try{U(r),o=Nt(r)}catch{n=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(n,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":re,"x-oracle-unsigned":"true"}),e.end(o)}function ms(e){return new Promise((t,r)=>{let n=[],o=0;e.on("data",s=>{if(o+=s.length,o>fs){r(new P(413,"payload-too-large","request body too large")),e.destroy();return}n.push(s)}),e.on("end",()=>{let s=Buffer.concat(n).toString("utf8").trim();if(s==="")return t({});try{t(JSON.parse(s))}catch{r(new P(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>r(new P(400,"bad-request","request stream error")))})}function R(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new P(400,t,`${t} must be a JSON object`);return e}function hs(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function bs(e){let t=hs(e);if(!ds.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function ys(){return{status:200,body:{ok:!0,plane:re,version:ve}}}function Ae(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function gs(e){let t=R(e,"body"),r=t.input!==void 0?R(t.input,"input"):t,n=Ae(R(t.opts,"opts")),o=r===t?(({opts:s,...i})=>i)(t):r;return{status:200,body:Rt(o,n)}}function ws(e){let t=R(e,"body"),r=t.request!==void 0?R(t.request,"request"):t.input!==void 0?R(t.input,"input"):t,n=Ae(R(t.opts,"opts")),o=r===t?(({opts:s,...i})=>i)(t):r;return{status:200,body:Pt(o,n)}}function Ss(e){let t=R(e,"body"),r=Ae(R(t.opts,"opts")),n=$t(t.store??[],r);return{status:200,body:{ok:!0,count:n.length,grants:n}}}function vs(e){let t=R(e,"body"),r=Ae(R(t.opts,"opts")),n=Ot(t.store??[],t.id,r);return n==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:n}}function As(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,r=!0,n=[];return t&&n.push("privy"),r&&n.push("injected"),{status:200,body:{ok:!0,plane:re,version:ve,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:r,modes:n},privy:{appId:e||null}}}}var it=400;function Es(e=[]){if(e.length<=it)return{rows:e,truncated:!1,omitted:0};let t=n=>n?.kind==="native"?0:n?.priced?1:2;return{rows:[...e].sort((n,o)=>t(n)-t(o)).slice(0,it),truncated:!0,omitted:e.length-it}}var at=300;function xs(e=[]){if(e.length<=at)return{items:e,truncated:!1,omitted:0};let t=n=>n?.spam===!0||n?.nsfw===!0?2:Number.isFinite(Number(n?.floorUsd))&&Number(n?.floorUsd)>0?0:1;return{items:[...e].sort((n,o)=>t(n)-t(o)).slice(0,at),truncated:!0,omitted:e.length-at}}var Se=12;async function ks(e){let t=R(e,"body"),r=typeof t.owner=="string"?t.owner:null;if(!r)throw new P(400,"owner-required","owner must be an EVM address");let n=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(n&&n.length>Se)throw new P(400,"too-many-chains",`at most ${Se} chainIds per request`);let s=await Zt({owner:r,chainIds:n},qn());return{status:200,body:{ok:!0,owner:s.owner,scannedRange:s.scannedRange,approvals:s.approvals,scans:s.scans,warnings:s.warnings}}}var _s=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,Is=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function Ns(e){if(typeof e!="string")return null;let t=e.trim();return _s.test(t)?t:null}function Cs(e){if(typeof e!="string")return null;let t=e.trim();return Is.test(t)?t:null}function Dn(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function Ts(e){let t=R(e,"body"),r=Dn(t.owner),n=Ns(t.solana),o=Cs(t.bitcoin);if(!r&&!n&&!o)throw new P(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let s=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(s&&s.length>Se)throw new P(400,"too-many-chains",`at most ${Se} chainIds per request`);let i=await vn({addresses:{evm:r,solana:n,bitcoin:o},evmChainIds:s,includePrices:!0,includeTokens:!0,includeCollectibles:!1},{env:{}}),a=[],c=[],d=0,l=0;for(let u of i.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let S=u.fungibleTokens?.status??"unavailable";S==="ok"?d+=1:S==="unavailable"&&(l+=1),c.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:S,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let w=u.native;u.status==="ok"&&w&&w.status==="ok"&&w.amountRaw&&w.amountRaw!=="0"&&w.amountRaw!=="0x0"&&a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:w.symbol,decimals:w.decimals,amount:String(w.amountRaw),amountRaw:String(w.amountRaw),amountFormatted:w.amount,kind:"native",valueUsd:w.usdValue!=null?String(w.usdValue):null,priced:w.usdValue!=null});for(let g of u.fungibleTokens?.assets||[]){let E=g.amountRaw!=null?String(g.amountRaw):null;if(!E||E==="0")continue;let N=typeof g.decimals=="number"&&Number.isInteger(g.decimals)?g.decimals:null;a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:g.symbol||g.coin||"TOKEN",decimals:N,amount:E,amountRaw:E,amountFormatted:g.amount!=null?String(g.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:g.address||g.mint||null,valueUsd:g.usdValue!=null?String(g.usdValue):null,priced:g.usdValue!=null,source:g.source||u.fungibleTokens?.source||null})}}let p=l>0||!!(i.valuation&&i.valuation.complete===!1),h=Es(a);return{status:200,body:{ok:!0,owner:i.addresses?.evm??r,queriedAt:i.queriedAt,portfolio:{rows:h.rows,rowsTruncated:h.truncated,rowsOmitted:h.omitted,chains:c,coverage:i.coverage,valuation:i.valuation??null,complete:!p&&l===0&&!h.truncated,incompleteReason:h.truncated?`Showing ${h.rows.length} of ${h.rows.length+h.omitted} rows (native and priced first); ${h.omitted} low-signal rows omitted.`:p?d?`Token scan live on ${d} chain(s); ${l} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:i.warnings}}}function qn(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function Rs(e){let t=R(e,"body"),r=Dn(t.owner);if(!r)throw new P(400,"owner-required","owner must be an EVM address");let n=await Ln({addresses:{evm:r}},qn()),o=n?.inventory&&typeof n.inventory=="object"?n.inventory:{},i=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(n?.items)?n.items:[]).map(l=>{if(!l||typeof l!="object")return null;let p=typeof l.collection=="string"?l.collection:l.collection&&typeof l.collection=="object"&&typeof l.collection.slug=="string"?l.collection.slug:typeof l.contract=="string"?l.contract:null;return{chain:l.chain??null,chainId:l.chainId??null,family:l.family??null,owner:l.owner??r,contract:l.contract??null,tokenId:l.tokenId==null?null:String(l.tokenId),tokenStandard:l.tokenStandard??null,collection:p,name:typeof l.name=="string"?l.name.slice(0,160):null,imageUrl:l.imageUrl??l.image??null,estimatedValueUsd:l.estimatedValueUsd!=null&&Number.isFinite(Number(l.estimatedValueUsd))?Number(l.estimatedValueUsd):null,floorUsd:l.floorUsd!=null&&Number.isFinite(Number(l.floorUsd))?Number(l.floorUsd):l.estimatedValueUsd!=null&&Number.isFinite(Number(l.estimatedValueUsd))?Number(l.estimatedValueUsd):null,spam:l.spam===!0,nsfw:l.nsfw===!0,source:typeof l.source=="string"?l.source.slice(0,64):null}}).filter(Boolean),a=Array.isArray(n?.coverage)?n.coverage:[],c=xs(i),d=n?.valuation?.complete===!0&&!c.truncated;return{status:200,body:{ok:!0,owner:r,queriedAt:n.generatedAt??new Date().toISOString(),nfts:{items:c.items,itemsTruncated:c.truncated,itemsOmitted:c.omitted,chains:a.map(l=>({family:l?.family??null,chain:l?.chain??null,chainId:l?.chainId??null,status:l?.status??null,count:l?.count??null,complete:l?.complete===!0,source:l?.source??null,error:null,reason:typeof l?.reason=="string"?l.reason.slice(0,120):null})),coverage:{operational:!0,complete:d,hasGaps:!d,degraded:a.filter(l=>l?.status==="partial").map(l=>l.chain).filter(Boolean),unavailable:a.filter(l=>l?.status==="unavailable").map(l=>l.chain).filter(Boolean),unconfigured:a.filter(l=>l?.status==="not-configured").map(l=>l.chain).filter(Boolean)},count:c.items.length,visibleCount:c.items.length,totalCount:i.length},valuation:n?.valuation?{estimatedCurrentValueUsd:n.valuation.estimatedCurrentValueUsd??null,valuedItems:n.valuation.valuedItems??null,unvaluedItems:n.valuation.unvaluedItems??null,complete:n.valuation.complete===!0}:null}}}var Ps=6e4,Ls=120,Fn=10,Us=300,$s=Fn,On=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),Os=4096,pe=new Map;function Ms(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let r=t.split(",")[0].trim();if(r)return r.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function Bs(e,t){let r=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),n=r==="127.0.0.1"||r==="::1"||r.startsWith("127."),o=Ms(e),s=n&&o!==r,i=On.has(t)?n&&!s?$s:Fn:n&&!s?Us:Ls,a=Date.now(),c=`${o}:${On.has(t)?"amp":"std"}`,d=pe.get(c);if(!d||a>=d.resetAt){for(pe.set(c,{count:1,resetAt:a+Ps});pe.size>Os;){let l=pe.keys().next();if(l.done)break;pe.delete(l.value)}return{allowed:!0,limit:i,remaining:i-1,retryAfterSec:0}}return d.count+=1,d.count>i?{allowed:!1,limit:i,remaining:0,retryAfterSec:Math.max(1,Math.ceil((d.resetAt-a)/1e3))}:{allowed:!0,limit:i,remaining:i-d.count,retryAfterSec:0}}var Mn=Object.freeze({"GET /public/health":ys,"GET /public/config":As,"POST /public/connect/request":gs,"POST /public/connect/assemble":ws,"POST /public/grants/active":Ss,"POST /public/grants/get":vs,"POST /public/approvals":ks,"POST /public/portfolio":Ts,"POST /public/nfts":Rs});function lt(e={}){return{"cache-control":"no-store","x-oracle-plane":re,"x-oracle-unsigned":"true",...e}}function Ds(e,t,r,n){e.writeHead(t,lt({"content-type":r})),e.end(n)}function qs(e,t,r){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let n=r===""?"/":r,o=$n[n]||$n[n.replace(/\/+$/,"")||"/"];if(!o)return!1;let s=ss(ct(st,o.file));if(!s.startsWith(st+is)&&s!==st)return q(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!rs(s))return q(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let i=Bn(s);return e.method==="HEAD"?(t.writeHead(200,lt({"content-type":o.type,"content-length":String(i.length)})),t.end(),!0):(Ds(t,200,o.type,i),!0)}async function Fs(e,t){let n=new URL(e.url,"http://localhost").pathname||"/";n.length>1&&n.endsWith("/")&&n!=="/oracle-console/"&&(n=n.replace(/\/+$/,"")),n===""&&(n="/");let o=n.replace(/\/+$/,"")||"/",s=`${e.method} ${o}`,i=Mn[s];try{if(!i){if(qs(e,t,n))return;throw Object.keys(Mn).some(p=>p.endsWith(` ${o}`))?new P(405,"method-not-allowed",`unsupported method for ${o}`):new P(404,"not-found",`unknown route ${o}`)}let a=Bs(e,o);if(!a.allowed){t.writeHead(429,lt({"content-type":"application/json","retry-after":String(a.retryAfterSec),"x-ratelimit-limit":String(a.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${a.retryAfterSec}s`}));return}let c=e.method==="GET"||e.method==="HEAD"?void 0:await ms(e),d=await i(c);q(t,d.status,d.body)}catch(a){if(a instanceof $){q(t,500,{error:"secret-leak-blocked"});return}if(a instanceof O){q(t,400,{error:"invalid-grant",errors:a.errors.map(c=>({field:c.field,message:c.message}))});return}if(a instanceof P){q(t,a.status,{error:a.code,message:a.message});return}if(a instanceof TypeError){q(t,400,{error:"bad-request",message:a.message});return}q(t,500,{error:"internal-error"})}}function Vs(){return ns((e,t)=>{Fs(e,t).catch(()=>{try{q(t,500,{error:"internal-error"})}catch{}})})}function ut({host:e,port:t}={}){let r=bs(e??ot("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",ls)),n=t??ot("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(us)),o=Number(n);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(n)}`);return{host:r,port:o}}function Vn(e={}){let{host:t,port:r}=ut(e),n=Vs();return n.listen(r,t),n}var dt=ut(),Ee=Vn(dt);Ee.on("listening",()=>{let e=Ee.address(),t=typeof e=="object"&&e?e.address:dt.host,r=typeof e=="object"&&e?e.port:dt.port;console.log(`oracle-public-server listening on http://${t}:${r} (plane=${re}, version=${ve}, unsigned-only)`)});Ee.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{Ee.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});
2
+ var Pe=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};import{createHash as mr}from"node:crypto";function gr(e){let t=String(e||"").toLowerCase();return Wt.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function wr(e){let t={};for(let[r,n]of Object.entries(e||{}))gr(r)||(t[r]=n);return t}function Sr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function vr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Er(e,t,r){let n={};for(let[c,d]of Object.entries(r||{}))n[c.toLowerCase()]=d;let o=Object.keys(n).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),a=[...new Set([...Wt,...o])].sort().map(c=>`${c}=${n[c]??""}`).join(`
3
+ `),s=mr("sha256").update(a).digest("hex").slice(0,32);return`${e} ${t} ${s}`}function xr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Ht):Math.min(250*2**e,Ht)+Math.floor(Math.random()*100)}async function Ir(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i}){let a=new AbortController,s=setTimeout(()=>a.abort(),i);try{let c=String(e),d={...n||{}};for(let l=0;l<=Vt;l+=1){let p=await t(c,{method:r,headers:d,body:o,signal:a.signal,redirect:"manual"}),h=await p.text(),u=null;if(h)try{u=JSON.parse(h)}catch{u=null}if(yr.has(p.status)){if(r!=="GET"&&r!=="HEAD"){let w=new Error(`HTTP ${p.status} ${r} ${c} redirected non-idempotent request`);throw w.status=p.status,w.body=u??h.slice(0,300),w}if(l===Vt)throw new Error(`HTTP redirect loop for ${e}`);let S=Sr(p.headers?.get?.("location"),c);vr(S,c)||(d=wr(d)),c=S;continue}if(!p.ok){let S=new Error(`HTTP ${p.status} ${r} ${c}`);throw S.status=p.status,S.retryAfter=p.headers?.get?.("retry-after")??null,S.body=u??h.slice(0,300),S}return u??h}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(s)}}async function C(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let n=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},a=t.body;a!=null&&typeof a!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",a=JSON.stringify(a));let s=Number.isInteger(t.retries)?Math.max(t.retries,0):br,c=async()=>{let u;for(let S=0;S<=s;S++)try{return await Ir(e,{fetchImpl:r,method:o,headers:i,body:a,timeoutMs:n})}catch(w){u=w;let g=w?.status,x=w?.name==="AbortError",N=new Set([408,425,429]),F=g!=null?N.has(g)||hr.has(g)&&Dt.has(o):!x&&Dt.has(o);if(S===s||!F)throw w;await Ar(xr(S,w?.retryAfter))}throw u};if(!(t.dedupe!==!1&&o==="GET"&&a==null))return c();let l=Er(o,e,i),p=Be.get(l);if(p)return p;let h=c().finally(()=>Be.delete(l));return Be.set(l,h),h}async function _(e){let t=Date.now();try{let r=await e();return{ok:!0,ms:Date.now()-t,data:r}}catch(r){return{ok:!1,ms:Date.now()-t,error:String(r.message||r),status:r.status??null}}}async function V(e,t,r){let n=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,n.length||1)),i=new Array(n.length),a=0;return await Promise.all(Array.from({length:o},async()=>{for(;a<n.length;){let s=a++;i[s]=await r(n[s],s)}})),i}var hr,Dt,br,Ht,Wt,yr,Vt,Be,Ar,P=Pe(()=>{hr=new Set([408,425,429,500,502,503,504]),Dt=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),br=2,Ht=4e3,Wt=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],yr=new Set([301,302,303,307,308]),Vt=3;Be=new Map;Ar=e=>new Promise(t=>setTimeout(t,e))});function jt(e){return kr.get(Number(e))||null}function Kt(e,t=process.env){let r=jt(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}var zt,kr,Gt=Pe(()=>{zt={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},kr=new Map(Object.values(zt).map(e=>[e.chainId,e]))});import{Interface as _r,getAddress as Nr}from"ethers";function Me(e,t){try{return Nr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Cr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=Kt(e,r);return n||Tr[Number(e)]||null}function Rr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Pr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}async function M(e,t,r=[],n={}){let o=String(t||"");Rr(o);let i=Cr(e,n);if(!i)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let s=await C(i,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:r},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(s?.error){let c=new Error(s.error.message||JSON.stringify(s.error));throw c.code=s.error.code,c}return s.result}async function Fe(e,t={}){let r=await M(e,"eth_blockNumber",[],t);return parseInt(r,16)}async function qe(e,t,r={}){if(!t)throw new Error("rpcGetBalance requires address");let n=await M(e,"eth_getBalance",[t,"latest"],r);return{chainId:Number(e),address:t,balanceWei:BigInt(n).toString(),balanceHex:n}}async function Jt(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=Me(e.token||e.tokenAddress,"token"),o=Me(e.owner,"owner"),i=Me(e.spender,"spender"),a=Yt.encodeFunctionData("allowance",[o,i]),s=await M(r,"eth_call",[{to:n,data:a},e.blockTag||"latest"],t),c=Yt.decodeFunctionResult("allowance",s),d=BigInt(c[0]);return{chainId:r,token:n,owner:o,spender:i,allowance:d.toString(),allowanceHex:`0x${d.toString(16)}`,blockTag:e.blockTag||"latest"}}var Yt,Tr,Pr,te=Pe(()=>{P();Gt();Yt=new _r(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Tr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};Pr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/});import{createServer as ci}from"node:http";import{readFileSync as Vn,existsSync as li}from"node:fs";import{dirname as ui,join as pt,normalize as di,sep as pi}from"node:path";import{fileURLToPath as fi}from"node:url";import{createHash as Qn}from"node:crypto";var ue=1,gt=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Zn=Object.freeze(["read","simulate"]),wt=1e4,St=1440*60,vt=128,Et=256,xt=64,At=256,It=/^0x[0-9a-fA-F]{40}$/,er=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,tr=/^[a-z][a-z0-9_-]*:\*$/,nr=/^[A-Za-z0-9._:-]+$/,rr=/^[A-Za-z0-9._:-]+$/,kt=/^(0|[1-9][0-9]*)$/,B=class extends Error{constructor(t){let r=t.map(n=>`${n.field}: ${n.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${r.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function _t(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function or(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return kt.test(t)?t:null}return null}function H(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!kt.test(t))return null;let r=Number(t);return Number.isSafeInteger(r)?r:null}return null}function Re(e){let t=String(e).split(":")[0];return Zn.includes(t)}function Oe(e,t={}){let r=[],n=(p,h)=>r.push({field:p,message:h});if(!_t(e))return n("grant","grant must be a plain object"),{ok:!1,errors:r,grant:null};for(let p of Object.keys(e))gt.includes(p)||n(p,"unknown field is not allowed");for(let p of gt)(!(p in e)||e[p]==null)&&n(p,"required field is missing");if(r.length)return{ok:!1,errors:r,grant:null};let o={},i=H(e.chainId);i==null||i<=0?n("chainId","must be a positive integer chain id"):o.chainId=i;for(let p of["agentAddress","accountAddress"]){let h=e[p];typeof h!="string"||!It.test(h.trim())?n(p,"must be a 0x-prefixed 20-byte hex address"):o[p]=h.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)n("actions","must be a non-empty array of action scopes");else if(e.actions.length>xt)n("actions",`too many actions (max ${xt})`);else{let p=[];for(let h of e.actions){let u=typeof h=="string"?h.trim():null;if(!u){n("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&tr.test(u)?p.push(u):n("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!er.test(u)){n("actions",`malformed action "${u}" (expected verb:resource)`);continue}p.push(u)}o.actions=[...new Set(p)].sort()}if(!Array.isArray(e.targets))n("targets","must be an array of contract addresses");else if(e.targets.length>At)n("targets",`too many targets (max ${At})`);else{let p=[];for(let h of e.targets){let u=typeof h=="string"?h.trim():null;if(!u||!It.test(u)){n("targets",`target "${h}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}p.push(u.toLowerCase())}if(o.targets=[...new Set(p)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let h=o.actions.filter(u=>!Re(u));(h.length>0||o.actions.length===0)&&n("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${h.join(", ")||"no valid actions"})`)}}for(let p of["maxValueWei","maxGasWei"]){let h=or(e[p]);h==null?n(p,"must be a non-negative integer wei amount"):o[p]=h}let a=H(e.maxSlippageBps);a==null||a>wt?n("maxSlippageBps",`must be an integer between 0 and ${wt}`):o.maxSlippageBps=a;let s=864e10,c=H(e.expiresAt);if(c==null||c<=0)n("expiresAt","must be a positive unix-seconds timestamp");else if(c>s)n("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=c,t.now!=null){let p=H(t.now);p==null?n("expiresAt","opts.now must be a unix-seconds integer"):c<=p?n("expiresAt",`grant is expired (expiresAt ${c} <= now ${p})`):c-p>St&&n("expiresAt",`grant exceeds the hard 24-hour TTL (${St} seconds)`)}let d=typeof e.nonce=="string"?e.nonce.trim():H(e.nonce)!=null?String(H(e.nonce)):null;!d||d.length>vt||!nr.test(d)?n("nonce",`must be a non-empty string (max ${vt} chars, [A-Za-z0-9._:-])`):o.nonce=d;let l=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!l||l.length>Et||!rr.test(l)?n("revocationKey",`must be a non-empty public identifier (max ${Et} chars, [A-Za-z0-9._:-])`):o.revocationKey=l,r.length?{ok:!1,errors:r,grant:null}:{ok:!0,errors:[],grant:o}}function he(e,t={}){let{ok:r,errors:n,grant:o}=Oe(e,t);if(!r)throw new B(n);return o}function Le(e,t={}){let r=he(e,t),o=Object.keys(r).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(r[i])}`);return`{"version":${ue},${o.join(",")}}`}function be(e,t={}){return Qn("sha256").update(Le(e,t),"utf8").digest("hex")}function Nt(e,t){let r=H(t),n=H(_t(e)?e.expiresAt:null);return r==null||n==null?!0:n<=r}var Tt="oracle-connect-request",ir="oracle-unsigned-grant",ar="oracle-grant-canonical-json-utf8-v1",U=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},sr=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,cr=Object.freeze(["privkey","wif","xprv","seed"]);function $e(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return sr.test(t)||cr.includes(r)}var Ct=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Pt=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function lr(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Pt.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Rt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new U("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=lr(t);for(let{rule:o,re:i}of Ct)if(i.test(r))throw new U("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new U("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&$e(o))throw new U(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function $(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Pt.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:a}of Ct)if(!(o&&i.startsWith("raw-32-byte-hex"))&&a.test(e))throw new U(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&$e(o))throw new U(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");$(o,`${t}[key]`,r),$(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())$(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>$(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if($e(o))throw new U(`${t}.${o}`,"forbidden-key-name");$(i,`${t}.${o}`,r,o)}return e}function de(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))de(t)}return e}function Ot(e,t){let r=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(r)||r<=0)throw new B([{field:t,message:"must be a positive unix-seconds integer"}]);return r}function Lt(e){if(e?.now==null)throw new B([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return Ot(e.now,"opts.now")}function ur(e){return new Date(e*1e3).toISOString()}function dr(e,t){let r=e.actions.every(n=>Re(n));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID: ${t}`,`Version: ${ue}`,`Chain: ${e.chainId}`,`Agent: ${e.agentAddress}`,`Your account: ${e.accountAddress}`,`Actions: ${e.actions.join(", ")}`,`Targets: ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value: ${e.maxValueWei} wei`,`Max gas: ${e.maxGasWei} wei`,`Max slippage: ${e.maxSlippageBps} bps`,`Expires: ${ur(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce: ${e.nonce}`,`Revocation: ${e.revocationKey}`,"-----------------------------------------------------------------",r?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
4
+ `)}function $t(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new B([{field:"request",message:"request must be a plain object"}]);let r=Lt(t),{ttlSeconds:n,...o}=e,i={...o};if(n!=null){if(i.expiresAt!=null)throw new B([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let c=Ot(n,"ttlSeconds");i.expiresAt=r+c}let a=he(i,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),s=de({kind:Tt,version:ue,grant:a});return $(s)}function Ut(e={},t={}){let r=Lt(t),n=e&&e.kind===Tt?e.grant:e,o=he(n,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),i=Le(o),a=be(o),s=Buffer.from(i,"utf8"),c=de({kind:ir,unsigned:!0,payload:de({version:ue,grantId:a,grant:o,canonical:i}),signing:de({scheme:ar,message:i,bytesHex:`0x${s.toString("hex")}`,byteLength:s.length,sha256:a}),render:dr(o,a)});return $(c)}var ee=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function Bt(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function pr(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function Ue(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function fr(e,t,r){if(e==null)return!1;if(typeof e=="function")return e(t,r)===!0;let n=[t,r.revocationKey];return e instanceof Set?n.some(o=>e.has(o)):Array.isArray(e)?n.some(o=>e.includes(o)):typeof e.has=="function"?n.some(o=>e.has(o)):!1}function Mt(e,{now:t,revoked:r}={}){let n=Ue(t),{grant:o,revoked:i}=pr(e),{ok:a,grant:s}=Oe(o);if(!a)return{status:ee.INVALID,id:null,grant:null};let c=be(s);return i||fr(r,c,s)?{status:ee.REVOKED,id:c,grant:s}:Nt(s,n)?{status:ee.EXPIRED,id:c,grant:s}:{status:ee.ACTIVE,id:c,grant:s}}function Ft(e,{now:t,revoked:r,agentAddress:n,accountAddress:o,chainId:i}={}){let a=Ue(t),s=n!=null?String(n).trim().toLowerCase():null,c=o!=null?String(o).trim().toLowerCase():null,d=i!=null?Number(i):null,l=[];for(let p of Bt(e)){let{status:h,id:u,grant:S}=Mt(p,{now:a,revoked:r});h===ee.ACTIVE&&(s!=null&&S.agentAddress!==s||c!=null&&S.accountAddress!==c||d!=null&&S.chainId!==d||l.push(Object.freeze({id:u,grant:S})))}return l.sort((p,h)=>p.id<h.id?-1:p.id>h.id?1:0),$(Object.freeze(l))}function qt(e,t,{now:r,revoked:n}={}){let o=Ue(r),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let a of Bt(e)){let s=Mt(a,{now:o,revoked:n});if(s.status!==ee.INVALID&&s.id===i)return $(Object.freeze({id:s.id,status:s.status,grant:s.grant}))}return null}import{Interface as nn,getAddress as Or,id as rn}from"ethers";te();P();var pa=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var ma=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),De=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),He=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});te();te();var ye=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);P();te();var Xt=new nn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),Qt=new nn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),Lr=rn("Approval(address,address,uint256)"),Da=rn("ApprovalForAll(address,address,bool)"),$r=1e4,Ur=2e5,Br=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),Mr=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),Fr=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),qr=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),Dr=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),Hr=(1n<<256n)-1n,Vr=Hr/2n,Wr=4320*60*60*1e3,zr=360*60*1e3,jr=600*1e3,Kr=45*1e3,Gr=512,Yr=128,Zt=new Map,Ve=new Map,en=new Map;function ne(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function ze(e,t,r){let n=e.get(t);return n?Date.now()-n.at>r?(e.delete(t),null):n:null}function ge(e,t,r,n){for(e.delete(t),e.set(t,{at:Date.now(),value:r});e.size>n;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function Jr(e,t){try{return Or(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Xr(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function tn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Qr({unlimited:e,spenderLabel:t,lastActivityAt:r}){if(e)return"unlimited";if(!t)return"unknown-spender";if(r){let n=Date.parse(r);if(Number.isFinite(n)&&Date.now()-n>Wr)return"stale"}return"scoped"}function Zr(e,t,r){if(r)return"UNLIMITED";if(t==null)return e.toString();let n=10n**BigInt(t),o=e/n,i=e%n;if(i===0n)return o.toLocaleString("en-US");let a=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${a?`.${a}`:""}`}async function eo(e,t,r,n){let o=`${e}:${t}`,i=n?.get(o);if(i)return i;if(ne(r)){let s=ze(Zt,o,zr);if(s)return s.value}let a=(async()=>{let s=async p=>{try{let h=Xt.encodeFunctionData(p,[]),u=await M(e,"eth_call",[{to:t,data:h},"latest"],r);return!u||u==="0x"?null:Xt.decodeFunctionResult(p,u)[0]}catch{return null}},[c,d]=await Promise.all([s("decimals"),s("symbol")]),l={decimals:c==null?null:Number(c),symbol:d==null?null:String(d).slice(0,24)};return ne(r)&&ge(Zt,o,l,Gr),l})();return n?.set(o,a),a}async function to(e,t,r){let n=Math.min(Math.max(Number(r.lookbackBlocks)||$r,1),Ur),o=await Fe(e,r);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-n),a=await M(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[Lr,Xr(t)]}],r);if(!Array.isArray(a))throw new Error("log scan returned no array");let s=new Map;for(let c of a){let d=String(c?.address||"").toLowerCase(),l=c?.topics?.[2];!d||!l||s.set(`${d}:${tn(l)}`,{token:d,spender:tn(l)})}return{pairs:[...s.values()],fromBlock:i,toBlock:o}}function no(e){return(Dr[e]||[]).flatMap(r=>Mr.map(n=>({token:r.address,spender:n.address,symbol:r.symbol,decimals:r.decimals})))}async function ro(e,t,r={}){let n=[],o="direct-probe",i=null,a=no(e),s=We(e),c=ne(r)&&ze(Ve,e,jr)?.value===!1;if(a.length===0&&s.length===0&&c)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let d=await to(e,t,r);n=d.pairs,o="log-scan",i={fromBlock:d.fromBlock,toBlock:d.toBlock},ne(r)&&ge(Ve,e,!0,64)}catch{if(ne(r)&&ge(Ve,e,!1,64),n=a,n.length===0&&s.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let d=new Map,p=(await V(n,r.concurrency||4,async u=>{try{let S=await Jt({chainId:e,token:u.token,owner:t,spender:u.spender},r),w=BigInt(S.allowance);if(w<=0n)return null;let g=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await eo(e,u.token,r,d),x=w>=Vr,N=Br[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:g.symbol,decimals:g.decimals,spender:u.spender,spenderLabel:N,allowance:w.toString(),allowanceDisplay:Zr(w,g.decimals,x),unlimited:x,lastActivityAt:null,risk:Qr({unlimited:x,spenderLabel:N,lastActivityAt:null})}}catch{return null}})).filter(Boolean),h=await io(e,t,r);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:n.length,collectionsProbed:We(e).length,...i||{}},approvals:[...p,...h]}}catch(d){return{scan:{chainId:e,status:"unavailable",method:o,error:String(d?.message||d).slice(0,200)},approvals:[]}}}async function oo(e,t,r,n,o){try{let i=Qt.encodeFunctionData("isApprovedForAll",[r,n]),a=await M(e,"eth_call",[{to:t,data:i},"latest"],o);return!a||a==="0x"?null:!!Qt.decodeFunctionResult("isApprovedForAll",a)[0]}catch{return null}}function We(e){return(qr[e]||[]).flatMap(r=>Fr.map(n=>({collection:r.address,collectionName:r.name,operator:n.address,operatorLabel:n.label})))}async function io(e,t,r){let n=We(e);return n.length===0?[]:(await V(n,r.concurrency||4,async i=>await oo(e,i.collection,t,i.operator,r)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function on(e={},t={}){let r=Jr(e.owner||e.address,"owner"),n=new Map(ye.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>n.has(u)):[...n.keys()],i=`${r}:${[...o].sort((u,S)=>u-S).join(",")}:${e.lookbackBlocks??""}`,a=ne(t)&&!e.refresh;if(a){let u=ze(en,i,Kr);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let s=await V(o,e.concurrency||3,u=>ro(u,r,{...t,lookbackBlocks:e.lookbackBlocks})),c=s.flatMap(u=>u.approvals),d=s.map(u=>u.scan),l=d.find(u=>u.method==="log-scan"&&u.toBlock),p=d.some(u=>u.method==="direct-probe"&&u.status==="ok"),h={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:r,scannedRange:l?`last ${l.toBlock-l.fromBlock} blocks`:p?"known routers, live allowance probe":null,approvals:c,scans:d,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return a&&ge(en,i,h,Yr),{...h,cached:!1,cachedAgeMs:0}}import{getAddress as To}from"ethers";P();te();P();var an="mainnet-beta",ao="https://api.mainnet-beta.solana.com",je="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function so(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||ao).trim()}function G(e,t="address"){let r=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(r))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return r}function co(e,t){return t?[...e,{commitment:t}]:e}async function sn(e,t=[],r={}){let n=String(e||"");if(n==="sendTransaction"||n==="sendRawTransaction"||n==="requestAirdrop"||n==="requestAirDrop"||/airdrop/i.test(n)||/^send/i.test(n))throw new Error(`solana-rpc: ${n} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await C(so(r),{method:"POST",body:{jsonrpc:"2.0",id:r.id||1,method:e,params:t},fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function cn(e={},t={}){let r=G(e.address||e.owner,"address"),n=await sn("getBalance",co([r],e.commitment),t);return{provider:"solana-rpc",cluster:an,address:r,lamports:String(n?.value??0),slot:n?.context?.slot??null,raw:n}}function lo(e={}){let t=e.account?.data?.parsed?.info||{},r=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(r.amount??"0"),decimals:r.decimals??null,uiAmount:r.uiAmount??null,uiAmountString:r.uiAmountString??null,raw:e}}async function Ke(e={},t={}){let r=G(e.owner||e.address,"owner"),n=e.mint?{mint:G(e.mint,"mint")}:{programId:G(e.programId||je,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await sn("getTokenAccountsByOwner",[r,n,o],t),a=Array.isArray(i?.value)?i.value.map(lo):[];return{provider:"solana-rpc",cluster:an,owner:r,filter:n,slot:i?.context?.slot??null,accounts:a,raw:i}}P();var uo="mainnet",po="https://mempool.space/api",fo="https://mempool.space/testnet/api";function ln(e={}){return String(e.network||process.env.BTC_NETWORK||uo).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function mo(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):ln(e)==="testnet"?fo:po}function W(e,t="address"){let r=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(r)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(r))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return r}async function ho(e,t={}){let r=`${mo(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(r,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),i=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${i.slice(0,160)}`);return i}async function bo(e,t={}){let r=await ho(e,t);try{return JSON.parse(r)}catch{return r}}async function un(e={},t={}){let r=W(e.address||e.addr,"address"),n=await bo(`/address/${r}`,t),o=n.chain_stats||{},i=n.mempool_stats||{},a=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),s=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:ln(t),address:r,balanceSats:String(a-s),chainStats:o,mempoolStats:i,raw:n}}var dn="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function re({provider:e,defaultUrl:t,hosts:r=[],url:n,strict:o=!1}){let a=(String(n??"").trim()||String(t)).replace(/\/$/,"");if(a===String(t).replace(/\/$/,""))return{baseUrl:a,trusted:!0,host:pn(t)};let s;try{s=new URL(a)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(s.protocol!=="http:"&&s.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let c=s.host;if(!c)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([pn(t),...r]).has(c)){let l=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(c);return s.protocol==="http:"&&!l?{baseUrl:a,trusted:!1,host:c,reason:"plaintext http downgrade"}:{baseUrl:a,trusted:!0,host:c}}if(String(process.env[dn]||"")==="1")return{baseUrl:a,trusted:!1,host:c};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${c} (set ${dn}=1 to permit it)`);return{baseUrl:a,trusted:!1,host:c}}function pn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function Y(e,t,r){let n={...e};if(!r)return n;for(let[o,i]of Object.entries(t||{}))i&&(n[o]=i);return n}function Ge(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var yo=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function go(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",r=!1;try{let n=Ge(e);if(n){let o=new URL(n).host,i=new URL(n).protocol,a=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);r=yo.includes(o)&&(i==="https:"||a)}}catch{r=!1}return Y({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},r)}async function fn(e,t={}){let n=await(t.fetchImpl||fetch)(e,{method:"GET",headers:go(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await n.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!n.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${n.status} ${String(o).slice(0,160)}`);return i}async function mn(e={},t={}){let r=W(e.address||e.addr,"address"),n=Ge(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${n}/v1/indexer/address/${r}/runes/balance-list?start=0&limit=100`,`${n}/v1/runes/address/${r}`,`${n}/runes/balance/${r}`,`${n}/address/${r}/runes`],i=null;for(let a of o)try{let s=await fn(a,t),c=wo(s);return{provider:"bitcoin-meta",address:r,ok:!0,count:c.length,balances:c,source:a}}catch(s){i=s}return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function wo(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({rune:n.rune||n.runeid||n.runeId||n.spacedRune||n.name||n.ticker||null,runeId:n.runeid||n.runeId||n.id||null,amount:String(n.amount??n.balance??n.total??n.qty??"0"),symbol:n.symbol||null,divisibility:n.divisibility??n.div??null,raw:n}))}async function we(e={},t={}){let r=W(e.address||e.addr,"address"),n=Ge(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${n}/v1/indexer/address/${r}/inscription-data?cursor=0&size=${o}`,`${n}/v1/inscriptions/address/${r}?limit=${o}`,`${n}/address/${r}/inscriptions?limit=${o}`],a=null;for(let s of i)try{let c=await fn(s,t),d=So(c);return{provider:"bitcoin-meta",address:r,ok:!0,count:d.length,inscriptions:d,source:s}}catch(c){a=c}return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:String(a?.message||a||"all indexer paths failed")}}function So(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({id:n.inscriptionId||n.id||n.inscription_id||null,number:n.inscriptionNumber??n.number??null,sat:n.sat||n.satoshi||null,contentType:n.contentType||n.content_type||null,utxo:n.utxo||n.output||(n.txid!=null?`${n.txid}:${n.vout??n.n}`:null),raw:n}))}P();var vo="https://api.hyperliquid.xyz/info",Eo="https://api.hyperliquid-testnet.xyz/info";function xo({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let r=process.env.HL_API_URL.replace(/\/$/,"");return r.endsWith("/info")?r:`${r}/info`}return e||process.env.HL_TESTNET==="1"?Eo:vo}async function Ye(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let r=xo(t);return C(r,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function hn(e={}){return Ye({type:"allMids"},e)}async function bn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return Ye({type:"spotClearinghouseState",user:e},t)}async function yn(e,t={}){if(!e)throw new Error("hlUserState requires user");return Ye({type:"clearinghouseState",user:e},t)}P();var Ao="https://coins.llama.fi";function Io(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||Ao).replace(/\/$/,"")}async function Je(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return C(`${Io(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}P();var gn=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,ko=/[<>&`*_~[\]()|\\]/g,_o=/[\u0000-\u001F\u007F]/g;function Xe(e,{max:t=32,fallback:r=""}={}){return e==null?r:String(e).normalize("NFKC").replace(gn,"").replace(_o,"").replace(ko,"").replace(/\s+/g," ").trim().slice(0,t).trim()||r}function Qe(e){if(e==null)return!1;let t=String(e);return gn.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var wn=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function No(e,t={}){let r=Number(e),n=t.baseUrl||wn[r];if(!n)throw new Error(`Blockscout not configured for chainId ${r}`);return n.replace(/\/$/,"")}function Sn(e){return!!wn[Number(e)]}async function vn(e={},t={}){if(!e.address)throw new Error("address required");let r=Number(e.chainId||1),n=`${No(r,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await C(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function En(e=[],{fungibleOnly:t=!0}={}){let r=[];for(let n of e){if(!n||typeof n!="object")continue;let o=n.token&&typeof n.token=="object"?n.token:{},i=String(o.type||n.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let a=o.address_hash||o.address||n.token_address||n.tokenAddress||null;if(!a||typeof a!="string")continue;let s=String(n.value??n.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(s)||s==="0")continue;let c=o.decimals??n.decimals;typeof c=="string"&&/^\d+$/.test(c)&&(c=Number(c)),(typeof c!="number"||!Number.isInteger(c)||c<0||c>36)&&(c=18);let d=Xe(o.symbol||o.name,{max:32,fallback:"TOKEN"}),l=Xe(o.name,{max:80,fallback:""})||null;r.push({address:a.toLowerCase().startsWith("0x")?a:`0x${a}`,symbol:d,name:l,decimals:c,amountRaw:s,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:Qe(o.symbol)||Qe(o.name)||void 0})}return r}var Co="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",An=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function z(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Se(e,...t){for(let r of t){let n=String(e?.[r]||"").trim();if(n)return n}return null}function xn(e){if(!e)return null;try{return To(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function tt(e={},t=process.env){let r=e.addresses||{},n=xn(r.evm||e.evmAddress||Se(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=r.solana||e.solanaAddress||Se(t,"ORACLE_SOLANA_ADDRESS"),i=r.bitcoin||e.bitcoinAddress||Se(t,"ORACLE_BITCOIN_ADDRESS"),a=xn(r.hyperliquid||e.hyperliquidAddress||Se(t,"ORACLE_HYPERLIQUID_ADDRESS")||n);return{evm:n,solana:o?G(o,"portfolio Solana address"):null,bitcoin:i?W(i,"portfolio Bitcoin address"):null,hyperliquid:a}}function pe(e,t){let r=BigInt(String(e||"0")),n=Number(t);if(!Number.isInteger(n)||n<0||n>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(n===0)return r.toString();let o=r<0n,i=o?-r:r,a=10n**BigInt(n),s=i/a,c=String(i%a).padStart(n,"0").replace(/0+$/,"");return`${o?"-":""}${s}${c?`.${c}`:""}`}function oe(e){let t=Number(e);return Number.isFinite(t)?t:null}function ve(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function j(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function In(e,t){let r=An[t],n=r?e?.coins?.[r]:null,o=Number(n?.price);return{key:r||null,priceUsd:Number.isFinite(o)?o:null,timestamp:n?.timestamp??null,confidence:n?.confidence??null}}function Po(e){let t=new Map;for(let r of e)if(r?.ok)for(let n of r.data?.accounts||[]){let o=BigInt(String(n.amount||"0"));if(o===0n||!n.mint)continue;let i=`${n.mint}:${n.decimals??"unknown"}`,a=t.get(i)||{mint:n.mint,amountRaw:0n,decimals:n.decimals??null,programs:new Set,accounts:0};a.amountRaw+=o,a.accounts+=1,r.program&&a.programs.add(r.program),t.set(i,a)}return[...t.values()].map(r=>{let n=r.amountRaw.toString(),o=r.decimals==null?null:pe(n,r.decimals),i=r.decimals===0&&r.amountRaw===1n;return{mint:r.mint,amountRaw:n,amount:o,decimals:r.decimals,tokenPrograms:[...r.programs],accountCount:r.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function Ze(e,t){return{family:e,status:"unsupported",reason:t}}function et(e,t){if(!e||e.status!=="ok")return e;let r=In(t,e.symbol),n=oe(e.amount),o=n!=null&&r.priceUsd!=null?ve(n*r.priceUsd):null;return{...e,price:r,usdValue:o}}async function kn(e={},t={}){let r=new Date().toISOString(),n=tt(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,a=e.includeCollectibles!==!1,s=new Map(ye.map(f=>[f.chainId,f])),c=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...s.keys()],d=[...new Set(Object.values(An))],l=o?_(()=>Je(d,z(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),p=V(c,e.concurrency||5,async f=>{let b=s.get(f);if(!b)return{family:"evm",chainId:f,name:null,address:n.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!n.evm)return{family:"evm",chainId:f,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let v={...z(t,"evm"),rpcUrl:e.rpcUrls?.[f]||t.evm?.rpcUrls?.[f]},I=await _(()=>qe(f,n.evm,v));if(!I.ok)return{family:"evm",chainId:f,name:b.name,address:n.evm,status:"unavailable",latencyMs:I.ms,error:I.error};let T=b.nativeCurrency?.decimals??18,L=b.nativeCurrency?.symbol||"NATIVE",y=I.data.balanceWei,A={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&Sn(f)){let K=await _(()=>vn({chainId:f,address:n.evm},{...z(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));K.ok?A={status:"ok",assets:En(K.data,{fungibleOnly:!0}).map(ce=>{let le=pe(ce.amountRaw,ce.decimals);return{...ce,amount:le,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:K.ms}:A={status:"unavailable",assets:[],reason:K.error||"blockscout token-balances failed",source:"blockscout",latencyMs:K.ms}}return{family:"evm",chainId:f,name:b.name,address:n.evm,status:"ok",latencyMs:I.ms,native:{status:"ok",symbol:L,amountRaw:y,decimals:T,amount:pe(y,T)},fungibleTokens:A,collectibles:{status:a?"unavailable":"not-requested",assets:[],reason:a?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:A.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),h=(async()=>{if(!n.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let f=z(t,"solana"),b=await _(()=>cn({address:n.solana},f)),v=i||a?await Promise.all([_(()=>Ke({owner:n.solana,programId:je},f)).then(A=>({...A,program:"spl-token"})),_(()=>Ke({owner:n.solana,programId:Co},f)).then(A=>({...A,program:"token-2022"}))]):[],I=Po(v),T=I.filter(A=>A.classification==="collectible-candidate"),L=I.filter(A=>A.classification!=="collectible-candidate"),y=v.filter(A=>!A.ok).map(A=>A.error);return{family:"solana",name:"Solana Mainnet",address:n.solana,status:b.ok||v.some(A=>A.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:pe(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:i?y.length===v.length?"unavailable":y.length?"partial":"ok":"not-requested",assets:i?L:[],errors:y,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:a?y.length===v.length?"unavailable":"partial":"not-requested",assets:a?T:[],errors:y,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!n.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let f=z(t,"bitcoin"),b=z(t,"bitcoinMeta"),[v,I,T]=await Promise.all([_(()=>un({address:n.bitcoin},f)),i?_(()=>mn({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),a?_(()=>we({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),L=I.ok?I.data:null,y=T.ok?T.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:n.bitcoin,status:v.ok||L?.ok||y?.ok?"ok":"unavailable",native:v.ok?{status:"ok",symbol:"BTC",amountRaw:v.data.balanceSats,decimals:8,amount:pe(v.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:v.error},fungibleTokens:{status:i?L?.ok?"ok":"unavailable":"not-requested",assets:L?.balances||[],error:L?.ok?null:L?.error||I.error,verification:"indexer-reported"},collectibles:{status:a?y?.ok?"ok":"unavailable":"not-requested",assets:y?.inscriptions||[],error:y?.ok?null:y?.error||T.error,unknownNotEmpty:!!y?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),S=(async()=>{if(!n.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let f=z(t,"hyperliquid"),[b,v,I]=await Promise.all([_(()=>bn(n.hyperliquid,f)),_(()=>yn(n.hyperliquid,f)),_(()=>hn(f))]),T=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(y=>j(y.total)||j(y.hold)).map(y=>({coin:y.coin||null,total:String(y.total??"0"),hold:String(y.hold??"0"),priceUsd:null,usdValue:null})),L=(v.ok&&Array.isArray(v.data?.assetPositions)?v.data.assetPositions:[]).map(y=>y.position||y).filter(y=>j(y.szi)).map(y=>({coin:y.coin||null,size:String(y.szi??"0"),entryPrice:y.entryPx??null,positionValueUsd:y.positionValue??null,unrealizedPnlUsd:y.unrealizedPnl??null,liquidationPrice:y.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:n.hyperliquid,status:b.ok||v.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:T,error:b.ok?null:b.error},perps:{status:v.ok?"ok":"unavailable",accountValueUsd:v.data?.marginSummary?.accountValue??null,withdrawableUsd:v.data?.withdrawable??null,positions:L,error:v.ok?null:v.error},mids:I.ok?I.data:{},source:"hyperliquid-info"}})(),[w,g,x,N,F]=await Promise.all([p,h,u,S,l]),m=F.ok?F.data:null,E=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),k=[];for(let f of w){if(f.family!=="evm"||f.fungibleTokens?.status!=="ok")continue;let b=E[f.chainId];if(b)for(let v of f.fungibleTokens.assets||[])v.address&&k.push(`${b}:${String(v.address).toLowerCase()}`)}let q=null;if(o&&k.length){let f=[...new Set(k)],b=await _(()=>Je(f,z(t,"prices")));b.ok&&(q=b.data)}let J=w.map(f=>{let b=f.native?{...f,native:et(f.native,m)}:f;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let v=E[b.chainId],I=b.fungibleTokens.assets.map(T=>{let L=String(T.symbol||"").toUpperCase(),y=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(L)&&(y=1),y==null&&v&&T.address&&q?.coins){let yt=`${v}:${String(T.address).toLowerCase()}`,ce=q.coins[yt],le=Number(ce?.price);Number.isFinite(le)&&le>0&&(y=le)}let A=oe(T.amount),K=A!=null&&y!=null?ve(A*y):null;return{...T,priceUsd:y,usdValue:K}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:I}}}return b});g.native&&(g.native=et(g.native,m)),x.native&&(x.native=et(x.native,m));let ae=0,se=0,X=0;for(let f of[...J,g,x]){f.native?.status==="ok"&&j(f.native.amount)&&(f.native.usdValue!=null?(ae+=f.native.usdValue,se+=1):X+=1);for(let b of f.fungibleTokens?.assets||[])!j(b.amount)&&!j(b.amountRaw)||(b.usdValue!=null?(ae+=b.usdValue,se+=1):X+=1)}let Gn=In(m,"HYPE");for(let f of N.spot?.balances||[]){let b=String(f.coin||"").toUpperCase(),v=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?Gn.priceUsd||oe(N.mids?.HYPE):oe(N.mids?.[f.coin]),I=oe(f.total);f.priceUsd=v,f.usdValue=I!=null&&v!=null?ve(I*v):null,j(f.total)&&(f.usdValue!=null?(ae+=f.usdValue,se+=1):X+=1)}let _e=oe(N.perps?.accountValueUsd);_e!=null&&_e!==0&&(ae+=_e,se+=1);let Yn=[...g.fungibleTokens?.assets||[],...g.collectibles?.assets||[]].filter(f=>j(f.amount)).length,Jn=(x.fungibleTokens?.assets||[]).length+(x.collectibles?.assets||[]).length;X+=Yn+Jn;let Ne=[...J,g,x,N],Q=f=>Ne.filter(b=>b.status===f).length,Z=[],Te=J.filter(f=>f.fungibleTokens?.status==="unavailable"),bt=J.filter(f=>f.fungibleTokens?.status==="ok");Te.length&&!bt.length?Z.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):Te.length&&Z.push(`EVM token discovery partial: Blockscout covered ${bt.length} chain(s); ${Te.length} chain(s) still native-only.`),(g.fungibleTokens?.assets?.length||g.collectibles?.assets?.length)&&Z.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),x.collectibles?.unknownNotEmpty&&Z.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),F.ok||Z.push(`Price provider unavailable: ${F.error}`);let Ce=[Ze("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),Ze("sui","Sui balance adapter is not installed"),Ze("aptos","Aptos balance adapter is not installed")],Xn=Ne.some(f=>["unavailable","partial","not-configured"].includes(f.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(f.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:r,addresses:n,coverage:{requestedSurfaces:Ne.length,ok:Q("ok"),unavailable:Q("unavailable"),notConfigured:Q("not-configured"),unsupported:Q("unsupported")+Ce.length,evmChainsRequested:c.length,evmChainsOk:J.filter(f=>f.status==="ok").length},valuation:{knownUsd:ve(ae),label:"known priced value, not a complete portfolio total",pricedItems:se,unpricedNonzeroItems:X,complete:X===0&&!Xn&&Q("unavailable")===0&&Q("not-configured")===0&&Ce.length===0,priceSource:o?"DefiLlama":null,priceStatus:F.ok?"ok":"unavailable",priceQueriedAt:r},chains:[...J,g,x,N],unsupportedFamilies:Ce,warnings:Z}}P();P();import{readFileSync as Ro,existsSync as Oo}from"node:fs";import{getAddress as Lo,Interface as Ee,TypedDataEncoder as xs,parseUnits as As}from"ethers";var bs=300*1e3,ys=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var $o="https://api.opensea.io/api/v2",Uo="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",Ts=new Ee([`function ${Uo}`]),Cs=new Ee(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable"]),Bo=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),Mo=new Set(Bo),Fo=new Set(["solana","flow"]);function qo(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!Oo(e))return"";try{for(let t of Ro(e,"utf8").split(`
5
+ `)){let r=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(r)return r[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function rt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||qo()}function Nn(e={}){return re({provider:"opensea",defaultUrl:$o,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function Tn(e={}){return Nn(e).baseUrl}function Cn(e={}){return Y({accept:"application/json"},{"x-api-key":rt(e)},Nn(e).trusted)}function Do(e){let t=String(e||"ethereum").trim().toLowerCase();if(!Mo.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function _n(e,t="address"){try{return Lo(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function Pn(e,t=null){let r=String(e||"").trim();if(!r)throw new Error("opensea: account address required");if(t&&!Fo.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(r))return _n(r,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(r))throw new Error("opensea: invalid account address");return r}function Ho(e={},t,r){return{chain:t,owner:r,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function ot(e={},t={}){if(!rt(t))throw new Error("OPENSEA_API_KEY required");let r=Do(e.chain),n=Pn(e.address||e.owner,r),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),a=[],s=e.next?String(e.next):null,c=0;do{let d=new URL(`${Tn(t)}/chain/${encodeURIComponent(r)}/account/${encodeURIComponent(n)}/nfts`);d.searchParams.set("limit",String(o)),e.collection&&d.searchParams.set("collection",String(e.collection)),s&&d.searchParams.set("next",s);let l=await C(d.toString(),{headers:Cn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let p of Array.isArray(l?.nfts)?l.nfts:[])a.push(Ho(p,r,n));s=l?.next?String(l.next):null,c+=1}while(s&&c<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:r,owner:n,count:a.length,pages:c,complete:!s,next:s,nfts:a,exec:!1,readOnly:!0}}async function Rn(e={},t={}){if(!rt(t))throw new Error("OPENSEA_API_KEY required");let r=Pn(e.address||e.owner),n=await C(`${Tn(t)}/account/${encodeURIComponent(r)}/pnl`,{headers:Cn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:r,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:n?.realized_pnl_usd??null,unrealizedPnlUsd:n?.unrealized_pnl_usd??null,totalPnlUsd:n?.total_pnl_usd??null,netInvestedUsd:n?.net_invested_usd??null,currentValueUsd:n?.current_value_usd??null,returnPercentage:n?.return_percentage??null,itemLevelPnlAvailable:!1,raw:n,exec:!1,readOnly:!0}}var Ps=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var Rs=new Ee(["function setApprovalForAll(address operator,bool approved)"]),Os=new Ee(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var Wo="https://api.satflow.com/v1";function On(e={}){return re({provider:"satflow",defaultUrl:Wo,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function zo(e={}){return On(e).baseUrl}function Ln(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function jo(e={}){return Y({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":Ln(e)},On(e).trusted)}async function Ko(e,{method:t="GET",body:r,opts:n={}}={}){if(!Ln(n))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${zo(n)}${e.startsWith("/")?e:`/${e}`}`,s=await(n.fetchImpl||fetch)(i,{method:t,headers:jo(n),body:r!=null?JSON.stringify(r):void 0,signal:AbortSignal.timeout(n.timeoutMs??2e4)}),c=await s.text(),d;try{d=JSON.parse(c)}catch{d=c}if(!s.ok)throw new Error(`satflow ${t} ${e}: HTTP ${s.status} ${String(c).slice(0,200)}`);return d}async function $n(e={},t={}){let r=W(e.address||e.addr,"address"),n=new URLSearchParams({address:r});e.type&&n.set("type",e.type),e.limit!=null&&n.set("limit",String(e.limit)),e.offset!=null&&n.set("offset",String(e.offset));let o=await Ko(`/address/wallet-contents?${n}`,{opts:t});return{provider:"satflow",address:r,contents:o}}P();P();var Gs=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Go=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],Yo=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Jo=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Xo(e={}){let t=[],r=String(e.name||""),n=String(e.description||""),o=`${r} ${n}`;Yo.test(r)&&t.push("url-in-name");let i=Go.filter(d=>d.test(o)).length;i>0&&t.push(`lure-language:${i}`),Jo.test(r)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(r)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let a=e.estimatedValueUsd==null&&e.estimatedValueSats==null,s=!Array.isArray(e.traits)||e.traits.length===0;a&&s&&i>0&&t.push("valueless-airdrop-with-lure");let c=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:c,risk:c?"high":t.length>0?"low":"none",reasons:t}}function Un(e={}){let t=Xo(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Qo=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Zo=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function it(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function fe(e,t){let r=await _(t);return r.ok?{ok:!0,data:r.data}:{ok:!1,error:`${e}: ${r.error}`.slice(0,300)}}function ei(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function ti(e={},t){let r=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:r==null?null:String(r),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(r?`Inscription ${r}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function ni(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function Bn(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function ri(e){let t=new Map;if(Array.isArray(e)){for(let r of e)r?.assetKey&&t.set(String(r.assetKey).toLowerCase(),r);return t}if(e&&typeof e=="object")for(let[r,n]of Object.entries(e))t.set(r.toLowerCase(),n);return t}function oi(e,t){let r=Bn(e),n=t.get(r),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!n)return{...e,assetKey:r};let i=Number(n.costUsd),a=Number(n.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(a)||a<0)return{...e,assetKey:r,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let s=Math.round((i+a)*100)/100;return Number.isFinite(o)?{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:a,totalCostUsd:s,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-s)*100)/100,currentValueUsd:o,totalCostUsd:s,realizedUsd:null}}:{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:a,totalCostUsd:s,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function ii(e){let t=new Map;for(let r of e){let n=Bn(r);t.has(n)||t.set(n,r)}return[...t.values()]}function ai(e,t){let r=e.filter(i=>i.itemPnl?.status==="estimated"),n=e.length-r.length,o=Math.round(r.reduce((i,a)=>i+Number(a.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:n===0&&e.length?"estimated-complete-for-held-items":r.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:r.length,unknownItems:n,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function Mn(e={},t={}){let r=new Date().toISOString(),n=tt(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=Qo.filter(m=>!o||o.has(m.chain)),a=[],s=[],c=it(t,"opensea"),d=n.evm?i.filter(m=>m.family!=="solana"):[],l=await V(d,4,async m=>({row:m,result:await fe(`opensea-${m.chain}`,()=>ot({chain:m.chain,address:n.evm,pageSize:e.pageSize,maxPages:e.maxPages},c),t.timeoutMs??35e3)}));for(let{row:m,result:E}of l)if(E.ok){let k=E.data.nfts.map(q=>({...q,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));s.push(...k),a.push({family:m.family,chain:m.chain,chainId:m.chainId,status:E.data.complete?"ok":"partial",count:k.length,complete:E.data.complete,next:E.data.next,source:"opensea"})}else a.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:E.error,source:"opensea"});if(!n.evm)for(let m of i.filter(E=>E.family!=="solana"))a.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(n.solana&&(!o||o.has("solana"))){let m=await fe("opensea-solana",()=>ot({chain:"solana",address:n.solana,pageSize:e.pageSize,maxPages:e.maxPages},c),t.timeoutMs??35e3);if(m.ok){let E=m.data.nfts.map(k=>({...k,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));s.push(...E),a.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:E.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else a.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&a.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(n.bitcoin&&(!o||o.has("bitcoin"))){let m=await fe("satflow-wallet-contents",()=>$n({address:n.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},it(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let E=ei(m.data.contents).map(q=>ti(q,n.bitcoin));s.push(...E);let k=E.length<Number(e.bitcoinLimit??100);a.push({family:"bitcoin",chain:"bitcoin",status:k?"ok":"partial",count:E.length,complete:k,source:"satflow"})}else{let E=await fe("bitcoin-meta-inscriptions",()=>we({address:n.bitcoin},it(t,"bitcoinMeta")),t.timeoutMs??35e3),k=E.ok&&E.data?.ok&&Array.isArray(E.data.inscriptions)?E.data.inscriptions:[];s.push(...k.map(q=>ni(q,n.bitcoin))),a.push({family:"bitcoin",chain:"bitcoin",status:k.length?"partial":"unavailable",count:k.length,complete:!1,source:k.length?"bitcoin-meta":"satflow",error:k.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&a.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let p=[];if(e.includePnl!==!1)for(let m of[...new Set([n.evm,n.solana].filter(Boolean))]){let E=await fe(`opensea-pnl-${m}`,()=>Rn({address:m},c),t.timeoutMs??35e3);p.push(E.ok?{status:"ok",...E.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:E.error})}let h=ri(e.costBasis),u=ii(s).map(m=>oi(m,h)).map(m=>Un(m)),S=u.filter(m=>!m.spam),w=u.filter(m=>m.spam),g=S.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),x=Math.round(g.reduce((m,E)=>m+Number(E.estimatedValueUsd),0)*100)/100,N=S.length-g.length,F=a.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:r,addresses:n,coverage:a,unsupported:Zo,inventory:{count:u.length,visibleCount:S.length,flaggedCount:w.length,items:u,visibleItems:S,flaggedItems:w},valuation:{estimatedCurrentValueUsd:x,valuedItems:g.length,unvaluedItems:N,complete:N===0&&F.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:ai(S,p),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as at}from"node:os";import{join as st}from"node:path";var Fn=process.env.ORACLE_PUBLIC_DESKTOP==="1",si=Fn?process.env.ORACLE_CONFIG_DIR||st(at(),".config","oracle"):st(at(),".config","oracle"),fc=Fn?si:st(at(),".config","mad-desk");function ct(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var mi=JSON.parse(Vn(new URL("../../package.json",import.meta.url),"utf8")),ie="public",hi="127.0.0.1",bi=8799,Ae=mi.version,yi=new Set(["127.0.0.1","localhost","::1"]),gi=pt(ui(fi(import.meta.url)),"../.."),lt=pt(gi,"public","oracle-console"),qn=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),wi=1e6,O=class extends Error{constructor(t,r,n){super(n||r),this.status=t,this.code=r}};function D(e,t,r){let n=t,o;try{$(r),o=Rt(r)}catch{n=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(n,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":ie,"x-oracle-unsigned":"true"}),e.end(o)}function Si(e){return new Promise((t,r)=>{let n=[],o=0;e.on("data",i=>{if(o+=i.length,o>wi){r(new O(413,"payload-too-large","request body too large")),e.destroy();return}n.push(i)}),e.on("end",()=>{let i=Buffer.concat(n).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{r(new O(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>r(new O(400,"bad-request","request stream error")))})}function R(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new O(400,t,`${t} must be a JSON object`);return e}function vi(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function Ei(e){let t=vi(e);if(!yi.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function xi(){return{status:200,body:{ok:!0,plane:ie,version:Ae}}}function Ie(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function Ai(e){let t=R(e,"body"),r=t.input!==void 0?R(t.input,"input"):t,n=Ie(R(t.opts,"opts")),o=r===t?(({opts:i,...a})=>a)(t):r;return{status:200,body:$t(o,n)}}function Ii(e){let t=R(e,"body"),r=t.request!==void 0?R(t.request,"request"):t.input!==void 0?R(t.input,"input"):t,n=Ie(R(t.opts,"opts")),o=r===t?(({opts:i,...a})=>a)(t):r;return{status:200,body:Ut(o,n)}}function ki(e){let t=R(e,"body"),r=Ie(R(t.opts,"opts")),n=Ft(t.store??[],r);return{status:200,body:{ok:!0,count:n.length,grants:n}}}function _i(e){let t=R(e,"body"),r=Ie(R(t.opts,"opts")),n=qt(t.store??[],t.id,r);return n==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:n}}function Ni(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,r=!0,n=[];return t&&n.push("privy"),r&&n.push("injected"),{status:200,body:{ok:!0,plane:ie,version:Ae,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:r,modes:n},privy:{appId:e||null}}}}var ut=400;function Ti(e=[]){if(e.length<=ut)return{rows:e,truncated:!1,omitted:0};let t=n=>n?.kind==="native"?0:n?.priced?1:2;return{rows:[...e].sort((n,o)=>t(n)-t(o)).slice(0,ut),truncated:!0,omitted:e.length-ut}}var dt=300;function Ci(e=[]){if(e.length<=dt)return{items:e,truncated:!1,omitted:0};let t=n=>n?.spam===!0||n?.nsfw===!0?2:Number.isFinite(Number(n?.floorUsd))&&Number(n?.floorUsd)>0?0:1;return{items:[...e].sort((n,o)=>t(n)-t(o)).slice(0,dt),truncated:!0,omitted:e.length-dt}}var xe=12;async function Pi(e){let t=R(e,"body"),r=typeof t.owner=="string"?t.owner:null;if(!r)throw new O(400,"owner-required","owner must be an EVM address");let n=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(n&&n.length>xe)throw new O(400,"too-many-chains",`at most ${xe} chainIds per request`);let i=await on({owner:r,chainIds:n},zn());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var Ri=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,Oi=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function Li(e){if(typeof e!="string")return null;let t=e.trim();return Ri.test(t)?t:null}function $i(e){if(typeof e!="string")return null;let t=e.trim();return Oi.test(t)?t:null}function Wn(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function Ui(e){let t=R(e,"body"),r=Wn(t.owner),n=Li(t.solana),o=$i(t.bitcoin);if(!r&&!n&&!o)throw new O(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>xe)throw new O(400,"too-many-chains",`at most ${xe} chainIds per request`);let a=await kn({addresses:{evm:r,solana:n,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},{env:{}}),s=[],c=[],d=0,l=0;for(let u of a.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let S=u.fungibleTokens?.status??"unavailable";S==="ok"?d+=1:S==="unavailable"&&(l+=1),c.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:S,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let w=u.native;u.status==="ok"&&w&&w.status==="ok"&&w.amountRaw&&w.amountRaw!=="0"&&w.amountRaw!=="0x0"&&s.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:w.symbol,decimals:w.decimals,amount:String(w.amountRaw),amountRaw:String(w.amountRaw),amountFormatted:w.amount,kind:"native",valueUsd:w.usdValue!=null?String(w.usdValue):null,priced:w.usdValue!=null});for(let g of u.fungibleTokens?.assets||[]){let x=g.amountRaw!=null?String(g.amountRaw):null;if(!x||x==="0")continue;let N=typeof g.decimals=="number"&&Number.isInteger(g.decimals)?g.decimals:null;s.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:g.symbol||g.coin||"TOKEN",decimals:N,amount:x,amountRaw:x,amountFormatted:g.amount!=null?String(g.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:g.address||g.mint||null,valueUsd:g.usdValue!=null?String(g.usdValue):null,priced:g.usdValue!=null,source:g.source||u.fungibleTokens?.source||null})}}let p=l>0||!!(a.valuation&&a.valuation.complete===!1),h=Ti(s);return{status:200,body:{ok:!0,owner:a.addresses?.evm??r,queriedAt:a.queriedAt,portfolio:{rows:h.rows,rowsTruncated:h.truncated,rowsOmitted:h.omitted,chains:c,coverage:a.coverage,valuation:a.valuation??null,complete:!p&&l===0&&!h.truncated,incompleteReason:h.truncated?`Showing ${h.rows.length} of ${h.rows.length+h.omitted} rows (native and priced first); ${h.omitted} low-signal rows omitted.`:p?d?`Token scan live on ${d} chain(s); ${l} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:a.warnings}}}function zn(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function Bi(e){let t=R(e,"body"),r=Wn(t.owner);if(!r)throw new O(400,"owner-required","owner must be an EVM address");let n=await Mn({addresses:{evm:r}},zn()),o=n?.inventory&&typeof n.inventory=="object"?n.inventory:{},a=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(n?.items)?n.items:[]).map(l=>{if(!l||typeof l!="object")return null;let p=typeof l.collection=="string"?l.collection:l.collection&&typeof l.collection=="object"&&typeof l.collection.slug=="string"?l.collection.slug:typeof l.contract=="string"?l.contract:null;return{chain:l.chain??null,chainId:l.chainId??null,family:l.family??null,owner:l.owner??r,contract:l.contract??null,tokenId:l.tokenId==null?null:String(l.tokenId),tokenStandard:l.tokenStandard??null,collection:p,name:typeof l.name=="string"?l.name.slice(0,160):null,imageUrl:l.imageUrl??l.image??null,estimatedValueUsd:l.estimatedValueUsd!=null&&Number.isFinite(Number(l.estimatedValueUsd))?Number(l.estimatedValueUsd):null,floorUsd:l.floorUsd!=null&&Number.isFinite(Number(l.floorUsd))?Number(l.floorUsd):l.estimatedValueUsd!=null&&Number.isFinite(Number(l.estimatedValueUsd))?Number(l.estimatedValueUsd):null,spam:l.spam===!0,nsfw:l.nsfw===!0,source:typeof l.source=="string"?l.source.slice(0,64):null}}).filter(Boolean),s=Array.isArray(n?.coverage)?n.coverage:[],c=Ci(a),d=n?.valuation?.complete===!0&&!c.truncated;return{status:200,body:{ok:!0,owner:r,queriedAt:n.generatedAt??new Date().toISOString(),nfts:{items:c.items,itemsTruncated:c.truncated,itemsOmitted:c.omitted,chains:s.map(l=>({family:l?.family??null,chain:l?.chain??null,chainId:l?.chainId??null,status:l?.status??null,count:l?.count??null,complete:l?.complete===!0,source:l?.source??null,error:null,reason:typeof l?.reason=="string"?l.reason.slice(0,120):null})),coverage:{operational:!0,complete:d,hasGaps:!d,degraded:s.filter(l=>l?.status==="partial").map(l=>l.chain).filter(Boolean),unavailable:s.filter(l=>l?.status==="unavailable").map(l=>l.chain).filter(Boolean),unconfigured:s.filter(l=>l?.status==="not-configured").map(l=>l.chain).filter(Boolean)},count:c.items.length,visibleCount:c.items.length,totalCount:a.length},valuation:n?.valuation?{estimatedCurrentValueUsd:n.valuation.estimatedCurrentValueUsd??null,valuedItems:n.valuation.valuedItems??null,unvaluedItems:n.valuation.unvaluedItems??null,complete:n.valuation.complete===!0}:null}}}var Mi=6e4,Fi=120,jn=10,qi=300,Di=jn,Dn=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),Hi=4096,me=new Map;function Vi(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let r=t.split(",")[0].trim();if(r)return r.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function Wi(e,t){let r=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),n=r==="127.0.0.1"||r==="::1"||r.startsWith("127."),o=Vi(e),i=n&&o!==r,a=Dn.has(t)?n&&!i?Di:jn:n&&!i?qi:Fi,s=Date.now(),c=`${o}:${Dn.has(t)?"amp":"std"}`,d=me.get(c);if(!d||s>=d.resetAt){for(me.set(c,{count:1,resetAt:s+Mi});me.size>Hi;){let l=me.keys().next();if(l.done)break;me.delete(l.value)}return{allowed:!0,limit:a,remaining:a-1,retryAfterSec:0}}return d.count+=1,d.count>a?{allowed:!1,limit:a,remaining:0,retryAfterSec:Math.max(1,Math.ceil((d.resetAt-s)/1e3))}:{allowed:!0,limit:a,remaining:a-d.count,retryAfterSec:0}}var Hn=Object.freeze({"GET /public/health":xi,"GET /public/config":Ni,"POST /public/connect/request":Ai,"POST /public/connect/assemble":Ii,"POST /public/grants/active":ki,"POST /public/grants/get":_i,"POST /public/approvals":Pi,"POST /public/portfolio":Ui,"POST /public/nfts":Bi});function ft(e={}){return{"cache-control":"no-store","x-oracle-plane":ie,"x-oracle-unsigned":"true",...e}}function zi(e,t,r,n){e.writeHead(t,ft({"content-type":r})),e.end(n)}function ji(e,t,r){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let n=r===""?"/":r,o=qn[n]||qn[n.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=di(pt(lt,o.file));if(!i.startsWith(lt+pi)&&i!==lt)return D(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!li(i))return D(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let a=Vn(i);return e.method==="HEAD"?(t.writeHead(200,ft({"content-type":o.type,"content-length":String(a.length)})),t.end(),!0):(zi(t,200,o.type,a),!0)}async function Ki(e,t){let n=new URL(e.url,"http://localhost").pathname||"/";n.length>1&&n.endsWith("/")&&n!=="/oracle-console/"&&(n=n.replace(/\/+$/,"")),n===""&&(n="/");let o=n.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,a=Hn[i];try{if(!a){if(ji(e,t,n))return;throw Object.keys(Hn).some(p=>p.endsWith(` ${o}`))?new O(405,"method-not-allowed",`unsupported method for ${o}`):new O(404,"not-found",`unknown route ${o}`)}let s=Wi(e,o);if(!s.allowed){t.writeHead(429,ft({"content-type":"application/json","retry-after":String(s.retryAfterSec),"x-ratelimit-limit":String(s.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${s.retryAfterSec}s`}));return}let c=e.method==="GET"||e.method==="HEAD"?void 0:await Si(e),d=await a(c);D(t,d.status,d.body)}catch(s){if(s instanceof U){D(t,500,{error:"secret-leak-blocked"});return}if(s instanceof B){D(t,400,{error:"invalid-grant",errors:s.errors.map(c=>({field:c.field,message:c.message}))});return}if(s instanceof O){D(t,s.status,{error:s.code,message:s.message});return}if(s instanceof TypeError){D(t,400,{error:"bad-request",message:s.message});return}D(t,500,{error:"internal-error"})}}function Gi(){return ci((e,t)=>{Ki(e,t).catch(()=>{try{D(t,500,{error:"internal-error"})}catch{}})})}function mt({host:e,port:t}={}){let r=Ei(e??ct("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",hi)),n=t??ct("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(bi)),o=Number(n);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(n)}`);return{host:r,port:o}}function Kn(e={}){let{host:t,port:r}=mt(e),n=Gi();return n.listen(r,t),n}var ht=mt(),ke=Kn(ht);ke.on("listening",()=>{let e=ke.address(),t=typeof e=="object"&&e?e.address:ht.host,r=typeof e=="object"&&e?e.port:ht.port;console.log(`oracle-public-server listening on http://${t}:${r} (plane=${ie}, version=${Ae}, unsigned-only)`)});ke.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{ke.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});