@oracle-agent/oracle 0.24.9 → 0.25.0

package/dist/local-signer/index.mjs

@@ -1 +1,3 @@
-import{createHash as Xr,randomBytes as Zr,timingSafeEqual as Qr}from"node:crypto";import{base58 as _e}from"@scure/base";import{Interface as er,MaxUint256 as rr,isAddress as tr,keccak256 as Xt,toUtf8Bytes as Zt}from"ethers";import{Interface as Qe,isAddress as Lt}from"ethers";import{isAddress as Tt}from"ethers";import{createHash as De,createHmac as je,timingSafeEqual as Ge}from"node:crypto";import{readFileSync as Pe}from"node:fs";import{homedir as We}from"node:os";import{join as U}from"node:path";function Ve(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=We();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||U(r,".config","oracle")).trim();return[e,U(t,"exec.env")].filter(Boolean)}return[e,U(r,".config","oracle","exec.env"),U(r,".config","mad-desk","exec.env")].filter(Boolean)}function _(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let i of Ve())try{let o=Pe(i,"utf8"),a=o.match(new RegExp(`^${r}=(.*)$`,"m"))||o.match(new RegExp(`^${t}=(.*)$`,"m"));if(a&&(n=a[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function L(e,r,t="guard"){let n=Number(r);if(r==null||!Number.isFinite(n))throw new Error(`${t}: current time must be a finite number (got ${Ue(r)})`);let i=Number(e?.issuedAtMs),o=Number(e?.expiresAtMs);if(!Number.isFinite(o))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>o)throw new Error(`${t} expired at ${o}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(i))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(o<=i)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:i,expiresAtMs:o}}function Ue(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var se=100;function Q(e){return Array.isArray(e)?`[${e.map(Q).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${Q(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function He(e,{required:r=!1}={}){try{return _(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function ze(e){let{signature:r,...t}=e;return t}function Je(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return De("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function Ke(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:Ge(t,n)}function Xe(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let o=10;o+64<=r.length;o+=64)n.push(r.slice(o,o+64));let i=o=>n[o]==null?null:BigInt("0x"+n[o]);switch(t){case"0x414bf389":return i(6);case"0x04e45aaf":return i(5);case"0xc04b8d59":{let o=i(0);if(o==null)return null;let a=Number(o)/32;return!Number.isInteger(a)||a<0?null:i(a+4)}case"0xb858183f":{let o=i(0);if(o==null)return null;let a=Number(o)/32;return!Number.isInteger(a)||a<0?null:i(a+3)}case"0xa026383e":return i(6);case"0x38ed1739":case"0x5c11d795":return i(1);case"0x7ff36ab5":case"0xb6f9de95":return i(0);case"0x18cbafe5":case"0x791ac947":return i(1);default:return null}}function Y(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:i,tx:o,requireSigned:a=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let u=He(i,{required:a});if(a&&!u)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(u){let d=je("sha256",u).update(Q(ze(e))).digest("hex");if(!Ke(e.signature,d))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let f=Number(e.selectedBps),s=Number(e.capBps);if(!Number.isInteger(f)||f<0||f>se)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(s)||s<0||s>se||f>s)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{L({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(d){throw new Error(`${d.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let m=BigInt(e.quoteAmountOut??0),l=BigInt(e.minAmountOut??0);if(m<=0n||l<=0n)throw new Error("auto-slippage guard amounts must be positive");let p=m*BigInt(1e4-f),c=p/10000n;if(p%10000n!==0n&&(c+=1n),l<c)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(o?.data&&e.minAmountOut!=null){let d=Xe(o.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==Je(o.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(d!=null&&d!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${d}, not the guard floor ${e.minAmountOut}`)}else{if(d==null){let h=String(o.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${h}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(d!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${d}`)}}return!0}var $t=new Qe(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Ye,isAddress as kt}from"ethers";var Ut=new Ye(["function approve(address spender,uint256 amount) returns (bool)"]),Dt=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function ce(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=String(e??"").trim();if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}var nn=new er(["function approve(address spender,uint256 amount) returns (bool)"]);function ue(e,r){let t=String(e||"").trim();if(!tr(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function nr(e,r="approval amount",{allowZero:t=!1}={}){let n=ce(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=rr)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var fe=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),or=new Set(["0x39509351","0xf9255c1f"]);function B(e){let r=String(e||"").toLowerCase();return r.length<10?!1:fe.has(r.slice(0,10))}function de(e){if(!B(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],i=s=>n[s]?"0x"+n[s].slice(24):null,o=s=>n[s]?BigInt("0x"+n[s]):null,a=null,u=null,f=null;switch(t){case"0x095ea7b3":case"0x39509351":a=i(0),u=o(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":f=i(0),a=i(1),u=o(2);break;case"0xd505accf":a=i(1),u=o(2);break;case"0x8fcbaf0c":{a=i(1),u=o(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":f=i(0),a=i(1),u=o(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(a==null||u==null)throw new Error("invalid approve calldata");return{spender:ue(a,"approval spender"),token:f==null?null:ue(f,"approval token"),amount:nr(u,"approval amount",{allowZero:!0}),selector:t,additive:or.has(t)}}import{createHash as ir,createHmac as ar,timingSafeEqual as sr}from"node:crypto";var cr=2,ee=300*1e3,pe=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function ur(e){let r=e==null||e===""?ee:Number(e);return!Number.isFinite(r)||r<0?ee:Math.min(r,pe)}function re(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(re).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${re(e[t])}`).join(",")}}`}function le(e){let r=String(e?.ORACLE_STAMP_HMAC_SECRET||"").trim();return r.length>=16?r:""}function me(e=process.env){return le(process.env)||le(e)}function fr(e=process.env){return String(process.env.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"||String(e?.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"}function dr(e){let{oraclePrepared:r,prepareHash:t,prepareMac:n,note:i,...o}=e||{};return o}function lr(e){let r=dr(e);return ir("sha256").update(re(r)).digest("hex")}function pr(e,r=me()){return r?ar("sha256",r).update(String(e)).digest("hex"):""}function mr(e,r){try{let t=Buffer.from(String(e),"hex"),n=Buffer.from(String(r),"hex");return t.length===0||t.length!==n.length?!1:sr(t,n)}catch{return!1}}function we(e,{maxAgeMs:r=ee,nowMs:t=Date.now(),providers:n=null,kinds:i=null,label:o="operator",env:a=process.env}={}){if(!e||typeof e!="object")throw new Error(`${o}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${o}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==cr)throw new Error(`${o}: unsupported prepareVersion ${e.prepareVersion}`);let u=lr(e);if(String(e.prepareHash||"")!==u)throw new Error(`${o}: prepareHash mismatch \u2014 payload was altered after prepare`);let f=me(a),s=String(e.prepareMac||"");if(fr(a)||s||f){if(!f)throw new Error(`${o}: prepareMac present or ORACLE_STAMP_REQUIRE_MAC=1 but ORACLE_STAMP_HMAC_SECRET missing in signer`);let h=pr(u,f);if(!s||!mr(s,h))throw new Error(`${o}: prepareMac mismatch \u2014 stamp not from trusted preparer`)}let m=Number(e.preparedAt),l=Number(e.expiresAt),p=ur(r),c=t-m,d=l-m;if(!Number.isFinite(c)||!Number.isFinite(l)||!Number.isFinite(d)||c<0||d<=0||d>pe||c>p||t>l)throw new Error(`${o}: prepare envelope expired or clock-skewed (ageMs=${c}, max=${p})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${o}: provider ${e.provider} not allowed here`);if(i&&!new Set(i).has(e.kind))throw new Error(`${o}: kind ${e.kind} not allowed here`);return!0}var D=e=>String(e||"").toLowerCase(),wr=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","slippageBps","expiresAtMs"]),hr=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function y(e){try{return hr.has(BigInt(e))}catch{return!1}}var S=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},he=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},M=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function j(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:i=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(c=>!wr.has(c)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");let o=(c,d)=>{try{return BigInt(c)===BigInt(d)}catch{return String(c)===String(d)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(c=>o(c,e.chainId)))throw new Error("policy: chain not allowed");if(M(e.to,r.destinations,"destination",D),M(String(e.data||"0x").slice(0,10),r.selectors,"selector",c=>String(c).toLowerCase()),M(e.from,r.owners,"owner",D),B(e.data)){let c;try{c=de(e.data)}catch(h){throw new Error(`policy: malformed approval calldata: ${h?.message||h}`)}M(c.spender,r.spenders,"spender",D),M(c.token||e.to,r.erc20Tokens,"ERC-20 token",D);let d=S(r.maxApproval,"maxApproval");if(BigInt(c.amount)>d)throw new Error("policy: approval exceeds cap");if(c.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if(S(e.value,"value")>S(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let a=S(e.gasLimit,"gasLimit");if(a>S(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let u=e.maxFeePerGas??e.gasPrice,f=S(u,"feePerGas")*a,s=0n;try{if(y(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(s+=S(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(s+=S(e.operatorFeeWei,"operatorFeeWei")),y(e.chainId)&&(i||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let c=S(n.l1FeeWei,"estimated l1FeeWei")+S(n.operatorFeeWei,"estimated operatorFeeWei");if(s<c)throw new Error("policy: rollup fee attestation understates estimate")}if(f+s>S(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let l=he(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>l)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let p=he(r.maxTtlMs??12e4,"maxTtlMs");if(p<=0||e.expiresAtMs-t>p)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as ge}from"node:crypto";import{Address as gr,NETWORK as xr,OutScript as xe,RawTx as br,SigHash as be,TEST_NETWORK as Er,Transaction as Sr}from"@scure/btc-signer";var Ee=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},vr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},Ar=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,yr=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),F=e=>yr(e)?String(e).toLowerCase():String(e),te=(e,r)=>Array.isArray(r)&&r.some(t=>F(t)===F(e)),Tr=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function Nr(e){let r=Buffer.from(br.encode(e)),t=ge("sha256").update(r).digest();return Buffer.from(ge("sha256").update(t).digest()).reverse().toString("hex")}function Ir(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(Nr(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!Tr(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function Br(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(l=>!["network","psbt"].includes(l)))throw new Error("envelope: unexpected BTC artifact field");if(!te(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?xr:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?Er:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let i;try{i=Sr.fromPSBT(vr(t.psbt,"PSBT"))}catch(l){throw new Error(`envelope: invalid PSBT: ${l?.message||l}`)}if(i.inputsLength===0||i.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let o=gr(n);for(let l=0;l<i.inputsLength;l++){let p=i.getInput(l);for(let h of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(Ar(p[h]))throw new Error("envelope: signed or finalized PSBT refused");if(p.sighashType!==void 0&&p.sighashType!==be.DEFAULT&&p.sighashType!==be.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let c=Ir(p),d;try{let h=xe.decode(c.script);if(!["wpkh"].includes(h.type))throw new Error("unsupported input");d=o.encode(h)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!te(d,r.owners)||F(d)!==F(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let a=new Set([e.owner,...r.changeAddresses||[]].map(l=>F(l))),u=0n,f=!1,s=[];for(let l=0;l<i.outputsLength;l++){let p=i.getOutput(l),c;try{c=o.encode(xe.decode(p.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let d=F(c);if(s.push(`${c}:${p.amount}`),d===F(e.destination)){f=!0,u+=p.amount;continue}if(te(c,r.destinations)){u+=p.amount;continue}if(!a.has(d))throw new Error("policy: Bitcoin output destination not allowed")}if(!f)throw new Error("envelope: Bitcoin destination mismatch");let m;try{m=i.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(m<0n||m>Ee(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(u>Ee(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:u.toString(),notional:(u+m).toString(),fee:m.toString(),outputs:Object.freeze(s)})}function Se(e,r){let{unit:t,value:n,notional:i,fee:o}=Br(e,r);return Object.freeze({unit:t,value:n,notional:i,fee:o})}import{getCompiledTransactionMessageDecoder as Fr}from"@solana/transaction-messages";var Or="11111111111111111111111111111111",Lr=5000n,$=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Cr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},G=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e));function _r(e,r){if(e.action!=="transfer")throw new Error("envelope: Solana decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(d=>!["cluster","messageBase64","exactFeeLamports"].includes(d)))throw new Error("envelope: unexpected Solana artifact field");if(!G(t.cluster,r.chains))throw new Error("policy: chain not allowed");let n;try{n=Fr().decode(Cr(t.messageBase64,"Solana message"))}catch(d){throw new Error(`envelope: invalid Solana message: ${d?.message||d}`)}if(n.version!=="legacy"&&Array.isArray(n.addressTableLookups)&&n.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");if(n.header.numSignerAccounts!==1||n.staticAccounts[0]!==e.owner||!G(e.owner,r.owners))throw new Error("envelope: Solana owner mismatch");let i=0n,o=!1,a=[];if(!Array.isArray(n.instructions)||n.instructions.length===0)throw new Error("envelope: Solana instructions required");for(let d of n.instructions){let h=n.staticAccounts[d.programAddressIndex];if(!h||!G(h,r.programs))throw new Error("policy: Solana program not allowed");if(h!==Or)throw new Error("envelope: unsupported Solana program decoder");a.push(h);let w=d.accountIndices||[];if(w.length!==2||n.staticAccounts[w[0]]!==e.owner)throw new Error("envelope: Solana transfer owner mismatch");let E=n.staticAccounts[w[1]];if(E!==e.destination||!G(E,r.destinations))throw new Error("envelope: Solana destination mismatch");let A=Buffer.from(d.data||[]);if(A.length!==12||A.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");i+=A.readBigUInt64LE(4),o=!0}if(!o)throw new Error("envelope: Solana destination mismatch");if(i>$(r.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");let u=$(r.lamportsPerSignature,"lamportsPerSignature");if(u<Lr)throw new Error("policy: Solana per-signature fee is below the network minimum");let f=r.maxLamportsPerSignature===void 0?u:$(r.maxLamportsPerSignature,"maxLamportsPerSignature");if(u>f)throw new Error("policy: Solana per-signature fee exceeds cap");let s=e?.artifact?.exactFeeLamports,m=BigInt(n.header.numSignerAccounts),l=m*u,p=m*f;if(s!==void 0){let d=$(s,"exactFeeLamports");if(d<l)throw new Error("policy: Solana exact fee below the base signature fee");if(d>p)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let c=p;if(c>$(r.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return Object.freeze({unit:"lamports",value:i.toString(),notional:(i+c).toString(),fee:c.toString(),programs:Object.freeze(a)})}function ve(e,r){let{unit:t,value:n,notional:i,fee:o}=_r(e,r);return Object.freeze({unit:t,value:n,notional:i,fee:o})}var ye=new Set(["evm","evm-swap","evm-bridge","evm-nft","btc","sol"]);var oe=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0}),Mr=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),Te=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),$r=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"}});var H=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},g=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},Ae=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},qr=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},x=(e,r,t)=>{if(!qr(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},ne=(e,r,t)=>{Array.isArray(r)&&r.length&&x(e,r,t)},N=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},R=e=>String(e||"0x").slice(0,10).toLowerCase(),Ne=e=>g(e.gasLimit,"gasLimit")*g(e.maxFeePerGas??e.gasPrice,"feePerGas")+g(e.l1FeeWei??0,"l1FeeWei")+g(e.operatorFeeWei??0,"operatorFeeWei");function z(e,r,t,{dynamicTail:n=!1}={}){let i=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(i)||i.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&i.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:i,word:o=>i.slice(10+o*64,10+(o+1)*64)}}function v(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function T(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function Rr(e){if(R(e)!=="0x095ea7b3")return null;let r=z(e,2,"approval");return{kind:"approval",spender:v(r.word(0),"approval spender"),amount:T(r.word(1),"approval amount")}}function kr(e,r){let t=r==="router02-exact-input-single"?7:8,n=z(e,t,"Uniswap v3 exactInputSingle"),i=t===7?4:5;return{kind:"action",action:"swap",inputToken:v(n.word(0),"input token"),outputToken:v(n.word(1),"output token"),recipient:v(n.word(3),"recipient"),amountIn:T(n.word(i),"amountIn"),minimumOut:T(n.word(i+1),"amountOutMinimum")}}function Pr(e){let r=z(e,12,"Across depositV3",{dynamicTail:!0}),t=T(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let i=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(i))throw new Error("envelope: malformed Across depositV3 message length");let o=Math.ceil(i/32)*64;if(r.hex.length!==n+64+o)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:v(r.word(0),"depositor"),recipient:v(r.word(1),"recipient"),inputToken:v(r.word(2),"input token"),outputToken:v(r.word(3),"output token"),amountIn:T(r.word(4),"inputAmount"),minimumOut:T(r.word(5),"outputAmount"),destinationChainId:T(r.word(6),"destinationChainId")}}function Wr(e,r){let t=R(e),n=Te[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.action==="swap")return{...kr(e,n.layout),selector:t,provider:n.provider};if(n.action==="bridge")return{...Pr(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function Vr(e){let r=z(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",contract:v(r.word(0),"mint NFT contract"),feeRecipient:v(r.word(1),"mint fee recipient"),recipient:v(r.word(2),"mint recipient"),quantity:T(r.word(3),"mint quantity")}}function Ur(e,r){let t=R(e),n=$r[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...Vr(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function q(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function Ie(e,r,t,{nowMs:n=Date.now(),networkFees:i,requireNetworkFees:o=!1}={}){let a=N(e.owner,"owner"),u=e.artifact,f=Number(u?.chainId??q(e)[0]?.chainId);if(!Number.isSafeInteger(f)||f<=0)throw new Error("envelope: explicit batch chainId required");if(x(f,r.chains,"chain"),u?.owner!==void 0&&N(u.owner,"batch owner")!==a)throw new Error("envelope: explicit batch owner mismatch");let s=q(e);if(!s.length||s.length>8)throw new Error("envelope: bounded EVM transaction batch required");let m=0n,l=0n,p=0n;for(let c of s){if(!c||typeof c!="object"||Array.isArray(c))throw new Error("envelope: structured EVM transaction required");if(Number(c.chainId)!==f)throw new Error("envelope: every batch leg must use the same chain");if(N(c.from,"transaction owner")!==a)throw new Error("envelope: every batch leg must use the same owner");if(x(R(c.data),r.selectors,"selector"),m+=g(c.value??0,"value"),l+=g(c.gasLimit,"gasLimit"),p+=Ne(c),y(f)&&(c.l1FeeWei===void 0||c.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(m>g(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(l>g(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(p>g(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:s,chainId:f,owner:a,totalValue:m,totalGas:l,totalFee:p}}function Be(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let i=String(e?.surface||"");if(i!=="evm-swap"&&i!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let o=H(e.provider,"provider",64).toLowerCase();x(o,r.providers,"provider");let a=Ie(e,r,i,{nowMs:t}),u=[],f=-1;for(let c=0;c<a.transactions.length;c++){let d=a.transactions[c],h=Rr(d.data),w;if(h){if(f!==-1)throw new Error("envelope: approval must be before action");if(g(d.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let O=N(d.to,"approval token");if(x(O,r.tokens,"token"),x(h.spender,r.spenders,"spender"),h.amount>g(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");w={...h,token:O,index:c}}else{if(f!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");x(d.to,r.destinations,"destination"),w={...Wr(d.data,o),target:N(d.to,"action target"),index:c},f=c}let E=g(d.value??0,"value"),A=g(d.gasLimit,"gasLimit");u.push({...w,value:E,gas:A,fee:Ne(d)})}if(f<0)throw new Error("envelope: reviewed swap/bridge action required");let s=u[f],m=i==="evm-swap"?"swap":"bridge";if(s.action!==m||e.action!==m)throw new Error("envelope: surface/action/calldata mismatch");if(N(e.destination,"destination")!==s.target)throw new Error("envelope: destination must equal decoded action target");if(s.recipient!==a.owner)throw new Error("envelope: decoded recipient must equal owner");if(s.depositor&&s.depositor!==a.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(x(s.inputToken,r.tokens,"input token"),x(s.outputToken,r.tokens,"output token"),s.amountIn<=0n||s.amountIn>g(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(s.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(Y(e.autoSlippage,{nowMs:t,chainId:a.chainId,venue:o,tx:a.transactions[f],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(s.minimumOut!==g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(s.action==="bridge"&&g(e.toChainId,"toChainId")!==s.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let l=u.filter(c=>c.kind==="approval");if(!Mr.has(s.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(l.length)throw new Error("envelope: native-value action must not include token approval");if(s.value!==s.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let p=Object.freeze({quoteAmountOut:g(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...a,decoded:u,action:s,provider:o,authenticatedQuote:p}}function Fe(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint action");let n=H(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();ne(n,r.providers,"provider");let i=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;i?.oraclePrepared===!0&&we(i,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"});let o=Ie(e,r,"evm-nft",{nowMs:t});if(o.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let a=o.transactions[0],u=R(a.data);x(u,r.selectors,"selector"),x(a.to,r.destinations,"destination");let f=Ur(a.data,n),s=N(e.contract??e.artifact?.contract,"NFT contract");if(ne(s,r.nftContracts,"NFT contract"),f.contract!==s)throw new Error("envelope: mint calldata NFT contract mismatch");if(f.recipient!==o.owner)throw new Error("envelope: mint calldata recipient mismatch");ne(f.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let m=g(e.quantity??e.artifact?.quantity,"quantity");if(m<=0n||m>g(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(f.quantity!==m)throw new Error("envelope: mint calldata quantity mismatch");let l=g(e.totalWei??e.artifact?.totalWei,"totalWei");if(o.totalValue!==l)throw new Error("envelope: mint value does not match declared totalWei");if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&g(e.priceWei??e.artifact.priceWei,"priceWei")*m!==l)throw new Error("envelope: mint price does not match declared totalWei");if(l>g(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...o,provider:n,decoded:[{...f,target:N(a.to,"mint target"),value:o.totalValue,gas:o.totalGas,fee:o.totalFee}]}}function Oe(e,{localsWaiver:r=!1}={}){if(!(e in oe))throw new Error("fee: unknown action");return r?0:oe[e]}function k(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:i,networkFees:o,requireNetworkFees:a=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let u=H(e.surface,"surface",16);if(!ye.has(u))throw new Error("envelope: unsupported public surface");let f=H(e.action,"action",32);x(u,r.surfaces,"surface"),x(f,r.actions,"action"),x(e.owner,r.owners,"owner"),x(e.destination,r.destinations,"destination");let s=Ae(r.maxTtlMs,"maxTtlMs"),m=Ae(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>s)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>m)throw new Error("policy: slippage exceeds cap");let l=e.artifact;if(!l||typeof l!="object"||Array.isArray(l))throw new Error("envelope: structured artifact required");if(u==="evm-swap"||u==="evm-bridge")Be(e,r,{nowMs:t,routeAttestationSecret:i});else if(u==="evm-nft")Fe(e,r,{nowMs:t});else if(u==="evm"){if(!["transfer","approve"].includes(f))throw new Error("envelope: generic evm requires transfer or approve; use strict evm-nft for mint action");if(f==="swap"||f==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(String(l.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(l.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");j({...l,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:o,requireNetworkFees:a});let d=String(l.data||"0x").toLowerCase(),h=g(l.value,"EVM value");if(d==="0x"){if(h===0n)throw new Error("envelope: native EVM transfer value required")}else if(B(d)){if(h!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else u==="btc"?Se(e,r):u==="sol"&&ve(e,r);let p=Number(e.fee?.oracleFeeBps)===0&&oe[f]!==0;if(e.fee?.waiver||p&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(p&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let c=Oe(f,{localsWaiver:p});if(Number(e.fee?.oracleFeeBps)!==c)throw new Error("fee: final artifact fee mismatch");return!0}var J=Object.freeze([...ye]),Dr=Object.freeze({...Te});function jr(e={}){let r={};for(let t of J){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(i,o)=>n.simulate(structuredClone(i),structuredClone(o)),sign:(i,o)=>n.sign(structuredClone(i),structuredClone(o)),broadcast:(i,o,a)=>n.broadcast(i,structuredClone(o),structuredClone(a))})}}return Object.freeze(r)}function Gr(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as An}from"@noble/curves/ed25519.js";import{base58 as Hr}from"@scure/base";import{RawTx as Nn,SigHash as In,Transaction as zr}from"@scure/btc-signer";import{Transaction as Jr}from"ethers";var Le=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function Kr(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let i=e[n++];if(r|=(i&127)<<t,(i&128)===0)return{value:r,offset:n};t+=7}return null}function Ce(e,r){try{if(String(e).startsWith("evm"))return Jr.from(r).hash;if(e==="btc"){let t=Le(r);if(!t)return null;let n=zr.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=Le(r);if(!t)return null;let n=Kr(t);if(!n||n.value!==1)return null;let i=t.subarray(n.offset,n.offset+64);return i.length===64?Hr.encode(i):null}}catch{}return null}var Yr=e=>String(e||"").toLowerCase();function I(e){return Xr("sha256").update(JSON.stringify(e)).digest("hex")}function X(e,r,t={}){return j(e,r,t)}async function et(e,r={}){if(!y(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function Me(e,r,t=!1){if(!y(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),i=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<i)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function rt(e,r={}){return renderConfirmationArtifact(e,I(e),r)}var P=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let i=Zr(32).toString("hex");return this.#e.set(i,{digest:I(r),owner:Yr(t),expiresAtMs:this.now()+n}),i}consume(r,t){let n=this.#e.get(String(r));if(!n)throw new Error("confirmation: used or unknown nonce");if(n.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let i=Buffer.from(n.digest,"hex"),o=Buffer.from(I(t),"hex");if(!Qr(i,o))throw new Error("confirmation: artifact mismatch");return this.#e.delete(String(r)),n}clear(){this.#e.clear()}};function tt(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if(B(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function nt(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function K(e,r){let t=String(r||"");if(String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=_e.decode(t);return n.length===64&&_e.encode(n)===t}catch{return!1}return!1}function $e(e,r,t){return!K(e,r)||!K(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function ot(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function ie({artifact:e,envelope:r,nonce:t,deps:n,policy:i,confirmation:o,consumeNonce:a,nowMs:u}){let f=ot(i);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(f!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,u())!==!0)throw new Error("signer: autonomous trigger attestation required");return o}if(f!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(a)return n.confirmations.consume(t,e);if(!o||!Number.isFinite(o.expiresAtMs)||o.expiresAtMs<=u())throw new Error("confirmation: expired nonce");return o}function it(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function at(e,r){return e&&it(e.surface)?q(e):[r]}function st(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!$e(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function ct(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:nt(t,n)}}async function ae(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=e?.version===1&&e?.surface?e:null,i=n?n.artifact:(()=>{let{tradeId:w,...E}=e||{};return E})(),o=at(n,i),a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,u=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),f=await ie({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:null,consumeNonce:!0,nowMs:u}),s=I(e),m=(w={})=>{n?k(n,a,w):(X(i,a,{nowMs:w.nowMs,networkFees:w.networkFees,requireNetworkFees:w.requireNetworkFees}),tt(i))},l=async w=>{let E=n&&!String(n.surface||"").startsWith("evm")?void 0:await et(w,t);return{nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:E,requireNetworkFees:y(w?.chainId)}};m({nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let w of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[w]!="function")throw new Error(`signer: ${w} is required`);let p=t.reserveLedger(n||e,a);if(!p)throw new Error("signer: ledger reservation required");let c=!1,d=[];try{for(let w of o){if(typeof t.simulate!="function"||await t.simulate(w,n)!==!0)throw new Error("signer: strict affirmative simulation required");let E=await l(w);if(Me(w,E.networkFees,E.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,f=await ie({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:f,consumeNonce:!1,nowMs:u}),m(E),t.validateReservation(p,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0),c=!0;let A=await t.sign(w,n);if(typeof t.verifySigned!="function"||await t.verifySigned(A,w,n)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");if(!t.isArmed())throw new Error("signer: disarmed before broadcast");if(I(e)!==s)throw new Error("signer: artifact mutated after signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,f=await ie({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:f,consumeNonce:!1,nowMs:u});let O=await l(w);Me(w,O.networkFees,O.requireNetworkFees),m(O),t.validateReservation(p,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0);let Z=await t.broadcast(A,w,n),W=Z?.status,C=n?.surface||"evm",V=st(Z,C),ke=Ce(C,A);if(!$e(C,V,ke))throw new Error("signer: receipt transaction hash does not match signed bytes");if(W===0||W==="0x0")throw K(C,V)?(t.settleFailedLedger(p),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(W!==1&&W!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!K(C,V))throw new Error("signer: successful broadcast requires a valid transaction hash");d.push(ct(Z,V))}}catch(w){throw c||t.releaseLedger(p),w}if(t.commitLedger(p),d.length===1){let w={receipt:d[0]};return n?.surface==="evm-bridge"&&(w.originStatus="success",w.destinationStatus="unverified",w.destinationSuccess=!1,w.note="Origin-chain receipts do not prove destination-chain settlement."),w}let h={receipts:d,status:"success"};return n?.surface==="evm-bridge"&&(h.originStatus="success",h.destinationStatus="unverified",h.destinationSuccess=!1,h.note="Origin-chain receipts do not prove destination-chain settlement."),h}import ut from"node:http";import{timingSafeEqual as ft}from"node:crypto";var qe=new Set(["127.0.0.1","::1","localhost"]),dt=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&ft(t,n)},b=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function lt(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var Re=e=>new Promise((r,t)=>{let n=0,i=[],o=!1;e.on("data",a=>{n+=a.length,n>64*1024&&!o?(o=!0,t(new Error("request refused")),e.resume()):o||i.push(a)}),e.on("end",()=>{if(!o)try{r(JSON.parse(Buffer.concat(i).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)});function pt(e={}){let r=e.host||"127.0.0.1";if(!qe.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let o of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[o]!="function")throw new Error(`signer: ${o} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new P,n=e.origin||`http://${r}`;return ut.createServer(async(o,a)=>{try{let u=String(o.headers.authorization||"").replace(/^Bearer /i,"");if(!dt(u,e.token))return b(a,401,{error:"unauthorized"});let f=lt(o.headers.host);if(!qe.has(f))return b(a,403,{error:"host refused"});if(o.headers.origin&&o.headers.origin!==n)return b(a,403,{error:"origin refused"});if(o.method==="GET"&&o.url==="/status"){let s=typeof e.readPolicy=="function"?e.readPolicy():e.policy,m=new Set(J),l=Array.isArray(s?.surfaces)?s.surfaces.filter(p=>typeof p=="string"&&m.has(p)):[];return b(a,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:l,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(o.method==="POST"&&o.url==="/disarm")return e.disarm(),t.clear(),b(a,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(o.method))return b(a,405,{error:"request refused"});if(o.method==="POST"&&String(o.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return b(a,415,{error:"request refused"});if(o.method==="POST"&&o.url==="/confirm"){if(e.autonomous===!0)return b(a,403,{error:"autonomous signer does not issue human confirmation nonces"});let s=await Re(o),m=I(s.artifact),l=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(l?.confirmationMode!=="exact-human")return b(a,403,{error:"exact-human policy required"});let p=typeof e.nowMs=="function"?e.nowMs():Date.now();if(s.artifact?.version===1&&s.artifact?.surface)k(s.artifact,l,{nowMs:p,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:c,...d}=s.artifact||{};X(d,l,{nowMs:p})}return typeof e.confirmArtifact!="function"?b(a,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(s.artifact,m,l)!==!0?b(a,400,{error:"exact human confirmation refused"}):b(a,200,{confirmationNonce:t.issue({artifact:s.artifact,owner:s.artifact?.owner??s.artifact?.from,ttlMs:s.ttlMs})})}if(o.method==="POST"&&o.url==="/execute"){let s=await Re(o),m=await ae(s.artifact,s.confirmationNonce,{...e,confirmations:t});return b(a,200,m)}return b(a,404,{error:"not found"})}catch(u){return e.onError?.(String(u?.message||u)),b(a,400,{error:"request refused"})}})}export{P as ConfirmationStore,J as PUBLIC_SIGNER_SURFACES,Dr as REVIEWED_EVM_SELECTORS,I as artifactDigest,X as assertExactPolicy,pt as createSignerServer,jr as createSurfaceAdapters,q as evmTransactions,ae as executeConfirmedArtifact,rt as inspectArtifactForConfirmation,Be as inspectEvmBatch,Fe as inspectEvmNft,Oe as publicFeeBps,Gr as surfaceAdapterFor,k as validateSurfaceEnvelope};
+import{createHash as An,randomBytes as yn,timingSafeEqual as vn}from"node:crypto";import{base58 as Er}from"@scure/base";import{Interface as $r,MaxUint256 as Wr,isAddress as Ur,keccak256 as yo,toUtf8Bytes as vo}from"ethers";import{Interface as qr,isAddress as no}from"ethers";import{isAddress as Xn}from"ethers";import{createHash as kr,createHmac as Or,timingSafeEqual as Lr}from"node:crypto";import{readFileSync as vr}from"node:fs";import{homedir as Tr}from"node:os";import{join as Q}from"node:path";function Ir(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=Tr();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||Q(r,".config","oracle")).trim();return[e,Q(t,"exec.env")].filter(Boolean)}return[e,Q(r,".config","oracle","exec.env"),Q(r,".config","mad-desk","exec.env")].filter(Boolean)}function V(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let o of Ir())try{let i=vr(o,"utf8"),a=i.match(new RegExp(`^${r}=(.*)$`,"m"))||i.match(new RegExp(`^${t}=(.*)$`,"m"));if(a&&(n=a[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function J(e,r,t="guard"){let n=Number(r);if(r==null||!Number.isFinite(n))throw new Error(`${t}: current time must be a finite number (got ${Nr(r)})`);let o=Number(e?.issuedAtMs),i=Number(e?.expiresAtMs);if(!Number.isFinite(i))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>i)throw new Error(`${t} expired at ${i}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(o))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(i<=o)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:o,expiresAtMs:i}}function Nr(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var ye=100;function ce(e){return Array.isArray(e)?`[${e.map(ce).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${ce(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function Br(e,{required:r=!1}={}){try{return V(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function _r(e){let{signature:r,...t}=e;return t}function Cr(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return kr("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function Pr(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:Lr(t,n)}function Mr(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let i=10;i+64<=r.length;i+=64)n.push(r.slice(i,i+64));let o=i=>n[i]==null?null:BigInt("0x"+n[i]);switch(t){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+4)}case"0xb858183f":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}function ue(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:o,tx:i,requireSigned:a=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let c=Br(o,{required:a});if(a&&!c)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(c){let m=Or("sha256",c).update(ce(_r(e))).digest("hex");if(!Pr(e.signature,m))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let u=Number(e.selectedBps),s=Number(e.capBps);if(!Number.isInteger(u)||u<0||u>ye)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(s)||s<0||s>ye||u>s)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{J({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(m){throw new Error(`${m.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let p=BigInt(e.quoteAmountOut??0),f=BigInt(e.minAmountOut??0);if(p<=0n||f<=0n)throw new Error("auto-slippage guard amounts must be positive");let d=p*BigInt(1e4-u),l=d/10000n;if(d%10000n!==0n&&(l+=1n),f<l)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(i?.data&&e.minAmountOut!=null){let m=Mr(i.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==Cr(i.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(m!=null&&m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${m}, not the guard floor ${e.minAmountOut}`)}else{if(m==null){let w=String(i.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${w}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${m}`)}}return!0}var so=new qr(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Rr,isAddress as fo}from"ethers";var ho=new Rr(["function approve(address spender,uint256 amount) returns (bool)"]),wo=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function ve(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=String(e??"").trim();if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}var Lo=new $r(["function approve(address spender,uint256 amount) returns (bool)"]);function Te(e,r){let t=String(e||"").trim();if(!Ur(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function Dr(e,r="approval amount",{allowZero:t=!1}={}){let n=ve(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=Wr)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var Ie=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),Jr=new Set(["0x39509351","0xf9255c1f"]);function $(e){let r=String(e||"").toLowerCase();return r.length<10?!1:Ie.has(r.slice(0,10))}function Ne(e){if(!$(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],o=s=>n[s]?"0x"+n[s].slice(24):null,i=s=>n[s]?BigInt("0x"+n[s]):null,a=null,c=null,u=null;switch(t){case"0x095ea7b3":case"0x39509351":a=o(0),c=i(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":u=o(0),a=o(1),c=i(2);break;case"0xd505accf":a=o(1),c=i(2);break;case"0x8fcbaf0c":{a=o(1),c=i(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":u=o(0),a=o(1),c=i(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(a==null||c==null)throw new Error("invalid approve calldata");return{spender:Te(a,"approval spender"),token:u==null?null:Te(u,"approval token"),amount:Dr(c,"approval amount",{allowZero:!0}),selector:t,additive:Jr.has(t)}}import{createHash as jr,createHmac as Vr,timingSafeEqual as Hr}from"node:crypto";var Gr=2,fe=300*1e3,Oe=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function zr(e){let r=e==null||e===""?fe:Number(e);return!Number.isFinite(r)||r<0?fe:Math.min(r,Oe)}function de(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(de).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${de(e[t])}`).join(",")}}`}function ke(e){let r=String(e?.ORACLE_STAMP_HMAC_SECRET||"").trim();return r.length>=16?r:""}function Le(e=process.env){return ke(process.env)||ke(e)}function Kr(e=process.env){return String(process.env.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"||String(e?.ORACLE_STAMP_REQUIRE_MAC||"").trim()==="1"}function Yr(e){let{oraclePrepared:r,prepareHash:t,prepareMac:n,note:o,...i}=e||{};return i}function Xr(e){let r=Yr(e);return jr("sha256").update(de(r)).digest("hex")}function Zr(e,r=Le()){return r?Vr("sha256",r).update(String(e)).digest("hex"):""}function Qr(e,r){try{let t=Buffer.from(String(e),"hex"),n=Buffer.from(String(r),"hex");return t.length===0||t.length!==n.length?!1:Hr(t,n)}catch{return!1}}function Be(e,{maxAgeMs:r=fe,nowMs:t=Date.now(),providers:n=null,kinds:o=null,label:i="operator",env:a=process.env}={}){if(!e||typeof e!="object")throw new Error(`${i}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${i}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==Gr)throw new Error(`${i}: unsupported prepareVersion ${e.prepareVersion}`);let c=Xr(e);if(String(e.prepareHash||"")!==c)throw new Error(`${i}: prepareHash mismatch \u2014 payload was altered after prepare`);let u=Le(a),s=String(e.prepareMac||"");if(Kr(a)||s||u){if(!u)throw new Error(`${i}: prepareMac present or ORACLE_STAMP_REQUIRE_MAC=1 but ORACLE_STAMP_HMAC_SECRET missing in signer`);let w=Zr(c,u);if(!s||!Qr(s,w))throw new Error(`${i}: prepareMac mismatch \u2014 stamp not from trusted preparer`)}let p=Number(e.preparedAt),f=Number(e.expiresAt),d=zr(r),l=t-p,m=f-p;if(!Number.isFinite(l)||!Number.isFinite(f)||!Number.isFinite(m)||l<0||m<=0||m>Oe||l>d||t>f)throw new Error(`${i}: prepare envelope expired or clock-skewed (ageMs=${l}, max=${d})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${i}: provider ${e.provider} not allowed here`);if(o&&!new Set(o).has(e.kind))throw new Error(`${i}: kind ${e.kind} not allowed here`);return!0}var ee=e=>String(e||"").toLowerCase(),et=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","slippageBps","expiresAtMs"]),rt=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function q(e){try{return rt.has(BigInt(e))}catch{return!1}}var I=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},_e=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},H=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function re(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:o=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(l=>!et.has(l)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");let i=(l,m)=>{try{return BigInt(l)===BigInt(m)}catch{return String(l)===String(m)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(l=>i(l,e.chainId)))throw new Error("policy: chain not allowed");if(H(e.to,r.destinations,"destination",ee),H(String(e.data||"0x").slice(0,10),r.selectors,"selector",l=>String(l).toLowerCase()),H(e.from,r.owners,"owner",ee),$(e.data)){let l;try{l=Ne(e.data)}catch(w){throw new Error(`policy: malformed approval calldata: ${w?.message||w}`)}H(l.spender,r.spenders,"spender",ee),H(l.token||e.to,r.erc20Tokens,"ERC-20 token",ee);let m=I(r.maxApproval,"maxApproval");if(BigInt(l.amount)>m)throw new Error("policy: approval exceeds cap");if(l.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if(I(e.value,"value")>I(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let a=I(e.gasLimit,"gasLimit");if(a>I(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let c=e.maxFeePerGas??e.gasPrice,u=I(c,"feePerGas")*a,s=0n;try{if(q(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(s+=I(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(s+=I(e.operatorFeeWei,"operatorFeeWei")),q(e.chainId)&&(o||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let l=I(n.l1FeeWei,"estimated l1FeeWei")+I(n.operatorFeeWei,"estimated operatorFeeWei");if(s<l)throw new Error("policy: rollup fee attestation understates estimate")}if(u+s>I(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let f=_e(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>f)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let d=_e(r.maxTtlMs??12e4,"maxTtlMs");if(d<=0||e.expiresAtMs-t>d)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as Ce}from"node:crypto";import{Address as tt,NETWORK as nt,OutScript as Pe,RawTx as ot,SigHash as Me,TEST_NETWORK as it,Transaction as at}from"@scure/btc-signer";var Fe=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},st=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},ct=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,ut=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),W=e=>ut(e)?String(e).toLowerCase():String(e),le=(e,r)=>Array.isArray(r)&&r.some(t=>W(t)===W(e)),ft=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function dt(e){let r=Buffer.from(ot.encode(e)),t=Ce("sha256").update(r).digest();return Buffer.from(Ce("sha256").update(t).digest()).reverse().toString("hex")}function lt(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(dt(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!ft(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function pt(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(f=>!["network","psbt"].includes(f)))throw new Error("envelope: unexpected BTC artifact field");if(!le(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?nt:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?it:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let o;try{o=at.fromPSBT(st(t.psbt,"PSBT"))}catch(f){throw new Error(`envelope: invalid PSBT: ${f?.message||f}`)}if(o.inputsLength===0||o.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let i=tt(n);for(let f=0;f<o.inputsLength;f++){let d=o.getInput(f);for(let w of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(ct(d[w]))throw new Error("envelope: signed or finalized PSBT refused");if(d.sighashType!==void 0&&d.sighashType!==Me.DEFAULT&&d.sighashType!==Me.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let l=lt(d),m;try{let w=Pe.decode(l.script);if(!["wpkh"].includes(w.type))throw new Error("unsupported input");m=i.encode(w)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!le(m,r.owners)||W(m)!==W(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let a=new Set([e.owner,...r.changeAddresses||[]].map(f=>W(f))),c=0n,u=!1,s=[];for(let f=0;f<o.outputsLength;f++){let d=o.getOutput(f),l;try{l=i.encode(Pe.decode(d.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let m=W(l);if(s.push(`${l}:${d.amount}`),m===W(e.destination)){u=!0,c+=d.amount;continue}if(le(l,r.destinations)){c+=d.amount;continue}if(!a.has(m))throw new Error("policy: Bitcoin output destination not allowed")}if(!u)throw new Error("envelope: Bitcoin destination mismatch");let p;try{p=o.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(p<0n||p>Fe(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(c>Fe(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:c.toString(),notional:(c+p).toString(),fee:p.toString(),outputs:Object.freeze(s)})}function qe(e,r){let{unit:t,value:n,notional:o,fee:i}=pt(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}import{createHash as me}from"node:crypto";import{base58 as Je}from"@scure/base";import{getCompiledTransactionMessageDecoder as mt}from"@solana/transaction-messages";var he="11111111111111111111111111111111",ht="ComputeBudget111111111111111111111111111111",wt="So11111111111111111111111111111111111111112",je="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";var Ve="ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",gt=5000n,Et=2039280n,bt=37095705934669439343138083508754565189542113879843219016388785533085940283555n,b=57896044618658097711785492504343953926634992332820282019728792003956564819949n,Re=19681161376707505956807079304988542015446066515923890162744021073123829784752n,$e=e=>me("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),xt=new Map([[$e("route"),{name:"route",prefixBytes:0}],[$e("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]),v=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},St=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},B=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e)),N=e=>String(e||""),At=e=>Array.isArray(e.solMints)&&e.solMints.length?e.solMints:e.tokens,ne=e=>me("sha256").update(e).digest("hex");function te(e,r){try{let t=Buffer.from(Je.decode(String(e||"")));if(t.length!==32)throw new Error("wrong length");return t}catch{throw new Error(`envelope: invalid Solana ${r}`)}}function y(e){let r=e%b;return r>=0n?r:b+r}function O(e,r){let t=e;for(;r-- >0n;)t=t*t%b;return t}function yt(e){let t=e*e%b*e%b,n=O(t,2n)*t%b,o=O(n,1n)*e%b,i=O(o,5n)*o%b,a=O(i,10n)*i%b,c=O(a,20n)*a%b,u=O(c,40n)*c%b,s=O(u,80n)*u%b,p=O(s,80n)*u%b,f=O(p,10n)*i%b;return O(f,2n)*e%b}function vt(e,r){let t=y(r*r*r),n=y(t*t*r),o=yt(e*n),i=y(e*t*o),a=y(r*i*i),c=i,u=y(i*Re),s=a===e,p=a===y(-e),f=a===y(-e*Re);return s&&(i=c),(p||f)&&(i=u),(y(i)&1n)===1n&&(i=y(-i)),!s&&!p?null:i}function Tt(e){if(!e||e.length!==32)return!1;let r=0n;for(let o=31;o>=0;o--)r=(r<<8n)+BigInt(o===31?e[o]&127:e[o]);let t=y(r*r),n=vt(y(t-1n),y(bt*t+1n));return n===null?!1:!(n===0n&&(e[31]&128)!==0)}function It(e,r){let t=Buffer.concat([...e,te(r,"program id"),Buffer.from("ProgramDerivedAddress")]),n=me("sha256").update(t).digest();if(Tt(n))throw new Error("envelope: derived Solana program address is on curve");return Je.encode(n)}function we(e,r,t=je){let n=[te(e,"owner"),te(t,"token program"),te(r,"mint")];for(let o=255;o>=0;o--)try{return It([...n,Buffer.from([o])],Ve)}catch(i){if(!/on curve/.test(String(i?.message||i)))throw i}throw new Error("envelope: unable to derive associated token account")}function Nt(e,r){return(r.accountIndices||[]).map(t=>N(e.staticAccounts[t]))}function G(e){return Buffer.from(e.data||[])}function kt(e,r){return N(e.staticAccounts[r.programAddressIndex])}function He(e,r){return Number(r)<e.header.numSignerAccounts}function Ot(e,r){let t=e.header.numSignerAccounts,n=e.header.numReadonlySignerAccounts,o=e.header.numReadonlyNonSignerAccounts,i=e.staticAccounts.length;return Number(r)<t?Number(r)<t-n:Number(r)<i-o}function z(e){return e.accountIndices||[]}function pe(e,r){if(!Array.isArray(e)||!e.length)throw new Error(`policy: ${r} allowlist required`);return e.map(String)}function We(e,r){let t=z(r).map(n=>{let o=He(e,n)?"s":"n",i=Ot(e,n)?"w":"r";return`${n}:${N(e.staticAccounts[n])}:${o}:${i}`});return ne(Buffer.from(t.join(`
+`)))}function Ue(e,r,t){if(r+8>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readBigUInt64LE(r)}function Lt(e,r,t){if(r+2>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt16LE(r)}function Bt(e,r,t){if(r+4>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt32LE(r)}function _t(e,r,t){let n=t.maxJupiterRoutePlanSteps===void 0?1:Number(t.maxJupiterRoutePlanSteps);if(!Number.isSafeInteger(n)||n<1)throw new Error("policy: maxJupiterRoutePlanSteps must be a positive integer");if(r<1||r>n)throw new Error("policy: Jupiter route-plan step count exceeds reviewed cap");let o=Array.isArray(t.jupiterRouteVariants)?t.jupiterRouteVariants.map(Number):[];if(!o.length)throw new Error("policy: Jupiter route variant allowlist required");let i=t.jupiterRouteVariantPayloadBytes||{},a=0,c=0,u=[];for(let s=0;s<r;s++){if(a>=e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let p=e[a++];if(!o.includes(p))throw new Error("policy: Jupiter route variant not allowed");if(!Object.hasOwn(i,String(p)))throw new Error("policy: Jupiter route variant payload size required");let f=Number(i[String(p)]);if(!Number.isSafeInteger(f)||f<0||f>16)throw new Error("policy: Jupiter route variant payload size invalid");if(a+f+3>e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let d=e.subarray(a,a+f);a+=f;let l=d.toString("hex"),m=t.jupiterRouteVariantPayloads?.[String(p)];if(!Array.isArray(m)||!m.map(String).includes(l))throw new Error("policy: Jupiter route variant payload not allowed");let w=e[a++],h=e[a++],E=e[a++];if(w<1||w>100)throw new Error("envelope: Jupiter route-plan percent invalid");if(h!==s||E!==s+1)throw new Error("envelope: unsupported Jupiter route-plan token index");c+=w,u.push(Object.freeze({swapVariant:p,variantPayloadHex:l,percent:w,inputIndex:h,outputIndex:E}))}if(a!==e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");if(c!==100*r)throw new Error("envelope: Jupiter route-plan percent total mismatch");return Object.freeze(u)}function Ct(e,r){let t=G({data:e}),n=t.subarray(0,8).toString("hex"),o=xt.get(n);if(!o)throw new Error("envelope: unsupported Jupiter instruction discriminator");let i=19,a=o.prefixBytes===1?t[8]:null;if(o.prefixBytes===1&&t.length<9)throw new Error("envelope: malformed Jupiter shared route payload");let c=8+o.prefixBytes,u=c+4,s=t.length-i;if(s<=u)throw new Error("envelope: malformed Jupiter route payload");let p=Bt(t,c,"route plan length"),f=t.subarray(u,s),d=_t(f,p,r);return Object.freeze({instruction:o.name,routeId:a,routePlanSteps:p,routePlan:d,routePlanHash:ne(f),inAmount:Ue(t,s,"in_amount"),quotedOutAmount:Ue(t,s+8,"quoted_out_amount"),slippageBps:Lt(t,s+16,"slippage_bps"),platformFeeBps:t[s+18],instructionHash:ne(t)})}function Pt(e,r,t){let n=Nt(e,r),o=(i,a)=>{let c=n[i];if(!c)throw new Error(`envelope: Jupiter ${a} account missing`);return c};if(t.instruction==="route"){if(n.length<9)throw new Error("envelope: Jupiter route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),userTransferAuthority:o(1,"userTransferAuthority"),userSourceTokenAccount:o(2,"userSourceTokenAccount"),userDestinationTokenAccount:o(3,"userDestinationTokenAccount"),destinationTokenAccount:o(4,"destinationTokenAccount"),destinationMint:o(5,"destinationMint"),platformFeeAccount:o(6,"platformFeeAccount"),eventAuthority:o(7,"eventAuthority"),program:o(8,"program")}}if(t.instruction==="shared_accounts_route"){if(n.length<13)throw new Error("envelope: Jupiter shared route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),programAuthority:o(1,"programAuthority"),userTransferAuthority:o(2,"userTransferAuthority"),userSourceTokenAccount:o(3,"sourceTokenAccount"),programSourceTokenAccount:o(4,"programSourceTokenAccount"),programDestinationTokenAccount:o(5,"programDestinationTokenAccount"),userDestinationTokenAccount:o(6,"destinationTokenAccount"),sourceMint:o(7,"sourceMint"),destinationMint:o(8,"destinationMint"),platformFeeAccount:o(9,"platformFeeAccount"),token2022Program:o(10,"token2022Program"),eventAuthority:o(11,"eventAuthority"),program:o(12,"program")}}throw new Error("envelope: unsupported Jupiter account layout")}function De(e,r){return e&&e!==r?e:null}function T(e,r,t){let n=N(e.staticAccounts[r]);if(!n)throw new Error(`envelope: Jupiter ${t} missing`);return n}function Mt(e,r){let t=G(e);if(t.length===5&&t[0]===2){let n=t.readUInt32LE(1),o=r.maxComputeUnits===void 0?14e5:Number(r.maxComputeUnits);if(!Number.isSafeInteger(o)||o<=0)throw new Error("policy: maxComputeUnits must be positive");if(n>o)throw new Error("policy: Jupiter compute unit limit exceeds cap");return 0n}throw t.length===9&&t[0]===3?new Error("policy: Jupiter priority fee not allowed"):new Error("envelope: unsupported Jupiter compute-budget helper")}function Ft(e,r,t,n,o,i){let a=G(r);if(a.length!==1||a[0]!==1)throw new Error("envelope: unsupported Jupiter ATA helper");let c=z(r);if(c.length!==6)throw new Error("envelope: malformed Jupiter ATA helper");let u=T(e,c[0],"ATA payer"),s=T(e,c[1],"ATA account"),p=T(e,c[2],"ATA owner"),f=T(e,c[3],"ATA mint"),d=T(e,c[4],"ATA system program"),l=T(e,c[5],"ATA token program");if(u!==t.owner)throw new Error("envelope: Jupiter ATA payer must equal owner");if(p!==t.owner)throw new Error("envelope: Jupiter ATA owner must equal owner");if(d!==he)throw new Error("envelope: Jupiter ATA system program mismatch");if(l!==o)throw new Error("envelope: Jupiter ATA token program mismatch");if(f!==n.inputMint&&f!==n.outputMint)throw new Error("envelope: Jupiter ATA mint mismatch");if(s!==we(t.owner,f,o))throw new Error("envelope: Jupiter ATA account mismatch");return{ata:s,debit:i}}function qt(e,r,t,n,o){let i=z(r),a=G(r);if(i.length!==2||a.length!==12||a.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Jupiter system helper");let c=T(e,i[0],"wrap payer"),u=T(e,i[1],"wrap target"),s=a.readBigUInt64LE(4);if(c!==t.owner||u!==n)throw new Error("envelope: unsupported Jupiter wrap transfer");if(s!==o)throw new Error("envelope: Jupiter wrap transfer amount mismatch");return s}function Rt(e,r,t,n){let o=z(r),i=G(r);if(i.length!==1)throw new Error("envelope: unsupported Jupiter token helper");if(i[0]===17){if(o.length!==1||T(e,o[0],"syncNative account")!==n)throw new Error("envelope: Jupiter syncNative account mismatch");return{kind:"syncNative"}}if(i[0]===9){if(o.length!==3)throw new Error("envelope: malformed Jupiter closeAccount helper");let a=T(e,o[0],"closeAccount source"),c=T(e,o[1],"closeAccount destination"),u=T(e,o[2],"closeAccount authority");if(a!==n||c!==t.owner||u!==t.owner)throw new Error("envelope: Jupiter closeAccount must return to owner");return{kind:"closeAccount"}}throw new Error("envelope: unsupported Jupiter token helper")}function $t(e,r,t,n,o,i,a){let c=we(r.owner,r.artifact.inputMint,a);if(o.userSourceTokenAccount!==c)throw new Error("envelope: Jupiter source token account is not owner ATA");let u=v(t.jupiterAtaRentLamports,"jupiterAtaRentLamports");if(u<Et)throw new Error("policy: Jupiter ATA rent below the token-account rent-exempt minimum");let s=new Map,p=0n,f=!1,d=!1;for(let l of e.instructions){if(l===n)continue;let m=kt(e,l);if(m===ht)Mt(l,t);else if(m===Ve){let{ata:w,debit:h}=Ft(e,l,r,r.artifact,a,u);s.set(w,h)}else if(m===he)p+=qt(e,l,r,c,i);else if(m===a){let w=Rt(e,l,r,c);w.kind==="syncNative"&&(f=!0),w.kind==="closeAccount"&&(d=!0)}else throw new Error("envelope: unsupported Jupiter helper instruction")}if(p>0n&&(!f||!d))throw new Error("envelope: Jupiter native wrap helpers incomplete");if(p!==0n&&p!==i)throw new Error("envelope: Jupiter native wrap amount mismatch");return[...s.values()].reduce((l,m)=>l+m,0n)}function Wt(e){let r;try{r=mt().decode(St(e.messageBase64,"Solana message"))}catch(t){throw new Error(`envelope: invalid Solana message: ${t?.message||t}`)}if(r.version!=="legacy"&&Array.isArray(r.addressTableLookups)&&r.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");return r}function Ut(e,r,t){if(e.header.numSignerAccounts!==1||N(e.staticAccounts[0])!==r.owner||!B(r.owner,t.owners))throw new Error("envelope: Solana owner mismatch");if(!Array.isArray(e.instructions)||e.instructions.length===0)throw new Error("envelope: Solana instructions required");let n=[];for(let o of e.instructions){let i=N(e.staticAccounts[o.programAddressIndex]);if(!i||!B(i,t.programs))throw new Error("policy: Solana program not allowed");n.push(i)}return n}function Dt(e,r,t){let n=v(t.lamportsPerSignature,"lamportsPerSignature");if(n<gt)throw new Error("policy: Solana per-signature fee is below the network minimum");let o=t.maxLamportsPerSignature===void 0?n:v(t.maxLamportsPerSignature,"maxLamportsPerSignature");if(n>o)throw new Error("policy: Solana per-signature fee exceeds cap");let i=BigInt(e.header.numSignerAccounts),a=i*n,c=i*o;if(r.exactFeeLamports!==void 0){let s=v(r.exactFeeLamports,"exactFeeLamports");if(s<a)throw new Error("policy: Solana exact fee below the base signature fee");if(s>c)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let u=c;if(u>v(t.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return u}function Jt(e,r,t,n){let o=0n,i=!1;for(let a of e.instructions){if(N(e.staticAccounts[a.programAddressIndex])!==he)throw new Error("envelope: unsupported Solana program decoder");let u=a.accountIndices||[];if(u.length!==2||N(e.staticAccounts[u[0]])!==r.owner)throw new Error("envelope: Solana transfer owner mismatch");let s=N(e.staticAccounts[u[1]]);if(s!==r.destination||!B(s,t.destinations))throw new Error("envelope: Solana destination mismatch");let p=Buffer.from(a.data||[]);if(p.length!==12||p.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");o+=p.readBigUInt64LE(4),i=!0}if(!i)throw new Error("envelope: Solana destination mismatch");if(o>v(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:o,programs:n}}function jt(e,r,t,n){let o=r.artifact;if(o.provider!=="jupiter")throw new Error("envelope: Solana swap provider must be jupiter");if(o.inputMint!==wt)throw new Error("envelope: Jupiter local signer requires native SOL input");if(o.outputMint!==r.destination||!B(o.outputMint,t.destinations))throw new Error("envelope: Jupiter output mint destination mismatch");let i=At(t);if(!B(o.inputMint,i)||!B(o.outputMint,i))throw new Error("policy: Solana token not allowed");let a=v(o.inAmount,"inAmount"),c=v(o.outAmount,"outAmount"),u=v(o.otherAmountThreshold,"otherAmountThreshold");if(a<=0n||a>v(t.maxPerTradeLamports,"maxPerTradeLamports"))throw new Error("policy: Solana swap amount exceeds per-trade cap");if(a>v(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");if(c<=0n||u<=0n||u>c)throw new Error("envelope: Jupiter quote floor invalid");if(Number(o.slippageBps)!==Number(r.slippageBps))throw new Error("policy: Solana slippage mismatch");let s=N(o.jupiterProgram);if(!s||!B(s,t.programs)||!n.includes(s))throw new Error("policy: Jupiter program not allowed or absent");let p=e.instructions.filter(L=>N(e.staticAccounts[L.programAddressIndex])===s);if(p.length!==1)throw new Error("envelope: exactly one Jupiter swap instruction required");let f=p[0],d=Ct(f.data,t);if(d.instruction==="shared_accounts_route"){let L=Array.isArray(t.jupiterSharedRouteIds)?t.jupiterSharedRouteIds.map(Number):[];if(!L.length)throw new Error("policy: Jupiter shared route id allowlist required");if(!L.includes(Number(d.routeId)))throw new Error("policy: Jupiter shared route id not allowed")}else if(d.routeId!=null)throw new Error("envelope: unexpected Jupiter shared route id");if(!pe(t.jupiterRoutePlanHashes,"Jupiter route-plan hash").includes(d.routePlanHash))throw new Error("policy: Jupiter route-plan hash not allowed");if(d.inAmount!==a)throw new Error("envelope: Jupiter route in_amount mismatch");if(d.quotedOutAmount!==c)throw new Error("envelope: Jupiter route quoted_out_amount mismatch");if(d.slippageBps!==Number(o.slippageBps))throw new Error("envelope: Jupiter route slippage mismatch");let l=d.quotedOutAmount-d.quotedOutAmount*BigInt(d.slippageBps)/10000n;if(u!==l)throw new Error("envelope: Jupiter otherAmountThreshold does not match serialized min-out");if(d.platformFeeBps!==0)throw new Error("policy: Jupiter platform fee not allowed");let m=Pt(e,f,d),w=z(f),h=d.instruction==="shared_accounts_route"?2:1;if(!He(e,w[h]))throw new Error("envelope: Jupiter transfer authority must be signer");if(m.program!==s)throw new Error("envelope: Jupiter program account mismatch");if(m.userTransferAuthority!==r.owner)throw new Error("envelope: Jupiter transfer authority must equal owner");if(m.destinationMint!==o.outputMint)throw new Error("envelope: Jupiter destination mint mismatch");if(m.sourceMint!==void 0&&m.sourceMint!==o.inputMint)throw new Error("envelope: Jupiter source mint mismatch");let E=Array.isArray(t.tokenPrograms)&&t.tokenPrograms.length?t.tokenPrograms:[je];if(!B(m.tokenProgram,E))throw new Error("policy: Solana token program not allowed");let C=we(r.owner,o.outputMint,m.tokenProgram);if(m.userDestinationTokenAccount!==C)throw new Error("envelope: Jupiter destination token account is not owner ATA");let P=De(m.destinationTokenAccount,s);if(P&&P!==C)throw new Error("envelope: Jupiter optional destination account redirects proceeds");if(De(m.platformFeeAccount,s))throw new Error("policy: Jupiter platform fee account not allowed");if(!pe(t.jupiterRouteAccountHashes,"Jupiter route account hash").includes(We(e,f)))throw new Error("policy: Jupiter route account hash not allowed");let M=ne(Buffer.from([d.instruction,d.routeId??"",d.routePlanHash,We(e,f)].join(`
+`)));if(!pe(t.jupiterRouteReviewHashes,"Jupiter route review hash").includes(M))throw new Error("policy: Jupiter route review hash not allowed");let D=$t(e,r,t,f,m,a,m.tokenProgram),F=a+D;if(F>v(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:F,programs:n}}function Vt(e,r){if(e.action!=="transfer"&&e.action!=="swap")throw new Error("envelope: Solana decoder requires transfer or swap action");let t=e?.artifact,n=e.action==="transfer"?["cluster","messageBase64","exactFeeLamports"]:["cluster","provider","messageBase64","exactFeeLamports","inputMint","outputMint","inAmount","outAmount","otherAmountThreshold","slippageBps","jupiterProgram"];if(Object.keys(t||{}).some(u=>!n.includes(u)))throw new Error("envelope: unexpected Solana artifact field");if(!B(t.cluster,r.chains))throw new Error("policy: chain not allowed");let o=Wt(t),i=Ut(o,e,r),a=e.action==="transfer"?Jt(o,e,r,i):jt(o,e,r,i),c=Dt(o,t,r);return Object.freeze({unit:"lamports",value:a.value.toString(),notional:(a.value+c).toString(),fee:c.toString(),programs:Object.freeze(a.programs)})}function Ge(e,r){let{unit:t,value:n,notional:o,fee:i}=Vt(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}var Ht=new Set(["https://api.hyperliquid.xyz/exchange","https://api.hyperliquid-testnet.xyz/exchange"]),Gt=new Set(["perp-order","hip3-order","hip4-order","perp-bracket"]),zt=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-stake-delegate":"delegate"}),Kt=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-stake-delegate":"tokenDelegate"}),ze=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`hl: bounded ${r} required`);return e};function Ke(e){let r=String(e||"").replace(/\/$/,"");if(!Ht.has(r))throw new Error("hl: submitTo must be the official Hyperliquid exchange");return r}function ge(e){return/^#\d+$/.test(String(e||""))}function Yt(e,r){let t=String(e||""),n=Array.isArray(r.coins)?r.coins.map(String):[];if(ge(t)){if(r.hip4===!1)throw new Error("hl: HIP-4 outcome orders are disabled by policy");if(n.includes(t)||n.includes("#*")||n.includes("*")||r.hip4===!0||n.length===0)return!0;throw new Error("hl: outcome coin not allowed")}if(n.length&&!n.includes(t)&&!n.includes("*"))throw new Error("hl: coin not allowed");return!0}function Xt(e,r,t){let n=Array.isArray(t.hlMarkets)?t.hlMarkets:[];if(n.length){if(!n.some(a=>{if(typeof a=="string"){let[c,u]=String(a).split(":");return c===e&&Number(u)===r}return String(a?.coin)===e&&Number(a?.assetId)===r}))throw new Error("hl: coin/assetId pair not allowed");return!0}if(ge(e)){let i=Array.isArray(t.coins)?t.coins.map(String):[];if(i.includes("#*")||i.includes("*")||i.length===0||t.hip4===!0)return!0;throw new Error("hl: restricted coin policy requires hlMarkets pairs")}let o=Array.isArray(t.coins)?t.coins.map(String):[];if(o.length&&!o.includes("*"))throw new Error("hl: restricted coin policy requires hlMarkets pairs");return!0}function Ye(e,r){if(e?.surface!=="hl")throw new Error("hl: surface hl required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: structured artifact required");let n=ze(t.kind,"kind",48),o=zt[n];if(!o)throw new Error("hl: unsupported Hyperliquid kind");if(e.action!==o)throw new Error("hl: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="hyperliquid")throw new Error("hl: destination must be hyperliquid");if(!/^0x[0-9a-fA-F]{40}$/.test(String(e.owner||"")))throw new Error("hl: owner required");if(Ke(t.submitTo),Object.prototype.hasOwnProperty.call(t,"vaultAddress"))throw new Error("hl: vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t,"expiresAfter"))throw new Error("hl: expiresAfter is not public");let i=Number(t.nonce);if(!Number.isSafeInteger(i)||i<=0)throw new Error("hl: nonce must be a positive integer");if(!t.action||typeof t.action!="object")throw new Error("hl: signed action required");if(t.action.type!==Kt[n])throw new Error("hl: action type must match kind");if(Gt.has(n)||n==="perp-cancel"||n==="perp-leverage"||n==="perp-isolated-margin"){let a=ze(t.coin,"coin",64);Yt(a,r);let c=Number(t.assetId??t.assetIndex);if(!Number.isInteger(c)||c<0)throw new Error("hl: assetId required");if(Xt(a,c,r),n==="hip4-order"&&!ge(a))throw new Error("hl: HIP-4 orders must use an outcome coin");if(n==="perp-order"||n==="hip3-order"||n==="hip4-order"||n==="perp-bracket"){let u=Number(t.notionalUsd);if(!Number.isFinite(u)||u<=0)throw new Error("hl: notionalUsd required");if(u>Number(r.maxNotionalUsd))throw new Error("hl: notional exceeds cap");if(!["buy","sell"].includes(String(t.side)))throw new Error("hl: side must be buy or sell");if(t.action.type!=="order"||!Array.isArray(t.action.orders)||t.action.orders.length!==1)throw new Error("hl: exactly one signed order is required");let s=t.action.orders[0];if(Number(s.a)!==c)throw new Error("hl: signed asset must match assetId");if(!!s.b!=(t.side==="buy"))throw new Error("hl: signed side must match");if(String(s.s)!==String(t.size))throw new Error("hl: signed size must match");if(String(s.p)!==String(t.price))throw new Error("hl: signed price must match");let p=Number(s.s)*Number(s.p);if(!Number.isFinite(p)||Math.abs(p-u)>1e-6)throw new Error("hl: signed notional must match")}if(n==="perp-leverage"){let u=Number(t.leverage);if(!Number.isInteger(u)||u<1)throw new Error("hl: leverage must be a positive integer");if(u>Number(r.maxLeverage||50))throw new Error("hl: leverage exceeds cap")}if(n==="perp-cancel"){let u=t.action.cancels;if(!Array.isArray(u)||u.length!==1)throw new Error("hl: exactly one cancel is required");if(Number(u[0].a)!==c)throw new Error("hl: signed cancel asset must match assetId")}if(n==="perp-leverage"){if(Number(t.action.asset)!==c)throw new Error("hl: signed leverage asset must match assetId");if(Number(t.action.leverage)!==Number(t.leverage))throw new Error("hl: signed leverage must match")}if(n==="perp-isolated-margin"&&Number(t.action.asset)!==c)throw new Error("hl: signed margin asset must match assetId")}if(n.startsWith("hype-stake")&&r.maxHypeWei!=null&&BigInt(String(t.action.wei??t.caps?.amountHype??"0"))>BigInt(r.maxHypeWei))throw new Error("hl: stake amount exceeds cap");return Object.freeze({unit:"usd",value:String(t.notionalUsd??t.action.wei??0),notional:String(t.notionalUsd??0),fee:"0",kind:n,actionType:t.action.type,amount:String(t.action.wei??t.notionalUsd??0),coin:t.coin||null,submitTo:Ke(t.submitTo)})}var jo="0x"+"00".repeat(32);function Xe(e,r){let t=BigInt(String(e.makerAmount)),n=BigInt(String(e.takerAmount));if(t<=0n||n<=0n)throw new Error("poly: order amounts must be positive integer micro-units");return Number(r==="BUY"?t:n)/1e6}var Zt=new Set(["https://clob.polymarket.com/order"]),K=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Go=Object.freeze(K.map(e=>e[0])),Qt=new Set(["0xe111180000d2663c0091e4f400237545b87b996b","0xe2222d279d744050d28e00520010520000310f59"]),Ze=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`poly: bounded ${r} required`);return e};function Qe(e){let r=String(e||"").replace(/\/$/,"");if(!Zt.has(r))throw new Error("poly: submitTo must be the official Polymarket CLOB");return r}function er(e){let r=String(e||"").toLowerCase();if(!Qt.has(r))throw new Error("poly: verifyingContract must be an official CTF Exchange");return r}function rr(e,r){if(e?.surface!=="poly")throw new Error("poly: surface poly required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("poly: structured artifact required");let n=Ze(t.kind,"kind",48);if(n!=="poly-order")throw new Error("poly: unsupported Polymarket kind");if(e.action!=="order")throw new Error("poly: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="polymarket")throw new Error("poly: destination must be polymarket");if(Qe(t.submitTo),Number(t.chainId)!==137)throw new Error("poly: chainId must be Polygon 137");let o=t.domain;if(!o||typeof o!="object")throw new Error("poly: EIP-712 domain required");if(o.name!=="Polymarket CTF Exchange"||String(o.version)!=="2"||Number(o.chainId)!==137)throw new Error("poly: EIP-712 domain must be official CTF Exchange v2 on Polygon");if(er(o.verifyingContract),er(t.exchange),String(o.verifyingContract).toLowerCase()!==String(t.exchange).toLowerCase())throw new Error("poly: exchange/domain mismatch");let i=t.message||t.value;if(!i||typeof i!="object")throw new Error("poly: signed order message required");let a=t.types?.Order;if(!Array.isArray(a)||a.length!==K.length)throw new Error("poly: EIP-712 Order type must be official CLOB v2");for(let l=0;l<K.length;l+=1)if(a[l]?.name!==K[l][0]||a[l]?.type!==K[l][1])throw new Error("poly: EIP-712 Order type must be official CLOB v2");if((t.orderType||"GTC")!=="GTC")throw new Error("poly: only GTC is public");let c=String(e.owner||"").toLowerCase();if(String(i.maker||"").toLowerCase()!==c)throw new Error("poly: maker must equal owner");if(String(i.signer||"").toLowerCase()!==c)throw new Error("poly: signer must equal owner");if(Number(i.signatureType)!==0)throw new Error("poly: only EOA signatureType 0 is public");if(![0,1].includes(Number(i.side)))throw new Error("poly: side must be BUY or SELL");let u=Ze(String(t.tokenId||""),"tokenId",80);if(String(i.tokenId)!==u)throw new Error("poly: tokenId mismatch");let s=Array.isArray(r.polyTokens)?r.polyTokens.map(String):[];if(s.length&&!s.includes(u)&&!s.includes("*"))throw new Error("poly: tokenId not allowed");let p=Number(i.side)===0?"BUY":"SELL";if(t.side&&t.side!==p)throw new Error("poly: side mismatch");let f=Xe(i,p),d=Number(t.notionalUsdc);if(!Number.isFinite(d)||Math.abs(d-f)>1e-6)throw new Error("poly: notionalUsdc must match CLOB v2 amounts");if(f>Number(r.maxNotionalUsd??r.maxNotionalUsdc))throw new Error("poly: notional exceeds cap");return Object.freeze({unit:"usdc",value:String(f),notional:String(f),fee:"0",kind:n,tokenId:u,side:p,submitTo:Qe(t.submitTo)})}var en=new Set(["https://mainnet.zklighter.elliot.ai/api/v1/sendTx","https://testnet.zklighter.elliot.ai/api/v1/sendTx"]),Ee=14,tr=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`lighter: bounded ${r} required`);return e};function nr(e){let r=String(e||"").replace(/\/$/,"");if(!en.has(r))throw new Error("lighter: submitTo must be the official Lighter sendTx");return r}function or(e,r={}){if(e?.surface!=="lighter")throw new Error("lighter: surface lighter required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("lighter: structured artifact required");let n=tr(t.kind,"kind",48);if(n!=="lighter-order")throw new Error("lighter: unsupported Lighter kind");if(e.action!=="order")throw new Error("lighter: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="lighter")throw new Error("lighter: destination must be lighter");let o=nr(t.submitTo),i=Number(t.marketIndex);if(!Number.isInteger(i)||i<0)throw new Error("lighter: marketIndex required");let a=tr(t.symbol||t.coin,"symbol",32),c=Array.isArray(r.lighterMarkets)?r.lighterMarkets.map(String):[];if(c.length&&!c.includes(a)&&!c.includes(String(i))&&!c.includes("*"))throw new Error("lighter: market not allowed");if(!["buy","sell"].includes(String(t.side)))throw new Error("lighter: side must be buy or sell");let u=Number(t.baseAmount),s=Number(t.price);if(!(u>0)||!(s>0))throw new Error("lighter: baseAmount and price required");let p=Number(t.sizeDecimals??0),f=Number(t.priceDecimals??0);if(!Number.isInteger(p)||p<0||p>12)throw new Error("lighter: sizeDecimals required");if(!Number.isInteger(f)||f<0||f>12)throw new Error("lighter: priceDecimals required");let d=u/10**p*(s/10**f),l=Number(t.notionalUsd);if(!Number.isFinite(l)||l<=0)throw new Error("lighter: notionalUsd required");if(!Number.isFinite(d)||Math.abs(d-l)>.01)throw new Error("lighter: notionalUsd must match size and price");if(d>Number(r.maxNotionalUsd??Number.MAX_SAFE_INTEGER))throw new Error("lighter: notional exceeds cap");if(Number(t.txType??Ee)!==Ee)throw new Error("lighter: only official create-order txType is public");return Object.freeze({unit:"usd",value:String(l),notional:String(l),fee:"0",kind:n,symbol:a,marketIndex:i,side:t.side,baseAmount:u,price:s,submitTo:o,actionType:"create-order",amount:String(l)})}var sr=new Set(["evm","evm-swap","evm-bridge","evm-nft","btc","sol","hl","poly","lighter"]);var xe=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0,delegate:0}),rn=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),cr=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),tn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"}}),nn=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var oe=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},g=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},ir=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},on=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},x=(e,r,t)=>{if(!on(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},be=(e,r,t)=>{Array.isArray(r)&&r.length&&x(e,r,t)},_=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},U=e=>String(e||"0x").slice(0,10).toLowerCase(),ur=e=>g(e.gasLimit,"gasLimit")*g(e.maxFeePerGas??e.gasPrice,"feePerGas")+g(e.l1FeeWei??0,"l1FeeWei")+g(e.operatorFeeWei??0,"operatorFeeWei");function j(e,r,t,{dynamicTail:n=!1}={}){let o=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(o)||o.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&o.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:o,word:i=>o.slice(10+i*64,10+(i+1)*64)}}function S(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function k(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function an(e){if(U(e)!=="0x095ea7b3")return null;let r=j(e,2,"approval");return{kind:"approval",spender:S(r.word(0),"approval spender"),amount:k(r.word(1),"approval amount")}}function fr(e,r){let t=r==="router02-exact-input-single"?7:8,n=j(e,t,"Uniswap v3 exactInputSingle"),o=t===7?4:5;return{kind:"action",action:"swap",inputToken:S(n.word(0),"input token"),outputToken:S(n.word(1),"output token"),recipient:S(n.word(3),"recipient"),amountIn:k(n.word(o),"amountIn"),minimumOut:k(n.word(o+1),"amountOutMinimum")}}function sn(e){let r=j(e,12,"Across depositV3",{dynamicTail:!0}),t=k(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let o=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(o))throw new Error("envelope: malformed Across depositV3 message length");let i=Math.ceil(o/32)*64;if(r.hex.length!==n+64+i)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:S(r.word(0),"depositor"),recipient:S(r.word(1),"recipient"),inputToken:S(r.word(2),"input token"),outputToken:S(r.word(3),"output token"),amountIn:k(r.word(4),"inputAmount"),minimumOut:k(r.word(5),"outputAmount"),destinationChainId:k(r.word(6),"destinationChainId")}}function cn(e){let r=String(e||"").replace(/^0x/i,"").toLowerCase();if(r.length<86||r.length%2!==0)throw new Error("envelope: malformed Uniswap path");let t=`0x${r.slice(0,40)}`,n=`0x${r.slice(r.length-40)}`;if(!/^0x[0-9a-f]{40}$/.test(t)||!/^0x[0-9a-f]{40}$/.test(n))throw new Error("envelope: malformed Uniswap path tokens");return{inputToken:t,outputToken:n}}function ar(e,{hasDeadline:r}){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<74)throw new Error("envelope: malformed exactInput calldata");let n=[];for(let h=10;h+64<=t.length;h+=64)n.push(t.slice(h,h+64));let o=(h,E)=>{if(!n[h])throw new Error(`envelope: malformed ${E}`);return BigInt(`0x${n[h]}`)},i=Number(o(0,"exactInput struct offset"));if(i%32!==0)throw new Error("envelope: malformed exactInput struct offset");let a=i/32,c=Number(o(a,"path offset")),u=n[a+1],s=o(a+(r?3:2),"amountIn"),p=o(a+(r?4:3),"amountOutMinimum"),f=a+c/32;if(!Number.isInteger(f)||!n[f])throw new Error("envelope: malformed exactInput path");let d=Number(o(f,"path length")),l=t.slice(10+(f+1)*64,10+(f+1)*64+d*2),{inputToken:m,outputToken:w}=cn(`0x${l}`);return{kind:"action",action:"swap",inputToken:m,outputToken:w,recipient:S(u,"recipient"),amountIn:s,minimumOut:p}}function un(e){let r=j(e,8,"Aerodrome exactInputSingle");return{kind:"action",action:"swap",inputToken:S(r.word(0),"input token"),outputToken:S(r.word(1),"output token"),recipient:S(r.word(3),"recipient"),amountIn:k(r.word(5),"amountIn"),minimumOut:k(r.word(6),"amountOutMinimum")}}function fn(e){let r=String(e||"").toLowerCase();if(!r.startsWith("0x5ae401dc"))throw new Error("envelope: malformed Uniswap multicall");let t=[];for(let d=10;d+64<=r.length;d+=64)t.push(r.slice(d,d+64));let n=Number(BigInt(`0x${t[1]}`));if(n%32!==0)throw new Error("envelope: malformed multicall data offset");let o=n/32;if(Number(BigInt(`0x${t[o]}`))!==1)throw new Error("envelope: multicall must wrap exactly one swap");let a=Number(BigInt(`0x${t[o+1]}`)),c=o+1+a/32,u=Number(BigInt(`0x${t[c]}`)),p=`0x${r.slice(10+(c+1)*64,10+(c+1)*64+u*2)}`,f=U(p);if(f!=="0x04e45aaf"&&f!=="0x414bf389")throw new Error("envelope: multicall inner call must be exactInputSingle");return fr(p,f==="0x04e45aaf"?"router02-exact-input-single":"swap-router-exact-input-single")}function dn(e,r){let t=U(e),n=cr[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.layout==="router02-exact-input-single"||n.layout==="swap-router-exact-input-single")return{...fr(e,n.layout),selector:t,provider:n.provider};if(n.layout==="exact-input-deadline")return{...ar(e,{hasDeadline:!0}),selector:t,provider:n.provider};if(n.layout==="exact-input")return{...ar(e,{hasDeadline:!1}),selector:t,provider:n.provider};if(n.layout==="multicall-deadline")return{...fn(e),selector:t,provider:n.provider};if(n.layout==="aerodrome-exact-input-single")return{...un(e),selector:t,provider:n.provider};if(n.action==="bridge")return{...sn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function ln(e){let r=j(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",contract:S(r.word(0),"mint NFT contract"),feeRecipient:S(r.word(1),"mint fee recipient"),recipient:S(r.word(2),"mint recipient"),quantity:k(r.word(3),"mint quantity")}}function pn(e,r){let t=U(e);if(String(r).toLowerCase()==="nft-mint")return mn(e);let n=tn[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...ln(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function mn(e){let r=U(e);if(r==="0x40c10f19")throw new Error("envelope: ambiguous mint(address,uint256) calldata is not a built-in signer surface");let t=nn[r];if(!t)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(t.layout==="mint-no-args")return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:1n};if(t.layout==="mint-quantity"){let n=j(e,1,"generic NFT mint");return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:k(n.word(0),"mint quantity")}}throw new Error("envelope: unsupported generic NFT mint calldata")}function Y(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function dr(e,r,t,{nowMs:n=Date.now(),networkFees:o,requireNetworkFees:i=!1}={}){let a=_(e.owner,"owner"),c=e.artifact,u=Number(c?.chainId??Y(e)[0]?.chainId);if(!Number.isSafeInteger(u)||u<=0)throw new Error("envelope: explicit batch chainId required");if(x(u,r.chains,"chain"),c?.owner!==void 0&&_(c.owner,"batch owner")!==a)throw new Error("envelope: explicit batch owner mismatch");let s=Y(e);if(!s.length||s.length>8)throw new Error("envelope: bounded EVM transaction batch required");let p=0n,f=0n,d=0n;for(let l of s){if(!l||typeof l!="object"||Array.isArray(l))throw new Error("envelope: structured EVM transaction required");if(Number(l.chainId)!==u)throw new Error("envelope: every batch leg must use the same chain");if(_(l.from,"transaction owner")!==a)throw new Error("envelope: every batch leg must use the same owner");if(x(U(l.data),r.selectors,"selector"),p+=g(l.value??0,"value"),f+=g(l.gasLimit,"gasLimit"),d+=ur(l),q(u)&&(l.l1FeeWei===void 0||l.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(p>g(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(f>g(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(d>g(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:s,chainId:u,owner:a,totalValue:p,totalGas:f,totalFee:d}}function lr(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let o=String(e?.surface||"");if(o!=="evm-swap"&&o!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let i=oe(e.provider,"provider",64).toLowerCase();x(i,r.providers,"provider");let a=dr(e,r,o,{nowMs:t}),c=[],u=-1;for(let m=0;m<a.transactions.length;m++){let w=a.transactions[m],h=an(w.data),E;if(h){if(u!==-1)throw new Error("envelope: approval must be before action");if(g(w.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let M=_(w.to,"approval token");if(x(M,r.tokens,"token"),x(h.spender,r.spenders,"spender"),h.amount>g(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");E={...h,token:M,index:m}}else{if(u!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");x(w.to,r.destinations,"destination"),E={...dn(w.data,i),target:_(w.to,"action target"),index:m},u=m}let C=g(w.value??0,"value"),P=g(w.gasLimit,"gasLimit");c.push({...E,value:C,gas:P,fee:ur(w)})}if(u<0)throw new Error("envelope: reviewed swap/bridge action required");let s=c[u],p=o==="evm-swap"?"swap":"bridge";if(s.action!==p||e.action!==p)throw new Error("envelope: surface/action/calldata mismatch");if(_(e.destination,"destination")!==s.target)throw new Error("envelope: destination must equal decoded action target");if(s.recipient!==a.owner)throw new Error("envelope: decoded recipient must equal owner");if(s.depositor&&s.depositor!==a.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(x(s.inputToken,r.tokens,"input token"),x(s.outputToken,r.tokens,"output token"),s.amountIn<=0n||s.amountIn>g(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(s.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(ue(e.autoSlippage,{nowMs:t,chainId:a.chainId,venue:i,tx:a.transactions[u],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(s.minimumOut!==g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(s.action==="bridge"&&g(e.toChainId,"toChainId")!==s.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let f=c.filter(m=>m.kind==="approval");if(!new Set([...rn,...Array.isArray(r.nativeInputTokens)?r.nativeInputTokens.map(m=>String(m).toLowerCase()):[]]).has(s.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(f.length)throw new Error("envelope: native-value action must not include token approval");if(s.value!==s.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let l=Object.freeze({quoteAmountOut:g(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...a,decoded:c,action:s,provider:i,authenticatedQuote:l}}function pr(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint action");let n=oe(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();be(n,r.providers,"provider");let o=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;o?.oraclePrepared===!0&&Be(o,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"});let i=dr(e,r,"evm-nft",{nowMs:t});if(i.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let a=i.transactions[0],c=U(a.data);x(c,r.selectors,"selector"),x(a.to,r.destinations,"destination");let u=pn(a.data,n),s=_(e.contract??e.artifact?.contract,"NFT contract");if(be(s,r.nftContracts,"NFT contract"),(u.contract||_(a.to,"NFT contract"))!==s)throw new Error("envelope: mint calldata NFT contract mismatch");if(u.recipient&&u.recipient!==i.owner)throw new Error("envelope: mint calldata recipient mismatch");u.feeRecipient&&be(u.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let f=g(e.quantity??e.artifact?.quantity,"quantity");if(f<=0n||f>g(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(u.quantity!==f)throw new Error("envelope: mint calldata quantity mismatch");let d=g(e.totalWei??e.artifact?.totalWei,"totalWei");if(i.totalValue!==d)throw new Error("envelope: mint value does not match declared totalWei");if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&g(e.priceWei??e.artifact.priceWei,"priceWei")*f!==d)throw new Error("envelope: mint price does not match declared totalWei");if(d>g(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...i,provider:n,decoded:[{...u,target:_(a.to,"mint target"),value:i.totalValue,gas:i.totalGas,fee:i.totalFee}]}}function mr(e,{localsWaiver:r=!1}={}){if(!(e in xe))throw new Error("fee: unknown action");return r?0:xe[e]}function X(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:o,networkFees:i,requireNetworkFees:a=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let c=oe(e.surface,"surface",16);if(!sr.has(c))throw new Error("envelope: unsupported public surface");let u=oe(e.action,"action",32);x(c,r.surfaces,"surface"),x(u,r.actions,"action"),x(e.owner,r.owners,"owner"),x(e.destination,r.destinations,"destination");let s=ir(r.maxTtlMs,"maxTtlMs"),p=ir(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>s)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>p)throw new Error("policy: slippage exceeds cap");let f=e.artifact;if(!f||typeof f!="object"||Array.isArray(f))throw new Error("envelope: structured artifact required");if(c==="evm-swap"||c==="evm-bridge")lr(e,r,{nowMs:t,routeAttestationSecret:o});else if(c==="evm-nft")pr(e,r,{nowMs:t});else if(c==="evm"){if(!["transfer","approve"].includes(u))throw new Error("envelope: generic evm requires transfer or approve; use strict evm-nft for mint action");if(u==="swap"||u==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(String(f.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(f.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");re({...f,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:i,requireNetworkFees:a});let m=String(f.data||"0x").toLowerCase(),w=g(f.value,"EVM value");if(m==="0x"){if(w===0n)throw new Error("envelope: native EVM transfer value required")}else if($(m)){if(w!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else c==="btc"?qe(e,r):c==="sol"?Ge(e,r):c==="hl"?Ye(e,r):c==="poly"?rr(e,r):c==="lighter"&&or(e,r);let d=Number(e.fee?.oracleFeeBps)===0&&xe[u]!==0;if(e.fee?.waiver||d&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(d&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let l=mr(u,{localsWaiver:d});if(Number(e.fee?.oracleFeeBps)!==l)throw new Error("fee: final artifact fee mismatch");return!0}var ie=Object.freeze([...sr]),hn=Object.freeze({...cr});function wn(e={}){let r={};for(let t of ie){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(o,i)=>n.simulate(structuredClone(o),structuredClone(i)),sign:(o,i)=>n.sign(structuredClone(o),structuredClone(i)),broadcast:(o,i,a)=>n.broadcast(o,structuredClone(i),structuredClone(a))})}}return Object.freeze(r)}function gn(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as bi}from"@noble/curves/ed25519.js";import{base58 as En}from"@scure/base";import{RawTx as Ai,SigHash as yi,Transaction as bn}from"@scure/btc-signer";import{Transaction as xn,keccak256 as hr,verifyTypedData as Ti}from"ethers";import{encode as si}from"@msgpack/msgpack";import{keccak256 as ui,verifyTypedData as fi}from"ethers";var di=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),li=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var wr=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function Sn(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let o=e[n++];if(r|=(o&127)<<t,(o&128)===0)return{value:r,offset:n};t+=7}return null}function gr(e,r){try{if(String(e).startsWith("evm"))return xn.from(r).hash;if(e==="btc"){let t=wr(r);if(!t)return null;let n=bn.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=wr(r);if(!t)return null;let n=Sn(t);if(!n||n.value!==1)return null;let o=t.subarray(n.offset,n.offset+64);return o.length===64?En.encode(o):null}if(e==="hl"&&typeof r=="string"&&r.startsWith("0x"))return hr(r);if(e==="poly"&&typeof r=="string"&&r.startsWith("0x"))return hr(r)}catch{}return null}var Tn=e=>String(e||"").toLowerCase();function R(e){return An("sha256").update(JSON.stringify(e)).digest("hex")}function se(e,r,t={}){return re(e,r,t)}async function In(e,r={}){if(!q(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function br(e,r,t=!1){if(!q(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),o=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<o)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function Nn(e,r={}){return renderConfirmationArtifact(e,R(e),r)}var Z=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let o=yn(32).toString("hex");return this.#e.set(o,{digest:R(r),owner:Tn(t),expiresAtMs:this.now()+n}),o}consume(r,t){let n=this.#e.get(String(r));if(!n)throw new Error("confirmation: used or unknown nonce");if(n.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let o=Buffer.from(n.digest,"hex"),i=Buffer.from(R(t),"hex");if(!vn(o,i))throw new Error("confirmation: artifact mismatch");return this.#e.delete(String(r)),n}clear(){this.#e.clear()}};function kn(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if($(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function On(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function ae(e,r){let t=String(r||"");if(String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=Er.decode(t);return n.length===64&&Er.encode(n)===t}catch{return!1}return e==="hl"?/^0x[0-9a-fA-F]{64}$/.test(t):e==="poly"?/^0x[0-9a-fA-F]{64}$/.test(t):!1}function xr(e,r,t){return!ae(e,r)||!ae(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function Ln(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function Se({artifact:e,envelope:r,nonce:t,deps:n,policy:o,confirmation:i,consumeNonce:a,nowMs:c}){let u=Ln(o);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(u!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,c())!==!0)throw new Error("signer: autonomous trigger attestation required");return i}if(u!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(a)return n.confirmations.consume(t,e);if(!i||!Number.isFinite(i.expiresAtMs)||i.expiresAtMs<=c())throw new Error("confirmation: expired nonce");return i}function Bn(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function _n(e,r){return e&&Bn(e.surface)?Y(e):[r]}function Cn(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!xr(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function Pn(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:On(t,n)}}async function Ae(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=e?.version===1&&e?.surface?e:null,o=n?n.artifact:(()=>{let{tradeId:h,...E}=e||{};return E})(),i=_n(n,o),a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,c=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),u=await Se({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:null,consumeNonce:!0,nowMs:c}),s=R(e),p=(h={})=>{n?X(n,a,h):(se(o,a,{nowMs:h.nowMs,networkFees:h.networkFees,requireNetworkFees:h.requireNetworkFees}),kn(o))},f=async h=>{let E=n&&!String(n.surface||"").startsWith("evm")?void 0:await In(h,t);return{nowMs:c(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:E,requireNetworkFees:q(h?.chainId)}};p({nowMs:c(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let h of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[h]!="function")throw new Error(`signer: ${h} is required`);let d=t.reserveLedger(n||e,a);if(!d)throw new Error("signer: ledger reservation required");let l=!1,m=[];try{for(let h of i){if(typeof t.simulate!="function"||await t.simulate(h,n)!==!0)throw new Error("signer: strict affirmative simulation required");let E=await f(h);if(br(h,E.networkFees,E.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,u=await Se({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:u,consumeNonce:!1,nowMs:c}),p(E),t.validateReservation(d,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0),l=!0;let C=await t.sign(h,n);if(typeof t.verifySigned!="function"||await t.verifySigned(C,h,n)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");if(!t.isArmed())throw new Error("signer: disarmed before broadcast");if(R(e)!==s)throw new Error("signer: artifact mutated after signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,u=await Se({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:u,consumeNonce:!1,nowMs:c});let P=await f(h);br(h,P.networkFees,P.requireNetworkFees),p(P),t.validateReservation(d,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0);let M=await t.broadcast(C,h,n),D=M?.status,F=n?.surface||"evm",L=Cn(M,F),yr=gr(F,C);if(!xr(F,L,yr))throw new Error("signer: receipt transaction hash does not match signed bytes");if(D===0||D==="0x0")throw ae(F,L)?(t.settleFailedLedger(d),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(D!==1&&D!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!ae(F,L))throw new Error("signer: successful broadcast requires a valid transaction hash");m.push(Pn(M,L))}}catch(h){throw l||t.releaseLedger(d),h}if(t.commitLedger(d),m.length===1){let h={receipt:m[0]};return n?.surface==="evm-bridge"&&(h.originStatus="success",h.destinationStatus="unverified",h.destinationSuccess=!1,h.note="Origin-chain receipts do not prove destination-chain settlement."),h}let w={receipts:m,status:"success"};return n?.surface==="evm-bridge"&&(w.originStatus="success",w.destinationStatus="unverified",w.destinationSuccess=!1,w.note="Origin-chain receipts do not prove destination-chain settlement."),w}import Mn from"node:http";import{timingSafeEqual as Fn}from"node:crypto";var Sr=new Set(["127.0.0.1","::1","localhost"]),qn=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&Fn(t,n)},A=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function Rn(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var Ar=e=>new Promise((r,t)=>{let n=0,o=[],i=!1;e.on("data",a=>{n+=a.length,n>64*1024&&!i?(i=!0,t(new Error("request refused")),e.resume()):i||o.push(a)}),e.on("end",()=>{if(!i)try{r(JSON.parse(Buffer.concat(o).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)});function $n(e={}){let r=e.host||"127.0.0.1";if(!Sr.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let i of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[i]!="function")throw new Error(`signer: ${i} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new Z,n=e.origin||`http://${r}`;return Mn.createServer(async(i,a)=>{try{let c=String(i.headers.authorization||"").replace(/^Bearer /i,"");if(!qn(c,e.token))return A(a,401,{error:"unauthorized"});let u=Rn(i.headers.host);if(!Sr.has(u))return A(a,403,{error:"host refused"});if(i.headers.origin&&i.headers.origin!==n)return A(a,403,{error:"origin refused"});if(i.method==="GET"&&i.url==="/status"){let s=typeof e.readPolicy=="function"?e.readPolicy():e.policy,p=new Set(ie),f=Array.isArray(s?.surfaces)?s.surfaces.filter(d=>typeof d=="string"&&p.has(d)):[];return A(a,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:f,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(i.method==="POST"&&i.url==="/disarm")return e.disarm(),t.clear(),A(a,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(i.method))return A(a,405,{error:"request refused"});if(i.method==="POST"&&String(i.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return A(a,415,{error:"request refused"});if(i.method==="POST"&&i.url==="/confirm"){if(e.autonomous===!0)return A(a,403,{error:"autonomous signer does not issue human confirmation nonces"});let s=await Ar(i),p=R(s.artifact),f=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(f?.confirmationMode!=="exact-human")return A(a,403,{error:"exact-human policy required"});let d=typeof e.nowMs=="function"?e.nowMs():Date.now();if(s.artifact?.version===1&&s.artifact?.surface)X(s.artifact,f,{nowMs:d,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:l,...m}=s.artifact||{};se(m,f,{nowMs:d})}return typeof e.confirmArtifact!="function"?A(a,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(s.artifact,p,f)!==!0?A(a,400,{error:"exact human confirmation refused"}):A(a,200,{confirmationNonce:t.issue({artifact:s.artifact,owner:s.artifact?.owner??s.artifact?.from,ttlMs:s.ttlMs})})}if(i.method==="POST"&&i.url==="/execute"){let s=await Ar(i),p=await Ae(s.artifact,s.confirmationNonce,{...e,confirmations:t});return A(a,200,p)}return A(a,404,{error:"not found"})}catch(c){return e.onError?.(String(c?.message||c)),A(a,400,{error:"request refused"})}})}export{Z as ConfirmationStore,ie as PUBLIC_SIGNER_SURFACES,hn as REVIEWED_EVM_SELECTORS,R as artifactDigest,se as assertExactPolicy,$n as createSignerServer,wn as createSurfaceAdapters,Y as evmTransactions,Ae as executeConfirmedArtifact,Nn as inspectArtifactForConfirmation,lr as inspectEvmBatch,pr as inspectEvmNft,mr as publicFeeBps,gn as surfaceAdapterFor,X as validateSurfaceEnvelope};