@oracle-agent/oracle 0.28.13 → 0.28.15

package/dist/local-signer/index.mjs

@@ -1,3 +1,3 @@
-import{createHash as Wn,randomBytes as Un,timingSafeEqual as Hn}from"node:crypto";import{base58 as Bt}from"@scure/base";import{Interface as yt}from"ethers";import{Interface as Zt,MaxUint256 as er,isAddress as tr,keccak256 as Uo,toUtf8Bytes as Ho}from"ethers";import{Interface as Xt,isAddress as Ao}from"ethers";import{isAddress as go}from"ethers";import{createHash as Ut,createHmac as Ht,timingSafeEqual as jt}from"node:crypto";import{readFileSync as Rt}from"node:fs";import{homedir as qt}from"node:os";import{join as fe}from"node:path";function Dt(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=qt();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||fe(r,".config","oracle")).trim();return[e,fe(t,"exec.env")].filter(Boolean)}return[e,fe(r,".config","oracle","exec.env"),fe(r,".config","mad-desk","exec.env")].filter(Boolean)}function te(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let o of Dt())try{let i=Rt(o,"utf8"),a=i.match(new RegExp(`^${r}=(.*)$`,"m"))||i.match(new RegExp(`^${t}=(.*)$`,"m"));if(a&&(n=a[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function X(e,r,t="guard"){let n=Number(r);if(r==null||!Number.isFinite(n))throw new Error(`${t}: current time must be a finite number (got ${Wt(r)})`);let o=Number(e?.issuedAtMs),i=Number(e?.expiresAtMs);if(!Number.isFinite(i))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>i)throw new Error(`${t} expired at ${i}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(o))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(i<=o)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:o,expiresAtMs:i}}function Wt(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var $e=100;function be(e){return Array.isArray(e)?`[${e.map(be).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${be(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function Jt(e,{required:r=!1}={}){try{return te(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function Vt(e){let{signature:r,...t}=e;return t}function zt(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return Ut("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function Gt(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:jt(t,n)}function Kt(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let i=10;i+64<=r.length;i+=64)n.push(r.slice(i,i+64));let o=i=>n[i]==null?null:BigInt("0x"+n[i]);switch(t){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+4)}case"0xb858183f":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}function ye(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:o,tx:i,requireSigned:a=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let s=Jt(o,{required:a});if(a&&!s)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(s){let p=Ht("sha256",s).update(be(Vt(e))).digest("hex");if(!Gt(e.signature,p))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let c=Number(e.selectedBps),u=Number(e.capBps);if(!Number.isInteger(c)||c<0||c>$e)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(u)||u<0||u>$e||c>u)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{X({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(p){throw new Error(`${p.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let f=BigInt(e.quoteAmountOut??0),l=BigInt(e.minAmountOut??0);if(f<=0n||l<=0n)throw new Error("auto-slippage guard amounts must be positive");let d=f*BigInt(1e4-c),m=d/10000n;if(d%10000n!==0n&&(m+=1n),l<m)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(i?.data&&e.minAmountOut!=null){let p=Kt(i.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==zt(i.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(p!=null&&p!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${p}, not the guard floor ${e.minAmountOut}`)}else{if(p==null){let w=String(i.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${w}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(p!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${p}`)}}return!0}var ko=new Xt(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Qt,isAddress as Lo}from"ethers";var _o=new Qt(["function approve(address spender,uint256 amount) returns (bool)"]),Fo=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function b(e,r="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${r} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${r} must be a number or decimal string`);return e}throw new Error(`${r} must be a number or decimal string`)}function P(e,r="value"){if(typeof e!="string"||e==="")throw new Error(`${r} must be a string`);return e}function W(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=b(e,r);if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}function Se(e,r="amount"){let t=W(e,r);if(t<=0n)throw new Error(`${r} must be positive`);return t}function T(e,r,t="amount"){let n=b(e,t);if(!/^-?\d*(\.\d+)?$/.test(n)||n===""||n==="."||n==="-")throw new Error(`${t} must be a decimal number, got ${JSON.stringify(n)}`);let o=n.startsWith("-"),i=o?n.slice(1):n,[a="0",s=""]=i.split(".");if(s.length>r)throw new Error(`${t} has more than ${r} decimal places, which would lose precision`);let c=BigInt((a||"0")+s.padEnd(r,"0"));return o?-c:c}var Ko=new Zt(["function approve(address spender,uint256 amount) returns (bool)"]);function Me(e,r){let t=String(e||"").trim();if(!tr(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function rr(e,r="approval amount",{allowZero:t=!1}={}){let n=W(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=er)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var Re=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),nr=new Set(["0x39509351","0xf9255c1f"]);function z(e){let r=String(e||"").toLowerCase();return r.length<10?!1:Re.has(r.slice(0,10))}function qe(e){if(!z(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],o=u=>n[u]?"0x"+n[u].slice(24):null,i=u=>n[u]?BigInt("0x"+n[u]):null,a=null,s=null,c=null;switch(t){case"0x095ea7b3":case"0x39509351":a=o(0),s=i(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":c=o(0),a=o(1),s=i(2);break;case"0xd505accf":a=o(1),s=i(2);break;case"0x8fcbaf0c":{a=o(1),s=i(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":c=o(0),a=o(1),s=i(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(a==null||s==null)throw new Error("invalid approve calldata");return{spender:Me(a,"approval spender"),token:c==null?null:Me(c,"approval token"),amount:rr(s,"approval amount",{allowZero:!0}),selector:t,additive:nr.has(t)}}import{createHash as or,createHmac as Qo,timingSafeEqual as Zo}from"node:crypto";var ir=2,Ae=300*1e3,De=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function ar(e){let r=e==null||e===""?Ae:Number(e);return!Number.isFinite(r)||r<0?Ae:Math.min(r,De)}function ve(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(ve).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${ve(e[t])}`).join(",")}}`}function sr(e){let{prepareHash:r,prepareMac:t,note:n,...o}=e||{};return o}function cr(e){let r=sr(e);return or("sha256").update(ve(r)).digest("hex")}function We(e,{maxAgeMs:r=Ae,nowMs:t=Date.now(),providers:n=null,kinds:o=null,label:i="operator"}={}){if(!e||typeof e!="object")throw new Error(`${i}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${i}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==ir)throw new Error(`${i}: unsupported prepareVersion ${e.prepareVersion}`);let a=cr(e);if(String(e.prepareHash||"")!==a)throw new Error(`${i}: prepareHash mismatch \u2014 payload was altered after prepare`);let s=Number(e.preparedAt),c=Number(e.expiresAt),u=ar(r),f=t-s,l=c-s;if(!Number.isFinite(f)||!Number.isFinite(c)||!Number.isFinite(l)||f<0||l<=0||l>De||f>u||t>=c)throw new Error(`${i}: prepare envelope expired or clock-skewed (ageMs=${f}, max=${u})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${i}: provider ${e.provider} not allowed here`);if(o&&!new Set(o).has(e.kind))throw new Error(`${i}: kind ${e.kind} not allowed here`);return!0}var de=e=>String(e||"").toLowerCase(),ur=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","slippageBps","expiresAtMs"]),lr=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function H(e){try{return lr.has(BigInt(e))}catch{return!1}}var $=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Ue=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},re=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function pe(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:o=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(m=>!ur.has(m)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");let i=(m,p)=>{try{return BigInt(m)===BigInt(p)}catch{return String(m)===String(p)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(m=>i(m,e.chainId)))throw new Error("policy: chain not allowed");if(re(e.to,r.destinations,"destination",de),re(String(e.data||"0x").slice(0,10),r.selectors,"selector",m=>String(m).toLowerCase()),re(e.from,r.owners,"owner",de),z(e.data)){let m;try{m=qe(e.data)}catch(w){throw new Error(`policy: malformed approval calldata: ${w?.message||w}`)}re(m.spender,r.spenders,"spender",de),re(m.token||e.to,r.erc20Tokens,"ERC-20 token",de);let p=$(r.maxApproval,"maxApproval");if(BigInt(m.amount)>p)throw new Error("policy: approval exceeds cap");if(m.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if($(e.value,"value")>$(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let a=$(e.gasLimit,"gasLimit");if(a>$(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let s=e.maxFeePerGas??e.gasPrice,c=$(s,"feePerGas")*a,u=0n;try{if(H(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(u+=$(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(u+=$(e.operatorFeeWei,"operatorFeeWei")),H(e.chainId)&&(o||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let m=$(n.l1FeeWei,"estimated l1FeeWei")+$(n.operatorFeeWei,"estimated operatorFeeWei");if(u<m)throw new Error("policy: rollup fee attestation understates estimate")}if(c+u>$(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let l=Ue(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>l)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let d=Ue(r.maxTtlMs??12e4,"maxTtlMs");if(d<=0||e.expiresAtMs-t>d)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as He}from"node:crypto";import{Address as fr,NETWORK as dr,OutScript as je,RawTx as pr,SigHash as Je,TEST_NETWORK as mr,Transaction as hr}from"@scure/btc-signer";var Ve=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},wr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},gr=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,Er=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),G=e=>Er(e)?String(e).toLowerCase():String(e),Te=(e,r)=>Array.isArray(r)&&r.some(t=>G(t)===G(e)),xr=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function br(e){let r=Buffer.from(pr.encode(e)),t=He("sha256").update(r).digest();return Buffer.from(He("sha256").update(t).digest()).reverse().toString("hex")}function yr(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(br(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!xr(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function Sr(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(l=>!["network","psbt"].includes(l)))throw new Error("envelope: unexpected BTC artifact field");if(!Te(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?dr:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?mr:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let o;try{o=hr.fromPSBT(wr(t.psbt,"PSBT"))}catch(l){throw new Error(`envelope: invalid PSBT: ${l?.message||l}`)}if(o.inputsLength===0||o.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let i=fr(n);for(let l=0;l<o.inputsLength;l++){let d=o.getInput(l);for(let w of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(gr(d[w]))throw new Error("envelope: signed or finalized PSBT refused");if(d.sighashType!==void 0&&d.sighashType!==Je.DEFAULT&&d.sighashType!==Je.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let m=yr(d),p;try{let w=je.decode(m.script);if(!["wpkh"].includes(w.type))throw new Error("unsupported input");p=i.encode(w)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!Te(p,r.owners)||G(p)!==G(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let a=new Set([e.owner,...r.changeAddresses||[]].map(l=>G(l))),s=0n,c=!1,u=[];for(let l=0;l<o.outputsLength;l++){let d=o.getOutput(l),m;try{m=i.encode(je.decode(d.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let p=G(m);if(u.push(`${m}:${d.amount}`),p===G(e.destination)){c=!0,s+=d.amount;continue}if(Te(m,r.destinations)){s+=d.amount;continue}if(!a.has(p))throw new Error("policy: Bitcoin output destination not allowed")}if(!c)throw new Error("envelope: Bitcoin destination mismatch");let f;try{f=o.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(f<0n||f>Ve(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(s>Ve(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:s.toString(),notional:(s+f).toString(),fee:f.toString(),outputs:Object.freeze(u)})}function ze(e,r){let{unit:t,value:n,notional:o,fee:i}=Sr(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}import{createHash as ke}from"node:crypto";import{base58 as Ze}from"@scure/base";import{getCompiledTransactionMessageDecoder as Ar}from"@solana/transaction-messages";var Ne="11111111111111111111111111111111",vr="ComputeBudget111111111111111111111111111111",Tr="So11111111111111111111111111111111111111112",et="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";var tt="ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",Ir=5000n,kr=2039280n,Nr=37095705934669439343138083508754565189542113879843219016388785533085940283555n,I=57896044618658097711785492504343953926634992332820282019728792003956564819949n,Ge=19681161376707505956807079304988542015446066515923890162744021073123829784752n,Ke=e=>ke("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Or=new Map([[Ke("route"),{name:"route",prefixBytes:0}],[Ke("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]),_=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Lr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},U=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e)),M=e=>String(e||""),Cr=e=>Array.isArray(e.solMints)&&e.solMints.length?e.solMints:e.tokens,he=e=>ke("sha256").update(e).digest("hex");function me(e,r){try{let t=Buffer.from(Ze.decode(String(e||"")));if(t.length!==32)throw new Error("wrong length");return t}catch{throw new Error(`envelope: invalid Solana ${r}`)}}function B(e){let r=e%I;return r>=0n?r:I+r}function q(e,r){let t=e;for(;r-- >0n;)t=t*t%I;return t}function Pr(e){let t=e*e%I*e%I,n=q(t,2n)*t%I,o=q(n,1n)*e%I,i=q(o,5n)*o%I,a=q(i,10n)*i%I,s=q(a,20n)*a%I,c=q(s,40n)*s%I,u=q(c,80n)*c%I,f=q(u,80n)*c%I,l=q(f,10n)*i%I;return q(l,2n)*e%I}function Br(e,r){let t=B(r*r*r),n=B(t*t*r),o=Pr(e*n),i=B(e*t*o),a=B(r*i*i),s=i,c=B(i*Ge),u=a===e,f=a===B(-e),l=a===B(-e*Ge);return u&&(i=s),(f||l)&&(i=c),(B(i)&1n)===1n&&(i=B(-i)),!u&&!f?null:i}function _r(e){if(!e||e.length!==32)return!1;let r=0n;for(let o=31;o>=0;o--)r=(r<<8n)+BigInt(o===31?e[o]&127:e[o]);let t=B(r*r),n=Br(B(t-1n),B(Nr*t+1n));return n===null?!1:!(n===0n&&(e[31]&128)!==0)}function Fr(e,r){let t=Buffer.concat([...e,me(r,"program id"),Buffer.from("ProgramDerivedAddress")]),n=ke("sha256").update(t).digest();if(_r(n))throw new Error("envelope: derived Solana program address is on curve");return Ze.encode(n)}function Oe(e,r,t=et){let n=[me(e,"owner"),me(t,"token program"),me(r,"mint")];for(let o=255;o>=0;o--)try{return Fr([...n,Buffer.from([o])],tt)}catch(i){if(!/on curve/.test(String(i?.message||i)))throw i}throw new Error("envelope: unable to derive associated token account")}function $r(e,r){return(r.accountIndices||[]).map(t=>M(e.staticAccounts[t]))}function ne(e){return Buffer.from(e.data||[])}function Mr(e,r){return M(e.staticAccounts[r.programAddressIndex])}function rt(e,r){return Number(r)<e.header.numSignerAccounts}function Rr(e,r){let t=e.header.numSignerAccounts,n=e.header.numReadonlySignerAccounts,o=e.header.numReadonlyNonSignerAccounts,i=e.staticAccounts.length;return Number(r)<t?Number(r)<t-n:Number(r)<i-o}function oe(e){return e.accountIndices||[]}function Ie(e,r){if(!Array.isArray(e)||!e.length)throw new Error(`policy: ${r} allowlist required`);return e.map(String)}function Ye(e,r){let t=oe(r).map(n=>{let o=rt(e,n)?"s":"n",i=Rr(e,n)?"w":"r";return`${n}:${M(e.staticAccounts[n])}:${o}:${i}`});return he(Buffer.from(t.join(`
-`)))}function Xe(e,r,t){if(r+8>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readBigUInt64LE(r)}function qr(e,r,t){if(r+2>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt16LE(r)}function Dr(e,r,t){if(r+4>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt32LE(r)}function Wr(e,r,t){let n=t.maxJupiterRoutePlanSteps===void 0?1:Number(t.maxJupiterRoutePlanSteps);if(!Number.isSafeInteger(n)||n<1)throw new Error("policy: maxJupiterRoutePlanSteps must be a positive integer");if(r<1||r>n)throw new Error("policy: Jupiter route-plan step count exceeds reviewed cap");let o=Array.isArray(t.jupiterRouteVariants)?t.jupiterRouteVariants.map(Number):[];if(!o.length)throw new Error("policy: Jupiter route variant allowlist required");let i=t.jupiterRouteVariantPayloadBytes||{},a=0,s=0,c=[];for(let u=0;u<r;u++){if(a>=e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let f=e[a++];if(!o.includes(f))throw new Error("policy: Jupiter route variant not allowed");if(!Object.hasOwn(i,String(f)))throw new Error("policy: Jupiter route variant payload size required");let l=Number(i[String(f)]);if(!Number.isSafeInteger(l)||l<0||l>16)throw new Error("policy: Jupiter route variant payload size invalid");if(a+l+3>e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let d=e.subarray(a,a+l);a+=l;let m=d.toString("hex"),p=t.jupiterRouteVariantPayloads?.[String(f)];if(!Array.isArray(p)||!p.map(String).includes(m))throw new Error("policy: Jupiter route variant payload not allowed");let w=e[a++],h=e[a++],E=e[a++];if(w<1||w>100)throw new Error("envelope: Jupiter route-plan percent invalid");if(h!==u||E!==u+1)throw new Error("envelope: unsupported Jupiter route-plan token index");s+=w,c.push(Object.freeze({swapVariant:f,variantPayloadHex:m,percent:w,inputIndex:h,outputIndex:E}))}if(a!==e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");if(s!==100*r)throw new Error("envelope: Jupiter route-plan percent total mismatch");return Object.freeze(c)}function Ur(e,r){let t=ne({data:e}),n=t.subarray(0,8).toString("hex"),o=Or.get(n);if(!o)throw new Error("envelope: unsupported Jupiter instruction discriminator");let i=19,a=o.prefixBytes===1?t[8]:null;if(o.prefixBytes===1&&t.length<9)throw new Error("envelope: malformed Jupiter shared route payload");let s=8+o.prefixBytes,c=s+4,u=t.length-i;if(u<=c)throw new Error("envelope: malformed Jupiter route payload");let f=Dr(t,s,"route plan length"),l=t.subarray(c,u),d=Wr(l,f,r);return Object.freeze({instruction:o.name,routeId:a,routePlanSteps:f,routePlan:d,routePlanHash:he(l),inAmount:Xe(t,u,"in_amount"),quotedOutAmount:Xe(t,u+8,"quoted_out_amount"),slippageBps:qr(t,u+16,"slippage_bps"),platformFeeBps:t[u+18],instructionHash:he(t)})}function Hr(e,r,t){let n=$r(e,r),o=(i,a)=>{let s=n[i];if(!s)throw new Error(`envelope: Jupiter ${a} account missing`);return s};if(t.instruction==="route"){if(n.length<9)throw new Error("envelope: Jupiter route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),userTransferAuthority:o(1,"userTransferAuthority"),userSourceTokenAccount:o(2,"userSourceTokenAccount"),userDestinationTokenAccount:o(3,"userDestinationTokenAccount"),destinationTokenAccount:o(4,"destinationTokenAccount"),destinationMint:o(5,"destinationMint"),platformFeeAccount:o(6,"platformFeeAccount"),eventAuthority:o(7,"eventAuthority"),program:o(8,"program")}}if(t.instruction==="shared_accounts_route"){if(n.length<13)throw new Error("envelope: Jupiter shared route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),programAuthority:o(1,"programAuthority"),userTransferAuthority:o(2,"userTransferAuthority"),userSourceTokenAccount:o(3,"sourceTokenAccount"),programSourceTokenAccount:o(4,"programSourceTokenAccount"),programDestinationTokenAccount:o(5,"programDestinationTokenAccount"),userDestinationTokenAccount:o(6,"destinationTokenAccount"),sourceMint:o(7,"sourceMint"),destinationMint:o(8,"destinationMint"),platformFeeAccount:o(9,"platformFeeAccount"),token2022Program:o(10,"token2022Program"),eventAuthority:o(11,"eventAuthority"),program:o(12,"program")}}throw new Error("envelope: unsupported Jupiter account layout")}function Qe(e,r){return e&&e!==r?e:null}function F(e,r,t){let n=M(e.staticAccounts[r]);if(!n)throw new Error(`envelope: Jupiter ${t} missing`);return n}function jr(e,r){let t=ne(e);if(t.length===5&&t[0]===2){let n=t.readUInt32LE(1),o=r.maxComputeUnits===void 0?14e5:Number(r.maxComputeUnits);if(!Number.isSafeInteger(o)||o<=0)throw new Error("policy: maxComputeUnits must be positive");if(n>o)throw new Error("policy: Jupiter compute unit limit exceeds cap");return 0n}throw t.length===9&&t[0]===3?new Error("policy: Jupiter priority fee not allowed"):new Error("envelope: unsupported Jupiter compute-budget helper")}function Jr(e,r,t,n,o,i){let a=ne(r);if(a.length!==1||a[0]!==1)throw new Error("envelope: unsupported Jupiter ATA helper");let s=oe(r);if(s.length!==6)throw new Error("envelope: malformed Jupiter ATA helper");let c=F(e,s[0],"ATA payer"),u=F(e,s[1],"ATA account"),f=F(e,s[2],"ATA owner"),l=F(e,s[3],"ATA mint"),d=F(e,s[4],"ATA system program"),m=F(e,s[5],"ATA token program");if(c!==t.owner)throw new Error("envelope: Jupiter ATA payer must equal owner");if(f!==t.owner)throw new Error("envelope: Jupiter ATA owner must equal owner");if(d!==Ne)throw new Error("envelope: Jupiter ATA system program mismatch");if(m!==o)throw new Error("envelope: Jupiter ATA token program mismatch");if(l!==n.inputMint&&l!==n.outputMint)throw new Error("envelope: Jupiter ATA mint mismatch");if(u!==Oe(t.owner,l,o))throw new Error("envelope: Jupiter ATA account mismatch");return{ata:u,debit:i}}function Vr(e,r,t,n,o){let i=oe(r),a=ne(r);if(i.length!==2||a.length!==12||a.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Jupiter system helper");let s=F(e,i[0],"wrap payer"),c=F(e,i[1],"wrap target"),u=a.readBigUInt64LE(4);if(s!==t.owner||c!==n)throw new Error("envelope: unsupported Jupiter wrap transfer");if(u!==o)throw new Error("envelope: Jupiter wrap transfer amount mismatch");return u}function zr(e,r,t,n){let o=oe(r),i=ne(r);if(i.length!==1)throw new Error("envelope: unsupported Jupiter token helper");if(i[0]===17){if(o.length!==1||F(e,o[0],"syncNative account")!==n)throw new Error("envelope: Jupiter syncNative account mismatch");return{kind:"syncNative"}}if(i[0]===9){if(o.length!==3)throw new Error("envelope: malformed Jupiter closeAccount helper");let a=F(e,o[0],"closeAccount source"),s=F(e,o[1],"closeAccount destination"),c=F(e,o[2],"closeAccount authority");if(a!==n||s!==t.owner||c!==t.owner)throw new Error("envelope: Jupiter closeAccount must return to owner");return{kind:"closeAccount"}}throw new Error("envelope: unsupported Jupiter token helper")}function Gr(e,r,t,n,o,i,a){let s=Oe(r.owner,r.artifact.inputMint,a);if(o.userSourceTokenAccount!==s)throw new Error("envelope: Jupiter source token account is not owner ATA");let c=_(t.jupiterAtaRentLamports,"jupiterAtaRentLamports");if(c<kr)throw new Error("policy: Jupiter ATA rent below the token-account rent-exempt minimum");let u=new Map,f=0n,l=!1,d=!1;for(let m of e.instructions){if(m===n)continue;let p=Mr(e,m);if(p===vr)jr(m,t);else if(p===tt){let{ata:w,debit:h}=Jr(e,m,r,r.artifact,a,c);u.set(w,h)}else if(p===Ne)f+=Vr(e,m,r,s,i);else if(p===a){let w=zr(e,m,r,s);w.kind==="syncNative"&&(l=!0),w.kind==="closeAccount"&&(d=!0)}else throw new Error("envelope: unsupported Jupiter helper instruction")}if(f>0n&&(!l||!d))throw new Error("envelope: Jupiter native wrap helpers incomplete");if(f!==0n&&f!==i)throw new Error("envelope: Jupiter native wrap amount mismatch");return[...u.values()].reduce((m,p)=>m+p,0n)}function Kr(e){let r;try{r=Ar().decode(Lr(e.messageBase64,"Solana message"))}catch(t){throw new Error(`envelope: invalid Solana message: ${t?.message||t}`)}if(r.version!=="legacy"&&Array.isArray(r.addressTableLookups)&&r.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");return r}function Yr(e,r,t){if(e.header.numSignerAccounts!==1||M(e.staticAccounts[0])!==r.owner||!U(r.owner,t.owners))throw new Error("envelope: Solana owner mismatch");if(!Array.isArray(e.instructions)||e.instructions.length===0)throw new Error("envelope: Solana instructions required");let n=[];for(let o of e.instructions){let i=M(e.staticAccounts[o.programAddressIndex]);if(!i||!U(i,t.programs))throw new Error("policy: Solana program not allowed");n.push(i)}return n}function Xr(e,r,t){let n=_(t.lamportsPerSignature,"lamportsPerSignature");if(n<Ir)throw new Error("policy: Solana per-signature fee is below the network minimum");let o=t.maxLamportsPerSignature===void 0?n:_(t.maxLamportsPerSignature,"maxLamportsPerSignature");if(n>o)throw new Error("policy: Solana per-signature fee exceeds cap");let i=BigInt(e.header.numSignerAccounts),a=i*n,s=i*o;if(r.exactFeeLamports!==void 0){let u=_(r.exactFeeLamports,"exactFeeLamports");if(u<a)throw new Error("policy: Solana exact fee below the base signature fee");if(u>s)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let c=s;if(c>_(t.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return c}function Qr(e,r,t,n){let o=0n,i=!1;for(let a of e.instructions){if(M(e.staticAccounts[a.programAddressIndex])!==Ne)throw new Error("envelope: unsupported Solana program decoder");let c=a.accountIndices||[];if(c.length!==2||M(e.staticAccounts[c[0]])!==r.owner)throw new Error("envelope: Solana transfer owner mismatch");let u=M(e.staticAccounts[c[1]]);if(u!==r.destination||!U(u,t.destinations))throw new Error("envelope: Solana destination mismatch");let f=Buffer.from(a.data||[]);if(f.length!==12||f.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");o+=f.readBigUInt64LE(4),i=!0}if(!i)throw new Error("envelope: Solana destination mismatch");if(o>_(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:o,programs:n}}function Zr(e,r,t,n){let o=r.artifact;if(o.provider!=="jupiter")throw new Error("envelope: Solana swap provider must be jupiter");if(o.inputMint!==Tr)throw new Error("envelope: Jupiter local signer requires native SOL input");if(o.outputMint!==r.destination||!U(o.outputMint,t.destinations))throw new Error("envelope: Jupiter output mint destination mismatch");let i=Cr(t);if(!U(o.inputMint,i)||!U(o.outputMint,i))throw new Error("policy: Solana token not allowed");let a=_(o.inAmount,"inAmount"),s=_(o.outAmount,"outAmount"),c=_(o.otherAmountThreshold,"otherAmountThreshold");if(a<=0n||a>_(t.maxPerTradeLamports,"maxPerTradeLamports"))throw new Error("policy: Solana swap amount exceeds per-trade cap");if(a>_(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");if(s<=0n||c<=0n||c>s)throw new Error("envelope: Jupiter quote floor invalid");if(Number(o.slippageBps)!==Number(r.slippageBps))throw new Error("policy: Solana slippage mismatch");let u=M(o.jupiterProgram);if(!u||!U(u,t.programs)||!n.includes(u))throw new Error("policy: Jupiter program not allowed or absent");let f=e.instructions.filter(y=>M(e.staticAccounts[y.programAddressIndex])===u);if(f.length!==1)throw new Error("envelope: exactly one Jupiter swap instruction required");let l=f[0],d=Ur(l.data,t);if(d.instruction==="shared_accounts_route"){let y=Array.isArray(t.jupiterSharedRouteIds)?t.jupiterSharedRouteIds.map(Number):[];if(!y.length)throw new Error("policy: Jupiter shared route id allowlist required");if(!y.includes(Number(d.routeId)))throw new Error("policy: Jupiter shared route id not allowed")}else if(d.routeId!=null)throw new Error("envelope: unexpected Jupiter shared route id");if(!Ie(t.jupiterRoutePlanHashes,"Jupiter route-plan hash").includes(d.routePlanHash))throw new Error("policy: Jupiter route-plan hash not allowed");if(d.inAmount!==a)throw new Error("envelope: Jupiter route in_amount mismatch");if(d.quotedOutAmount!==s)throw new Error("envelope: Jupiter route quoted_out_amount mismatch");if(d.slippageBps!==Number(o.slippageBps))throw new Error("envelope: Jupiter route slippage mismatch");let m=d.quotedOutAmount-d.quotedOutAmount*BigInt(d.slippageBps)/10000n;if(c!==m)throw new Error("envelope: Jupiter otherAmountThreshold does not match serialized min-out");if(d.platformFeeBps!==0)throw new Error("policy: Jupiter platform fee not allowed");let p=Hr(e,l,d),w=oe(l),h=d.instruction==="shared_accounts_route"?2:1;if(!rt(e,w[h]))throw new Error("envelope: Jupiter transfer authority must be signer");if(p.program!==u)throw new Error("envelope: Jupiter program account mismatch");if(p.userTransferAuthority!==r.owner)throw new Error("envelope: Jupiter transfer authority must equal owner");if(p.destinationMint!==o.outputMint)throw new Error("envelope: Jupiter destination mint mismatch");if(p.sourceMint!==void 0&&p.sourceMint!==o.inputMint)throw new Error("envelope: Jupiter source mint mismatch");let E=Array.isArray(t.tokenPrograms)&&t.tokenPrograms.length?t.tokenPrograms:[et];if(!U(p.tokenProgram,E))throw new Error("policy: Solana token program not allowed");let O=Oe(r.owner,o.outputMint,p.tokenProgram);if(p.userDestinationTokenAccount!==O)throw new Error("envelope: Jupiter destination token account is not owner ATA");let S=Qe(p.destinationTokenAccount,u);if(S&&S!==O)throw new Error("envelope: Jupiter optional destination account redirects proceeds");if(Qe(p.platformFeeAccount,u))throw new Error("policy: Jupiter platform fee account not allowed");if(!Ie(t.jupiterRouteAccountHashes,"Jupiter route account hash").includes(Ye(e,l)))throw new Error("policy: Jupiter route account hash not allowed");let A=he(Buffer.from([d.instruction,d.routeId??"",d.routePlanHash,Ye(e,l)].join(`
-`)));if(!Ie(t.jupiterRouteReviewHashes,"Jupiter route review hash").includes(A))throw new Error("policy: Jupiter route review hash not allowed");let L=Gr(e,r,t,l,p,a,p.tokenProgram),C=a+L;if(C>_(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:C,programs:n}}function en(e,r){if(e.action!=="transfer"&&e.action!=="swap")throw new Error("envelope: Solana decoder requires transfer or swap action");let t=e?.artifact,n=e.action==="transfer"?["cluster","messageBase64","exactFeeLamports"]:["cluster","provider","messageBase64","exactFeeLamports","inputMint","outputMint","inAmount","outAmount","otherAmountThreshold","slippageBps","jupiterProgram"];if(Object.keys(t||{}).some(c=>!n.includes(c)))throw new Error("envelope: unexpected Solana artifact field");if(!U(t.cluster,r.chains))throw new Error("policy: chain not allowed");let o=Kr(t),i=Yr(o,e,r),a=e.action==="transfer"?Qr(o,e,r,i):Zr(o,e,r,i),s=Xr(o,t,r);return Object.freeze({unit:"lamports",value:a.value.toString(),notional:(a.value+s).toString(),fee:s.toString(),programs:Object.freeze(a.programs)})}function nt(e,r){let{unit:t,value:n,notional:o,fee:i}=en(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}var wi=64*1024;var tn=1e8;function Le(e){if(typeof e!="string"||!/^#(?:0|[1-9]\d*)$/.test(e))return null;let r=Number(e.slice(1));if(!Number.isSafeInteger(r)||r<0)return null;let t=r%10;if(t!==0&&t!==1)return null;let n=Math.floor(r/10),o=tn+r;return Number.isSafeInteger(o)?{encoding:r,outcome:n,side:t,coin:`#${r}`,assetId:o}:null}var rn=new Set(["https://api.hyperliquid.xyz/exchange","https://api.hyperliquid-testnet.xyz/exchange"]),nn=new Set(["perp-order","hip3-order","hip4-order","perp-bracket"]),on=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),an=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"}),j=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`hl: bounded ${r} required`);return e};function sn(e,r){let t=e.toString().padStart(r+1,"0");if(r===0)return t;let n=t.slice(0,-r),o=t.slice(-r).replace(/0+$/,"");return o?`${n}.${o}`:n}function ot(e,r){let t=b(e,`hl: ${r}`);if(!/^\d+(?:\.\d+)?$/.test(t))throw new Error(`hl: ${r} must be a positive decimal`);let[n,o=""]=t.split("."),i=BigInt(n+o);if(i<=0n)throw new Error(`hl: ${r} must be positive`);return{raw:i,decimals:o.length}}function D(e,r){if(e===null||typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`hl: ${r} must be finite JSON`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map(n=>D(n,r)).join(",")}]`;if(!e||typeof e!="object")throw new Error(`hl: ${r} must be structured JSON`);return`{${Object.keys(e).sort().map(n=>`${JSON.stringify(n)}:${D(e[n],r)}`).join(",")}}`}function cn(e){if(typeof e.orderType!="string"||!e.orderType)throw new Error("hl: order type must be a string");let r=e.orderType,t=e.orderWire;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: declared order wire required");if(r==="limit"){let i=t.limit?.tif;if(!["Gtc","Ioc","Alo"].includes(i)||D(t,"declared order type")!==D({limit:{tif:i}},"expected order type"))throw new Error("hl: limit order type must match its wire shape");return}if(r==="market"){if(D(t,"declared order type")!==D({limit:{tif:"Ioc"}},"expected order type"))throw new Error("hl: market order type must match its IOC wire shape");return}let n={stopMarket:{isMarket:!0,tpsl:"sl"},stopLimit:{isMarket:!1,tpsl:"sl"},takeProfitMarket:{isMarket:!0,tpsl:"tp"},takeProfitLimit:{isMarket:!1,tpsl:"tp"}}[r];if(!n)throw new Error("hl: unsupported declared order type");let o=t.trigger?.triggerPx;if(o==null||D(t,"declared order type")!==D({trigger:{isMarket:n.isMarket,triggerPx:o,tpsl:n.tpsl}},"expected order type"))throw new Error("hl: trigger order type must match its wire shape")}function un(e,r,t){let n=ot(e.s,"signed size"),o=ot(e.p,"signed price"),i=n.decimals+o.decimals,a=n.raw*o.raw,s=T(r.notionalUsd,i,"hl: notionalUsd");if(s<=0n||a!==s)throw new Error("hl: signed notional must match");let c=T(t.maxNotionalUsd,i,"hl: maxNotionalUsd");if(a>c)throw new Error("hl: notional exceeds cap")}function ln(e,r){let t=e.action.builder;if(t==null){if(e.builder!=null)throw new Error("hl: declared builder requires a signed builder");return}if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: signed order builder must be structured");let n=j(t.b,"order builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(n))throw new Error("hl: order builder address required");if(P(e.builder||"","hl: builder").toLowerCase()!==n)throw new Error("hl: signed order builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(s=>String(s).toLowerCase()):[]).includes(n))throw new Error("hl: order builder not allowed");let i=W(t.f,"hl: signed order builder fee");if(i<0n)throw new Error("hl: signed order builder fee must be non-negative");let a=T(r.maxBuilderFeeBps??0,1,"hl: maxBuilderFeeBps");if(i>a)throw new Error("hl: order builder fee exceeds cap")}function it(e,r,t){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: signed asset must match assetId");if(typeof e.b!="boolean"||e.b!==(r.side==="buy"))throw new Error("hl: signed side must match exactly");if(b(e.s,"hl: signed size")!==b(r.size,"hl: size"))throw new Error("hl: signed size must match");if(b(e.p,"hl: signed price")!==b(r.price,"hl: price"))throw new Error("hl: signed price must match");if(typeof r.reduceOnly!="boolean"||typeof e.r!="boolean"||e.r!==r.reduceOnly)throw new Error("hl: signed reduceOnly must match exactly");if(D(e.t,"signed order type")!==D(r.orderWire,"declared order type"))throw new Error("hl: signed order type must match declared order type");let n=Object.prototype.hasOwnProperty.call(e,"c");if(r.clientOrderId==null){if(n)throw new Error("hl: undeclared signed client order id")}else if(!n||typeof e.c!="string"||e.c!==r.clientOrderId)throw new Error("hl: signed client order id must match")}function at(e,r,t,n,o){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: bracket protection asset must match");if(typeof e.b!="boolean"||e.b===(r.side==="buy"))throw new Error("hl: bracket protection side must oppose entry");if(b(e.s,"hl: bracket protection size")!==b(r.size,"hl: size"))throw new Error("hl: bracket protection size must match");if(b(e.p,"hl: bracket protection price")!==b(n,"hl: protection price"))throw new Error("hl: bracket protection price must match");if(e.r!==!0)throw new Error("hl: bracket protection must be reduce-only");let i=e.t?.trigger;if(!i||i.isMarket!==!0||i.tpsl!==o)throw new Error("hl: bracket protection trigger must match");if(b(i.triggerPx,"hl: triggerPx")!==b(n,"hl: protection price"))throw new Error("hl: bracket protection trigger must match")}function fn(e){let r=String(e||"").replace(/\/$/,"");if(!rn.has(r))throw new Error("hl: submitTo must be the official Hyperliquid exchange");return r}function Ce(e){return Le(e)!=null}function dn(e,r){let t=String(e||""),n=Array.isArray(r.coins)?r.coins.map(String):[];if(Ce(t)){if(r.hip4!==!0)throw new Error("hl: HIP-4 outcome orders are disabled without explicit policy enablement");if(n.includes(t)||n.includes("#*")||n.includes("*")||n.length===0)return!0;throw new Error("hl: outcome coin not allowed")}if(n.length&&!n.includes(t)&&!n.includes("*"))throw new Error("hl: coin not allowed");return!0}function pn(e,r,t){let n=Array.isArray(t.hlMarkets)?t.hlMarkets:[];if(n.length){if(!n.some(a=>{if(typeof a=="string"){let[s,c]=String(a).split(":");return s===e&&Number(c)===r}return String(a?.coin)===e&&Number(a?.assetId)===r}))throw new Error("hl: coin/assetId pair not allowed");return!0}if(Ce(e)){let i=Array.isArray(t.coins)?t.coins.map(String):[];if(i.includes("#*")||i.includes("*")||i.length===0)return!0;throw new Error("hl: restricted coin policy requires hlMarkets pairs")}let o=Array.isArray(t.coins)?t.coins.map(String):[];if(o.length&&!o.includes("*"))throw new Error("hl: restricted coin policy requires hlMarkets pairs");return!0}function st(e,r){if(e?.surface!=="hl")throw new Error("hl: surface hl required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: structured artifact required");let n=j(t.kind,"kind",48),o=on[n];if(!o)throw new Error("hl: unsupported Hyperliquid kind");if(e.action!==o)throw new Error("hl: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="hyperliquid")throw new Error("hl: destination must be hyperliquid");if(!/^0x[0-9a-fA-F]{40}$/.test(String(e.owner||"")))throw new Error("hl: owner required");let i=fn(t.submitTo);if(Object.prototype.hasOwnProperty.call(t,"vaultAddress"))throw new Error("hl: vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t,"expiresAfter"))throw new Error("hl: expiresAfter is not public");let a=Number(t.nonce);if(!Number.isSafeInteger(a)||a<=0)throw new Error("hl: nonce must be a positive integer");if(!t.action||typeof t.action!="object")throw new Error("hl: signed action required");if(Object.prototype.hasOwnProperty.call(t.action,"vaultAddress"))throw new Error("hl: action vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t.action,"expiresAfter"))throw new Error("hl: action expiresAfter is not public");if(t.action.type!==an[n])throw new Error("hl: action type must match kind");let s=t.notionalUsd??0;if(nn.has(n)||n==="perp-cancel"||n==="perp-leverage"||n==="perp-isolated-margin"){let c=j(t.coin,"coin",64),u=t.assetId??t.assetIndex;if(!Number.isSafeInteger(u)||u<0)throw new Error("hl: assetId required");if(n==="hip4-order"||u>=1e8){let f=Le(c);if(!f||f.coin!==c)throw new Error("hl: HIP-4 actions must use a canonical outcome coin");if(f.assetId!==u)throw new Error("hl: HIP-4 coin must bind to its canonical assetId")}if(dn(c,r),pn(c,u,r),n==="hip4-order"&&!Ce(c))throw new Error("hl: HIP-4 orders must use an outcome coin");if(n==="perp-order"||n==="hip3-order"||n==="hip4-order"||n==="perp-bracket"){if(t.side!=="buy"&&t.side!=="sell")throw new Error("hl: side must be buy or sell");if(t.action.type!=="order"||!Array.isArray(t.action.orders))throw new Error("hl: signed orders are required");cn(t);let f=t.action.orders;if(n==="perp-bracket"){let l=t.takeProfitPx,d=t.stopLossPx,m=1+(l==null?0:1)+(d==null?0:1);if(m<2||f.length!==m||t.grouping!=="normalTpsl"||t.action.grouping!==t.grouping)throw new Error("hl: bracket must contain exactly the declared entry and protection legs");it(f[0],t,u);let p=1;l!=null&&at(f[p++],t,u,l,"tp"),d!=null&&at(f[p],t,u,d,"sl")}else{if(f.length!==1)throw new Error("hl: exactly one signed order is required");if(t.grouping!=="na"||t.action.grouping!==t.grouping)throw new Error("hl: signed grouping must match declared grouping");it(f[0],t,u)}un(f[0],t,r),ln(t,r),s=b(t.notionalUsd,"hl: notionalUsd")}if(n==="perp-leverage"){let f=t.leverage;if(!Number.isSafeInteger(f)||f<1)throw new Error("hl: leverage must be a positive integer");let l=r.maxLeverage==null?50:r.maxLeverage;if(typeof l!="number"||!Number.isSafeInteger(l)||l<1)throw new Error("hl: maxLeverage must be a positive integer");if(f>l)throw new Error("hl: leverage exceeds cap")}if(n==="perp-cancel"){let f=t.action.cancels;if(!Array.isArray(f)||f.length!==1)throw new Error("hl: exactly one cancel is required");if(!Number.isSafeInteger(f[0].a)||f[0].a!==u)throw new Error("hl: signed cancel asset must match assetId");if(!Number.isSafeInteger(t.orderId)||t.orderId<0)throw new Error("hl: declared order id required");if(!Number.isSafeInteger(f[0].o)||f[0].o!==t.orderId)throw new Error("hl: signed cancel order id must match")}if(n==="perp-leverage"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==u)throw new Error("hl: signed leverage asset must match assetId");if(!Number.isSafeInteger(t.action.leverage)||t.action.leverage!==t.leverage)throw new Error("hl: signed leverage must match");if(!["cross","isolated"].includes(t.marginMode))throw new Error("hl: declared margin mode required");let f=t.marginMode==="cross";if(typeof t.action.isCross!="boolean"||t.action.isCross!==f)throw new Error("hl: signed isCross must match declared margin mode")}if(n==="perp-isolated-margin"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==u)throw new Error("hl: signed margin asset must match assetId");let f=j(t.usd,"margin usd",64),l=T(f,6,"hl: margin usd");if(W(t.action.ntli,"hl: signed margin ntli")!==l)throw new Error("hl: signed margin amount must match usd");if(typeof t.isBuy!="boolean"||t.action.isBuy!==t.isBuy)throw new Error("hl: signed margin isBuy must match");let m=T(r.maxNotionalUsd,6,"hl: maxNotionalUsd"),p=l<0n?-l:l;if(p>m)throw new Error("hl: margin notional exceeds cap");s=sn(p,6)}}if(n==="builder-fee-approval"){let c=j(t.builder,"builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(c))throw new Error("hl: builder address required");if(j(t.action.builder,"signed builder",42).toLowerCase()!==c)throw new Error("hl: signed builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(p=>String(p).toLowerCase()):[]).includes(c))throw new Error("hl: builder not allowed");let f=j(t.maxFeeRate,"maxFeeRate",32);if(j(t.action.maxFeeRate,"signed maxFeeRate",32)!==f)throw new Error("hl: signed builder fee must match");if(!/^\d+(?:\.\d+)?%$/.test(f))throw new Error("hl: builder fee rate must be a percent");let l=T(f.slice(0,-1),12,"hl: builder fee percent"),d=T(r.maxBuilderFeeBps,12,"hl: maxBuilderFeeBps");if(d<0n||l*100n>d)throw new Error("hl: builder fee exceeds cap");if(Number(t.action.nonce)!==a)throw new Error("hl: signed builder nonce must match");let m=i.includes("testnet")?"Testnet":"Mainnet";if(t.hyperliquidChain!==m||t.action.hyperliquidChain!==t.hyperliquidChain)throw new Error("hl: signed Hyperliquid chain must match destination");if(t.signatureChainId!=="0x66eee"||t.action.signatureChainId!==t.signatureChainId)throw new Error("hl: signed signature chain id must match")}if(n.startsWith("hype-stake")||n==="hype-delegate"||n==="hype-undelegate"){if(n==="hype-delegate"||n==="hype-undelegate"){let c=n==="hype-undelegate";if(typeof t.action.isUndelegate!="boolean"||t.action.isUndelegate!==c)throw new Error("hl: signed isUndelegate must match delegate kind exactly")}if(r.maxHypeWei!=null&&BigInt(String(t.action.wei??t.caps?.amountHype??"0"))>BigInt(r.maxHypeWei))throw new Error("hl: stake amount exceeds cap")}return Object.freeze({unit:"usd",value:String(s??t.action.wei??0),notional:String(s??0),fee:"0",kind:n,actionType:t.action.type,amount:String(t.action.wei??s??0),coin:t.coin||null,submitTo:i})}var Oi="0x"+"00".repeat(32);function ct(e,r){let t=BigInt(b(e.makerAmount,"poly: makerAmount")),n=BigInt(b(e.takerAmount,"poly: takerAmount"));if(t<=0n||n<=0n)throw new Error("poly: order amounts must be positive integer micro-units");return Number(r==="BUY"?t:n)/1e6}var mn=new Set(["https://clob.polymarket.com/order"]),ie=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Bi=Object.freeze(ie.map(e=>e[0])),hn=new Set(["0xe111180000d2663c0091e4f400237545b87b996b","0xe2222d279d744050d28e00520010520000310f59"]),wn="0xe111180000d2663c0091e4f400237545b87b996b",gn="0xe2222d279d744050d28e00520010520000310f59",ut=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`poly: bounded ${r} required`);return e};function lt(e){let r=String(e||"").replace(/\/$/,"");if(!mn.has(r))throw new Error("poly: submitTo must be the official Polymarket CLOB");return r}function ft(e){let r=P(e,"poly: exchange").toLowerCase();if(!hn.has(r))throw new Error("poly: verifyingContract must be an official CTF Exchange");return r}function dt(e,r){if(e?.surface!=="poly")throw new Error("poly: surface poly required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("poly: structured artifact required");let n=ut(t.kind,"kind",48);if(n!=="poly-order")throw new Error("poly: unsupported Polymarket kind");if(e.action!=="order")throw new Error("poly: surface/action/kind mismatch");if(P(e.destination,"poly: destination").toLowerCase()!=="polymarket")throw new Error("poly: destination must be polymarket");if(lt(t.submitTo),t.chainId!==137)throw new Error("poly: chainId must be Polygon 137");let o=t.domain;if(!o||typeof o!="object")throw new Error("poly: EIP-712 domain required");if(o.name!=="Polymarket CTF Exchange"||o.version!=="2"||o.chainId!==137)throw new Error("poly: EIP-712 domain must be official CTF Exchange v2 on Polygon");if(ft(o.verifyingContract),ft(t.exchange),P(o.verifyingContract,"poly: verifyingContract").toLowerCase()!==P(t.exchange,"poly: exchange").toLowerCase())throw new Error("poly: exchange/domain mismatch");if(typeof t.negRisk!="boolean")throw new Error("poly: negRisk must be a boolean");let i=t.negRisk?gn:wn;if(P(t.exchange,"poly: exchange").toLowerCase()!==i)throw new Error("poly: negRisk/exchange mismatch");let a=t.message||t.value;if(!a||typeof a!="object")throw new Error("poly: signed order message required");let s=t.types?.Order;if(!Array.isArray(s)||s.length!==ie.length)throw new Error("poly: EIP-712 Order type must be official CLOB v2");for(let h=0;h<ie.length;h+=1)if(s[h]?.name!==ie[h][0]||s[h]?.type!==ie[h][1])throw new Error("poly: EIP-712 Order type must be official CLOB v2");if((t.orderType||"GTC")!=="GTC")throw new Error("poly: only GTC is public");let c=String(e.owner||"").toLowerCase();if(P(a.maker,"poly: maker").toLowerCase()!==c)throw new Error("poly: maker must equal owner");if(P(a.signer,"poly: signer").toLowerCase()!==c)throw new Error("poly: signer must equal owner");if(a.signatureType!==0)throw new Error("poly: only EOA signatureType 0 is public");if(typeof a.builder!="string"||a.builder.toLowerCase()!==`0x${"00".repeat(32)}`)throw new Error("poly: builder must be zero");if(a.side!==0&&a.side!==1)throw new Error("poly: side must be BUY or SELL");let u=ut(t.tokenId,"tokenId",80);if(P(a.tokenId,"poly: tokenId")!==u)throw new Error("poly: tokenId mismatch");let f=Array.isArray(r.polyTokens)?r.polyTokens.map(String):[];if(f.length&&!f.includes(u)&&!f.includes("*"))throw new Error("poly: tokenId not allowed");let l=Number(a.side)===0?"BUY":"SELL";if(t.side&&t.side!==l)throw new Error("poly: side mismatch");let d=ct(a,l),m=T(t.notionalUsdc,6,"poly: notionalUsdc"),p=T(d,6,"poly: computed notional");if(m!==p)throw new Error("poly: notionalUsdc must match CLOB v2 amounts");let w=r.maxNotionalUsd??r.maxNotionalUsdc;if(w!=null){let h=T(w,6,"poly: maxNotionalUsd");if(p>h)throw new Error("poly: notional exceeds cap")}return Object.freeze({unit:"usdc",value:String(d),notional:String(d),fee:"0",kind:n,tokenId:u,side:l,submitTo:lt(t.submitTo)})}var En=new Set(["https://mainnet.zklighter.elliot.ai/api/v1/sendTx","https://testnet.zklighter.elliot.ai/api/v1/sendTx"]),mt=14,pt=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`lighter: bounded ${r} required`);return e};function Q(e,r,t){if(!Number.isSafeInteger(e)||e!==r)throw new Error(`lighter: ${t} must be exact numeric ${r}`)}function ht(e){let r=String(e||"").replace(/\/$/,"");if(!En.has(r))throw new Error("lighter: submitTo must be the official Lighter sendTx");return r}function wt(e,r={}){if(e?.surface!=="lighter")throw new Error("lighter: surface lighter required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("lighter: structured artifact required");let n=pt(t.kind,"kind",48);if(n!=="lighter-order")throw new Error("lighter: unsupported Lighter kind");if(e.action!=="order")throw new Error("lighter: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="lighter")throw new Error("lighter: destination must be lighter");let o=ht(t.submitTo),i=t.marketIndex;if(typeof i!="number"||!Number.isSafeInteger(i)||i<0)throw new Error("lighter: marketIndex required");let a=Number(W(t.accountIndex,"lighter: accountIndex"));if(!Number.isSafeInteger(a)||a<0)throw new Error("lighter: accountIndex required");let s=Number(W(t.clientOrderIndex,"lighter: clientOrderIndex"));if(!Number.isSafeInteger(s)||s<0)throw new Error("lighter: clientOrderIndex required");Q(t.orderType,0,"orderType"),Q(t.timeInForce,1,"timeInForce"),Q(t.reduceOnly,0,"reduceOnly"),Q(t.triggerPrice,0,"triggerPrice"),Q(t.orderExpiry,-1,"orderExpiry");let c=pt(t.symbol||t.coin,"symbol",32),u=Array.isArray(r.lighterMarkets)?r.lighterMarkets.map(String):[];if(u.length&&!u.includes(c)&&!u.includes(String(i))&&!u.includes("*"))throw new Error("lighter: market not allowed");if(t.side!=="buy"&&t.side!=="sell")throw new Error("lighter: side must be buy or sell");let f=Se(t.baseAmount,"lighter: baseAmount"),l=Se(t.price,"lighter: price");if(f>BigInt(Number.MAX_SAFE_INTEGER)||l>BigInt(Number.MAX_SAFE_INTEGER))throw new Error("lighter: baseAmount and price must be safe integers");let d=Number(f),m=Number(l),p=Number(t.sizeDecimals??0),w=Number(t.priceDecimals??0);if(!Number.isInteger(p)||p<0||p>12)throw new Error("lighter: sizeDecimals required");if(!Number.isInteger(w)||w<0||w>12)throw new Error("lighter: priceDecimals required");let h=p+w,E=f*l,O=T(t.notionalUsd,h,"lighter: notionalUsd");if(O<=0n)throw new Error("lighter: notionalUsd required");if(E!==O)throw new Error("lighter: notionalUsd must match size and price");let S=T(r.maxNotionalUsd??Number.MAX_SAFE_INTEGER,h,"lighter: maxNotionalUsd");if(E>S)throw new Error("lighter: notional exceeds cap");let A=b(t.notionalUsd,"lighter: notionalUsd");return Q(t.txType,mt,"txType"),Object.freeze({unit:"usd",value:String(A),notional:String(A),fee:"0",kind:n,symbol:c,marketIndex:i,side:t.side,baseAmount:d,price:m,submitTo:o,actionType:"create-order",amount:String(A)})}var St=new Set(["evm","evm-swap","evm-bridge","evm-nft","btc","sol","hl","poly","lighter"]);var Pe=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0,delegate:0}),xn=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),At=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),bn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),we=new yt(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),gt=new yt(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),yn=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var se=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},g=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},Et=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},Sn=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},v=(e,r,t)=>{if(!Sn(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},ae=(e,r,t)=>{Array.isArray(r)&&r.length&&v(e,r,t)},x=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},K=e=>String(e||"0x").slice(0,10).toLowerCase(),vt=e=>g(e.gasLimit,"gasLimit")*g(e.maxFeePerGas??e.gasPrice,"feePerGas")+g(e.l1FeeWei??0,"l1FeeWei")+g(e.operatorFeeWei??0,"operatorFeeWei");function Z(e,r,t,{dynamicTail:n=!1}={}){let o=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(o)||o.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&o.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:o,word:i=>o.slice(10+i*64,10+(i+1)*64)}}function k(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function R(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function An(e){if(K(e)!=="0x095ea7b3")return null;let r=Z(e,2,"approval");return{kind:"approval",spender:k(r.word(0),"approval spender"),amount:R(r.word(1),"approval amount")}}function Tt(e,r){let t=r==="router02-exact-input-single"?7:8,n=Z(e,t,"Uniswap v3 exactInputSingle"),o=t===7?4:5;return{kind:"action",action:"swap",inputToken:k(n.word(0),"input token"),outputToken:k(n.word(1),"output token"),recipient:k(n.word(3),"recipient"),amountIn:R(n.word(o),"amountIn"),minimumOut:R(n.word(o+1),"amountOutMinimum")}}function vn(e){let r=Z(e,12,"Across depositV3",{dynamicTail:!0}),t=R(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let o=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(o))throw new Error("envelope: malformed Across depositV3 message length");let i=Math.ceil(o/32)*64;if(r.hex.length!==n+64+i)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:k(r.word(0),"depositor"),recipient:k(r.word(1),"recipient"),inputToken:k(r.word(2),"input token"),outputToken:k(r.word(3),"output token"),amountIn:R(r.word(4),"inputAmount"),minimumOut:R(r.word(5),"outputAmount"),destinationChainId:R(r.word(6),"destinationChainId")}}function Tn(e){let r=String(e||"").replace(/^0x/i,"").toLowerCase();if(r.length<86||r.length%2!==0)throw new Error("envelope: malformed Uniswap path");let t=`0x${r.slice(0,40)}`,n=`0x${r.slice(r.length-40)}`;if(!/^0x[0-9a-f]{40}$/.test(t)||!/^0x[0-9a-f]{40}$/.test(n))throw new Error("envelope: malformed Uniswap path tokens");return{inputToken:t,outputToken:n}}function xt(e,{hasDeadline:r}){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<74)throw new Error("envelope: malformed exactInput calldata");let n=[];for(let h=10;h+64<=t.length;h+=64)n.push(t.slice(h,h+64));let o=(h,E)=>{if(!n[h])throw new Error(`envelope: malformed ${E}`);return BigInt(`0x${n[h]}`)},i=Number(o(0,"exactInput struct offset"));if(i%32!==0)throw new Error("envelope: malformed exactInput struct offset");let a=i/32,s=Number(o(a,"path offset")),c=n[a+1],u=o(a+(r?3:2),"amountIn"),f=o(a+(r?4:3),"amountOutMinimum"),l=a+s/32;if(!Number.isInteger(l)||!n[l])throw new Error("envelope: malformed exactInput path");let d=Number(o(l,"path length")),m=t.slice(10+(l+1)*64,10+(l+1)*64+d*2),{inputToken:p,outputToken:w}=Tn(`0x${m}`);return{kind:"action",action:"swap",inputToken:p,outputToken:w,recipient:k(c,"recipient"),amountIn:u,minimumOut:f}}function In(e){let r=Z(e,8,"Aerodrome exactInputSingle");return{kind:"action",action:"swap",inputToken:k(r.word(0),"input token"),outputToken:k(r.word(1),"output token"),recipient:k(r.word(3),"recipient"),amountIn:R(r.word(5),"amountIn"),minimumOut:R(r.word(6),"amountOutMinimum")}}function kn(e){let r=String(e||"").toLowerCase();if(!r.startsWith("0x5ae401dc"))throw new Error("envelope: malformed Uniswap multicall");let t=[];for(let d=10;d+64<=r.length;d+=64)t.push(r.slice(d,d+64));let n=Number(BigInt(`0x${t[1]}`));if(n%32!==0)throw new Error("envelope: malformed multicall data offset");let o=n/32;if(Number(BigInt(`0x${t[o]}`))!==1)throw new Error("envelope: multicall must wrap exactly one swap");let a=Number(BigInt(`0x${t[o+1]}`)),s=o+1+a/32,c=Number(BigInt(`0x${t[s]}`)),f=`0x${r.slice(10+(s+1)*64,10+(s+1)*64+c*2)}`,l=K(f);if(l!=="0x04e45aaf"&&l!=="0x414bf389")throw new Error("envelope: multicall inner call must be exactInputSingle");return Tt(f,l==="0x04e45aaf"?"router02-exact-input-single":"swap-router-exact-input-single")}function Nn(e,r){let t=K(e),n=At[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.layout==="router02-exact-input-single"||n.layout==="swap-router-exact-input-single")return{...Tt(e,n.layout),selector:t,provider:n.provider};if(n.layout==="exact-input-deadline")return{...xt(e,{hasDeadline:!0}),selector:t,provider:n.provider};if(n.layout==="exact-input")return{...xt(e,{hasDeadline:!1}),selector:t,provider:n.provider};if(n.layout==="multicall-deadline")return{...kn(e),selector:t,provider:n.provider};if(n.layout==="aerodrome-exact-input-single")return{...In(e),selector:t,provider:n.provider};if(n.action==="bridge")return{...vn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function On(e){let r=Z(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",mintType:"public",contract:k(r.word(0),"mint NFT contract"),feeRecipient:k(r.word(1),"mint fee recipient"),recipient:k(r.word(2),"mint recipient"),quantity:R(r.word(3),"mint quantity")}}function Ln(e){let r;try{r=gt.decodeFunctionData("mintAllowList",e)}catch{throw new Error("envelope: malformed SeaDrop mintAllowList calldata")}let t=r[4],n=[...r[5]].map(String);if(n.length<1||n.length>64||n.some(c=>!/^0x[0-9a-fA-F]{64}$/.test(c)))throw new Error("envelope: bounded canonical SeaDrop allowlist proof required");if(gt.encodeFunctionData("mintAllowList",[r[0],r[1],r[2],r[3],t,n]).toLowerCase()!==String(e).toLowerCase())throw new Error("envelope: SeaDrop allowlist calldata must be canonical");let i=BigInt(t.startTime),a=BigInt(t.endTime);if(a<=i)throw new Error("envelope: SeaDrop allowlist stage time range is invalid");let s=BigInt(r[3]);if(BigInt(t.maxTotalMintableByWallet)<s)throw new Error("envelope: SeaDrop allowlist wallet cap is below quantity");return{kind:"mint",action:"mint",mintType:"allowlist",contract:x(r[0],"mint NFT contract"),feeRecipient:x(r[1],"mint fee recipient"),recipient:x(r[2],"mint recipient"),quantity:s,mintPrice:BigInt(t.mintPrice),startTime:i,endTime:a,dropStageIndex:BigInt(t.dropStageIndex),proof:n}}function Cn(e,r){let t=K(e);if(String(r).toLowerCase()==="nft-mint")return Pn(e);let n=bn[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...On(e),selector:t,provider:n.provider};if(n.layout==="seadrop-mint-allowlist")return{...Ln(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function Pn(e){let r=K(e);if(r==="0x40c10f19")throw new Error("envelope: ambiguous mint(address,uint256) calldata is not a built-in signer surface");let t=yn[r];if(!t)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(t.layout==="mint-no-args")return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:1n};if(t.layout==="mint-quantity"){let n=Z(e,1,"generic NFT mint");return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:R(n.word(0),"mint quantity")}}throw new Error("envelope: unsupported generic NFT mint calldata")}function ce(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function It(e,r,t,{nowMs:n=Date.now(),networkFees:o,requireNetworkFees:i=!1}={}){let a=x(e.owner,"owner"),s=e.artifact,c=Number(s?.chainId??ce(e)[0]?.chainId);if(!Number.isSafeInteger(c)||c<=0)throw new Error("envelope: explicit batch chainId required");if(v(c,r.chains,"chain"),s?.owner!==void 0&&x(s.owner,"batch owner")!==a)throw new Error("envelope: explicit batch owner mismatch");let u=ce(e);if(!u.length||u.length>8)throw new Error("envelope: bounded EVM transaction batch required");let f=0n,l=0n,d=0n;for(let m of u){if(!m||typeof m!="object"||Array.isArray(m))throw new Error("envelope: structured EVM transaction required");if(Number(m.chainId)!==c)throw new Error("envelope: every batch leg must use the same chain");if(x(m.from,"transaction owner")!==a)throw new Error("envelope: every batch leg must use the same owner");if(v(K(m.data),r.selectors,"selector"),f+=g(m.value??0,"value"),l+=g(m.gasLimit,"gasLimit"),d+=vt(m),H(c)&&(m.l1FeeWei===void 0||m.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(f>g(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(l>g(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(d>g(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:u,chainId:c,owner:a,totalValue:f,totalGas:l,totalFee:d}}function kt(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let o=String(e?.surface||"");if(o!=="evm-swap"&&o!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let i=se(e.provider,"provider",64).toLowerCase();v(i,r.providers,"provider");let a=It(e,r,o,{nowMs:t}),s=[],c=-1;for(let p=0;p<a.transactions.length;p++){let w=a.transactions[p],h=An(w.data),E;if(h){if(c!==-1)throw new Error("envelope: approval must be before action");if(g(w.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let A=x(w.to,"approval token");if(v(A,r.tokens,"token"),v(h.spender,r.spenders,"spender"),h.amount>g(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");E={...h,token:A,index:p}}else{if(c!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");v(w.to,r.destinations,"destination"),E={...Nn(w.data,i),target:x(w.to,"action target"),index:p},c=p}let O=g(w.value??0,"value"),S=g(w.gasLimit,"gasLimit");s.push({...E,value:O,gas:S,fee:vt(w)})}if(c<0)throw new Error("envelope: reviewed swap/bridge action required");let u=s[c],f=o==="evm-swap"?"swap":"bridge";if(u.action!==f||e.action!==f)throw new Error("envelope: surface/action/calldata mismatch");if(x(e.destination,"destination")!==u.target)throw new Error("envelope: destination must equal decoded action target");if(u.recipient!==a.owner)throw new Error("envelope: decoded recipient must equal owner");if(u.depositor&&u.depositor!==a.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(v(u.inputToken,r.tokens,"input token"),v(u.outputToken,r.tokens,"output token"),u.amountIn<=0n||u.amountIn>g(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(u.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(ye(e.autoSlippage,{nowMs:t,chainId:a.chainId,venue:i,tx:a.transactions[c],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(u.minimumOut!==g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(u.action==="bridge"&&g(e.toChainId,"toChainId")!==u.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let l=s.filter(p=>p.kind==="approval");if(!new Set([...xn,...Array.isArray(r.nativeInputTokens)?r.nativeInputTokens.map(p=>String(p).toLowerCase()):[]]).has(u.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(l.length)throw new Error("envelope: native-value action must not include token approval");if(u.value!==u.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let m=Object.freeze({quoteAmountOut:g(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...a,decoded:s,action:u,provider:i,authenticatedQuote:m}}function Bn(e,r,{nowMs:t}){let n=e.anvilAttestation,o=e.artifact?.anvilAttestation;if(!n||typeof n!="object"||Array.isArray(n))throw new Error("envelope: Anvil attestation is required");if(!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: Anvil attestation artifact mismatch");if(Number(n.version)!==1||n.source!=="anvil-snapshot-rpc-reviewed-runtime")throw new Error("envelope: unsupported Anvil attestation");if(Number(n.chainId)!==4663)throw new Error("envelope: Anvil attestation chain mismatch");let i=x(e.destination,"Anvil market"),a=x(e.contract,"NFT contract"),s=x(e.paymentToken,"payment token");if(x(n.market,"attested Anvil market")!==i)throw new Error("envelope: Anvil attestation market mismatch");if(x(n.collection,"attested NFT collection")!==a)throw new Error("envelope: Anvil attestation collection mismatch");if(x(n.paymentToken,"attested payment token")!==s)throw new Error("envelope: Anvil attestation payment token mismatch");let c=Number(e.paymentTokenDecimals??e.artifact?.paymentTokenDecimals);if(!Number.isSafeInteger(c)||c<0||c>255||Number(n.paymentTokenDecimals)!==c)throw new Error("envelope: Anvil payment token decimals mismatch");let u=g(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei").toString();if(g(n.nativeSwapFeeWei,"attested nativeSwapFeeWei").toString()!==u)throw new Error("envelope: Anvil attestation native swap fee mismatch");let f=Number(n.snapshotFetchedAtMs),l=Number(n.snapshotExpiresAtMs);if(!Number.isFinite(f)||!Number.isFinite(l)||f>t||l<=t||l<=f)throw new Error("envelope: Anvil snapshot attestation is stale");let d=g(n.blockNumber,"attested blockNumber");if(d<=0n||!/^0x[0-9a-f]{64}$/.test(String(n.blockHash||"").toLowerCase()))throw new Error("envelope: Anvil block attestation is invalid");let m=String(n.runtimeCodeHash||"").toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(m))throw new Error("envelope: Anvil runtime code hash is invalid");let p=Object.entries(r.anvilRuntimeCodeHashes||{}).find(([h])=>h.toLowerCase()===i)?.[1];if(!p||String(p).toLowerCase()!==m)throw new Error("policy: Anvil runtime code hash is not reviewed");let w=Object.entries(r.nftPaymentTokenCaps||{}).find(([h])=>h.toLowerCase()===s)?.[1];if(!w||Number(w.decimals)!==c)throw new Error("policy: Anvil payment token decimals are not reviewed");return Object.freeze({...n,market:i,collection:a,paymentToken:s,paymentTokenDecimals:c,runtimeCodeHash:m,blockNumber:d})}function bt(e,r){let t=e.artifact,n=e.anvilQuote,o=t?.anvilQuote;if(!n||typeof n!="object"||Array.isArray(n)||!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: exact Anvil quote artifact mismatch");if(e.preconditions?.exactQuoteConfirmed!==!0)throw new Error("envelope: exact Anvil quote confirmation required");let i=r==="buy"?[[n.totalCostRaw,"anvilQuote.totalCostRaw"],[e.maxPaymentTokenAmountRaw,"maxPaymentTokenAmountRaw"],[t?.maxPaymentTokenAmountRaw,"artifact maxPaymentTokenAmountRaw"],[e.exactQuoteTotalCostRaw,"exactQuoteTotalCostRaw"],[t?.exactQuoteTotalCostRaw,"artifact exactQuoteTotalCostRaw"],[e.preconditions?.confirmedTotalCostRaw,"confirmedTotalCostRaw"]]:[[n.netPayoutRaw,"anvilQuote.netPayoutRaw"],[e.minPayoutRaw,"minPayoutRaw"],[t?.minPayoutRaw,"artifact minPayoutRaw"],[e.exactQuoteNetPayoutRaw,"exactQuoteNetPayoutRaw"],[t?.exactQuoteNetPayoutRaw,"artifact exactQuoteNetPayoutRaw"],[e.preconditions?.confirmedNetPayoutRaw,"confirmedNetPayoutRaw"]],a=g(i[0][0],i[0][1]);for(let[s,c]of i.slice(1))if(g(s,c)!==a)throw new Error(`envelope: Anvil ${r} exact settlement limit mismatch`);return a}function Nt(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint or NFT action");let n=se(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();ae(n,r.providers,"provider");let o=It(e,r,"evm-nft",{nowMs:t});if(n==="anvil-nft"){if(e.action!=="nft")throw new Error("envelope: Anvil requires NFT action");if(o.chainId!==4663)throw new Error("envelope: Anvil requires chain 4663");if(r.confirmationMode!=="exact-human")throw new Error("policy: Anvil requires exact-human confirmation");if(o.transactions.length!==1)throw new Error("envelope: Anvil requires one atomic action with pre-existing approval");if(Number(e.slippageBps)!==0)throw new Error("envelope: Anvil exact limit requires zero slippageBps");let[m]=o.transactions,p=x(e.destination,"Anvil market");if(x(m.to,"Anvil action target")!==p)throw new Error("envelope: Anvil action target mismatch");v(p,r.destinations,"destination");let w=x(e.contract??e.artifact?.contract,"NFT contract");if(ae(w,r.nftContracts,"NFT contract"),x(e.marketCollection??e.artifact?.marketCollection,"Anvil market collection")!==w)throw new Error("envelope: Anvil market collection mismatch");let E=x(e.paymentToken??e.artifact?.paymentToken,"payment token");ae(E,r.erc20Tokens,"ERC20 token");let O=Bn(e,r,{nowMs:t}),S=g(e.tokenId??e.artifact?.tokenId,"tokenId"),A=g(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei");if(o.totalValue!==A||g(m.value??0,"Anvil action value")!==A)throw new Error("envelope: Anvil native swap fee mismatch");if(A>g(r.maxNativeSwapFeeWei,"maxNativeSwapFeeWei"))throw new Error("policy: Anvil native swap fee exceeds cap");let L=se(e.nftAction,"nftAction",8).toLowerCase(),C;if(L==="buy"){let y=bt(e,L),Y=Object.entries(r.nftPaymentTokenCaps||{}).find(([Fe])=>Fe.toLowerCase()===E)?.[1];if(!Y)throw new Error("policy: Anvil payment-token cap required");if(y>g(Y.maxPerTradeRaw,"maxPerTradeRaw"))throw new Error("policy: Anvil payment amount exceeds cap");if(e.preconditions?.allowanceVerified!==!0||g(e.preconditions?.allowanceRaw,"allowanceRaw")<y)throw new Error("envelope: Anvil pre-existing allowance proof required");let V=we.decodeFunctionData("buySpecificNFT",m.data);if(we.encodeFunctionData("buySpecificNFT",[V[0],V[1]]).toLowerCase()!==String(m.data).toLowerCase())throw new Error("envelope: non-canonical Anvil buy calldata");if(BigInt(V[0])!==S)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(V[1])!==y)throw new Error("envelope: Anvil maxCost mismatch");C={kind:"nft",action:"buy",tokenId:S,maxPaymentTokenAmountRaw:y,target:p}}else if(L==="sell"){let y=e.preconditions||{},Y=x(y.approvedAddress,"NFT approval address");if(y.nftApprovalVerified!==!0||Y!==p&&y.approvedForAll!==!0)throw new Error("envelope: Anvil pre-existing NFT approval proof required");let V=bt(e,L),ee=we.decodeFunctionData("sellNFT",m.data);if(we.encodeFunctionData("sellNFT",[ee[0],ee[1]]).toLowerCase()!==String(m.data).toLowerCase())throw new Error("envelope: non-canonical Anvil sell calldata");if(BigInt(ee[0])!==S)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(ee[1])!==V)throw new Error("envelope: Anvil minPayout mismatch");C={kind:"nft",action:"sell",tokenId:S,minPayoutRaw:V,target:p}}else throw new Error("envelope: unsupported Anvil NFT action");return{...o,provider:n,nftAction:L,tokenId:S,paymentToken:E,paymentTokenDecimals:O.paymentTokenDecimals,anvilAttestation:O,decoded:[C]}}let i=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;if(i?.oraclePrepared===!0&&We(i,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"}),o.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let a=o.transactions[0],s=K(a.data);v(s,r.selectors,"selector"),v(a.to,r.destinations,"destination");let c=Cn(a.data,n),u=x(e.contract??e.artifact?.contract,"NFT contract");if(ae(u,r.nftContracts,"NFT contract"),(c.contract||x(a.to,"NFT contract"))!==u)throw new Error("envelope: mint calldata NFT contract mismatch");if(c.recipient&&c.recipient!==o.owner)throw new Error("envelope: mint calldata recipient mismatch");c.feeRecipient&&ae(c.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let l=g(e.quantity??e.artifact?.quantity,"quantity");if(l<=0n||l>g(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(c.quantity!==l)throw new Error("envelope: mint calldata quantity mismatch");let d=g(e.totalWei??e.artifact?.totalWei,"totalWei");if(o.totalValue!==d)throw new Error("envelope: mint value does not match declared totalWei");if(c.mintType==="allowlist"){let m=BigInt(Math.floor(t/1e3));if(c.startTime>m||c.endTime<=m)throw new Error("policy: SeaDrop allowlist stage is not open");if(c.mintPrice*l!==d)throw new Error("envelope: SeaDrop allowlist price does not match declared totalWei")}if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&g(e.priceWei??e.artifact.priceWei,"priceWei")*l!==d)throw new Error("envelope: mint price does not match declared totalWei");if(d>g(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...o,provider:n,decoded:[{...c,target:x(a.to,"mint target"),value:o.totalValue,gas:o.totalGas,fee:o.totalFee}]}}function Ot(e,{localsWaiver:r=!1}={}){if(!(e in Pe))throw new Error("fee: unknown action");return r?0:Pe[e]}function ue(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:o,networkFees:i,requireNetworkFees:a=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let s=se(e.surface,"surface",16);if(!St.has(s))throw new Error("envelope: unsupported public surface");let c=se(e.action,"action",32);v(s,r.surfaces,"surface"),v(c,r.actions,"action"),v(e.owner,r.owners,"owner"),v(e.destination,r.destinations,"destination");let u=Et(r.maxTtlMs,"maxTtlMs"),f=Et(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>u)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>f)throw new Error("policy: slippage exceeds cap");let l=e.artifact;if(!l||typeof l!="object"||Array.isArray(l))throw new Error("envelope: structured artifact required");if(s==="evm-swap"||s==="evm-bridge")kt(e,r,{nowMs:t,routeAttestationSecret:o});else if(s==="evm-nft")Nt(e,r,{nowMs:t});else if(s==="evm"){if(!["transfer","approve"].includes(c))throw new Error("envelope: generic evm requires transfer or approve; use strict evm-nft for mint action");if(c==="swap"||c==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(String(l.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(l.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");pe({...l,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:i,requireNetworkFees:a});let p=String(l.data||"0x").toLowerCase(),w=g(l.value,"EVM value");if(p==="0x"){if(w===0n)throw new Error("envelope: native EVM transfer value required")}else if(z(p)){if(w!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else s==="btc"?ze(e,r):s==="sol"?nt(e,r):s==="hl"?st(e,r):s==="poly"?dt(e,r):s==="lighter"&&wt(e,r);let d=Number(e.fee?.oracleFeeBps)===0&&Pe[c]!==0;if(e.fee?.waiver||d&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(d&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let m=Ot(c,{localsWaiver:d});if(Number(e.fee?.oracleFeeBps)!==m)throw new Error("fee: final artifact fee mismatch");return!0}var ge=Object.freeze([...St]),_n=Object.freeze({...At});function Fn(e={}){let r={};for(let t of ge){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(o,i)=>n.simulate(structuredClone(o),structuredClone(i)),sign:(o,i)=>n.sign(structuredClone(o),structuredClone(i)),broadcast:(o,i,a)=>n.broadcast(o,structuredClone(i),structuredClone(a))})}}return Object.freeze(r)}function $n(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as sa}from"@noble/curves/ed25519.js";import{base58 as Mn}from"@scure/base";import{RawTx as la,SigHash as fa,Transaction as Rn}from"@scure/btc-signer";import{Transaction as qn,keccak256 as Lt,verifyTypedData as pa}from"ethers";import{encode as Ki}from"@msgpack/msgpack";import{keccak256 as Xi,verifyTypedData as Qi}from"ethers";var Zi=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),ea=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Ct=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function Dn(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let o=e[n++];if(r|=(o&127)<<t,(o&128)===0)return{value:r,offset:n};t+=7}return null}function Pt(e,r){try{if(String(e).startsWith("evm"))return qn.from(r).hash;if(e==="btc"){let t=Ct(r);if(!t)return null;let n=Rn.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=Ct(r);if(!t)return null;let n=Dn(t);if(!n||n.value!==1)return null;let o=t.subarray(n.offset,n.offset+64);return o.length===64?Mn.encode(o):null}if(e==="hl"&&typeof r=="string"&&r.startsWith("0x"))return Lt(r);if(e==="poly"&&typeof r=="string"&&r.startsWith("0x"))return Lt(r)}catch{}return null}var jn=e=>String(e||"").toLowerCase();function J(e){return Wn("sha256").update(JSON.stringify(e)).digest("hex")}function xe(e,r,t={}){return pe(e,r,t)}async function Jn(e,r={}){if(!H(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function _t(e,r,t=!1){if(!H(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),o=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<o)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function Vn(e,r={}){return renderConfirmationArtifact(e,J(e),r)}var le=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let o=Un(32).toString("hex");return this.#e.set(o,{digest:J(r),owner:jn(t),expiresAtMs:this.now()+n}),o}consume(r,t){let n=this.#e.get(String(r));if(!n)throw new Error("confirmation: used or unknown nonce");if(n.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let o=Buffer.from(n.digest,"hex"),i=Buffer.from(J(t),"hex");if(!Hn(o,i))throw new Error("confirmation: artifact mismatch");return this.#e.delete(String(r)),n}clear(){this.#e.clear()}};function zn(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if(z(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function Gn(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function Ee(e,r){let t=String(r||"");if(String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=Bt.decode(t);return n.length===64&&Bt.encode(n)===t}catch{return!1}return e==="hl"?/^0x[0-9a-fA-F]{64}$/.test(t):e==="poly"?/^0x[0-9a-fA-F]{64}$/.test(t):!1}function Ft(e,r,t){return!Ee(e,r)||!Ee(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function Kn(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function Be({artifact:e,envelope:r,nonce:t,deps:n,policy:o,confirmation:i,consumeNonce:a,nowMs:s}){let c=Kn(o);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(c!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,s())!==!0)throw new Error("signer: autonomous trigger attestation required");return i}if(c!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(a)return n.confirmations.consume(t,e);if(!i||!Number.isFinite(i.expiresAtMs)||i.expiresAtMs<=s())throw new Error("confirmation: expired nonce");return i}function Yn(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Xn(e,r){return e&&Yn(e.surface)?ce(e):[r]}function Qn(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!Ft(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function Zn(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:Gn(t,n)}}async function _e(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=e?.version===1&&e?.surface?e:null,o=n?n.artifact:(()=>{let{tradeId:h,...E}=e||{};return E})(),i=Xn(n,o),a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,s=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),c=await Be({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:null,consumeNonce:!0,nowMs:s}),u=J(e),f=(h={})=>{n?ue(n,a,h):(xe(o,a,{nowMs:h.nowMs,networkFees:h.networkFees,requireNetworkFees:h.requireNetworkFees}),zn(o))},l=async h=>{let E=n&&!String(n.surface||"").startsWith("evm")?void 0:await Jn(h,t);return{nowMs:s(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:E,requireNetworkFees:H(h?.chainId)}};f({nowMs:s(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let h of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[h]!="function")throw new Error(`signer: ${h} is required`);let d=t.reserveLedger(n||e,a);if(!d)throw new Error("signer: ledger reservation required");let m=!1,p=[];try{for(let h of i){if(typeof t.simulate!="function"||await t.simulate(h,n)!==!0)throw new Error("signer: strict affirmative simulation required");let E=await l(h);if(_t(h,E.networkFees,E.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,c=await Be({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:c,consumeNonce:!1,nowMs:s}),f(E),t.validateReservation(d,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0),m=!0;let O=await t.sign(h,n);if(typeof t.verifySigned!="function"||await t.verifySigned(O,h,n)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");if(!t.isArmed())throw new Error("signer: disarmed before broadcast");if(J(e)!==u)throw new Error("signer: artifact mutated after signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,c=await Be({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:c,consumeNonce:!1,nowMs:s});let S=await l(h);_t(h,S.networkFees,S.requireNetworkFees),f(S),t.validateReservation(d,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0);let A=await t.broadcast(O,h,n),L=A?.status,C=n?.surface||"evm",y=Qn(A,C),Y=Pt(C,O);if(!Ft(C,y,Y))throw new Error("signer: receipt transaction hash does not match signed bytes");if(L===0||L==="0x0")throw Ee(C,y)?(t.settleFailedLedger(d),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(L!==1&&L!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!Ee(C,y))throw new Error("signer: successful broadcast requires a valid transaction hash");p.push(Zn(A,y))}}catch(h){throw m||t.releaseLedger(d),h}if(t.commitLedger(d),p.length===1){let h={receipt:p[0]};return n?.surface==="evm-bridge"&&(h.originStatus="success",h.destinationStatus="unverified",h.destinationSuccess=!1,h.note="Origin-chain receipts do not prove destination-chain settlement."),h}let w={receipts:p,status:"success"};return n?.surface==="evm-bridge"&&(w.originStatus="success",w.destinationStatus="unverified",w.destinationSuccess=!1,w.note="Origin-chain receipts do not prove destination-chain settlement."),w}import eo from"node:http";import{timingSafeEqual as to}from"node:crypto";var $t=new Set(["127.0.0.1","::1","localhost"]),ro=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&to(t,n)},N=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function no(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var Mt=e=>new Promise((r,t)=>{let n=0,o=[],i=!1;e.on("data",a=>{n+=a.length,n>64*1024&&!i?(i=!0,t(new Error("request refused")),e.resume()):i||o.push(a)}),e.on("end",()=>{if(!i)try{r(JSON.parse(Buffer.concat(o).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)});function oo(e={}){let r=e.host||"127.0.0.1";if(!$t.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let i of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[i]!="function")throw new Error(`signer: ${i} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new le,n=e.origin||`http://${r}`;return eo.createServer(async(i,a)=>{try{let s=String(i.headers.authorization||"").replace(/^Bearer /i,"");if(!ro(s,e.token))return N(a,401,{error:"unauthorized"});let c=no(i.headers.host);if(!$t.has(c))return N(a,403,{error:"host refused"});if(i.headers.origin&&i.headers.origin!==n)return N(a,403,{error:"origin refused"});if(i.method==="GET"&&i.url==="/status"){let u=typeof e.readPolicy=="function"?e.readPolicy():e.policy,f=new Set(ge),l=Array.isArray(u?.surfaces)?u.surfaces.filter(d=>typeof d=="string"&&f.has(d)):[];return N(a,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:l,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(i.method==="POST"&&i.url==="/disarm")return e.disarm(),t.clear(),N(a,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(i.method))return N(a,405,{error:"request refused"});if(i.method==="POST"&&String(i.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return N(a,415,{error:"request refused"});if(i.method==="POST"&&i.url==="/confirm"){if(e.autonomous===!0)return N(a,403,{error:"autonomous signer does not issue human confirmation nonces"});let u=await Mt(i),f=J(u.artifact),l=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(l?.confirmationMode!=="exact-human")return N(a,403,{error:"exact-human policy required"});let d=typeof e.nowMs=="function"?e.nowMs():Date.now();if(u.artifact?.version===1&&u.artifact?.surface)ue(u.artifact,l,{nowMs:d,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:m,...p}=u.artifact||{};xe(p,l,{nowMs:d})}return typeof e.confirmArtifact!="function"?N(a,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(u.artifact,f,l)!==!0?N(a,400,{error:"exact human confirmation refused"}):N(a,200,{confirmationNonce:t.issue({artifact:u.artifact,owner:u.artifact?.owner??u.artifact?.from,ttlMs:u.ttlMs})})}if(i.method==="POST"&&i.url==="/execute"){let u=await Mt(i),f=await _e(u.artifact,u.confirmationNonce,{...e,confirmations:t});return N(a,200,f)}return N(a,404,{error:"not found"})}catch(s){return e.onError?.(String(s?.message||s)),N(a,400,{error:"request refused"})}})}export{le as ConfirmationStore,ge as PUBLIC_SIGNER_SURFACES,_n as REVIEWED_EVM_SELECTORS,J as artifactDigest,xe as assertExactPolicy,oo as createSignerServer,Fn as createSurfaceAdapters,ce as evmTransactions,_e as executeConfirmedArtifact,Vn as inspectArtifactForConfirmation,kt as inspectEvmBatch,Nt as inspectEvmNft,Ot as publicFeeBps,$n as surfaceAdapterFor,ue as validateSurfaceEnvelope};
+import{createHash as Wn,randomBytes as Hn,timingSafeEqual as jn}from"node:crypto";import{base58 as Bt}from"@scure/base";import{Interface as yt}from"ethers";import{Interface as Zt,MaxUint256 as er,isAddress as tr,keccak256 as Ho,toUtf8Bytes as jo}from"ethers";import{Interface as Xt,isAddress as vo}from"ethers";import{isAddress as Eo}from"ethers";import{createHash as Wt,createHmac as Ht,timingSafeEqual as jt}from"node:crypto";import{readFileSync as Rt}from"node:fs";import{homedir as qt}from"node:os";import{join as de}from"node:path";function Dt(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=qt();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||de(r,".config","oracle")).trim();return[e,de(t,"exec.env")].filter(Boolean)}return[e,de(r,".config","oracle","exec.env"),de(r,".config","mad-desk","exec.env")].filter(Boolean)}function re(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let o of Dt())try{let i=Rt(o,"utf8"),a=i.match(new RegExp(`^${r}=(.*)$`,"m"))||i.match(new RegExp(`^${t}=(.*)$`,"m"));if(a&&(n=a[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function Q(e,r,t="guard"){if(typeof r!="number"||!Number.isFinite(r))throw new Error(`${t}: current time must be a finite number (got ${Ut(r)})`);let n=r,o=Number(e?.issuedAtMs),i=Number(e?.expiresAtMs);if(!Number.isFinite(i))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>i)throw new Error(`${t} expired at ${i}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(o))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(i<=o)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:o,expiresAtMs:i}}function Ut(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var Me=100;function ye(e){return Array.isArray(e)?`[${e.map(ye).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${ye(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function Jt(e,{required:r=!1}={}){try{return re(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function Vt(e){let{signature:r,...t}=e;return t}function zt(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return Wt("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function Gt(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:jt(t,n)}function Yt(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let i=10;i+64<=r.length;i+=64)n.push(r.slice(i,i+64));let o=i=>n[i]==null?null:BigInt("0x"+n[i]);switch(t){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+4)}case"0xb858183f":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}function Se(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:o,tx:i,requireSigned:a=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let s=Jt(o,{required:a});if(a&&!s)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(s){let m=Ht("sha256",s).update(ye(Vt(e))).digest("hex");if(!Gt(e.signature,m))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let c=Number(e.selectedBps),u=Number(e.capBps);if(!Number.isInteger(c)||c<0||c>Me)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(u)||u<0||u>Me||c>u)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{Q({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(m){throw new Error(`${m.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let f=BigInt(e.quoteAmountOut??0),l=BigInt(e.minAmountOut??0);if(f<=0n||l<=0n)throw new Error("auto-slippage guard amounts must be positive");let d=f*BigInt(1e4-c),p=d/10000n;if(d%10000n!==0n&&(p+=1n),l<p)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(i?.data&&e.minAmountOut!=null){let m=Yt(i.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==zt(i.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(m!=null&&m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${m}, not the guard floor ${e.minAmountOut}`)}else{if(m==null){let w=String(i.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${w}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${m}`)}}return!0}var No=new Xt(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Qt,isAddress as Co}from"ethers";var Fo=new Qt(["function approve(address spender,uint256 amount) returns (bool)"]),Mo=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function S(e,r="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${r} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${r} must be a number or decimal string`);return e}throw new Error(`${r} must be a number or decimal string`)}function P(e,r="value"){if(typeof e!="string"||e==="")throw new Error(`${r} must be a string`);return e}function W(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=S(e,r);if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}function B(e,r="amount"){let t=W(e,r);if(t<=0n)throw new Error(`${r} must be positive`);return t}function T(e,r,t="amount"){let n=S(e,t);if(!/^-?\d*(\.\d+)?$/.test(n)||n===""||n==="."||n==="-")throw new Error(`${t} must be a decimal number, got ${JSON.stringify(n)}`);let o=n.startsWith("-"),i=o?n.slice(1):n,[a="0",s=""]=i.split(".");if(s.length>r)throw new Error(`${t} has more than ${r} decimal places, which would lose precision`);let c=BigInt((a||"0")+s.padEnd(r,"0"));return o?-c:c}var Ko=new Zt(["function approve(address spender,uint256 amount) returns (bool)"]);function $e(e,r){let t=String(e||"").trim();if(!tr(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function rr(e,r="approval amount",{allowZero:t=!1}={}){let n=W(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=er)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var Re=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),nr=new Set(["0x39509351","0xf9255c1f"]);function G(e){let r=String(e||"").toLowerCase();return r.length<10?!1:Re.has(r.slice(0,10))}function qe(e){if(!G(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],o=u=>n[u]?"0x"+n[u].slice(24):null,i=u=>n[u]?BigInt("0x"+n[u]):null,a=null,s=null,c=null;switch(t){case"0x095ea7b3":case"0x39509351":a=o(0),s=i(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":c=o(0),a=o(1),s=i(2);break;case"0xd505accf":a=o(1),s=i(2);break;case"0x8fcbaf0c":{a=o(1),s=i(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":c=o(0),a=o(1),s=i(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(a==null||s==null)throw new Error("invalid approve calldata");return{spender:$e(a,"approval spender"),token:c==null?null:$e(c,"approval token"),amount:rr(s,"approval amount",{allowZero:!0}),selector:t,additive:nr.has(t)}}import{createHash as or,createHmac as Zo,timingSafeEqual as ei}from"node:crypto";var ir=2,Ae=300*1e3,De=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function ar(e){let r=e==null||e===""?Ae:Number(e);return!Number.isFinite(r)||r<0?Ae:Math.min(r,De)}function ve(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(ve).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${ve(e[t])}`).join(",")}}`}function sr(e){let{prepareHash:r,prepareMac:t,note:n,...o}=e||{};return o}function cr(e){let r=sr(e);return or("sha256").update(ve(r)).digest("hex")}function Ue(e,{maxAgeMs:r=Ae,nowMs:t=Date.now(),providers:n=null,kinds:o=null,label:i="operator"}={}){if(!e||typeof e!="object")throw new Error(`${i}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${i}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==ir)throw new Error(`${i}: unsupported prepareVersion ${e.prepareVersion}`);let a=cr(e);if(String(e.prepareHash||"")!==a)throw new Error(`${i}: prepareHash mismatch \u2014 payload was altered after prepare`);let s=Number(e.preparedAt),c=Number(e.expiresAt),u=ar(r),f=t-s,l=c-s;if(!Number.isFinite(f)||!Number.isFinite(c)||!Number.isFinite(l)||f<0||l<=0||l>De||f>u||t>=c)throw new Error(`${i}: prepare envelope expired or clock-skewed (ageMs=${f}, max=${u})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${i}: provider ${e.provider} not allowed here`);if(o&&!new Set(o).has(e.kind))throw new Error(`${i}: kind ${e.kind} not allowed here`);return!0}var pe=e=>String(e||"").toLowerCase(),ur=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","slippageBps","expiresAtMs"]),lr=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function j(e){try{return lr.has(BigInt(e))}catch{return!1}}var $=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},We=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},ne=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function me(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:o=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(p=>!ur.has(p)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");let i=(p,m)=>{try{return BigInt(p)===BigInt(m)}catch{return String(p)===String(m)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(p=>i(p,e.chainId)))throw new Error("policy: chain not allowed");if(ne(e.to,r.destinations,"destination",pe),ne(String(e.data||"0x").slice(0,10),r.selectors,"selector",p=>String(p).toLowerCase()),ne(e.from,r.owners,"owner",pe),G(e.data)){let p;try{p=qe(e.data)}catch(w){throw new Error(`policy: malformed approval calldata: ${w?.message||w}`)}ne(p.spender,r.spenders,"spender",pe),ne(p.token||e.to,r.erc20Tokens,"ERC-20 token",pe);let m=$(r.maxApproval,"maxApproval");if(BigInt(p.amount)>m)throw new Error("policy: approval exceeds cap");if(p.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if($(e.value,"value")>$(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let a=$(e.gasLimit,"gasLimit");if(a>$(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let s=e.maxFeePerGas??e.gasPrice,c=$(s,"feePerGas")*a,u=0n;try{if(j(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(u+=$(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(u+=$(e.operatorFeeWei,"operatorFeeWei")),j(e.chainId)&&(o||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let p=$(n.l1FeeWei,"estimated l1FeeWei")+$(n.operatorFeeWei,"estimated operatorFeeWei");if(u<p)throw new Error("policy: rollup fee attestation understates estimate")}if(c+u>$(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let l=We(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>l)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let d=We(r.maxTtlMs??12e4,"maxTtlMs");if(d<=0||e.expiresAtMs-t>d)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as He}from"node:crypto";import{Address as fr,NETWORK as dr,OutScript as je,RawTx as pr,SigHash as Je,TEST_NETWORK as mr,Transaction as hr}from"@scure/btc-signer";var Ve=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},wr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},gr=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,Er=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),Y=e=>Er(e)?String(e).toLowerCase():String(e),Te=(e,r)=>Array.isArray(r)&&r.some(t=>Y(t)===Y(e)),xr=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function br(e){let r=Buffer.from(pr.encode(e)),t=He("sha256").update(r).digest();return Buffer.from(He("sha256").update(t).digest()).reverse().toString("hex")}function yr(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(br(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!xr(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function Sr(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(l=>!["network","psbt"].includes(l)))throw new Error("envelope: unexpected BTC artifact field");if(!Te(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?dr:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?mr:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let o;try{o=hr.fromPSBT(wr(t.psbt,"PSBT"))}catch(l){throw new Error(`envelope: invalid PSBT: ${l?.message||l}`)}if(o.inputsLength===0||o.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let i=fr(n);for(let l=0;l<o.inputsLength;l++){let d=o.getInput(l);for(let w of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(gr(d[w]))throw new Error("envelope: signed or finalized PSBT refused");if(d.sighashType!==void 0&&d.sighashType!==Je.DEFAULT&&d.sighashType!==Je.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let p=yr(d),m;try{let w=je.decode(p.script);if(!["wpkh"].includes(w.type))throw new Error("unsupported input");m=i.encode(w)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!Te(m,r.owners)||Y(m)!==Y(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let a=new Set([e.owner,...r.changeAddresses||[]].map(l=>Y(l))),s=0n,c=!1,u=[];for(let l=0;l<o.outputsLength;l++){let d=o.getOutput(l),p;try{p=i.encode(je.decode(d.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let m=Y(p);if(u.push(`${p}:${d.amount}`),m===Y(e.destination)){c=!0,s+=d.amount;continue}if(Te(p,r.destinations)){s+=d.amount;continue}if(!a.has(m))throw new Error("policy: Bitcoin output destination not allowed")}if(!c)throw new Error("envelope: Bitcoin destination mismatch");let f;try{f=o.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(f<0n||f>Ve(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(s>Ve(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:s.toString(),notional:(s+f).toString(),fee:f.toString(),outputs:Object.freeze(u)})}function ze(e,r){let{unit:t,value:n,notional:o,fee:i}=Sr(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}import{createHash as ke}from"node:crypto";import{base58 as Ze}from"@scure/base";import{getCompiledTransactionMessageDecoder as Ar}from"@solana/transaction-messages";var Ne="11111111111111111111111111111111",vr="ComputeBudget111111111111111111111111111111",Tr="So11111111111111111111111111111111111111112",et="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";var tt="ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",Ir=5000n,kr=2039280n,Nr=37095705934669439343138083508754565189542113879843219016388785533085940283555n,O=57896044618658097711785492504343953926634992332820282019728792003956564819949n,Ge=19681161376707505956807079304988542015446066515923890162744021073123829784752n,Ye=e=>ke("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Or=new Map([[Ye("route"),{name:"route",prefixBytes:0}],[Ye("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]),F=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Lr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},H=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e)),R=e=>String(e||""),Cr=e=>Array.isArray(e.solMints)&&e.solMints.length?e.solMints:e.tokens,we=e=>ke("sha256").update(e).digest("hex");function he(e,r){try{let t=Buffer.from(Ze.decode(String(e||"")));if(t.length!==32)throw new Error("wrong length");return t}catch{throw new Error(`envelope: invalid Solana ${r}`)}}function _(e){let r=e%O;return r>=0n?r:O+r}function D(e,r){let t=e;for(;r-- >0n;)t=t*t%O;return t}function Pr(e){let t=e*e%O*e%O,n=D(t,2n)*t%O,o=D(n,1n)*e%O,i=D(o,5n)*o%O,a=D(i,10n)*i%O,s=D(a,20n)*a%O,c=D(s,40n)*s%O,u=D(c,80n)*c%O,f=D(u,80n)*c%O,l=D(f,10n)*i%O;return D(l,2n)*e%O}function Br(e,r){let t=_(r*r*r),n=_(t*t*r),o=Pr(e*n),i=_(e*t*o),a=_(r*i*i),s=i,c=_(i*Ge),u=a===e,f=a===_(-e),l=a===_(-e*Ge);return u&&(i=s),(f||l)&&(i=c),(_(i)&1n)===1n&&(i=_(-i)),!u&&!f?null:i}function _r(e){if(!e||e.length!==32)return!1;let r=0n;for(let o=31;o>=0;o--)r=(r<<8n)+BigInt(o===31?e[o]&127:e[o]);let t=_(r*r),n=Br(_(t-1n),_(Nr*t+1n));return n===null?!1:!(n===0n&&(e[31]&128)!==0)}function Fr(e,r){let t=Buffer.concat([...e,he(r,"program id"),Buffer.from("ProgramDerivedAddress")]),n=ke("sha256").update(t).digest();if(_r(n))throw new Error("envelope: derived Solana program address is on curve");return Ze.encode(n)}function Oe(e,r,t=et){let n=[he(e,"owner"),he(t,"token program"),he(r,"mint")];for(let o=255;o>=0;o--)try{return Fr([...n,Buffer.from([o])],tt)}catch(i){if(!/on curve/.test(String(i?.message||i)))throw i}throw new Error("envelope: unable to derive associated token account")}function Mr(e,r){return(r.accountIndices||[]).map(t=>R(e.staticAccounts[t]))}function oe(e){return Buffer.from(e.data||[])}function $r(e,r){return R(e.staticAccounts[r.programAddressIndex])}function rt(e,r){return Number(r)<e.header.numSignerAccounts}function Rr(e,r){let t=e.header.numSignerAccounts,n=e.header.numReadonlySignerAccounts,o=e.header.numReadonlyNonSignerAccounts,i=e.staticAccounts.length;return Number(r)<t?Number(r)<t-n:Number(r)<i-o}function ie(e){return e.accountIndices||[]}function Ie(e,r){if(!Array.isArray(e)||!e.length)throw new Error(`policy: ${r} allowlist required`);return e.map(String)}function Ke(e,r){let t=ie(r).map(n=>{let o=rt(e,n)?"s":"n",i=Rr(e,n)?"w":"r";return`${n}:${R(e.staticAccounts[n])}:${o}:${i}`});return we(Buffer.from(t.join(`
+`)))}function Xe(e,r,t){if(r+8>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readBigUInt64LE(r)}function qr(e,r,t){if(r+2>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt16LE(r)}function Dr(e,r,t){if(r+4>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt32LE(r)}function Ur(e,r,t){let n=t.maxJupiterRoutePlanSteps===void 0?1:Number(t.maxJupiterRoutePlanSteps);if(!Number.isSafeInteger(n)||n<1)throw new Error("policy: maxJupiterRoutePlanSteps must be a positive integer");if(r<1||r>n)throw new Error("policy: Jupiter route-plan step count exceeds reviewed cap");let o=Array.isArray(t.jupiterRouteVariants)?t.jupiterRouteVariants.map(Number):[];if(!o.length)throw new Error("policy: Jupiter route variant allowlist required");let i=t.jupiterRouteVariantPayloadBytes||{},a=0,s=0,c=[];for(let u=0;u<r;u++){if(a>=e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let f=e[a++];if(!o.includes(f))throw new Error("policy: Jupiter route variant not allowed");if(!Object.hasOwn(i,String(f)))throw new Error("policy: Jupiter route variant payload size required");let l=Number(i[String(f)]);if(!Number.isSafeInteger(l)||l<0||l>16)throw new Error("policy: Jupiter route variant payload size invalid");if(a+l+3>e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let d=e.subarray(a,a+l);a+=l;let p=d.toString("hex"),m=t.jupiterRouteVariantPayloads?.[String(f)];if(!Array.isArray(m)||!m.map(String).includes(p))throw new Error("policy: Jupiter route variant payload not allowed");let w=e[a++],h=e[a++],E=e[a++];if(w<1||w>100)throw new Error("envelope: Jupiter route-plan percent invalid");if(h!==u||E!==u+1)throw new Error("envelope: unsupported Jupiter route-plan token index");s+=w,c.push(Object.freeze({swapVariant:f,variantPayloadHex:p,percent:w,inputIndex:h,outputIndex:E}))}if(a!==e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");if(s!==100*r)throw new Error("envelope: Jupiter route-plan percent total mismatch");return Object.freeze(c)}function Wr(e,r){let t=oe({data:e}),n=t.subarray(0,8).toString("hex"),o=Or.get(n);if(!o)throw new Error("envelope: unsupported Jupiter instruction discriminator");let i=19,a=o.prefixBytes===1?t[8]:null;if(o.prefixBytes===1&&t.length<9)throw new Error("envelope: malformed Jupiter shared route payload");let s=8+o.prefixBytes,c=s+4,u=t.length-i;if(u<=c)throw new Error("envelope: malformed Jupiter route payload");let f=Dr(t,s,"route plan length"),l=t.subarray(c,u),d=Ur(l,f,r);return Object.freeze({instruction:o.name,routeId:a,routePlanSteps:f,routePlan:d,routePlanHash:we(l),inAmount:Xe(t,u,"in_amount"),quotedOutAmount:Xe(t,u+8,"quoted_out_amount"),slippageBps:qr(t,u+16,"slippage_bps"),platformFeeBps:t[u+18],instructionHash:we(t)})}function Hr(e,r,t){let n=Mr(e,r),o=(i,a)=>{let s=n[i];if(!s)throw new Error(`envelope: Jupiter ${a} account missing`);return s};if(t.instruction==="route"){if(n.length<9)throw new Error("envelope: Jupiter route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),userTransferAuthority:o(1,"userTransferAuthority"),userSourceTokenAccount:o(2,"userSourceTokenAccount"),userDestinationTokenAccount:o(3,"userDestinationTokenAccount"),destinationTokenAccount:o(4,"destinationTokenAccount"),destinationMint:o(5,"destinationMint"),platformFeeAccount:o(6,"platformFeeAccount"),eventAuthority:o(7,"eventAuthority"),program:o(8,"program")}}if(t.instruction==="shared_accounts_route"){if(n.length<13)throw new Error("envelope: Jupiter shared route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),programAuthority:o(1,"programAuthority"),userTransferAuthority:o(2,"userTransferAuthority"),userSourceTokenAccount:o(3,"sourceTokenAccount"),programSourceTokenAccount:o(4,"programSourceTokenAccount"),programDestinationTokenAccount:o(5,"programDestinationTokenAccount"),userDestinationTokenAccount:o(6,"destinationTokenAccount"),sourceMint:o(7,"sourceMint"),destinationMint:o(8,"destinationMint"),platformFeeAccount:o(9,"platformFeeAccount"),token2022Program:o(10,"token2022Program"),eventAuthority:o(11,"eventAuthority"),program:o(12,"program")}}throw new Error("envelope: unsupported Jupiter account layout")}function Qe(e,r){return e&&e!==r?e:null}function M(e,r,t){let n=R(e.staticAccounts[r]);if(!n)throw new Error(`envelope: Jupiter ${t} missing`);return n}function jr(e,r){let t=oe(e);if(t.length===5&&t[0]===2){let n=t.readUInt32LE(1),o=r.maxComputeUnits===void 0?14e5:Number(r.maxComputeUnits);if(!Number.isSafeInteger(o)||o<=0)throw new Error("policy: maxComputeUnits must be positive");if(n>o)throw new Error("policy: Jupiter compute unit limit exceeds cap");return 0n}throw t.length===9&&t[0]===3?new Error("policy: Jupiter priority fee not allowed"):new Error("envelope: unsupported Jupiter compute-budget helper")}function Jr(e,r,t,n,o,i){let a=oe(r);if(a.length!==1||a[0]!==1)throw new Error("envelope: unsupported Jupiter ATA helper");let s=ie(r);if(s.length!==6)throw new Error("envelope: malformed Jupiter ATA helper");let c=M(e,s[0],"ATA payer"),u=M(e,s[1],"ATA account"),f=M(e,s[2],"ATA owner"),l=M(e,s[3],"ATA mint"),d=M(e,s[4],"ATA system program"),p=M(e,s[5],"ATA token program");if(c!==t.owner)throw new Error("envelope: Jupiter ATA payer must equal owner");if(f!==t.owner)throw new Error("envelope: Jupiter ATA owner must equal owner");if(d!==Ne)throw new Error("envelope: Jupiter ATA system program mismatch");if(p!==o)throw new Error("envelope: Jupiter ATA token program mismatch");if(l!==n.inputMint&&l!==n.outputMint)throw new Error("envelope: Jupiter ATA mint mismatch");if(u!==Oe(t.owner,l,o))throw new Error("envelope: Jupiter ATA account mismatch");return{ata:u,debit:i}}function Vr(e,r,t,n,o){let i=ie(r),a=oe(r);if(i.length!==2||a.length!==12||a.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Jupiter system helper");let s=M(e,i[0],"wrap payer"),c=M(e,i[1],"wrap target"),u=a.readBigUInt64LE(4);if(s!==t.owner||c!==n)throw new Error("envelope: unsupported Jupiter wrap transfer");if(u!==o)throw new Error("envelope: Jupiter wrap transfer amount mismatch");return u}function zr(e,r,t,n){let o=ie(r),i=oe(r);if(i.length!==1)throw new Error("envelope: unsupported Jupiter token helper");if(i[0]===17){if(o.length!==1||M(e,o[0],"syncNative account")!==n)throw new Error("envelope: Jupiter syncNative account mismatch");return{kind:"syncNative"}}if(i[0]===9){if(o.length!==3)throw new Error("envelope: malformed Jupiter closeAccount helper");let a=M(e,o[0],"closeAccount source"),s=M(e,o[1],"closeAccount destination"),c=M(e,o[2],"closeAccount authority");if(a!==n||s!==t.owner||c!==t.owner)throw new Error("envelope: Jupiter closeAccount must return to owner");return{kind:"closeAccount"}}throw new Error("envelope: unsupported Jupiter token helper")}function Gr(e,r,t,n,o,i,a){let s=Oe(r.owner,r.artifact.inputMint,a);if(o.userSourceTokenAccount!==s)throw new Error("envelope: Jupiter source token account is not owner ATA");let c=F(t.jupiterAtaRentLamports,"jupiterAtaRentLamports");if(c<kr)throw new Error("policy: Jupiter ATA rent below the token-account rent-exempt minimum");let u=new Map,f=0n,l=!1,d=!1;for(let p of e.instructions){if(p===n)continue;let m=$r(e,p);if(m===vr)jr(p,t);else if(m===tt){let{ata:w,debit:h}=Jr(e,p,r,r.artifact,a,c);u.set(w,h)}else if(m===Ne)f+=Vr(e,p,r,s,i);else if(m===a){let w=zr(e,p,r,s);w.kind==="syncNative"&&(l=!0),w.kind==="closeAccount"&&(d=!0)}else throw new Error("envelope: unsupported Jupiter helper instruction")}if(f>0n&&(!l||!d))throw new Error("envelope: Jupiter native wrap helpers incomplete");if(f!==0n&&f!==i)throw new Error("envelope: Jupiter native wrap amount mismatch");return[...u.values()].reduce((p,m)=>p+m,0n)}function Yr(e){let r;try{r=Ar().decode(Lr(e.messageBase64,"Solana message"))}catch(t){throw new Error(`envelope: invalid Solana message: ${t?.message||t}`)}if(r.version!=="legacy"&&Array.isArray(r.addressTableLookups)&&r.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");return r}function Kr(e,r,t){if(e.header.numSignerAccounts!==1||R(e.staticAccounts[0])!==r.owner||!H(r.owner,t.owners))throw new Error("envelope: Solana owner mismatch");if(!Array.isArray(e.instructions)||e.instructions.length===0)throw new Error("envelope: Solana instructions required");let n=[];for(let o of e.instructions){let i=R(e.staticAccounts[o.programAddressIndex]);if(!i||!H(i,t.programs))throw new Error("policy: Solana program not allowed");n.push(i)}return n}function Xr(e,r,t){let n=F(t.lamportsPerSignature,"lamportsPerSignature");if(n<Ir)throw new Error("policy: Solana per-signature fee is below the network minimum");let o=t.maxLamportsPerSignature===void 0?n:F(t.maxLamportsPerSignature,"maxLamportsPerSignature");if(n>o)throw new Error("policy: Solana per-signature fee exceeds cap");let i=BigInt(e.header.numSignerAccounts),a=i*n,s=i*o;if(r.exactFeeLamports!==void 0){let u=F(r.exactFeeLamports,"exactFeeLamports");if(u<a)throw new Error("policy: Solana exact fee below the base signature fee");if(u>s)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let c=s;if(c>F(t.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return c}function Qr(e,r,t,n){let o=0n,i=!1;for(let a of e.instructions){if(R(e.staticAccounts[a.programAddressIndex])!==Ne)throw new Error("envelope: unsupported Solana program decoder");let c=a.accountIndices||[];if(c.length!==2||R(e.staticAccounts[c[0]])!==r.owner)throw new Error("envelope: Solana transfer owner mismatch");let u=R(e.staticAccounts[c[1]]);if(u!==r.destination||!H(u,t.destinations))throw new Error("envelope: Solana destination mismatch");let f=Buffer.from(a.data||[]);if(f.length!==12||f.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");o+=f.readBigUInt64LE(4),i=!0}if(!i)throw new Error("envelope: Solana destination mismatch");if(o>F(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:o,programs:n}}function Zr(e,r,t,n){let o=r.artifact;if(o.provider!=="jupiter")throw new Error("envelope: Solana swap provider must be jupiter");if(o.inputMint!==Tr)throw new Error("envelope: Jupiter local signer requires native SOL input");if(o.outputMint!==r.destination||!H(o.outputMint,t.destinations))throw new Error("envelope: Jupiter output mint destination mismatch");let i=Cr(t);if(!H(o.inputMint,i)||!H(o.outputMint,i))throw new Error("policy: Solana token not allowed");let a=F(o.inAmount,"inAmount"),s=F(o.outAmount,"outAmount"),c=F(o.otherAmountThreshold,"otherAmountThreshold");if(a<=0n||a>F(t.maxPerTradeLamports,"maxPerTradeLamports"))throw new Error("policy: Solana swap amount exceeds per-trade cap");if(a>F(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");if(s<=0n||c<=0n||c>s)throw new Error("envelope: Jupiter quote floor invalid");if(Number(o.slippageBps)!==Number(r.slippageBps))throw new Error("policy: Solana slippage mismatch");let u=R(o.jupiterProgram);if(!u||!H(u,t.programs)||!n.includes(u))throw new Error("policy: Jupiter program not allowed or absent");let f=e.instructions.filter(x=>R(e.staticAccounts[x.programAddressIndex])===u);if(f.length!==1)throw new Error("envelope: exactly one Jupiter swap instruction required");let l=f[0],d=Wr(l.data,t);if(d.instruction==="shared_accounts_route"){let x=Array.isArray(t.jupiterSharedRouteIds)?t.jupiterSharedRouteIds.map(Number):[];if(!x.length)throw new Error("policy: Jupiter shared route id allowlist required");if(!x.includes(Number(d.routeId)))throw new Error("policy: Jupiter shared route id not allowed")}else if(d.routeId!=null)throw new Error("envelope: unexpected Jupiter shared route id");if(!Ie(t.jupiterRoutePlanHashes,"Jupiter route-plan hash").includes(d.routePlanHash))throw new Error("policy: Jupiter route-plan hash not allowed");if(d.inAmount!==a)throw new Error("envelope: Jupiter route in_amount mismatch");if(d.quotedOutAmount!==s)throw new Error("envelope: Jupiter route quoted_out_amount mismatch");if(d.slippageBps!==Number(o.slippageBps))throw new Error("envelope: Jupiter route slippage mismatch");let p=d.quotedOutAmount-d.quotedOutAmount*BigInt(d.slippageBps)/10000n;if(c!==p)throw new Error("envelope: Jupiter otherAmountThreshold does not match serialized min-out");if(d.platformFeeBps!==0)throw new Error("policy: Jupiter platform fee not allowed");let m=Hr(e,l,d),w=ie(l),h=d.instruction==="shared_accounts_route"?2:1;if(!rt(e,w[h]))throw new Error("envelope: Jupiter transfer authority must be signer");if(m.program!==u)throw new Error("envelope: Jupiter program account mismatch");if(m.userTransferAuthority!==r.owner)throw new Error("envelope: Jupiter transfer authority must equal owner");if(m.destinationMint!==o.outputMint)throw new Error("envelope: Jupiter destination mint mismatch");if(m.sourceMint!==void 0&&m.sourceMint!==o.inputMint)throw new Error("envelope: Jupiter source mint mismatch");let E=Array.isArray(t.tokenPrograms)&&t.tokenPrograms.length?t.tokenPrograms:[et];if(!H(m.tokenProgram,E))throw new Error("policy: Solana token program not allowed");let A=Oe(r.owner,o.outputMint,m.tokenProgram);if(m.userDestinationTokenAccount!==A)throw new Error("envelope: Jupiter destination token account is not owner ATA");let y=Qe(m.destinationTokenAccount,u);if(y&&y!==A)throw new Error("envelope: Jupiter optional destination account redirects proceeds");if(Qe(m.platformFeeAccount,u))throw new Error("policy: Jupiter platform fee account not allowed");if(!Ie(t.jupiterRouteAccountHashes,"Jupiter route account hash").includes(Ke(e,l)))throw new Error("policy: Jupiter route account hash not allowed");let v=we(Buffer.from([d.instruction,d.routeId??"",d.routePlanHash,Ke(e,l)].join(`
+`)));if(!Ie(t.jupiterRouteReviewHashes,"Jupiter route review hash").includes(v))throw new Error("policy: Jupiter route review hash not allowed");let k=Gr(e,r,t,l,m,a,m.tokenProgram),N=a+k;if(N>F(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:N,programs:n}}function en(e,r){if(e.action!=="transfer"&&e.action!=="swap")throw new Error("envelope: Solana decoder requires transfer or swap action");let t=e?.artifact,n=e.action==="transfer"?["cluster","messageBase64","exactFeeLamports"]:["cluster","provider","messageBase64","exactFeeLamports","inputMint","outputMint","inAmount","outAmount","otherAmountThreshold","slippageBps","jupiterProgram"];if(Object.keys(t||{}).some(c=>!n.includes(c)))throw new Error("envelope: unexpected Solana artifact field");if(!H(t.cluster,r.chains))throw new Error("policy: chain not allowed");let o=Yr(t),i=Kr(o,e,r),a=e.action==="transfer"?Qr(o,e,r,i):Zr(o,e,r,i),s=Xr(o,t,r);return Object.freeze({unit:"lamports",value:a.value.toString(),notional:(a.value+s).toString(),fee:s.toString(),programs:Object.freeze(a.programs)})}function nt(e,r){let{unit:t,value:n,notional:o,fee:i}=en(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}var gi=64*1024;var tn=1e8;function Le(e){if(typeof e!="string"||!/^#(?:0|[1-9]\d*)$/.test(e))return null;let r=Number(e.slice(1));if(!Number.isSafeInteger(r)||r<0)return null;let t=r%10;if(t!==0&&t!==1)return null;let n=Math.floor(r/10),o=tn+r;return Number.isSafeInteger(o)?{encoding:r,outcome:n,side:t,coin:`#${r}`,assetId:o}:null}var rn=new Set(["https://api.hyperliquid.xyz/exchange","https://api.hyperliquid-testnet.xyz/exchange"]),nn=new Set(["perp-order","hip3-order","hip4-order","perp-bracket"]),on=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),an=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"}),J=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`hl: bounded ${r} required`);return e};function sn(e,r){let t=e.toString().padStart(r+1,"0");if(r===0)return t;let n=t.slice(0,-r),o=t.slice(-r).replace(/0+$/,"");return o?`${n}.${o}`:n}function ot(e,r){let t=S(e,`hl: ${r}`);if(!/^\d+(?:\.\d+)?$/.test(t))throw new Error(`hl: ${r} must be a positive decimal`);let[n,o=""]=t.split("."),i=BigInt(n+o);if(i<=0n)throw new Error(`hl: ${r} must be positive`);return{raw:i,decimals:o.length}}function U(e,r){if(e===null||typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`hl: ${r} must be finite JSON`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map(n=>U(n,r)).join(",")}]`;if(!e||typeof e!="object")throw new Error(`hl: ${r} must be structured JSON`);return`{${Object.keys(e).sort().map(n=>`${JSON.stringify(n)}:${U(e[n],r)}`).join(",")}}`}function cn(e){if(typeof e.orderType!="string"||!e.orderType)throw new Error("hl: order type must be a string");let r=e.orderType,t=e.orderWire;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: declared order wire required");if(r==="limit"){let i=t.limit?.tif;if(!["Gtc","Ioc","Alo"].includes(i)||U(t,"declared order type")!==U({limit:{tif:i}},"expected order type"))throw new Error("hl: limit order type must match its wire shape");return}if(r==="market"){if(U(t,"declared order type")!==U({limit:{tif:"Ioc"}},"expected order type"))throw new Error("hl: market order type must match its IOC wire shape");return}let n={stopMarket:{isMarket:!0,tpsl:"sl"},stopLimit:{isMarket:!1,tpsl:"sl"},takeProfitMarket:{isMarket:!0,tpsl:"tp"},takeProfitLimit:{isMarket:!1,tpsl:"tp"}}[r];if(!n)throw new Error("hl: unsupported declared order type");let o=t.trigger?.triggerPx;if(o==null||U(t,"declared order type")!==U({trigger:{isMarket:n.isMarket,triggerPx:o,tpsl:n.tpsl}},"expected order type"))throw new Error("hl: trigger order type must match its wire shape")}function un(e,r,t){let n=ot(e.s,"signed size"),o=ot(e.p,"signed price"),i=n.decimals+o.decimals,a=n.raw*o.raw,s=T(r.notionalUsd,i,"hl: notionalUsd");if(s<=0n||a!==s)throw new Error("hl: signed notional must match");let c=T(t.maxNotionalUsd,i,"hl: maxNotionalUsd");if(a>c)throw new Error("hl: notional exceeds cap")}function ln(e,r){let t=e.action.builder;if(t==null){if(e.builder!=null)throw new Error("hl: declared builder requires a signed builder");return}if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: signed order builder must be structured");let n=J(t.b,"order builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(n))throw new Error("hl: order builder address required");if(P(e.builder||"","hl: builder").toLowerCase()!==n)throw new Error("hl: signed order builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(s=>String(s).toLowerCase()):[]).includes(n))throw new Error("hl: order builder not allowed");let i=W(t.f,"hl: signed order builder fee");if(i<0n)throw new Error("hl: signed order builder fee must be non-negative");let a=T(r.maxBuilderFeeBps??0,1,"hl: maxBuilderFeeBps");if(i>a)throw new Error("hl: order builder fee exceeds cap")}function it(e,r,t){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: signed asset must match assetId");if(typeof e.b!="boolean"||e.b!==(r.side==="buy"))throw new Error("hl: signed side must match exactly");if(S(e.s,"hl: signed size")!==S(r.size,"hl: size"))throw new Error("hl: signed size must match");if(S(e.p,"hl: signed price")!==S(r.price,"hl: price"))throw new Error("hl: signed price must match");if(typeof r.reduceOnly!="boolean"||typeof e.r!="boolean"||e.r!==r.reduceOnly)throw new Error("hl: signed reduceOnly must match exactly");if(U(e.t,"signed order type")!==U(r.orderWire,"declared order type"))throw new Error("hl: signed order type must match declared order type");let n=Object.prototype.hasOwnProperty.call(e,"c");if(r.clientOrderId==null){if(n)throw new Error("hl: undeclared signed client order id")}else if(!n||typeof e.c!="string"||e.c!==r.clientOrderId)throw new Error("hl: signed client order id must match")}function at(e,r,t,n,o){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: bracket protection asset must match");if(typeof e.b!="boolean"||e.b===(r.side==="buy"))throw new Error("hl: bracket protection side must oppose entry");if(S(e.s,"hl: bracket protection size")!==S(r.size,"hl: size"))throw new Error("hl: bracket protection size must match");if(S(e.p,"hl: bracket protection price")!==S(n,"hl: protection price"))throw new Error("hl: bracket protection price must match");if(e.r!==!0)throw new Error("hl: bracket protection must be reduce-only");let i=e.t?.trigger;if(!i||i.isMarket!==!0||i.tpsl!==o)throw new Error("hl: bracket protection trigger must match");if(S(i.triggerPx,"hl: triggerPx")!==S(n,"hl: protection price"))throw new Error("hl: bracket protection trigger must match")}function fn(e){let r=String(e||"").replace(/\/$/,"");if(!rn.has(r))throw new Error("hl: submitTo must be the official Hyperliquid exchange");return r}function Ce(e){return Le(e)!=null}function dn(e,r){let t=String(e||""),n=Array.isArray(r.coins)?r.coins.map(String):[];if(Ce(t)){if(r.hip4!==!0)throw new Error("hl: HIP-4 outcome orders are disabled without explicit policy enablement");if(n.includes(t)||n.includes("#*")||n.includes("*")||n.length===0)return!0;throw new Error("hl: outcome coin not allowed")}if(n.length&&!n.includes(t)&&!n.includes("*"))throw new Error("hl: coin not allowed");return!0}function pn(e,r,t){let n=Array.isArray(t.hlMarkets)?t.hlMarkets:[];if(n.length){if(!n.some(a=>{if(typeof a=="string"){let[s,c]=String(a).split(":");return s===e&&Number(c)===r}return String(a?.coin)===e&&Number(a?.assetId)===r}))throw new Error("hl: coin/assetId pair not allowed");return!0}if(Ce(e)){let i=Array.isArray(t.coins)?t.coins.map(String):[];if(i.includes("#*")||i.includes("*")||i.length===0)return!0;throw new Error("hl: restricted coin policy requires hlMarkets pairs")}let o=Array.isArray(t.coins)?t.coins.map(String):[];if(o.length&&!o.includes("*"))throw new Error("hl: restricted coin policy requires hlMarkets pairs");return!0}function st(e,r){if(e?.surface!=="hl")throw new Error("hl: surface hl required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: structured artifact required");let n=J(t.kind,"kind",48),o=on[n];if(!o)throw new Error("hl: unsupported Hyperliquid kind");if(e.action!==o)throw new Error("hl: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="hyperliquid")throw new Error("hl: destination must be hyperliquid");if(!/^0x[0-9a-fA-F]{40}$/.test(String(e.owner||"")))throw new Error("hl: owner required");let i=fn(t.submitTo);if(Object.prototype.hasOwnProperty.call(t,"vaultAddress"))throw new Error("hl: vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t,"expiresAfter"))throw new Error("hl: expiresAfter is not public");let a=Number(t.nonce);if(!Number.isSafeInteger(a)||a<=0)throw new Error("hl: nonce must be a positive integer");if(!t.action||typeof t.action!="object")throw new Error("hl: signed action required");if(Object.prototype.hasOwnProperty.call(t.action,"vaultAddress"))throw new Error("hl: action vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t.action,"expiresAfter"))throw new Error("hl: action expiresAfter is not public");if(t.action.type!==an[n])throw new Error("hl: action type must match kind");let s=t.notionalUsd??0;if(nn.has(n)||n==="perp-cancel"||n==="perp-leverage"||n==="perp-isolated-margin"){let c=J(t.coin,"coin",64),u=t.assetId??t.assetIndex;if(!Number.isSafeInteger(u)||u<0)throw new Error("hl: assetId required");if(n==="hip4-order"||u>=1e8){let f=Le(c);if(!f||f.coin!==c)throw new Error("hl: HIP-4 actions must use a canonical outcome coin");if(f.assetId!==u)throw new Error("hl: HIP-4 coin must bind to its canonical assetId")}if(dn(c,r),pn(c,u,r),n==="hip4-order"&&!Ce(c))throw new Error("hl: HIP-4 orders must use an outcome coin");if(n==="perp-order"||n==="hip3-order"||n==="hip4-order"||n==="perp-bracket"){if(t.side!=="buy"&&t.side!=="sell")throw new Error("hl: side must be buy or sell");if(t.action.type!=="order"||!Array.isArray(t.action.orders))throw new Error("hl: signed orders are required");cn(t);let f=t.action.orders;if(n==="perp-bracket"){let l=t.takeProfitPx,d=t.stopLossPx,p=1+(l==null?0:1)+(d==null?0:1);if(p<2||f.length!==p||t.grouping!=="normalTpsl"||t.action.grouping!==t.grouping)throw new Error("hl: bracket must contain exactly the declared entry and protection legs");it(f[0],t,u);let m=1;l!=null&&at(f[m++],t,u,l,"tp"),d!=null&&at(f[m],t,u,d,"sl")}else{if(f.length!==1)throw new Error("hl: exactly one signed order is required");if(t.grouping!=="na"||t.action.grouping!==t.grouping)throw new Error("hl: signed grouping must match declared grouping");it(f[0],t,u)}un(f[0],t,r),ln(t,r),s=S(t.notionalUsd,"hl: notionalUsd")}if(n==="perp-leverage"){let f=t.leverage;if(!Number.isSafeInteger(f)||f<1)throw new Error("hl: leverage must be a positive integer");let l=r.maxLeverage==null?50:r.maxLeverage;if(typeof l!="number"||!Number.isSafeInteger(l)||l<1)throw new Error("hl: maxLeverage must be a positive integer");if(f>l)throw new Error("hl: leverage exceeds cap")}if(n==="perp-cancel"){let f=t.action.cancels;if(!Array.isArray(f)||f.length!==1)throw new Error("hl: exactly one cancel is required");if(!Number.isSafeInteger(f[0].a)||f[0].a!==u)throw new Error("hl: signed cancel asset must match assetId");if(!Number.isSafeInteger(t.orderId)||t.orderId<0)throw new Error("hl: declared order id required");if(!Number.isSafeInteger(f[0].o)||f[0].o!==t.orderId)throw new Error("hl: signed cancel order id must match")}if(n==="perp-leverage"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==u)throw new Error("hl: signed leverage asset must match assetId");if(!Number.isSafeInteger(t.action.leverage)||t.action.leverage!==t.leverage)throw new Error("hl: signed leverage must match");if(!["cross","isolated"].includes(t.marginMode))throw new Error("hl: declared margin mode required");let f=t.marginMode==="cross";if(typeof t.action.isCross!="boolean"||t.action.isCross!==f)throw new Error("hl: signed isCross must match declared margin mode")}if(n==="perp-isolated-margin"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==u)throw new Error("hl: signed margin asset must match assetId");let f=J(t.usd,"margin usd",64),l=T(f,6,"hl: margin usd");if(W(t.action.ntli,"hl: signed margin ntli")!==l)throw new Error("hl: signed margin amount must match usd");if(typeof t.isBuy!="boolean"||t.action.isBuy!==t.isBuy)throw new Error("hl: signed margin isBuy must match");let p=T(r.maxNotionalUsd,6,"hl: maxNotionalUsd"),m=l<0n?-l:l;if(m>p)throw new Error("hl: margin notional exceeds cap");s=sn(m,6)}}if(n==="builder-fee-approval"){let c=J(t.builder,"builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(c))throw new Error("hl: builder address required");if(J(t.action.builder,"signed builder",42).toLowerCase()!==c)throw new Error("hl: signed builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(m=>String(m).toLowerCase()):[]).includes(c))throw new Error("hl: builder not allowed");let f=J(t.maxFeeRate,"maxFeeRate",32);if(J(t.action.maxFeeRate,"signed maxFeeRate",32)!==f)throw new Error("hl: signed builder fee must match");if(!/^\d+(?:\.\d+)?%$/.test(f))throw new Error("hl: builder fee rate must be a percent");let l=T(f.slice(0,-1),12,"hl: builder fee percent"),d=T(r.maxBuilderFeeBps,12,"hl: maxBuilderFeeBps");if(d<0n||l*100n>d)throw new Error("hl: builder fee exceeds cap");if(Number(t.action.nonce)!==a)throw new Error("hl: signed builder nonce must match");let p=i.includes("testnet")?"Testnet":"Mainnet";if(t.hyperliquidChain!==p||t.action.hyperliquidChain!==t.hyperliquidChain)throw new Error("hl: signed Hyperliquid chain must match destination");if(t.signatureChainId!=="0x66eee"||t.action.signatureChainId!==t.signatureChainId)throw new Error("hl: signed signature chain id must match")}if(n.startsWith("hype-stake")||n==="hype-delegate"||n==="hype-undelegate"){if(n==="hype-delegate"||n==="hype-undelegate"){let c=n==="hype-undelegate";if(typeof t.action.isUndelegate!="boolean"||t.action.isUndelegate!==c)throw new Error("hl: signed isUndelegate must match delegate kind exactly")}if(r.maxHypeWei!=null&&BigInt(String(t.action.wei??t.caps?.amountHype??"0"))>BigInt(r.maxHypeWei))throw new Error("hl: stake amount exceeds cap")}return Object.freeze({unit:"usd",value:String(s??t.action.wei??0),notional:String(s??0),fee:"0",kind:n,actionType:t.action.type,amount:String(t.action.wei??s??0),coin:t.coin||null,submitTo:i})}var Li="0x"+"00".repeat(32);function mn(e){let r=typeof e=="bigint"?e:B(e,"poly: atomicUsdc");if(r<=0n)throw new Error("poly: order amounts must be positive integer micro-units");let t=r/1000000n,n=(r%1000000n).toString().padStart(6,"0").replace(/0+$/,"");return n?`${t.toString()}.${n}`:t.toString()}function ct(e,r){let t=B(e.makerAmount,"poly: makerAmount"),n=B(e.takerAmount,"poly: takerAmount");return mn(r==="BUY"?t:n)}var hn=new Set(["https://clob.polymarket.com/order"]),ae=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),_i=Object.freeze(ae.map(e=>e[0])),wn=new Set(["0xe111180000d2663c0091e4f400237545b87b996b","0xe2222d279d744050d28e00520010520000310f59"]),gn="0xe111180000d2663c0091e4f400237545b87b996b",En="0xe2222d279d744050d28e00520010520000310f59",ut=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`poly: bounded ${r} required`);return e};function lt(e){let r=String(e||"").replace(/\/$/,"");if(!hn.has(r))throw new Error("poly: submitTo must be the official Polymarket CLOB");return r}function ft(e){let r=P(e,"poly: exchange").toLowerCase();if(!wn.has(r))throw new Error("poly: verifyingContract must be an official CTF Exchange");return r}function dt(e,r){if(e?.surface!=="poly")throw new Error("poly: surface poly required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("poly: structured artifact required");let n=ut(t.kind,"kind",48);if(n!=="poly-order")throw new Error("poly: unsupported Polymarket kind");if(e.action!=="order")throw new Error("poly: surface/action/kind mismatch");if(P(e.destination,"poly: destination").toLowerCase()!=="polymarket")throw new Error("poly: destination must be polymarket");if(lt(t.submitTo),t.chainId!==137)throw new Error("poly: chainId must be Polygon 137");let o=t.domain;if(!o||typeof o!="object")throw new Error("poly: EIP-712 domain required");if(o.name!=="Polymarket CTF Exchange"||o.version!=="2"||o.chainId!==137)throw new Error("poly: EIP-712 domain must be official CTF Exchange v2 on Polygon");if(ft(o.verifyingContract),ft(t.exchange),P(o.verifyingContract,"poly: verifyingContract").toLowerCase()!==P(t.exchange,"poly: exchange").toLowerCase())throw new Error("poly: exchange/domain mismatch");if(typeof t.negRisk!="boolean")throw new Error("poly: negRisk must be a boolean");let i=t.negRisk?En:gn;if(P(t.exchange,"poly: exchange").toLowerCase()!==i)throw new Error("poly: negRisk/exchange mismatch");let a=t.message||t.value;if(!a||typeof a!="object")throw new Error("poly: signed order message required");let s=t.types?.Order;if(!Array.isArray(s)||s.length!==ae.length)throw new Error("poly: EIP-712 Order type must be official CLOB v2");for(let x=0;x<ae.length;x+=1)if(s[x]?.name!==ae[x][0]||s[x]?.type!==ae[x][1])throw new Error("poly: EIP-712 Order type must be official CLOB v2");if((t.orderType||"GTC")!=="GTC")throw new Error("poly: only GTC is public");let c=String(e.owner||"").toLowerCase();if(P(a.maker,"poly: maker").toLowerCase()!==c)throw new Error("poly: maker must equal owner");if(P(a.signer,"poly: signer").toLowerCase()!==c)throw new Error("poly: signer must equal owner");if(a.signatureType!==0)throw new Error("poly: only EOA signatureType 0 is public");if(typeof a.builder!="string"||a.builder.toLowerCase()!==`0x${"00".repeat(32)}`)throw new Error("poly: builder must be zero");if(a.side!==0&&a.side!==1)throw new Error("poly: side must be BUY or SELL");let u=ut(t.tokenId,"tokenId",80);if(P(a.tokenId,"poly: tokenId")!==u)throw new Error("poly: tokenId mismatch");let f=Array.isArray(r.polyTokens)?r.polyTokens.map(String):[];if(f.length&&!f.includes(u)&&!f.includes("*"))throw new Error("poly: tokenId not allowed");let l=Number(a.side)===0?"BUY":"SELL";if(t.side&&t.side!==l)throw new Error("poly: side mismatch");let d=B(a.makerAmount,"poly: makerAmount"),p=B(a.takerAmount,"poly: takerAmount"),m=B(t.makerAmount,"poly: prepared makerAmount"),w=B(t.takerAmount,"poly: prepared takerAmount");if(d!==m)throw new Error("poly: signed makerAmount differs from prepared envelope");if(p!==w)throw new Error("poly: signed takerAmount differs from prepared envelope");let h=l==="BUY"?d:p,E=l==="BUY"?p:d,A=T(t.quantity,6,"poly: quantity");if(A<=0n||A!==E)throw new Error("poly: quantity must match CLOB v2 amounts");let y=T(t.price,6,"poly: price");if(y<=0n||y>=1000000n)throw new Error("poly: price must be within (0,1)");if(E*y!==h*1000000n)throw new Error("poly: price must match CLOB v2 amounts");if(T(t.notionalUsdc,6,"poly: notionalUsdc")!==h)throw new Error("poly: notionalUsdc must match CLOB v2 amounts");let k=ct(a,l);if(T(k,6,"poly: displayed notionalUsdc")!==h)throw new Error("poly: displayed notionalUsdc must match CLOB v2 amounts");let N=r.maxNotionalUsd??r.maxNotionalUsdc;if(N!=null){let x=T(N,6,"poly: maxNotionalUsd");if(h>x)throw new Error("poly: notional exceeds cap")}return Object.freeze({unit:"usdc",value:h.toString(),notional:h.toString(),fee:"0",kind:n,tokenId:u,side:l,makerAmount:d.toString(),takerAmount:p.toString(),price:String(t.price),quantity:String(t.quantity),notionalUsdc:k,submitTo:lt(t.submitTo)})}var xn=new Set(["https://mainnet.zklighter.elliot.ai/api/v1/sendTx","https://testnet.zklighter.elliot.ai/api/v1/sendTx"]),mt=14,pt=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`lighter: bounded ${r} required`);return e};function Z(e,r,t){if(!Number.isSafeInteger(e)||e!==r)throw new Error(`lighter: ${t} must be exact numeric ${r}`)}function ht(e){let r=String(e||"").replace(/\/$/,"");if(!xn.has(r))throw new Error("lighter: submitTo must be the official Lighter sendTx");return r}function wt(e,r={}){if(e?.surface!=="lighter")throw new Error("lighter: surface lighter required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("lighter: structured artifact required");let n=pt(t.kind,"kind",48);if(n!=="lighter-order")throw new Error("lighter: unsupported Lighter kind");if(e.action!=="order")throw new Error("lighter: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="lighter")throw new Error("lighter: destination must be lighter");let o=ht(t.submitTo),i=t.marketIndex;if(typeof i!="number"||!Number.isSafeInteger(i)||i<0)throw new Error("lighter: marketIndex required");let a=Number(W(t.accountIndex,"lighter: accountIndex"));if(!Number.isSafeInteger(a)||a<0)throw new Error("lighter: accountIndex required");let s=Number(W(t.clientOrderIndex,"lighter: clientOrderIndex"));if(!Number.isSafeInteger(s)||s<0)throw new Error("lighter: clientOrderIndex required");Z(t.orderType,0,"orderType"),Z(t.timeInForce,1,"timeInForce"),Z(t.reduceOnly,0,"reduceOnly"),Z(t.triggerPrice,0,"triggerPrice"),Z(t.orderExpiry,-1,"orderExpiry");let c=pt(t.symbol||t.coin,"symbol",32),u=Array.isArray(r.lighterMarkets)?r.lighterMarkets.map(String):[];if(u.length&&!u.includes(c)&&!u.includes(String(i))&&!u.includes("*"))throw new Error("lighter: market not allowed");if(t.side!=="buy"&&t.side!=="sell")throw new Error("lighter: side must be buy or sell");let f=B(t.baseAmount,"lighter: baseAmount"),l=B(t.price,"lighter: price");if(f>BigInt(Number.MAX_SAFE_INTEGER)||l>BigInt(Number.MAX_SAFE_INTEGER))throw new Error("lighter: baseAmount and price must be safe integers");let d=Number(f),p=Number(l),m=Number(t.sizeDecimals??0),w=Number(t.priceDecimals??0);if(!Number.isInteger(m)||m<0||m>12)throw new Error("lighter: sizeDecimals required");if(!Number.isInteger(w)||w<0||w>12)throw new Error("lighter: priceDecimals required");let h=m+w,E=f*l,A=T(t.notionalUsd,h,"lighter: notionalUsd");if(A<=0n)throw new Error("lighter: notionalUsd required");if(E!==A)throw new Error("lighter: notionalUsd must match size and price");let y=T(r.maxNotionalUsd??Number.MAX_SAFE_INTEGER,h,"lighter: maxNotionalUsd");if(E>y)throw new Error("lighter: notional exceeds cap");let v=S(t.notionalUsd,"lighter: notionalUsd");return Z(t.txType,mt,"txType"),Object.freeze({unit:"usd",value:String(v),notional:String(v),fee:"0",kind:n,symbol:c,marketIndex:i,side:t.side,baseAmount:d,price:p,submitTo:o,actionType:"create-order",amount:String(v)})}var St=new Set(["evm","evm-swap","evm-bridge","evm-nft","btc","sol","hl","poly","lighter"]);var Pe=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0,delegate:0}),bn=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),At=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),yn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),ge=new yt(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),gt=new yt(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Sn=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var ce=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},g=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},Et=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},An=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},I=(e,r,t)=>{if(!An(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},se=(e,r,t)=>{Array.isArray(r)&&r.length&&I(e,r,t)},b=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},K=e=>String(e||"0x").slice(0,10).toLowerCase(),vt=e=>g(e.gasLimit,"gasLimit")*g(e.maxFeePerGas??e.gasPrice,"feePerGas")+g(e.l1FeeWei??0,"l1FeeWei")+g(e.operatorFeeWei??0,"operatorFeeWei");function ee(e,r,t,{dynamicTail:n=!1}={}){let o=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(o)||o.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&o.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:o,word:i=>o.slice(10+i*64,10+(i+1)*64)}}function L(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function q(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function vn(e){if(K(e)!=="0x095ea7b3")return null;let r=ee(e,2,"approval");return{kind:"approval",spender:L(r.word(0),"approval spender"),amount:q(r.word(1),"approval amount")}}function Tt(e,r){let t=r==="router02-exact-input-single"?7:8,n=ee(e,t,"Uniswap v3 exactInputSingle"),o=t===7?4:5;return{kind:"action",action:"swap",inputToken:L(n.word(0),"input token"),outputToken:L(n.word(1),"output token"),recipient:L(n.word(3),"recipient"),amountIn:q(n.word(o),"amountIn"),minimumOut:q(n.word(o+1),"amountOutMinimum")}}function Tn(e){let r=ee(e,12,"Across depositV3",{dynamicTail:!0}),t=q(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let o=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(o))throw new Error("envelope: malformed Across depositV3 message length");let i=Math.ceil(o/32)*64;if(r.hex.length!==n+64+i)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:L(r.word(0),"depositor"),recipient:L(r.word(1),"recipient"),inputToken:L(r.word(2),"input token"),outputToken:L(r.word(3),"output token"),amountIn:q(r.word(4),"inputAmount"),minimumOut:q(r.word(5),"outputAmount"),destinationChainId:q(r.word(6),"destinationChainId")}}function In(e){let r=String(e||"").replace(/^0x/i,"").toLowerCase();if(r.length<86||r.length%2!==0)throw new Error("envelope: malformed Uniswap path");let t=`0x${r.slice(0,40)}`,n=`0x${r.slice(r.length-40)}`;if(!/^0x[0-9a-f]{40}$/.test(t)||!/^0x[0-9a-f]{40}$/.test(n))throw new Error("envelope: malformed Uniswap path tokens");return{inputToken:t,outputToken:n}}function xt(e,{hasDeadline:r}){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<74)throw new Error("envelope: malformed exactInput calldata");let n=[];for(let h=10;h+64<=t.length;h+=64)n.push(t.slice(h,h+64));let o=(h,E)=>{if(!n[h])throw new Error(`envelope: malformed ${E}`);return BigInt(`0x${n[h]}`)},i=Number(o(0,"exactInput struct offset"));if(i%32!==0)throw new Error("envelope: malformed exactInput struct offset");let a=i/32,s=Number(o(a,"path offset")),c=n[a+1],u=o(a+(r?3:2),"amountIn"),f=o(a+(r?4:3),"amountOutMinimum"),l=a+s/32;if(!Number.isInteger(l)||!n[l])throw new Error("envelope: malformed exactInput path");let d=Number(o(l,"path length")),p=t.slice(10+(l+1)*64,10+(l+1)*64+d*2),{inputToken:m,outputToken:w}=In(`0x${p}`);return{kind:"action",action:"swap",inputToken:m,outputToken:w,recipient:L(c,"recipient"),amountIn:u,minimumOut:f}}function kn(e){let r=ee(e,8,"Aerodrome exactInputSingle");return{kind:"action",action:"swap",inputToken:L(r.word(0),"input token"),outputToken:L(r.word(1),"output token"),recipient:L(r.word(3),"recipient"),amountIn:q(r.word(5),"amountIn"),minimumOut:q(r.word(6),"amountOutMinimum")}}function Nn(e){let r=String(e||"").toLowerCase();if(!r.startsWith("0x5ae401dc"))throw new Error("envelope: malformed Uniswap multicall");let t=[];for(let d=10;d+64<=r.length;d+=64)t.push(r.slice(d,d+64));let n=Number(BigInt(`0x${t[1]}`));if(n%32!==0)throw new Error("envelope: malformed multicall data offset");let o=n/32;if(Number(BigInt(`0x${t[o]}`))!==1)throw new Error("envelope: multicall must wrap exactly one swap");let a=Number(BigInt(`0x${t[o+1]}`)),s=o+1+a/32,c=Number(BigInt(`0x${t[s]}`)),f=`0x${r.slice(10+(s+1)*64,10+(s+1)*64+c*2)}`,l=K(f);if(l!=="0x04e45aaf"&&l!=="0x414bf389")throw new Error("envelope: multicall inner call must be exactInputSingle");return Tt(f,l==="0x04e45aaf"?"router02-exact-input-single":"swap-router-exact-input-single")}function On(e,r){let t=K(e),n=At[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.layout==="router02-exact-input-single"||n.layout==="swap-router-exact-input-single")return{...Tt(e,n.layout),selector:t,provider:n.provider};if(n.layout==="exact-input-deadline")return{...xt(e,{hasDeadline:!0}),selector:t,provider:n.provider};if(n.layout==="exact-input")return{...xt(e,{hasDeadline:!1}),selector:t,provider:n.provider};if(n.layout==="multicall-deadline")return{...Nn(e),selector:t,provider:n.provider};if(n.layout==="aerodrome-exact-input-single")return{...kn(e),selector:t,provider:n.provider};if(n.action==="bridge")return{...Tn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function Ln(e){let r=ee(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",mintType:"public",contract:L(r.word(0),"mint NFT contract"),feeRecipient:L(r.word(1),"mint fee recipient"),recipient:L(r.word(2),"mint recipient"),quantity:q(r.word(3),"mint quantity")}}function Cn(e){let r;try{r=gt.decodeFunctionData("mintAllowList",e)}catch{throw new Error("envelope: malformed SeaDrop mintAllowList calldata")}let t=r[4],n=[...r[5]].map(String);if(n.length<1||n.length>64||n.some(c=>!/^0x[0-9a-fA-F]{64}$/.test(c)))throw new Error("envelope: bounded canonical SeaDrop allowlist proof required");if(gt.encodeFunctionData("mintAllowList",[r[0],r[1],r[2],r[3],t,n]).toLowerCase()!==String(e).toLowerCase())throw new Error("envelope: SeaDrop allowlist calldata must be canonical");let i=BigInt(t.startTime),a=BigInt(t.endTime);if(a<=i)throw new Error("envelope: SeaDrop allowlist stage time range is invalid");let s=BigInt(r[3]);if(BigInt(t.maxTotalMintableByWallet)<s)throw new Error("envelope: SeaDrop allowlist wallet cap is below quantity");return{kind:"mint",action:"mint",mintType:"allowlist",contract:b(r[0],"mint NFT contract"),feeRecipient:b(r[1],"mint fee recipient"),recipient:b(r[2],"mint recipient"),quantity:s,mintPrice:BigInt(t.mintPrice),startTime:i,endTime:a,dropStageIndex:BigInt(t.dropStageIndex),proof:n}}function Pn(e,r){let t=K(e);if(String(r).toLowerCase()==="nft-mint")return Bn(e);let n=yn[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...Ln(e),selector:t,provider:n.provider};if(n.layout==="seadrop-mint-allowlist")return{...Cn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function Bn(e){let r=K(e);if(r==="0x40c10f19")throw new Error("envelope: ambiguous mint(address,uint256) calldata is not a built-in signer surface");let t=Sn[r];if(!t)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(t.layout==="mint-no-args")return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:1n};if(t.layout==="mint-quantity"){let n=ee(e,1,"generic NFT mint");return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:q(n.word(0),"mint quantity")}}throw new Error("envelope: unsupported generic NFT mint calldata")}function ue(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function It(e,r,t,{nowMs:n=Date.now(),networkFees:o,requireNetworkFees:i=!1}={}){let a=b(e.owner,"owner"),s=e.artifact,c=Number(s?.chainId??ue(e)[0]?.chainId);if(!Number.isSafeInteger(c)||c<=0)throw new Error("envelope: explicit batch chainId required");if(I(c,r.chains,"chain"),s?.owner!==void 0&&b(s.owner,"batch owner")!==a)throw new Error("envelope: explicit batch owner mismatch");let u=ue(e);if(!u.length||u.length>8)throw new Error("envelope: bounded EVM transaction batch required");let f=0n,l=0n,d=0n;for(let p of u){if(!p||typeof p!="object"||Array.isArray(p))throw new Error("envelope: structured EVM transaction required");if(Number(p.chainId)!==c)throw new Error("envelope: every batch leg must use the same chain");if(b(p.from,"transaction owner")!==a)throw new Error("envelope: every batch leg must use the same owner");if(I(K(p.data),r.selectors,"selector"),f+=g(p.value??0,"value"),l+=g(p.gasLimit,"gasLimit"),d+=vt(p),j(c)&&(p.l1FeeWei===void 0||p.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(f>g(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(l>g(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(d>g(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:u,chainId:c,owner:a,totalValue:f,totalGas:l,totalFee:d}}function kt(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let o=String(e?.surface||"");if(o!=="evm-swap"&&o!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let i=ce(e.provider,"provider",64).toLowerCase();I(i,r.providers,"provider");let a=It(e,r,o,{nowMs:t}),s=[],c=-1;for(let m=0;m<a.transactions.length;m++){let w=a.transactions[m],h=vn(w.data),E;if(h){if(c!==-1)throw new Error("envelope: approval must be before action");if(g(w.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let v=b(w.to,"approval token");if(I(v,r.tokens,"token"),I(h.spender,r.spenders,"spender"),h.amount>g(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");E={...h,token:v,index:m}}else{if(c!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");I(w.to,r.destinations,"destination"),E={...On(w.data,i),target:b(w.to,"action target"),index:m},c=m}let A=g(w.value??0,"value"),y=g(w.gasLimit,"gasLimit");s.push({...E,value:A,gas:y,fee:vt(w)})}if(c<0)throw new Error("envelope: reviewed swap/bridge action required");let u=s[c],f=o==="evm-swap"?"swap":"bridge";if(u.action!==f||e.action!==f)throw new Error("envelope: surface/action/calldata mismatch");if(b(e.destination,"destination")!==u.target)throw new Error("envelope: destination must equal decoded action target");if(u.recipient!==a.owner)throw new Error("envelope: decoded recipient must equal owner");if(u.depositor&&u.depositor!==a.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(I(u.inputToken,r.tokens,"input token"),I(u.outputToken,r.tokens,"output token"),u.amountIn<=0n||u.amountIn>g(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(u.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(Se(e.autoSlippage,{nowMs:t,chainId:a.chainId,venue:i,tx:a.transactions[c],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(u.minimumOut!==g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(u.action==="bridge"&&g(e.toChainId,"toChainId")!==u.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let l=s.filter(m=>m.kind==="approval");if(!new Set([...bn,...Array.isArray(r.nativeInputTokens)?r.nativeInputTokens.map(m=>String(m).toLowerCase()):[]]).has(u.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(l.length)throw new Error("envelope: native-value action must not include token approval");if(u.value!==u.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let p=Object.freeze({quoteAmountOut:g(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:g(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...a,decoded:s,action:u,provider:i,authenticatedQuote:p}}function _n(e,r,{nowMs:t}){let n=e.anvilAttestation,o=e.artifact?.anvilAttestation;if(!n||typeof n!="object"||Array.isArray(n))throw new Error("envelope: Anvil attestation is required");if(!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: Anvil attestation artifact mismatch");if(Number(n.version)!==1||n.source!=="anvil-snapshot-rpc-reviewed-runtime")throw new Error("envelope: unsupported Anvil attestation");if(Number(n.chainId)!==4663)throw new Error("envelope: Anvil attestation chain mismatch");let i=b(e.destination,"Anvil market"),a=b(e.contract,"NFT contract"),s=b(e.paymentToken,"payment token");if(b(n.market,"attested Anvil market")!==i)throw new Error("envelope: Anvil attestation market mismatch");if(b(n.collection,"attested NFT collection")!==a)throw new Error("envelope: Anvil attestation collection mismatch");if(b(n.paymentToken,"attested payment token")!==s)throw new Error("envelope: Anvil attestation payment token mismatch");let c=Number(e.paymentTokenDecimals??e.artifact?.paymentTokenDecimals);if(!Number.isSafeInteger(c)||c<0||c>255||Number(n.paymentTokenDecimals)!==c)throw new Error("envelope: Anvil payment token decimals mismatch");let u=g(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei").toString();if(g(n.nativeSwapFeeWei,"attested nativeSwapFeeWei").toString()!==u)throw new Error("envelope: Anvil attestation native swap fee mismatch");let f=Number(n.snapshotFetchedAtMs),l=Number(n.snapshotExpiresAtMs);if(!Number.isFinite(f)||!Number.isFinite(l)||f>t||l<=t||l<=f)throw new Error("envelope: Anvil snapshot attestation is stale");let d=g(n.blockNumber,"attested blockNumber");if(d<=0n||!/^0x[0-9a-f]{64}$/.test(String(n.blockHash||"").toLowerCase()))throw new Error("envelope: Anvil block attestation is invalid");let p=String(n.runtimeCodeHash||"").toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(p))throw new Error("envelope: Anvil runtime code hash is invalid");let m=Object.entries(r.anvilRuntimeCodeHashes||{}).find(([h])=>h.toLowerCase()===i)?.[1];if(!m||String(m).toLowerCase()!==p)throw new Error("policy: Anvil runtime code hash is not reviewed");let w=Object.entries(r.nftPaymentTokenCaps||{}).find(([h])=>h.toLowerCase()===s)?.[1];if(!w||Number(w.decimals)!==c)throw new Error("policy: Anvil payment token decimals are not reviewed");return Object.freeze({...n,market:i,collection:a,paymentToken:s,paymentTokenDecimals:c,runtimeCodeHash:p,blockNumber:d})}function bt(e,r){let t=e.artifact,n=e.anvilQuote,o=t?.anvilQuote;if(!n||typeof n!="object"||Array.isArray(n)||!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: exact Anvil quote artifact mismatch");if(e.preconditions?.exactQuoteConfirmed!==!0)throw new Error("envelope: exact Anvil quote confirmation required");let i=r==="buy"?[[n.totalCostRaw,"anvilQuote.totalCostRaw"],[e.maxPaymentTokenAmountRaw,"maxPaymentTokenAmountRaw"],[t?.maxPaymentTokenAmountRaw,"artifact maxPaymentTokenAmountRaw"],[e.exactQuoteTotalCostRaw,"exactQuoteTotalCostRaw"],[t?.exactQuoteTotalCostRaw,"artifact exactQuoteTotalCostRaw"],[e.preconditions?.confirmedTotalCostRaw,"confirmedTotalCostRaw"]]:[[n.netPayoutRaw,"anvilQuote.netPayoutRaw"],[e.minPayoutRaw,"minPayoutRaw"],[t?.minPayoutRaw,"artifact minPayoutRaw"],[e.exactQuoteNetPayoutRaw,"exactQuoteNetPayoutRaw"],[t?.exactQuoteNetPayoutRaw,"artifact exactQuoteNetPayoutRaw"],[e.preconditions?.confirmedNetPayoutRaw,"confirmedNetPayoutRaw"]],a=g(i[0][0],i[0][1]);for(let[s,c]of i.slice(1))if(g(s,c)!==a)throw new Error(`envelope: Anvil ${r} exact settlement limit mismatch`);return a}function Nt(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint or NFT action");let n=ce(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();se(n,r.providers,"provider");let o=It(e,r,"evm-nft",{nowMs:t});if(n==="anvil-nft"){if(e.action!=="nft")throw new Error("envelope: Anvil requires NFT action");if(o.chainId!==4663)throw new Error("envelope: Anvil requires chain 4663");if(r.confirmationMode!=="exact-human")throw new Error("policy: Anvil requires exact-human confirmation");if(o.transactions.length!==1)throw new Error("envelope: Anvil requires one atomic action with pre-existing approval");if(Number(e.slippageBps)!==0)throw new Error("envelope: Anvil exact limit requires zero slippageBps");let[p]=o.transactions,m=b(e.destination,"Anvil market");if(b(p.to,"Anvil action target")!==m)throw new Error("envelope: Anvil action target mismatch");I(m,r.destinations,"destination");let w=b(e.contract??e.artifact?.contract,"NFT contract");if(se(w,r.nftContracts,"NFT contract"),b(e.marketCollection??e.artifact?.marketCollection,"Anvil market collection")!==w)throw new Error("envelope: Anvil market collection mismatch");let E=b(e.paymentToken??e.artifact?.paymentToken,"payment token");se(E,r.erc20Tokens,"ERC20 token");let A=_n(e,r,{nowMs:t}),y=g(e.tokenId??e.artifact?.tokenId,"tokenId"),v=g(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei");if(o.totalValue!==v||g(p.value??0,"Anvil action value")!==v)throw new Error("envelope: Anvil native swap fee mismatch");if(v>g(r.maxNativeSwapFeeWei,"maxNativeSwapFeeWei"))throw new Error("policy: Anvil native swap fee exceeds cap");let k=ce(e.nftAction,"nftAction",8).toLowerCase(),N;if(k==="buy"){let x=bt(e,k),X=Object.entries(r.nftPaymentTokenCaps||{}).find(([Fe])=>Fe.toLowerCase()===E)?.[1];if(!X)throw new Error("policy: Anvil payment-token cap required");if(x>g(X.maxPerTradeRaw,"maxPerTradeRaw"))throw new Error("policy: Anvil payment amount exceeds cap");if(e.preconditions?.allowanceVerified!==!0||g(e.preconditions?.allowanceRaw,"allowanceRaw")<x)throw new Error("envelope: Anvil pre-existing allowance proof required");let z=ge.decodeFunctionData("buySpecificNFT",p.data);if(ge.encodeFunctionData("buySpecificNFT",[z[0],z[1]]).toLowerCase()!==String(p.data).toLowerCase())throw new Error("envelope: non-canonical Anvil buy calldata");if(BigInt(z[0])!==y)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(z[1])!==x)throw new Error("envelope: Anvil maxCost mismatch");N={kind:"nft",action:"buy",tokenId:y,maxPaymentTokenAmountRaw:x,target:m}}else if(k==="sell"){let x=e.preconditions||{},X=b(x.approvedAddress,"NFT approval address");if(x.nftApprovalVerified!==!0||X!==m&&x.approvedForAll!==!0)throw new Error("envelope: Anvil pre-existing NFT approval proof required");let z=bt(e,k),te=ge.decodeFunctionData("sellNFT",p.data);if(ge.encodeFunctionData("sellNFT",[te[0],te[1]]).toLowerCase()!==String(p.data).toLowerCase())throw new Error("envelope: non-canonical Anvil sell calldata");if(BigInt(te[0])!==y)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(te[1])!==z)throw new Error("envelope: Anvil minPayout mismatch");N={kind:"nft",action:"sell",tokenId:y,minPayoutRaw:z,target:m}}else throw new Error("envelope: unsupported Anvil NFT action");return{...o,provider:n,nftAction:k,tokenId:y,paymentToken:E,paymentTokenDecimals:A.paymentTokenDecimals,anvilAttestation:A,decoded:[N]}}let i=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;if(i?.oraclePrepared===!0&&Ue(i,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"}),o.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let a=o.transactions[0],s=K(a.data);I(s,r.selectors,"selector"),I(a.to,r.destinations,"destination");let c=Pn(a.data,n),u=b(e.contract??e.artifact?.contract,"NFT contract");if(se(u,r.nftContracts,"NFT contract"),(c.contract||b(a.to,"NFT contract"))!==u)throw new Error("envelope: mint calldata NFT contract mismatch");if(c.recipient&&c.recipient!==o.owner)throw new Error("envelope: mint calldata recipient mismatch");c.feeRecipient&&se(c.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let l=g(e.quantity??e.artifact?.quantity,"quantity");if(l<=0n||l>g(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(c.quantity!==l)throw new Error("envelope: mint calldata quantity mismatch");let d=g(e.totalWei??e.artifact?.totalWei,"totalWei");if(o.totalValue!==d)throw new Error("envelope: mint value does not match declared totalWei");if(c.mintType==="allowlist"){let p=BigInt(Math.floor(t/1e3));if(c.startTime>p||c.endTime<=p)throw new Error("policy: SeaDrop allowlist stage is not open");if(c.mintPrice*l!==d)throw new Error("envelope: SeaDrop allowlist price does not match declared totalWei")}if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&g(e.priceWei??e.artifact.priceWei,"priceWei")*l!==d)throw new Error("envelope: mint price does not match declared totalWei");if(d>g(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...o,provider:n,decoded:[{...c,target:b(a.to,"mint target"),value:o.totalValue,gas:o.totalGas,fee:o.totalFee}]}}function Ot(e,{localsWaiver:r=!1}={}){if(!(e in Pe))throw new Error("fee: unknown action");return r?0:Pe[e]}function le(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:o,networkFees:i,requireNetworkFees:a=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let s=ce(e.surface,"surface",16);if(!St.has(s))throw new Error("envelope: unsupported public surface");let c=ce(e.action,"action",32);I(s,r.surfaces,"surface"),I(c,r.actions,"action"),I(e.owner,r.owners,"owner"),I(e.destination,r.destinations,"destination");let u=Et(r.maxTtlMs,"maxTtlMs"),f=Et(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>u)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>f)throw new Error("policy: slippage exceeds cap");let l=e.artifact;if(!l||typeof l!="object"||Array.isArray(l))throw new Error("envelope: structured artifact required");if(s==="evm-swap"||s==="evm-bridge")kt(e,r,{nowMs:t,routeAttestationSecret:o});else if(s==="evm-nft")Nt(e,r,{nowMs:t});else if(s==="evm"){if(!["transfer","approve"].includes(c))throw new Error("envelope: generic evm requires transfer or approve; use strict evm-nft for mint action");if(c==="swap"||c==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(String(l.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(l.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");me({...l,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:i,requireNetworkFees:a});let m=String(l.data||"0x").toLowerCase(),w=g(l.value,"EVM value");if(m==="0x"){if(w===0n)throw new Error("envelope: native EVM transfer value required")}else if(G(m)){if(w!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else s==="btc"?ze(e,r):s==="sol"?nt(e,r):s==="hl"?st(e,r):s==="poly"?dt(e,r):s==="lighter"&&wt(e,r);let d=Number(e.fee?.oracleFeeBps)===0&&Pe[c]!==0;if(e.fee?.waiver||d&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(d&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let p=Ot(c,{localsWaiver:d});if(Number(e.fee?.oracleFeeBps)!==p)throw new Error("fee: final artifact fee mismatch");return!0}var Ee=Object.freeze([...St]),Fn=Object.freeze({...At});function Mn(e={}){let r={};for(let t of Ee){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(o,i)=>n.simulate(structuredClone(o),structuredClone(i)),sign:(o,i)=>n.sign(structuredClone(o),structuredClone(i)),broadcast:(o,i,a)=>n.broadcast(o,structuredClone(i),structuredClone(a))})}}return Object.freeze(r)}function $n(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as ca}from"@noble/curves/ed25519.js";import{base58 as Rn}from"@scure/base";import{RawTx as fa,SigHash as da,Transaction as qn}from"@scure/btc-signer";import{Transaction as Dn,keccak256 as Lt,verifyTypedData as ma}from"ethers";import{encode as Ki}from"@msgpack/msgpack";import{keccak256 as Qi,verifyTypedData as Zi}from"ethers";var ea=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),ta=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Ct=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function Un(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let o=e[n++];if(r|=(o&127)<<t,(o&128)===0)return{value:r,offset:n};t+=7}return null}function Pt(e,r){try{if(String(e).startsWith("evm"))return Dn.from(r).hash;if(e==="btc"){let t=Ct(r);if(!t)return null;let n=qn.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=Ct(r);if(!t)return null;let n=Un(t);if(!n||n.value!==1)return null;let o=t.subarray(n.offset,n.offset+64);return o.length===64?Rn.encode(o):null}if(e==="hl"&&typeof r=="string"&&r.startsWith("0x"))return Lt(r);if(e==="poly"&&typeof r=="string"&&r.startsWith("0x"))return Lt(r)}catch{}return null}var Jn=e=>String(e||"").toLowerCase();function V(e){return Wn("sha256").update(JSON.stringify(e)).digest("hex")}function be(e,r,t={}){return me(e,r,t)}async function Vn(e,r={}){if(!j(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function _t(e,r,t=!1){if(!j(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),o=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<o)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function zn(e,r={}){return renderConfirmationArtifact(e,V(e),r)}var fe=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let o=Hn(32).toString("hex");return this.#e.set(o,{digest:V(r),owner:Jn(t),expiresAtMs:this.now()+n}),o}consume(r,t){let n=this.#e.get(String(r));if(!n)throw new Error("confirmation: used or unknown nonce");if(n.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let o=Buffer.from(n.digest,"hex"),i=Buffer.from(V(t),"hex");if(!jn(o,i))throw new Error("confirmation: artifact mismatch");return this.#e.delete(String(r)),n}clear(){this.#e.clear()}};function Gn(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if(G(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function Yn(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function xe(e,r){let t=String(r||"");if(String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=Bt.decode(t);return n.length===64&&Bt.encode(n)===t}catch{return!1}return e==="hl"?/^0x[0-9a-fA-F]{64}$/.test(t):e==="poly"?/^0x[0-9a-fA-F]{64}$/.test(t):!1}function Ft(e,r,t){return!xe(e,r)||!xe(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function Kn(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function Be({artifact:e,envelope:r,nonce:t,deps:n,policy:o,confirmation:i,consumeNonce:a,nowMs:s}){let c=Kn(o);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(c!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,s())!==!0)throw new Error("signer: autonomous trigger attestation required");return i}if(c!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(a)return n.confirmations.consume(t,e);if(!i||!Number.isFinite(i.expiresAtMs)||i.expiresAtMs<=s())throw new Error("confirmation: expired nonce");return i}function Xn(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Qn(e,r){return e&&Xn(e.surface)?ue(e):[r]}function Zn(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!Ft(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function eo(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:Yn(t,n)}}async function _e(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=e?.version===1&&e?.surface?e:null,o=n?n.artifact:(()=>{let{tradeId:h,...E}=e||{};return E})(),i=Qn(n,o),a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,s=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),c=await Be({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:null,consumeNonce:!0,nowMs:s}),u=V(e),f=(h={})=>{n?le(n,a,h):(be(o,a,{nowMs:h.nowMs,networkFees:h.networkFees,requireNetworkFees:h.requireNetworkFees}),Gn(o))},l=async h=>{let E=n&&!String(n.surface||"").startsWith("evm")?void 0:await Vn(h,t);return{nowMs:s(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:E,requireNetworkFees:j(h?.chainId)}};f({nowMs:s(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let h of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[h]!="function")throw new Error(`signer: ${h} is required`);let d=t.reserveLedger(n||e,a);if(!d)throw new Error("signer: ledger reservation required");let p=!1,m=[];try{for(let h of i){if(typeof t.simulate!="function"||await t.simulate(h,n)!==!0)throw new Error("signer: strict affirmative simulation required");let E=await l(h);if(_t(h,E.networkFees,E.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,c=await Be({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:c,consumeNonce:!1,nowMs:s}),f(E),t.validateReservation(d,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0),p=!0;let A=await t.sign(h,n);if(typeof t.verifySigned!="function"||await t.verifySigned(A,h,n)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");if(!t.isArmed())throw new Error("signer: disarmed before broadcast");if(V(e)!==u)throw new Error("signer: artifact mutated after signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,c=await Be({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:c,consumeNonce:!1,nowMs:s});let y=await l(h);_t(h,y.networkFees,y.requireNetworkFees),f(y),t.validateReservation(d,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0);let v=await t.broadcast(A,h,n),k=v?.status,N=n?.surface||"evm",x=Zn(v,N),X=Pt(N,A);if(!Ft(N,x,X))throw new Error("signer: receipt transaction hash does not match signed bytes");if(k===0||k==="0x0")throw xe(N,x)?(t.settleFailedLedger(d),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(k!==1&&k!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!xe(N,x))throw new Error("signer: successful broadcast requires a valid transaction hash");m.push(eo(v,x))}}catch(h){throw p||t.releaseLedger(d),h}if(t.commitLedger(d),m.length===1){let h={receipt:m[0]};return n?.surface==="evm-bridge"&&(h.originStatus="success",h.destinationStatus="unverified",h.destinationSuccess=!1,h.note="Origin-chain receipts do not prove destination-chain settlement."),h}let w={receipts:m,status:"success"};return n?.surface==="evm-bridge"&&(w.originStatus="success",w.destinationStatus="unverified",w.destinationSuccess=!1,w.note="Origin-chain receipts do not prove destination-chain settlement."),w}import to from"node:http";import{timingSafeEqual as ro}from"node:crypto";var Mt=new Set(["127.0.0.1","::1","localhost"]),no=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&ro(t,n)},C=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function oo(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var $t=e=>new Promise((r,t)=>{let n=0,o=[],i=!1;e.on("data",a=>{n+=a.length,n>64*1024&&!i?(i=!0,t(new Error("request refused")),e.resume()):i||o.push(a)}),e.on("end",()=>{if(!i)try{r(JSON.parse(Buffer.concat(o).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)});function io(e={}){let r=e.host||"127.0.0.1";if(!Mt.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let i of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[i]!="function")throw new Error(`signer: ${i} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new fe,n=e.origin||`http://${r}`;return to.createServer(async(i,a)=>{try{let s=String(i.headers.authorization||"").replace(/^Bearer /i,"");if(!no(s,e.token))return C(a,401,{error:"unauthorized"});let c=oo(i.headers.host);if(!Mt.has(c))return C(a,403,{error:"host refused"});if(i.headers.origin&&i.headers.origin!==n)return C(a,403,{error:"origin refused"});if(i.method==="GET"&&i.url==="/status"){let u=typeof e.readPolicy=="function"?e.readPolicy():e.policy,f=new Set(Ee),l=Array.isArray(u?.surfaces)?u.surfaces.filter(d=>typeof d=="string"&&f.has(d)):[];return C(a,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:l,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(i.method==="POST"&&i.url==="/disarm")return e.disarm(),t.clear(),C(a,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(i.method))return C(a,405,{error:"request refused"});if(i.method==="POST"&&String(i.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return C(a,415,{error:"request refused"});if(i.method==="POST"&&i.url==="/confirm"){if(e.autonomous===!0)return C(a,403,{error:"autonomous signer does not issue human confirmation nonces"});let u=await $t(i),f=V(u.artifact),l=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(l?.confirmationMode!=="exact-human")return C(a,403,{error:"exact-human policy required"});let d=typeof e.nowMs=="function"?e.nowMs():Date.now();if(u.artifact?.version===1&&u.artifact?.surface)le(u.artifact,l,{nowMs:d,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:p,...m}=u.artifact||{};be(m,l,{nowMs:d})}return typeof e.confirmArtifact!="function"?C(a,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(u.artifact,f,l)!==!0?C(a,400,{error:"exact human confirmation refused"}):C(a,200,{confirmationNonce:t.issue({artifact:u.artifact,owner:u.artifact?.owner??u.artifact?.from,ttlMs:u.ttlMs})})}if(i.method==="POST"&&i.url==="/execute"){let u=await $t(i),f=await _e(u.artifact,u.confirmationNonce,{...e,confirmations:t});return C(a,200,f)}return C(a,404,{error:"not found"})}catch(s){return e.onError?.(String(s?.message||s)),C(a,400,{error:"request refused"})}})}export{fe as ConfirmationStore,Ee as PUBLIC_SIGNER_SURFACES,Fn as REVIEWED_EVM_SELECTORS,V as artifactDigest,be as assertExactPolicy,io as createSignerServer,Mn as createSurfaceAdapters,ue as evmTransactions,_e as executeConfirmedArtifact,zn as inspectArtifactForConfirmation,kt as inspectEvmBatch,Nt as inspectEvmNft,Ot as publicFeeBps,$n as surfaceAdapterFor,le as validateSurfaceEnvelope};