@oracle-agent/oracle 0.35.19 → 0.35.21

package/dist/bin/oracle-public-server.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-var Ee=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};import te from"node:net";import Br from"node:dns";function ke(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let n=c=>{if(!c)return[];let d=c.split(":"),f=d.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(v=>!Number.isInteger(v)||v<0||v>255))return null;d.splice(d.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return d.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:d.map(u=>Number.parseInt(u,16))},[r,o]=t.split("::"),i=n(r),s=n(o);if(!i||!s)return null;let a=t.includes("::"),l=8-i.length-s.length;if(!a&&l!==0||a&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(c=>[c>>8,c&255]))}function We(e,t,n){let r=Math.floor(n/8),o=n%8;for(let s=0;s<r;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[r]&i)===(t[r]&i)}function Ke(e){if(te.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(te.isIPv6(e)){let t=ke(e);if(!t)return!1;let n=ke("::ffff:0:0");return We(t,n,96)?Ke([...t.slice(12)].join(".")):We(t,ke("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>We(t,ke(o),i)):!1}return!1}function Mr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let n=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Fr.has(n)||n.endsWith(".localhost")||n.endsWith(".internal"))return{ok:!1,error:`refused internal host ${n}`};let r=te.isIP(n);return r!==0&&!Ke(n)?{ok:!1,error:`refused private address ${n}`}:{ok:!0,url:t,host:n,isLiteralIp:r!==0}}async function Ge(e,{lookupFn:t=Br.promises.lookup}={}){let n=Mr(e);if(!n.ok)return n;if(n.isLiteralIp)return{ok:!0,url:n.url,addresses:[{address:n.host,family:te.isIPv6(n.host)?6:4}]};let r;try{r=await t(n.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${n.host} did not resolve`}}return!Array.isArray(r)||r.length===0||r.some(o=>!Ke(o.address))?{ok:!1,error:`refused: ${n.host} resolves to a non-public address`}:{ok:!0,url:n.url,addresses:r}}async function Ye({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let n,r;try{let d=await t();n=d.Agent,r=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof n!="function"||typeof r!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(te.isIPv6(f.address)?6:4)})),a=(d,f,u)=>{i.set(o(d),s(typeof f=="string"?[{address:f,family:u}]:f))},l=d=>{let f=o(d);if(te.isIP(f))return[{address:f,family:te.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return u},p=new n({connect:{lookup(d,f,u){let v;try{v=l(d)}catch(x){return u(x)}return f?.all?u(null,v):u(null,v[0].address,v[0].family)}}}),c=qr((d,f={})=>r(d,{...f,dispatcher:p}),a);return{dispatcher:p,fetch:c,pin:a,resolve:l,async close(){try{await p.destroy()}catch{}}}}function qr(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Je]=Object.freeze({pin:t}),e}function Xe(e){return typeof e=="function"&&typeof e[Je]?.pin=="function"}function sn(e,t,n){if(!Xe(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Je].pin(t,n)}var Fr,Je,an=Ee(()=>{Fr=new Set(["localhost","metadata.google.internal","metadata.goog"]);Je=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as cn}from"node:crypto";function jr(e){let t=String(e||"").toLowerCase();return hn.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function Wr(e){let t={};for(let[n,r]of Object.entries(e||{}))jr(n)||(t[n]=r);return t}function Kr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function Gr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function pn(e){let t=String(e?.method||"");return t?!Yr.test(t):!1}function Xr(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let n=t;if(typeof t=="string")try{n=JSON.parse(t)}catch{return!1}return Array.isArray(n)?n.length>0&&n.every(pn):!n||typeof n!="object"?!1:n.jsonrpc&&n.method?pn(n):typeof n.type=="string"&&Jr.has(n.type)&&n.action==null&&n.signature==null&&n.nonce==null}function Qr(e,t,n,r={},o=null){let i={};for(let[f,u]of Object.entries(n||{}))i[f.toLowerCase()]=u;let s=Object.keys(i).filter(f=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(f)),l=[...new Set([...hn,...s])].sort().map(f=>`${f}=${i[f]??""}`).join(`
-`),p=cn("sha256").update(l).digest("hex").slice(0,32),c=`${r.untrustedUrl?"untrusted":"trusted"}:${r.maxResponseBytes??"unbounded"}`,d=o==null?"-":cn("sha256").update(String(o)).digest("hex").slice(0,32);return`${e} ${t} ${c} ${p} ${d}`}function Zr(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,un):Math.min(250*2**e,un)+Math.floor(Math.random()*100)}function ye(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function Ze(e,t,n){return ye(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function be(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function to(e){return e?e.byteLength??e.length??0:0}async function fn(e,t,{url:n,truncate:r=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(be(e),!r))throw Ze(n,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!r)throw Ze(n,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let a=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(a.push(Buffer.from(d)),l+=to(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!r))throw Ze(n,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(p?c.subarray(0,t):c).toString("utf8")}function mn(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function no(e,{fetchImpl:t,method:n,headers:r,body:o,timeoutMs:i,lookupFn:s,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:p=null,importUndici:c,validateResponse:d,signal:f}){let u=new AbortController,v=setTimeout(()=>u.abort(),i),x=f?typeof AbortSignal.any=="function"?AbortSignal.any([f,u.signal]):f:u.signal,y=null,I=t,k=s?{lookupFn:s}:{};if(l&&!a&&!Xe(I))throw ye(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let M=async(m,{status:g=null}={})=>{let A=await Ge(m,k);if(!A.ok)throw ye(g==null?`HTTP refused ${m}: ${A.error}`:`HTTP redirect to ${m} ${A.error}`,g==null?{}:{status:g});let S=new URL(m).hostname;if(a){if(y&&(await y.close(),y=null),!y)try{y=await Ye({requireUndici:!0,...c?{importUndici:c}:{}})}catch(N){throw ye(g==null?`HTTP refused ${m}: ${N?.message||N}`:`HTTP redirect to ${m} refused: ${N?.message||N}`,g==null?{}:{status:g})}y.pin(S,A.addresses),I=y.fetch}else sn(I,S,A.addresses);return A};try{let m=String(e),g={...r||{}};l&&await M(m);for(let A=0;A<=dn;A+=1){let S=await I(m,{method:n,headers:g,body:o,signal:x,redirect:"manual"});if(Vr.has(S.status)){if(n!=="GET"&&n!=="HEAD"){let U=await fn(S,p??zr,{url:m,truncate:!0}),H=new Error(`HTTP ${S.status} ${n} ${m} redirected non-idempotent request`);throw H.status=S.status,H.body=mn(U)??U.slice(0,300),H}if(A===dn)throw be(S),new Error(`HTTP redirect loop for ${e}`);let C=S.headers?.get?.("location"),L;try{L=Kr(C,m)}catch(U){throw be(S),U}let Z=!Gr(L,m);if(be(S),Z&&(g=Wr(g)),l)await M(L,{status:S.status});else if(Z){let U=await Ge(L,k);if(!U.ok){let H=new Error(`HTTP redirect from ${m} ${U.error}`);throw H.status=S.status,H.retryable=!1,H}a&&U.addresses?.length&&(y||(y=await Ye(c?{importUndici:c}:{})),y&&(y.pin(new URL(L).hostname,U.addresses),I=y.fetch))}m=L;continue}if(typeof d=="function")try{await d(S,{url:m})}catch(C){throw be(S),ye(C?.message||String(C))}let N=await fn(S,p,{url:m,onOversize:()=>u.abort()}),z=mn(N);if(!S.ok){let C=new Error(`HTTP ${S.status} ${n} ${m}`);throw C.status=S.status,C.retryAfter=S.headers?.get?.("retry-after")??null,C.body=z??N.slice(0,300),C}return z??N}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(v),y&&await y.close()}}async function O(e,t={}){let n=t.fetchImpl||globalThis.fetch;if(typeof n!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let r=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},s=t.body;s!=null&&typeof s!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",s=JSON.stringify(s));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):Hr,l=t.lookupFn,p=!t.fetchImpl,c=t.untrustedUrl===!0,d=t.importUndici,f=t.validateResponse,u=t.signal,v=Number(t.maxResponseBytes),x=Number.isFinite(v)&&v>0?Math.floor(v):null,y=async()=>{let g;for(let A=0;A<=a;A++){u?.throwIfAborted?.();try{return await no(e,{fetchImpl:n,method:o,headers:i,body:s,timeoutMs:r,lookupFn:l,realFetch:p,untrustedUrl:c,maxResponseBytes:x,importUndici:d,validateResponse:f,signal:u})}catch(S){g=S;let N=S?.status,z=S?.name==="AbortError"||S?.name==="TimeoutError"||u?.aborted,C=new Set([408,425,429]),L=S?.retryable===!1?!1:N!=null?C.has(N)||Dr.has(N)&&ln.has(o):!z&&ln.has(o);if(A===a||!L)throw S;let Z=Zr(A,S?.retryAfter);u?await new Promise((U,H)=>{let Be=setTimeout(U,Z);u.addEventListener("abort",()=>{clearTimeout(Be),H(u.reason||new DOMException("Aborted","AbortError"))},{once:!0})}):await eo(Z)}}throw g};if(!(t.dedupe!==!1&&!u&&Xr(o,s)))return y();let k=Qr(o,e,i,{untrustedUrl:c,maxResponseBytes:x},s),M=Qe.get(k);if(M)return M;let m=y().finally(()=>Qe.delete(k));return Qe.set(k,m),m}async function P(e){let t=Date.now();try{let n=await e();return{ok:!0,ms:Date.now()-t,data:n}}catch(n){return{ok:!1,ms:Date.now()-t,error:String(n.message||n),status:n.status??null}}}async function W(e,t,n){let r=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,r.length||1)),i=new Array(r.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<r.length;){let a=s++;i[a]=await n(r[a],a)}})),i}var Dr,ln,Hr,un,hn,Vr,dn,zr,Qe,Yr,Jr,eo,B=Ee(()=>{an();Dr=new Set([408,425,429,500,502,503,504]),ln=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Hr=2,un=4e3,hn=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],Vr=new Set([301,302,303,307,308]),dn=3,zr=64*1024;Qe=new Map,Yr=/(?:^|_)(send|submit|broadcast|sign|requestAirdrop)(?=[A-Z_]|$)/i,Jr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);eo=e=>new Promise(t=>setTimeout(t,e))});function bn(e){return ro.get(Number(e))||null}function gn(e,t=process.env){let n=bn(e);if(!n)return null;for(let r of n.rpcEnv){let o=(t[r]||"").trim();if(o)return o}return null}var yn,ro,wn=Ee(()=>{yn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},ro=new Map(Object.values(yn).map(e=>[e.chainId,e]))});import{Interface as oo,getAddress as io}from"ethers";function et(e,t){try{return io(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function ao(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=gn(e,n);return r||so[Number(e)]||null}function lo(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!co.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}function uo(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function po(e){if(e?.error)throw uo(e.error);return e?.result}function fo(e,t,n){return`${e}
+var Ee=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};import te from"node:net";import Br from"node:dns";function ke(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let n=c=>{if(!c)return[];let d=c.split(":"),f=d.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(v=>!Number.isInteger(v)||v<0||v>255))return null;d.splice(d.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return d.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:d.map(u=>Number.parseInt(u,16))},[r,o]=t.split("::"),i=n(r),s=n(o);if(!i||!s)return null;let a=t.includes("::"),l=8-i.length-s.length;if(!a&&l!==0||a&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(c=>[c>>8,c&255]))}function We(e,t,n){let r=Math.floor(n/8),o=n%8;for(let s=0;s<r;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[r]&i)===(t[r]&i)}function Ke(e){if(te.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(te.isIPv6(e)){let t=ke(e);if(!t)return!1;let n=ke("::ffff:0:0");return We(t,n,96)?Ke([...t.slice(12)].join(".")):We(t,ke("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>We(t,ke(o),i)):!1}return!1}function Mr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let n=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Fr.has(n)||n.endsWith(".localhost")||n.endsWith(".internal"))return{ok:!1,error:`refused internal host ${n}`};let r=te.isIP(n);return r!==0&&!Ke(n)?{ok:!1,error:`refused private address ${n}`}:{ok:!0,url:t,host:n,isLiteralIp:r!==0}}async function Ge(e,{lookupFn:t=Br.promises.lookup}={}){let n=Mr(e);if(!n.ok)return n;if(n.isLiteralIp)return{ok:!0,url:n.url,addresses:[{address:n.host,family:te.isIPv6(n.host)?6:4}]};let r;try{r=await t(n.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${n.host} did not resolve`}}return!Array.isArray(r)||r.length===0||r.some(o=>!Ke(o.address))?{ok:!1,error:`refused: ${n.host} resolves to a non-public address`}:{ok:!0,url:n.url,addresses:r}}async function Ye({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let n,r;try{let d=await t();n=d.Agent,r=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof n!="function"||typeof r!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(te.isIPv6(f.address)?6:4)})),a=(d,f,u)=>{i.set(o(d),s(typeof f=="string"?[{address:f,family:u}]:f))},l=d=>{let f=o(d);if(te.isIP(f))return[{address:f,family:te.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return u},p=new n({connect:{lookup(d,f,u){let v;try{v=l(d)}catch(x){return u(x)}return f?.all?u(null,v):u(null,v[0].address,v[0].family)}}}),c=qr((d,f={})=>r(d,{...f,dispatcher:p}),a);return{dispatcher:p,fetch:c,pin:a,resolve:l,async close(){try{await p.destroy()}catch{}}}}function qr(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Je]=Object.freeze({pin:t}),e}function Xe(e){return typeof e=="function"&&typeof e[Je]?.pin=="function"}function an(e,t,n){if(!Xe(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Je].pin(t,n)}var Fr,Je,cn=Ee(()=>{Fr=new Set(["localhost","metadata.google.internal","metadata.goog"]);Je=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as ln}from"node:crypto";function jr(e){let t=String(e||"").toLowerCase();return yn.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function Wr(e){let t={};for(let[n,r]of Object.entries(e||{}))jr(n)||(t[n]=r);return t}function Kr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function Gr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function fn(e){let t=String(e?.method||"");return t?!Yr.test(t):!1}function Xr(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let n=t;if(typeof t=="string")try{n=JSON.parse(t)}catch{return!1}return Array.isArray(n)?n.length>0&&n.every(fn):!n||typeof n!="object"?!1:n.jsonrpc&&n.method?fn(n):typeof n.type=="string"&&Jr.has(n.type)&&n.action==null&&n.signature==null&&n.nonce==null}function Qr(e,t,n,r={},o=null){let i={};for(let[f,u]of Object.entries(n||{}))i[f.toLowerCase()]=u;let s=Object.keys(i).filter(f=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(f)),l=[...new Set([...yn,...s])].sort().map(f=>`${f}=${i[f]??""}`).join(`
+`),p=ln("sha256").update(l).digest("hex").slice(0,32),c=`${r.untrustedUrl?"untrusted":"trusted"}:${r.maxResponseBytes??"unbounded"}`,d=o==null?"-":ln("sha256").update(String(o)).digest("hex").slice(0,32);return`${e} ${t} ${c} ${p} ${d}`}function Zr(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,dn):Math.min(250*2**e,dn)+Math.floor(Math.random()*100)}function ye(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function Ze(e,t,n){return ye(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function be(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function to(e){return e?e.byteLength??e.length??0:0}async function mn(e,t,{url:n,truncate:r=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(be(e),!r))throw Ze(n,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!r)throw Ze(n,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let a=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(a.push(Buffer.from(d)),l+=to(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!r))throw Ze(n,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(p?c.subarray(0,t):c).toString("utf8")}function hn(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function no(e,{fetchImpl:t,method:n,headers:r,body:o,timeoutMs:i,lookupFn:s,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:p=null,importUndici:c,validateResponse:d,signal:f}){let u=new AbortController,v=setTimeout(()=>u.abort(),i),x=f?typeof AbortSignal.any=="function"?AbortSignal.any([f,u.signal]):f:u.signal,y=null,I=t,k=s?{lookupFn:s}:{};if(l&&!a&&!Xe(I))throw ye(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let M=async(m,{status:g=null}={})=>{let A=await Ge(m,k);if(!A.ok)throw ye(g==null?`HTTP refused ${m}: ${A.error}`:`HTTP redirect to ${m} ${A.error}`,g==null?{}:{status:g});let S=new URL(m).hostname;if(a){if(y&&(await y.close(),y=null),!y)try{y=await Ye({requireUndici:!0,...c?{importUndici:c}:{}})}catch(N){throw ye(g==null?`HTTP refused ${m}: ${N?.message||N}`:`HTTP redirect to ${m} refused: ${N?.message||N}`,g==null?{}:{status:g})}y.pin(S,A.addresses),I=y.fetch}else an(I,S,A.addresses);return A};try{let m=String(e),g={...r||{}};l&&await M(m);for(let A=0;A<=pn;A+=1){let S=await I(m,{method:n,headers:g,body:o,signal:x,redirect:"manual"});if(Vr.has(S.status)){if(n!=="GET"&&n!=="HEAD"){let U=await mn(S,p??zr,{url:m,truncate:!0}),H=new Error(`HTTP ${S.status} ${n} ${m} redirected non-idempotent request`);throw H.status=S.status,H.body=hn(U)??U.slice(0,300),H}if(A===pn)throw be(S),new Error(`HTTP redirect loop for ${e}`);let C=S.headers?.get?.("location"),L;try{L=Kr(C,m)}catch(U){throw be(S),U}let Z=!Gr(L,m);if(be(S),Z&&(g=Wr(g)),l)await M(L,{status:S.status});else if(Z){let U=await Ge(L,k);if(!U.ok){let H=new Error(`HTTP redirect from ${m} ${U.error}`);throw H.status=S.status,H.retryable=!1,H}a&&U.addresses?.length&&(y||(y=await Ye(c?{importUndici:c}:{})),y&&(y.pin(new URL(L).hostname,U.addresses),I=y.fetch))}m=L;continue}if(typeof d=="function")try{await d(S,{url:m})}catch(C){throw be(S),ye(C?.message||String(C))}let N=await mn(S,p,{url:m,onOversize:()=>u.abort()}),z=hn(N);if(!S.ok){let C=new Error(`HTTP ${S.status} ${n} ${m}`);throw C.status=S.status,C.retryAfter=S.headers?.get?.("retry-after")??null,C.body=z??N.slice(0,300),C}return z??N}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(v),y&&await y.close()}}async function O(e,t={}){let n=t.fetchImpl||globalThis.fetch;if(typeof n!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let r=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},s=t.body;s!=null&&typeof s!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",s=JSON.stringify(s));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):Hr,l=t.lookupFn,p=!t.fetchImpl,c=t.untrustedUrl===!0,d=t.importUndici,f=t.validateResponse,u=t.signal,v=Number(t.maxResponseBytes),x=Number.isFinite(v)&&v>0?Math.floor(v):null,y=async()=>{let g;for(let A=0;A<=a;A++){u?.throwIfAborted?.();try{return await no(e,{fetchImpl:n,method:o,headers:i,body:s,timeoutMs:r,lookupFn:l,realFetch:p,untrustedUrl:c,maxResponseBytes:x,importUndici:d,validateResponse:f,signal:u})}catch(S){g=S;let N=S?.status,z=S?.name==="AbortError"||S?.name==="TimeoutError"||u?.aborted,C=new Set([408,425,429]),L=S?.retryable===!1?!1:N!=null?C.has(N)||Dr.has(N)&&un.has(o):!z&&un.has(o);if(A===a||!L)throw S;let Z=Zr(A,S?.retryAfter);u?await new Promise((U,H)=>{let Be=setTimeout(U,Z);u.addEventListener("abort",()=>{clearTimeout(Be),H(u.reason||new DOMException("Aborted","AbortError"))},{once:!0})}):await eo(Z)}}throw g};if(!(t.dedupe!==!1&&!u&&Xr(o,s)))return y();let k=Qr(o,e,i,{untrustedUrl:c,maxResponseBytes:x},s),M=Qe.get(k);if(M)return M;let m=y().finally(()=>Qe.delete(k));return Qe.set(k,m),m}async function P(e){let t=Date.now();try{let n=await e();return{ok:!0,ms:Date.now()-t,data:n}}catch(n){return{ok:!1,ms:Date.now()-t,error:String(n.message||n),status:n.status??null}}}async function W(e,t,n){let r=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,r.length||1)),i=new Array(r.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<r.length;){let a=s++;i[a]=await n(r[a],a)}})),i}var Dr,un,Hr,dn,yn,Vr,pn,zr,Qe,Yr,Jr,eo,B=Ee(()=>{cn();Dr=new Set([408,425,429,500,502,503,504]),un=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Hr=2,dn=4e3,yn=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],Vr=new Set([301,302,303,307,308]),pn=3,zr=64*1024;Qe=new Map,Yr=/(?:^|_)(send|submit|broadcast|sign|requestAirdrop)(?=[A-Z_]|$)/i,Jr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);eo=e=>new Promise(t=>setTimeout(t,e))});function gn(e){return ro.get(Number(e))||null}function wn(e,t=process.env){let n=gn(e);if(!n)return null;for(let r of n.rpcEnv){let o=(t[r]||"").trim();if(o)return o}return null}var bn,ro,Sn=Ee(()=>{bn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},ro=new Map(Object.values(bn).map(e=>[e.chainId,e]))});import{Interface as oo,getAddress as io}from"ethers";function et(e,t){try{return io(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function ao(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=wn(e,n);return r||so[Number(e)]||null}function lo(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!co.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}function uo(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function po(e){if(e?.error)throw uo(e.error);return e?.result}function fo(e,t,n){return`${e}
 ${t}
-${JSON.stringify(n??[])}`}async function mo(e,t,n){return O(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function K(e,t,n=[],r={}){let o=String(t||""),i=lo(o),s=ao(e,r);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&r.cacheChainId!==!1){let c=vn.get(s);if(c!=null)return c}let l=r.dedupe!==!1&&!r.signal?fo(s,o,n):null;if(l&&ge.has(l))return ge.get(l);let p=(async()=>{let c=await mo(s,{jsonrpc:"2.0",id:1,method:t,params:n},r),d=po(c);return i==="eth_chainid"&&typeof d=="string"&&vn.set(s,d),d})();return l&&(ge.set(l,p),p.finally(()=>{ge.get(l)===p&&ge.delete(l)}).catch(()=>{})),p}async function tt(e,t={}){let n=await K(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function nt(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await K(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function An(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=et(e.token||e.tokenAddress,"token"),o=et(e.owner,"owner"),i=et(e.spender,"spender"),s=Sn.encodeFunctionData("allowance",[o,i]),a=await K(n,"eth_call",[{to:r,data:s},e.blockTag||"latest"],t),l=Sn.decodeFunctionResult("allowance",a),p=BigInt(l[0]);return{chainId:n,token:r,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var Sn,so,co,ge,vn,ae=Ee(()=>{B();wn();Sn=new oo(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);so={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};co=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;ge=new Map,vn=new Map});import{createServer as ji}from"node:http";import{readFileSync as Ct,existsSync as hr}from"node:fs";import{dirname as Wi,join as Ae,normalize as Tt,sep as Ki}from"node:path";import{fileURLToPath as Gi}from"node:url";import{createHash as vr}from"node:crypto";var me=1,Ut=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Ar=Object.freeze(["read","simulate"]),Bt=1e4,Ft=1440*60,Mt=128,qt=256,Dt=64,Ht=256,Vt=/^0x[0-9a-fA-F]{40}$/,Er=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,xr=/^[a-z][a-z0-9_-]*:\*$/,Ir=/^[A-Za-z0-9._:-]+$/,kr=/^[A-Za-z0-9._:-]+$/,zt=/^(0|[1-9][0-9]*)$/,j=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function jt(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function _r(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return zt.test(t)?t:null}return null}function Y(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!zt.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function De(e){let t=String(e).split(":")[0];return Ar.includes(t)}function He(e,t={}){let n=[],r=(d,f)=>n.push({field:d,message:f});if(!jt(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let d of Object.keys(e))Ut.includes(d)||r(d,"unknown field is not allowed");for(let d of Ut)(!(d in e)||e[d]==null)&&r(d,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let o={},i=Y(e.chainId);i==null||i<=0?r("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!Vt.test(f.trim())?r(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>Dt)r("actions",`too many actions (max ${Dt})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){r("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&xr.test(u)?d.push(u):r("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!Er.test(u)){r("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>Ht)r("targets",`too many targets (max ${Ht})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!Vt.test(u)){r("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!De(u));(f.length>0||o.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=_r(e[d]);f==null?r(d,"must be a non-negative integer wei amount"):o[d]=f}let s=Y(e.maxSlippageBps);s==null||s>Bt?r("maxSlippageBps",`must be an integer between 0 and ${Bt}`):o.maxSlippageBps=s;let a=864e10,l=Y(e.expiresAt);if(l==null||l<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(l>a)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=Y(t.now);d==null?r("expiresAt","opts.now must be a unix-seconds integer"):l<=d?r("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>Ft&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${Ft} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():Y(e.nonce)!=null?String(Y(e.nonce)):null;!p||p.length>Mt||!Ir.test(p)?r("nonce",`must be a non-empty string (max ${Mt} chars, [A-Za-z0-9._:-])`):o.nonce=p;let c=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!c||c.length>qt||!kr.test(c)?r("revocationKey",`must be a non-empty public identifier (max ${qt} chars, [A-Za-z0-9._:-])`):o.revocationKey=c,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:o}}function xe(e,t={}){let{ok:n,errors:r,grant:o}=He(e,t);if(!n)throw new j(r);return o}function Ve(e,t={}){let n=xe(e,t),o=Object.keys(n).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(n[i])}`);return`{"version":${me},${o.join(",")}}`}function Ie(e,t={}){return vr("sha256").update(Ve(e,t),"utf8").digest("hex")}function Wt(e,t){let n=Y(t),r=Y(jt(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var Kt="oracle-connect-request",Tr="oracle-unsigned-grant",Nr="oracle-grant-canonical-json-utf8-v1",V=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},Cr=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Pr=Object.freeze(["privkey","wif","xprv","seed"]);function ze(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return Cr.test(t)||Pr.includes(n)}var Gt=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Yt=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function $r(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>Yt.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function Jt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new V("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let n=$r(t);for(let{rule:o,re:i}of Gt)if(i.test(n))throw new V("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new V("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&ze(o))throw new V(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function D(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let o=Yt.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Gt)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new V(t,i);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&ze(o))throw new V(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");D(o,`${t}[key]`,n),D(i,`${t}[${String(o)}]`,n)}return e}if(e instanceof Set){let o=0;for(let i of e.values())D(i,`${t}[${o++}]`,n);return e}if(Array.isArray(e))return e.forEach((o,i)=>D(o,`${t}[${i}]`,n)),e;for(let[o,i]of Object.entries(e)){if(ze(o))throw new V(`${t}.${o}`,"forbidden-key-name");D(i,`${t}.${o}`,n,o)}return e}function he(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))he(t)}return e}function Xt(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new j([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function Qt(e){if(e?.now==null)throw new j([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return Xt(e.now,"opts.now")}function Or(e){return new Date(e*1e3).toISOString()}function Rr(e,t){let n=e.actions.every(r=>De(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${me}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${Or(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
-`)}function Zt(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new j([{field:"request",message:"request must be a plain object"}]);let n=Qt(t),{ttlSeconds:r,...o}=e,i={...o};if(r!=null){if(i.expiresAt!=null)throw new j([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=Xt(r,"ttlSeconds");i.expiresAt=n+l}let s=xe(i,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),a=he({kind:Kt,version:me,grant:s});return D(a)}function en(e={},t={}){let n=Qt(t),r=e&&e.kind===Kt?e.grant:e,o=xe(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),i=Ve(o),s=Ie(o),a=Buffer.from(i,"utf8"),l=he({kind:Tr,unsigned:!0,payload:he({version:me,grantId:s,grant:o,canonical:i}),signing:he({scheme:Nr,message:i,bytesHex:`0x${a.toString("hex")}`,byteLength:a.length,sha256:s}),render:Rr(o,s)});return D(l)}var se=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function tn(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function Lr(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function je(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function Ur(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(o=>e.has(o)):Array.isArray(e)?r.some(o=>e.includes(o)):typeof e.has=="function"?r.some(o=>e.has(o)):!1}function nn(e,{now:t,revoked:n}={}){let r=je(t),{grant:o,revoked:i}=Lr(e),{ok:s,grant:a}=He(o);if(!s)return{status:se.INVALID,id:null,grant:null};let l=Ie(a);return i||Ur(n,l,a)?{status:se.REVOKED,id:l,grant:a}:Wt(a,r)?{status:se.EXPIRED,id:l,grant:a}:{status:se.ACTIVE,id:l,grant:a}}function rn(e,{now:t,revoked:n,agentAddress:r,accountAddress:o,chainId:i}={}){let s=je(t),a=r!=null?String(r).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,c=[];for(let d of tn(e)){let{status:f,id:u,grant:v}=nn(d,{now:s,revoked:n});f===se.ACTIVE&&(a!=null&&v.agentAddress!==a||l!=null&&v.accountAddress!==l||p!=null&&v.chainId!==p||c.push(Object.freeze({id:u,grant:v})))}return c.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),D(Object.freeze(c))}function on(e,t,{now:n,revoked:r}={}){let o=je(n),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of tn(e)){let a=nn(s,{now:o,revoked:r});if(a.status!==se.INVALID&&a.id===i)return D(Object.freeze({id:a.id,status:a.status,grant:a.grant}))}return null}import{Interface as Tn,getAddress as yo,id as Nn}from"ethers";ae();B();var Qs=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});B();var ea=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),rt=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),ot=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ae();ae();var _e=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);B();ae();var En=new Tn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),xn=new Tn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),bo=Nn("Approval(address,address,uint256)"),Ca=Nn("ApprovalForAll(address,address,bool)"),go=1e4,wo=2e5,So=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),vo=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),Ao=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),Eo=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),xo=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),Io=(1n<<256n)-1n,ko=Io/2n,_o=4320*60*60*1e3,To=360*60*1e3,No=600*1e3,Co=45*1e3,Po=512,$o=128,In=new Map,it=new Map,kn=new Map;function ce(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function at(e,t,n){let r=e.get(t);return r?Date.now()-r.at>n?(e.delete(t),null):r:null}function Te(e,t,n,r){for(e.delete(t),e.set(t,{at:Date.now(),value:n});e.size>r;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function Oo(e,t){try{return yo(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Ro(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function _n(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Lo({unlimited:e,spenderLabel:t,lastActivityAt:n}){if(e)return"unlimited";if(!t)return"unknown-spender";if(n){let r=Date.parse(n);if(Number.isFinite(r)&&Date.now()-r>_o)return"stale"}return"scoped"}function Uo(e,t,n){if(n)return"UNLIMITED";if(t==null)return e.toString();let r=10n**BigInt(t),o=e/r,i=e%r;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Bo(e,t,n,r){let o=`${e}:${t}`,i=r?.get(o);if(i)return i;if(ce(n)){let a=at(In,o,To);if(a)return a.value}let s=(async()=>{let a=async d=>{try{let f=En.encodeFunctionData(d,[]),u=await K(e,"eth_call",[{to:t,data:f},"latest"],n);return!u||u==="0x"?null:En.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([a("decimals"),a("symbol")]),c={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return ce(n)&&Te(In,o,c,Po),c})();return r?.set(o,s),s}async function Fo(e,t,n){let r=Math.min(Math.max(Number(n.lookbackBlocks)||go,1),wo),o=await tt(e,n);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-r),s=await K(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[bo,Ro(t)]}],n);if(!Array.isArray(s))throw new Error("log scan returned no array");let a=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),c=l?.topics?.[2];!p||!c||a.set(`${p}:${_n(c)}`,{token:p,spender:_n(c)})}return{pairs:[...a.values()],fromBlock:i,toBlock:o}}function Mo(e){return(xo[e]||[]).flatMap(n=>vo.map(r=>({token:n.address,spender:r.address,symbol:n.symbol,decimals:n.decimals})))}async function qo(e,t,n={}){let r=[],o="direct-probe",i=null,s=Mo(e),a=st(e),l=ce(n)&&at(it,e,No)?.value===!1;if(s.length===0&&a.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await Fo(e,t,n);r=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},ce(n)&&Te(it,e,!0,64)}catch{if(ce(n)&&Te(it,e,!1,64),r=s,r.length===0&&a.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await W(r,n.concurrency||4,async u=>{try{let v=await An({chainId:e,token:u.token,owner:t,spender:u.spender},n),x=BigInt(v.allowance);if(x<=0n)return null;let y=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Bo(e,u.token,n,p),I=x>=ko,k=So[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:y.symbol,decimals:y.decimals,spender:u.spender,spenderLabel:k,allowance:x.toString(),allowanceDisplay:Uo(x,y.decimals,I),unlimited:I,lastActivityAt:null,risk:Lo({unlimited:I,spenderLabel:k,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await Ho(e,t,n);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:r.length,collectionsProbed:st(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function Do(e,t,n,r,o){try{let i=xn.encodeFunctionData("isApprovedForAll",[n,r]),s=await K(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!xn.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function st(e){return(Eo[e]||[]).flatMap(n=>Ao.map(r=>({collection:n.address,collectionName:n.name,operator:r.address,operatorLabel:r.label})))}async function Ho(e,t,n){let r=st(e);return r.length===0?[]:(await W(r,n.concurrency||4,async i=>await Do(e,i.collection,t,i.operator,n)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function Cn(e={},t={}){let n=Oo(e.owner||e.address,"owner"),r=new Map(_e.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>r.has(u)):[...r.keys()],i=`${n}:${[...o].sort((u,v)=>u-v).join(",")}:${e.lookbackBlocks??""}`,s=ce(t)&&!e.refresh;if(s){let u=at(kn,i,Co);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let a=await W(o,e.concurrency||3,u=>qo(u,n,{...t,lookbackBlocks:e.lookbackBlocks})),l=a.flatMap(u=>u.approvals),p=a.map(u=>u.scan),c=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:n,scannedRange:c?`last ${c.toBlock-c.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&Te(kn,i,f,$o),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as di}from"ethers";B();ae();B();var Pn="mainnet-beta",Vo="https://api.mainnet-beta.solana.com",ct="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function zo(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||Vo).trim()}function ne(e,t="address"){let n=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return n}function jo(e,t){return t?[...e,{commitment:t}]:e}async function $n(e,t=[],n={}){let r=String(e||"");if(r==="sendTransaction"||r==="sendRawTransaction"||r==="requestAirdrop"||r==="requestAirDrop"||/airdrop/i.test(r)||/^send/i.test(r))throw new Error(`solana-rpc: ${r} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await O(zo(n),{method:"POST",body:{jsonrpc:"2.0",id:n.id||1,method:e,params:t},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function On(e={},t={}){let n=ne(e.address||e.owner,"address"),r=await $n("getBalance",jo([n],e.commitment),t);return{provider:"solana-rpc",cluster:Pn,address:n,lamports:String(r?.value??0),slot:r?.context?.slot??null,raw:r}}function Wo(e={}){let t=e.account?.data?.parsed?.info||{},n=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(n.amount??"0"),decimals:n.decimals??null,uiAmount:n.uiAmount??null,uiAmountString:n.uiAmountString??null,raw:e}}async function lt(e={},t={}){let n=ne(e.owner||e.address,"owner"),r=e.mint?{mint:ne(e.mint,"mint")}:{programId:ne(e.programId||ct,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await $n("getTokenAccountsByOwner",[n,r,o],t),s=Array.isArray(i?.value)?i.value.map(Wo):[];return{provider:"solana-rpc",cluster:Pn,owner:n,filter:r,slot:i?.context?.slot??null,accounts:s,raw:i}}B();var Ko="mainnet",Go="https://mempool.space/api",Yo="https://mempool.space/testnet/api";function Rn(e={}){return String(e.network||process.env.BTC_NETWORK||Ko).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Jo(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):Rn(e)==="testnet"?Yo:Go}function J(e,t="address"){let n=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(n)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(n))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return n}async function Xo(e,t={}){let n=`${Jo(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(n,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),i=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${i.slice(0,160)}`);return i}async function Qo(e,t={}){let n=await Xo(e,t);try{return JSON.parse(n)}catch{return n}}async function Ln(e={},t={}){let n=J(e.address||e.addr,"address"),r=await Qo(`/address/${n}`,t),o=r.chain_stats||{},i=r.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),a=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:Rn(t),address:n,balanceSats:String(s-a),chainStats:o,mempoolStats:i,raw:r}}var Un="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function le({provider:e,defaultUrl:t,hosts:n=[],url:r,strict:o=!1}){let s=(String(r??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Bn(t)};let a;try{a=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=a.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Bn(t),...n]).has(l)){let c=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return a.protocol==="http:"&&!c?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[Un]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${Un}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Bn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function re(e,t,n){let r={...e};if(!n)return r;for(let[o,i]of Object.entries(t||{}))i&&(r[o]=i);return r}function ut(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Zo=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function ei(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",n=!1;try{let r=ut(e);if(r){let o=new URL(r).host,i=new URL(r).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);n=Zo.includes(o)&&(i==="https:"||s)}}catch{n=!1}return re({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},n)}async function Fn(e,t={}){let r=await(t.fetchImpl||fetch)(e,{method:"GET",headers:ei(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await r.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!r.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${r.status} ${String(o).slice(0,160)}`);return i}async function Mn(e={},t={}){let n=J(e.address||e.addr,"address"),r=ut(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${r}/v1/indexer/address/${n}/runes/balance-list?start=0&limit=100`,`${r}/v1/runes/address/${n}`,`${r}/runes/balance/${n}`,`${r}/address/${n}/runes`],i=null;for(let s of o)try{let a=await Fn(s,t),l=ti(a);return{provider:"bitcoin-meta",address:n,ok:!0,count:l.length,balances:l,source:s}}catch(a){i=a}return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function ti(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({rune:r.rune||r.runeid||r.runeId||r.spacedRune||r.name||r.ticker||null,runeId:r.runeid||r.runeId||r.id||null,amount:String(r.amount??r.balance??r.total??r.qty??"0"),symbol:r.symbol||null,divisibility:r.divisibility??r.div??null,raw:r}))}async function Ne(e={},t={}){let n=J(e.address||e.addr,"address"),r=ut(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${r}/v1/indexer/address/${n}/inscription-data?cursor=0&size=${o}`,`${r}/v1/inscriptions/address/${n}?limit=${o}`,`${r}/address/${n}/inscriptions?limit=${o}`],s=null;for(let a of i)try{let l=await Fn(a,t),p=ni(l);return{provider:"bitcoin-meta",address:n,ok:!0,count:p.length,inscriptions:p,source:a}}catch(l){s=l}return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function ni(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({id:r.inscriptionId||r.id||r.inscription_id||null,number:r.inscriptionNumber??r.number??null,sat:r.sat||r.satoshi||null,contentType:r.contentType||r.content_type||null,utxo:r.utxo||r.output||(r.txid!=null?`${r.txid}:${r.vout??r.n}`:null),raw:r}))}B();var ri="https://api.hyperliquid.xyz/info",oi="https://api.hyperliquid-testnet.xyz/info";function ii({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let n=process.env.HL_API_URL.replace(/\/$/,"");return n.endsWith("/info")?n:`${n}/info`}return e||process.env.HL_TESTNET==="1"?oi:ri}async function dt(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let n=ii(t);return O(n,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function qn(e={}){return dt({type:"allMids"},e)}async function Dn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return dt({type:"spotClearinghouseState",user:e},t)}async function Hn(e,t={}){if(!e)throw new Error("hlUserState requires user");return dt({type:"clearinghouseState",user:e},t)}B();var si="https://coins.llama.fi";function ai(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||si).replace(/\/$/,"")}async function pt(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let n=e.map(encodeURIComponent).join(",");return O(`${ai(t)}/prices/current/${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}B();var Vn=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,ci=/[<>&`*_~[\]()|\\]/g,li=/[\u0000-\u001F\u007F]/g;function ft(e,{max:t=32,fallback:n=""}={}){return e==null?n:String(e).normalize("NFKC").replace(Vn,"").replace(li,"").replace(ci,"").replace(/\s+/g," ").trim().slice(0,t).trim()||n}function mt(e){if(e==null)return!1;let t=String(e);return Vn.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var zn=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function ui(e,t={}){let n=Number(e),r=t.baseUrl||zn[n];if(!r)throw new Error(`Blockscout not configured for chainId ${n}`);return r.replace(/\/$/,"")}function jn(e){return!!zn[Number(e)]}async function Wn(e={},t={}){if(!e.address)throw new Error("address required");let n=Number(e.chainId||1),r=`${ui(n,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await O(r,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function Kn(e=[],{fungibleOnly:t=!0}={}){let n=[];for(let r of e){if(!r||typeof r!="object")continue;let o=r.token&&typeof r.token=="object"?r.token:{},i=String(o.type||r.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||r.token_address||r.tokenAddress||null;if(!s||typeof s!="string")continue;let a=String(r.value??r.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(a)||a==="0")continue;let l=o.decimals??r.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=ft(o.symbol||o.name,{max:32,fallback:"TOKEN"}),c=ft(o.name,{max:80,fallback:""})||null;n.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:c,decimals:l,amountRaw:a,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:mt(o.symbol)||mt(o.name)||void 0})}return n}var pi="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",Yn=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function X(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Ce(e,...t){for(let n of t){let r=String(e?.[n]||"").trim();if(r)return r}return null}function Gn(e){if(!e)return null;try{return di(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function bt(e={},t=process.env){let n=e.addresses||{},r=Gn(n.evm||e.evmAddress||Ce(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=n.solana||e.solanaAddress||Ce(t,"ORACLE_SOLANA_ADDRESS"),i=n.bitcoin||e.bitcoinAddress||Ce(t,"ORACLE_BITCOIN_ADDRESS"),s=Gn(n.hyperliquid||e.hyperliquidAddress||Ce(t,"ORACLE_HYPERLIQUID_ADDRESS")||r);return{evm:r,solana:o?ne(o,"portfolio Solana address"):null,bitcoin:i?J(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function we(e,t){let n=BigInt(String(e||"0")),r=Number(t);if(!Number.isInteger(r)||r<0||r>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(r===0)return n.toString();let o=n<0n,i=o?-n:n,s=10n**BigInt(r),a=i/s,l=String(i%s).padStart(r,"0").replace(/0+$/,"");return`${o?"-":""}${a}${l?`.${l}`:""}`}function ue(e){let t=Number(e);return Number.isFinite(t)?t:null}function Pe(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function Q(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Jn(e,t){let n=Yn[t],r=n?e?.coins?.[n]:null,o=Number(r?.price);return{key:n||null,priceUsd:Number.isFinite(o)?o:null,timestamp:r?.timestamp??null,confidence:r?.confidence??null}}function fi(e){let t=new Map;for(let n of e)if(n?.ok)for(let r of n.data?.accounts||[]){let o=BigInt(String(r.amount||"0"));if(o===0n||!r.mint)continue;let i=`${r.mint}:${r.decimals??"unknown"}`,s=t.get(i)||{mint:r.mint,amountRaw:0n,decimals:r.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,n.program&&s.programs.add(n.program),t.set(i,s)}return[...t.values()].map(n=>{let r=n.amountRaw.toString(),o=n.decimals==null?null:we(r,n.decimals),i=n.decimals===0&&n.amountRaw===1n;return{mint:n.mint,amountRaw:r,amount:o,decimals:n.decimals,tokenPrograms:[...n.programs],accountCount:n.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function ht(e,t){return{family:e,status:"unsupported",reason:t}}function yt(e,t){if(!e||e.status!=="ok")return e;let n=Jn(t,e.symbol),r=ue(e.amount),o=r!=null&&n.priceUsd!=null?Pe(r*n.priceUsd):null;return{...e,price:n,usdValue:o}}async function Xn(e={},t={}){let n=new Date().toISOString(),r=bt(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,a=new Map(_e.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...a.keys()],p=[...new Set(Object.values(Yn))],c=o?P(()=>pt(p,X(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=W(l,e.concurrency||5,async h=>{let b=a.get(h);if(!b)return{family:"evm",chainId:h,name:null,address:r.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!r.evm)return{family:"evm",chainId:h,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let E={...X(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},T=await P(()=>nt(h,r.evm,E));if(!T.ok)return{family:"evm",chainId:h,name:b.name,address:r.evm,status:"unavailable",latencyMs:T.ms,error:T.error};let $=b.nativeCurrency?.decimals??18,q=b.nativeCurrency?.symbol||"NATIVE",w=T.data.balanceWei,_={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&jn(h)){let ee=await P(()=>Wn({chainId:h,address:r.evm},{...X(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));ee.ok?_={status:"ok",assets:Kn(ee.data,{fungibleOnly:!0}).map(pe=>{let fe=we(pe.amountRaw,pe.decimals);return{...pe,amount:fe,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:ee.ms}:_={status:"unavailable",assets:[],reason:ee.error||"blockscout token-balances failed",source:"blockscout",latencyMs:ee.ms}}return{family:"evm",chainId:h,name:b.name,address:r.evm,status:"ok",latencyMs:T.ms,native:{status:"ok",symbol:q,amountRaw:w,decimals:$,amount:we(w,$)},fungibleTokens:_,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:_.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!r.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=X(t,"solana"),b=await P(()=>On({address:r.solana},h)),E=i||s?await Promise.all([P(()=>lt({owner:r.solana,programId:ct},h)).then(_=>({..._,program:"spl-token"})),P(()=>lt({owner:r.solana,programId:pi},h)).then(_=>({..._,program:"token-2022"}))]):[],T=fi(E),$=T.filter(_=>_.classification==="collectible-candidate"),q=T.filter(_=>_.classification!=="collectible-candidate"),w=E.filter(_=>!_.ok).map(_=>_.error);return{family:"solana",name:"Solana Mainnet",address:r.solana,status:b.ok||E.some(_=>_.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:we(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:i?w.length===E.length?"unavailable":w.length?"partial":"ok":"not-requested",assets:i?q:[],errors:w,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?w.length===E.length?"unavailable":"partial":"not-requested",assets:s?$:[],errors:w,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!r.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=X(t,"bitcoin"),b=X(t,"bitcoinMeta"),[E,T,$]=await Promise.all([P(()=>Ln({address:r.bitcoin},h)),i?P(()=>Mn({address:r.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?P(()=>Ne({address:r.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),q=T.ok?T.data:null,w=$.ok?$.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:r.bitcoin,status:E.ok||q?.ok||w?.ok?"ok":"unavailable",native:E.ok?{status:"ok",symbol:"BTC",amountRaw:E.data.balanceSats,decimals:8,amount:we(E.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:E.error},fungibleTokens:{status:i?q?.ok?"ok":"unavailable":"not-requested",assets:q?.balances||[],error:q?.ok?null:q?.error||T.error,verification:"indexer-reported"},collectibles:{status:s?w?.ok?"ok":"unavailable":"not-requested",assets:w?.inscriptions||[],error:w?.ok?null:w?.error||$.error,unknownNotEmpty:!!w?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),v=(async()=>{if(!r.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=X(t,"hyperliquid"),[b,E,T]=await Promise.all([P(()=>Dn(r.hyperliquid,h)),P(()=>Hn(r.hyperliquid,h)),P(()=>qn(h))]),$=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(w=>Q(w.total)||Q(w.hold)).map(w=>({coin:w.coin||null,total:String(w.total??"0"),hold:String(w.hold??"0"),priceUsd:null,usdValue:null})),q=(E.ok&&Array.isArray(E.data?.assetPositions)?E.data.assetPositions:[]).map(w=>w.position||w).filter(w=>Q(w.szi)).map(w=>({coin:w.coin||null,size:String(w.szi??"0"),entryPrice:w.entryPx??null,positionValueUsd:w.positionValue??null,unrealizedPnlUsd:w.unrealizedPnl??null,liquidationPrice:w.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:r.hyperliquid,status:b.ok||E.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:$,error:b.ok?null:b.error},perps:{status:E.ok?"ok":"unavailable",accountValueUsd:E.data?.marginSummary?.accountValue??null,withdrawableUsd:E.data?.withdrawable??null,positions:q,error:E.ok?null:E.error},mids:T.ok?T.data:{},source:"hyperliquid-info"}})(),[x,y,I,k,M]=await Promise.all([d,f,u,v,c]),m=M.ok?M.data:null,g=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),A=[];for(let h of x){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let b=g[h.chainId];if(b)for(let E of h.fungibleTokens.assets||[])E.address&&A.push(`${b}:${String(E.address).toLowerCase()}`)}let S=null;if(o&&A.length){let h=[...new Set(A)],b=await P(()=>pt(h,X(t,"prices")));b.ok&&(S=b.data)}let N=x.map(h=>{let b=h.native?{...h,native:yt(h.native,m)}:h;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let E=g[b.chainId],T=b.fungibleTokens.assets.map($=>{let q=String($.symbol||"").toUpperCase(),w=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(q)&&(w=1),w==null&&E&&$.address&&S?.coins){let Lt=`${E}:${String($.address).toLowerCase()}`,pe=S.coins[Lt],fe=Number(pe?.price);Number.isFinite(fe)&&fe>0&&(w=fe)}let _=ue($.amount),ee=_!=null&&w!=null?Pe(_*w):null;return{...$,priceUsd:w,usdValue:ee}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:T}}}return b});y.native&&(y.native=yt(y.native,m)),I.native&&(I.native=yt(I.native,m));let z=0,C=0,L=0;for(let h of[...N,y,I]){h.native?.status==="ok"&&Q(h.native.amount)&&(h.native.usdValue!=null?(z+=h.native.usdValue,C+=1):L+=1);for(let b of h.fungibleTokens?.assets||[])!Q(b.amount)&&!Q(b.amountRaw)||(b.usdValue!=null?(z+=b.usdValue,C+=1):L+=1)}let Z=Jn(m,"HYPE");for(let h of k.spot?.balances||[]){let b=String(h.coin||"").toUpperCase(),E=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?Z.priceUsd||ue(k.mids?.HYPE):ue(k.mids?.[h.coin]),T=ue(h.total);h.priceUsd=E,h.usdValue=T!=null&&E!=null?Pe(T*E):null,Q(h.total)&&(h.usdValue!=null?(z+=h.usdValue,C+=1):L+=1)}let U=ue(k.perps?.accountValueUsd);U!=null&&U!==0&&(z+=U,C+=1);let H=[...y.fungibleTokens?.assets||[],...y.collectibles?.assets||[]].filter(h=>Q(h.amount)).length,Be=(I.fungibleTokens?.assets||[]).length+(I.collectibles?.assets||[]).length;L+=H+Be;let Fe=[...N,y,I,k],oe=h=>Fe.filter(b=>b.status===h).length,ie=[],Me=N.filter(h=>h.fungibleTokens?.status==="unavailable"),Rt=N.filter(h=>h.fungibleTokens?.status==="ok");Me.length&&!Rt.length?ie.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):Me.length&&ie.push(`EVM token discovery partial: Blockscout covered ${Rt.length} chain(s); ${Me.length} chain(s) still native-only.`),(y.fungibleTokens?.assets?.length||y.collectibles?.assets?.length)&&ie.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),I.collectibles?.unknownNotEmpty&&ie.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),M.ok||ie.push(`Price provider unavailable: ${M.error}`);let qe=[ht("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),ht("sui","Sui balance adapter is not installed"),ht("aptos","Aptos balance adapter is not installed")],Sr=Fe.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:n,addresses:r,coverage:{requestedSurfaces:Fe.length,ok:oe("ok"),unavailable:oe("unavailable"),notConfigured:oe("not-configured"),unsupported:oe("unsupported")+qe.length,evmChainsRequested:l.length,evmChainsOk:N.filter(h=>h.status==="ok").length},valuation:{knownUsd:Pe(z),label:"known priced value, not a complete portfolio total",pricedItems:C,unpricedNonzeroItems:L,complete:L===0&&!Sr&&oe("unavailable")===0&&oe("not-configured")===0&&qe.length===0,priceSource:o?"DefiLlama":null,priceStatus:M.ok?"ok":"unavailable",priceQueriedAt:n},chains:[...N,y,I,k],unsupportedFamilies:qe,warnings:ie}}B();B();import{readFileSync as hi,existsSync as yi}from"node:fs";import{getAddress as bi,Interface as $e,TypedDataEncoder as dc,parseUnits as pc}from"ethers";var mi=300*1e3,ic=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var gi="https://api.opensea.io/api/v2",wi="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",bc=new $e([`function ${wi}`]),gc=new $e(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Si=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),vi=new Set(Si),Ai=new Set(["solana","flow"]);function Ei(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!yi(e))return"";try{for(let t of hi(e,"utf8").split(`
-`)){let n=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(n)return n[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function wt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||Ei()}function Zn(e={}){return le({provider:"opensea",defaultUrl:gi,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function er(e={}){return Zn(e).baseUrl}function tr(e={}){return re({accept:"application/json"},{"x-api-key":wt(e)},Zn(e).trusted)}function xi(e){let t=String(e||"ethereum").trim().toLowerCase();if(!vi.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function Qn(e,t="address"){try{return bi(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function nr(e,t=null){let n=String(e||"").trim();if(!n)throw new Error("opensea: account address required");if(t&&!Ai.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(n))return Qn(n,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(n))throw new Error("opensea: invalid account address");return n}function Ii(e={},t,n){return{chain:t,owner:n,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function St(e={},t={}){if(!wt(t))throw new Error("OPENSEA_API_KEY required");let n=xi(e.chain),r=nr(e.address||e.owner,n),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],a=e.next?String(e.next):null,l=0;do{let p=new URL(`${er(t)}/chain/${encodeURIComponent(n)}/account/${encodeURIComponent(r)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),a&&p.searchParams.set("next",a);let c=await O(p.toString(),{headers:tr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(c?.nfts)?c.nfts:[])s.push(Ii(d,n,r));a=c?.next?String(c.next):null,l+=1}while(a&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:n,owner:r,count:s.length,pages:l,complete:!a,next:a,nfts:s,exec:!1,readOnly:!0}}async function rr(e={},t={}){if(!wt(t))throw new Error("OPENSEA_API_KEY required");let n=nr(e.address||e.owner),r=await O(`${er(t)}/account/${encodeURIComponent(n)}/pnl`,{headers:tr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:n,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:r?.realized_pnl_usd??null,unrealizedPnlUsd:r?.unrealized_pnl_usd??null,totalPnlUsd:r?.total_pnl_usd??null,netInvestedUsd:r?.net_invested_usd??null,currentValueUsd:r?.current_value_usd??null,returnPercentage:r?.return_percentage??null,itemLevelPnlAvailable:!1,raw:r,exec:!1,readOnly:!0}}var wc=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var Sc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var vc=new $e(["function setApprovalForAll(address operator,bool approved)"]),Ac=new $e(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var _i="https://api.satflow.com/v1";function or(e={}){return le({provider:"satflow",defaultUrl:_i,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function Ti(e={}){return or(e).baseUrl}function ir(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function Ni(e={}){return re({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":ir(e)},or(e).trusted)}async function Ci(e,{method:t="GET",body:n,opts:r={}}={}){if(!ir(r))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${Ti(r)}${e.startsWith("/")?e:`/${e}`}`,a=await(r.fetchImpl||fetch)(i,{method:t,headers:Ni(r),body:n!=null?JSON.stringify(n):void 0,signal:AbortSignal.timeout(r.timeoutMs??2e4)}),l=await a.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!a.ok)throw new Error(`satflow ${t} ${e}: HTTP ${a.status} ${String(l).slice(0,200)}`);return p}async function sr(e={},t={}){let n=J(e.address||e.addr,"address"),r=new URLSearchParams({address:n});e.type&&r.set("type",e.type),e.limit!=null&&r.set("limit",String(e.limit)),e.offset!=null&&r.set("offset",String(e.offset));let o=await Ci(`/address/wallet-contents?${r}`,{opts:t});return{provider:"satflow",address:n,contents:o}}B();B();var Bc=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Pi=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],$i=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Oi=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Ri(e={}){let t=[],n=String(e.name||""),r=String(e.description||""),o=`${n} ${r}`;$i.test(n)&&t.push("url-in-name");let i=Pi.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),Oi.test(n)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(n)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,a=!Array.isArray(e.traits)||e.traits.length===0;s&&a&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function ar(e={}){let t=Ri(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Li=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Ui=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function vt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function Se(e,t){let n=await P(t);return n.ok?{ok:!0,data:n.data}:{ok:!1,error:`${e}: ${n.error}`.slice(0,300)}}function Bi(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function Fi(e={},t){let n=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:n==null?null:String(n),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(n?`Inscription ${n}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function Mi(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function cr(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function qi(e){let t=new Map;if(Array.isArray(e)){for(let n of e)n?.assetKey&&t.set(String(n.assetKey).toLowerCase(),n);return t}if(e&&typeof e=="object")for(let[n,r]of Object.entries(e))t.set(n.toLowerCase(),r);return t}function Di(e,t){let n=cr(e),r=t.get(n),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!r)return{...e,assetKey:n};let i=Number(r.costUsd),s=Number(r.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:n,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let a=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-a)*100)/100,currentValueUsd:o,totalCostUsd:a,realizedUsd:null}}:{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Hi(e){let t=new Map;for(let n of e){let r=cr(n);t.has(r)||t.set(r,n)}return[...t.values()]}function Vi(e,t){let n=e.filter(i=>i.itemPnl?.status==="estimated"),r=e.length-n.length,o=Math.round(n.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:r===0&&e.length?"estimated-complete-for-held-items":n.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:n.length,unknownItems:r,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function lr(e={},t={}){let n=new Date().toISOString(),r=bt(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=Li.filter(m=>!o||o.has(m.chain)),s=[],a=[],l=vt(t,"opensea"),p=r.evm?i.filter(m=>m.family!=="solana"):[],c=await W(p,4,async m=>({row:m,result:await Se(`opensea-${m.chain}`,()=>St({chain:m.chain,address:r.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:g}of c)if(g.ok){let A=g.data.nfts.map(S=>({...S,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));a.push(...A),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:g.data.complete?"ok":"partial",count:A.length,complete:g.data.complete,next:g.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:g.error,source:"opensea"});if(!r.evm)for(let m of i.filter(g=>g.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(r.solana&&(!o||o.has("solana"))){let m=await Se("opensea-solana",()=>St({chain:"solana",address:r.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let g=m.data.nfts.map(A=>({...A,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));a.push(...g),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:g.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(r.bitcoin&&(!o||o.has("bitcoin"))){let m=await Se("satflow-wallet-contents",()=>sr({address:r.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},vt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let g=Bi(m.data.contents).map(S=>Fi(S,r.bitcoin));a.push(...g);let A=g.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:A?"ok":"partial",count:g.length,complete:A,source:"satflow"})}else{let g=await Se("bitcoin-meta-inscriptions",()=>Ne({address:r.bitcoin},vt(t,"bitcoinMeta")),t.timeoutMs??35e3),A=g.ok&&g.data?.ok&&Array.isArray(g.data.inscriptions)?g.data.inscriptions:[];a.push(...A.map(S=>Mi(S,r.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:A.length?"partial":"unavailable",count:A.length,complete:!1,source:A.length?"bitcoin-meta":"satflow",error:A.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([r.evm,r.solana].filter(Boolean))]){let g=await Se(`opensea-pnl-${m}`,()=>rr({address:m},l),t.timeoutMs??35e3);d.push(g.ok?{status:"ok",...g.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:g.error})}let f=qi(e.costBasis),u=Hi(a).map(m=>Di(m,f)).map(m=>ar(m)),v=u.filter(m=>!m.spam),x=u.filter(m=>m.spam),y=v.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),I=Math.round(y.reduce((m,g)=>m+Number(g.estimatedValueUsd),0)*100)/100,k=v.length-y.length,M=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:n,addresses:r,coverage:s,unsupported:Ui,inventory:{count:u.length,visibleCount:v.length,flaggedCount:x.length,items:u,visibleItems:v,flaggedItems:x},valuation:{estimatedCurrentValueUsd:I,valuedItems:y.length,unvaluedItems:k,complete:k===0&&M.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Vi(v,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as At}from"node:os";import{join as Et}from"node:path";var ur=process.env.ORACLE_PUBLIC_DESKTOP==="1",zi=ur?process.env.ORACLE_CONFIG_DIR||Et(At(),".config","oracle"):Et(At(),".config","oracle"),nl=ur?zi:Et(At(),".config","mad-desk");function xt(e,t,n=""){let r=process.env[e];if(r!=null&&String(r).trim()!=="")return r;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:n}var Yi=JSON.parse(Ct(new URL("../../package.json",import.meta.url),"utf8")),de="public",Ji="127.0.0.1",Xi=8799,Re=Yi.version,Qi=new Set(["127.0.0.1","localhost","::1"]),Nt=Ae(Wi(Gi(import.meta.url)),"../.."),It=Ae(Nt,"public","oracle-console"),dr=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),Zi=1e6,R=class extends Error{constructor(t,n,r){super(r||n),this.status=t,this.code=n}};function G(e,t,n){let r=t,o;try{D(n),o=Jt(n)}catch{r=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(r,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true"}),e.end(o)}function es(e){return new Promise((t,n)=>{let r=[],o=0;e.on("data",i=>{if(o+=i.length,o>Zi){n(new R(413,"payload-too-large","request body too large")),e.destroy();return}r.push(i)}),e.on("end",()=>{let i=Buffer.concat(r).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{n(new R(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>n(new R(400,"bad-request","request stream error")))})}function F(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new R(400,t,`${t} must be a JSON object`);return e}function ts(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function ns(e){let t=ts(e);if(!Qi.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function rs(){return{status:200,body:{ok:!0,plane:de,version:Re}}}function Le(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function os(e){let t=F(e,"body"),n=t.input!==void 0?F(t.input,"input"):t,r=Le(F(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:Zt(o,r)}}function is(e){let t=F(e,"body"),n=t.request!==void 0?F(t.request,"request"):t.input!==void 0?F(t.input,"input"):t,r=Le(F(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:en(o,r)}}function ss(e){let t=F(e,"body"),n=Le(F(t.opts,"opts")),r=rn(t.store??[],n);return{status:200,body:{ok:!0,count:r.length,grants:r}}}function as(e){let t=F(e,"body"),n=Le(F(t.opts,"opts")),r=on(t.store??[],t.id,n);return r==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:r}}function cs(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,n=!0,r=[];return t&&r.push("privy"),n&&r.push("injected"),{status:200,body:{ok:!0,plane:de,version:Re,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:n,modes:r},privy:{appId:e||null}}}}var kt=400;function ls(e=[]){if(e.length<=kt)return{rows:e,truncated:!1,omitted:0};let t=r=>r?.kind==="native"?0:r?.priced?1:2;return{rows:[...e].sort((r,o)=>t(r)-t(o)).slice(0,kt),truncated:!0,omitted:e.length-kt}}var _t=300;function us(e=[]){if(e.length<=_t)return{items:e,truncated:!1,omitted:0};let t=r=>r?.spam===!0||r?.nsfw===!0?2:Number.isFinite(Number(r?.floorUsd))&&Number(r?.floorUsd)>0?0:1;return{items:[...e].sort((r,o)=>t(r)-t(o)).slice(0,_t),truncated:!0,omitted:e.length-_t}}var Oe=12;async function ds(e){let t=F(e,"body"),n=typeof t.owner=="string"?t.owner:null;if(!n)throw new R(400,"owner-required","owner must be an EVM address");let r=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(r&&r.length>Oe)throw new R(400,"too-many-chains",`at most ${Oe} chainIds per request`);let i=await Cn({owner:n,chainIds:r},br());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var ps=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,fs=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function ms(e){if(typeof e!="string")return null;let t=e.trim();return ps.test(t)?t:null}function hs(e){if(typeof e!="string")return null;let t=e.trim();return fs.test(t)?t:null}function yr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function ys(e){let t=F(e,"body"),n=yr(t.owner),r=ms(t.solana),o=hs(t.bitcoin);if(!n&&!r&&!o)throw new R(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>Oe)throw new R(400,"too-many-chains",`at most ${Oe} chainIds per request`);let s=await Xn({addresses:{evm:n,solana:r,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},{env:{}}),a=[],l=[],p=0,c=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let v=u.fungibleTokens?.status??"unavailable";v==="ok"?p+=1:v==="unavailable"&&(c+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:v,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let x=u.native;u.status==="ok"&&x&&x.status==="ok"&&x.amountRaw&&x.amountRaw!=="0"&&x.amountRaw!=="0x0"&&a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:x.symbol,decimals:x.decimals,amount:String(x.amountRaw),amountRaw:String(x.amountRaw),amountFormatted:x.amount,kind:"native",valueUsd:x.usdValue!=null?String(x.usdValue):null,priced:x.usdValue!=null});for(let y of u.fungibleTokens?.assets||[]){let I=y.amountRaw!=null?String(y.amountRaw):null;if(!I||I==="0")continue;let k=typeof y.decimals=="number"&&Number.isInteger(y.decimals)?y.decimals:null;a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:y.symbol||y.coin||"TOKEN",decimals:k,amount:I,amountRaw:I,amountFormatted:y.amount!=null?String(y.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:y.address||y.mint||null,valueUsd:y.usdValue!=null?String(y.usdValue):null,priced:y.usdValue!=null,source:y.source||u.fungibleTokens?.source||null})}}let d=c>0||!!(s.valuation&&s.valuation.complete===!1),f=ls(a);return{status:200,body:{ok:!0,owner:s.addresses?.evm??n,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&c===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${c} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function br(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function bs(e){let t=F(e,"body"),n=yr(t.owner);if(!n)throw new R(400,"owner-required","owner must be an EVM address");let r=await lr({addresses:{evm:n}},br()),o=r?.inventory&&typeof r.inventory=="object"?r.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(r?.items)?r.items:[]).map(c=>{if(!c||typeof c!="object")return null;let d=typeof c.collection=="string"?c.collection:c.collection&&typeof c.collection=="object"&&typeof c.collection.slug=="string"?c.collection.slug:typeof c.contract=="string"?c.contract:null;return{chain:c.chain??null,chainId:c.chainId??null,family:c.family??null,owner:c.owner??n,contract:c.contract??null,tokenId:c.tokenId==null?null:String(c.tokenId),tokenStandard:c.tokenStandard??null,collection:d,name:typeof c.name=="string"?c.name.slice(0,160):null,imageUrl:c.imageUrl??c.image??null,estimatedValueUsd:c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,floorUsd:c.floorUsd!=null&&Number.isFinite(Number(c.floorUsd))?Number(c.floorUsd):c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,spam:c.spam===!0,nsfw:c.nsfw===!0,source:typeof c.source=="string"?c.source.slice(0,64):null}}).filter(Boolean),a=Array.isArray(r?.coverage)?r.coverage:[],l=us(s),p=r?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:n,queriedAt:r.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:a.map(c=>({family:c?.family??null,chain:c?.chain??null,chainId:c?.chainId??null,status:c?.status??null,count:c?.count??null,complete:c?.complete===!0,source:c?.source??null,error:null,reason:typeof c?.reason=="string"?c.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:a.filter(c=>c?.status==="partial").map(c=>c.chain).filter(Boolean),unavailable:a.filter(c=>c?.status==="unavailable").map(c=>c.chain).filter(Boolean),unconfigured:a.filter(c=>c?.status==="not-configured").map(c=>c.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:r?.valuation?{estimatedCurrentValueUsd:r.valuation.estimatedCurrentValueUsd??null,valuedItems:r.valuation.valuedItems??null,unvaluedItems:r.valuation.unvaluedItems??null,complete:r.valuation.complete===!0}:null}}}var gs=6e4,ws=120,gr=10,Ss=300,vs=gr,pr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),As=4096,ve=new Map;function Es(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let n=t.split(",")[0].trim();if(n)return n.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function xs(e,t){let n=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),r=n==="127.0.0.1"||n==="::1"||n.startsWith("127."),o=Es(e),i=r&&o!==n,s=pr.has(t)?r&&!i?vs:gr:r&&!i?Ss:ws,a=Date.now(),l=`${o}:${pr.has(t)?"amp":"std"}`,p=ve.get(l);if(!p||a>=p.resetAt){for(ve.set(l,{count:1,resetAt:a+gs});ve.size>As;){let c=ve.keys().next();if(c.done)break;ve.delete(c.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-a)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var fr=Object.freeze({"GET /public/health":rs,"GET /public/config":cs,"GET /eval":mr,"GET /public/eval":mr,"POST /public/connect/request":os,"POST /public/connect/assemble":is,"POST /public/grants/active":ss,"POST /public/grants/get":as,"POST /public/approvals":ds,"POST /public/portfolio":ys,"POST /public/nfts":bs});function mr(){let t=[Tt(Ae(Nt,"public","eval-report.json")),Tt(Ae(Nt,"docs","eval-report.json"))].find(r=>hr(r));if(!t)throw new R(404,"not-found","no committed eval report in this build");let n;try{n=JSON.parse(Ct(t,"utf8"))}catch{throw new R(500,"eval-report-invalid","committed eval report is not valid JSON")}return{status:200,body:{...n,servedAt:new Date().toISOString(),note:"Static release artifact. Reproduce: npx @oracle-agent/oracle eval guards|adversarial|fidelity --json"}}}function Pt(e={}){return{"cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true",...e}}function Is(e,t,n,r){e.writeHead(t,Pt({"content-type":n})),e.end(r)}function ks(e,t,n){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let r=n===""?"/":n,o=dr[r]||dr[r.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Tt(Ae(It,o.file));if(!i.startsWith(It+Ki)&&i!==It)return G(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!hr(i))return G(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=Ct(i);return e.method==="HEAD"?(t.writeHead(200,Pt({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(Is(t,200,o.type,s),!0)}async function _s(e,t){let r=new URL(e.url,"http://localhost").pathname||"/";r.length>1&&r.endsWith("/")&&r!=="/oracle-console/"&&(r=r.replace(/\/+$/,"")),r===""&&(r="/");let o=r.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=fr[i];try{if(!s){if(ks(e,t,r))return;throw Object.keys(fr).some(d=>d.endsWith(` ${o}`))?new R(405,"method-not-allowed",`unsupported method for ${o}`):new R(404,"not-found",`unknown route ${o}`)}let a=xs(e,o);if(!a.allowed){t.writeHead(429,Pt({"content-type":"application/json","retry-after":String(a.retryAfterSec),"x-ratelimit-limit":String(a.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${a.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await es(e),p=await s(l);G(t,p.status,p.body)}catch(a){if(a instanceof V){G(t,500,{error:"secret-leak-blocked"});return}if(a instanceof j){G(t,400,{error:"invalid-grant",errors:a.errors.map(l=>({field:l.field,message:l.message}))});return}if(a instanceof R){G(t,a.status,{error:a.code,message:a.message});return}if(a instanceof TypeError){G(t,400,{error:"bad-request",message:a.message});return}G(t,500,{error:"internal-error"})}}function Ts(){return ji((e,t)=>{_s(e,t).catch(()=>{try{G(t,500,{error:"internal-error"})}catch{}})})}function $t({host:e,port:t}={}){let n=ns(e??xt("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",Ji)),r=t??xt("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(Xi)),o=Number(r);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(r)}`);return{host:n,port:o}}function wr(e={}){let{host:t,port:n}=$t(e),r=Ts();return r.listen(n,t),r}var Ot=$t(),Ue=wr(Ot);Ue.on("listening",()=>{let e=Ue.address(),t=typeof e=="object"&&e?e.address:Ot.host,n=typeof e=="object"&&e?e.port:Ot.port;console.log(`oracle-public-server listening on http://${t}:${n} (plane=${de}, version=${Re}, unsigned-only)`)});Ue.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{Ue.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});
+${JSON.stringify(n??[])}`}async function mo(e,t,n){return O(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function K(e,t,n=[],r={}){let o=String(t||""),i=lo(o),s=ao(e,r);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&r.cacheChainId!==!1){let c=An.get(s);if(c!=null)return c}let l=r.dedupe!==!1&&!r.signal?fo(s,o,n):null;if(l&&ge.has(l))return ge.get(l);let p=(async()=>{let c=await mo(s,{jsonrpc:"2.0",id:1,method:t,params:n},r),d=po(c);return i==="eth_chainid"&&typeof d=="string"&&An.set(s,d),d})();return l&&(ge.set(l,p),p.finally(()=>{ge.get(l)===p&&ge.delete(l)}).catch(()=>{})),p}async function tt(e,t={}){let n=await K(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function nt(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await K(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function En(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=et(e.token||e.tokenAddress,"token"),o=et(e.owner,"owner"),i=et(e.spender,"spender"),s=vn.encodeFunctionData("allowance",[o,i]),a=await K(n,"eth_call",[{to:r,data:s},e.blockTag||"latest"],t),l=vn.decodeFunctionResult("allowance",a),p=BigInt(l[0]);return{chainId:n,token:r,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var vn,so,co,ge,An,ae=Ee(()=>{B();Sn();vn=new oo(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);so={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};co=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;ge=new Map,An=new Map});import{createServer as ji}from"node:http";import{readFileSync as Ct,existsSync as yr}from"node:fs";import{dirname as Wi,join as Ae,normalize as Tt,sep as Ki}from"node:path";import{fileURLToPath as Gi}from"node:url";import{createHash as vr}from"node:crypto";var me=1,Bt=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Ar=Object.freeze(["read","simulate"]),Ft=1e4,Mt=1440*60,qt=128,Dt=256,Ht=64,Vt=256,zt=/^0x[0-9a-fA-F]{40}$/,Er=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,xr=/^[a-z][a-z0-9_-]*:\*$/,Ir=/^[A-Za-z0-9._:-]+$/,kr=/^[A-Za-z0-9._:-]+$/,jt=/^(0|[1-9][0-9]*)$/,j=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function Wt(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function _r(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return jt.test(t)?t:null}return null}function Y(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!jt.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function De(e){let t=String(e).split(":")[0];return Ar.includes(t)}function He(e,t={}){let n=[],r=(d,f)=>n.push({field:d,message:f});if(!Wt(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let d of Object.keys(e))Bt.includes(d)||r(d,"unknown field is not allowed");for(let d of Bt)(!(d in e)||e[d]==null)&&r(d,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let o={},i=Y(e.chainId);i==null||i<=0?r("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!zt.test(f.trim())?r(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>Ht)r("actions",`too many actions (max ${Ht})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){r("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&xr.test(u)?d.push(u):r("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!Er.test(u)){r("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>Vt)r("targets",`too many targets (max ${Vt})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!zt.test(u)){r("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!De(u));(f.length>0||o.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=_r(e[d]);f==null?r(d,"must be a non-negative integer wei amount"):o[d]=f}let s=Y(e.maxSlippageBps);s==null||s>Ft?r("maxSlippageBps",`must be an integer between 0 and ${Ft}`):o.maxSlippageBps=s;let a=864e10,l=Y(e.expiresAt);if(l==null||l<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(l>a)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=Y(t.now);d==null?r("expiresAt","opts.now must be a unix-seconds integer"):l<=d?r("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>Mt&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${Mt} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():Y(e.nonce)!=null?String(Y(e.nonce)):null;!p||p.length>qt||!Ir.test(p)?r("nonce",`must be a non-empty string (max ${qt} chars, [A-Za-z0-9._:-])`):o.nonce=p;let c=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!c||c.length>Dt||!kr.test(c)?r("revocationKey",`must be a non-empty public identifier (max ${Dt} chars, [A-Za-z0-9._:-])`):o.revocationKey=c,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:o}}function xe(e,t={}){let{ok:n,errors:r,grant:o}=He(e,t);if(!n)throw new j(r);return o}function Ve(e,t={}){let n=xe(e,t),o=Object.keys(n).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(n[i])}`);return`{"version":${me},${o.join(",")}}`}function Ie(e,t={}){return vr("sha256").update(Ve(e,t),"utf8").digest("hex")}function Kt(e,t){let n=Y(t),r=Y(Wt(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var Gt="oracle-connect-request",Tr="oracle-unsigned-grant",Nr="oracle-grant-canonical-json-utf8-v1",V=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},Cr=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Pr=Object.freeze(["privkey","wif","xprv","seed"]);function ze(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return Cr.test(t)||Pr.includes(n)}var Yt=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Jt=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function $r(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>Jt.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function Xt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new V("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let n=$r(t);for(let{rule:o,re:i}of Yt)if(i.test(n))throw new V("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new V("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&ze(o))throw new V(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function D(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let o=Jt.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Yt)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new V(t,i);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&ze(o))throw new V(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");D(o,`${t}[key]`,n),D(i,`${t}[${String(o)}]`,n)}return e}if(e instanceof Set){let o=0;for(let i of e.values())D(i,`${t}[${o++}]`,n);return e}if(Array.isArray(e))return e.forEach((o,i)=>D(o,`${t}[${i}]`,n)),e;for(let[o,i]of Object.entries(e)){if(ze(o))throw new V(`${t}.${o}`,"forbidden-key-name");D(i,`${t}.${o}`,n,o)}return e}function he(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))he(t)}return e}function Qt(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new j([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function Zt(e){if(e?.now==null)throw new j([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return Qt(e.now,"opts.now")}function Or(e){return new Date(e*1e3).toISOString()}function Rr(e,t){let n=e.actions.every(r=>De(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${me}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${Or(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
+`)}function en(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new j([{field:"request",message:"request must be a plain object"}]);let n=Zt(t),{ttlSeconds:r,...o}=e,i={...o};if(r!=null){if(i.expiresAt!=null)throw new j([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=Qt(r,"ttlSeconds");i.expiresAt=n+l}let s=xe(i,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),a=he({kind:Gt,version:me,grant:s});return D(a)}function tn(e={},t={}){let n=Zt(t),r=e&&e.kind===Gt?e.grant:e,o=xe(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),i=Ve(o),s=Ie(o),a=Buffer.from(i,"utf8"),l=he({kind:Tr,unsigned:!0,payload:he({version:me,grantId:s,grant:o,canonical:i}),signing:he({scheme:Nr,message:i,bytesHex:`0x${a.toString("hex")}`,byteLength:a.length,sha256:s}),render:Rr(o,s)});return D(l)}var se=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function nn(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function Lr(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function je(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function Ur(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(o=>e.has(o)):Array.isArray(e)?r.some(o=>e.includes(o)):typeof e.has=="function"?r.some(o=>e.has(o)):!1}function rn(e,{now:t,revoked:n}={}){let r=je(t),{grant:o,revoked:i}=Lr(e),{ok:s,grant:a}=He(o);if(!s)return{status:se.INVALID,id:null,grant:null};let l=Ie(a);return i||Ur(n,l,a)?{status:se.REVOKED,id:l,grant:a}:Kt(a,r)?{status:se.EXPIRED,id:l,grant:a}:{status:se.ACTIVE,id:l,grant:a}}function on(e,{now:t,revoked:n,agentAddress:r,accountAddress:o,chainId:i}={}){let s=je(t),a=r!=null?String(r).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,c=[];for(let d of nn(e)){let{status:f,id:u,grant:v}=rn(d,{now:s,revoked:n});f===se.ACTIVE&&(a!=null&&v.agentAddress!==a||l!=null&&v.accountAddress!==l||p!=null&&v.chainId!==p||c.push(Object.freeze({id:u,grant:v})))}return c.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),D(Object.freeze(c))}function sn(e,t,{now:n,revoked:r}={}){let o=je(n),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of nn(e)){let a=rn(s,{now:o,revoked:r});if(a.status!==se.INVALID&&a.id===i)return D(Object.freeze({id:a.id,status:a.status,grant:a.grant}))}return null}import{Interface as Nn,getAddress as yo,id as Cn}from"ethers";ae();B();var Qs=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});B();var ea=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),rt=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),ot=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ae();ae();var _e=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);B();ae();var xn=new Nn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),In=new Nn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),bo=Cn("Approval(address,address,uint256)"),Ca=Cn("ApprovalForAll(address,address,bool)"),go=1e4,wo=2e5,So=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),vo=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),Ao=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),Eo=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),xo=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),Io=(1n<<256n)-1n,ko=Io/2n,_o=4320*60*60*1e3,To=360*60*1e3,No=600*1e3,Co=45*1e3,Po=512,$o=128,kn=new Map,it=new Map,_n=new Map;function ce(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function at(e,t,n){let r=e.get(t);return r?Date.now()-r.at>n?(e.delete(t),null):r:null}function Te(e,t,n,r){for(e.delete(t),e.set(t,{at:Date.now(),value:n});e.size>r;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function Oo(e,t){try{return yo(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Ro(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function Tn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Lo({unlimited:e,spenderLabel:t,lastActivityAt:n}){if(e)return"unlimited";if(!t)return"unknown-spender";if(n){let r=Date.parse(n);if(Number.isFinite(r)&&Date.now()-r>_o)return"stale"}return"scoped"}function Uo(e,t,n){if(n)return"UNLIMITED";if(t==null)return e.toString();let r=10n**BigInt(t),o=e/r,i=e%r;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Bo(e,t,n,r){let o=`${e}:${t}`,i=r?.get(o);if(i)return i;if(ce(n)){let a=at(kn,o,To);if(a)return a.value}let s=(async()=>{let a=async d=>{try{let f=xn.encodeFunctionData(d,[]),u=await K(e,"eth_call",[{to:t,data:f},"latest"],n);return!u||u==="0x"?null:xn.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([a("decimals"),a("symbol")]),c={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return ce(n)&&Te(kn,o,c,Po),c})();return r?.set(o,s),s}async function Fo(e,t,n){let r=Math.min(Math.max(Number(n.lookbackBlocks)||go,1),wo),o=await tt(e,n);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-r),s=await K(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[bo,Ro(t)]}],n);if(!Array.isArray(s))throw new Error("log scan returned no array");let a=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),c=l?.topics?.[2];!p||!c||a.set(`${p}:${Tn(c)}`,{token:p,spender:Tn(c)})}return{pairs:[...a.values()],fromBlock:i,toBlock:o}}function Mo(e){return(xo[e]||[]).flatMap(n=>vo.map(r=>({token:n.address,spender:r.address,symbol:n.symbol,decimals:n.decimals})))}async function qo(e,t,n={}){let r=[],o="direct-probe",i=null,s=Mo(e),a=st(e),l=ce(n)&&at(it,e,No)?.value===!1;if(s.length===0&&a.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await Fo(e,t,n);r=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},ce(n)&&Te(it,e,!0,64)}catch{if(ce(n)&&Te(it,e,!1,64),r=s,r.length===0&&a.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await W(r,n.concurrency||4,async u=>{try{let v=await En({chainId:e,token:u.token,owner:t,spender:u.spender},n),x=BigInt(v.allowance);if(x<=0n)return null;let y=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Bo(e,u.token,n,p),I=x>=ko,k=So[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:y.symbol,decimals:y.decimals,spender:u.spender,spenderLabel:k,allowance:x.toString(),allowanceDisplay:Uo(x,y.decimals,I),unlimited:I,lastActivityAt:null,risk:Lo({unlimited:I,spenderLabel:k,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await Ho(e,t,n);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:r.length,collectionsProbed:st(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function Do(e,t,n,r,o){try{let i=In.encodeFunctionData("isApprovedForAll",[n,r]),s=await K(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!In.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function st(e){return(Eo[e]||[]).flatMap(n=>Ao.map(r=>({collection:n.address,collectionName:n.name,operator:r.address,operatorLabel:r.label})))}async function Ho(e,t,n){let r=st(e);return r.length===0?[]:(await W(r,n.concurrency||4,async i=>await Do(e,i.collection,t,i.operator,n)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function Pn(e={},t={}){let n=Oo(e.owner||e.address,"owner"),r=new Map(_e.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>r.has(u)):[...r.keys()],i=`${n}:${[...o].sort((u,v)=>u-v).join(",")}:${e.lookbackBlocks??""}`,s=ce(t)&&!e.refresh;if(s){let u=at(_n,i,Co);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let a=await W(o,e.concurrency||3,u=>qo(u,n,{...t,lookbackBlocks:e.lookbackBlocks})),l=a.flatMap(u=>u.approvals),p=a.map(u=>u.scan),c=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:n,scannedRange:c?`last ${c.toBlock-c.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&Te(_n,i,f,$o),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as di}from"ethers";B();ae();B();var $n="mainnet-beta",Vo="https://api.mainnet-beta.solana.com",ct="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function zo(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||Vo).trim()}function ne(e,t="address"){let n=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return n}function jo(e,t){return t?[...e,{commitment:t}]:e}async function On(e,t=[],n={}){let r=String(e||"");if(r==="sendTransaction"||r==="sendRawTransaction"||r==="requestAirdrop"||r==="requestAirDrop"||/airdrop/i.test(r)||/^send/i.test(r))throw new Error(`solana-rpc: ${r} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await O(zo(n),{method:"POST",body:{jsonrpc:"2.0",id:n.id||1,method:e,params:t},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function Rn(e={},t={}){let n=ne(e.address||e.owner,"address"),r=await On("getBalance",jo([n],e.commitment),t);return{provider:"solana-rpc",cluster:$n,address:n,lamports:String(r?.value??0),slot:r?.context?.slot??null,raw:r}}function Wo(e={}){let t=e.account?.data?.parsed?.info||{},n=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(n.amount??"0"),decimals:n.decimals??null,uiAmount:n.uiAmount??null,uiAmountString:n.uiAmountString??null,raw:e}}async function lt(e={},t={}){let n=ne(e.owner||e.address,"owner"),r=e.mint?{mint:ne(e.mint,"mint")}:{programId:ne(e.programId||ct,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await On("getTokenAccountsByOwner",[n,r,o],t),s=Array.isArray(i?.value)?i.value.map(Wo):[];return{provider:"solana-rpc",cluster:$n,owner:n,filter:r,slot:i?.context?.slot??null,accounts:s,raw:i}}B();var Ko="mainnet",Go="https://mempool.space/api",Yo="https://mempool.space/testnet/api";function Ln(e={}){return String(e.network||process.env.BTC_NETWORK||Ko).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Jo(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):Ln(e)==="testnet"?Yo:Go}function J(e,t="address"){let n=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(n)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(n))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return n}async function Xo(e,t={}){let n=`${Jo(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(n,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),i=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${i.slice(0,160)}`);return i}async function Qo(e,t={}){let n=await Xo(e,t);try{return JSON.parse(n)}catch{return n}}async function Un(e={},t={}){let n=J(e.address||e.addr,"address"),r=await Qo(`/address/${n}`,t),o=r.chain_stats||{},i=r.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),a=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:Ln(t),address:n,balanceSats:String(s-a),chainStats:o,mempoolStats:i,raw:r}}var Bn="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function le({provider:e,defaultUrl:t,hosts:n=[],url:r,strict:o=!1}){let s=(String(r??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Fn(t)};let a;try{a=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=a.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Fn(t),...n]).has(l)){let c=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return a.protocol==="http:"&&!c?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[Bn]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${Bn}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Fn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function re(e,t,n){let r={...e};if(!n)return r;for(let[o,i]of Object.entries(t||{}))i&&(r[o]=i);return r}function ut(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Zo=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function ei(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",n=!1;try{let r=ut(e);if(r){let o=new URL(r).host,i=new URL(r).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);n=Zo.includes(o)&&(i==="https:"||s)}}catch{n=!1}return re({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},n)}async function Mn(e,t={}){let r=await(t.fetchImpl||fetch)(e,{method:"GET",headers:ei(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await r.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!r.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${r.status} ${String(o).slice(0,160)}`);return i}async function qn(e={},t={}){let n=J(e.address||e.addr,"address"),r=ut(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${r}/v1/indexer/address/${n}/runes/balance-list?start=0&limit=100`,`${r}/v1/runes/address/${n}`,`${r}/runes/balance/${n}`,`${r}/address/${n}/runes`],i=null;for(let s of o)try{let a=await Mn(s,t),l=ti(a);return{provider:"bitcoin-meta",address:n,ok:!0,count:l.length,balances:l,source:s}}catch(a){i=a}return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function ti(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({rune:r.rune||r.runeid||r.runeId||r.spacedRune||r.name||r.ticker||null,runeId:r.runeid||r.runeId||r.id||null,amount:String(r.amount??r.balance??r.total??r.qty??"0"),symbol:r.symbol||null,divisibility:r.divisibility??r.div??null,raw:r}))}async function Ne(e={},t={}){let n=J(e.address||e.addr,"address"),r=ut(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${r}/v1/indexer/address/${n}/inscription-data?cursor=0&size=${o}`,`${r}/v1/inscriptions/address/${n}?limit=${o}`,`${r}/address/${n}/inscriptions?limit=${o}`],s=null;for(let a of i)try{let l=await Mn(a,t),p=ni(l);return{provider:"bitcoin-meta",address:n,ok:!0,count:p.length,inscriptions:p,source:a}}catch(l){s=l}return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function ni(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({id:r.inscriptionId||r.id||r.inscription_id||null,number:r.inscriptionNumber??r.number??null,sat:r.sat||r.satoshi||null,contentType:r.contentType||r.content_type||null,utxo:r.utxo||r.output||(r.txid!=null?`${r.txid}:${r.vout??r.n}`:null),raw:r}))}B();var ri="https://api.hyperliquid.xyz/info",oi="https://api.hyperliquid-testnet.xyz/info";function ii({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let n=process.env.HL_API_URL.replace(/\/$/,"");return n.endsWith("/info")?n:`${n}/info`}return e||process.env.HL_TESTNET==="1"?oi:ri}async function dt(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let n=ii(t);return O(n,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function Dn(e={}){return dt({type:"allMids"},e)}async function Hn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return dt({type:"spotClearinghouseState",user:e},t)}async function Vn(e,t={}){if(!e)throw new Error("hlUserState requires user");return dt({type:"clearinghouseState",user:e},t)}B();var si="https://coins.llama.fi";function ai(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||si).replace(/\/$/,"")}async function pt(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let n=e.map(encodeURIComponent).join(",");return O(`${ai(t)}/prices/current/${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}B();var zn=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,ci=/[<>&`*_~[\]()|\\]/g,li=/[\u0000-\u001F\u007F]/g;function ft(e,{max:t=32,fallback:n=""}={}){return e==null?n:String(e).normalize("NFKC").replace(zn,"").replace(li,"").replace(ci,"").replace(/\s+/g," ").trim().slice(0,t).trim()||n}function mt(e){if(e==null)return!1;let t=String(e);return zn.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var jn=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function ui(e,t={}){let n=Number(e),r=t.baseUrl||jn[n];if(!r)throw new Error(`Blockscout not configured for chainId ${n}`);return r.replace(/\/$/,"")}function Wn(e){return!!jn[Number(e)]}async function Kn(e={},t={}){if(!e.address)throw new Error("address required");let n=Number(e.chainId||1),r=`${ui(n,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await O(r,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function Gn(e=[],{fungibleOnly:t=!0}={}){let n=[];for(let r of e){if(!r||typeof r!="object")continue;let o=r.token&&typeof r.token=="object"?r.token:{},i=String(o.type||r.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||r.token_address||r.tokenAddress||null;if(!s||typeof s!="string")continue;let a=String(r.value??r.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(a)||a==="0")continue;let l=o.decimals??r.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=ft(o.symbol||o.name,{max:32,fallback:"TOKEN"}),c=ft(o.name,{max:80,fallback:""})||null;n.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:c,decimals:l,amountRaw:a,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:mt(o.symbol)||mt(o.name)||void 0})}return n}var pi="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",Jn=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function X(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Ce(e,...t){for(let n of t){let r=String(e?.[n]||"").trim();if(r)return r}return null}function Yn(e){if(!e)return null;try{return di(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function bt(e={},t=process.env){let n=e.addresses||{},r=Yn(n.evm||e.evmAddress||Ce(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=n.solana||e.solanaAddress||Ce(t,"ORACLE_SOLANA_ADDRESS"),i=n.bitcoin||e.bitcoinAddress||Ce(t,"ORACLE_BITCOIN_ADDRESS"),s=Yn(n.hyperliquid||e.hyperliquidAddress||Ce(t,"ORACLE_HYPERLIQUID_ADDRESS")||r);return{evm:r,solana:o?ne(o,"portfolio Solana address"):null,bitcoin:i?J(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function we(e,t){let n=BigInt(String(e||"0")),r=Number(t);if(!Number.isInteger(r)||r<0||r>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(r===0)return n.toString();let o=n<0n,i=o?-n:n,s=10n**BigInt(r),a=i/s,l=String(i%s).padStart(r,"0").replace(/0+$/,"");return`${o?"-":""}${a}${l?`.${l}`:""}`}function ue(e){let t=Number(e);return Number.isFinite(t)?t:null}function Pe(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function Q(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Xn(e,t){let n=Jn[t],r=n?e?.coins?.[n]:null,o=Number(r?.price);return{key:n||null,priceUsd:Number.isFinite(o)?o:null,timestamp:r?.timestamp??null,confidence:r?.confidence??null}}function fi(e){let t=new Map;for(let n of e)if(n?.ok)for(let r of n.data?.accounts||[]){let o=BigInt(String(r.amount||"0"));if(o===0n||!r.mint)continue;let i=`${r.mint}:${r.decimals??"unknown"}`,s=t.get(i)||{mint:r.mint,amountRaw:0n,decimals:r.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,n.program&&s.programs.add(n.program),t.set(i,s)}return[...t.values()].map(n=>{let r=n.amountRaw.toString(),o=n.decimals==null?null:we(r,n.decimals),i=n.decimals===0&&n.amountRaw===1n;return{mint:n.mint,amountRaw:r,amount:o,decimals:n.decimals,tokenPrograms:[...n.programs],accountCount:n.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function ht(e,t){return{family:e,status:"unsupported",reason:t}}function yt(e,t){if(!e||e.status!=="ok")return e;let n=Xn(t,e.symbol),r=ue(e.amount),o=r!=null&&n.priceUsd!=null?Pe(r*n.priceUsd):null;return{...e,price:n,usdValue:o}}async function Qn(e={},t={}){let n=new Date().toISOString(),r=bt(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,a=new Map(_e.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...a.keys()],p=[...new Set(Object.values(Jn))],c=o?P(()=>pt(p,X(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=W(l,e.concurrency||5,async h=>{let b=a.get(h);if(!b)return{family:"evm",chainId:h,name:null,address:r.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!r.evm)return{family:"evm",chainId:h,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let E={...X(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},T=await P(()=>nt(h,r.evm,E));if(!T.ok)return{family:"evm",chainId:h,name:b.name,address:r.evm,status:"unavailable",latencyMs:T.ms,error:T.error};let $=b.nativeCurrency?.decimals??18,q=b.nativeCurrency?.symbol||"NATIVE",w=T.data.balanceWei,_={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&Wn(h)){let ee=await P(()=>Kn({chainId:h,address:r.evm},{...X(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));ee.ok?_={status:"ok",assets:Gn(ee.data,{fungibleOnly:!0}).map(pe=>{let fe=we(pe.amountRaw,pe.decimals);return{...pe,amount:fe,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:ee.ms}:_={status:"unavailable",assets:[],reason:ee.error||"blockscout token-balances failed",source:"blockscout",latencyMs:ee.ms}}return{family:"evm",chainId:h,name:b.name,address:r.evm,status:"ok",latencyMs:T.ms,native:{status:"ok",symbol:q,amountRaw:w,decimals:$,amount:we(w,$)},fungibleTokens:_,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:_.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!r.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=X(t,"solana"),b=await P(()=>Rn({address:r.solana},h)),E=i||s?await Promise.all([P(()=>lt({owner:r.solana,programId:ct},h)).then(_=>({..._,program:"spl-token"})),P(()=>lt({owner:r.solana,programId:pi},h)).then(_=>({..._,program:"token-2022"}))]):[],T=fi(E),$=T.filter(_=>_.classification==="collectible-candidate"),q=T.filter(_=>_.classification!=="collectible-candidate"),w=E.filter(_=>!_.ok).map(_=>_.error);return{family:"solana",name:"Solana Mainnet",address:r.solana,status:b.ok||E.some(_=>_.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:we(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:i?w.length===E.length?"unavailable":w.length?"partial":"ok":"not-requested",assets:i?q:[],errors:w,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?w.length===E.length?"unavailable":"partial":"not-requested",assets:s?$:[],errors:w,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!r.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=X(t,"bitcoin"),b=X(t,"bitcoinMeta"),[E,T,$]=await Promise.all([P(()=>Un({address:r.bitcoin},h)),i?P(()=>qn({address:r.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?P(()=>Ne({address:r.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),q=T.ok?T.data:null,w=$.ok?$.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:r.bitcoin,status:E.ok||q?.ok||w?.ok?"ok":"unavailable",native:E.ok?{status:"ok",symbol:"BTC",amountRaw:E.data.balanceSats,decimals:8,amount:we(E.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:E.error},fungibleTokens:{status:i?q?.ok?"ok":"unavailable":"not-requested",assets:q?.balances||[],error:q?.ok?null:q?.error||T.error,verification:"indexer-reported"},collectibles:{status:s?w?.ok?"ok":"unavailable":"not-requested",assets:w?.inscriptions||[],error:w?.ok?null:w?.error||$.error,unknownNotEmpty:!!w?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),v=(async()=>{if(!r.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=X(t,"hyperliquid"),[b,E,T]=await Promise.all([P(()=>Hn(r.hyperliquid,h)),P(()=>Vn(r.hyperliquid,h)),P(()=>Dn(h))]),$=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(w=>Q(w.total)||Q(w.hold)).map(w=>({coin:w.coin||null,total:String(w.total??"0"),hold:String(w.hold??"0"),priceUsd:null,usdValue:null})),q=(E.ok&&Array.isArray(E.data?.assetPositions)?E.data.assetPositions:[]).map(w=>w.position||w).filter(w=>Q(w.szi)).map(w=>({coin:w.coin||null,size:String(w.szi??"0"),entryPrice:w.entryPx??null,positionValueUsd:w.positionValue??null,unrealizedPnlUsd:w.unrealizedPnl??null,liquidationPrice:w.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:r.hyperliquid,status:b.ok||E.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:$,error:b.ok?null:b.error},perps:{status:E.ok?"ok":"unavailable",accountValueUsd:E.data?.marginSummary?.accountValue??null,withdrawableUsd:E.data?.withdrawable??null,positions:q,error:E.ok?null:E.error},mids:T.ok?T.data:{},source:"hyperliquid-info"}})(),[x,y,I,k,M]=await Promise.all([d,f,u,v,c]),m=M.ok?M.data:null,g=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),A=[];for(let h of x){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let b=g[h.chainId];if(b)for(let E of h.fungibleTokens.assets||[])E.address&&A.push(`${b}:${String(E.address).toLowerCase()}`)}let S=null;if(o&&A.length){let h=[...new Set(A)],b=await P(()=>pt(h,X(t,"prices")));b.ok&&(S=b.data)}let N=x.map(h=>{let b=h.native?{...h,native:yt(h.native,m)}:h;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let E=g[b.chainId],T=b.fungibleTokens.assets.map($=>{let q=String($.symbol||"").toUpperCase(),w=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(q)&&(w=1),w==null&&E&&$.address&&S?.coins){let Ut=`${E}:${String($.address).toLowerCase()}`,pe=S.coins[Ut],fe=Number(pe?.price);Number.isFinite(fe)&&fe>0&&(w=fe)}let _=ue($.amount),ee=_!=null&&w!=null?Pe(_*w):null;return{...$,priceUsd:w,usdValue:ee}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:T}}}return b});y.native&&(y.native=yt(y.native,m)),I.native&&(I.native=yt(I.native,m));let z=0,C=0,L=0;for(let h of[...N,y,I]){h.native?.status==="ok"&&Q(h.native.amount)&&(h.native.usdValue!=null?(z+=h.native.usdValue,C+=1):L+=1);for(let b of h.fungibleTokens?.assets||[])!Q(b.amount)&&!Q(b.amountRaw)||(b.usdValue!=null?(z+=b.usdValue,C+=1):L+=1)}let Z=Xn(m,"HYPE");for(let h of k.spot?.balances||[]){let b=String(h.coin||"").toUpperCase(),E=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?Z.priceUsd||ue(k.mids?.HYPE):ue(k.mids?.[h.coin]),T=ue(h.total);h.priceUsd=E,h.usdValue=T!=null&&E!=null?Pe(T*E):null,Q(h.total)&&(h.usdValue!=null?(z+=h.usdValue,C+=1):L+=1)}let U=ue(k.perps?.accountValueUsd);U!=null&&U!==0&&(z+=U,C+=1);let H=[...y.fungibleTokens?.assets||[],...y.collectibles?.assets||[]].filter(h=>Q(h.amount)).length,Be=(I.fungibleTokens?.assets||[]).length+(I.collectibles?.assets||[]).length;L+=H+Be;let Fe=[...N,y,I,k],oe=h=>Fe.filter(b=>b.status===h).length,ie=[],Me=N.filter(h=>h.fungibleTokens?.status==="unavailable"),Lt=N.filter(h=>h.fungibleTokens?.status==="ok");Me.length&&!Lt.length?ie.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):Me.length&&ie.push(`EVM token discovery partial: Blockscout covered ${Lt.length} chain(s); ${Me.length} chain(s) still native-only.`),(y.fungibleTokens?.assets?.length||y.collectibles?.assets?.length)&&ie.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),I.collectibles?.unknownNotEmpty&&ie.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),M.ok||ie.push(`Price provider unavailable: ${M.error}`);let qe=[ht("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),ht("sui","Sui balance adapter is not installed"),ht("aptos","Aptos balance adapter is not installed")],Sr=Fe.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:n,addresses:r,coverage:{requestedSurfaces:Fe.length,ok:oe("ok"),unavailable:oe("unavailable"),notConfigured:oe("not-configured"),unsupported:oe("unsupported")+qe.length,evmChainsRequested:l.length,evmChainsOk:N.filter(h=>h.status==="ok").length},valuation:{knownUsd:Pe(z),label:"known priced value, not a complete portfolio total",pricedItems:C,unpricedNonzeroItems:L,complete:L===0&&!Sr&&oe("unavailable")===0&&oe("not-configured")===0&&qe.length===0,priceSource:o?"DefiLlama":null,priceStatus:M.ok?"ok":"unavailable",priceQueriedAt:n},chains:[...N,y,I,k],unsupportedFamilies:qe,warnings:ie}}B();B();import{readFileSync as hi,existsSync as yi}from"node:fs";import{getAddress as bi,Interface as $e,TypedDataEncoder as dc,parseUnits as pc}from"ethers";var mi=300*1e3,ic=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var gi="https://api.opensea.io/api/v2",wi="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",bc=new $e([`function ${wi}`]),gc=new $e(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Si=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),vi=new Set(Si),Ai=new Set(["solana","flow"]);function Ei(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!yi(e))return"";try{for(let t of hi(e,"utf8").split(`
+`)){let n=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(n)return n[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function wt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||Ei()}function er(e={}){return le({provider:"opensea",defaultUrl:gi,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function tr(e={}){return er(e).baseUrl}function nr(e={}){return re({accept:"application/json"},{"x-api-key":wt(e)},er(e).trusted)}function xi(e){let t=String(e||"ethereum").trim().toLowerCase();if(!vi.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function Zn(e,t="address"){try{return bi(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function rr(e,t=null){let n=String(e||"").trim();if(!n)throw new Error("opensea: account address required");if(t&&!Ai.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(n))return Zn(n,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(n))throw new Error("opensea: invalid account address");return n}function Ii(e={},t,n){return{chain:t,owner:n,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function St(e={},t={}){if(!wt(t))throw new Error("OPENSEA_API_KEY required");let n=xi(e.chain),r=rr(e.address||e.owner,n),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],a=e.next?String(e.next):null,l=0;do{let p=new URL(`${tr(t)}/chain/${encodeURIComponent(n)}/account/${encodeURIComponent(r)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),a&&p.searchParams.set("next",a);let c=await O(p.toString(),{headers:nr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(c?.nfts)?c.nfts:[])s.push(Ii(d,n,r));a=c?.next?String(c.next):null,l+=1}while(a&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:n,owner:r,count:s.length,pages:l,complete:!a,next:a,nfts:s,exec:!1,readOnly:!0}}async function or(e={},t={}){if(!wt(t))throw new Error("OPENSEA_API_KEY required");let n=rr(e.address||e.owner),r=await O(`${tr(t)}/account/${encodeURIComponent(n)}/pnl`,{headers:nr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:n,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:r?.realized_pnl_usd??null,unrealizedPnlUsd:r?.unrealized_pnl_usd??null,totalPnlUsd:r?.total_pnl_usd??null,netInvestedUsd:r?.net_invested_usd??null,currentValueUsd:r?.current_value_usd??null,returnPercentage:r?.return_percentage??null,itemLevelPnlAvailable:!1,raw:r,exec:!1,readOnly:!0}}var wc=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var Sc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var vc=new $e(["function setApprovalForAll(address operator,bool approved)"]),Ac=new $e(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var _i="https://api.satflow.com/v1";function ir(e={}){return le({provider:"satflow",defaultUrl:_i,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function Ti(e={}){return ir(e).baseUrl}function sr(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function Ni(e={}){return re({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":sr(e)},ir(e).trusted)}async function Ci(e,{method:t="GET",body:n,opts:r={}}={}){if(!sr(r))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${Ti(r)}${e.startsWith("/")?e:`/${e}`}`,a=await(r.fetchImpl||fetch)(i,{method:t,headers:Ni(r),body:n!=null?JSON.stringify(n):void 0,signal:AbortSignal.timeout(r.timeoutMs??2e4)}),l=await a.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!a.ok)throw new Error(`satflow ${t} ${e}: HTTP ${a.status} ${String(l).slice(0,200)}`);return p}async function ar(e={},t={}){let n=J(e.address||e.addr,"address"),r=new URLSearchParams({address:n});e.type&&r.set("type",e.type),e.limit!=null&&r.set("limit",String(e.limit)),e.offset!=null&&r.set("offset",String(e.offset));let o=await Ci(`/address/wallet-contents?${r}`,{opts:t});return{provider:"satflow",address:n,contents:o}}B();B();var Bc=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Pi=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],$i=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Oi=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Ri(e={}){let t=[],n=String(e.name||""),r=String(e.description||""),o=`${n} ${r}`;$i.test(n)&&t.push("url-in-name");let i=Pi.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),Oi.test(n)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(n)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,a=!Array.isArray(e.traits)||e.traits.length===0;s&&a&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function cr(e={}){let t=Ri(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Li=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Ui=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function vt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function Se(e,t){let n=await P(t);return n.ok?{ok:!0,data:n.data}:{ok:!1,error:`${e}: ${n.error}`.slice(0,300)}}function Bi(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function Fi(e={},t){let n=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:n==null?null:String(n),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(n?`Inscription ${n}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function Mi(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function lr(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function qi(e){let t=new Map;if(Array.isArray(e)){for(let n of e)n?.assetKey&&t.set(String(n.assetKey).toLowerCase(),n);return t}if(e&&typeof e=="object")for(let[n,r]of Object.entries(e))t.set(n.toLowerCase(),r);return t}function Di(e,t){let n=lr(e),r=t.get(n),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!r)return{...e,assetKey:n};let i=Number(r.costUsd),s=Number(r.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:n,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let a=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-a)*100)/100,currentValueUsd:o,totalCostUsd:a,realizedUsd:null}}:{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Hi(e){let t=new Map;for(let n of e){let r=lr(n);t.has(r)||t.set(r,n)}return[...t.values()]}function Vi(e,t){let n=e.filter(i=>i.itemPnl?.status==="estimated"),r=e.length-n.length,o=Math.round(n.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:r===0&&e.length?"estimated-complete-for-held-items":n.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:n.length,unknownItems:r,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function ur(e={},t={}){let n=new Date().toISOString(),r=bt(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=Li.filter(m=>!o||o.has(m.chain)),s=[],a=[],l=vt(t,"opensea"),p=r.evm?i.filter(m=>m.family!=="solana"):[],c=await W(p,4,async m=>({row:m,result:await Se(`opensea-${m.chain}`,()=>St({chain:m.chain,address:r.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:g}of c)if(g.ok){let A=g.data.nfts.map(S=>({...S,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));a.push(...A),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:g.data.complete?"ok":"partial",count:A.length,complete:g.data.complete,next:g.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:g.error,source:"opensea"});if(!r.evm)for(let m of i.filter(g=>g.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(r.solana&&(!o||o.has("solana"))){let m=await Se("opensea-solana",()=>St({chain:"solana",address:r.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let g=m.data.nfts.map(A=>({...A,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));a.push(...g),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:g.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(r.bitcoin&&(!o||o.has("bitcoin"))){let m=await Se("satflow-wallet-contents",()=>ar({address:r.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},vt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let g=Bi(m.data.contents).map(S=>Fi(S,r.bitcoin));a.push(...g);let A=g.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:A?"ok":"partial",count:g.length,complete:A,source:"satflow"})}else{let g=await Se("bitcoin-meta-inscriptions",()=>Ne({address:r.bitcoin},vt(t,"bitcoinMeta")),t.timeoutMs??35e3),A=g.ok&&g.data?.ok&&Array.isArray(g.data.inscriptions)?g.data.inscriptions:[];a.push(...A.map(S=>Mi(S,r.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:A.length?"partial":"unavailable",count:A.length,complete:!1,source:A.length?"bitcoin-meta":"satflow",error:A.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([r.evm,r.solana].filter(Boolean))]){let g=await Se(`opensea-pnl-${m}`,()=>or({address:m},l),t.timeoutMs??35e3);d.push(g.ok?{status:"ok",...g.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:g.error})}let f=qi(e.costBasis),u=Hi(a).map(m=>Di(m,f)).map(m=>cr(m)),v=u.filter(m=>!m.spam),x=u.filter(m=>m.spam),y=v.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),I=Math.round(y.reduce((m,g)=>m+Number(g.estimatedValueUsd),0)*100)/100,k=v.length-y.length,M=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:n,addresses:r,coverage:s,unsupported:Ui,inventory:{count:u.length,visibleCount:v.length,flaggedCount:x.length,items:u,visibleItems:v,flaggedItems:x},valuation:{estimatedCurrentValueUsd:I,valuedItems:y.length,unvaluedItems:k,complete:k===0&&M.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Vi(v,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as At}from"node:os";import{join as Et}from"node:path";var dr=process.env.ORACLE_PUBLIC_DESKTOP==="1",zi=dr?process.env.ORACLE_CONFIG_DIR||Et(At(),".config","oracle"):Et(At(),".config","oracle"),nl=dr?zi:Et(At(),".config","mad-desk");function xt(e,t,n=""){let r=process.env[e];if(r!=null&&String(r).trim()!=="")return r;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:n}var Yi=JSON.parse(Ct(new URL("../../package.json",import.meta.url),"utf8")),de="public",Ji="127.0.0.1",Xi=8799,Re=Yi.version,Qi=new Set(["127.0.0.1","localhost","::1"]),Nt=Ae(Wi(Gi(import.meta.url)),"../.."),It=Ae(Nt,"public","oracle-console"),pr=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),Zi=1e6,R=class extends Error{constructor(t,n,r){super(r||n),this.status=t,this.code=n}};function G(e,t,n){let r=t,o;try{D(n),o=Xt(n)}catch{r=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(r,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true"}),e.end(o)}function es(e){return new Promise((t,n)=>{let r=[],o=0;e.on("data",i=>{if(o+=i.length,o>Zi){n(new R(413,"payload-too-large","request body too large")),e.destroy();return}r.push(i)}),e.on("end",()=>{let i=Buffer.concat(r).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{n(new R(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>n(new R(400,"bad-request","request stream error")))})}function F(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new R(400,t,`${t} must be a JSON object`);return e}function ts(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function ns(e){let t=ts(e);if(!Qi.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function rs(){return{status:200,body:{ok:!0,plane:de,version:Re}}}function Le(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function os(e){let t=F(e,"body"),n=t.input!==void 0?F(t.input,"input"):t,r=Le(F(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:en(o,r)}}function is(e){let t=F(e,"body"),n=t.request!==void 0?F(t.request,"request"):t.input!==void 0?F(t.input,"input"):t,r=Le(F(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:tn(o,r)}}function ss(e){let t=F(e,"body"),n=Le(F(t.opts,"opts")),r=on(t.store??[],n);return{status:200,body:{ok:!0,count:r.length,grants:r}}}function as(e){let t=F(e,"body"),n=Le(F(t.opts,"opts")),r=sn(t.store??[],t.id,n);return r==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:r}}function cs(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,n=!0,r=[];return t&&r.push("privy"),n&&r.push("injected"),{status:200,body:{ok:!0,plane:de,version:Re,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:n,modes:r},privy:{appId:e||null}}}}var kt=400;function ls(e=[]){if(e.length<=kt)return{rows:e,truncated:!1,omitted:0};let t=r=>r?.kind==="native"?0:r?.priced?1:2;return{rows:[...e].sort((r,o)=>t(r)-t(o)).slice(0,kt),truncated:!0,omitted:e.length-kt}}var _t=300;function us(e=[]){if(e.length<=_t)return{items:e,truncated:!1,omitted:0};let t=r=>r?.spam===!0||r?.nsfw===!0?2:Number.isFinite(Number(r?.floorUsd))&&Number(r?.floorUsd)>0?0:1;return{items:[...e].sort((r,o)=>t(r)-t(o)).slice(0,_t),truncated:!0,omitted:e.length-_t}}var Oe=12;async function ds(e){let t=F(e,"body"),n=typeof t.owner=="string"?t.owner:null;if(!n)throw new R(400,"owner-required","owner must be an EVM address");let r=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(r&&r.length>Oe)throw new R(400,"too-many-chains",`at most ${Oe} chainIds per request`);let i=await Pn({owner:n,chainIds:r},Pt());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var ps=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,fs=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function ms(e){if(typeof e!="string")return null;let t=e.trim();return ps.test(t)?t:null}function hs(e){if(typeof e!="string")return null;let t=e.trim();return fs.test(t)?t:null}function br(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function ys(e){let t=F(e,"body"),n=br(t.owner),r=ms(t.solana),o=hs(t.bitcoin);if(!n&&!r&&!o)throw new R(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>Oe)throw new R(400,"too-many-chains",`at most ${Oe} chainIds per request`);let s=await Qn({addresses:{evm:n,solana:r,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},Pt()),a=[],l=[],p=0,c=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let v=u.fungibleTokens?.status??"unavailable";v==="ok"?p+=1:v==="unavailable"&&(c+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:v,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let x=u.native;u.status==="ok"&&x&&x.status==="ok"&&x.amountRaw&&x.amountRaw!=="0"&&x.amountRaw!=="0x0"&&a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:x.symbol,decimals:x.decimals,amount:String(x.amountRaw),amountRaw:String(x.amountRaw),amountFormatted:x.amount,kind:"native",valueUsd:x.usdValue!=null?String(x.usdValue):null,priced:x.usdValue!=null});for(let y of u.fungibleTokens?.assets||[]){let I=y.amountRaw!=null?String(y.amountRaw):null;if(!I||I==="0")continue;let k=typeof y.decimals=="number"&&Number.isInteger(y.decimals)?y.decimals:null;a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:y.symbol||y.coin||"TOKEN",decimals:k,amount:I,amountRaw:I,amountFormatted:y.amount!=null?String(y.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:y.address||y.mint||null,valueUsd:y.usdValue!=null?String(y.usdValue):null,priced:y.usdValue!=null,source:y.source||u.fungibleTokens?.source||null})}}let d=c>0||!!(s.valuation&&s.valuation.complete===!1),f=ls(a);return{status:200,body:{ok:!0,owner:s.addresses?.evm??n,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&c===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${c} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function Pt(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function bs(e){let t=F(e,"body"),n=br(t.owner);if(!n)throw new R(400,"owner-required","owner must be an EVM address");let r=await ur({addresses:{evm:n}},Pt()),o=r?.inventory&&typeof r.inventory=="object"?r.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(r?.items)?r.items:[]).map(c=>{if(!c||typeof c!="object")return null;let d=typeof c.collection=="string"?c.collection:c.collection&&typeof c.collection=="object"&&typeof c.collection.slug=="string"?c.collection.slug:typeof c.contract=="string"?c.contract:null;return{chain:c.chain??null,chainId:c.chainId??null,family:c.family??null,owner:c.owner??n,contract:c.contract??null,tokenId:c.tokenId==null?null:String(c.tokenId),tokenStandard:c.tokenStandard??null,collection:d,name:typeof c.name=="string"?c.name.slice(0,160):null,imageUrl:c.imageUrl??c.image??null,estimatedValueUsd:c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,floorUsd:c.floorUsd!=null&&Number.isFinite(Number(c.floorUsd))?Number(c.floorUsd):c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,spam:c.spam===!0,nsfw:c.nsfw===!0,source:typeof c.source=="string"?c.source.slice(0,64):null}}).filter(Boolean),a=Array.isArray(r?.coverage)?r.coverage:[],l=us(s),p=r?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:n,queriedAt:r.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:a.map(c=>({family:c?.family??null,chain:c?.chain??null,chainId:c?.chainId??null,status:c?.status??null,count:c?.count??null,complete:c?.complete===!0,source:c?.source??null,error:null,reason:typeof c?.reason=="string"?c.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:a.filter(c=>c?.status==="partial").map(c=>c.chain).filter(Boolean),unavailable:a.filter(c=>c?.status==="unavailable").map(c=>c.chain).filter(Boolean),unconfigured:a.filter(c=>c?.status==="not-configured").map(c=>c.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:r?.valuation?{estimatedCurrentValueUsd:r.valuation.estimatedCurrentValueUsd??null,valuedItems:r.valuation.valuedItems??null,unvaluedItems:r.valuation.unvaluedItems??null,complete:r.valuation.complete===!0}:null}}}var gs=6e4,ws=120,gr=10,Ss=300,vs=gr,fr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),As=4096,ve=new Map;function Es(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let n=t.split(",")[0].trim();if(n)return n.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function xs(e,t){let n=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),r=n==="127.0.0.1"||n==="::1"||n.startsWith("127."),o=Es(e),i=r&&o!==n,s=fr.has(t)?r&&!i?vs:gr:r&&!i?Ss:ws,a=Date.now(),l=`${o}:${fr.has(t)?"amp":"std"}`,p=ve.get(l);if(!p||a>=p.resetAt){for(ve.set(l,{count:1,resetAt:a+gs});ve.size>As;){let c=ve.keys().next();if(c.done)break;ve.delete(c.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-a)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var mr=Object.freeze({"GET /public/health":rs,"GET /public/config":cs,"GET /eval":hr,"GET /public/eval":hr,"POST /public/connect/request":os,"POST /public/connect/assemble":is,"POST /public/grants/active":ss,"POST /public/grants/get":as,"POST /public/approvals":ds,"POST /public/portfolio":ys,"POST /public/nfts":bs});function hr(){let t=[Tt(Ae(Nt,"public","eval-report.json")),Tt(Ae(Nt,"docs","eval-report.json"))].find(r=>yr(r));if(!t)throw new R(404,"not-found","no committed eval report in this build");let n;try{n=JSON.parse(Ct(t,"utf8"))}catch{throw new R(500,"eval-report-invalid","committed eval report is not valid JSON")}return{status:200,body:{...n,servedAt:new Date().toISOString(),note:"Static release artifact. Reproduce: npx @oracle-agent/oracle eval guards|adversarial|fidelity --json"}}}function $t(e={}){return{"cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true",...e}}function Is(e,t,n,r){e.writeHead(t,$t({"content-type":n})),e.end(r)}function ks(e,t,n){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let r=n===""?"/":n,o=pr[r]||pr[r.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Tt(Ae(It,o.file));if(!i.startsWith(It+Ki)&&i!==It)return G(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!yr(i))return G(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=Ct(i);return e.method==="HEAD"?(t.writeHead(200,$t({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(Is(t,200,o.type,s),!0)}async function _s(e,t){let r=new URL(e.url,"http://localhost").pathname||"/";r.length>1&&r.endsWith("/")&&r!=="/oracle-console/"&&(r=r.replace(/\/+$/,"")),r===""&&(r="/");let o=r.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=mr[i];try{if(!s){if(ks(e,t,r))return;throw Object.keys(mr).some(d=>d.endsWith(` ${o}`))?new R(405,"method-not-allowed",`unsupported method for ${o}`):new R(404,"not-found",`unknown route ${o}`)}let a=xs(e,o);if(!a.allowed){t.writeHead(429,$t({"content-type":"application/json","retry-after":String(a.retryAfterSec),"x-ratelimit-limit":String(a.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${a.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await es(e),p=await s(l);G(t,p.status,p.body)}catch(a){if(a instanceof V){G(t,500,{error:"secret-leak-blocked"});return}if(a instanceof j){G(t,400,{error:"invalid-grant",errors:a.errors.map(l=>({field:l.field,message:l.message}))});return}if(a instanceof R){G(t,a.status,{error:a.code,message:a.message});return}if(a instanceof TypeError){G(t,400,{error:"bad-request",message:a.message});return}G(t,500,{error:"internal-error"})}}function Ts(){return ji((e,t)=>{_s(e,t).catch(()=>{try{G(t,500,{error:"internal-error"})}catch{}})})}function Ot({host:e,port:t}={}){let n=ns(e??xt("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",Ji)),r=t??xt("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(Xi)),o=Number(r);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(r)}`);return{host:n,port:o}}function wr(e={}){let{host:t,port:n}=Ot(e),r=Ts();return r.listen(n,t),r}var Rt=Ot(),Ue=wr(Rt);Ue.on("listening",()=>{let e=Ue.address(),t=typeof e=="object"&&e?e.address:Rt.host,n=typeof e=="object"&&e?e.port:Rt.port;console.log(`oracle-public-server listening on http://${t}:${n} (plane=${de}, version=${Re}, unsigned-only)`)});Ue.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{Ue.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});