@oracle-agent/oracle 0.35.18 → 0.35.19

package/dist/cli/commands/sign.mjs

@@ -1,7 +1,7 @@
-var Te=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t=[r],r}};import O from"node:fs";import Oe from"node:os";import b from"node:path";import{fileURLToPath as Ce}from"node:url";function Q(){return process.env.ORACLE_FAKE_HOME||Oe.homedir()}function Le(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function C(){return Le()?process.env.ORACLE_CONFIG_DIR||b.join(Q(),".config","oracle"):b.join(Q(),".config","oracle")}function $e(){return b.join(C(),"desk.json")}function Re(){return b.join(C(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let n={},t=(i,o)=>{if(o==null)return;let a=String(o).trim();a&&(process.env[i]!=null&&String(process.env[i]).trim()!==""||(process.env[i]=a,n[i]=a))};try{let i=Re();if(O.existsSync(i))for(let o of O.readFileSync(i,"utf8").split(/\r?\n/)){let a=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let c=a[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),t(a[1],c)}}catch{}try{let i=$e();if(O.existsSync(i)){let o=JSON.parse(O.readFileSync(i,"utf8"));o&&typeof o=="object"&&(t("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),t("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),t("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),t("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),t("ORACLE_EXEC_URL",o.execUrl),t("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(t("ORACLE_DESK_URL",r),t("ORACLE_DATA_URL",r),t("ORACLE_API_URL",r),t("ORACLE_PUBLIC_URL",r),t("MAD_DESK_URL",r)),E._result=Object.keys(n).length?n:null,E._result}var Ne,Ut,Z=Te(()=>{Ne=b.dirname(Ce(import.meta.url)),Ut=b.resolve(Ne,"../..");try{E()}catch{}});Z();import m from"node:fs";import Y from"node:path";import{createCipheriv as Be,createDecipheriv as Pe,randomBytes as L,scryptSync as _e}from"node:crypto";import s from"node:fs";import w from"node:path";var ee="ORACLE-LOCAL-VAULT",te=1,A=Object.freeze({N:1<<17,r:8,p:1}),Fe=256*1024*1024,De=16*1024;function N(e,n,t,{max:r=n}={}){if(typeof e!="string"||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`local-vault: invalid ${t} encoding`);let i=Buffer.from(e,"base64");if(i.toString("base64")!==e||i.length<n||i.length>r)throw new Error(`local-vault: invalid ${t} length`);return i}function re(e,n,t=A){let r=String(e??"");if(r.length<12)throw new Error("local-vault: passphrase must be at least 12 characters");return _e(r,n,32,{...t,maxmem:Fe})}function ne(e,n,t={}){let r=Buffer.isBuffer(e)?Buffer.from(e):Buffer.from(String(e));if(!r.length)throw new Error("local-vault: refusing empty key material");let i=L(32),o=L(12),a={magic:ee,version:te,kdf:{name:"scrypt",...A,salt:i.toString("base64")},cipher:{name:"aes-256-gcm",iv:o.toString("base64")},meta:{address:t.address?String(t.address).toLowerCase():null,addresses:t.addresses||void 0,kind:t.kind||"evm",createdAt:new Date().toISOString()}},c=re(n,i);try{let l=Be("aes-256-gcm",c,o);l.setAAD(Buffer.from(JSON.stringify(a)));let u=Buffer.concat([l.update(r),l.final()]);return{...a,ciphertext:u.toString("base64"),tag:l.getAuthTag().toString("base64")}}finally{c.fill(0),r.fill(0)}}function F(e,n){if(e?.magic!==ee||e?.version!==te)throw new Error("local-vault: unsupported vault file");if(e?.kdf?.name!=="scrypt"||e?.cipher?.name!=="aes-256-gcm")throw new Error("local-vault: unsupported cryptography");if(e.kdf.N!==A.N||e.kdf.r!==A.r||e.kdf.p!==A.p)throw new Error("local-vault: unsupported KDF parameters");if(Object.keys(e.kdf).sort().join(",")!=="N,name,p,r,salt"||Object.keys(e.cipher).sort().join(",")!=="iv,name")throw new Error("local-vault: unexpected cryptography field");if(!e.meta||Object.keys(e.meta).some(d=>!["address","addresses","kind","createdAt"].includes(d))||String(e.meta.kind||"").length>16||String(e.meta.address||"").length>128||JSON.stringify(e.meta.addresses||{}).length>1024||!Number.isFinite(Date.parse(e.meta.createdAt)))throw new Error("local-vault: invalid metadata");let t=["magic","version","kdf","cipher","meta","ciphertext","tag"];if(Object.keys(e).some(d=>!t.includes(d)))throw new Error("local-vault: unexpected vault field");let r=N(e.kdf.salt,32,"salt"),i=N(e.cipher.iv,12,"iv"),o=N(e.tag,16,"tag"),a=N(e.ciphertext,1,"ciphertext",{max:De}),{ciphertext:c,tag:l,...u}=e,f=re(n,r);try{let d=Pe("aes-256-gcm",f,i);return d.setAAD(Buffer.from(JSON.stringify(u))),d.setAuthTag(o),Buffer.concat([d.update(a),d.final()])}catch{throw new Error("local-vault: wrong passphrase or tampered vault")}finally{f.fill(0)}}function Me(e){if(!e.isFile())throw new Error("local-vault: secret source must be a regular file");if(e.uid!==process.getuid?.())throw new Error("local-vault: secret source must be owned by this user");if(e.nlink!==1)throw new Error("local-vault: refusing hard-linked secret source");if((e.mode&63)!==0)throw new Error("local-vault: secret source must be owner-only (0600)")}function oe(e){let n=w.dirname(e),t=s.lstatSync(n);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("local-vault: unsafe destination directory");if(t.uid!==process.getuid?.())throw new Error("local-vault: destination directory must be owned by this user");if((t.mode&63)!==0)throw new Error("local-vault: destination directory must be owner-only (0700)");try{let r=s.lstatSync(e);if(r.isSymbolicLink())throw new Error("local-vault: refusing symlink destination");if(!r.isFile()||r.uid!==process.getuid?.()||r.nlink!==1)throw new Error("local-vault: unsafe destination file");if(r.dev!==t.dev)throw new Error("local-vault: destination device mismatch")}catch(r){if(r.code!=="ENOENT")throw r}}function h(e){let n;try{n=s.openSync(e,s.constants.O_RDONLY|s.constants.O_NOFOLLOW)}catch(t){throw t.code==="ELOOP"?new Error("local-vault: refusing symlink"):t}try{let t=s.fstatSync(n);if(Me(t),t.size>1024*1024)throw new Error("local-vault: secret source changed or is too large");let r=s.lstatSync(e);if(r.isSymbolicLink()||r.dev!==t.dev||r.ino!==t.ino)throw new Error("local-vault: secret source changed or is too large");return s.readFileSync(n,"utf8").replace(/[\r\n]+$/,"")}finally{s.closeSync(n)}}function D(e){return JSON.parse(h(e))}function ie(e,n){s.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),oe(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${L(6).toString("hex")}.tmp`),r;try{r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384),s.writeFileSync(r,JSON.stringify(n,null,2)+`
-`),s.fsyncSync(r),s.closeSync(r),r=void 0;let i=s.openSync(t,s.constants.O_RDONLY|s.constants.O_NOFOLLOW),o;try{o=s.fstatSync(i)}finally{s.closeSync(i)}let a=s.lstatSync(w.dirname(e));if(o.nlink!==1||o.dev!==a.dev||o.uid!==process.getuid?.())throw new Error("local-vault: unsafe temporary file");s.renameSync(t,e),s.chmodSync(e,384);let c=s.openSync(w.dirname(e),"r");try{s.fsyncSync(c)}finally{s.closeSync(c)}}catch(i){if(r!==void 0)try{s.closeSync(r)}catch{}try{s.unlinkSync(t)}catch{}throw i}return e}function y(e,n){s.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),oe(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${L(6).toString("hex")}.tmp`);try{let r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384);try{s.writeFileSync(r,String(n)),s.fsyncSync(r)}finally{s.closeSync(r)}s.renameSync(t,e),s.chmodSync(e,384);let i=s.openSync(w.dirname(e),"r");try{s.fsyncSync(i)}finally{s.closeSync(i)}}catch(r){try{s.unlinkSync(t)}catch{}throw r}}import p from"node:path";import Ot from"node:os";import{createHash as Ct,randomBytes as Is}from"node:crypto";import{Interface as X,keccak256 as Ts}from"ethers";import{Transaction as Cs}from"@scure/btc-signer";import{ed25519 as Ls}from"@noble/curves/ed25519.js";import{base58 as mi}from"@scure/base";import{Interface as de}from"ethers";import{Interface as We,MaxUint256 as kr,isAddress as Tr,keccak256 as Or,toUtf8Bytes as Cr}from"ethers";import{Interface as Ue,isAddress as sr}from"ethers";import{isAddress as tr}from"ethers";var dr=new Ue(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as ze,isAddress as mr}from"ethers";var yr=new ze(["function approve(address spender,uint256 amount) returns (bool)"]),Er=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});var Pr=new We(["function approve(address spender,uint256 amount) returns (bool)"]);var Fr=300*1e3,Dr=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();import{Address as zr,NETWORK as Wr,OutScript as Hr,RawTx as Jr,SigHash as Gr,TEST_NETWORK as Vr,Transaction as Kr}from"@scure/btc-signer";import{createHash as He}from"node:crypto";import{base58 as Zr}from"@scure/base";import{getCompiledTransactionMessageDecoder as tn}from"@solana/transaction-messages";var ae=e=>He("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),rn=new Map([[ae("route"),{name:"route",prefixBytes:0}],[ae("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]);var dn=64*1024;var Sn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),An=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"});var kn="0x"+"00".repeat(32);var Ge=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Ln=Object.freeze(Ge.map(e=>e[0]));import{TypedDataEncoder as co,getAddress as uo}from"ethers";import{TypedDataEncoder as _n,getAddress as Fn,isAddress as Dn}from"ethers";var Ke=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Xe=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as Kn,getAddress as Xn,isAddress as Yn}from"ethers";var jn=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var Ye=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),oo=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var Qe=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),io=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var po=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]);var ot=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var No=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0});var it=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Lo=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),$o=new de(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Ro=new de(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Bo=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var at=Object.freeze([...ot]),Po=Object.freeze({...it});import{ed25519 as Yo}from"@noble/curves/ed25519.js";import{base58 as Zo}from"@scure/base";import{RawTx as ti,SigHash as ri,Transaction as ni}from"@scure/btc-signer";import{Transaction as ii,keccak256 as ai,verifyTypedData as si}from"ethers";import{encode as Do}from"@msgpack/msgpack";import{keccak256 as qo,verifyTypedData as jo}from"ethers";var Uo=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),zo=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var ki=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}});import{createHmac as lt,randomBytes as qi,timingSafeEqual as dt}from"node:crypto";import ft from"node:fs";import x from"node:path";import{homedir as z}from"node:os";import{join as W}from"node:path";var pe=process.env.ORACLE_PUBLIC_DESKTOP==="1",ut=pe?process.env.ORACLE_CONFIG_DIR||W(z(),".config","oracle"):W(z(),".config","oracle"),Ni=pe?ut:W(z(),".config","mad-desk");var Pi="0".repeat(64),_i=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"});function R(e){return e==null?"null":typeof e!="object"?JSON.stringify(e):Array.isArray(e)?"["+e.map(R).join(",")+"]":"{"+Object.keys(e).sort().map(t=>JSON.stringify(t)+":"+R(e[t])).join(",")+"}"}var Fi=Promise.resolve();function pt(e,n){if(!e)throw new Error("ledger: separate freshness anchor required");let t=a=>{try{return ft.realpathSync(a)}catch{return x.resolve(a)}},r=t(x.dirname(x.resolve(e))),i=t(x.dirname(x.resolve(n))),o=(a,c)=>c===a||c.startsWith(a+x.sep);if(o(r,i)||o(i,r))throw new Error("ledger: separate freshness anchor required")}var H=(e,n)=>lt("sha256",n).update(R(e)).digest("hex"),mt=(e,n)=>{let t=Buffer.from(String(e)),r=Buffer.from(String(n));return t.length===r.length&&dt(t,r)};function wt(e,n,{sequence:t}={}){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("policy: object required");let r=t===void 0?e:{...e,policySequence:Number(t)};return{policy:r,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:H(r,n)}}}function me(e,n){if(!e)throw new Error("policy: sequence anchor required");let t;try{t=h(e)}catch{return{sequence:0,present:!1}}let r;try{r=JSON.parse(t)}catch{throw new Error("policy: sequence anchor is unreadable")}if(!mt(r?.integrity?.mac,H(r?.marker,n)))throw new Error("policy: sequence anchor integrity failed");return{sequence:Number(r?.marker?.policySequence||0),policyMac:r?.marker?.policyMac??null,present:!0,ledgerInitialized:r?.marker?.ledgerInitialized===!0}}function ht(e,n,t,r=null,{ledgerInitialized:i}={}){if(r==null||!String(r))throw new Error("policy: sequence anchor must bind the sealed policy MAC");let o=i===!0;if(i===void 0)try{let c=me(e,t);o=c.present&&c.ledgerInitialized===!0}catch{o=!1}let a={policySequence:Number(n),policyMac:String(r)};o&&(a.ledgerInitialized=!0),y(e,JSON.stringify({marker:a,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:H(a,t)}})+`
-`)}function we(e,n,t,{sequenceAnchorFile:r}={}){let i=h(n);if(!r)throw new Error("policy: sequence anchor required");let o=me(r,i);pt(r,e);let a=Number(o.sequence||0)+1,c=wt(t,i,{sequence:a});ht(r,a,i,c?.integrity?.mac??null),y(e,JSON.stringify(c,null,2)+`
-`)}import{readFileSync as Yi,readdirSync as Qi,existsSync as gt}from"node:fs";import{dirname as yt,join as I}from"node:path";import{fileURLToPath as Et}from"node:url";var k=yt(Et(import.meta.url));function bt(){let e=[I(k,"descriptors"),I(k,"clear-sign","descriptors"),I(k,"..","clear-sign","descriptors"),I(k,"..","..","clear-sign","descriptors"),I(k,"..","..","..","clear-sign","descriptors")];for(let n of e)if(gt(n))return n;return e[0]}var ra=bt();var na=(1n<<256n)-1n;import{Wallet as J}from"ethers";import{base58 as G}from"@scure/base";import{ed25519 as Ee}from"@noble/curves/ed25519.js";import{NETWORK as be,TEST_NETWORK as xe,WIF as xt,p2wpkh as he}from"@scure/btc-signer";import{pubECDSA as St}from"@scure/btc-signer/utils.js";var B=e=>{let n=String(e||"").trim().replace(/^0x/i,"");return!/^[0-9a-fA-F]+$/.test(n)||n.length%2?null:Buffer.from(n,"hex")},At=e=>{let n=String(e||"").trim();if(!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(n))return null;let t=Buffer.from(n,"base64");return t.toString("base64")===n?t:null},ge=e=>{let n=String(e||"").trim();try{let t=Buffer.from(G.decode(n));return G.encode(t)===n?t:null}catch{return null}},V=e=>{if(!(e instanceof Uint8Array))throw new Error("sol: key bytes required");if(e.length!==32&&e.length!==64)throw new Error("sol: expected 32-byte private key material");let n=Buffer.from(e.subarray(0,32));if(e.length===64){let t=Buffer.from(e.subarray(32,64)),r=Buffer.from(Ee.getPublicKey(n));if(!t.equals(r))throw new Error("sol: supplied public key does not match seed")}return n},ye=e=>!(e instanceof Uint8Array)||e.length!==32&&e.length!==64?null:Buffer.from(e.subarray(0,32)),g=(e,n)=>{if(n==="sol")return V(e);if(!(e instanceof Uint8Array))throw new Error(`${n}: key bytes required`);if(e.length===32)return Buffer.from(e);if(e.length===64)return Buffer.from(e.subarray(0,32));throw new Error(`${n}: expected 32-byte private key material`)},vt=(e,n)=>{if(!Array.isArray(e))throw new Error(`${n}: expected byte array`);let t=Buffer.alloc(e.length);for(let r=0;r<e.length;r++){let i=e[r];if(typeof i!="number"||!Number.isSafeInteger(i)||i<0||i>255)throw new Error(`${n}: expected integer bytes in 0..255`);t[r]=i}return g(t,n)};function S(e,n){let t=String(n||"").trim();if(e==="evm")return new J(t).privateKey;if(e==="btc")for(let o of[be,xe])try{return Buffer.from(xt(o).decode(t))}catch{}if(e==="sol"){if(/^hex:/i.test(t)){let u=B(t.slice(4));if(!u)throw new Error("sol: invalid explicit hex private key");return g(u,"sol")}if(/^base58:/i.test(t)){let u=ge(t.slice(7));if(!ye(u))throw new Error("sol: invalid explicit base58 private key");return V(u)}if(/^0x/i.test(t)){let u=B(t);if(!u)throw new Error("sol: invalid explicit hex private key");return g(u,"sol")}let o=B(t),a=o&&(o.length===32||o.length===64)?g(o,"sol"):null,c=ge(t),l=ye(c);if(a&&l&&!a.equals(l))throw new Error("sol: ambiguous private key format; prefix with hex: or base58:");if(l)return V(c);if(o)return g(o,"sol")}let r=B(t);if(r)return e==="evm"?new J(`0x${r.toString("hex")}`).privateKey:g(r,e);let i=At(t);if(i)return g(i,e);if(t.startsWith("[")||t.startsWith("{")){let o=JSON.parse(t);if(Array.isArray(o))return vt(o,e);let a=o.privateKey??o.secretKey??o.key;if(a)return S(e,Array.isArray(a)?JSON.stringify(a):String(a))}throw new Error(`${e}: unsupported private key format`)}function T(e,n){if(e==="evm"){let t=new J(String(n));return{kind:e,secret:t.privateKey,addresses:[t.address.toLowerCase()]}}if(e==="btc"){let t=g(n,"btc"),r=St(t);return{kind:e,secret:t.toString("hex"),addresses:[he(r,be).address,he(r,xe).address]}}if(e==="sol"){let t=g(n,"sol");return{kind:e,secret:t.toString("hex"),addresses:[G.encode(Ee.getPublicKey(t))]}}throw new Error(`unsupported signer kind ${e}`)}function K(e,n={}){let t=Buffer.isBuffer(e)?e.toString("utf8"):String(e||"");if(String(n.kind||"")!=="multichain")return{[n.kind||"evm"]:T(n.kind||"evm",S(n.kind||"evm",t))};let r=JSON.parse(t),i={};for(let o of["evm","btc","sol"])r[o]&&(i[o]=T(o,S(o,r[o])));if(r.cex!==void 0){if(!r.cex||typeof r.cex!="object"||Array.isArray(r.cex))throw new Error("local-vault: cex credential records invalid");i.cex={};for(let[o,a]of Object.entries(r.cex)){if(!/^[A-Za-z0-9._-]{1,64}$/.test(o)||!a||typeof a!="object")throw new Error("local-vault: cex credential record invalid");if(!/^(?:binance|bybit|okx|coinbase)$/.test(a.venue)||!/^[A-Za-z0-9._-]{1,64}$/.test(a.accountId||""))throw new Error("local-vault: cex credential binding invalid");let c=(u,f=!0)=>{let d=a[u];if(!(!f&&d===void 0)){if(!Array.isArray(d)||d.length<4||d.some(_=>!Number.isInteger(_)||_<0||_>255))throw new Error("local-vault: cex credential bytes invalid");return Buffer.from(d)}},l=a.apiSecretEncoding;if(l!==(a.venue==="coinbase"?"base64":"raw"))throw new Error("local-vault: explicit cex secret encoding refused");i.cex[o]=Object.freeze({venue:a.venue,accountId:a.accountId,apiKeyBytes:c("apiKeyBytes"),apiSecretBytes:c("apiSecretBytes"),apiSecretEncoding:l,passphraseBytes:c("passphraseBytes",!1)})}if(!Object.keys(i.cex).length)throw new Error("local-vault: empty cex credential records refused");Object.freeze(i.cex)}if(!Object.keys(i).length)throw new Error("local-vault: multichain vault is empty");return i}function Se(e){let n={};for(let t of["evm","btc","sol"])e[t]&&(n[t]=t==="evm"?e[t].secret:`0x${e[t].secret}`);return e.cex&&(n.cex=Object.fromEntries(Object.entries(e.cex).map(([t,r])=>[t,{venue:r.venue,accountId:r.accountId,apiKeyBytes:[...r.apiKeyBytes],apiSecretBytes:[...r.apiSecretBytes],apiSecretEncoding:r.apiSecretEncoding,...r.passphraseBytes?{passphraseBytes:[...r.passphraseBytes]}:{}}]))),Buffer.from(JSON.stringify(n))}function Ae(e){let n={};for(let[t,r]of Object.entries(e))r?.addresses&&(n[t]=r.addresses);return{kind:"multichain",address:null,addresses:n}}var ya=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Ea=Object.freeze(["binance","bybit","okx","coinbase"]),ba=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),xa=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Sa=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),Aa=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),va=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),Ia=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),ka=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),Ta=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Oa=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"});var Tt=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),ve=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"});var Da=256*1024;var ic=new X(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),ac=new X(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),sc=new X(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"]);function Ie(e){let n=process.env.ORACLE_SIGNER_STATE_DIR||p.join(process.env.XDG_STATE_HOME||p.join(Ot.homedir(),".local","state"),"oracle"),t=Ct("sha256").update(p.resolve(e)).digest("hex").slice(0,16);return{vault:p.join(e,"vault.json"),policy:p.join(e,"signer-policy.json"),policyKey:p.join(e,"policy-integrity-key"),policyAnchor:p.join(n,`signer-policy-${t}.high-water`),ledger:p.join(e,"signer-ledger.json"),ledgerAnchor:p.join(n,`signer-ledger-${t}.high-water`),cexOrders:p.join(e,"cex-orders.json"),cexOrdersAnchor:p.join(n,`cex-orders-${t}.high-water`),token:p.join(e,"signer-token"),lock:p.join(n,`signer-${t}.lock`)}}import{randomBytes as Nt}from"node:crypto";import{Wallet as Lt}from"ethers";var ke=`oracle sign init|import|policy|status|lock|doctor
+var ze=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t=[r],r}};import T from"node:fs";import We from"node:os";import b from"node:path";import{fileURLToPath as Ue}from"node:url";function oe(){return process.env.ORACLE_FAKE_HOME||We.homedir()}function Je(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function N(){return Je()?process.env.ORACLE_CONFIG_DIR||b.join(oe(),".config","oracle"):b.join(oe(),".config","oracle")}function Ke(){return b.join(N(),"desk.json")}function Ge(){return b.join(N(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let n={},t=(i,o)=>{if(o==null)return;let s=String(o).trim();s&&(process.env[i]!=null&&String(process.env[i]).trim()!==""||(process.env[i]=s,n[i]=s))};try{let i=Ge();if(T.existsSync(i))for(let o of T.readFileSync(i,"utf8").split(/\r?\n/)){let s=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let c=s[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),t(s[1],c)}}catch{}try{let i=Ke();if(T.existsSync(i)){let o=JSON.parse(T.readFileSync(i,"utf8"));o&&typeof o=="object"&&(t("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),t("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),t("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),t("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),t("ORACLE_EXEC_URL",o.execUrl),t("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(t("ORACLE_DESK_URL",r),t("ORACLE_DATA_URL",r),t("ORACLE_API_URL",r),t("ORACLE_PUBLIC_URL",r),t("MAD_DESK_URL",r)),E._result=Object.keys(n).length?n:null,E._result}var Ve,Ar,ie=ze(()=>{Ve=b.dirname(Ue(import.meta.url)),Ar=b.resolve(Ve,"../..");try{E()}catch{}});ie();import m from"node:fs";import ne from"node:path";import{createCipheriv as Ye,createDecipheriv as Xe,randomBytes as _,scryptSync as Ze}from"node:crypto";import a from"node:fs";import w from"node:path";var se="ORACLE-LOCAL-VAULT",ae=1,A=Object.freeze({N:1<<17,r:8,p:1}),Qe=256*1024*1024,et=16*1024;function C(e,n,t,{max:r=n}={}){if(typeof e!="string"||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`local-vault: invalid ${t} encoding`);let i=Buffer.from(e,"base64");if(i.toString("base64")!==e||i.length<n||i.length>r)throw new Error(`local-vault: invalid ${t} length`);return i}function ce(e,n,t=A){let r=String(e??"");if(r.length<12)throw new Error("local-vault: passphrase must be at least 12 characters");return Ze(r,n,32,{...t,maxmem:Qe})}function le(e,n,t={}){let r=Buffer.isBuffer(e)?Buffer.from(e):Buffer.from(String(e));if(!r.length)throw new Error("local-vault: refusing empty key material");let i=_(32),o=_(12),s={magic:se,version:ae,kdf:{name:"scrypt",...A,salt:i.toString("base64")},cipher:{name:"aes-256-gcm",iv:o.toString("base64")},meta:{address:t.address?String(t.address).toLowerCase():null,addresses:t.addresses||void 0,kind:t.kind||"evm",createdAt:new Date().toISOString()}},c=ce(n,i);try{let u=Ye("aes-256-gcm",c,o);u.setAAD(Buffer.from(JSON.stringify(s)));let l=Buffer.concat([u.update(r),u.final()]);return{...s,ciphertext:l.toString("base64"),tag:u.getAuthTag().toString("base64")}}finally{c.fill(0),r.fill(0)}}function F(e,n){if(e?.magic!==se||e?.version!==ae)throw new Error("local-vault: unsupported vault file");if(e?.kdf?.name!=="scrypt"||e?.cipher?.name!=="aes-256-gcm")throw new Error("local-vault: unsupported cryptography");if(e.kdf.N!==A.N||e.kdf.r!==A.r||e.kdf.p!==A.p)throw new Error("local-vault: unsupported KDF parameters");if(Object.keys(e.kdf).sort().join(",")!=="N,name,p,r,salt"||Object.keys(e.cipher).sort().join(",")!=="iv,name")throw new Error("local-vault: unexpected cryptography field");if(!e.meta||Object.keys(e.meta).some(d=>!["address","addresses","kind","createdAt"].includes(d))||String(e.meta.kind||"").length>16||String(e.meta.address||"").length>128||JSON.stringify(e.meta.addresses||{}).length>1024||!Number.isFinite(Date.parse(e.meta.createdAt)))throw new Error("local-vault: invalid metadata");let t=["magic","version","kdf","cipher","meta","ciphertext","tag"];if(Object.keys(e).some(d=>!t.includes(d)))throw new Error("local-vault: unexpected vault field");let r=C(e.kdf.salt,32,"salt"),i=C(e.cipher.iv,12,"iv"),o=C(e.tag,16,"tag"),s=C(e.ciphertext,1,"ciphertext",{max:et}),{ciphertext:c,tag:u,...l}=e,f=ce(n,r);try{let d=Xe("aes-256-gcm",f,i);return d.setAAD(Buffer.from(JSON.stringify(l))),d.setAuthTag(o),Buffer.concat([d.update(s),d.final()])}catch{throw new Error("local-vault: wrong passphrase or tampered vault")}finally{f.fill(0)}}function tt(e){if(!e.isFile())throw new Error("local-vault: secret source must be a regular file");if(e.uid!==process.getuid?.())throw new Error("local-vault: secret source must be owned by this user");if(e.nlink!==1)throw new Error("local-vault: refusing hard-linked secret source");if((e.mode&63)!==0)throw new Error("local-vault: secret source must be owner-only (0600)")}function ue(e){let n=w.dirname(e),t=a.lstatSync(n);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("local-vault: unsafe destination directory");if(t.uid!==process.getuid?.())throw new Error("local-vault: destination directory must be owned by this user");if((t.mode&63)!==0)throw new Error("local-vault: destination directory must be owner-only (0700)");try{let r=a.lstatSync(e);if(r.isSymbolicLink())throw new Error("local-vault: refusing symlink destination");if(!r.isFile()||r.uid!==process.getuid?.()||r.nlink!==1)throw new Error("local-vault: unsafe destination file");if(r.dev!==t.dev)throw new Error("local-vault: destination device mismatch")}catch(r){if(r.code!=="ENOENT")throw r}}function h(e){let n;try{n=a.openSync(e,a.constants.O_RDONLY|a.constants.O_NOFOLLOW)}catch(t){throw t.code==="ELOOP"?new Error("local-vault: refusing symlink"):t}try{let t=a.fstatSync(n);if(tt(t),t.size>1024*1024)throw new Error("local-vault: secret source changed or is too large");let r=a.lstatSync(e);if(r.isSymbolicLink()||r.dev!==t.dev||r.ino!==t.ino)throw new Error("local-vault: secret source changed or is too large");return a.readFileSync(n,"utf8").replace(/[\r\n]+$/,"")}finally{a.closeSync(n)}}function q(e){return JSON.parse(h(e))}function de(e,n){a.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),ue(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${_(6).toString("hex")}.tmp`),r;try{r=a.openSync(t,a.constants.O_CREAT|a.constants.O_EXCL|a.constants.O_WRONLY|a.constants.O_NOFOLLOW,384),a.writeFileSync(r,JSON.stringify(n,null,2)+`
+`),a.fsyncSync(r),a.closeSync(r),r=void 0;let i=a.openSync(t,a.constants.O_RDONLY|a.constants.O_NOFOLLOW),o;try{o=a.fstatSync(i)}finally{a.closeSync(i)}let s=a.lstatSync(w.dirname(e));if(o.nlink!==1||o.dev!==s.dev||o.uid!==process.getuid?.())throw new Error("local-vault: unsafe temporary file");a.renameSync(t,e),a.chmodSync(e,384);let c=a.openSync(w.dirname(e),"r");try{a.fsyncSync(c)}finally{a.closeSync(c)}}catch(i){if(r!==void 0)try{a.closeSync(r)}catch{}try{a.unlinkSync(t)}catch{}throw i}return e}function y(e,n){a.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),ue(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${_(6).toString("hex")}.tmp`);try{let r=a.openSync(t,a.constants.O_CREAT|a.constants.O_EXCL|a.constants.O_WRONLY|a.constants.O_NOFOLLOW,384);try{a.writeFileSync(r,String(n)),a.fsyncSync(r)}finally{a.closeSync(r)}a.renameSync(t,e),a.chmodSync(e,384);let i=a.openSync(w.dirname(e),"r");try{a.fsyncSync(i)}finally{a.closeSync(i)}}catch(r){try{a.unlinkSync(t)}catch{}throw r}}import p from"node:path";import lr from"node:os";import{createHash as ur,randomBytes as au}from"node:crypto";import{Interface as re,keccak256 as lu}from"ethers";import{Transaction as du}from"@scure/btc-signer";import{ed25519 as pu}from"@noble/curves/ed25519.js";import{base58 as Gi}from"@scure/base";import{Interface as ge}from"ethers";import{Interface as st,MaxUint256 as cn,isAddress as ln,keccak256 as un,toUtf8Bytes as dn}from"ethers";import{Interface as ot,isAddress as Hr}from"ethers";import{isAddress as Br}from"ethers";var Vr=new ot(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as it,isAddress as Gr}from"ethers";var Qr=new it(["function approve(address spender,uint256 amount) returns (bool)"]),en=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});var gn=new st(["function approve(address spender,uint256 amount) returns (bool)"]);var En=300*1e3,bn=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();import{Address as kn,NETWORK as In,OutScript as On,RawTx as Tn,SigHash as Nn,TEST_NETWORK as Cn,Transaction as _n}from"@scure/btc-signer";import{createHash as at}from"node:crypto";import{base58 as Pn}from"@scure/base";import{getCompiledTransactionMessageDecoder as Dn}from"@solana/transaction-messages";var fe=e=>at("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Fn=new Map([[fe("route"),{name:"route",prefixBytes:0}],[fe("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]);var Vn=64*1024;var no=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),oo=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"});var ao="0x"+"00".repeat(32);var lt=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),po=Object.freeze(lt.map(e=>e[0]));import{TypedDataEncoder as Wo,getAddress as Uo}from"ethers";import{TypedDataEncoder as yo,getAddress as Eo,isAddress as bo}from"ethers";var dt=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),ft=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as _o,getAddress as Ro,isAddress as $o}from"ethers";var Ao=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var pt=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Mo=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var mt=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),jo=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var Ko=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]);var bt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var di=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0});var xt=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),fi=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),pi=new ge(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),mi=new ge(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),wi=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var St=Object.freeze([...bt]),hi=Object.freeze({...xt});import{ed25519 as Ri}from"@noble/curves/ed25519.js";import{base58 as Li}from"@scure/base";import{RawTx as Bi,SigHash as Di,Transaction as Fi}from"@scure/btc-signer";import{Transaction as Mi,keccak256 as ji,verifyTypedData as Hi}from"ethers";import{encode as Ei}from"@msgpack/msgpack";import{keccak256 as xi,verifyTypedData as Si}from"ethers";var Ai=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),vi=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});import{wordlists as fs}from"ethers";import{wordlists as cs}from"ethers";var Ee=64*1024;var ms=32*1024;var Ot=["schemaVersion","buildVersion","recordType","execution","custody"],gs=[...Ot,"recordHash"];var ys=Object.freeze({signed:new Set(["workflow.signed","legacy.signed"]),submitted:new Set(["workflow.submitted","legacy.broadcast"]),finalized:new Set(["workflow.finalized"]),reorged:new Set(["workflow.reorged"]),orphaned:new Set(["workflow.orphaned"]),compensating:new Set(["workflow.compensating"]),compensated:new Set(["workflow.compensated"])});var Tt=Object.freeze(["draft","checked","approval","signed","submitted","finalized","reorged","orphaned","compensating","compensated","failed","cancelled"]),Te=Object.freeze(["workflow.drafted","workflow.checked","workflow.approval_requested","workflow.approval_granted","workflow.signed","workflow.submitted","workflow.finalized","workflow.reorged","workflow.orphaned","workflow.compensating","workflow.compensated","workflow.failed","workflow.cancelled","workflow.annotated"]),As=new Set(Te);var Lt=64*1024*1024;var Cs=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),_s=Object.freeze(["read","simulate"]);var Rs=1440*60;var js=Object.freeze(["privkey","wif","xprv","seed"]);var Hs=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),zs=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);var K=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),Js=Object.freeze(Object.fromEntries(K.map((e,n)=>[e,Object.freeze(n+1<K.length?[K[n+1]]:[])])));var Pt=Object.freeze({intent:"draft",quote_comparison:"draft",simulation:"draft",prepared:"checked",approval:"approval",signed:"signed",broadcast:"submitted",settlement:"finalized",balance_delta:"compensated",position:"compensated"});var Dt=Object.freeze(["owner","operator","agent","viewer"]),Ft=Object.freeze(["tenant","config","policy","grant","workflow","trade","receipt","audit","telemetry"]),qt=Object.freeze({read:"read",create:"create",update:"update",delete:"delete",manage:"manage",prepare:"prepare",cancel:"cancel",export:"export",approve:"approve"}),_a=Object.freeze(["owner"]),Ra=Object.freeze({ALLOW_ROLE_PERMISSION:"allow.role_permission",DENY_MISSING_CONTEXT:"deny.missing_context",DENY_INVALID_CONTEXT:"deny.invalid_context",DENY_INVALID_REQUEST:"deny.invalid_request",DENY_UNKNOWN_RESOURCE:"deny.unknown_resource",DENY_UNKNOWN_ACTION:"deny.unknown_action",DENY_UNBOUND_OBJECT:"deny.unbound_object",DENY_TENANT_MISMATCH:"deny.tenant_mismatch",DENY_RESOURCE_MISMATCH:"deny.resource_mismatch",DENY_ROLE_PERMISSION:"deny.role_permission",DENY_POLICY_NOT_APPROVER:"deny.policy_not_approver"}),$a=new Set(Dt),La=new Set(Ft),Pa=new Set(Object.values(qt));var Mt=Object.freeze({owner:Object.freeze(["tenant:read","tenant:manage","config:read","config:manage","policy:read","policy:manage","grant:read","grant:create","grant:update","grant:delete","grant:manage","workflow:read","workflow:create","workflow:update","workflow:delete","workflow:cancel","workflow:approve","trade:read","trade:prepare","receipt:read","receipt:export","audit:read","audit:export","telemetry:read","telemetry:create","telemetry:export"]),operator:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","workflow:cancel","trade:read","trade:prepare","receipt:read","audit:read","telemetry:read","telemetry:create"]),agent:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","trade:read","trade:prepare","receipt:read","telemetry:create"]),viewer:Object.freeze(["tenant:read","config:read","grant:read","workflow:read","trade:read","receipt:read","audit:read","telemetry:read"])}),Ba=Object.freeze(Object.fromEntries(Object.entries(Mt).map(([e,n])=>[e,Object.freeze([...n])])));var jt=Object.freeze(["succeeded","denied","invalid","failed","cancelled","timed_out","unavailable","skipped"]),Ht=Object.freeze(["workflow","task","intent","plan","run","event","eval"]),zt=Object.freeze(["taskId","intentId","planId","runId","eventId"]);var Ma=Object.freeze({maxAttributes:24,maxKeyLength:48,maxStringLength:256,maxArrayLength:8}),ja=new Set(jt),Ha=new Set(Ht),za=new Set(zt);var Wa=Object.freeze(["authorization","bearer","cookie","credential","password","passphrase","secret","token","privatekey","privkey","seed","mnemonic","keystore","signature","prompt","systemmessage","usermessage","assistantmessage","rawtransaction","signedtransaction","serializedtransaction","transactionbytes","calldata","callbytes","inputdata"]);var Ua=Object.freeze({taskId:"x-oracle-task-id",intentId:"x-oracle-intent-id",planId:"x-oracle-plan-id",runId:"x-oracle-run-id",eventId:"x-oracle-event-id"});var Xa=Object.freeze({"workflow.cancelled":"cancelled","workflow.failed":"failed"});var nc=32*1024*1024;var ic=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}});import{createHmac as Ut,randomBytes as Ec,timingSafeEqual as Vt}from"node:crypto";import Jt from"node:fs";import x from"node:path";import{homedir as G}from"node:os";import{join as Y}from"node:path";var Ne=process.env.ORACLE_PUBLIC_DESKTOP==="1",Wt=Ne?process.env.ORACLE_CONFIG_DIR||Y(G(),".config","oracle"):Y(G(),".config","oracle"),lc=Ne?Wt:Y(G(),".config","mad-desk");var mc="0".repeat(64),wc=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"});function L(e){return e==null?"null":typeof e!="object"?JSON.stringify(e):Array.isArray(e)?"["+e.map(L).join(",")+"]":"{"+Object.keys(e).sort().map(t=>JSON.stringify(t)+":"+L(e[t])).join(",")+"}"}var hc=Promise.resolve();function Kt(e,n){if(!e)throw new Error("ledger: separate freshness anchor required");let t=s=>{try{return Jt.realpathSync(s)}catch{return x.resolve(s)}},r=t(x.dirname(x.resolve(e))),i=t(x.dirname(x.resolve(n))),o=(s,c)=>c===s||c.startsWith(s+x.sep);if(o(r,i)||o(i,r))throw new Error("ledger: separate freshness anchor required")}var X=(e,n)=>Ut("sha256",n).update(L(e)).digest("hex"),Gt=(e,n)=>{let t=Buffer.from(String(e)),r=Buffer.from(String(n));return t.length===r.length&&Vt(t,r)};function Yt(e,n,{sequence:t}={}){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("policy: object required");let r=t===void 0?e:{...e,policySequence:Number(t)};return{policy:r,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:X(r,n)}}}function Ce(e,n){if(!e)throw new Error("policy: sequence anchor required");let t;try{t=h(e)}catch{return{sequence:0,present:!1}}let r;try{r=JSON.parse(t)}catch{throw new Error("policy: sequence anchor is unreadable")}if(!Gt(r?.integrity?.mac,X(r?.marker,n)))throw new Error("policy: sequence anchor integrity failed");return{sequence:Number(r?.marker?.policySequence||0),policyMac:r?.marker?.policyMac??null,present:!0,ledgerInitialized:r?.marker?.ledgerInitialized===!0}}function Xt(e,n,t,r=null,{ledgerInitialized:i}={}){if(r==null||!String(r))throw new Error("policy: sequence anchor must bind the sealed policy MAC");let o=i===!0;if(i===void 0)try{let c=Ce(e,t);o=c.present&&c.ledgerInitialized===!0}catch{o=!1}let s={policySequence:Number(n),policyMac:String(r)};o&&(s.ledgerInitialized=!0),y(e,JSON.stringify({marker:s,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:X(s,t)}})+`
+`)}function _e(e,n,t,{sequenceAnchorFile:r}={}){let i=h(n);if(!r)throw new Error("policy: sequence anchor required");let o=Ce(r,i);Kt(r,e);let s=Number(o.sequence||0)+1,c=Yt(t,i,{sequence:s});Xt(r,s,i,c?.integrity?.mac??null),y(e,JSON.stringify(c,null,2)+`
+`)}import{readFileSync as Cc,readdirSync as _c,existsSync as Zt}from"node:fs";import{dirname as Qt,join as k}from"node:path";import{fileURLToPath as er}from"node:url";var I=Qt(er(import.meta.url));function tr(){let e=[k(I,"descriptors"),k(I,"clear-sign","descriptors"),k(I,"..","clear-sign","descriptors"),k(I,"..","..","clear-sign","descriptors"),k(I,"..","..","..","clear-sign","descriptors")];for(let n of e)if(Zt(n))return n;return e[0]}var Pc=tr();var Bc=(1n<<256n)-1n;import{Wallet as Z}from"ethers";import{base58 as Q}from"@scure/base";import{ed25519 as Pe}from"@noble/curves/ed25519.js";import{NETWORK as Be,TEST_NETWORK as De,WIF as rr,p2wpkh as Re}from"@scure/btc-signer";import{pubECDSA as nr}from"@scure/btc-signer/utils.js";var P=e=>{let n=String(e||"").trim().replace(/^0x/i,"");return!/^[0-9a-fA-F]+$/.test(n)||n.length%2?null:Buffer.from(n,"hex")},or=e=>{let n=String(e||"").trim();if(!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(n))return null;let t=Buffer.from(n,"base64");return t.toString("base64")===n?t:null},$e=e=>{let n=String(e||"").trim();try{let t=Buffer.from(Q.decode(n));return Q.encode(t)===n?t:null}catch{return null}},ee=e=>{if(!(e instanceof Uint8Array))throw new Error("sol: key bytes required");if(e.length!==32&&e.length!==64)throw new Error("sol: expected 32-byte private key material");let n=Buffer.from(e.subarray(0,32));if(e.length===64){let t=Buffer.from(e.subarray(32,64)),r=Buffer.from(Pe.getPublicKey(n));if(!t.equals(r))throw new Error("sol: supplied public key does not match seed")}return n},Le=e=>!(e instanceof Uint8Array)||e.length!==32&&e.length!==64?null:Buffer.from(e.subarray(0,32)),g=(e,n)=>{if(n==="sol")return ee(e);if(!(e instanceof Uint8Array))throw new Error(`${n}: key bytes required`);if(e.length===32)return Buffer.from(e);if(e.length===64)return Buffer.from(e.subarray(0,32));throw new Error(`${n}: expected 32-byte private key material`)},ir=(e,n)=>{if(!Array.isArray(e))throw new Error(`${n}: expected byte array`);let t=Buffer.alloc(e.length);for(let r=0;r<e.length;r++){let i=e[r];if(typeof i!="number"||!Number.isSafeInteger(i)||i<0||i>255)throw new Error(`${n}: expected integer bytes in 0..255`);t[r]=i}return g(t,n)};function S(e,n){let t=String(n||"").trim();if(e==="evm")return new Z(t).privateKey;if(e==="btc")for(let o of[Be,De])try{return Buffer.from(rr(o).decode(t))}catch{}if(e==="sol"){if(/^hex:/i.test(t)){let l=P(t.slice(4));if(!l)throw new Error("sol: invalid explicit hex private key");return g(l,"sol")}if(/^base58:/i.test(t)){let l=$e(t.slice(7));if(!Le(l))throw new Error("sol: invalid explicit base58 private key");return ee(l)}if(/^0x/i.test(t)){let l=P(t);if(!l)throw new Error("sol: invalid explicit hex private key");return g(l,"sol")}let o=P(t),s=o&&(o.length===32||o.length===64)?g(o,"sol"):null,c=$e(t),u=Le(c);if(s&&u&&!s.equals(u))throw new Error("sol: ambiguous private key format; prefix with hex: or base58:");if(u)return ee(c);if(o)return g(o,"sol")}let r=P(t);if(r)return e==="evm"?new Z(`0x${r.toString("hex")}`).privateKey:g(r,e);let i=or(t);if(i)return g(i,e);if(t.startsWith("[")||t.startsWith("{")){let o=JSON.parse(t);if(Array.isArray(o))return ir(o,e);let s=o.privateKey??o.secretKey??o.key;if(s)return S(e,Array.isArray(s)?JSON.stringify(s):String(s))}throw new Error(`${e}: unsupported private key format`)}function O(e,n){if(e==="evm"){let t=new Z(String(n));return{kind:e,secret:t.privateKey,addresses:[t.address.toLowerCase()]}}if(e==="btc"){let t=g(n,"btc"),r=nr(t);return{kind:e,secret:t.toString("hex"),addresses:[Re(r,Be).address,Re(r,De).address]}}if(e==="sol"){let t=g(n,"sol");return{kind:e,secret:t.toString("hex"),addresses:[Q.encode(Pe.getPublicKey(t))]}}throw new Error(`unsupported signer kind ${e}`)}function te(e,n={}){let t=Buffer.isBuffer(e)?e.toString("utf8"):String(e||"");if(String(n.kind||"")!=="multichain")return{[n.kind||"evm"]:O(n.kind||"evm",S(n.kind||"evm",t))};let r=JSON.parse(t),i={};for(let o of["evm","btc","sol"])r[o]&&(i[o]=O(o,S(o,r[o])));if(r.cex!==void 0){if(!r.cex||typeof r.cex!="object"||Array.isArray(r.cex))throw new Error("local-vault: cex credential records invalid");i.cex={};for(let[o,s]of Object.entries(r.cex)){if(!/^[A-Za-z0-9._-]{1,64}$/.test(o)||!s||typeof s!="object")throw new Error("local-vault: cex credential record invalid");if(!/^(?:binance|bybit|okx|coinbase)$/.test(s.venue)||!/^[A-Za-z0-9._-]{1,64}$/.test(s.accountId||""))throw new Error("local-vault: cex credential binding invalid");let c=(l,f=!0)=>{let d=s[l];if(!(!f&&d===void 0)){if(!Array.isArray(d)||d.length<4||d.some(D=>!Number.isInteger(D)||D<0||D>255))throw new Error("local-vault: cex credential bytes invalid");return Buffer.from(d)}},u=s.apiSecretEncoding;if(u!==(s.venue==="coinbase"?"base64":"raw"))throw new Error("local-vault: explicit cex secret encoding refused");i.cex[o]=Object.freeze({venue:s.venue,accountId:s.accountId,apiKeyBytes:c("apiKeyBytes"),apiSecretBytes:c("apiSecretBytes"),apiSecretEncoding:u,passphraseBytes:c("passphraseBytes",!1)})}if(!Object.keys(i.cex).length)throw new Error("local-vault: empty cex credential records refused");Object.freeze(i.cex)}if(!Object.keys(i).length)throw new Error("local-vault: multichain vault is empty");return i}function Fe(e){let n={};for(let t of["evm","btc","sol"])e[t]&&(n[t]=t==="evm"?e[t].secret:`0x${e[t].secret}`);return e.cex&&(n.cex=Object.fromEntries(Object.entries(e.cex).map(([t,r])=>[t,{venue:r.venue,accountId:r.accountId,apiKeyBytes:[...r.apiKeyBytes],apiSecretBytes:[...r.apiSecretBytes],apiSecretEncoding:r.apiSecretEncoding,...r.passphraseBytes?{passphraseBytes:[...r.passphraseBytes]}:{}}]))),Buffer.from(JSON.stringify(n))}function qe(e){let n={};for(let[t,r]of Object.entries(e))r?.addresses&&(n[t]=r.addresses);return{kind:"multichain",address:null,addresses:n}}var Xc=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Zc=Object.freeze(["binance","bybit","okx","coinbase"]),Qc=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),el=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),tl=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),rl=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),nl=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),ol=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),il=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),sl=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),al=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"});var cr=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),Me=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"});var gl=256*1024;var zu=new re(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Wu=new re(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),Uu=new re(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"]);function je(e){let n=process.env.ORACLE_SIGNER_STATE_DIR||p.join(process.env.XDG_STATE_HOME||p.join(lr.homedir(),".local","state"),"oracle"),t=ur("sha256").update(p.resolve(e)).digest("hex").slice(0,16);return{vault:p.join(e,"vault.json"),policy:p.join(e,"signer-policy.json"),policyKey:p.join(e,"policy-integrity-key"),policyAnchor:p.join(n,`signer-policy-${t}.high-water`),ledger:p.join(e,"signer-ledger.json"),ledgerAnchor:p.join(n,`signer-ledger-${t}.high-water`),cexOrders:p.join(e,"cex-orders.json"),cexOrdersAnchor:p.join(n,`cex-orders-${t}.high-water`),token:p.join(e,"signer-token"),lock:p.join(n,`signer-${t}.lock`),workflowLedger:p.join(e,"workflow-events.jsonl")}}import{randomBytes as dr}from"node:crypto";import{Wallet as fr}from"ethers";var He=`oracle sign init|import|policy|status|lock|doctor
 
   oracle sign init [--passphrase-file <0600 file>]
   oracle sign import --kind evm|btc|sol --key-file <0600 file> [--passphrase-file <0600 file>]
@@ -11,14 +11,14 @@ var Te=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t
   oracle sign doctor
 
 Secrets are accepted only from a hidden TTY or protected owner-only files.
-They are never accepted as argument values or inherited environment variables.`,P=(e,n)=>{let t=e.indexOf(n);return t>=0?e[t+1]:null},$t=e=>{let n=String(P(e,"--kind")||"evm").toLowerCase();if(!["evm","btc","sol"].includes(n))throw new Error("import requires --kind evm|btc|sol");return n};async function Rt(e,n={}){if(n.readHidden)return n.readHidden(e);if(!process.stdin.isTTY)throw new Error("passphrase requires a TTY or --passphrase-file");return process.stderr.write(e),process.stdin.setRawMode(!0),process.stdin.resume(),new Promise((t,r)=>{let i="",o=c=>{for(let l of c){if(l===3){a(),r(new Error("cancelled"));return}if(l===13||l===10){a(),process.stderr.write(`
-`),t(i);return}l===127?i=i.slice(0,-1):i+=String.fromCharCode(l)}},a=()=>{process.stdin.off("data",o),process.stdin.setRawMode(!1),process.stdin.pause()};process.stdin.on("data",o)})}async function Bt(e,n){let t=P(e,"--passphrase-file");return t?h(t):Rt("Vault passphrase: ",n)}function Pt(e){return e.addresses.join(", ")}async function _t(e=[],n={}){let t=n.out||process.stdout,r=e[0],i=n.configDir||C(),o=Ie(Y.join(i,"signer"));if(!r||r==="help")return t.write(ke+`
+They are never accepted as argument values or inherited environment variables.`,B=(e,n)=>{let t=e.indexOf(n);return t>=0?e[t+1]:null},pr=e=>{let n=String(B(e,"--kind")||"evm").toLowerCase();if(!["evm","btc","sol"].includes(n))throw new Error("import requires --kind evm|btc|sol");return n};async function mr(e,n={}){if(n.readHidden)return n.readHidden(e);if(!process.stdin.isTTY)throw new Error("passphrase requires a TTY or --passphrase-file");return process.stderr.write(e),process.stdin.setRawMode(!0),process.stdin.resume(),new Promise((t,r)=>{let i="",o=c=>{for(let u of c){if(u===3){s(),r(new Error("cancelled"));return}if(u===13||u===10){s(),process.stderr.write(`
+`),t(i);return}u===127?i=i.slice(0,-1):i+=String.fromCharCode(u)}},s=()=>{process.stdin.off("data",o),process.stdin.setRawMode(!1),process.stdin.pause()};process.stdin.on("data",o)})}async function wr(e,n){let t=B(e,"--passphrase-file");return t?h(t):mr("Vault passphrase: ",n)}function hr(e){return e.addresses.join(", ")}async function gr(e=[],n={}){let t=n.out||process.stdout,r=e[0],i=n.configDir||N(),o=je(ne.join(i,"signer"));if(!r||r==="help")return t.write(He+`
 `),0;if(r==="status")return t.write(JSON.stringify({initialized:m.existsSync(o.vault),policyConfigured:m.existsSync(o.policy),armed:m.existsSync(o.vault)&&!m.existsSync(o.lock),disarmed:m.existsSync(o.lock)})+`
-`),0;if(r==="lock")return m.mkdirSync(Y.dirname(o.lock),{recursive:!0,mode:448}),y(o.lock,`locked
+`),0;if(r==="lock")return m.mkdirSync(ne.dirname(o.lock),{recursive:!0,mode:448}),y(o.lock,`locked
 `),t.write(`Local signer locked.
-`),0;if(r==="doctor"){let u=[];return m.existsSync(o.vault)||u.push("vault missing"),m.existsSync(o.policy)||u.push("policy missing (empty allowlists fail closed)"),t.write(u.length?`Signer not ready: ${u.join("; ")}
+`),0;if(r==="doctor"){let l=[];return m.existsSync(o.vault)||l.push("vault missing"),m.existsSync(o.policy)||l.push("policy missing (empty allowlists fail closed)"),t.write(l.length?`Signer not ready: ${l.join("; ")}
 `:`Signer files ready; vault remains locked until a short-lived signer session starts.
-`),u.length?1:0}if(r==="policy"){if(!m.existsSync(o.vault)||!m.existsSync(o.policyKey))throw new Error("initialize the local signer before sealing policy");let u=P(e,"--policy-file");if(!u)throw new Error("policy requires --policy-file <0600 JSON file>");let f;try{f=JSON.parse(h(u))}catch{throw new Error("policy file must contain valid JSON")}for(let d of["surfaces","actions","chains","destinations","owners"])if(!Array.isArray(f[d])||f[d].length===0)throw new Error(`policy: ${d} allowlist is empty`);return we(o.policy,o.policyKey,f,{sequenceAnchorFile:o.policyAnchor}),t.write(`Signer policy sealed with local integrity and freshness protection.
-`),0}if(r!=="init"&&r!=="import")throw new Error(`unknown subcommand '${r}'`);let a=await Bt(e,n),c={};if(m.existsSync(o.vault)){if(r==="init")throw new Error("local signer vault already exists");let u=D(o.vault),f=F(u,a);try{c=K(f,u.meta)}finally{f.fill(0)}}if(r==="init"){let u=Lt.createRandom();c.evm=T("evm",S("evm",u.privateKey))}else{let u=$t(e),f=P(e,"--key-file");if(!f)throw new Error("import requires --key-file <0600 file>");c[u]=T(u,S(u,h(f)))}m.mkdirSync(Y.dirname(o.vault),{recursive:!0,mode:448}),ie(o.vault,ne(Se(c),a,Ae(c))),m.existsSync(o.policyKey)||y(o.policyKey,Nt(32).toString("hex")+`
-`);let l=Object.entries(c).map(([u,f])=>`${u}:${Pt(f)}`).join(" ");return t.write(`Encrypted local vault initialized for ${l}. Configure sealed policy rails before starting a signer session.
-`),0}var yc={name:"sign",summary:"manage the encrypted self-hosted signing vault",usage:ke,run:e=>_t(e.argv||[])};export{yc as default,_t as run};
+`),l.length?1:0}if(r==="policy"){if(!m.existsSync(o.vault)||!m.existsSync(o.policyKey))throw new Error("initialize the local signer before sealing policy");let l=B(e,"--policy-file");if(!l)throw new Error("policy requires --policy-file <0600 JSON file>");let f;try{f=JSON.parse(h(l))}catch{throw new Error("policy file must contain valid JSON")}for(let d of["surfaces","actions","chains","destinations","owners"])if(!Array.isArray(f[d])||f[d].length===0)throw new Error(`policy: ${d} allowlist is empty`);return _e(o.policy,o.policyKey,f,{sequenceAnchorFile:o.policyAnchor}),t.write(`Signer policy sealed with local integrity and freshness protection.
+`),0}if(r!=="init"&&r!=="import")throw new Error(`unknown subcommand '${r}'`);let s=await wr(e,n),c={};if(m.existsSync(o.vault)){if(r==="init")throw new Error("local signer vault already exists");let l=q(o.vault),f=F(l,s);try{c=te(f,l.meta)}finally{f.fill(0)}}if(r==="init"){let l=fr.createRandom();c.evm=O("evm",S("evm",l.privateKey))}else{let l=pr(e),f=B(e,"--key-file");if(!f)throw new Error("import requires --key-file <0600 file>");c[l]=O(l,S(l,h(f)))}m.mkdirSync(ne.dirname(o.vault),{recursive:!0,mode:448}),de(o.vault,le(Fe(c),s,qe(c))),m.existsSync(o.policyKey)||y(o.policyKey,dr(32).toString("hex")+`
+`);let u=Object.entries(c).map(([l,f])=>`${l}:${hr(f)}`).join(" ");return t.write(`Encrypted local vault initialized for ${u}. Configure sealed policy rails before starting a signer session.
+`),0}var rd={name:"sign",summary:"manage the encrypted self-hosted signing vault",usage:He,run:e=>gr(e.argv||[])};export{rd as default,gr as run};