@oracle-agent/oracle 0.28.27 → 0.28.29

package/dist/bin/oracle-public-server.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-var we=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};import Z from"node:net";import Nr from"node:dns";function Ee(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let d=c.split(":"),f=d.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(g=>!Number.isInteger(g)||g<0||g>255))return null;d.splice(d.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return d.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:d.map(u=>Number.parseInt(u,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let a=t.includes("::"),l=8-i.length-s.length;if(!a&&l!==0||a&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(c=>[c>>8,c&255]))}function He(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function Ve(e){if(Z.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(Z.isIPv6(e)){let t=Ee(e);if(!t)return!1;let r=Ee("::ffff:0:0");return He(t,r,96)?Ve([...t.slice(12)].join(".")):He(t,Ee("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>He(t,Ee(o),i)):!1}return!1}function Pr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Cr.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=Z.isIP(r);return n!==0&&!Ve(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function ze(e,{lookupFn:t=Nr.promises.lookup}={}){let r=Pr(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:Z.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!Ve(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function je({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let d=await t();r=d.Agent,n=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(Z.isIPv6(f.address)?6:4)})),a=(d,f,u)=>{i.set(o(d),s(typeof f=="string"?[{address:f,family:u}]:f))},l=d=>{let f=o(d);if(Z.isIP(f))return[{address:f,family:Z.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return u},p=new r({connect:{lookup(d,f,u){let g;try{g=l(d)}catch(E){return u(E)}return f?.all?u(null,g):u(null,g[0].address,g[0].family)}}}),c=$r((d,f={})=>n(d,{...f,dispatcher:p}),a);return{dispatcher:p,fetch:c,pin:a,resolve:l,async close(){try{await p.destroy()}catch{}}}}function $r(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[We]=Object.freeze({pin:t}),e}function Ke(e){return typeof e=="function"&&typeof e[We]?.pin=="function"}function Zt(e,t,r){if(!Ke(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[We].pin(t,r)}var Cr,We,en=we(()=>{Cr=new Set(["localhost","metadata.google.internal","metadata.goog"]);We=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as Rr}from"node:crypto";function Mr(e){let t=String(e||"").toLowerCase();return an.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function Fr(e){let t={};for(let[r,n]of Object.entries(e||{}))Mr(r)||(t[r]=n);return t}function qr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Dr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Hr(e,t,r,n={}){let o={};for(let[c,d]of Object.entries(r||{}))o[c.toLowerCase()]=d;let i=Object.keys(o).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),a=[...new Set([...an,...i])].sort().map(c=>`${c}=${o[c]??""}`).join(`
-`),l=Rr("sha256").update(a).digest("hex").slice(0,32),p=`${n.untrustedUrl?"untrusted":"trusted"}:${n.maxResponseBytes??"unbounded"}`;return`${e} ${t} ${p} ${l}`}function Vr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,nn):Math.min(250*2**e,nn)+Math.floor(Math.random()*100)}function me(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Ye(e,t,r){return me(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function he(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function jr(e){return e?e.byteLength??e.length??0:0}async function on(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(he(e),!n))throw Ye(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!n)throw Ye(r,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let a=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(a.push(Buffer.from(d)),l+=jr(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!n))throw Ye(r,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(p?c.subarray(0,t):c).toString("utf8")}function sn(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Wr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:p=null,importUndici:c,validateResponse:d}){let f=new AbortController,u=setTimeout(()=>f.abort(),i),g=null,E=t,S=s?{lookupFn:s}:{};if(l&&!a&&!Ke(E))throw me(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let I=async(v,{status:k=null}={})=>{let m=await ze(v,S);if(!m.ok)throw me(k==null?`HTTP refused ${v}: ${m.error}`:`HTTP redirect to ${v} ${m.error}`,k==null?{}:{status:k});let y=new URL(v).hostname;if(a){if(g&&(await g.close(),g=null),!g)try{g=await je({requireUndici:!0,...c?{importUndici:c}:{}})}catch(A){throw me(k==null?`HTTP refused ${v}: ${A?.message||A}`:`HTTP redirect to ${v} refused: ${A?.message||A}`,k==null?{}:{status:k})}g.pin(y,m.addresses),E=g.fetch}else Zt(E,y,m.addresses);return m};try{let v=String(e),k={...n||{}};l&&await I(v);for(let m=0;m<=rn;m+=1){let y=await E(v,{method:r,headers:k,body:o,signal:f.signal,redirect:"manual"});if(Ur.has(y.status)){if(r!=="GET"&&r!=="HEAD"){let $=await on(y,p??Br,{url:v,truncate:!0}),j=new Error(`HTTP ${y.status} ${r} ${v} redirected non-idempotent request`);throw j.status=y.status,j.body=sn($)??$.slice(0,300),j}if(m===rn)throw he(y),new Error(`HTTP redirect loop for ${e}`);let N=y.headers?.get?.("location"),L;try{L=qr(N,v)}catch($){throw he(y),$}let H=!Dr(L,v);if(he(y),H&&(k=Fr(k)),l)await I(L,{status:y.status});else if(H){let $=await ze(L,S);if(!$.ok){let j=new Error(`HTTP redirect from ${v} ${$.error}`);throw j.status=y.status,j.retryable=!1,j}a&&$.addresses?.length&&(g||(g=await je(c?{importUndici:c}:{})),g&&(g.pin(new URL(L).hostname,$.addresses),E=g.fetch))}v=L;continue}if(typeof d=="function")try{await d(y,{url:v})}catch(N){throw he(y),me(N?.message||String(N))}let A=await on(y,p,{url:v,onOversize:()=>f.abort()}),P=sn(A);if(!y.ok){let N=new Error(`HTTP ${y.status} ${r} ${v}`);throw N.status=y.status,N.retryAfter=y.headers?.get?.("retry-after")??null,N.body=P??A.slice(0,300),N}return P??A}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(u),g&&await g.close()}}async function O(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let n=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},s=t.body;s!=null&&typeof s!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",s=JSON.stringify(s));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):Lr,l=t.lookupFn,p=!t.fetchImpl,c=t.untrustedUrl===!0,d=t.importUndici,f=t.validateResponse,u=Number(t.maxResponseBytes),g=Number.isFinite(u)&&u>0?Math.floor(u):null,E=async()=>{let m;for(let y=0;y<=a;y++)try{return await Wr(e,{fetchImpl:r,method:o,headers:i,body:s,timeoutMs:n,lookupFn:l,realFetch:p,untrustedUrl:c,maxResponseBytes:g,importUndici:d,validateResponse:f})}catch(A){m=A;let P=A?.status,N=A?.name==="AbortError",L=new Set([408,425,429]),H=A?.retryable===!1?!1:P!=null?L.has(P)||Or.has(P)&&tn.has(o):!N&&tn.has(o);if(y===a||!H)throw A;await zr(Vr(y,A?.retryAfter))}throw m};if(!(t.dedupe!==!1&&o==="GET"&&s==null))return E();let I=Hr(o,e,i,{untrustedUrl:c,maxResponseBytes:g}),v=Ge.get(I);if(v)return v;let k=E().finally(()=>Ge.delete(I));return Ge.set(I,k),k}async function C(e){let t=Date.now();try{let r=await e();return{ok:!0,ms:Date.now()-t,data:r}}catch(r){return{ok:!1,ms:Date.now()-t,error:String(r.message||r),status:r.status??null}}}async function G(e,t,r){let n=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,n.length||1)),i=new Array(n.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<n.length;){let a=s++;i[a]=await r(n[a],a)}})),i}var Or,tn,Lr,nn,an,Ur,rn,Br,Ge,zr,U=we(()=>{en();Or=new Set([408,425,429,500,502,503,504]),tn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Lr=2,nn=4e3,an=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],Ur=new Set([301,302,303,307,308]),rn=3,Br=64*1024;Ge=new Map;zr=e=>new Promise(t=>setTimeout(t,e))});function ln(e){return Kr.get(Number(e))||null}function un(e,t=process.env){let r=ln(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}var cn,Kr,dn=we(()=>{cn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Kr=new Map(Object.values(cn).map(e=>[e.chainId,e]))});import{Interface as Gr,getAddress as Yr}from"ethers";function Xe(e,t){try{return Yr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Jr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=un(e,r);return n||Xr[Number(e)]||null}function Zr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Qr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}async function z(e,t,r=[],n={}){let o=String(t||"");Zr(o);let i=Jr(e,n);if(!i)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let a=await O(i,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:r},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(a?.error){let l=new Error(a.error.message||JSON.stringify(a.error));throw l.code=a.error.code,l}return a.result}async function Je(e,t={}){let r=await z(e,"eth_blockNumber",[],t);return parseInt(r,16)}async function Qe(e,t,r={}){if(!t)throw new Error("rpcGetBalance requires address");let n=await z(e,"eth_getBalance",[t,"latest"],r);return{chainId:Number(e),address:t,balanceWei:BigInt(n).toString(),balanceHex:n}}async function fn(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=Xe(e.token||e.tokenAddress,"token"),o=Xe(e.owner,"owner"),i=Xe(e.spender,"spender"),s=pn.encodeFunctionData("allowance",[o,i]),a=await z(r,"eth_call",[{to:n,data:s},e.blockTag||"latest"],t),l=pn.decodeFunctionResult("allowance",a),p=BigInt(l[0]);return{chainId:r,token:n,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var pn,Xr,Qr,ie=we(()=>{U();dn();pn=new Gr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Xr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};Qr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/});import{createServer as Ci}from"node:http";import{readFileSync as ir,existsSync as Pi}from"node:fs";import{dirname as $i,join as xt,normalize as Ri,sep as Oi}from"node:path";import{fileURLToPath as Li}from"node:url";import{createHash as fr}from"node:crypto";var pe=1,Ct=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),mr=Object.freeze(["read","simulate"]),Pt=1e4,$t=1440*60,Rt=128,Ot=256,Lt=64,Ut=256,Bt=/^0x[0-9a-fA-F]{40}$/,hr=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,yr=/^[a-z][a-z0-9_-]*:\*$/,br=/^[A-Za-z0-9._:-]+$/,gr=/^[A-Za-z0-9._:-]+$/,Mt=/^(0|[1-9][0-9]*)$/,V=class extends Error{constructor(t){let r=t.map(n=>`${n.field}: ${n.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${r.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function Ft(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function wr(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return Mt.test(t)?t:null}return null}function K(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!Mt.test(t))return null;let r=Number(t);return Number.isSafeInteger(r)?r:null}return null}function Be(e){let t=String(e).split(":")[0];return mr.includes(t)}function Me(e,t={}){let r=[],n=(d,f)=>r.push({field:d,message:f});if(!Ft(e))return n("grant","grant must be a plain object"),{ok:!1,errors:r,grant:null};for(let d of Object.keys(e))Ct.includes(d)||n(d,"unknown field is not allowed");for(let d of Ct)(!(d in e)||e[d]==null)&&n(d,"required field is missing");if(r.length)return{ok:!1,errors:r,grant:null};let o={},i=K(e.chainId);i==null||i<=0?n("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!Bt.test(f.trim())?n(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)n("actions","must be a non-empty array of action scopes");else if(e.actions.length>Lt)n("actions",`too many actions (max ${Lt})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){n("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&yr.test(u)?d.push(u):n("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!hr.test(u)){n("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))n("targets","must be an array of contract addresses");else if(e.targets.length>Ut)n("targets",`too many targets (max ${Ut})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!Bt.test(u)){n("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!Be(u));(f.length>0||o.actions.length===0)&&n("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=wr(e[d]);f==null?n(d,"must be a non-negative integer wei amount"):o[d]=f}let s=K(e.maxSlippageBps);s==null||s>Pt?n("maxSlippageBps",`must be an integer between 0 and ${Pt}`):o.maxSlippageBps=s;let a=864e10,l=K(e.expiresAt);if(l==null||l<=0)n("expiresAt","must be a positive unix-seconds timestamp");else if(l>a)n("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=K(t.now);d==null?n("expiresAt","opts.now must be a unix-seconds integer"):l<=d?n("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>$t&&n("expiresAt",`grant exceeds the hard 24-hour TTL (${$t} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():K(e.nonce)!=null?String(K(e.nonce)):null;!p||p.length>Rt||!br.test(p)?n("nonce",`must be a non-empty string (max ${Rt} chars, [A-Za-z0-9._:-])`):o.nonce=p;let c=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!c||c.length>Ot||!gr.test(c)?n("revocationKey",`must be a non-empty public identifier (max ${Ot} chars, [A-Za-z0-9._:-])`):o.revocationKey=c,r.length?{ok:!1,errors:r,grant:null}:{ok:!0,errors:[],grant:o}}function Se(e,t={}){let{ok:r,errors:n,grant:o}=Me(e,t);if(!r)throw new V(n);return o}function Fe(e,t={}){let r=Se(e,t),o=Object.keys(r).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(r[i])}`);return`{"version":${pe},${o.join(",")}}`}function ve(e,t={}){return fr("sha256").update(Fe(e,t),"utf8").digest("hex")}function qt(e,t){let r=K(t),n=K(Ft(e)?e.expiresAt:null);return r==null||n==null?!0:n<=r}var Dt="oracle-connect-request",Sr="oracle-unsigned-grant",vr="oracle-grant-canonical-json-utf8-v1",D=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},Er=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Ar=Object.freeze(["privkey","wif","xprv","seed"]);function qe(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return Er.test(t)||Ar.includes(r)}var Ht=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Vt=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function xr(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Vt.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function zt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new D("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=xr(t);for(let{rule:o,re:i}of Ht)if(i.test(r))throw new D("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new D("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&qe(o))throw new D(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function q(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Vt.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Ht)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new D(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&qe(o))throw new D(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");q(o,`${t}[key]`,r),q(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())q(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>q(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if(qe(o))throw new D(`${t}.${o}`,"forbidden-key-name");q(i,`${t}.${o}`,r,o)}return e}function fe(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))fe(t)}return e}function jt(e,t){let r=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(r)||r<=0)throw new V([{field:t,message:"must be a positive unix-seconds integer"}]);return r}function Wt(e){if(e?.now==null)throw new V([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return jt(e.now,"opts.now")}function Ir(e){return new Date(e*1e3).toISOString()}function kr(e,t){let r=e.actions.every(n=>Be(n));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${pe}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${Ir(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",r?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
-`)}function Kt(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new V([{field:"request",message:"request must be a plain object"}]);let r=Wt(t),{ttlSeconds:n,...o}=e,i={...o};if(n!=null){if(i.expiresAt!=null)throw new V([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=jt(n,"ttlSeconds");i.expiresAt=r+l}let s=Se(i,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),a=fe({kind:Dt,version:pe,grant:s});return q(a)}function Gt(e={},t={}){let r=Wt(t),n=e&&e.kind===Dt?e.grant:e,o=Se(n,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),i=Fe(o),s=ve(o),a=Buffer.from(i,"utf8"),l=fe({kind:Sr,unsigned:!0,payload:fe({version:pe,grantId:s,grant:o,canonical:i}),signing:fe({scheme:vr,message:i,bytesHex:`0x${a.toString("hex")}`,byteLength:a.length,sha256:s}),render:kr(o,s)});return q(l)}var oe=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function Yt(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function _r(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function De(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function Tr(e,t,r){if(e==null)return!1;if(typeof e=="function")return e(t,r)===!0;let n=[t,r.revocationKey];return e instanceof Set?n.some(o=>e.has(o)):Array.isArray(e)?n.some(o=>e.includes(o)):typeof e.has=="function"?n.some(o=>e.has(o)):!1}function Xt(e,{now:t,revoked:r}={}){let n=De(t),{grant:o,revoked:i}=_r(e),{ok:s,grant:a}=Me(o);if(!s)return{status:oe.INVALID,id:null,grant:null};let l=ve(a);return i||Tr(r,l,a)?{status:oe.REVOKED,id:l,grant:a}:qt(a,n)?{status:oe.EXPIRED,id:l,grant:a}:{status:oe.ACTIVE,id:l,grant:a}}function Jt(e,{now:t,revoked:r,agentAddress:n,accountAddress:o,chainId:i}={}){let s=De(t),a=n!=null?String(n).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,c=[];for(let d of Yt(e)){let{status:f,id:u,grant:g}=Xt(d,{now:s,revoked:r});f===oe.ACTIVE&&(a!=null&&g.agentAddress!==a||l!=null&&g.accountAddress!==l||p!=null&&g.chainId!==p||c.push(Object.freeze({id:u,grant:g})))}return c.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),q(Object.freeze(c))}function Qt(e,t,{now:r,revoked:n}={}){let o=De(r),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of Yt(e)){let a=Xt(s,{now:o,revoked:n});if(a.status!==oe.INVALID&&a.id===i)return q(Object.freeze({id:a.id,status:a.status,grant:a.grant}))}return null}import{Interface as wn,getAddress as eo,id as Sn}from"ethers";ie();U();var Ms=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var qs=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),Ze=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),et=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ie();ie();var Ae=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);U();ie();var mn=new wn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),hn=new wn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),to=Sn("Approval(address,address,uint256)"),fa=Sn("ApprovalForAll(address,address,bool)"),no=1e4,ro=2e5,oo=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),io=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),so=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),ao=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),co=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),lo=(1n<<256n)-1n,uo=lo/2n,po=4320*60*60*1e3,fo=360*60*1e3,mo=600*1e3,ho=45*1e3,yo=512,bo=128,yn=new Map,tt=new Map,bn=new Map;function se(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function rt(e,t,r){let n=e.get(t);return n?Date.now()-n.at>r?(e.delete(t),null):n:null}function xe(e,t,r,n){for(e.delete(t),e.set(t,{at:Date.now(),value:r});e.size>n;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function go(e,t){try{return eo(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function wo(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function gn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function So({unlimited:e,spenderLabel:t,lastActivityAt:r}){if(e)return"unlimited";if(!t)return"unknown-spender";if(r){let n=Date.parse(r);if(Number.isFinite(n)&&Date.now()-n>po)return"stale"}return"scoped"}function vo(e,t,r){if(r)return"UNLIMITED";if(t==null)return e.toString();let n=10n**BigInt(t),o=e/n,i=e%n;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Eo(e,t,r,n){let o=`${e}:${t}`,i=n?.get(o);if(i)return i;if(se(r)){let a=rt(yn,o,fo);if(a)return a.value}let s=(async()=>{let a=async d=>{try{let f=mn.encodeFunctionData(d,[]),u=await z(e,"eth_call",[{to:t,data:f},"latest"],r);return!u||u==="0x"?null:mn.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([a("decimals"),a("symbol")]),c={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return se(r)&&xe(yn,o,c,yo),c})();return n?.set(o,s),s}async function Ao(e,t,r){let n=Math.min(Math.max(Number(r.lookbackBlocks)||no,1),ro),o=await Je(e,r);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-n),s=await z(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[to,wo(t)]}],r);if(!Array.isArray(s))throw new Error("log scan returned no array");let a=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),c=l?.topics?.[2];!p||!c||a.set(`${p}:${gn(c)}`,{token:p,spender:gn(c)})}return{pairs:[...a.values()],fromBlock:i,toBlock:o}}function xo(e){return(co[e]||[]).flatMap(r=>io.map(n=>({token:r.address,spender:n.address,symbol:r.symbol,decimals:r.decimals})))}async function Io(e,t,r={}){let n=[],o="direct-probe",i=null,s=xo(e),a=nt(e),l=se(r)&&rt(tt,e,mo)?.value===!1;if(s.length===0&&a.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await Ao(e,t,r);n=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},se(r)&&xe(tt,e,!0,64)}catch{if(se(r)&&xe(tt,e,!1,64),n=s,n.length===0&&a.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await G(n,r.concurrency||4,async u=>{try{let g=await fn({chainId:e,token:u.token,owner:t,spender:u.spender},r),E=BigInt(g.allowance);if(E<=0n)return null;let S=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Eo(e,u.token,r,p),I=E>=uo,v=oo[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:S.symbol,decimals:S.decimals,spender:u.spender,spenderLabel:v,allowance:E.toString(),allowanceDisplay:vo(E,S.decimals,I),unlimited:I,lastActivityAt:null,risk:So({unlimited:I,spenderLabel:v,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await _o(e,t,r);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:n.length,collectionsProbed:nt(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function ko(e,t,r,n,o){try{let i=hn.encodeFunctionData("isApprovedForAll",[r,n]),s=await z(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!hn.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function nt(e){return(ao[e]||[]).flatMap(r=>so.map(n=>({collection:r.address,collectionName:r.name,operator:n.address,operatorLabel:n.label})))}async function _o(e,t,r){let n=nt(e);return n.length===0?[]:(await G(n,r.concurrency||4,async i=>await ko(e,i.collection,t,i.operator,r)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function vn(e={},t={}){let r=go(e.owner||e.address,"owner"),n=new Map(Ae.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>n.has(u)):[...n.keys()],i=`${r}:${[...o].sort((u,g)=>u-g).join(",")}:${e.lookbackBlocks??""}`,s=se(t)&&!e.refresh;if(s){let u=rt(bn,i,ho);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let a=await G(o,e.concurrency||3,u=>Io(u,r,{...t,lookbackBlocks:e.lookbackBlocks})),l=a.flatMap(u=>u.approvals),p=a.map(u=>u.scan),c=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:r,scannedRange:c?`last ${c.toBlock-c.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&xe(bn,i,f,bo),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as Xo}from"ethers";U();ie();U();var En="mainnet-beta",To="https://api.mainnet-beta.solana.com",ot="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function No(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||To).trim()}function ee(e,t="address"){let r=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(r))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return r}function Co(e,t){return t?[...e,{commitment:t}]:e}async function An(e,t=[],r={}){let n=String(e||"");if(n==="sendTransaction"||n==="sendRawTransaction"||n==="requestAirdrop"||n==="requestAirDrop"||/airdrop/i.test(n)||/^send/i.test(n))throw new Error(`solana-rpc: ${n} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await O(No(r),{method:"POST",body:{jsonrpc:"2.0",id:r.id||1,method:e,params:t},fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function xn(e={},t={}){let r=ee(e.address||e.owner,"address"),n=await An("getBalance",Co([r],e.commitment),t);return{provider:"solana-rpc",cluster:En,address:r,lamports:String(n?.value??0),slot:n?.context?.slot??null,raw:n}}function Po(e={}){let t=e.account?.data?.parsed?.info||{},r=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(r.amount??"0"),decimals:r.decimals??null,uiAmount:r.uiAmount??null,uiAmountString:r.uiAmountString??null,raw:e}}async function it(e={},t={}){let r=ee(e.owner||e.address,"owner"),n=e.mint?{mint:ee(e.mint,"mint")}:{programId:ee(e.programId||ot,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await An("getTokenAccountsByOwner",[r,n,o],t),s=Array.isArray(i?.value)?i.value.map(Po):[];return{provider:"solana-rpc",cluster:En,owner:r,filter:n,slot:i?.context?.slot??null,accounts:s,raw:i}}U();var $o="mainnet",Ro="https://mempool.space/api",Oo="https://mempool.space/testnet/api";function In(e={}){return String(e.network||process.env.BTC_NETWORK||$o).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Lo(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):In(e)==="testnet"?Oo:Ro}function Y(e,t="address"){let r=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(r)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(r))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return r}async function Uo(e,t={}){let r=`${Lo(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(r,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),i=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${i.slice(0,160)}`);return i}async function Bo(e,t={}){let r=await Uo(e,t);try{return JSON.parse(r)}catch{return r}}async function kn(e={},t={}){let r=Y(e.address||e.addr,"address"),n=await Bo(`/address/${r}`,t),o=n.chain_stats||{},i=n.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),a=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:In(t),address:r,balanceSats:String(s-a),chainStats:o,mempoolStats:i,raw:n}}var _n="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function ae({provider:e,defaultUrl:t,hosts:r=[],url:n,strict:o=!1}){let s=(String(n??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Tn(t)};let a;try{a=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=a.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Tn(t),...r]).has(l)){let c=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return a.protocol==="http:"&&!c?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[_n]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${_n}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Tn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function te(e,t,r){let n={...e};if(!r)return n;for(let[o,i]of Object.entries(t||{}))i&&(n[o]=i);return n}function st(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Mo=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function Fo(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",r=!1;try{let n=st(e);if(n){let o=new URL(n).host,i=new URL(n).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);r=Mo.includes(o)&&(i==="https:"||s)}}catch{r=!1}return te({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},r)}async function Nn(e,t={}){let n=await(t.fetchImpl||fetch)(e,{method:"GET",headers:Fo(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await n.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!n.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${n.status} ${String(o).slice(0,160)}`);return i}async function Cn(e={},t={}){let r=Y(e.address||e.addr,"address"),n=st(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${n}/v1/indexer/address/${r}/runes/balance-list?start=0&limit=100`,`${n}/v1/runes/address/${r}`,`${n}/runes/balance/${r}`,`${n}/address/${r}/runes`],i=null;for(let s of o)try{let a=await Nn(s,t),l=qo(a);return{provider:"bitcoin-meta",address:r,ok:!0,count:l.length,balances:l,source:s}}catch(a){i=a}return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function qo(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({rune:n.rune||n.runeid||n.runeId||n.spacedRune||n.name||n.ticker||null,runeId:n.runeid||n.runeId||n.id||null,amount:String(n.amount??n.balance??n.total??n.qty??"0"),symbol:n.symbol||null,divisibility:n.divisibility??n.div??null,raw:n}))}async function Ie(e={},t={}){let r=Y(e.address||e.addr,"address"),n=st(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${n}/v1/indexer/address/${r}/inscription-data?cursor=0&size=${o}`,`${n}/v1/inscriptions/address/${r}?limit=${o}`,`${n}/address/${r}/inscriptions?limit=${o}`],s=null;for(let a of i)try{let l=await Nn(a,t),p=Do(l);return{provider:"bitcoin-meta",address:r,ok:!0,count:p.length,inscriptions:p,source:a}}catch(l){s=l}return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function Do(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({id:n.inscriptionId||n.id||n.inscription_id||null,number:n.inscriptionNumber??n.number??null,sat:n.sat||n.satoshi||null,contentType:n.contentType||n.content_type||null,utxo:n.utxo||n.output||(n.txid!=null?`${n.txid}:${n.vout??n.n}`:null),raw:n}))}U();var Ho="https://api.hyperliquid.xyz/info",Vo="https://api.hyperliquid-testnet.xyz/info";function zo({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let r=process.env.HL_API_URL.replace(/\/$/,"");return r.endsWith("/info")?r:`${r}/info`}return e||process.env.HL_TESTNET==="1"?Vo:Ho}async function at(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let r=zo(t);return O(r,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function Pn(e={}){return at({type:"allMids"},e)}async function $n(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return at({type:"spotClearinghouseState",user:e},t)}async function Rn(e,t={}){if(!e)throw new Error("hlUserState requires user");return at({type:"clearinghouseState",user:e},t)}U();var jo="https://coins.llama.fi";function Wo(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||jo).replace(/\/$/,"")}async function ct(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return O(`${Wo(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}U();var On=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,Ko=/[<>&`*_~[\]()|\\]/g,Go=/[\u0000-\u001F\u007F]/g;function lt(e,{max:t=32,fallback:r=""}={}){return e==null?r:String(e).normalize("NFKC").replace(On,"").replace(Go,"").replace(Ko,"").replace(/\s+/g," ").trim().slice(0,t).trim()||r}function ut(e){if(e==null)return!1;let t=String(e);return On.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var Ln=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function Yo(e,t={}){let r=Number(e),n=t.baseUrl||Ln[r];if(!n)throw new Error(`Blockscout not configured for chainId ${r}`);return n.replace(/\/$/,"")}function Un(e){return!!Ln[Number(e)]}async function Bn(e={},t={}){if(!e.address)throw new Error("address required");let r=Number(e.chainId||1),n=`${Yo(r,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await O(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function Mn(e=[],{fungibleOnly:t=!0}={}){let r=[];for(let n of e){if(!n||typeof n!="object")continue;let o=n.token&&typeof n.token=="object"?n.token:{},i=String(o.type||n.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||n.token_address||n.tokenAddress||null;if(!s||typeof s!="string")continue;let a=String(n.value??n.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(a)||a==="0")continue;let l=o.decimals??n.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=lt(o.symbol||o.name,{max:32,fallback:"TOKEN"}),c=lt(o.name,{max:80,fallback:""})||null;r.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:c,decimals:l,amountRaw:a,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:ut(o.symbol)||ut(o.name)||void 0})}return r}var Jo="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",qn=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function X(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function ke(e,...t){for(let r of t){let n=String(e?.[r]||"").trim();if(n)return n}return null}function Fn(e){if(!e)return null;try{return Xo(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function ft(e={},t=process.env){let r=e.addresses||{},n=Fn(r.evm||e.evmAddress||ke(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=r.solana||e.solanaAddress||ke(t,"ORACLE_SOLANA_ADDRESS"),i=r.bitcoin||e.bitcoinAddress||ke(t,"ORACLE_BITCOIN_ADDRESS"),s=Fn(r.hyperliquid||e.hyperliquidAddress||ke(t,"ORACLE_HYPERLIQUID_ADDRESS")||n);return{evm:n,solana:o?ee(o,"portfolio Solana address"):null,bitcoin:i?Y(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function ye(e,t){let r=BigInt(String(e||"0")),n=Number(t);if(!Number.isInteger(n)||n<0||n>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(n===0)return r.toString();let o=r<0n,i=o?-r:r,s=10n**BigInt(n),a=i/s,l=String(i%s).padStart(n,"0").replace(/0+$/,"");return`${o?"-":""}${a}${l?`.${l}`:""}`}function ce(e){let t=Number(e);return Number.isFinite(t)?t:null}function _e(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function J(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Dn(e,t){let r=qn[t],n=r?e?.coins?.[r]:null,o=Number(n?.price);return{key:r||null,priceUsd:Number.isFinite(o)?o:null,timestamp:n?.timestamp??null,confidence:n?.confidence??null}}function Qo(e){let t=new Map;for(let r of e)if(r?.ok)for(let n of r.data?.accounts||[]){let o=BigInt(String(n.amount||"0"));if(o===0n||!n.mint)continue;let i=`${n.mint}:${n.decimals??"unknown"}`,s=t.get(i)||{mint:n.mint,amountRaw:0n,decimals:n.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,r.program&&s.programs.add(r.program),t.set(i,s)}return[...t.values()].map(r=>{let n=r.amountRaw.toString(),o=r.decimals==null?null:ye(n,r.decimals),i=r.decimals===0&&r.amountRaw===1n;return{mint:r.mint,amountRaw:n,amount:o,decimals:r.decimals,tokenPrograms:[...r.programs],accountCount:r.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function dt(e,t){return{family:e,status:"unsupported",reason:t}}function pt(e,t){if(!e||e.status!=="ok")return e;let r=Dn(t,e.symbol),n=ce(e.amount),o=n!=null&&r.priceUsd!=null?_e(n*r.priceUsd):null;return{...e,price:r,usdValue:o}}async function Hn(e={},t={}){let r=new Date().toISOString(),n=ft(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,a=new Map(Ae.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...a.keys()],p=[...new Set(Object.values(qn))],c=o?C(()=>ct(p,X(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=G(l,e.concurrency||5,async h=>{let b=a.get(h);if(!b)return{family:"evm",chainId:h,name:null,address:n.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!n.evm)return{family:"evm",chainId:h,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let x={...X(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},T=await C(()=>Qe(h,n.evm,x));if(!T.ok)return{family:"evm",chainId:h,name:b.name,address:n.evm,status:"unavailable",latencyMs:T.ms,error:T.error};let R=b.nativeCurrency?.decimals??18,F=b.nativeCurrency?.symbol||"NATIVE",w=T.data.balanceWei,_={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&Un(h)){let Q=await C(()=>Bn({chainId:h,address:n.evm},{...X(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));Q.ok?_={status:"ok",assets:Mn(Q.data,{fungibleOnly:!0}).map(ue=>{let de=ye(ue.amountRaw,ue.decimals);return{...ue,amount:de,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:Q.ms}:_={status:"unavailable",assets:[],reason:Q.error||"blockscout token-balances failed",source:"blockscout",latencyMs:Q.ms}}return{family:"evm",chainId:h,name:b.name,address:n.evm,status:"ok",latencyMs:T.ms,native:{status:"ok",symbol:F,amountRaw:w,decimals:R,amount:ye(w,R)},fungibleTokens:_,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:_.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!n.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=X(t,"solana"),b=await C(()=>xn({address:n.solana},h)),x=i||s?await Promise.all([C(()=>it({owner:n.solana,programId:ot},h)).then(_=>({..._,program:"spl-token"})),C(()=>it({owner:n.solana,programId:Jo},h)).then(_=>({..._,program:"token-2022"}))]):[],T=Qo(x),R=T.filter(_=>_.classification==="collectible-candidate"),F=T.filter(_=>_.classification!=="collectible-candidate"),w=x.filter(_=>!_.ok).map(_=>_.error);return{family:"solana",name:"Solana Mainnet",address:n.solana,status:b.ok||x.some(_=>_.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:ye(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:i?w.length===x.length?"unavailable":w.length?"partial":"ok":"not-requested",assets:i?F:[],errors:w,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?w.length===x.length?"unavailable":"partial":"not-requested",assets:s?R:[],errors:w,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!n.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=X(t,"bitcoin"),b=X(t,"bitcoinMeta"),[x,T,R]=await Promise.all([C(()=>kn({address:n.bitcoin},h)),i?C(()=>Cn({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?C(()=>Ie({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),F=T.ok?T.data:null,w=R.ok?R.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:n.bitcoin,status:x.ok||F?.ok||w?.ok?"ok":"unavailable",native:x.ok?{status:"ok",symbol:"BTC",amountRaw:x.data.balanceSats,decimals:8,amount:ye(x.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:x.error},fungibleTokens:{status:i?F?.ok?"ok":"unavailable":"not-requested",assets:F?.balances||[],error:F?.ok?null:F?.error||T.error,verification:"indexer-reported"},collectibles:{status:s?w?.ok?"ok":"unavailable":"not-requested",assets:w?.inscriptions||[],error:w?.ok?null:w?.error||R.error,unknownNotEmpty:!!w?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),g=(async()=>{if(!n.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=X(t,"hyperliquid"),[b,x,T]=await Promise.all([C(()=>$n(n.hyperliquid,h)),C(()=>Rn(n.hyperliquid,h)),C(()=>Pn(h))]),R=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(w=>J(w.total)||J(w.hold)).map(w=>({coin:w.coin||null,total:String(w.total??"0"),hold:String(w.hold??"0"),priceUsd:null,usdValue:null})),F=(x.ok&&Array.isArray(x.data?.assetPositions)?x.data.assetPositions:[]).map(w=>w.position||w).filter(w=>J(w.szi)).map(w=>({coin:w.coin||null,size:String(w.szi??"0"),entryPrice:w.entryPx??null,positionValueUsd:w.positionValue??null,unrealizedPnlUsd:w.unrealizedPnl??null,liquidationPrice:w.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:n.hyperliquid,status:b.ok||x.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:R,error:b.ok?null:b.error},perps:{status:x.ok?"ok":"unavailable",accountValueUsd:x.data?.marginSummary?.accountValue??null,withdrawableUsd:x.data?.withdrawable??null,positions:F,error:x.ok?null:x.error},mids:T.ok?T.data:{},source:"hyperliquid-info"}})(),[E,S,I,v,k]=await Promise.all([d,f,u,g,c]),m=k.ok?k.data:null,y=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),A=[];for(let h of E){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let b=y[h.chainId];if(b)for(let x of h.fungibleTokens.assets||[])x.address&&A.push(`${b}:${String(x.address).toLowerCase()}`)}let P=null;if(o&&A.length){let h=[...new Set(A)],b=await C(()=>ct(h,X(t,"prices")));b.ok&&(P=b.data)}let N=E.map(h=>{let b=h.native?{...h,native:pt(h.native,m)}:h;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let x=y[b.chainId],T=b.fungibleTokens.assets.map(R=>{let F=String(R.symbol||"").toUpperCase(),w=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(F)&&(w=1),w==null&&x&&R.address&&P?.coins){let Nt=`${x}:${String(R.address).toLowerCase()}`,ue=P.coins[Nt],de=Number(ue?.price);Number.isFinite(de)&&de>0&&(w=de)}let _=ce(R.amount),Q=_!=null&&w!=null?_e(_*w):null;return{...R,priceUsd:w,usdValue:Q}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:T}}}return b});S.native&&(S.native=pt(S.native,m)),I.native&&(I.native=pt(I.native,m));let L=0,H=0,$=0;for(let h of[...N,S,I]){h.native?.status==="ok"&&J(h.native.amount)&&(h.native.usdValue!=null?(L+=h.native.usdValue,H+=1):$+=1);for(let b of h.fungibleTokens?.assets||[])!J(b.amount)&&!J(b.amountRaw)||(b.usdValue!=null?(L+=b.usdValue,H+=1):$+=1)}let j=Dn(m,"HYPE");for(let h of v.spot?.balances||[]){let b=String(h.coin||"").toUpperCase(),x=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?j.priceUsd||ce(v.mids?.HYPE):ce(v.mids?.[h.coin]),T=ce(h.total);h.priceUsd=x,h.usdValue=T!=null&&x!=null?_e(T*x):null,J(h.total)&&(h.usdValue!=null?(L+=h.usdValue,H+=1):$+=1)}let Re=ce(v.perps?.accountValueUsd);Re!=null&&Re!==0&&(L+=Re,H+=1);let ur=[...S.fungibleTokens?.assets||[],...S.collectibles?.assets||[]].filter(h=>J(h.amount)).length,dr=(I.fungibleTokens?.assets||[]).length+(I.collectibles?.assets||[]).length;$+=ur+dr;let Oe=[...N,S,I,v],ne=h=>Oe.filter(b=>b.status===h).length,re=[],Le=N.filter(h=>h.fungibleTokens?.status==="unavailable"),Tt=N.filter(h=>h.fungibleTokens?.status==="ok");Le.length&&!Tt.length?re.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):Le.length&&re.push(`EVM token discovery partial: Blockscout covered ${Tt.length} chain(s); ${Le.length} chain(s) still native-only.`),(S.fungibleTokens?.assets?.length||S.collectibles?.assets?.length)&&re.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),I.collectibles?.unknownNotEmpty&&re.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),k.ok||re.push(`Price provider unavailable: ${k.error}`);let Ue=[dt("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),dt("sui","Sui balance adapter is not installed"),dt("aptos","Aptos balance adapter is not installed")],pr=Oe.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:r,addresses:n,coverage:{requestedSurfaces:Oe.length,ok:ne("ok"),unavailable:ne("unavailable"),notConfigured:ne("not-configured"),unsupported:ne("unsupported")+Ue.length,evmChainsRequested:l.length,evmChainsOk:N.filter(h=>h.status==="ok").length},valuation:{knownUsd:_e(L),label:"known priced value, not a complete portfolio total",pricedItems:H,unpricedNonzeroItems:$,complete:$===0&&!pr&&ne("unavailable")===0&&ne("not-configured")===0&&Ue.length===0,priceSource:o?"DefiLlama":null,priceStatus:k.ok?"ok":"unavailable",priceQueriedAt:r},chains:[...N,S,I,v],unsupportedFamilies:Ue,warnings:re}}U();U();import{readFileSync as ei,existsSync as ti}from"node:fs";import{getAddress as ni,Interface as Te,TypedDataEncoder as Ga,parseUnits as Ya}from"ethers";var Zo=300*1e3,Ha=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var ri="https://api.opensea.io/api/v2",oi="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",ec=new Te([`function ${oi}`]),tc=new Te(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),ii=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),si=new Set(ii),ai=new Set(["solana","flow"]);function ci(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!ti(e))return"";try{for(let t of ei(e,"utf8").split(`
-`)){let r=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(r)return r[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function ht(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||ci()}function zn(e={}){return ae({provider:"opensea",defaultUrl:ri,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function jn(e={}){return zn(e).baseUrl}function Wn(e={}){return te({accept:"application/json"},{"x-api-key":ht(e)},zn(e).trusted)}function li(e){let t=String(e||"ethereum").trim().toLowerCase();if(!si.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function Vn(e,t="address"){try{return ni(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function Kn(e,t=null){let r=String(e||"").trim();if(!r)throw new Error("opensea: account address required");if(t&&!ai.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(r))return Vn(r,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(r))throw new Error("opensea: invalid account address");return r}function ui(e={},t,r){return{chain:t,owner:r,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function yt(e={},t={}){if(!ht(t))throw new Error("OPENSEA_API_KEY required");let r=li(e.chain),n=Kn(e.address||e.owner,r),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],a=e.next?String(e.next):null,l=0;do{let p=new URL(`${jn(t)}/chain/${encodeURIComponent(r)}/account/${encodeURIComponent(n)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),a&&p.searchParams.set("next",a);let c=await O(p.toString(),{headers:Wn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(c?.nfts)?c.nfts:[])s.push(ui(d,r,n));a=c?.next?String(c.next):null,l+=1}while(a&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:r,owner:n,count:s.length,pages:l,complete:!a,next:a,nfts:s,exec:!1,readOnly:!0}}async function Gn(e={},t={}){if(!ht(t))throw new Error("OPENSEA_API_KEY required");let r=Kn(e.address||e.owner),n=await O(`${jn(t)}/account/${encodeURIComponent(r)}/pnl`,{headers:Wn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:r,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:n?.realized_pnl_usd??null,unrealizedPnlUsd:n?.unrealized_pnl_usd??null,totalPnlUsd:n?.total_pnl_usd??null,netInvestedUsd:n?.net_invested_usd??null,currentValueUsd:n?.current_value_usd??null,returnPercentage:n?.return_percentage??null,itemLevelPnlAvailable:!1,raw:n,exec:!1,readOnly:!0}}var nc=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var rc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var oc=new Te(["function setApprovalForAll(address operator,bool approved)"]),ic=new Te(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var pi="https://api.satflow.com/v1";function Yn(e={}){return ae({provider:"satflow",defaultUrl:pi,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function fi(e={}){return Yn(e).baseUrl}function Xn(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function mi(e={}){return te({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":Xn(e)},Yn(e).trusted)}async function hi(e,{method:t="GET",body:r,opts:n={}}={}){if(!Xn(n))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${fi(n)}${e.startsWith("/")?e:`/${e}`}`,a=await(n.fetchImpl||fetch)(i,{method:t,headers:mi(n),body:r!=null?JSON.stringify(r):void 0,signal:AbortSignal.timeout(n.timeoutMs??2e4)}),l=await a.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!a.ok)throw new Error(`satflow ${t} ${e}: HTTP ${a.status} ${String(l).slice(0,200)}`);return p}async function Jn(e={},t={}){let r=Y(e.address||e.addr,"address"),n=new URLSearchParams({address:r});e.type&&n.set("type",e.type),e.limit!=null&&n.set("limit",String(e.limit)),e.offset!=null&&n.set("offset",String(e.offset));let o=await hi(`/address/wallet-contents?${n}`,{opts:t});return{provider:"satflow",address:r,contents:o}}U();U();var Sc=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var yi=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],bi=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,gi=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function wi(e={}){let t=[],r=String(e.name||""),n=String(e.description||""),o=`${r} ${n}`;bi.test(r)&&t.push("url-in-name");let i=yi.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),gi.test(r)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(r)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,a=!Array.isArray(e.traits)||e.traits.length===0;s&&a&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function Qn(e={}){let t=wi(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Si=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),vi=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function bt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function be(e,t){let r=await C(t);return r.ok?{ok:!0,data:r.data}:{ok:!1,error:`${e}: ${r.error}`.slice(0,300)}}function Ei(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function Ai(e={},t){let r=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:r==null?null:String(r),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(r?`Inscription ${r}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function xi(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function Zn(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function Ii(e){let t=new Map;if(Array.isArray(e)){for(let r of e)r?.assetKey&&t.set(String(r.assetKey).toLowerCase(),r);return t}if(e&&typeof e=="object")for(let[r,n]of Object.entries(e))t.set(r.toLowerCase(),n);return t}function ki(e,t){let r=Zn(e),n=t.get(r),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!n)return{...e,assetKey:r};let i=Number(n.costUsd),s=Number(n.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:r,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let a=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-a)*100)/100,currentValueUsd:o,totalCostUsd:a,realizedUsd:null}}:{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function _i(e){let t=new Map;for(let r of e){let n=Zn(r);t.has(n)||t.set(n,r)}return[...t.values()]}function Ti(e,t){let r=e.filter(i=>i.itemPnl?.status==="estimated"),n=e.length-r.length,o=Math.round(r.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:n===0&&e.length?"estimated-complete-for-held-items":r.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:r.length,unknownItems:n,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function er(e={},t={}){let r=new Date().toISOString(),n=ft(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=Si.filter(m=>!o||o.has(m.chain)),s=[],a=[],l=bt(t,"opensea"),p=n.evm?i.filter(m=>m.family!=="solana"):[],c=await G(p,4,async m=>({row:m,result:await be(`opensea-${m.chain}`,()=>yt({chain:m.chain,address:n.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:y}of c)if(y.ok){let A=y.data.nfts.map(P=>({...P,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));a.push(...A),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:y.data.complete?"ok":"partial",count:A.length,complete:y.data.complete,next:y.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:y.error,source:"opensea"});if(!n.evm)for(let m of i.filter(y=>y.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(n.solana&&(!o||o.has("solana"))){let m=await be("opensea-solana",()=>yt({chain:"solana",address:n.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let y=m.data.nfts.map(A=>({...A,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));a.push(...y),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:y.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(n.bitcoin&&(!o||o.has("bitcoin"))){let m=await be("satflow-wallet-contents",()=>Jn({address:n.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},bt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let y=Ei(m.data.contents).map(P=>Ai(P,n.bitcoin));a.push(...y);let A=y.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:A?"ok":"partial",count:y.length,complete:A,source:"satflow"})}else{let y=await be("bitcoin-meta-inscriptions",()=>Ie({address:n.bitcoin},bt(t,"bitcoinMeta")),t.timeoutMs??35e3),A=y.ok&&y.data?.ok&&Array.isArray(y.data.inscriptions)?y.data.inscriptions:[];a.push(...A.map(P=>xi(P,n.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:A.length?"partial":"unavailable",count:A.length,complete:!1,source:A.length?"bitcoin-meta":"satflow",error:A.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([n.evm,n.solana].filter(Boolean))]){let y=await be(`opensea-pnl-${m}`,()=>Gn({address:m},l),t.timeoutMs??35e3);d.push(y.ok?{status:"ok",...y.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:y.error})}let f=Ii(e.costBasis),u=_i(a).map(m=>ki(m,f)).map(m=>Qn(m)),g=u.filter(m=>!m.spam),E=u.filter(m=>m.spam),S=g.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),I=Math.round(S.reduce((m,y)=>m+Number(y.estimatedValueUsd),0)*100)/100,v=g.length-S.length,k=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:r,addresses:n,coverage:s,unsupported:vi,inventory:{count:u.length,visibleCount:g.length,flaggedCount:E.length,items:u,visibleItems:g,flaggedItems:E},valuation:{estimatedCurrentValueUsd:I,valuedItems:S.length,unvaluedItems:v,complete:v===0&&k.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Ti(g,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as gt}from"node:os";import{join as wt}from"node:path";var tr=process.env.ORACLE_PUBLIC_DESKTOP==="1",Ni=tr?process.env.ORACLE_CONFIG_DIR||wt(gt(),".config","oracle"):wt(gt(),".config","oracle"),Fc=tr?Ni:wt(gt(),".config","mad-desk");function St(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var Ui=JSON.parse(ir(new URL("../../package.json",import.meta.url),"utf8")),le="public",Bi="127.0.0.1",Mi=8799,Ce=Ui.version,Fi=new Set(["127.0.0.1","localhost","::1"]),qi=xt($i(Li(import.meta.url)),"../.."),vt=xt(qi,"public","oracle-console"),nr=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),Di=1e6,M=class extends Error{constructor(t,r,n){super(n||r),this.status=t,this.code=r}};function W(e,t,r){let n=t,o;try{q(r),o=zt(r)}catch{n=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(n,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":le,"x-oracle-unsigned":"true"}),e.end(o)}function Hi(e){return new Promise((t,r)=>{let n=[],o=0;e.on("data",i=>{if(o+=i.length,o>Di){r(new M(413,"payload-too-large","request body too large")),e.destroy();return}n.push(i)}),e.on("end",()=>{let i=Buffer.concat(n).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{r(new M(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>r(new M(400,"bad-request","request stream error")))})}function B(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new M(400,t,`${t} must be a JSON object`);return e}function Vi(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function zi(e){let t=Vi(e);if(!Fi.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function ji(){return{status:200,body:{ok:!0,plane:le,version:Ce}}}function Pe(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function Wi(e){let t=B(e,"body"),r=t.input!==void 0?B(t.input,"input"):t,n=Pe(B(t.opts,"opts")),o=r===t?(({opts:i,...s})=>s)(t):r;return{status:200,body:Kt(o,n)}}function Ki(e){let t=B(e,"body"),r=t.request!==void 0?B(t.request,"request"):t.input!==void 0?B(t.input,"input"):t,n=Pe(B(t.opts,"opts")),o=r===t?(({opts:i,...s})=>s)(t):r;return{status:200,body:Gt(o,n)}}function Gi(e){let t=B(e,"body"),r=Pe(B(t.opts,"opts")),n=Jt(t.store??[],r);return{status:200,body:{ok:!0,count:n.length,grants:n}}}function Yi(e){let t=B(e,"body"),r=Pe(B(t.opts,"opts")),n=Qt(t.store??[],t.id,r);return n==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:n}}function Xi(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,r=!0,n=[];return t&&n.push("privy"),r&&n.push("injected"),{status:200,body:{ok:!0,plane:le,version:Ce,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:r,modes:n},privy:{appId:e||null}}}}var Et=400;function Ji(e=[]){if(e.length<=Et)return{rows:e,truncated:!1,omitted:0};let t=n=>n?.kind==="native"?0:n?.priced?1:2;return{rows:[...e].sort((n,o)=>t(n)-t(o)).slice(0,Et),truncated:!0,omitted:e.length-Et}}var At=300;function Qi(e=[]){if(e.length<=At)return{items:e,truncated:!1,omitted:0};let t=n=>n?.spam===!0||n?.nsfw===!0?2:Number.isFinite(Number(n?.floorUsd))&&Number(n?.floorUsd)>0?0:1;return{items:[...e].sort((n,o)=>t(n)-t(o)).slice(0,At),truncated:!0,omitted:e.length-At}}var Ne=12;async function Zi(e){let t=B(e,"body"),r=typeof t.owner=="string"?t.owner:null;if(!r)throw new M(400,"owner-required","owner must be an EVM address");let n=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(n&&n.length>Ne)throw new M(400,"too-many-chains",`at most ${Ne} chainIds per request`);let i=await vn({owner:r,chainIds:n},ar());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var es=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,ts=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function ns(e){if(typeof e!="string")return null;let t=e.trim();return es.test(t)?t:null}function rs(e){if(typeof e!="string")return null;let t=e.trim();return ts.test(t)?t:null}function sr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function os(e){let t=B(e,"body"),r=sr(t.owner),n=ns(t.solana),o=rs(t.bitcoin);if(!r&&!n&&!o)throw new M(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>Ne)throw new M(400,"too-many-chains",`at most ${Ne} chainIds per request`);let s=await Hn({addresses:{evm:r,solana:n,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},{env:{}}),a=[],l=[],p=0,c=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let g=u.fungibleTokens?.status??"unavailable";g==="ok"?p+=1:g==="unavailable"&&(c+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:g,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let E=u.native;u.status==="ok"&&E&&E.status==="ok"&&E.amountRaw&&E.amountRaw!=="0"&&E.amountRaw!=="0x0"&&a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:E.symbol,decimals:E.decimals,amount:String(E.amountRaw),amountRaw:String(E.amountRaw),amountFormatted:E.amount,kind:"native",valueUsd:E.usdValue!=null?String(E.usdValue):null,priced:E.usdValue!=null});for(let S of u.fungibleTokens?.assets||[]){let I=S.amountRaw!=null?String(S.amountRaw):null;if(!I||I==="0")continue;let v=typeof S.decimals=="number"&&Number.isInteger(S.decimals)?S.decimals:null;a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:S.symbol||S.coin||"TOKEN",decimals:v,amount:I,amountRaw:I,amountFormatted:S.amount!=null?String(S.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:S.address||S.mint||null,valueUsd:S.usdValue!=null?String(S.usdValue):null,priced:S.usdValue!=null,source:S.source||u.fungibleTokens?.source||null})}}let d=c>0||!!(s.valuation&&s.valuation.complete===!1),f=Ji(a);return{status:200,body:{ok:!0,owner:s.addresses?.evm??r,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&c===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${c} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function ar(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function is(e){let t=B(e,"body"),r=sr(t.owner);if(!r)throw new M(400,"owner-required","owner must be an EVM address");let n=await er({addresses:{evm:r}},ar()),o=n?.inventory&&typeof n.inventory=="object"?n.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(n?.items)?n.items:[]).map(c=>{if(!c||typeof c!="object")return null;let d=typeof c.collection=="string"?c.collection:c.collection&&typeof c.collection=="object"&&typeof c.collection.slug=="string"?c.collection.slug:typeof c.contract=="string"?c.contract:null;return{chain:c.chain??null,chainId:c.chainId??null,family:c.family??null,owner:c.owner??r,contract:c.contract??null,tokenId:c.tokenId==null?null:String(c.tokenId),tokenStandard:c.tokenStandard??null,collection:d,name:typeof c.name=="string"?c.name.slice(0,160):null,imageUrl:c.imageUrl??c.image??null,estimatedValueUsd:c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,floorUsd:c.floorUsd!=null&&Number.isFinite(Number(c.floorUsd))?Number(c.floorUsd):c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,spam:c.spam===!0,nsfw:c.nsfw===!0,source:typeof c.source=="string"?c.source.slice(0,64):null}}).filter(Boolean),a=Array.isArray(n?.coverage)?n.coverage:[],l=Qi(s),p=n?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:r,queriedAt:n.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:a.map(c=>({family:c?.family??null,chain:c?.chain??null,chainId:c?.chainId??null,status:c?.status??null,count:c?.count??null,complete:c?.complete===!0,source:c?.source??null,error:null,reason:typeof c?.reason=="string"?c.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:a.filter(c=>c?.status==="partial").map(c=>c.chain).filter(Boolean),unavailable:a.filter(c=>c?.status==="unavailable").map(c=>c.chain).filter(Boolean),unconfigured:a.filter(c=>c?.status==="not-configured").map(c=>c.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:n?.valuation?{estimatedCurrentValueUsd:n.valuation.estimatedCurrentValueUsd??null,valuedItems:n.valuation.valuedItems??null,unvaluedItems:n.valuation.unvaluedItems??null,complete:n.valuation.complete===!0}:null}}}var ss=6e4,as=120,cr=10,cs=300,ls=cr,rr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),us=4096,ge=new Map;function ds(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let r=t.split(",")[0].trim();if(r)return r.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function ps(e,t){let r=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),n=r==="127.0.0.1"||r==="::1"||r.startsWith("127."),o=ds(e),i=n&&o!==r,s=rr.has(t)?n&&!i?ls:cr:n&&!i?cs:as,a=Date.now(),l=`${o}:${rr.has(t)?"amp":"std"}`,p=ge.get(l);if(!p||a>=p.resetAt){for(ge.set(l,{count:1,resetAt:a+ss});ge.size>us;){let c=ge.keys().next();if(c.done)break;ge.delete(c.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-a)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var or=Object.freeze({"GET /public/health":ji,"GET /public/config":Xi,"POST /public/connect/request":Wi,"POST /public/connect/assemble":Ki,"POST /public/grants/active":Gi,"POST /public/grants/get":Yi,"POST /public/approvals":Zi,"POST /public/portfolio":os,"POST /public/nfts":is});function It(e={}){return{"cache-control":"no-store","x-oracle-plane":le,"x-oracle-unsigned":"true",...e}}function fs(e,t,r,n){e.writeHead(t,It({"content-type":r})),e.end(n)}function ms(e,t,r){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let n=r===""?"/":r,o=nr[n]||nr[n.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Ri(xt(vt,o.file));if(!i.startsWith(vt+Oi)&&i!==vt)return W(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!Pi(i))return W(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=ir(i);return e.method==="HEAD"?(t.writeHead(200,It({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(fs(t,200,o.type,s),!0)}async function hs(e,t){let n=new URL(e.url,"http://localhost").pathname||"/";n.length>1&&n.endsWith("/")&&n!=="/oracle-console/"&&(n=n.replace(/\/+$/,"")),n===""&&(n="/");let o=n.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=or[i];try{if(!s){if(ms(e,t,n))return;throw Object.keys(or).some(d=>d.endsWith(` ${o}`))?new M(405,"method-not-allowed",`unsupported method for ${o}`):new M(404,"not-found",`unknown route ${o}`)}let a=ps(e,o);if(!a.allowed){t.writeHead(429,It({"content-type":"application/json","retry-after":String(a.retryAfterSec),"x-ratelimit-limit":String(a.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${a.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await Hi(e),p=await s(l);W(t,p.status,p.body)}catch(a){if(a instanceof D){W(t,500,{error:"secret-leak-blocked"});return}if(a instanceof V){W(t,400,{error:"invalid-grant",errors:a.errors.map(l=>({field:l.field,message:l.message}))});return}if(a instanceof M){W(t,a.status,{error:a.code,message:a.message});return}if(a instanceof TypeError){W(t,400,{error:"bad-request",message:a.message});return}W(t,500,{error:"internal-error"})}}function ys(){return Ci((e,t)=>{hs(e,t).catch(()=>{try{W(t,500,{error:"internal-error"})}catch{}})})}function kt({host:e,port:t}={}){let r=zi(e??St("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",Bi)),n=t??St("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(Mi)),o=Number(n);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(n)}`);return{host:r,port:o}}function lr(e={}){let{host:t,port:r}=kt(e),n=ys();return n.listen(r,t),n}var _t=kt(),$e=lr(_t);$e.on("listening",()=>{let e=$e.address(),t=typeof e=="object"&&e?e.address:_t.host,r=typeof e=="object"&&e?e.port:_t.port;console.log(`oracle-public-server listening on http://${t}:${r} (plane=${le}, version=${Ce}, unsigned-only)`)});$e.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{$e.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});
+var we=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};import Z from"node:net";import Nr from"node:dns";function Ae(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let d=c.split(":"),f=d.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(g=>!Number.isInteger(g)||g<0||g>255))return null;d.splice(d.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return d.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:d.map(u=>Number.parseInt(u,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let a=t.includes("::"),l=8-i.length-s.length;if(!a&&l!==0||a&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(c=>[c>>8,c&255]))}function He(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function Ve(e){if(Z.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(Z.isIPv6(e)){let t=Ae(e);if(!t)return!1;let r=Ae("::ffff:0:0");return He(t,r,96)?Ve([...t.slice(12)].join(".")):He(t,Ae("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>He(t,Ae(o),i)):!1}return!1}function Pr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Cr.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=Z.isIP(r);return n!==0&&!Ve(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function ze(e,{lookupFn:t=Nr.promises.lookup}={}){let r=Pr(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:Z.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!Ve(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function je({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let d=await t();r=d.Agent,n=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(Z.isIPv6(f.address)?6:4)})),a=(d,f,u)=>{i.set(o(d),s(typeof f=="string"?[{address:f,family:u}]:f))},l=d=>{let f=o(d);if(Z.isIP(f))return[{address:f,family:Z.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return u},p=new r({connect:{lookup(d,f,u){let g;try{g=l(d)}catch(A){return u(A)}return f?.all?u(null,g):u(null,g[0].address,g[0].family)}}}),c=$r((d,f={})=>n(d,{...f,dispatcher:p}),a);return{dispatcher:p,fetch:c,pin:a,resolve:l,async close(){try{await p.destroy()}catch{}}}}function $r(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[We]=Object.freeze({pin:t}),e}function Ke(e){return typeof e=="function"&&typeof e[We]?.pin=="function"}function Zt(e,t,r){if(!Ke(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[We].pin(t,r)}var Cr,We,en=we(()=>{Cr=new Set(["localhost","metadata.google.internal","metadata.goog"]);We=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as Or}from"node:crypto";function Fr(e){let t=String(e||"").toLowerCase();return an.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function Mr(e){let t={};for(let[r,n]of Object.entries(e||{}))Fr(r)||(t[r]=n);return t}function qr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Dr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Hr(e,t,r,n={}){let o={};for(let[c,d]of Object.entries(r||{}))o[c.toLowerCase()]=d;let i=Object.keys(o).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),a=[...new Set([...an,...i])].sort().map(c=>`${c}=${o[c]??""}`).join(`
+`),l=Or("sha256").update(a).digest("hex").slice(0,32),p=`${n.untrustedUrl?"untrusted":"trusted"}:${n.maxResponseBytes??"unbounded"}`;return`${e} ${t} ${p} ${l}`}function Vr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,nn):Math.min(250*2**e,nn)+Math.floor(Math.random()*100)}function me(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Ye(e,t,r){return me(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function he(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function jr(e){return e?e.byteLength??e.length??0:0}async function on(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(he(e),!n))throw Ye(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!n)throw Ye(r,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let a=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(a.push(Buffer.from(d)),l+=jr(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!n))throw Ye(r,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(p?c.subarray(0,t):c).toString("utf8")}function sn(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Wr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:p=null,importUndici:c,validateResponse:d}){let f=new AbortController,u=setTimeout(()=>f.abort(),i),g=null,A=t,S=s?{lookupFn:s}:{};if(l&&!a&&!Ke(A))throw me(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let I=async(v,{status:k=null}={})=>{let m=await ze(v,S);if(!m.ok)throw me(k==null?`HTTP refused ${v}: ${m.error}`:`HTTP redirect to ${v} ${m.error}`,k==null?{}:{status:k});let y=new URL(v).hostname;if(a){if(g&&(await g.close(),g=null),!g)try{g=await je({requireUndici:!0,...c?{importUndici:c}:{}})}catch(E){throw me(k==null?`HTTP refused ${v}: ${E?.message||E}`:`HTTP redirect to ${v} refused: ${E?.message||E}`,k==null?{}:{status:k})}g.pin(y,m.addresses),A=g.fetch}else Zt(A,y,m.addresses);return m};try{let v=String(e),k={...n||{}};l&&await I(v);for(let m=0;m<=rn;m+=1){let y=await A(v,{method:r,headers:k,body:o,signal:f.signal,redirect:"manual"});if(Ur.has(y.status)){if(r!=="GET"&&r!=="HEAD"){let $=await on(y,p??Br,{url:v,truncate:!0}),j=new Error(`HTTP ${y.status} ${r} ${v} redirected non-idempotent request`);throw j.status=y.status,j.body=sn($)??$.slice(0,300),j}if(m===rn)throw he(y),new Error(`HTTP redirect loop for ${e}`);let N=y.headers?.get?.("location"),L;try{L=qr(N,v)}catch($){throw he(y),$}let H=!Dr(L,v);if(he(y),H&&(k=Mr(k)),l)await I(L,{status:y.status});else if(H){let $=await ze(L,S);if(!$.ok){let j=new Error(`HTTP redirect from ${v} ${$.error}`);throw j.status=y.status,j.retryable=!1,j}a&&$.addresses?.length&&(g||(g=await je(c?{importUndici:c}:{})),g&&(g.pin(new URL(L).hostname,$.addresses),A=g.fetch))}v=L;continue}if(typeof d=="function")try{await d(y,{url:v})}catch(N){throw he(y),me(N?.message||String(N))}let E=await on(y,p,{url:v,onOversize:()=>f.abort()}),P=sn(E);if(!y.ok){let N=new Error(`HTTP ${y.status} ${r} ${v}`);throw N.status=y.status,N.retryAfter=y.headers?.get?.("retry-after")??null,N.body=P??E.slice(0,300),N}return P??E}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(u),g&&await g.close()}}async function R(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let n=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},s=t.body;s!=null&&typeof s!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",s=JSON.stringify(s));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):Lr,l=t.lookupFn,p=!t.fetchImpl,c=t.untrustedUrl===!0,d=t.importUndici,f=t.validateResponse,u=Number(t.maxResponseBytes),g=Number.isFinite(u)&&u>0?Math.floor(u):null,A=async()=>{let m;for(let y=0;y<=a;y++)try{return await Wr(e,{fetchImpl:r,method:o,headers:i,body:s,timeoutMs:n,lookupFn:l,realFetch:p,untrustedUrl:c,maxResponseBytes:g,importUndici:d,validateResponse:f})}catch(E){m=E;let P=E?.status,N=E?.name==="AbortError",L=new Set([408,425,429]),H=E?.retryable===!1?!1:P!=null?L.has(P)||Rr.has(P)&&tn.has(o):!N&&tn.has(o);if(y===a||!H)throw E;await zr(Vr(y,E?.retryAfter))}throw m};if(!(t.dedupe!==!1&&o==="GET"&&s==null))return A();let I=Hr(o,e,i,{untrustedUrl:c,maxResponseBytes:g}),v=Ge.get(I);if(v)return v;let k=A().finally(()=>Ge.delete(I));return Ge.set(I,k),k}async function C(e){let t=Date.now();try{let r=await e();return{ok:!0,ms:Date.now()-t,data:r}}catch(r){return{ok:!1,ms:Date.now()-t,error:String(r.message||r),status:r.status??null}}}async function G(e,t,r){let n=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,n.length||1)),i=new Array(n.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<n.length;){let a=s++;i[a]=await r(n[a],a)}})),i}var Rr,tn,Lr,nn,an,Ur,rn,Br,Ge,zr,U=we(()=>{en();Rr=new Set([408,425,429,500,502,503,504]),tn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Lr=2,nn=4e3,an=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],Ur=new Set([301,302,303,307,308]),rn=3,Br=64*1024;Ge=new Map;zr=e=>new Promise(t=>setTimeout(t,e))});function ln(e){return Kr.get(Number(e))||null}function un(e,t=process.env){let r=ln(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}var cn,Kr,dn=we(()=>{cn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Kr=new Map(Object.values(cn).map(e=>[e.chainId,e]))});import{Interface as Gr,getAddress as Yr}from"ethers";function Je(e,t){try{return Yr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Xr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=un(e,r);return n||Jr[Number(e)]||null}function Zr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Qr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}async function z(e,t,r=[],n={}){let o=String(t||"");Zr(o);let i=Xr(e,n);if(!i)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let a=await R(i,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:r},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(a?.error){let l=new Error(a.error.message||JSON.stringify(a.error));throw l.code=a.error.code,l}return a.result}async function Xe(e,t={}){let r=await z(e,"eth_blockNumber",[],t);return parseInt(r,16)}async function Qe(e,t,r={}){if(!t)throw new Error("rpcGetBalance requires address");let n=await z(e,"eth_getBalance",[t,"latest"],r);return{chainId:Number(e),address:t,balanceWei:BigInt(n).toString(),balanceHex:n}}async function fn(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=Je(e.token||e.tokenAddress,"token"),o=Je(e.owner,"owner"),i=Je(e.spender,"spender"),s=pn.encodeFunctionData("allowance",[o,i]),a=await z(r,"eth_call",[{to:n,data:s},e.blockTag||"latest"],t),l=pn.decodeFunctionResult("allowance",a),p=BigInt(l[0]);return{chainId:r,token:n,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var pn,Jr,Qr,ie=we(()=>{U();dn();pn=new Gr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Jr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};Qr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/});import{createServer as Pi}from"node:http";import{readFileSync as ir,existsSync as $i}from"node:fs";import{dirname as Oi,join as xt,normalize as Ri,sep as Li}from"node:path";import{fileURLToPath as Ui}from"node:url";import{createHash as fr}from"node:crypto";var pe=1,Ct=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),mr=Object.freeze(["read","simulate"]),Pt=1e4,$t=1440*60,Ot=128,Rt=256,Lt=64,Ut=256,Bt=/^0x[0-9a-fA-F]{40}$/,hr=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,yr=/^[a-z][a-z0-9_-]*:\*$/,br=/^[A-Za-z0-9._:-]+$/,gr=/^[A-Za-z0-9._:-]+$/,Ft=/^(0|[1-9][0-9]*)$/,V=class extends Error{constructor(t){let r=t.map(n=>`${n.field}: ${n.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${r.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function Mt(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function wr(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return Ft.test(t)?t:null}return null}function K(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!Ft.test(t))return null;let r=Number(t);return Number.isSafeInteger(r)?r:null}return null}function Be(e){let t=String(e).split(":")[0];return mr.includes(t)}function Fe(e,t={}){let r=[],n=(d,f)=>r.push({field:d,message:f});if(!Mt(e))return n("grant","grant must be a plain object"),{ok:!1,errors:r,grant:null};for(let d of Object.keys(e))Ct.includes(d)||n(d,"unknown field is not allowed");for(let d of Ct)(!(d in e)||e[d]==null)&&n(d,"required field is missing");if(r.length)return{ok:!1,errors:r,grant:null};let o={},i=K(e.chainId);i==null||i<=0?n("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!Bt.test(f.trim())?n(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)n("actions","must be a non-empty array of action scopes");else if(e.actions.length>Lt)n("actions",`too many actions (max ${Lt})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){n("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&yr.test(u)?d.push(u):n("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!hr.test(u)){n("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))n("targets","must be an array of contract addresses");else if(e.targets.length>Ut)n("targets",`too many targets (max ${Ut})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!Bt.test(u)){n("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!Be(u));(f.length>0||o.actions.length===0)&&n("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=wr(e[d]);f==null?n(d,"must be a non-negative integer wei amount"):o[d]=f}let s=K(e.maxSlippageBps);s==null||s>Pt?n("maxSlippageBps",`must be an integer between 0 and ${Pt}`):o.maxSlippageBps=s;let a=864e10,l=K(e.expiresAt);if(l==null||l<=0)n("expiresAt","must be a positive unix-seconds timestamp");else if(l>a)n("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=K(t.now);d==null?n("expiresAt","opts.now must be a unix-seconds integer"):l<=d?n("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>$t&&n("expiresAt",`grant exceeds the hard 24-hour TTL (${$t} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():K(e.nonce)!=null?String(K(e.nonce)):null;!p||p.length>Ot||!br.test(p)?n("nonce",`must be a non-empty string (max ${Ot} chars, [A-Za-z0-9._:-])`):o.nonce=p;let c=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!c||c.length>Rt||!gr.test(c)?n("revocationKey",`must be a non-empty public identifier (max ${Rt} chars, [A-Za-z0-9._:-])`):o.revocationKey=c,r.length?{ok:!1,errors:r,grant:null}:{ok:!0,errors:[],grant:o}}function Se(e,t={}){let{ok:r,errors:n,grant:o}=Fe(e,t);if(!r)throw new V(n);return o}function Me(e,t={}){let r=Se(e,t),o=Object.keys(r).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(r[i])}`);return`{"version":${pe},${o.join(",")}}`}function ve(e,t={}){return fr("sha256").update(Me(e,t),"utf8").digest("hex")}function qt(e,t){let r=K(t),n=K(Mt(e)?e.expiresAt:null);return r==null||n==null?!0:n<=r}var Dt="oracle-connect-request",Sr="oracle-unsigned-grant",vr="oracle-grant-canonical-json-utf8-v1",D=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},Ar=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Er=Object.freeze(["privkey","wif","xprv","seed"]);function qe(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return Ar.test(t)||Er.includes(r)}var Ht=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Vt=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function xr(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Vt.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function zt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new D("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=xr(t);for(let{rule:o,re:i}of Ht)if(i.test(r))throw new D("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new D("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&qe(o))throw new D(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function q(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Vt.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Ht)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new D(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&qe(o))throw new D(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");q(o,`${t}[key]`,r),q(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())q(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>q(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if(qe(o))throw new D(`${t}.${o}`,"forbidden-key-name");q(i,`${t}.${o}`,r,o)}return e}function fe(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))fe(t)}return e}function jt(e,t){let r=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(r)||r<=0)throw new V([{field:t,message:"must be a positive unix-seconds integer"}]);return r}function Wt(e){if(e?.now==null)throw new V([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return jt(e.now,"opts.now")}function Ir(e){return new Date(e*1e3).toISOString()}function kr(e,t){let r=e.actions.every(n=>Be(n));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${pe}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${Ir(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",r?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
+`)}function Kt(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new V([{field:"request",message:"request must be a plain object"}]);let r=Wt(t),{ttlSeconds:n,...o}=e,i={...o};if(n!=null){if(i.expiresAt!=null)throw new V([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=jt(n,"ttlSeconds");i.expiresAt=r+l}let s=Se(i,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),a=fe({kind:Dt,version:pe,grant:s});return q(a)}function Gt(e={},t={}){let r=Wt(t),n=e&&e.kind===Dt?e.grant:e,o=Se(n,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),i=Me(o),s=ve(o),a=Buffer.from(i,"utf8"),l=fe({kind:Sr,unsigned:!0,payload:fe({version:pe,grantId:s,grant:o,canonical:i}),signing:fe({scheme:vr,message:i,bytesHex:`0x${a.toString("hex")}`,byteLength:a.length,sha256:s}),render:kr(o,s)});return q(l)}var oe=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function Yt(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function _r(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function De(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function Tr(e,t,r){if(e==null)return!1;if(typeof e=="function")return e(t,r)===!0;let n=[t,r.revocationKey];return e instanceof Set?n.some(o=>e.has(o)):Array.isArray(e)?n.some(o=>e.includes(o)):typeof e.has=="function"?n.some(o=>e.has(o)):!1}function Jt(e,{now:t,revoked:r}={}){let n=De(t),{grant:o,revoked:i}=_r(e),{ok:s,grant:a}=Fe(o);if(!s)return{status:oe.INVALID,id:null,grant:null};let l=ve(a);return i||Tr(r,l,a)?{status:oe.REVOKED,id:l,grant:a}:qt(a,n)?{status:oe.EXPIRED,id:l,grant:a}:{status:oe.ACTIVE,id:l,grant:a}}function Xt(e,{now:t,revoked:r,agentAddress:n,accountAddress:o,chainId:i}={}){let s=De(t),a=n!=null?String(n).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,c=[];for(let d of Yt(e)){let{status:f,id:u,grant:g}=Jt(d,{now:s,revoked:r});f===oe.ACTIVE&&(a!=null&&g.agentAddress!==a||l!=null&&g.accountAddress!==l||p!=null&&g.chainId!==p||c.push(Object.freeze({id:u,grant:g})))}return c.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),q(Object.freeze(c))}function Qt(e,t,{now:r,revoked:n}={}){let o=De(r),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of Yt(e)){let a=Jt(s,{now:o,revoked:n});if(a.status!==oe.INVALID&&a.id===i)return q(Object.freeze({id:a.id,status:a.status,grant:a.grant}))}return null}import{Interface as wn,getAddress as to,id as Sn}from"ethers";ie();U();var Ds=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var Vs=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),Ze=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),et=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ie();ie();var Ee=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);U();ie();var mn=new wn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),hn=new wn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),no=Sn("Approval(address,address,uint256)"),ga=Sn("ApprovalForAll(address,address,bool)"),ro=1e4,oo=2e5,io=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),so=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),ao=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),co=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),lo=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),uo=(1n<<256n)-1n,po=uo/2n,fo=4320*60*60*1e3,mo=360*60*1e3,ho=600*1e3,yo=45*1e3,bo=512,go=128,yn=new Map,tt=new Map,bn=new Map;function se(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function rt(e,t,r){let n=e.get(t);return n?Date.now()-n.at>r?(e.delete(t),null):n:null}function xe(e,t,r,n){for(e.delete(t),e.set(t,{at:Date.now(),value:r});e.size>n;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function wo(e,t){try{return to(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function So(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function gn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function vo({unlimited:e,spenderLabel:t,lastActivityAt:r}){if(e)return"unlimited";if(!t)return"unknown-spender";if(r){let n=Date.parse(r);if(Number.isFinite(n)&&Date.now()-n>fo)return"stale"}return"scoped"}function Ao(e,t,r){if(r)return"UNLIMITED";if(t==null)return e.toString();let n=10n**BigInt(t),o=e/n,i=e%n;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Eo(e,t,r,n){let o=`${e}:${t}`,i=n?.get(o);if(i)return i;if(se(r)){let a=rt(yn,o,mo);if(a)return a.value}let s=(async()=>{let a=async d=>{try{let f=mn.encodeFunctionData(d,[]),u=await z(e,"eth_call",[{to:t,data:f},"latest"],r);return!u||u==="0x"?null:mn.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([a("decimals"),a("symbol")]),c={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return se(r)&&xe(yn,o,c,bo),c})();return n?.set(o,s),s}async function xo(e,t,r){let n=Math.min(Math.max(Number(r.lookbackBlocks)||ro,1),oo),o=await Xe(e,r);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-n),s=await z(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[no,So(t)]}],r);if(!Array.isArray(s))throw new Error("log scan returned no array");let a=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),c=l?.topics?.[2];!p||!c||a.set(`${p}:${gn(c)}`,{token:p,spender:gn(c)})}return{pairs:[...a.values()],fromBlock:i,toBlock:o}}function Io(e){return(lo[e]||[]).flatMap(r=>so.map(n=>({token:r.address,spender:n.address,symbol:r.symbol,decimals:r.decimals})))}async function ko(e,t,r={}){let n=[],o="direct-probe",i=null,s=Io(e),a=nt(e),l=se(r)&&rt(tt,e,ho)?.value===!1;if(s.length===0&&a.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await xo(e,t,r);n=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},se(r)&&xe(tt,e,!0,64)}catch{if(se(r)&&xe(tt,e,!1,64),n=s,n.length===0&&a.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await G(n,r.concurrency||4,async u=>{try{let g=await fn({chainId:e,token:u.token,owner:t,spender:u.spender},r),A=BigInt(g.allowance);if(A<=0n)return null;let S=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Eo(e,u.token,r,p),I=A>=po,v=io[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:S.symbol,decimals:S.decimals,spender:u.spender,spenderLabel:v,allowance:A.toString(),allowanceDisplay:Ao(A,S.decimals,I),unlimited:I,lastActivityAt:null,risk:vo({unlimited:I,spenderLabel:v,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await To(e,t,r);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:n.length,collectionsProbed:nt(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function _o(e,t,r,n,o){try{let i=hn.encodeFunctionData("isApprovedForAll",[r,n]),s=await z(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!hn.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function nt(e){return(co[e]||[]).flatMap(r=>ao.map(n=>({collection:r.address,collectionName:r.name,operator:n.address,operatorLabel:n.label})))}async function To(e,t,r){let n=nt(e);return n.length===0?[]:(await G(n,r.concurrency||4,async i=>await _o(e,i.collection,t,i.operator,r)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function vn(e={},t={}){let r=wo(e.owner||e.address,"owner"),n=new Map(Ee.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>n.has(u)):[...n.keys()],i=`${r}:${[...o].sort((u,g)=>u-g).join(",")}:${e.lookbackBlocks??""}`,s=se(t)&&!e.refresh;if(s){let u=rt(bn,i,yo);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let a=await G(o,e.concurrency||3,u=>ko(u,r,{...t,lookbackBlocks:e.lookbackBlocks})),l=a.flatMap(u=>u.approvals),p=a.map(u=>u.scan),c=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:r,scannedRange:c?`last ${c.toBlock-c.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&xe(bn,i,f,go),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as Xo}from"ethers";U();ie();U();var An="mainnet-beta",No="https://api.mainnet-beta.solana.com",ot="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function Co(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||No).trim()}function ee(e,t="address"){let r=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(r))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return r}function Po(e,t){return t?[...e,{commitment:t}]:e}async function En(e,t=[],r={}){let n=String(e||"");if(n==="sendTransaction"||n==="sendRawTransaction"||n==="requestAirdrop"||n==="requestAirDrop"||/airdrop/i.test(n)||/^send/i.test(n))throw new Error(`solana-rpc: ${n} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await R(Co(r),{method:"POST",body:{jsonrpc:"2.0",id:r.id||1,method:e,params:t},fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function xn(e={},t={}){let r=ee(e.address||e.owner,"address"),n=await En("getBalance",Po([r],e.commitment),t);return{provider:"solana-rpc",cluster:An,address:r,lamports:String(n?.value??0),slot:n?.context?.slot??null,raw:n}}function $o(e={}){let t=e.account?.data?.parsed?.info||{},r=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(r.amount??"0"),decimals:r.decimals??null,uiAmount:r.uiAmount??null,uiAmountString:r.uiAmountString??null,raw:e}}async function it(e={},t={}){let r=ee(e.owner||e.address,"owner"),n=e.mint?{mint:ee(e.mint,"mint")}:{programId:ee(e.programId||ot,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await En("getTokenAccountsByOwner",[r,n,o],t),s=Array.isArray(i?.value)?i.value.map($o):[];return{provider:"solana-rpc",cluster:An,owner:r,filter:n,slot:i?.context?.slot??null,accounts:s,raw:i}}U();var Oo="mainnet",Ro="https://mempool.space/api",Lo="https://mempool.space/testnet/api";function In(e={}){return String(e.network||process.env.BTC_NETWORK||Oo).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Uo(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):In(e)==="testnet"?Lo:Ro}function Y(e,t="address"){let r=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(r)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(r))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return r}async function Bo(e,t={}){let r=`${Uo(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(r,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),i=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${i.slice(0,160)}`);return i}async function Fo(e,t={}){let r=await Bo(e,t);try{return JSON.parse(r)}catch{return r}}async function kn(e={},t={}){let r=Y(e.address||e.addr,"address"),n=await Fo(`/address/${r}`,t),o=n.chain_stats||{},i=n.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),a=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:In(t),address:r,balanceSats:String(s-a),chainStats:o,mempoolStats:i,raw:n}}var _n="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function ae({provider:e,defaultUrl:t,hosts:r=[],url:n,strict:o=!1}){let s=(String(n??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Tn(t)};let a;try{a=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=a.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Tn(t),...r]).has(l)){let c=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return a.protocol==="http:"&&!c?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[_n]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${_n}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Tn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function te(e,t,r){let n={...e};if(!r)return n;for(let[o,i]of Object.entries(t||{}))i&&(n[o]=i);return n}function st(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Mo=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function qo(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",r=!1;try{let n=st(e);if(n){let o=new URL(n).host,i=new URL(n).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);r=Mo.includes(o)&&(i==="https:"||s)}}catch{r=!1}return te({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},r)}async function Nn(e,t={}){let n=await(t.fetchImpl||fetch)(e,{method:"GET",headers:qo(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await n.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!n.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${n.status} ${String(o).slice(0,160)}`);return i}async function Cn(e={},t={}){let r=Y(e.address||e.addr,"address"),n=st(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${n}/v1/indexer/address/${r}/runes/balance-list?start=0&limit=100`,`${n}/v1/runes/address/${r}`,`${n}/runes/balance/${r}`,`${n}/address/${r}/runes`],i=null;for(let s of o)try{let a=await Nn(s,t),l=Do(a);return{provider:"bitcoin-meta",address:r,ok:!0,count:l.length,balances:l,source:s}}catch(a){i=a}return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function Do(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({rune:n.rune||n.runeid||n.runeId||n.spacedRune||n.name||n.ticker||null,runeId:n.runeid||n.runeId||n.id||null,amount:String(n.amount??n.balance??n.total??n.qty??"0"),symbol:n.symbol||null,divisibility:n.divisibility??n.div??null,raw:n}))}async function Ie(e={},t={}){let r=Y(e.address||e.addr,"address"),n=st(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${n}/v1/indexer/address/${r}/inscription-data?cursor=0&size=${o}`,`${n}/v1/inscriptions/address/${r}?limit=${o}`,`${n}/address/${r}/inscriptions?limit=${o}`],s=null;for(let a of i)try{let l=await Nn(a,t),p=Ho(l);return{provider:"bitcoin-meta",address:r,ok:!0,count:p.length,inscriptions:p,source:a}}catch(l){s=l}return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function Ho(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({id:n.inscriptionId||n.id||n.inscription_id||null,number:n.inscriptionNumber??n.number??null,sat:n.sat||n.satoshi||null,contentType:n.contentType||n.content_type||null,utxo:n.utxo||n.output||(n.txid!=null?`${n.txid}:${n.vout??n.n}`:null),raw:n}))}U();var Vo="https://api.hyperliquid.xyz/info",zo="https://api.hyperliquid-testnet.xyz/info";function jo({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let r=process.env.HL_API_URL.replace(/\/$/,"");return r.endsWith("/info")?r:`${r}/info`}return e||process.env.HL_TESTNET==="1"?zo:Vo}async function at(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let r=jo(t);return R(r,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function Pn(e={}){return at({type:"allMids"},e)}async function $n(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return at({type:"spotClearinghouseState",user:e},t)}async function On(e,t={}){if(!e)throw new Error("hlUserState requires user");return at({type:"clearinghouseState",user:e},t)}U();var Wo="https://coins.llama.fi";function Ko(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||Wo).replace(/\/$/,"")}async function ct(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return R(`${Ko(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}U();var Rn=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,Go=/[<>&`*_~[\]()|\\]/g,Yo=/[\u0000-\u001F\u007F]/g;function lt(e,{max:t=32,fallback:r=""}={}){return e==null?r:String(e).normalize("NFKC").replace(Rn,"").replace(Yo,"").replace(Go,"").replace(/\s+/g," ").trim().slice(0,t).trim()||r}function ut(e){if(e==null)return!1;let t=String(e);return Rn.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var Ln=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function Jo(e,t={}){let r=Number(e),n=t.baseUrl||Ln[r];if(!n)throw new Error(`Blockscout not configured for chainId ${r}`);return n.replace(/\/$/,"")}function Un(e){return!!Ln[Number(e)]}async function Bn(e={},t={}){if(!e.address)throw new Error("address required");let r=Number(e.chainId||1),n=`${Jo(r,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await R(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function Fn(e=[],{fungibleOnly:t=!0}={}){let r=[];for(let n of e){if(!n||typeof n!="object")continue;let o=n.token&&typeof n.token=="object"?n.token:{},i=String(o.type||n.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||n.token_address||n.tokenAddress||null;if(!s||typeof s!="string")continue;let a=String(n.value??n.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(a)||a==="0")continue;let l=o.decimals??n.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=lt(o.symbol||o.name,{max:32,fallback:"TOKEN"}),c=lt(o.name,{max:80,fallback:""})||null;r.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:c,decimals:l,amountRaw:a,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:ut(o.symbol)||ut(o.name)||void 0})}return r}var Qo="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",qn=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function J(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function ke(e,...t){for(let r of t){let n=String(e?.[r]||"").trim();if(n)return n}return null}function Mn(e){if(!e)return null;try{return Xo(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function ft(e={},t=process.env){let r=e.addresses||{},n=Mn(r.evm||e.evmAddress||ke(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=r.solana||e.solanaAddress||ke(t,"ORACLE_SOLANA_ADDRESS"),i=r.bitcoin||e.bitcoinAddress||ke(t,"ORACLE_BITCOIN_ADDRESS"),s=Mn(r.hyperliquid||e.hyperliquidAddress||ke(t,"ORACLE_HYPERLIQUID_ADDRESS")||n);return{evm:n,solana:o?ee(o,"portfolio Solana address"):null,bitcoin:i?Y(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function ye(e,t){let r=BigInt(String(e||"0")),n=Number(t);if(!Number.isInteger(n)||n<0||n>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(n===0)return r.toString();let o=r<0n,i=o?-r:r,s=10n**BigInt(n),a=i/s,l=String(i%s).padStart(n,"0").replace(/0+$/,"");return`${o?"-":""}${a}${l?`.${l}`:""}`}function ce(e){let t=Number(e);return Number.isFinite(t)?t:null}function _e(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function X(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Dn(e,t){let r=qn[t],n=r?e?.coins?.[r]:null,o=Number(n?.price);return{key:r||null,priceUsd:Number.isFinite(o)?o:null,timestamp:n?.timestamp??null,confidence:n?.confidence??null}}function Zo(e){let t=new Map;for(let r of e)if(r?.ok)for(let n of r.data?.accounts||[]){let o=BigInt(String(n.amount||"0"));if(o===0n||!n.mint)continue;let i=`${n.mint}:${n.decimals??"unknown"}`,s=t.get(i)||{mint:n.mint,amountRaw:0n,decimals:n.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,r.program&&s.programs.add(r.program),t.set(i,s)}return[...t.values()].map(r=>{let n=r.amountRaw.toString(),o=r.decimals==null?null:ye(n,r.decimals),i=r.decimals===0&&r.amountRaw===1n;return{mint:r.mint,amountRaw:n,amount:o,decimals:r.decimals,tokenPrograms:[...r.programs],accountCount:r.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function dt(e,t){return{family:e,status:"unsupported",reason:t}}function pt(e,t){if(!e||e.status!=="ok")return e;let r=Dn(t,e.symbol),n=ce(e.amount),o=n!=null&&r.priceUsd!=null?_e(n*r.priceUsd):null;return{...e,price:r,usdValue:o}}async function Hn(e={},t={}){let r=new Date().toISOString(),n=ft(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,a=new Map(Ee.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...a.keys()],p=[...new Set(Object.values(qn))],c=o?C(()=>ct(p,J(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=G(l,e.concurrency||5,async h=>{let b=a.get(h);if(!b)return{family:"evm",chainId:h,name:null,address:n.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!n.evm)return{family:"evm",chainId:h,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let x={...J(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},T=await C(()=>Qe(h,n.evm,x));if(!T.ok)return{family:"evm",chainId:h,name:b.name,address:n.evm,status:"unavailable",latencyMs:T.ms,error:T.error};let O=b.nativeCurrency?.decimals??18,M=b.nativeCurrency?.symbol||"NATIVE",w=T.data.balanceWei,_={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&Un(h)){let Q=await C(()=>Bn({chainId:h,address:n.evm},{...J(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));Q.ok?_={status:"ok",assets:Fn(Q.data,{fungibleOnly:!0}).map(ue=>{let de=ye(ue.amountRaw,ue.decimals);return{...ue,amount:de,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:Q.ms}:_={status:"unavailable",assets:[],reason:Q.error||"blockscout token-balances failed",source:"blockscout",latencyMs:Q.ms}}return{family:"evm",chainId:h,name:b.name,address:n.evm,status:"ok",latencyMs:T.ms,native:{status:"ok",symbol:M,amountRaw:w,decimals:O,amount:ye(w,O)},fungibleTokens:_,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:_.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!n.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=J(t,"solana"),b=await C(()=>xn({address:n.solana},h)),x=i||s?await Promise.all([C(()=>it({owner:n.solana,programId:ot},h)).then(_=>({..._,program:"spl-token"})),C(()=>it({owner:n.solana,programId:Qo},h)).then(_=>({..._,program:"token-2022"}))]):[],T=Zo(x),O=T.filter(_=>_.classification==="collectible-candidate"),M=T.filter(_=>_.classification!=="collectible-candidate"),w=x.filter(_=>!_.ok).map(_=>_.error);return{family:"solana",name:"Solana Mainnet",address:n.solana,status:b.ok||x.some(_=>_.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:ye(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:i?w.length===x.length?"unavailable":w.length?"partial":"ok":"not-requested",assets:i?M:[],errors:w,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?w.length===x.length?"unavailable":"partial":"not-requested",assets:s?O:[],errors:w,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!n.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=J(t,"bitcoin"),b=J(t,"bitcoinMeta"),[x,T,O]=await Promise.all([C(()=>kn({address:n.bitcoin},h)),i?C(()=>Cn({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?C(()=>Ie({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),M=T.ok?T.data:null,w=O.ok?O.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:n.bitcoin,status:x.ok||M?.ok||w?.ok?"ok":"unavailable",native:x.ok?{status:"ok",symbol:"BTC",amountRaw:x.data.balanceSats,decimals:8,amount:ye(x.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:x.error},fungibleTokens:{status:i?M?.ok?"ok":"unavailable":"not-requested",assets:M?.balances||[],error:M?.ok?null:M?.error||T.error,verification:"indexer-reported"},collectibles:{status:s?w?.ok?"ok":"unavailable":"not-requested",assets:w?.inscriptions||[],error:w?.ok?null:w?.error||O.error,unknownNotEmpty:!!w?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),g=(async()=>{if(!n.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=J(t,"hyperliquid"),[b,x,T]=await Promise.all([C(()=>$n(n.hyperliquid,h)),C(()=>On(n.hyperliquid,h)),C(()=>Pn(h))]),O=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(w=>X(w.total)||X(w.hold)).map(w=>({coin:w.coin||null,total:String(w.total??"0"),hold:String(w.hold??"0"),priceUsd:null,usdValue:null})),M=(x.ok&&Array.isArray(x.data?.assetPositions)?x.data.assetPositions:[]).map(w=>w.position||w).filter(w=>X(w.szi)).map(w=>({coin:w.coin||null,size:String(w.szi??"0"),entryPrice:w.entryPx??null,positionValueUsd:w.positionValue??null,unrealizedPnlUsd:w.unrealizedPnl??null,liquidationPrice:w.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:n.hyperliquid,status:b.ok||x.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:O,error:b.ok?null:b.error},perps:{status:x.ok?"ok":"unavailable",accountValueUsd:x.data?.marginSummary?.accountValue??null,withdrawableUsd:x.data?.withdrawable??null,positions:M,error:x.ok?null:x.error},mids:T.ok?T.data:{},source:"hyperliquid-info"}})(),[A,S,I,v,k]=await Promise.all([d,f,u,g,c]),m=k.ok?k.data:null,y=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),E=[];for(let h of A){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let b=y[h.chainId];if(b)for(let x of h.fungibleTokens.assets||[])x.address&&E.push(`${b}:${String(x.address).toLowerCase()}`)}let P=null;if(o&&E.length){let h=[...new Set(E)],b=await C(()=>ct(h,J(t,"prices")));b.ok&&(P=b.data)}let N=A.map(h=>{let b=h.native?{...h,native:pt(h.native,m)}:h;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let x=y[b.chainId],T=b.fungibleTokens.assets.map(O=>{let M=String(O.symbol||"").toUpperCase(),w=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(M)&&(w=1),w==null&&x&&O.address&&P?.coins){let Nt=`${x}:${String(O.address).toLowerCase()}`,ue=P.coins[Nt],de=Number(ue?.price);Number.isFinite(de)&&de>0&&(w=de)}let _=ce(O.amount),Q=_!=null&&w!=null?_e(_*w):null;return{...O,priceUsd:w,usdValue:Q}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:T}}}return b});S.native&&(S.native=pt(S.native,m)),I.native&&(I.native=pt(I.native,m));let L=0,H=0,$=0;for(let h of[...N,S,I]){h.native?.status==="ok"&&X(h.native.amount)&&(h.native.usdValue!=null?(L+=h.native.usdValue,H+=1):$+=1);for(let b of h.fungibleTokens?.assets||[])!X(b.amount)&&!X(b.amountRaw)||(b.usdValue!=null?(L+=b.usdValue,H+=1):$+=1)}let j=Dn(m,"HYPE");for(let h of v.spot?.balances||[]){let b=String(h.coin||"").toUpperCase(),x=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?j.priceUsd||ce(v.mids?.HYPE):ce(v.mids?.[h.coin]),T=ce(h.total);h.priceUsd=x,h.usdValue=T!=null&&x!=null?_e(T*x):null,X(h.total)&&(h.usdValue!=null?(L+=h.usdValue,H+=1):$+=1)}let Oe=ce(v.perps?.accountValueUsd);Oe!=null&&Oe!==0&&(L+=Oe,H+=1);let ur=[...S.fungibleTokens?.assets||[],...S.collectibles?.assets||[]].filter(h=>X(h.amount)).length,dr=(I.fungibleTokens?.assets||[]).length+(I.collectibles?.assets||[]).length;$+=ur+dr;let Re=[...N,S,I,v],ne=h=>Re.filter(b=>b.status===h).length,re=[],Le=N.filter(h=>h.fungibleTokens?.status==="unavailable"),Tt=N.filter(h=>h.fungibleTokens?.status==="ok");Le.length&&!Tt.length?re.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):Le.length&&re.push(`EVM token discovery partial: Blockscout covered ${Tt.length} chain(s); ${Le.length} chain(s) still native-only.`),(S.fungibleTokens?.assets?.length||S.collectibles?.assets?.length)&&re.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),I.collectibles?.unknownNotEmpty&&re.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),k.ok||re.push(`Price provider unavailable: ${k.error}`);let Ue=[dt("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),dt("sui","Sui balance adapter is not installed"),dt("aptos","Aptos balance adapter is not installed")],pr=Re.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:r,addresses:n,coverage:{requestedSurfaces:Re.length,ok:ne("ok"),unavailable:ne("unavailable"),notConfigured:ne("not-configured"),unsupported:ne("unsupported")+Ue.length,evmChainsRequested:l.length,evmChainsOk:N.filter(h=>h.status==="ok").length},valuation:{knownUsd:_e(L),label:"known priced value, not a complete portfolio total",pricedItems:H,unpricedNonzeroItems:$,complete:$===0&&!pr&&ne("unavailable")===0&&ne("not-configured")===0&&Ue.length===0,priceSource:o?"DefiLlama":null,priceStatus:k.ok?"ok":"unavailable",priceQueriedAt:r},chains:[...N,S,I,v],unsupportedFamilies:Ue,warnings:re}}U();U();import{readFileSync as ti,existsSync as ni}from"node:fs";import{getAddress as ri,Interface as Te,TypedDataEncoder as Za,parseUnits as ec}from"ethers";var ei=300*1e3,Ka=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var oi="https://api.opensea.io/api/v2",ii="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",ic=new Te([`function ${ii}`]),sc=new Te(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),si=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),ai=new Set(si),ci=new Set(["solana","flow"]);function li(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!ni(e))return"";try{for(let t of ti(e,"utf8").split(`
+`)){let r=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(r)return r[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function ht(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||li()}function zn(e={}){return ae({provider:"opensea",defaultUrl:oi,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function jn(e={}){return zn(e).baseUrl}function Wn(e={}){return te({accept:"application/json"},{"x-api-key":ht(e)},zn(e).trusted)}function ui(e){let t=String(e||"ethereum").trim().toLowerCase();if(!ai.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function Vn(e,t="address"){try{return ri(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function Kn(e,t=null){let r=String(e||"").trim();if(!r)throw new Error("opensea: account address required");if(t&&!ci.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(r))return Vn(r,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(r))throw new Error("opensea: invalid account address");return r}function di(e={},t,r){return{chain:t,owner:r,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function yt(e={},t={}){if(!ht(t))throw new Error("OPENSEA_API_KEY required");let r=ui(e.chain),n=Kn(e.address||e.owner,r),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],a=e.next?String(e.next):null,l=0;do{let p=new URL(`${jn(t)}/chain/${encodeURIComponent(r)}/account/${encodeURIComponent(n)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),a&&p.searchParams.set("next",a);let c=await R(p.toString(),{headers:Wn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(c?.nfts)?c.nfts:[])s.push(di(d,r,n));a=c?.next?String(c.next):null,l+=1}while(a&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:r,owner:n,count:s.length,pages:l,complete:!a,next:a,nfts:s,exec:!1,readOnly:!0}}async function Gn(e={},t={}){if(!ht(t))throw new Error("OPENSEA_API_KEY required");let r=Kn(e.address||e.owner),n=await R(`${jn(t)}/account/${encodeURIComponent(r)}/pnl`,{headers:Wn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:r,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:n?.realized_pnl_usd??null,unrealizedPnlUsd:n?.unrealized_pnl_usd??null,totalPnlUsd:n?.total_pnl_usd??null,netInvestedUsd:n?.net_invested_usd??null,currentValueUsd:n?.current_value_usd??null,returnPercentage:n?.return_percentage??null,itemLevelPnlAvailable:!1,raw:n,exec:!1,readOnly:!0}}var ac=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var cc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var lc=new Te(["function setApprovalForAll(address operator,bool approved)"]),uc=new Te(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var fi="https://api.satflow.com/v1";function Yn(e={}){return ae({provider:"satflow",defaultUrl:fi,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function mi(e={}){return Yn(e).baseUrl}function Jn(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function hi(e={}){return te({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":Jn(e)},Yn(e).trusted)}async function yi(e,{method:t="GET",body:r,opts:n={}}={}){if(!Jn(n))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${mi(n)}${e.startsWith("/")?e:`/${e}`}`,a=await(n.fetchImpl||fetch)(i,{method:t,headers:hi(n),body:r!=null?JSON.stringify(r):void 0,signal:AbortSignal.timeout(n.timeoutMs??2e4)}),l=await a.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!a.ok)throw new Error(`satflow ${t} ${e}: HTTP ${a.status} ${String(l).slice(0,200)}`);return p}async function Xn(e={},t={}){let r=Y(e.address||e.addr,"address"),n=new URLSearchParams({address:r});e.type&&n.set("type",e.type),e.limit!=null&&n.set("limit",String(e.limit)),e.offset!=null&&n.set("offset",String(e.offset));let o=await yi(`/address/wallet-contents?${n}`,{opts:t});return{provider:"satflow",address:r,contents:o}}U();U();var Ic=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var bi=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],gi=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,wi=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Si(e={}){let t=[],r=String(e.name||""),n=String(e.description||""),o=`${r} ${n}`;gi.test(r)&&t.push("url-in-name");let i=bi.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),wi.test(r)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(r)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,a=!Array.isArray(e.traits)||e.traits.length===0;s&&a&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function Qn(e={}){let t=Si(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var vi=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Ai=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function bt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function be(e,t){let r=await C(t);return r.ok?{ok:!0,data:r.data}:{ok:!1,error:`${e}: ${r.error}`.slice(0,300)}}function Ei(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function xi(e={},t){let r=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:r==null?null:String(r),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(r?`Inscription ${r}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function Ii(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function Zn(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function ki(e){let t=new Map;if(Array.isArray(e)){for(let r of e)r?.assetKey&&t.set(String(r.assetKey).toLowerCase(),r);return t}if(e&&typeof e=="object")for(let[r,n]of Object.entries(e))t.set(r.toLowerCase(),n);return t}function _i(e,t){let r=Zn(e),n=t.get(r),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!n)return{...e,assetKey:r};let i=Number(n.costUsd),s=Number(n.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:r,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let a=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-a)*100)/100,currentValueUsd:o,totalCostUsd:a,realizedUsd:null}}:{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Ti(e){let t=new Map;for(let r of e){let n=Zn(r);t.has(n)||t.set(n,r)}return[...t.values()]}function Ni(e,t){let r=e.filter(i=>i.itemPnl?.status==="estimated"),n=e.length-r.length,o=Math.round(r.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:n===0&&e.length?"estimated-complete-for-held-items":r.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:r.length,unknownItems:n,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function er(e={},t={}){let r=new Date().toISOString(),n=ft(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=vi.filter(m=>!o||o.has(m.chain)),s=[],a=[],l=bt(t,"opensea"),p=n.evm?i.filter(m=>m.family!=="solana"):[],c=await G(p,4,async m=>({row:m,result:await be(`opensea-${m.chain}`,()=>yt({chain:m.chain,address:n.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:y}of c)if(y.ok){let E=y.data.nfts.map(P=>({...P,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));a.push(...E),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:y.data.complete?"ok":"partial",count:E.length,complete:y.data.complete,next:y.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:y.error,source:"opensea"});if(!n.evm)for(let m of i.filter(y=>y.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(n.solana&&(!o||o.has("solana"))){let m=await be("opensea-solana",()=>yt({chain:"solana",address:n.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let y=m.data.nfts.map(E=>({...E,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));a.push(...y),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:y.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(n.bitcoin&&(!o||o.has("bitcoin"))){let m=await be("satflow-wallet-contents",()=>Xn({address:n.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},bt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let y=Ei(m.data.contents).map(P=>xi(P,n.bitcoin));a.push(...y);let E=y.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:E?"ok":"partial",count:y.length,complete:E,source:"satflow"})}else{let y=await be("bitcoin-meta-inscriptions",()=>Ie({address:n.bitcoin},bt(t,"bitcoinMeta")),t.timeoutMs??35e3),E=y.ok&&y.data?.ok&&Array.isArray(y.data.inscriptions)?y.data.inscriptions:[];a.push(...E.map(P=>Ii(P,n.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:E.length?"partial":"unavailable",count:E.length,complete:!1,source:E.length?"bitcoin-meta":"satflow",error:E.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([n.evm,n.solana].filter(Boolean))]){let y=await be(`opensea-pnl-${m}`,()=>Gn({address:m},l),t.timeoutMs??35e3);d.push(y.ok?{status:"ok",...y.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:y.error})}let f=ki(e.costBasis),u=Ti(a).map(m=>_i(m,f)).map(m=>Qn(m)),g=u.filter(m=>!m.spam),A=u.filter(m=>m.spam),S=g.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),I=Math.round(S.reduce((m,y)=>m+Number(y.estimatedValueUsd),0)*100)/100,v=g.length-S.length,k=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:r,addresses:n,coverage:s,unsupported:Ai,inventory:{count:u.length,visibleCount:g.length,flaggedCount:A.length,items:u,visibleItems:g,flaggedItems:A},valuation:{estimatedCurrentValueUsd:I,valuedItems:S.length,unvaluedItems:v,complete:v===0&&k.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Ni(g,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as gt}from"node:os";import{join as wt}from"node:path";var tr=process.env.ORACLE_PUBLIC_DESKTOP==="1",Ci=tr?process.env.ORACLE_CONFIG_DIR||wt(gt(),".config","oracle"):wt(gt(),".config","oracle"),zc=tr?Ci:wt(gt(),".config","mad-desk");function St(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var Bi=JSON.parse(ir(new URL("../../package.json",import.meta.url),"utf8")),le="public",Fi="127.0.0.1",Mi=8799,Ce=Bi.version,qi=new Set(["127.0.0.1","localhost","::1"]),Di=xt(Oi(Ui(import.meta.url)),"../.."),vt=xt(Di,"public","oracle-console"),nr=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),Hi=1e6,F=class extends Error{constructor(t,r,n){super(n||r),this.status=t,this.code=r}};function W(e,t,r){let n=t,o;try{q(r),o=zt(r)}catch{n=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(n,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":le,"x-oracle-unsigned":"true"}),e.end(o)}function Vi(e){return new Promise((t,r)=>{let n=[],o=0;e.on("data",i=>{if(o+=i.length,o>Hi){r(new F(413,"payload-too-large","request body too large")),e.destroy();return}n.push(i)}),e.on("end",()=>{let i=Buffer.concat(n).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{r(new F(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>r(new F(400,"bad-request","request stream error")))})}function B(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new F(400,t,`${t} must be a JSON object`);return e}function zi(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function ji(e){let t=zi(e);if(!qi.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function Wi(){return{status:200,body:{ok:!0,plane:le,version:Ce}}}function Pe(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function Ki(e){let t=B(e,"body"),r=t.input!==void 0?B(t.input,"input"):t,n=Pe(B(t.opts,"opts")),o=r===t?(({opts:i,...s})=>s)(t):r;return{status:200,body:Kt(o,n)}}function Gi(e){let t=B(e,"body"),r=t.request!==void 0?B(t.request,"request"):t.input!==void 0?B(t.input,"input"):t,n=Pe(B(t.opts,"opts")),o=r===t?(({opts:i,...s})=>s)(t):r;return{status:200,body:Gt(o,n)}}function Yi(e){let t=B(e,"body"),r=Pe(B(t.opts,"opts")),n=Xt(t.store??[],r);return{status:200,body:{ok:!0,count:n.length,grants:n}}}function Ji(e){let t=B(e,"body"),r=Pe(B(t.opts,"opts")),n=Qt(t.store??[],t.id,r);return n==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:n}}function Xi(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,r=!0,n=[];return t&&n.push("privy"),r&&n.push("injected"),{status:200,body:{ok:!0,plane:le,version:Ce,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:r,modes:n},privy:{appId:e||null}}}}var At=400;function Qi(e=[]){if(e.length<=At)return{rows:e,truncated:!1,omitted:0};let t=n=>n?.kind==="native"?0:n?.priced?1:2;return{rows:[...e].sort((n,o)=>t(n)-t(o)).slice(0,At),truncated:!0,omitted:e.length-At}}var Et=300;function Zi(e=[]){if(e.length<=Et)return{items:e,truncated:!1,omitted:0};let t=n=>n?.spam===!0||n?.nsfw===!0?2:Number.isFinite(Number(n?.floorUsd))&&Number(n?.floorUsd)>0?0:1;return{items:[...e].sort((n,o)=>t(n)-t(o)).slice(0,Et),truncated:!0,omitted:e.length-Et}}var Ne=12;async function es(e){let t=B(e,"body"),r=typeof t.owner=="string"?t.owner:null;if(!r)throw new F(400,"owner-required","owner must be an EVM address");let n=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(n&&n.length>Ne)throw new F(400,"too-many-chains",`at most ${Ne} chainIds per request`);let i=await vn({owner:r,chainIds:n},ar());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var ts=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,ns=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function rs(e){if(typeof e!="string")return null;let t=e.trim();return ts.test(t)?t:null}function os(e){if(typeof e!="string")return null;let t=e.trim();return ns.test(t)?t:null}function sr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function is(e){let t=B(e,"body"),r=sr(t.owner),n=rs(t.solana),o=os(t.bitcoin);if(!r&&!n&&!o)throw new F(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>Ne)throw new F(400,"too-many-chains",`at most ${Ne} chainIds per request`);let s=await Hn({addresses:{evm:r,solana:n,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},{env:{}}),a=[],l=[],p=0,c=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let g=u.fungibleTokens?.status??"unavailable";g==="ok"?p+=1:g==="unavailable"&&(c+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:g,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let A=u.native;u.status==="ok"&&A&&A.status==="ok"&&A.amountRaw&&A.amountRaw!=="0"&&A.amountRaw!=="0x0"&&a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:A.symbol,decimals:A.decimals,amount:String(A.amountRaw),amountRaw:String(A.amountRaw),amountFormatted:A.amount,kind:"native",valueUsd:A.usdValue!=null?String(A.usdValue):null,priced:A.usdValue!=null});for(let S of u.fungibleTokens?.assets||[]){let I=S.amountRaw!=null?String(S.amountRaw):null;if(!I||I==="0")continue;let v=typeof S.decimals=="number"&&Number.isInteger(S.decimals)?S.decimals:null;a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:S.symbol||S.coin||"TOKEN",decimals:v,amount:I,amountRaw:I,amountFormatted:S.amount!=null?String(S.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:S.address||S.mint||null,valueUsd:S.usdValue!=null?String(S.usdValue):null,priced:S.usdValue!=null,source:S.source||u.fungibleTokens?.source||null})}}let d=c>0||!!(s.valuation&&s.valuation.complete===!1),f=Qi(a);return{status:200,body:{ok:!0,owner:s.addresses?.evm??r,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&c===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${c} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function ar(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function ss(e){let t=B(e,"body"),r=sr(t.owner);if(!r)throw new F(400,"owner-required","owner must be an EVM address");let n=await er({addresses:{evm:r}},ar()),o=n?.inventory&&typeof n.inventory=="object"?n.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(n?.items)?n.items:[]).map(c=>{if(!c||typeof c!="object")return null;let d=typeof c.collection=="string"?c.collection:c.collection&&typeof c.collection=="object"&&typeof c.collection.slug=="string"?c.collection.slug:typeof c.contract=="string"?c.contract:null;return{chain:c.chain??null,chainId:c.chainId??null,family:c.family??null,owner:c.owner??r,contract:c.contract??null,tokenId:c.tokenId==null?null:String(c.tokenId),tokenStandard:c.tokenStandard??null,collection:d,name:typeof c.name=="string"?c.name.slice(0,160):null,imageUrl:c.imageUrl??c.image??null,estimatedValueUsd:c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,floorUsd:c.floorUsd!=null&&Number.isFinite(Number(c.floorUsd))?Number(c.floorUsd):c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,spam:c.spam===!0,nsfw:c.nsfw===!0,source:typeof c.source=="string"?c.source.slice(0,64):null}}).filter(Boolean),a=Array.isArray(n?.coverage)?n.coverage:[],l=Zi(s),p=n?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:r,queriedAt:n.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:a.map(c=>({family:c?.family??null,chain:c?.chain??null,chainId:c?.chainId??null,status:c?.status??null,count:c?.count??null,complete:c?.complete===!0,source:c?.source??null,error:null,reason:typeof c?.reason=="string"?c.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:a.filter(c=>c?.status==="partial").map(c=>c.chain).filter(Boolean),unavailable:a.filter(c=>c?.status==="unavailable").map(c=>c.chain).filter(Boolean),unconfigured:a.filter(c=>c?.status==="not-configured").map(c=>c.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:n?.valuation?{estimatedCurrentValueUsd:n.valuation.estimatedCurrentValueUsd??null,valuedItems:n.valuation.valuedItems??null,unvaluedItems:n.valuation.unvaluedItems??null,complete:n.valuation.complete===!0}:null}}}var as=6e4,cs=120,cr=10,ls=300,us=cr,rr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),ds=4096,ge=new Map;function ps(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let r=t.split(",")[0].trim();if(r)return r.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function fs(e,t){let r=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),n=r==="127.0.0.1"||r==="::1"||r.startsWith("127."),o=ps(e),i=n&&o!==r,s=rr.has(t)?n&&!i?us:cr:n&&!i?ls:cs,a=Date.now(),l=`${o}:${rr.has(t)?"amp":"std"}`,p=ge.get(l);if(!p||a>=p.resetAt){for(ge.set(l,{count:1,resetAt:a+as});ge.size>ds;){let c=ge.keys().next();if(c.done)break;ge.delete(c.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-a)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var or=Object.freeze({"GET /public/health":Wi,"GET /public/config":Xi,"POST /public/connect/request":Ki,"POST /public/connect/assemble":Gi,"POST /public/grants/active":Yi,"POST /public/grants/get":Ji,"POST /public/approvals":es,"POST /public/portfolio":is,"POST /public/nfts":ss});function It(e={}){return{"cache-control":"no-store","x-oracle-plane":le,"x-oracle-unsigned":"true",...e}}function ms(e,t,r,n){e.writeHead(t,It({"content-type":r})),e.end(n)}function hs(e,t,r){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let n=r===""?"/":r,o=nr[n]||nr[n.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Ri(xt(vt,o.file));if(!i.startsWith(vt+Li)&&i!==vt)return W(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!$i(i))return W(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=ir(i);return e.method==="HEAD"?(t.writeHead(200,It({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(ms(t,200,o.type,s),!0)}async function ys(e,t){let n=new URL(e.url,"http://localhost").pathname||"/";n.length>1&&n.endsWith("/")&&n!=="/oracle-console/"&&(n=n.replace(/\/+$/,"")),n===""&&(n="/");let o=n.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=or[i];try{if(!s){if(hs(e,t,n))return;throw Object.keys(or).some(d=>d.endsWith(` ${o}`))?new F(405,"method-not-allowed",`unsupported method for ${o}`):new F(404,"not-found",`unknown route ${o}`)}let a=fs(e,o);if(!a.allowed){t.writeHead(429,It({"content-type":"application/json","retry-after":String(a.retryAfterSec),"x-ratelimit-limit":String(a.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${a.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await Vi(e),p=await s(l);W(t,p.status,p.body)}catch(a){if(a instanceof D){W(t,500,{error:"secret-leak-blocked"});return}if(a instanceof V){W(t,400,{error:"invalid-grant",errors:a.errors.map(l=>({field:l.field,message:l.message}))});return}if(a instanceof F){W(t,a.status,{error:a.code,message:a.message});return}if(a instanceof TypeError){W(t,400,{error:"bad-request",message:a.message});return}W(t,500,{error:"internal-error"})}}function bs(){return Pi((e,t)=>{ys(e,t).catch(()=>{try{W(t,500,{error:"internal-error"})}catch{}})})}function kt({host:e,port:t}={}){let r=ji(e??St("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",Fi)),n=t??St("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(Mi)),o=Number(n);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(n)}`);return{host:r,port:o}}function lr(e={}){let{host:t,port:r}=kt(e),n=bs();return n.listen(r,t),n}var _t=kt(),$e=lr(_t);$e.on("listening",()=>{let e=$e.address(),t=typeof e=="object"&&e?e.address:_t.host,r=typeof e=="object"&&e?e.port:_t.port;console.log(`oracle-public-server listening on http://${t}:${r} (plane=${le}, version=${Ce}, unsigned-only)`)});$e.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{$e.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});