@oracle-agent/oracle 0.35.31 → 0.35.32

package/dist/cli/commands/quickstart.mjs

@@ -1,8 +1,8 @@
-var _n=Object.defineProperty;var a=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(o){throw r=[o],o}};var me=(e,t)=>{for(var r in t)_n(e,r,{get:t[r],enumerable:!0})};function Dt(e){return Rn.get(Number(e))||null}function Ft(e,t=process.env){let r=Dt(e);if(!r)return null;for(let o of r.rpcEnv){let n=(t[o]||"").trim();if(n)return n}return null}var we,Rn,De=a(()=>{we={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Rn=new Map(Object.values(we).map(e=>[e.chainId,e]))});function Y(e){let t=e?.transactionHash||e?.hash||e?.txid||null;return t?{happened:!0,hash:String(t),note:null}:{happened:!1,hash:null,note:"no transaction hash \u2014 the action did not succeed"}}var Fe=a(()=>{});var qt=a(()=>{});var jt=a(()=>{});var X=a(()=>{});var H=a(()=>{});var ge=a(()=>{X();H()});import{isAddress as Ns}from"ethers";var je=a(()=>{ge();X();H()});import{Interface as Pn,isAddress as Ps}from"ethers";var qs,Mt=a(()=>{je();X();H();qs=new Pn(["function approve(address spender,uint256 amount) returns (bool)"])});import{Interface as Bn,isAddress as Hs}from"ethers";var Vs,Ks,Ht=a(()=>{je();X();H();Vs=new Bn(["function approve(address spender,uint256 amount) returns (bool)"]),Ks=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"})});var D=a(()=>{});import{Interface as Dn,MaxUint256 as ea,isAddress as ta,keccak256 as ra,toUtf8Bytes as na}from"ethers";var la,F=a(()=>{jt();Mt();Ht();D();H();la=new Dn(["function approve(address spender,uint256 amount) returns (bool)"])});var da,fa,ye=a(()=>{da=300*1e3,fa=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});var Ee=a(()=>{F()});import{Address as ga,NETWORK as ya,OutScript as Ea,RawTx as ba,SigHash as xa,TEST_NETWORK as Sa,Transaction as Aa}from"@scure/btc-signer";var ze=a(()=>{});import{createHash as Fn}from"node:crypto";import{base58 as Oa}from"@scure/base";import{getCompiledTransactionMessageDecoder as Na}from"@solana/transaction-messages";var zt,Ca,Ue=a(()=>{zt=e=>Fn("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Ca=new Map([[zt("route"),{name:"route",prefixBytes:0}],[zt("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]])});import q from"node:net";import qn from"node:dns";function be(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=m=>{if(!m)return[];let l=m.split(":"),f=l.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(g=>!Number.isInteger(g)||g<0||g>255))return null;l.splice(l.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return l.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:l.map(u=>Number.parseInt(u,16))},[o,n]=t.split("::"),i=r(o),s=r(n);if(!i||!s)return null;let d=t.includes("::"),c=8-i.length-s.length;if(!d&&c!==0||d&&c<1)return null;let p=[...i,...Array(Math.max(0,c)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(m=>[m>>8,m&255]))}function We(e,t,r){let o=Math.floor(r/8),n=r%8;for(let s=0;s<o;s+=1)if(e[s]!==t[s])return!1;if(!n)return!0;let i=255<<8-n;return(e[o]&i)===(t[o]&i)}function Ve(e){if(q.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(q.isIPv6(e)){let t=be(e);if(!t)return!1;let r=be("::ffff:0:0");return We(t,r,96)?Ve([...t.slice(12)].join(".")):We(t,be("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([n,i])=>We(t,be(n),i)):!1}return!1}function Mn(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(jn.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let o=q.isIP(r);return o!==0&&!Ve(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:o!==0}}async function Ke(e,{lookupFn:t=qn.promises.lookup}={}){let r=Mn(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:q.isIPv6(r.host)?6:4}]};let o;try{o=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(o)||o.length===0||o.some(n=>!Ve(n.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:o}}async function Je({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,o;try{let l=await t();r=l.Agent,o=l.fetch}catch(l){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${l?.message||l}`);return null}if(typeof r!="function"||typeof o!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let n=l=>String(l).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=l=>(Array.isArray(l)?l:[l]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(q.isIPv6(f.address)?6:4)})),d=(l,f,u)=>{i.set(n(l),s(typeof f=="string"?[{address:f,family:u}]:f))},c=l=>{let f=n(l);if(q.isIP(f))return[{address:f,family:q.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${l} during pinned fetch`);return u},p=new r({connect:{lookup(l,f,u){let g;try{g=c(l)}catch(w){return u(w)}return f?.all?u(null,g):u(null,g[0].address,g[0].family)}}}),m=Hn((l,f={})=>o(l,{...f,dispatcher:p}),d);return{dispatcher:p,fetch:m,pin:d,resolve:c,async close(){try{await p.destroy()}catch{}}}}function Hn(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Ge]=Object.freeze({pin:t}),e}function Ye(e){return typeof e=="function"&&typeof e[Ge]?.pin=="function"}function Ut(e,t,r){if(!Ye(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Ge].pin(t,r)}var jn,Ge,Wt=a(()=>{jn=new Set(["localhost","metadata.google.internal","metadata.goog"]);Ge=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as Vt}from"node:crypto";function Kn(e){let t=String(e||"").toLowerCase();return Qt.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function Jn(e){let t={};for(let[r,o]of Object.entries(e||{}))Kn(r)||(t[r]=o);return t}function Gn(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Yn(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Yt(e){let t=String(e?.method||"");return t?!Xn.test(t):!1}function Qn(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}return Array.isArray(r)?r.length>0&&r.every(Yt):!r||typeof r!="object"?!1:r.jsonrpc&&r.method?Yt(r):typeof r.type=="string"&&Zn.has(r.type)&&r.action==null&&r.signature==null&&r.nonce==null}function eo(e,t,r,o={},n=null){let i={};for(let[f,u]of Object.entries(r||{}))i[f.toLowerCase()]=u;let s=Object.keys(i).filter(f=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(f)),c=[...new Set([...Qt,...s])].sort().map(f=>`${f}=${i[f]??""}`).join(`
-`),p=Vt("sha256").update(c).digest("hex").slice(0,32),m=`${o.untrustedUrl?"untrusted":"trusted"}:${o.maxResponseBytes??"unbounded"}`,l=n==null?"-":Vt("sha256").update(String(n)).digest("hex").slice(0,32);return`${e} ${t} ${m} ${p} ${l}`}function to(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Jt):Math.min(250*2**e,Jt)+Math.floor(Math.random()*100)}function Q(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Ze(e,t,r){return Q(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function ee(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function no(e){return e?e.byteLength??e.length??0:0}async function Xt(e,t,{url:r,truncate:o=!1,onOversize:n}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(ee(e),!o))throw Ze(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let l=await e.text(),f=Buffer.byteLength(l,"utf8");if(f>t){if(!o)throw Ze(r,`body ${f} bytes`,t);return Buffer.from(l,"utf8").subarray(0,t).toString("utf8")}return l}let d=[],c=0,p=!1;try{for(;;){let{value:l,done:f}=await s.read();if(f)break;if(l&&(d.push(Buffer.from(l)),c+=no(l),c>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof n=="function"&&n(),!o))throw Ze(r,`streamed ${c} bytes`,t);let m=Buffer.concat(d);return(p?m.subarray(0,t):m).toString("utf8")}function Zt(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function oo(e,{fetchImpl:t,method:r,headers:o,body:n,timeoutMs:i,lookupFn:s,realFetch:d,untrustedUrl:c=!1,maxResponseBytes:p=null,importUndici:m,validateResponse:l,signal:f}){let u=new AbortController,g=setTimeout(()=>u.abort(),i),w=f?typeof AbortSignal.any=="function"?AbortSignal.any([f,u.signal]):f:u.signal,y=null,$=t,N=s?{lookupFn:s}:{};if(c&&!d&&!Ye($))throw Q(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let B=async(E,{status:x=null}={})=>{let S=await Ke(E,N);if(!S.ok)throw Q(x==null?`HTTP refused ${E}: ${S.error}`:`HTTP redirect to ${E} ${S.error}`,x==null?{}:{status:x});let h=new URL(E).hostname;if(d){if(y&&(await y.close(),y=null),!y)try{y=await Je({requireUndici:!0,...m?{importUndici:m}:{}})}catch(k){throw Q(x==null?`HTTP refused ${E}: ${k?.message||k}`:`HTTP redirect to ${E} refused: ${k?.message||k}`,x==null?{}:{status:x})}y.pin(h,S.addresses),$=y.fetch}else Ut($,h,S.addresses);return S};try{let E=String(e),x={...o||{}};c&&await B(E);for(let S=0;S<=Gt;S+=1){let h=await $(E,{method:r,headers:x,body:n,signal:w,redirect:"manual"});if(Wn.has(h.status)){if(r!=="GET"&&r!=="HEAD"){let T=await Xt(h,p??Vn,{url:E,truncate:!0}),C=new Error(`HTTP ${h.status} ${r} ${E} redirected non-idempotent request`);throw C.status=h.status,C.body=Zt(T)??T.slice(0,300),C}if(S===Gt)throw ee(h),new Error(`HTTP redirect loop for ${e}`);let O=h.headers?.get?.("location"),L;try{L=Gn(O,E)}catch(T){throw ee(h),T}let G=!Yn(L,E);if(ee(h),G&&(x=Jn(x)),c)await B(L,{status:h.status});else if(G){let T=await Ke(L,N);if(!T.ok){let C=new Error(`HTTP redirect from ${E} ${T.error}`);throw C.status=h.status,C.retryable=!1,C}d&&T.addresses?.length&&(y||(y=await Je(m?{importUndici:m}:{})),y&&(y.pin(new URL(L).hostname,T.addresses),$=y.fetch))}E=L;continue}if(typeof l=="function")try{await l(h,{url:E})}catch(O){throw ee(h),Q(O?.message||String(O))}let k=await Xt(h,p,{url:E,onOversize:()=>u.abort()}),pe=Zt(k);if(!h.ok){let O=new Error(`HTTP ${h.status} ${r} ${E}`);throw O.status=h.status,O.retryAfter=h.headers?.get?.("retry-after")??null,O.body=pe??k.slice(0,300),O}return pe??k}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(g),y&&await y.close()}}async function xe(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let o=t.timeoutMs??12e3,n=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},s=t.body;s!=null&&typeof s!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",s=JSON.stringify(s));let d=Number.isInteger(t.retries)?Math.max(t.retries,0):Un,c=t.lookupFn,p=!t.fetchImpl,m=t.untrustedUrl===!0,l=t.importUndici,f=t.validateResponse,u=t.signal,g=Number(t.maxResponseBytes),w=Number.isFinite(g)&&g>0?Math.floor(g):null,y=async()=>{let x;for(let S=0;S<=d;S++){u?.throwIfAborted?.();try{return await oo(e,{fetchImpl:r,method:n,headers:i,body:s,timeoutMs:o,lookupFn:c,realFetch:p,untrustedUrl:m,maxResponseBytes:w,importUndici:l,validateResponse:f,signal:u})}catch(h){x=h;let k=h?.status,pe=h?.name==="AbortError"||h?.name==="TimeoutError"||u?.aborted,O=new Set([408,425,429]),L=h?.retryable===!1?!1:k!=null?O.has(k)||zn.has(k)&&Kt.has(n):!pe&&Kt.has(n);if(S===d||!L)throw h;let G=to(S,h?.retryAfter);u?await new Promise((T,C)=>{let Cn=setTimeout(T,G);u.addEventListener("abort",()=>{clearTimeout(Cn),C(u.reason||new DOMException("Aborted","AbortError"))},{once:!0})}):await ro(G)}}throw x};if(!(t.dedupe!==!1&&!u&&Qn(n,s)))return y();let N=eo(n,e,i,{untrustedUrl:m,maxResponseBytes:w},s),B=Xe.get(N);if(B)return B;let E=y().finally(()=>Xe.delete(N));return Xe.set(N,E),E}var zn,Kt,Un,Jt,Qt,Wn,Gt,Vn,Xe,Xn,Zn,ro,Se=a(()=>{Wt();zn=new Set([408,425,429,500,502,503,504]),Kt=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Un=2,Jt=4e3,Qt=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],Wn=new Set([301,302,303,307,308]),Gt=3,Vn=64*1024;Xe=new Map,Xn=/(?:^|_)(send|submit|broadcast|sign|requestAirdrop)(?=[A-Z_]|$)/i,Zn=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);ro=e=>new Promise(t=>setTimeout(t,e))});var er=a(()=>{Se()});var tr=a(()=>{er()});var Ka,Ja,et=a(()=>{D();tr();Ka=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Ja=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"})});var Xa,tt=a(()=>{D();Xa="0x"+"00".repeat(32)});var io,rc,rt=a(()=>{tt();D();io=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),rc=Object.freeze(io.map(e=>e[0]))});var Ae=a(()=>{D()});import{TypedDataEncoder as ac,getAddress as cc,isAddress as lc}from"ethers";var ao,co,ir=a(()=>{ye();ao=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),co=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]})});var fc,sr=a(()=>{fc=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"})});var ar=a(()=>{});import{TypedDataEncoder as bc,getAddress as xc,isAddress as Sc}from"ethers";var lo,Nc,uo,Cc,cr=a(()=>{Se();ge();sr();ar();ye();lo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Nc=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),uo=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Cc=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]})});import{TypedDataEncoder as $c,getAddress as Lc}from"ethers";var Dc,nt=a(()=>{ir();cr();Dc=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"])});import{Interface as ur}from"ethers";var go,el,yo,tl,rl,nl,ol,Eo,il,ve=a(()=>{F();ge();ye();Ee();ze();Ue();et();rt();Ae();nt();go=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]),el=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),yo=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),tl=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),rl=new ur(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),nl=new ur(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),ol=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}}),Eo=Object.freeze([...go]),il=Object.freeze({...yo})});import{encode as cl}from"@msgpack/msgpack";import{keccak256 as ul,verifyTypedData as dl}from"ethers";var fl,pl,ot=a(()=>{fl=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),pl=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]})});var it=a(()=>{Ae()});import{ed25519 as xl}from"@noble/curves/ed25519.js";import{base58 as Al}from"@scure/base";import{RawTx as kl,SigHash as Il,Transaction as Ol}from"@scure/btc-signer";import{Transaction as Nl,keccak256 as Cl,verifyTypedData as _l}from"ethers";var st=a(()=>{ot();it()});import{base58 as Fl}from"@scure/base";var ke=a(()=>{ve();Ee();F();st()});var fr=a(()=>{ke();ve()});import{wordlists as So}from"ethers";function Io(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return ko.has(t.length)&&t.every(r=>So.en.getWordIndex(r)>=0)}function Co(e){let t=pr(e);return No.has(t)||To.test(t)}function pr(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function _o(e){let t=pr(e);return[...Ao].some(r=>t.includes(r))}function Ro(e,t,r){if(typeof t=="string"){if(vo.some(o=>o.test(t))||Io(t))throw new te(r);if(Oo.test(t)&&!Co(e))throw new te(r)}}function at(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return Ro(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((n,i)=>at(n,`${t}[${i}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let n of Object.keys(e).sort()){let i=`${t}.${n}`;if(_o(n))throw new te(i);e[n]!==void 0&&(o[n]=at(e[n],i,n))}return o}function ct(e){return at(e)}var Ao,vo,ko,Oo,To,No,te,Ie=a(()=>{Ao=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),vo=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],ko=new Set([12,15,18,21,24]);Oo=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,To=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,No=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);te=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}}});import{wordlists as Ql}from"ethers";var mr,tu,z=a(()=>{Ie();mr=64*1024,tu=32*1024});var Po,ou,iu,Te=a(()=>{z();Po=["schemaVersion","buildVersion","recordType","execution","custody"],ou=[...Po,"recordHash"],iu=Object.freeze({signed:new Set(["workflow.signed","legacy.signed"]),submitted:new Set(["workflow.submitted","legacy.broadcast"]),finalized:new Set(["workflow.finalized"]),reorged:new Set(["workflow.reorged"]),orphaned:new Set(["workflow.orphaned"]),compensating:new Set(["workflow.compensating"]),compensated:new Set(["workflow.compensated"])})});var Bo,Ar,uu,pt=a(()=>{z();Te();Bo=Object.freeze(["draft","checked","approval","signed","submitted","finalized","reorged","orphaned","compensating","compensated","failed","cancelled"]),Ar=Object.freeze(["workflow.drafted","workflow.checked","workflow.approval_requested","workflow.approval_granted","workflow.signed","workflow.submitted","workflow.finalized","workflow.reorged","workflow.orphaned","workflow.compensating","workflow.compensated","workflow.failed","workflow.cancelled","workflow.annotated"]),uu=new Set(Ar)});var Ho,vr=a(()=>{z();pt();Ho=64*1024*1024});var gu,yu,Eu,kr=a(()=>{gu=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),yu=Object.freeze(["read","simulate"]),Eu=1440*60});function mt(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return zo.test(t)||Uo.includes(r)}function Wo(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Or.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Tr(e){let t;try{t=JSON.stringify(e)}catch(n){throw new _("$",`unserializable-payload: ${String(n?.message||n)}`)}if(t===void 0)return"null";let r=Wo(t);for(let{rule:n,re:i}of Ir)if(i.test(r))throw new _("$<serialized>",n);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new _("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(n,i)=>{if(n&&mt(n))throw new _(`$<serialized>.${n}`,"forbidden-key-name");return i}),t}function P(e,t="$",r=new Set,o=""){if(e==null)return e;if(typeof e=="string"){let n=Or.includes(String(o).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Ir)if(!(n&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new _(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[n,i]of e.entries()){if(typeof n=="string"&&mt(n))throw new _(`${t}[${JSON.stringify(n)}]`,"forbidden-key-name");P(n,`${t}[key]`,r),P(i,`${t}[${String(n)}]`,r)}return e}if(e instanceof Set){let n=0;for(let i of e.values())P(i,`${t}[${n++}]`,r);return e}if(Array.isArray(e))return e.forEach((n,i)=>P(n,`${t}[${i}]`,r)),e;for(let[n,i]of Object.entries(e)){if(mt(n))throw new _(`${t}.${n}`,"forbidden-key-name");P(i,`${t}.${n}`,r,n)}return e}var _,zo,Uo,Ir,Or,wt=a(()=>{kr();_=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},zo=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Uo=Object.freeze(["privkey","wif","xprv","seed"]);Ir=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Or=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"])});var ht,Cu,Nr=a(()=>{wt();ht=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),Cu=Object.freeze(Object.fromEntries(ht.map((e,t)=>[e,Object.freeze(t+1<ht.length?[ht[t+1]]:[])])))});var Vo,Cr=a(()=>{Nr();z();Te();Vo=Object.freeze({intent:"draft",quote_comparison:"draft",simulation:"draft",prepared:"checked",approval:"approval",signed:"signed",broadcast:"submitted",settlement:"finalized",balance_delta:"compensated",position:"compensated"})});var _r=a(()=>{z();Te();pt();vr();Cr()});var Jo,Go,Yo,md,wd,hd,gd,yd,Xo,Ed,Rr=a(()=>{Jo=Object.freeze(["owner","operator","agent","viewer"]),Go=Object.freeze(["tenant","config","policy","grant","workflow","trade","receipt","audit","telemetry","context","lifecycle"]),Yo=Object.freeze({read:"read",create:"create",update:"update",delete:"delete",manage:"manage",prepare:"prepare",cancel:"cancel",export:"export",approve:"approve"}),md=Object.freeze(["owner"]),wd=Object.freeze({ALLOW_ROLE_PERMISSION:"allow.role_permission",DENY_MISSING_CONTEXT:"deny.missing_context",DENY_INVALID_CONTEXT:"deny.invalid_context",DENY_INVALID_REQUEST:"deny.invalid_request",DENY_UNKNOWN_RESOURCE:"deny.unknown_resource",DENY_UNKNOWN_ACTION:"deny.unknown_action",DENY_UNBOUND_OBJECT:"deny.unbound_object",DENY_TENANT_MISMATCH:"deny.tenant_mismatch",DENY_RESOURCE_MISMATCH:"deny.resource_mismatch",DENY_ROLE_PERMISSION:"deny.role_permission",DENY_POLICY_NOT_APPROVER:"deny.policy_not_approver"}),hd=new Set(Jo),gd=new Set(Go),yd=new Set(Object.values(Yo)),Xo=Object.freeze({owner:Object.freeze(["tenant:read","tenant:manage","config:read","config:manage","policy:read","policy:manage","grant:read","grant:create","grant:update","grant:delete","grant:manage","workflow:read","workflow:create","workflow:update","workflow:delete","workflow:cancel","workflow:approve","trade:read","trade:prepare","receipt:read","receipt:export","audit:read","audit:export","telemetry:read","telemetry:create","telemetry:export","context:read","context:create","context:update","context:delete","context:manage","context:export","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:delete","lifecycle:manage","lifecycle:approve","lifecycle:export"]),operator:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","workflow:cancel","trade:read","trade:prepare","receipt:read","audit:read","telemetry:read","telemetry:create","context:read","context:create","context:update","context:delete","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:manage"]),agent:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","trade:read","trade:prepare","receipt:read","telemetry:create","context:read","context:create","context:update","lifecycle:read"]),viewer:Object.freeze(["tenant:read","config:read","grant:read","workflow:read","trade:read","receipt:read","audit:read","telemetry:read","context:read","lifecycle:read"])}),Ed=Object.freeze(Object.fromEntries(Object.entries(Xo).map(([e,t])=>[e,Object.freeze([...t])])))});var Zo,Qo,ei,Ad,vd,kd,Id,Od,Td,gt=a(()=>{Rr();Zo=Object.freeze(["succeeded","denied","invalid","failed","cancelled","timed_out","unavailable","skipped"]),Qo=Object.freeze(["workflow","task","intent","plan","run","event","eval"]),ei=Object.freeze(["taskId","intentId","planId","runId","eventId"]),Ad=Object.freeze({maxAttributes:24,maxKeyLength:48,maxStringLength:256,maxArrayLength:8}),vd=new Set(Zo),kd=new Set(Qo),Id=new Set(ei),Od=Object.freeze(["authorization","bearer","cookie","credential","password","passphrase","secret","token","privatekey","privkey","seed","mnemonic","keystore","signature","prompt","systemmessage","usermessage","assistantmessage","rawtransaction","signedtransaction","serializedtransaction","transactionbytes","calldata","callbytes","inputdata"]),Td=Object.freeze({taskId:"x-oracle-task-id",intentId:"x-oracle-intent-id",planId:"x-oracle-plan-id",runId:"x-oracle-run-id",eventId:"x-oracle-event-id"})});var Ld,$r=a(()=>{_r();gt();Ld=Object.freeze({"workflow.cancelled":"cancelled","workflow.failed":"failed"})});var jd,Lr=a(()=>{gt();jd=32*1024*1024});var Hd,zd,Ud,U=a(()=>{Hd=Object.freeze({N:1<<17,r:8,p:1}),zd=256*1024*1024,Ud=16*1024});var Vd,Pr=a(()=>{Vd=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}})});import{homedir as yt}from"node:os";import{join as Et}from"node:path";var Br,ti,Yd,Dr=a(()=>{Br=process.env.ORACLE_PUBLIC_DESKTOP==="1",ti=Br?process.env.ORACLE_CONFIG_DIR||Et(yt(),".config","oracle"):Et(yt(),".config","oracle"),Yd=Br?ti:Et(yt(),".config","mad-desk")});var tf,rf,nf,Fr=a(()=>{Dr();tf="0".repeat(64),rf=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"}),nf=Promise.resolve()});var bt=a(()=>{Fr();D();U();ke()});var jr=a(()=>{});var zr={};me(zr,{SIGN_TIME_REVIEW_VERSION:()=>ri,SignTimeReviewSecretError:()=>re,createSignTimeReview:()=>Hr});function xt(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string"){let n=e.trim().split(/\s+/);if(ai.test(e)||ci.has(n.length)&&n.every(i=>/^[a-z]+$/i.test(i)))throw new re(t);return e}if(typeof e=="bigint")return e.toString();if(typeof e=="number"){if(!Number.isSafeInteger(e))throw new TypeError(`sign-time review: safe integer required at ${t}`);return e}if(Array.isArray(e))return e.map((n,i)=>xt(n,`${t}[${i}]`,r));j(e,t);let o={};for(let n of Object.keys(e).sort()){let i=n.replace(/[^a-z0-9]/gi,"");if(si.test(i))throw new re(`${t}.${n}`);e[n]!==void 0&&(o[n]=xt(e[n],`${t}.${n}`,n))}return o}function j(e,t){if(e==null||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`sign-time review: ${t} must be a plain object`);return e}function ne(e,t){if(e==null||e==="")throw new TypeError(`sign-time review: ${t} required`);return e}function W(e,t){let r=String(ne(e,t)).toLowerCase();if(!ni.test(r))throw new TypeError(`sign-time review: ${t} must be an EVM address`);return r}function R(e,t,{positive:r=!1}={}){try{let o=BigInt(ne(e,t));if(o<0n||r&&o===0n)throw new Error;return o.toString()}catch{throw new TypeError(`sign-time review: ${t} must be an unsigned integer`)}}function St(e,t){if(typeof e!="string"||e.length===0||e.length>500||e!==e.trim())throw new TypeError(`sign-time review: ${t} must be non-empty text`);return e}function Mr(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))Mr(t);Object.freeze(e)}return e}function li(e,t){if(typeof e=="boolean")return{passed:e,reason:e?"passed":"failed"};j(e,t);let r=e.passed??e.ok??e.allowed;if(typeof r!="boolean")throw new TypeError(`sign-time review: ${t} needs a boolean result`);let o=e.reason??e.message??e.name??(r?"passed":"failed");return{...e,passed:r,reason:St(String(o),`${t}.reason`)}}function ui(e){if(!Array.isArray(e))throw new TypeError("sign-time review: policyChecks must be an array");let t=e.map((o,n)=>li(o,`policyChecks[${n}]`)),r=t.filter(o=>!o.passed);return{checks:t,passed:t.length-r.length,failed:r.length,reasons:r.map(o=>o.reason)}}function di(e){if(e==null)return null;if(j(e,"simulation"),typeof e.status!="string"||!["ok","success","failed","error","unavailable","unknown"].includes(e.status))throw new TypeError("sign-time review: simulation.status is invalid");if(e.willRevert!==!0&&e.willRevert!==!1&&e.willRevert!==null)throw new TypeError("sign-time review: simulation.willRevert must be boolean or null");let t={status:e.status,willRevert:e.willRevert??null,summary:St(String(e.summary??"simulation result recorded"),"simulation.summary")};return e.gasEstimate!=null&&(t.gasEstimate=R(e.gasEstimate,"simulation.gasEstimate")),e.gasLimit!=null&&(t.gasLimit=R(e.gasLimit,"simulation.gasLimit")),t}function fi(e){if(e==null)return null;if(!Array.isArray(e)||e.length===0)throw new TypeError("sign-time review: assetDeltas must be a non-empty array");return e.map((t,r)=>{j(t,`assetDeltas[${r}]`);let o=R(t.before,`assetDeltas[${r}].before`),n=R(t.after,`assetDeltas[${r}].after`),i=(BigInt(n)-BigInt(o)).toString(),s;try{s=t.delta==null?i:BigInt(t.delta).toString()}catch{throw new TypeError(`sign-time review: assetDeltas[${r}].delta must be an integer`)}if(s!==i)throw new TypeError(`sign-time review: assetDeltas[${r}].delta does not match before/after`);return{...t,asset:St(String(ne(t.asset??t.token,`assetDeltas[${r}].asset`)),`assetDeltas[${r}].asset`),before:o,after:n,delta:s}})}function pi(e){if(e==null)return[];if(!Array.isArray(e))throw new TypeError("sign-time review: approvalDeltas must be an array");return e.map((t,r)=>{j(t,`approvalDeltas[${r}]`);let o=R(t.amount??t.after,`approvalDeltas[${r}].amount`);if(t.revokeLike!=null&&typeof t.revokeLike!="boolean")throw new TypeError(`sign-time review: approvalDeltas[${r}].revokeLike must be boolean`);return{token:W(t.token,`approvalDeltas[${r}].token`),spender:W(t.spender,`approvalDeltas[${r}].spender`),owner:W(t.owner,`approvalDeltas[${r}].owner`),amount:o,revokeLike:t.revokeLike??BigInt(o)===0n}})}function Hr(e={}){j(e,"input");let t=xt(e),r=t.tx==null?t:j(t.tx,"tx"),o=R(t.chainId??r.chainId,"chainId",{positive:!0}),n=W(t.account??t.from??r.from,"account/from"),i=W(t.destination??t.to??r.to,"destination/to"),s=String(ne(t.prepareHash,"prepareHash")).toLowerCase();if(!ii.test(s))throw new TypeError("sign-time review: prepareHash must be a 32-byte hash");let d=t.route??t.venue;if(d==null)throw new TypeError("sign-time review: route/venue required");let c=t.decodedCalldata??t.decodedAction;if(c==null)throw new TypeError("sign-time review: decodedCalldata or decodedAction required");let p=String(ne(t.calldata??t.data??r.data,"calldata/data")).toLowerCase();if(!oi.test(p))throw new TypeError("sign-time review: calldata/data must be even-length hex");let m=t.policyChecks!==void 0&&t.policyChecks!==null,l=ui(m?t.policyChecks:[]),f=di(t.simulation),u=fi(t.assetDeltas),g=pi(t.approvalDeltas),w=t.allowlistHits??[];if(!Array.isArray(w))throw new TypeError("sign-time review: allowlistHits must be an array");let y=f?.willRevert===!0||["failed","error"].includes(f?.status),$=f!=null&&f.willRevert===!1&&["ok","success"].includes(f.status),N=y||l.failed>0?"BLOCKED":$&&m&&l.checks.length>0&&u!=null?"READY":"UNKNOWN",B=typeof c=="string"?c:c.method??c.action??c.type??"transaction",E=`${N}: review ${B} on chain ${o}; policy ${l.passed} passed, ${l.failed} failed; ${u?.length??0} asset delta${u?.length===1?"":"s"}; local signature required`,x={reviewVersion:1,status:N,requiresLocalSignature:!0,signingLocal:!0,custody:"none",execution:"review-only",chainId:o,account:n,from:n,route:d,venue:t.venue??(typeof d=="string"?d:d.venue??d.provider??null),destination:i,to:i,...t.spender==null?{}:{spender:W(t.spender,"spender")},prepareHash:s,...t.decodedCalldata!==void 0?{decodedCalldata:t.decodedCalldata}:{decodedAction:t.decodedAction},calldata:p,data:p,selector:p.length>=10?p.slice(0,10):null,value:R(t.value??r.value??0,"value"),...(t.gasEstimate??r.gasEstimate)==null?{}:{gasEstimate:R(t.gasEstimate??r.gasEstimate,"gasEstimate")},...(t.gasLimit??r.gasLimit)==null?{}:{gasLimit:R(t.gasLimit??r.gasLimit,"gasLimit")},simulation:f,policyChecks:l,allowlistHits:w,assetDeltas:u,approvalDeltas:g,summary:E};return Mr(x)}var ri,ni,oi,ii,si,ai,ci,re,At=a(()=>{ri=1,ni=/^0x[0-9a-f]{40}$/,oi=/^0x(?:[0-9a-f]{2})*$/,ii=/^(?:0x)?[0-9a-f]{64}$/,si=/(privatekey|privkey|secretkey|seedphrase|mnemonic|passphrase|password|keystore|keymaterial|wif|xprv|xpriv|bearer|authorization|signature|apikey|credential)/i,ai=/\b(?:[5KL][1-9A-HJ-NP-Za-km-z]{50,51}|xprv[0-9A-Za-z]{50,})\b/,ci=new Set([12,15,18,21,24]),re=class extends Error{constructor(t){super(`sign-time review refused: secret-bearing field at ${t}`),this.name="SignTimeReviewSecretError",this.code="SIGN_TIME_REVIEW_SECRET"}}});import{readFileSync as mf,readdirSync as wf,existsSync as mi}from"node:fs";import{dirname as wi,join as oe}from"node:path";import{fileURLToPath as hi}from"node:url";function gi(){let e=[oe(ie,"descriptors"),oe(ie,"clear-sign","descriptors"),oe(ie,"..","clear-sign","descriptors"),oe(ie,"..","..","clear-sign","descriptors"),oe(ie,"..","..","..","clear-sign","descriptors")];for(let t of e)if(mi(t))return t;return e[0]}var ie,Ef,bf,Ur=a(()=>{F();ie=wi(hi(import.meta.url));Ef=gi(),bf=(1n<<256n)-1n});var Wr=a(()=>{At();F();Ur()});import{Wallet as Tf}from"ethers";import{base58 as Cf}from"@scure/base";import{ed25519 as Rf}from"@noble/curves/ed25519.js";import{NETWORK as Lf,TEST_NETWORK as Pf,WIF as Bf,p2wpkh as Df}from"@scure/btc-signer";import{pubECDSA as qf}from"@scure/btc-signer/utils.js";var Vr=a(()=>{});var Hf,zf,Uf,Wf,Vf,Kf,Jf,Gf,Yf,Xf,Zf,Kr=a(()=>{bt();Hf=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),zf=Object.freeze(["binance","bybit","okx","coinbase"]),Uf=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),Wf=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Vf=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),Kf=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),Jf=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),Gf=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),Yf=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),Xf=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Zf=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"})});var Jr=a(()=>{U()});var bi,Gr,Ce=a(()=>{bi=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),Gr=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"})});var Yr=a(()=>{Ce()});var cp,Xr=a(()=>{Ce();Yr();cp=256*1024});var Zr=a(()=>{Ce();Xr()});var Qr=a(()=>{U()});import v from"node:path";import xi from"node:os";import{createHash as Si,randomBytes as tm}from"node:crypto";import{Interface as vt,keccak256 as nm}from"ethers";import{Transaction as im}from"@scure/btc-signer";import{ed25519 as am}from"@noble/curves/ed25519.js";function en(e){let t=process.env.ORACLE_SIGNER_STATE_DIR||v.join(process.env.XDG_STATE_HOME||v.join(xi.homedir(),".local","state"),"oracle"),r=Si("sha256").update(v.resolve(e)).digest("hex").slice(0,16);return{vault:v.join(e,"vault.json"),policy:v.join(e,"signer-policy.json"),policyKey:v.join(e,"policy-integrity-key"),policyAnchor:v.join(t,`signer-policy-${r}.high-water`),ledger:v.join(e,"signer-ledger.json"),ledgerAnchor:v.join(t,`signer-ledger-${r}.high-water`),cexOrders:v.join(e,"cex-orders.json"),cexOrdersAnchor:v.join(t,`cex-orders-${r}.high-water`),token:v.join(e,"signer-token"),lock:v.join(t,`signer-${r}.lock`),workflowLedger:v.join(e,"workflow-events.jsonl")}}var Dm,Fm,qm,tn=a(()=>{fr();$r();Lr();ke();U();Pr();bt();jr();F();Wr();ve();Ee();st();et();rt();Ae();it();tt();ot();ze();Ue();nt();Vr();Kr();Jr();Zr();Qr();Dm=new vt(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Fm=new vt(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),qm=new vt(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"])});import kt from"node:fs";import rn from"node:path";import{homedir as Ai}from"node:os";function vi(){return process.env.ORACLE_CONFIG_DIR||rn.join(Ai(),".config","oracle")}function se(){let e=en(rn.join(vi(),"signer")),t=kt.existsSync(e.vault),r=kt.existsSync(e.lock),o=t?r?"disarmed":"armed-owner-confirmed":"inert-no-key";return{vaultExists:t,policyConfigured:kt.existsSync(e.policy),armed:t&&!r,disarmed:r,capabilities:{swap:o,bridge:o},autonomous:!1,note:"Keys stay on this machine. Exact confirmation is required before any broadcast."}}var Ym,It=a(()=>{Fe();qt();tn();U();Ym=Object.freeze([{type:"function",function:{name:"vault_status",description:"Read local Oracle vault/signer readiness. Never returns key material.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_status",description:"Ping the loopback signer. Fails closed if it is not running.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_pending",description:"List pending local-signer artifacts. Read-only. Does not approve, sign, or broadcast.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_queue",description:"Queue a prepared unsigned artifact on the loopback signer. Does not broadcast.",parameters:{type:"object",properties:{artifact:{type:"object"}},required:["artifact"],additionalProperties:!1}}},{type:"function",function:{name:"signer_ack",description:"Execute one pending artifact through the armed local signer (same path as Telegram Allow). Fails if the signer is not running or disarmed. Never holds keys.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_deny",description:"Drop one pending local-signer artifact. Nothing signed.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_execute",description:"Broadcast one already-confirmed local artifact. Requires a one-use confirmationNonce from the local signer TTY confirm. Cannot mint confirmation itself.",parameters:{type:"object",properties:{artifact:{type:"object"},confirmationNonce:{type:"string",minLength:32,maxLength:128}},required:["artifact","confirmationNonce"],additionalProperties:!1}}},{type:"function",function:{name:"signer_disarm",description:"Global kill switch. Stops the local signer from broadcasting.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"receipt_report",description:"Receipt or it did not happen. Requires transactionHash/hash/txid.",parameters:{type:"object",properties:{receipt:{type:"object"},transactionHash:{type:"string"},hash:{type:"string"},txid:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"watch_create",description:"Create an alert-only watch. Never execute.",parameters:{type:"object",properties:{chain:{type:"string"},token:{type:"string"},condition:{type:"string"},note:{type:"string"}},required:["chain","token","condition"],additionalProperties:!1}}},{type:"function",function:{name:"watch_list",description:"List local alert-only watches.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"portfolio_snapshot",description:"How to read the one portfolio snapshot. knownUsd is incomplete if a provider is missing.",parameters:{type:"object",properties:{},additionalProperties:!1}}}])});import _e from"node:fs";import ki from"node:os";import K from"node:path";import{fileURLToPath as Ii}from"node:url";function nn(){return process.env.ORACLE_FAKE_HOME||ki.homedir()}function Ti(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function Re(){return Ti()?process.env.ORACLE_CONFIG_DIR||K.join(nn(),".config","oracle"):K.join(nn(),".config","oracle")}function Ni(){return K.join(Re(),"desk.json")}function Ci(){return K.join(Re(),"env")}function V({force:e=!1}={}){if(V._done&&!e)return V._result||null;V._done=!0;let t={},r=(n,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,t[n]=s))};try{let n=Ci();if(_e.existsSync(n))for(let i of _e.readFileSync(n,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let d=s[2];(d.startsWith('"')&&d.endsWith('"')||d.startsWith("'")&&d.endsWith("'"))&&(d=d.slice(1,-1)),r(s[1],d)}}catch{}try{let n=Ni();if(_e.existsSync(n)){let i=JSON.parse(_e.readFileSync(n,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let o=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return o&&(r("ORACLE_DESK_URL",o),r("ORACLE_DATA_URL",o),r("ORACLE_API_URL",o),r("ORACLE_PUBLIC_URL",o),r("MAD_DESK_URL",o)),V._result=Object.keys(t).length?t:null,V._result}var Oi,rw,on=a(()=>{Oi=K.dirname(Ii(import.meta.url)),rw=K.resolve(Oi,"../..");try{V()}catch{}});function $e(e){return String(e||"").trim()||void 0}function Ri(e,{required:t=!1}={}){let r=$e(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!_i.has(r))throw new Error(`unsupported provider: ${r}`);return r}function $i(e,{required:t=!1}={}){let r=$e(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function Li(e){let t=$e(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let o=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=o==="localhost"||o==="127.0.0.1"||o==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function sn({provider:e,model:t,baseUrl:r}={},{requireModel:o=!1}={}){let n=Ri(e),i=$i(t,{required:o});if(n==="custom")return{provider:n,...i?{model:i}:{},baseUrl:Li(r)};if($e(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...i?{model:i}:{}}}var _i,an=a(()=>{_i=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"])});import cn from"node:fs";import Pi from"node:path";function Di(){return Pi.join(Re(),"model.json")}function J(e){return String(e||"").trim()||void 0}function Fi(e={}){let t=J(e.backend)?.toLowerCase()||"auto",r=sn({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),o=J(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),i=J(e.reasoningEffort),s=J(e.computeHost||e.remoteHost),d=J(e.computeUser||e.remoteUser),c=J(e.computePath||e.remotePath);if(!Bi.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(o&&!/^[A-Z][A-Z0-9_]*$/.test(o))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...o?{apiKeyEnv:o}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...i?{reasoningEffort:i}:{},...s?{computeHost:s}:{},...d?{computeUser:d}:{},...c?{computePath:c}:{}}}function ln(){let e=Di();if(!cn.existsSync(e))return null;try{return Fi(JSON.parse(cn.readFileSync(e,"utf8")))}catch{return null}}var Bi,un=a(()=>{on();an();Bi=new Set(["auto","standalone","hermes","remote","arch"])});import{Interface as qi,getAddress as ji}from"ethers";function Ot(e,t){try{return ji(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Mi(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function Tt(e){return e==null?null:Number.parseInt(String(e),16)}function zi(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let o=Ft(e,r);return o||Hi[Number(e)]||null}function Wi(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Ui.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}function Vi(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Ki(e){if(e?.error)throw Vi(e.error);return e?.result}function Ji(e,t,r){return`${e}
+var Zn=Object.defineProperty;var l=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var ke=(e,t)=>{for(var r in t)Zn(e,r,{get:t[r],enumerable:!0})};function tr(e){return Qn.get(Number(e))||null}function rr(e,t=process.env){let r=tr(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}var Ie,Qn,Ze=l(()=>{Ie={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Qn=new Map(Object.values(Ie).map(e=>[e.chainId,e]))});function ue(e){let t=e?.transactionHash||e?.hash||e?.txid||null;return t?{happened:!0,hash:String(t),note:null}:{happened:!1,hash:null,note:"no transaction hash \u2014 the action did not succeed"}}var Qe=l(()=>{});var nr=l(()=>{});var or=l(()=>{});var de=l(()=>{});var ee=l(()=>{});var Te=l(()=>{de();ee()});import{isAddress as oa}from"ethers";var tt=l(()=>{Te();de();ee()});import{Interface as ro,isAddress as ua}from"ethers";var ma,ir=l(()=>{tt();de();ee();ma=new ro(["function approve(address spender,uint256 amount) returns (bool)"])});import{Interface as no,isAddress as ga}from"ethers";var xa,Sa,sr=l(()=>{tt();de();ee();xa=new no(["function approve(address spender,uint256 amount) returns (bool)"]),Sa=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"})});var J=l(()=>{});import{Interface as oo,MaxUint256 as Na,isAddress as _a,keccak256 as Ca,toUtf8Bytes as Ra}from"ethers";var ja,K=l(()=>{or();ir();sr();J();ee();ja=new oo(["function approve(address spender,uint256 amount) returns (bool)"])});var qa,Ma,Ne=l(()=>{qa=300*1e3,Ma=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});var _e=l(()=>{K()});import{Address as Va,NETWORK as Ja,OutScript as Ka,RawTx as Ga,SigHash as Ya,TEST_NETWORK as Xa,Transaction as Za}from"@scure/btc-signer";var ot=l(()=>{});import{createHash as io}from"node:crypto";import{base58 as rc}from"@scure/base";import{getCompiledTransactionMessageDecoder as oc}from"@solana/transaction-messages";var ar,ic,it=l(()=>{ar=e=>io("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),ic=new Map([[ar("route"),{name:"route",prefixBytes:0}],[ar("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]])});import G from"node:net";import so from"node:dns";function Ce(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let d=c.split(":"),m=d.at(-1);if(m?.includes(".")){let p=m.split(".").map(Number);if(p.length!==4||p.some(h=>!Number.isInteger(h)||h<0||h>255))return null;d.splice(d.length-1,1,(p[0]<<8|p[1]).toString(16),(p[2]<<8|p[3]).toString(16))}return d.some(p=>!/^[0-9a-f]{1,4}$/.test(p))?null:d.map(p=>Number.parseInt(p,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let u=t.includes("::"),a=8-i.length-s.length;if(!u&&a!==0||u&&a<1)return null;let f=[...i,...Array(Math.max(0,a)).fill(0),...s];return f.length!==8?null:Uint8Array.from(f.flatMap(c=>[c>>8,c&255]))}function st(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function at(e){if(G.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(G.isIPv6(e)){let t=Ce(e);if(!t)return!1;let r=Ce("::ffff:0:0");return st(t,r,96)?at([...t.slice(12)].join(".")):st(t,Ce("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>st(t,Ce(o),i)):!1}return!1}function co(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(ao.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=G.isIP(r);return n!==0&&!at(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function ct(e,{lookupFn:t=so.promises.lookup}={}){let r=co(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:G.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!at(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function lt({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let d=await t();r=d.Agent,n=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(m=>typeof m=="string"?{address:m}:m).filter(m=>m&&m.address).map(m=>({address:m.address,family:m.family||(G.isIPv6(m.address)?6:4)})),u=(d,m,p)=>{i.set(o(d),s(typeof m=="string"?[{address:m,family:p}]:m))},a=d=>{let m=o(d);if(G.isIP(m))return[{address:m,family:G.isIPv6(m)?6:4}];let p=i.get(m);if(!p||!p.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return p},f=new r({connect:{lookup(d,m,p){let h;try{h=a(d)}catch(w){return p(w)}return m?.all?p(null,h):p(null,h[0].address,h[0].family)}}}),c=lo((d,m={})=>n(d,{...m,dispatcher:f}),u);return{dispatcher:f,fetch:c,pin:u,resolve:a,async close(){try{await f.destroy()}catch{}}}}function lo(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[ut]=Object.freeze({pin:t}),e}function dt(e){return typeof e=="function"&&typeof e[ut]?.pin=="function"}function cr(e,t,r){if(!dt(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[ut].pin(t,r)}var ao,ut,lr=l(()=>{ao=new Set(["localhost","metadata.google.internal","metadata.goog"]);ut=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as uo}from"node:crypto";import{types as j}from"node:util";function v(e){return z(`HTTP JSON body refused: ${e}`)}function Eo(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof j[t]=="function"&&j[t](e))}function xo(e){let t=[],r=0,n=0,o=0,i=0,s=new WeakSet,u=c=>{if(r+=Buffer.byteLength(c,"utf8"),r>D.bytes)throw v("serialized byte limit exceeded");t.push(c)},a=c=>{if(Buffer.byteLength(c,"utf8")>D.bytes)throw v("serialized byte limit exceeded");return JSON.stringify(c)},f=(c,d)=>{if(n+=1,n>D.nodes)throw v("node limit exceeded");if(d>D.depth)throw v("depth limit exceeded");if(c===null){u("null");return}if(typeof c=="string"){u(a(c));return}if(typeof c=="boolean"){u(c?"true":"false");return}if(typeof c=="number"){if(!Number.isFinite(c))throw v("non-finite number");u(Object.is(c,-0)?"0":String(c));return}if(typeof c!="object")throw v("unsupported non-JSON value");if(j.isProxy(c))throw v("proxy value");if(Eo(c))throw v("unsupported exotic object");if(s.has(c))throw v("cyclic value");s.add(c);try{if(Object.getOwnPropertySymbols(c).length>0)throw v("symbol-keyed fields are unsupported");if(Array.isArray(c)){let h=Object.getPrototypeOf(c),w=0;for(;h!==null;){if(j.isProxy(h))throw v("proxy array prototype");if(w+=1,w>D.depth)throw v("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(c.length>D.arrayLength)throw v("array length limit exceeded");for(let T=0;T<c.length;T+=1){let P=Object.getOwnPropertyDescriptor(c,String(T));if(!P||!Object.hasOwn(P,"value")||P.enumerable!==!0)throw v("array entries must be dense enumerable own data")}let S=0;for(let T in c){if(i+=1,i>D.fields)throw v("enumeration limit exceeded");if(Object.hasOwn(c,T)&&(S+=1,S>c.length))throw v("named array fields are unsupported")}if(S!==c.length)throw v("array entries must be dense enumerable own data");u("[");for(let T=0;T<c.length;T+=1)T&&u(","),f(Object.getOwnPropertyDescriptor(c,String(T)).value,d+1);u("]");return}let m=Object.getPrototypeOf(c);if(m!==Object.prototype&&m!==null)throw v("non-plain object");let p=[];for(let h in c){if(i+=1,i>D.fields)throw v("enumeration limit exceeded");if(!Object.hasOwn(c,h))continue;if(o+=1,o>D.fields)throw v("field limit exceeded");let w=Object.getOwnPropertyDescriptor(c,h);if(!w||!Object.hasOwn(w,"value")||w.enumerable!==!0)throw v("object fields must be enumerable own data");p.push([h,w.value])}u("{");for(let h=0;h<p.length;h+=1)h&&u(","),u(a(p[h][0])),u(":"),f(p[h][1],d+1);u("}")}finally{s.delete(c)}};return f(e,0),t.join("")}function So(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(j.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let i=Object.getOwnPropertyDescriptor(e,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[n]=String(s)}return t}function Ao(){return Object.assign(Object.create(null),{Accept:"application/json"})}function vo(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function ko(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Re(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=pr.get(e);return t||(t=mr,mr+=1,pr.set(e,t)),`reference:${t}`}function wr(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Io.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function hr(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(wr);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return wr(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&Oo.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function To(e,t,r,n={},o=null){let i=uo("sha256"),s=(a,f)=>{let c=String(f);i.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),i.update("=").update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c).update(`
+`)};s("method",e),s("url",t),Object.keys(r||{}).map((a,f)=>({name:a.toLowerCase(),order:f,value:String(r[a])})).sort((a,f)=>a.name.localeCompare(f.name)||a.order-f.order).forEach((a,f)=>{s(`header-name-${f}`,a.name),s(`header-value-${f}`,a.value)}),s("body",o??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${a}`,n[a]??"-");return i.digest("hex")}function No(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,dr):Math.min(250*2**e,dr)+Math.floor(Math.random()*100)}function z(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function pt(e,t,r){return z(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function Y(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Co(e){return e?e.byteLength??e.length??0:0}async function Ro(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(Y(e),!n))throw pt(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),m=Buffer.byteLength(d,"utf8");if(m>t){if(!n)throw pt(r,`body ${m} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let u=[],a=0,f=!1;try{for(;;){let{value:d,done:m}=await s.read();if(m)break;if(d&&(u.push(Buffer.from(d)),a+=Co(d),a>t)){f=!0;break}}}finally{if(f)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(f&&(typeof o=="function"&&o(),!n))throw pt(r,`streamed ${a} bytes`,t);let c=Buffer.concat(u);return(f?c.subarray(0,t):c).toString("utf8")}function $o(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Lo(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:u,untrustedUrl:a=!1,maxResponseBytes:f=null,sameOriginRedirectsOnly:c=!1,importUndici:d,validateResponse:m,signal:p,redirectPolicy:h="follow",maxRedirects:w=$e}){let S=new AbortController,T=setTimeout(()=>S.abort(),i),P=p?fr?fr([p,S.signal]):p:S.signal,b=null,N=t,M=s?{lookupFn:s}:{};if(a&&!u&&!dt(N))throw z(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let ae=async(y,{status:I=null}={})=>{let O=await ct(y,M);if(!O.ok)throw z(I==null?`HTTP refused ${y}: ${O.error}`:`HTTP redirect to ${y} ${O.error}`,I==null?{}:{status:I});let H=new URL(y).hostname;if(u){if(b&&(await b.close(),b=null),!b)try{b=await lt({requireUndici:!0,...d?{importUndici:d}:{}})}catch(g){throw z(I==null?`HTTP refused ${y}: ${g?.message||g}`:`HTTP redirect to ${y} refused: ${g?.message||g}`,I==null?{}:{status:I})}b.pin(H,O.addresses),N=b.fetch}else cr(N,H,O.addresses);return O};try{let y=String(e),I=Object.assign(Object.create(null),n||{});a&&await ae(y);for(let O=0;O<=w;O+=1){let H=Object.assign(Object.create(null),{method:r,headers:I,body:o,signal:P,redirect:"manual",dispatcher:void 0}),g=await N(y,H);if((h==="error"||w===0)&&g.status>=300&&g.status<400)throw Y(g),z(`HTTP ${g.status} ${r} redirect refused`,{status:g.status,redirectRefused:!0});if(bo.has(g.status)){let $=c===!0&&r==="POST"&&[307,308].includes(g.status)&&hr(r,o);if(r!=="GET"&&r!=="HEAD"&&!$){Y(g);let k=new Error(`HTTP ${g.status} ${r} ${y} redirected non-idempotent request`);throw k.status=g.status,k}if(O===w)throw Y(g),z(`HTTP ${g.status} ${r} redirect budget exhausted`,{status:g.status,redirectRefused:!0});let Qt=g.headers?.get?.("location"),B;try{B=vo(Qt,y)}catch(k){throw Y(g),k}let W=!ko(B,y);if(Y(g),W&&r==="POST"){let k=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw k.status=g.status,k}if(W&&c){let k=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw k.status=g.status,k.retryable=!1,k}if(W&&(I=Ao(I)),a)await ae(B,{status:g.status});else if(W){let k=await ct(B,M);if(!k.ok){let A=new Error(`HTTP redirect from ${y} ${k.error}`);throw A.status=g.status,A.retryable=!1,A}u&&k.addresses?.length&&(b||(b=await lt(d?{importUndici:d}:{})),b&&(b.pin(new URL(B).hostname,k.addresses),N=b.fetch))}y=B;continue}if(typeof m=="function")try{await m(g,{url:y})}catch($){throw Y(g),z($?.message||String($))}let R=await Ro(g,f,{url:y,onOversize:()=>S.abort()}),ce=$o(R);if(!g.ok){let $=new Error(`HTTP ${g.status} ${r} ${y}`);throw $.status=g.status,$.retryAfter=g.headers?.get?.("retry-after")??null,$.body=ce??R.slice(0,300),$}return ce??R}throw new Error(`HTTP redirect loop for ${e}`)}catch(y){if(S.signal.aborted&&!mt(p)){let I=y&&(typeof y=="object"||typeof y=="function")&&!j.isProxy(y)?y:null,O=I?Object.getOwnPropertyDescriptor(I,"oversize"):null;if(!(O&&Object.hasOwn(O,"value")&&O.value===!0))try{if(!I)throw new TypeError("unsafe rejection");Object.defineProperties(I,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let g=new Error("HTTP request timed out");throw Object.defineProperties(g,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),g}}throw y}finally{clearTimeout(T),b&&await b.close()}}async function Le(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&j.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let A of Object.getOwnPropertyNames(t)){let E=Object.getOwnPropertyDescriptor(t,A);if(!(A==="toJSON"&&E&&Object.hasOwn(E,"value")&&E.value===void 0)){if(!r.has(A))throw new TypeError("HTTP options contain unknown fields");if(!E||!E.enumerable||!Object.hasOwn(E,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=A=>{if(t==null||!Object.hasOwn(t,A))return;let E=Object.getOwnPropertyDescriptor(t,A);if(!E||!Object.hasOwn(E,"value"))throw new TypeError("HTTP options must contain own data properties");return E.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=n("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let u=n("redirectPolicy");if(u!==void 0&&u!=="follow"&&u!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>$e))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${$e}`);if(u==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let f=u??"follow",c=f==="error"?0:a??$e;for(let A of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let E=n(A);if(E!==void 0&&typeof E!="boolean")throw new TypeError(`HTTP ${A} must be boolean`)}let d=n("maxResponseBytes");if(d!==void 0&&(!Number.isInteger(d)||d<1||d>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let m=n("signal");if(m!==void 0){if(j.isProxy(m)||!(m instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{mt(m)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let A of["importUndici","lookupFn","validateResponse"]){let E=n(A);if(E!==void 0&&typeof E!="function")throw new TypeError(`HTTP ${A} must be a function`)}let p=n("fetchImpl"),h=p||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let w=i??12e3,S=(o||"GET").toUpperCase(),T=n("headers"),P=So(T),b=Object.assign(Object.create(null),P);Object.keys(b).some(A=>A.toLowerCase()==="accept")||(b.Accept="application/json");let N=n("body");N!=null&&typeof N!="string"&&(Object.keys(b).find(E=>E.toLowerCase()==="content-type")||(b["Content-Type"]="application/json"),N=xo(N));let M=s??po,ae=n("lookupFn"),y=!p,I=n("untrustedUrl")===!0,O=n("sameOriginRedirectsOnly")===!0,H=n("importUndici"),g=n("validateResponse"),R=m,ce=d??null,$=async()=>{let A;for(let E=0;E<=M;E++){R&&ho.call(R);try{return await Lo(e,{fetchImpl:h,method:S,headers:b,body:N,timeoutMs:w,lookupFn:ae,realFetch:y,untrustedUrl:I,maxResponseBytes:ce,sameOriginRedirectsOnly:O,importUndici:H,validateResponse:g,signal:R,redirectPolicy:f,maxRedirects:c})}catch(V){A=V;let Q=Xe=>{if(!V||typeof V!="object"&&typeof V!="function"||j.isProxy(V))return;let le=Object.getOwnPropertyDescriptor(V,Xe);return le&&Object.hasOwn(le,"value")?le.value:void 0},Ye=Q("status"),Kn=Q("oracleTimeout")===!0||Q("name")==="AbortError"||Q("name")==="TimeoutError"||mt(R),Gn=new Set([408,425,429]),Yn=Q("retryable")===!1?!1:Ye!=null?Gn.has(Ye)||fo.has(Ye)&&ur.has(S):!Kn&&ur.has(S);if(E===M||!Yn)throw V;let er=No(E,Q("retryAfter"));R?await new Promise((Xe,le)=>{let Xn=setTimeout(Xe,er);go.call(R,"abort",()=>{clearTimeout(Xn),le(yo(R)||new DOMException("Aborted","AbortError"))},{once:!0})}):await _o(er)}}throw A};if(!(n("dedupe")!==!1&&!R&&hr(S,N)))return $();let B=To(S,e,b,{untrustedUrl:I,maxResponseBytes:ce,sameOriginRedirectsOnly:O,redirectPolicy:f,maxRedirects:c,timeoutMs:w,retries:M,fetchImpl:Re(h),realFetch:y,lookupFn:Re(ae),importUndici:Re(H),validateResponse:Re(g)},N),W=ft.get(B);if(W)return W;let k=$().finally(()=>ft.delete(B));return ft.set(B,k),k}var fo,ur,po,dr,mo,wo,ho,go,fr,mt,yo,bo,$e,pc,D,ft,pr,mr,Io,Oo,_o,Pe=l(()=>{lr();fo=new Set([408,425,429,500,502,503,504]),ur=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),po=2,dr=4e3,mo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,wo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,ho=AbortSignal.prototype.throwIfAborted,go=EventTarget.prototype.addEventListener,fr=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,mt=e=>e?mo.call(e):!1,yo=e=>e?wo.call(e):void 0,bo=new Set([301,302,303,307,308]),$e=3,pc=64*1024,D=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});ft=new Map,pr=new WeakMap,mr=1;Io=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Oo=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);_o=e=>new Promise(t=>setTimeout(t,e))});var gr=l(()=>{});var yr=l(()=>{Pe();gr()});var br=l(()=>{yr()});var Oc,Tc,ht=l(()=>{J();br();Oc=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Tc=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"})});var Cc,gt=l(()=>{J();Cc="0x"+"00".repeat(32)});var Po,Bc,yt=l(()=>{gt();J();Po=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Bc=Object.freeze(Po.map(e=>e[0]))});var Be=l(()=>{J()});import{TypedDataEncoder as Mc,getAddress as Hc,isAddress as zc}from"ethers";var Do,jo,Ar=l(()=>{Ne();Do=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),jo=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]})});var Vc,vr=l(()=>{Vc=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"})});var kr=l(()=>{});import{TypedDataEncoder as el,getAddress as tl,isAddress as rl}from"ethers";var Fo,ll,qo,ul,Ir=l(()=>{Pe();Te();vr();kr();Ne();Fo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),ll=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),qo=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),ul=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]})});import{TypedDataEncoder as pl,getAddress as ml}from"ethers";var gl,bt=l(()=>{Ar();Ir();gl=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"])});import{Interface as Tr}from"ethers";var Vo,Ll,Jo,Pl,Bl,Dl,jl,Ko,Fl,De=l(()=>{K();Te();Ne();_e();ot();it();ht();yt();Be();bt();Vo=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]),Ll=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),Jo=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Pl=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),Bl=new Tr(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Dl=new Tr(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),jl=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}}),Ko=Object.freeze([...Vo]),Fl=Object.freeze({...Jo})});import{encode as Hl}from"@msgpack/msgpack";import{keccak256 as Ul,verifyTypedData as Wl}from"ethers";var Vl,Jl,Et=l(()=>{Vl=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Jl=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]})});var xt=l(()=>{Be()});import{ed25519 as tu}from"@noble/curves/ed25519.js";import{base58 as nu}from"@scure/base";import{RawTx as iu,SigHash as su,Transaction as au}from"@scure/btc-signer";import{Transaction as lu,keccak256 as uu,verifyTypedData as du}from"ethers";var St=l(()=>{Et();xt()});import{base58 as yu}from"@scure/base";var je=l(()=>{De();_e();K();St()});var _r=l(()=>{je();De()});import{wordlists as Xo}from"ethers";function ti(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return ei.has(t.length)&&t.every(r=>Xo.en.getWordIndex(r)>=0)}function ii(e){let t=Cr(e);return oi.has(t)||ni.test(t)}function Cr(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function si(e){let t=Cr(e);return[...Zo].some(r=>t.includes(r))}function ai(e,t,r){if(typeof t=="string"){if(Qo.some(n=>n.test(t))||ti(t))throw new pe(r);if(ri.test(t)&&!ii(e))throw new pe(r)}}function At(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return ai(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((o,i)=>At(o,`${t}[${i}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let n={};for(let o of Object.keys(e).sort()){let i=`${t}.${o}`;if(si(o))throw new pe(i);e[o]!==void 0&&(n[o]=At(e[o],i,o))}return n}function vt(e){return At(e)}var Zo,Qo,ei,ri,ni,oi,pe,Fe=l(()=>{Zo=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),Qo=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],ei=new Set([12,15,18,21,24]);ri=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,ni=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,oi=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);pe=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}}});import{wordlists as $u}from"ethers";var Rr,Pu,te=l(()=>{Fe();Rr=64*1024,Pu=32*1024});var ui,ju,Fu,Me=l(()=>{te();ui=["schemaVersion","buildVersion","recordType","execution","custody"],ju=[...ui,"recordHash"],Fu=Object.freeze({signed:new Set(["workflow.signed","legacy.signed"]),submitted:new Set(["workflow.submitted","legacy.broadcast"]),finalized:new Set(["workflow.finalized"]),reorged:new Set(["workflow.reorged"]),orphaned:new Set(["workflow.orphaned"]),compensating:new Set(["workflow.compensating"]),compensated:new Set(["workflow.compensated"])})});var di,Mr,Uu,Nt=l(()=>{te();Me();di=Object.freeze(["draft","checked","approval","signed","submitted","finalized","reorged","orphaned","compensating","compensated","failed","cancelled"]),Mr=Object.freeze(["workflow.drafted","workflow.checked","workflow.approval_requested","workflow.approval_granted","workflow.signed","workflow.submitted","workflow.finalized","workflow.reorged","workflow.orphaned","workflow.compensating","workflow.compensated","workflow.failed","workflow.cancelled","workflow.annotated"]),Uu=new Set(Mr)});var gi,Hr=l(()=>{te();Nt();gi=64*1024*1024});var Xu,Zu,Qu,zr=l(()=>{Xu=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Zu=Object.freeze(["read","simulate"]),Qu=1440*60});function _t(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return yi.test(t)||bi.includes(r)}function Ei(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Wr.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Vr(e){let t;try{t=JSON.stringify(e)}catch(o){throw new F("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=Ei(t);for(let{rule:o,re:i}of Ur)if(i.test(r))throw new F("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new F("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&_t(o))throw new F(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function U(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Wr.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Ur)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new F(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&_t(o))throw new F(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");U(o,`${t}[key]`,r),U(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())U(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>U(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if(_t(o))throw new F(`${t}.${o}`,"forbidden-key-name");U(i,`${t}.${o}`,r,o)}return e}var F,yi,bi,Ur,Wr,Ct=l(()=>{zr();F=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},yi=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,bi=Object.freeze(["privkey","wif","xprv","seed"]);Ur=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Wr=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"])});var Rt,ud,Jr=l(()=>{Ct();Rt=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),ud=Object.freeze(Object.fromEntries(Rt.map((e,t)=>[e,Object.freeze(t+1<Rt.length?[Rt[t+1]]:[])])))});var xi,Kr=l(()=>{Jr();te();Me();xi=Object.freeze({intent:"draft",quote_comparison:"draft",simulation:"draft",prepared:"checked",approval:"approval",signed:"signed",broadcast:"submitted",settlement:"finalized",balance_delta:"compensated",position:"compensated"})});var Gr=l(()=>{te();Me();Nt();Hr();Kr()});var Ai,vi,ki,Kd,Gd,Yd,Xd,Zd,Ii,Qd,Yr=l(()=>{Ai=Object.freeze(["owner","operator","agent","viewer"]),vi=Object.freeze(["tenant","config","policy","grant","workflow","trade","receipt","audit","telemetry","context","lifecycle"]),ki=Object.freeze({read:"read",create:"create",update:"update",delete:"delete",manage:"manage",prepare:"prepare",cancel:"cancel",export:"export",approve:"approve"}),Kd=Object.freeze(["owner"]),Gd=Object.freeze({ALLOW_ROLE_PERMISSION:"allow.role_permission",DENY_MISSING_CONTEXT:"deny.missing_context",DENY_INVALID_CONTEXT:"deny.invalid_context",DENY_INVALID_REQUEST:"deny.invalid_request",DENY_UNKNOWN_RESOURCE:"deny.unknown_resource",DENY_UNKNOWN_ACTION:"deny.unknown_action",DENY_UNBOUND_OBJECT:"deny.unbound_object",DENY_TENANT_MISMATCH:"deny.tenant_mismatch",DENY_RESOURCE_MISMATCH:"deny.resource_mismatch",DENY_ROLE_PERMISSION:"deny.role_permission",DENY_POLICY_NOT_APPROVER:"deny.policy_not_approver"}),Yd=new Set(Ai),Xd=new Set(vi),Zd=new Set(Object.values(ki)),Ii=Object.freeze({owner:Object.freeze(["tenant:read","tenant:manage","config:read","config:manage","policy:read","policy:manage","grant:read","grant:create","grant:update","grant:delete","grant:manage","workflow:read","workflow:create","workflow:update","workflow:delete","workflow:cancel","workflow:approve","trade:read","trade:prepare","receipt:read","receipt:export","audit:read","audit:export","telemetry:read","telemetry:create","telemetry:export","context:read","context:create","context:update","context:delete","context:manage","context:export","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:delete","lifecycle:manage","lifecycle:approve","lifecycle:export"]),operator:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","workflow:cancel","trade:read","trade:prepare","receipt:read","audit:read","telemetry:read","telemetry:create","context:read","context:create","context:update","context:delete","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:manage"]),agent:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","trade:read","trade:prepare","receipt:read","telemetry:create","context:read","context:create","context:update","lifecycle:read"]),viewer:Object.freeze(["tenant:read","config:read","grant:read","workflow:read","trade:read","receipt:read","audit:read","telemetry:read","context:read","lifecycle:read"])}),Qd=Object.freeze(Object.fromEntries(Object.entries(Ii).map(([e,t])=>[e,Object.freeze([...t])])))});var Oi,Ti,Ni,nf,of,sf,af,cf,lf,$t=l(()=>{Yr();Oi=Object.freeze(["succeeded","denied","invalid","failed","cancelled","timed_out","unavailable","skipped"]),Ti=Object.freeze(["workflow","task","intent","plan","run","event","eval"]),Ni=Object.freeze(["taskId","intentId","planId","runId","eventId"]),nf=Object.freeze({maxAttributes:24,maxKeyLength:48,maxStringLength:256,maxArrayLength:8}),of=new Set(Oi),sf=new Set(Ti),af=new Set(Ni),cf=Object.freeze(["authorization","bearer","cookie","credential","password","passphrase","secret","token","privatekey","privkey","seed","mnemonic","keystore","signature","prompt","systemmessage","usermessage","assistantmessage","rawtransaction","signedtransaction","serializedtransaction","transactionbytes","calldata","callbytes","inputdata"]),lf=Object.freeze({taskId:"x-oracle-task-id",intentId:"x-oracle-intent-id",planId:"x-oracle-plan-id",runId:"x-oracle-run-id",eventId:"x-oracle-event-id"})});var wf,Xr=l(()=>{Gr();$t();wf=Object.freeze({"workflow.cancelled":"cancelled","workflow.failed":"failed"})});var xf,Zr=l(()=>{$t();xf=32*1024*1024});var Af,vf,kf,re=l(()=>{Af=Object.freeze({N:1<<17,r:8,p:1}),vf=256*1024*1024,kf=16*1024});var Of,Qr=l(()=>{Of=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}})});import{homedir as Lt}from"node:os";import{join as Pt}from"node:path";var en,_i,Cf,tn=l(()=>{en=process.env.ORACLE_PUBLIC_DESKTOP==="1",_i=en?process.env.ORACLE_CONFIG_DIR||Pt(Lt(),".config","oracle"):Pt(Lt(),".config","oracle"),Cf=en?_i:Pt(Lt(),".config","mad-desk")});var Bf,Df,jf,rn=l(()=>{tn();Bf="0".repeat(64),Df=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"}),jf=Promise.resolve()});var Bt=l(()=>{rn();J();re();je()});var on=l(()=>{});var cn={};ke(cn,{SIGN_TIME_REVIEW_VERSION:()=>Ci,SignTimeReviewSecretError:()=>me,createSignTimeReview:()=>an});function Dt(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string"){let o=e.trim().split(/\s+/);if(Bi.test(e)||Di.has(o.length)&&o.every(i=>/^[a-z]+$/i.test(i)))throw new me(t);return e}if(typeof e=="bigint")return e.toString();if(typeof e=="number"){if(!Number.isSafeInteger(e))throw new TypeError(`sign-time review: safe integer required at ${t}`);return e}if(Array.isArray(e))return e.map((o,i)=>Dt(o,`${t}[${i}]`,r));X(e,t);let n={};for(let o of Object.keys(e).sort()){let i=o.replace(/[^a-z0-9]/gi,"");if(Pi.test(i))throw new me(`${t}.${o}`);e[o]!==void 0&&(n[o]=Dt(e[o],`${t}.${o}`,o))}return n}function X(e,t){if(e==null||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`sign-time review: ${t} must be a plain object`);return e}function we(e,t){if(e==null||e==="")throw new TypeError(`sign-time review: ${t} required`);return e}function ne(e,t){let r=String(we(e,t)).toLowerCase();if(!Ri.test(r))throw new TypeError(`sign-time review: ${t} must be an EVM address`);return r}function q(e,t,{positive:r=!1}={}){try{let n=BigInt(we(e,t));if(n<0n||r&&n===0n)throw new Error;return n.toString()}catch{throw new TypeError(`sign-time review: ${t} must be an unsigned integer`)}}function jt(e,t){if(typeof e!="string"||e.length===0||e.length>500||e!==e.trim())throw new TypeError(`sign-time review: ${t} must be non-empty text`);return e}function sn(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))sn(t);Object.freeze(e)}return e}function ji(e,t){if(typeof e=="boolean")return{passed:e,reason:e?"passed":"failed"};X(e,t);let r=e.passed??e.ok??e.allowed;if(typeof r!="boolean")throw new TypeError(`sign-time review: ${t} needs a boolean result`);let n=e.reason??e.message??e.name??(r?"passed":"failed");return{...e,passed:r,reason:jt(String(n),`${t}.reason`)}}function Fi(e){if(!Array.isArray(e))throw new TypeError("sign-time review: policyChecks must be an array");let t=e.map((n,o)=>ji(n,`policyChecks[${o}]`)),r=t.filter(n=>!n.passed);return{checks:t,passed:t.length-r.length,failed:r.length,reasons:r.map(n=>n.reason)}}function qi(e){if(e==null)return null;if(X(e,"simulation"),typeof e.status!="string"||!["ok","success","failed","error","unavailable","unknown"].includes(e.status))throw new TypeError("sign-time review: simulation.status is invalid");if(e.willRevert!==!0&&e.willRevert!==!1&&e.willRevert!==null)throw new TypeError("sign-time review: simulation.willRevert must be boolean or null");let t={status:e.status,willRevert:e.willRevert??null,summary:jt(String(e.summary??"simulation result recorded"),"simulation.summary")};return e.gasEstimate!=null&&(t.gasEstimate=q(e.gasEstimate,"simulation.gasEstimate")),e.gasLimit!=null&&(t.gasLimit=q(e.gasLimit,"simulation.gasLimit")),t}function Mi(e){if(e==null)return null;if(!Array.isArray(e)||e.length===0)throw new TypeError("sign-time review: assetDeltas must be a non-empty array");return e.map((t,r)=>{X(t,`assetDeltas[${r}]`);let n=q(t.before,`assetDeltas[${r}].before`),o=q(t.after,`assetDeltas[${r}].after`),i=(BigInt(o)-BigInt(n)).toString(),s;try{s=t.delta==null?i:BigInt(t.delta).toString()}catch{throw new TypeError(`sign-time review: assetDeltas[${r}].delta must be an integer`)}if(s!==i)throw new TypeError(`sign-time review: assetDeltas[${r}].delta does not match before/after`);return{...t,asset:jt(String(we(t.asset??t.token,`assetDeltas[${r}].asset`)),`assetDeltas[${r}].asset`),before:n,after:o,delta:s}})}function Hi(e){if(e==null)return[];if(!Array.isArray(e))throw new TypeError("sign-time review: approvalDeltas must be an array");return e.map((t,r)=>{X(t,`approvalDeltas[${r}]`);let n=q(t.amount??t.after,`approvalDeltas[${r}].amount`);if(t.revokeLike!=null&&typeof t.revokeLike!="boolean")throw new TypeError(`sign-time review: approvalDeltas[${r}].revokeLike must be boolean`);return{token:ne(t.token,`approvalDeltas[${r}].token`),spender:ne(t.spender,`approvalDeltas[${r}].spender`),owner:ne(t.owner,`approvalDeltas[${r}].owner`),amount:n,revokeLike:t.revokeLike??BigInt(n)===0n}})}function an(e={}){X(e,"input");let t=Dt(e),r=t.tx==null?t:X(t.tx,"tx"),n=q(t.chainId??r.chainId,"chainId",{positive:!0}),o=ne(t.account??t.from??r.from,"account/from"),i=ne(t.destination??t.to??r.to,"destination/to"),s=String(we(t.prepareHash,"prepareHash")).toLowerCase();if(!Li.test(s))throw new TypeError("sign-time review: prepareHash must be a 32-byte hash");let u=t.route??t.venue;if(u==null)throw new TypeError("sign-time review: route/venue required");let a=t.decodedCalldata??t.decodedAction;if(a==null)throw new TypeError("sign-time review: decodedCalldata or decodedAction required");let f=String(we(t.calldata??t.data??r.data,"calldata/data")).toLowerCase();if(!$i.test(f))throw new TypeError("sign-time review: calldata/data must be even-length hex");let c=t.policyChecks!==void 0&&t.policyChecks!==null,d=Fi(c?t.policyChecks:[]),m=qi(t.simulation),p=Mi(t.assetDeltas),h=Hi(t.approvalDeltas),w=t.allowlistHits??[];if(!Array.isArray(w))throw new TypeError("sign-time review: allowlistHits must be an array");let S=m?.willRevert===!0||["failed","error"].includes(m?.status),T=m!=null&&m.willRevert===!1&&["ok","success"].includes(m.status),P=S||d.failed>0?"BLOCKED":T&&c&&d.checks.length>0&&p!=null?"READY":"UNKNOWN",b=typeof a=="string"?a:a.method??a.action??a.type??"transaction",N=`${P}: review ${b} on chain ${n}; policy ${d.passed} passed, ${d.failed} failed; ${p?.length??0} asset delta${p?.length===1?"":"s"}; local signature required`,M={reviewVersion:1,status:P,requiresLocalSignature:!0,signingLocal:!0,custody:"none",execution:"review-only",chainId:n,account:o,from:o,route:u,venue:t.venue??(typeof u=="string"?u:u.venue??u.provider??null),destination:i,to:i,...t.spender==null?{}:{spender:ne(t.spender,"spender")},prepareHash:s,...t.decodedCalldata!==void 0?{decodedCalldata:t.decodedCalldata}:{decodedAction:t.decodedAction},calldata:f,data:f,selector:f.length>=10?f.slice(0,10):null,value:q(t.value??r.value??0,"value"),...(t.gasEstimate??r.gasEstimate)==null?{}:{gasEstimate:q(t.gasEstimate??r.gasEstimate,"gasEstimate")},...(t.gasLimit??r.gasLimit)==null?{}:{gasLimit:q(t.gasLimit??r.gasLimit,"gasLimit")},simulation:m,policyChecks:d,allowlistHits:w,assetDeltas:p,approvalDeltas:h,summary:N};return sn(M)}var Ci,Ri,$i,Li,Pi,Bi,Di,me,Ft=l(()=>{Ci=1,Ri=/^0x[0-9a-f]{40}$/,$i=/^0x(?:[0-9a-f]{2})*$/,Li=/^(?:0x)?[0-9a-f]{64}$/,Pi=/(privatekey|privkey|secretkey|seedphrase|mnemonic|passphrase|password|keystore|keymaterial|wif|xprv|xpriv|bearer|authorization|signature|apikey|credential)/i,Bi=/\b(?:[5KL][1-9A-HJ-NP-Za-km-z]{50,51}|xprv[0-9A-Za-z]{50,})\b/,Di=new Set([12,15,18,21,24]),me=class extends Error{constructor(t){super(`sign-time review refused: secret-bearing field at ${t}`),this.name="SignTimeReviewSecretError",this.code="SIGN_TIME_REVIEW_SECRET"}}});import{readFileSync as Kf,readdirSync as Gf,existsSync as zi}from"node:fs";import{dirname as Ui,join as he}from"node:path";import{fileURLToPath as Wi}from"node:url";function Vi(){let e=[he(ge,"descriptors"),he(ge,"clear-sign","descriptors"),he(ge,"..","clear-sign","descriptors"),he(ge,"..","..","clear-sign","descriptors"),he(ge,"..","..","..","clear-sign","descriptors")];for(let t of e)if(zi(t))return t;return e[0]}var ge,Qf,ep,ln=l(()=>{K();ge=Ui(Wi(import.meta.url));Qf=Vi(),ep=(1n<<256n)-1n});var un=l(()=>{Ft();K();ln()});import{Wallet as cp}from"ethers";import{base58 as up}from"@scure/base";import{ed25519 as fp}from"@noble/curves/ed25519.js";import{NETWORK as mp,TEST_NETWORK as wp,WIF as hp,p2wpkh as gp}from"@scure/btc-signer";import{pubECDSA as bp}from"@scure/btc-signer/utils.js";var dn=l(()=>{});var Sp,Ap,vp,kp,Ip,Op,Tp,Np,_p,Cp,Rp,fn=l(()=>{Bt();Sp=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Ap=Object.freeze(["binance","bybit","okx","coinbase"]),vp=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),kp=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Ip=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),Op=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),Tp=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),Np=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),_p=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),Cp=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Rp=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"})});var pn=l(()=>{re()});var Gi,mn,ze=l(()=>{Gi=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),mn=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"})});var wn=l(()=>{ze()});var Hp,hn=l(()=>{ze();wn();Hp=256*1024});var gn=l(()=>{ze();hn()});var yn=l(()=>{re()});import C from"node:path";import Yi from"node:os";import{createHash as Xi,randomBytes as Pm}from"node:crypto";import{Interface as qt,keccak256 as Dm}from"ethers";import{Transaction as Fm}from"@scure/btc-signer";import{ed25519 as Mm}from"@noble/curves/ed25519.js";function bn(e){let t=process.env.ORACLE_SIGNER_STATE_DIR||C.join(process.env.XDG_STATE_HOME||C.join(Yi.homedir(),".local","state"),"oracle"),r=Xi("sha256").update(C.resolve(e)).digest("hex").slice(0,16);return{vault:C.join(e,"vault.json"),policy:C.join(e,"signer-policy.json"),policyKey:C.join(e,"policy-integrity-key"),policyAnchor:C.join(t,`signer-policy-${r}.high-water`),ledger:C.join(e,"signer-ledger.json"),ledgerAnchor:C.join(t,`signer-ledger-${r}.high-water`),cexOrders:C.join(e,"cex-orders.json"),cexOrdersAnchor:C.join(t,`cex-orders-${r}.high-water`),token:C.join(e,"signer-token"),lock:C.join(t,`signer-${r}.lock`),workflowLedger:C.join(e,"workflow-events.jsonl")}}var gw,yw,bw,En=l(()=>{_r();Xr();Zr();je();re();Qr();Bt();on();K();un();De();_e();St();ht();yt();Be();xt();gt();Et();ot();it();bt();dn();fn();pn();gn();yn();gw=new qt(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),yw=new qt(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),bw=new qt(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"])});import Mt from"node:fs";import xn from"node:path";import{homedir as Zi}from"node:os";function Qi(){return process.env.ORACLE_CONFIG_DIR||xn.join(Zi(),".config","oracle")}function ye(){let e=bn(xn.join(Qi(),"signer")),t=Mt.existsSync(e.vault),r=Mt.existsSync(e.lock),n=t?r?"disarmed":"armed-owner-confirmed":"inert-no-key";return{vaultExists:t,policyConfigured:Mt.existsSync(e.policy),armed:t&&!r,disarmed:r,capabilities:{swap:n,bridge:n},autonomous:!1,note:"Keys stay on this machine. Exact confirmation is required before any broadcast."}}var _w,Ht=l(()=>{Qe();nr();En();re();_w=Object.freeze([{type:"function",function:{name:"vault_status",description:"Read local Oracle vault/signer readiness. Never returns key material.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_status",description:"Ping the loopback signer. Fails closed if it is not running.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_pending",description:"List pending local-signer artifacts. Read-only. Does not approve, sign, or broadcast.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_queue",description:"Queue a prepared unsigned artifact on the loopback signer. Does not broadcast.",parameters:{type:"object",properties:{artifact:{type:"object"}},required:["artifact"],additionalProperties:!1}}},{type:"function",function:{name:"signer_ack",description:"Execute one pending artifact through the armed local signer (same path as Telegram Allow). Fails if the signer is not running or disarmed. Never holds keys.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_deny",description:"Drop one pending local-signer artifact. Nothing signed.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_execute",description:"Broadcast one already-confirmed local artifact. Requires a one-use confirmationNonce from the local signer TTY confirm. Cannot mint confirmation itself.",parameters:{type:"object",properties:{artifact:{type:"object"},confirmationNonce:{type:"string",minLength:32,maxLength:128}},required:["artifact","confirmationNonce"],additionalProperties:!1}}},{type:"function",function:{name:"signer_disarm",description:"Global kill switch. Stops the local signer from broadcasting.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"receipt_report",description:"Receipt or it did not happen. Requires transactionHash/hash/txid.",parameters:{type:"object",properties:{receipt:{type:"object"},transactionHash:{type:"string"},hash:{type:"string"},txid:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"watch_create",description:"Create an alert-only watch. Never execute.",parameters:{type:"object",properties:{chain:{type:"string"},token:{type:"string"},condition:{type:"string"},note:{type:"string"}},required:["chain","token","condition"],additionalProperties:!1}}},{type:"function",function:{name:"watch_list",description:"List local alert-only watches.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"portfolio_snapshot",description:"How to read the one portfolio snapshot. knownUsd is incomplete if a provider is missing.",parameters:{type:"object",properties:{},additionalProperties:!1}}}])});import Ue from"node:fs";import es from"node:os";import ie from"node:path";import{fileURLToPath as ts}from"node:url";function Sn(){return process.env.ORACLE_FAKE_HOME||es.homedir()}function ns(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function We(){return ns()?process.env.ORACLE_CONFIG_DIR||ie.join(Sn(),".config","oracle"):ie.join(Sn(),".config","oracle")}function os(){return ie.join(We(),"desk.json")}function is(){return ie.join(We(),"env")}function oe({force:e=!1}={}){if(oe._done&&!e)return oe._result||null;oe._done=!0;let t={},r=(o,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=s,t[o]=s))};try{let o=is();if(Ue.existsSync(o))for(let i of Ue.readFileSync(o,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let u=s[2];(u.startsWith('"')&&u.endsWith('"')||u.startsWith("'")&&u.endsWith("'"))&&(u=u.slice(1,-1)),r(s[1],u)}}catch{}try{let o=os();if(Ue.existsSync(o)){let i=JSON.parse(Ue.readFileSync(o,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),oe._result=Object.keys(t).length?t:null,oe._result}var rs,Bw,An=l(()=>{rs=ie.dirname(ts(import.meta.url)),Bw=ie.resolve(rs,"../..");try{oe()}catch{}});function Ve(e){return String(e||"").trim()||void 0}function as(e,{required:t=!1}={}){let r=Ve(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!ss.has(r))throw new Error(`unsupported provider: ${r}`);return r}function cs(e,{required:t=!1}={}){let r=Ve(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function ls(e){let t=Ve(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function vn({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=as(e),i=cs(t,{required:n});if(o==="custom")return{provider:o,...i?{model:i}:{},baseUrl:ls(r)};if(Ve(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...i?{model:i}:{}}}var ss,kn=l(()=>{ss=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"])});import In from"node:fs";import us from"node:path";function fs(){return us.join(We(),"model.json")}function se(e){return String(e||"").trim()||void 0}function ps(e={}){let t=se(e.backend)?.toLowerCase()||"auto",r=vn({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=se(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),i=se(e.reasoningEffort),s=se(e.computeHost||e.remoteHost),u=se(e.computeUser||e.remoteUser),a=se(e.computePath||e.remotePath);if(!ds.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...i?{reasoningEffort:i}:{},...s?{computeHost:s}:{},...u?{computeUser:u}:{},...a?{computePath:a}:{}}}function On(){let e=fs();if(!In.existsSync(e))return null;try{return ps(JSON.parse(In.readFileSync(e,"utf8")))}catch{return null}}var ds,Tn=l(()=>{An();kn();ds=new Set(["auto","standalone","hermes","remote","arch"])});import{Interface as ms,getAddress as ws}from"ethers";function zt(e,t){try{return ws(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function hs(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function Ut(e){return e==null?null:Number.parseInt(String(e),16)}function ys(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=rr(e,r);return n||gs[Number(e)]||null}function Es(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!bs.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}function xs(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Ss(e){if(e?.error)throw xs(e.error);return e?.result}function As(e,t,r){return`${e}
 ${t}
-${JSON.stringify(r??[])}`}async function Gi(e,t,r){return xe(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function Nt(e,t,r=[],o={}){let n=String(t||""),i=Wi(n),s=zi(e,o);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&o.cacheChainId!==!1){let m=dn.get(s);if(m!=null)return m}let c=o.dedupe!==!1&&!o.signal?Ji(s,n,r):null;if(c&&ae.has(c))return ae.get(c);let p=(async()=>{let m=await Gi(s,{jsonrpc:"2.0",id:1,method:t,params:r},o),l=Ki(m);return i==="eth_chainid"&&typeof l=="string"&&dn.set(s,l),l})();return c&&(ae.set(c,p),p.finally(()=>{ae.get(c)===p&&ae.delete(c)}).catch(()=>{})),p}async function fn(e={},t={}){let r=Number(e.chainId??t.chainId??1),o=Mi(e.txHash||e.hash||e.transactionHash),n=await Nt(r,"eth_getTransactionReceipt",[o],t);if(!n)return{ok:!1,chainId:r,txHash:o,status:"pending",receipt:null,reason:"receipt pending"};let i=Tt(n.status),s=i===1,d=i===1?"success":i===0?"reverted":"unknown",c=s?null:d==="reverted"?"transaction reverted":"unknown receipt status",p=e.expectedTo?Ot(e.expectedTo,"expectedTo"):null,m=n.to?Ot(n.to,"receipt.to"):null;return p&&m!==p&&(s=!1,c=`to mismatch: expected ${p}, got ${m||"null"}`),{ok:s,chainId:r,txHash:o,status:d,reason:c,statusCode:i,to:m,from:n.from?Ot(n.from,"receipt.from"):null,blockNumber:Tt(n.blockNumber),transactionIndex:Tt(n.transactionIndex),logs:Array.isArray(n.logs)?n.logs:[],receipt:n}}var ww,Hi,Ui,ae,dn,pn=a(()=>{Se();De();ww=new qi(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Hi={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};Ui=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;ae=new Map,dn=new Map});function Ct(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function _t(e,t="control input"){try{P(e,t),Tr(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function ce(e,{required:t=[],optional:r=[]}={},o="object"){Ct(e,o);let n=new Set([...t,...r]),i=Object.keys(e).filter(s=>!n.has(s));if(i.length)throw new TypeError(`${o} has unknown field ${i[0]}`);for(let s of t)if(!Object.hasOwn(e,s))throw new TypeError(`${o}.${s} is required`);return e}function Rt(e,t,r=200,{lower:o=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||Yi.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let n=e.trim();return o?n.toLowerCase():n}function le(e,t,r=80){let o=Rt(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(o))throw new TypeError(`${t} must be a lowercase identifier`);return o}function Le(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function I(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))I(t);Object.freeze(e)}return e}var Yi,$t=a(()=>{Ie();wt();Yi=/[\u0000-\u001f\u007f]/});function mn({family:e,chainId:t},r="chain"){let o=le(e,`${r}.family`,40),n;if(o==="evm"){if(typeof t=="number")n=String(Le(t,`${r}.chainId`,{positive:!0}));else if(n=Rt(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(n))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else n=le(t,`${r}.chainId`,80);return{family:o,chainId:n}}function Qi(e,t="chain"){return ce(e,{required:["family","chainId"]},t),I(mn(e,t))}function wn(e,t="finality rule"){_t(e,t),Ct(e,t);let r=e.rule;if(!Xi.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let o=r==="confirmations"?"confirmations":r;ce(e,{required:["family","chainId","rule",o]},t);let n=mn(e,t);return r==="confirmations"?{...n,rule:r,confirmations:Le(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...n,rule:r,[o]:le(e[o],`${t}.${o}`,80)}}function Lt(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((o,n)=>wn(o,`finality policy rule ${n}`)),r=new Set;for(let o of t){let n=`${o.family}\0${o.chainId}`;if(r.has(n))throw new TypeError(`duplicate finality rule for ${o.family}:${o.chainId}`);r.add(n)}return I({policyVersion:1,rules:t})}function es(e){if(ce(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return Lt(e.rules)}function hn(e,t){let r=Qi(t,"finality query"),n=es(e).rules.find(i=>i.family===r.family&&i.chainId===r.chainId);return n?I({status:"KNOWN",...r,rule:n}):I({status:M.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function ts(e,t){if(e==null)return null;_t(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(ce(e,{required:["status"],optional:[r]},"finality evidence"),!Zi.includes(e.status))throw new TypeError("finality evidence.status is unknown");let o={status:e.status};return e[r]!=null&&(o[r]=t.rule==="confirmations"?Le(e.confirmations,"finality evidence.confirmations",{positive:!0}):le(e[r],`finality evidence.${r}`,80)),o}function gn(e,t){if(!e||e.status===M.UNKNOWN||e.rule==null)return I({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=wn(e.rule??e,"resolved finality rule"),o=ts(t,r);if(o==null)return I({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(o.status!=="LIVE")return I({status:M.UNKNOWN,final:!1,reason:`${o.status}_EVIDENCE`});let n=!1;return r.rule==="confirmations"?n=o.confirmations!=null&&o.confirmations>=r.confirmations:r.rule==="finalizedTag"?n=o.finalizedTag===r.finalizedTag:n=o.checkpoint===r.checkpoint,I({status:n?M.FINAL:M.INCLUDED,final:n,reason:n?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var Xi,M,Zi,yn=a(()=>{$t();Xi=Object.freeze(["confirmations","finalizedTag","checkpoint"]),M=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Zi=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"])});function ns(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function En(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function Bt(e){return e==null?e:Array.isArray(e)?e.map(Bt):ue(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,Bt(e[t])])):String(e)}function os(e,t,r,o){let n=b(e.finalityEvidence,o?.finality,e.evidence),i=b(e.finalityPolicy,e.policy);try{return i==null&&ue(e.finalityRule)&&(i=Lt([{family:t,chainId:r,...e.finalityRule}])),i==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:gn(hn(i,{family:t,chainId:r}),n)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function A(e,t,r){r!=null&&(e[t]=r)}function is(e){return e==null?null:String(e).trim().toLowerCase()}function Pt(...e){let t=e.map(is).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function bn(e={}){if(!ue(e))throw new TypeError("verified receipt: input object required");let t=ct(e),r=b(t.actionReceipt,t.receipt),o=ue(r)?r:t,n=b(t.observation,t.chainObservation,t.observedReceipt),i=ue(n),s=b(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash),d=b(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family),c=b(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),p=!Pt(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash)||!Pt(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family)||!Pt(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),m=os(t,d,c,i&&!p?n:null),l=ns(b(n?.receiptStatus,n?.executionStatus,n?.status)),f=b(t.reconciliationStatus,t.reconciliation?.status,n?.reconciliationStatus),u=b(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,n?.finalityState),g="UNKNOWN";En(f)||!p&&(i&&l==="FAIL"||En(u))?g="FAIL":!p&&s&&i&&l==="SUCCESS"&&["INCLUDED","FINAL"].includes(m.status)&&(g="SUCCESS");let w={verifiedReceiptVersion:rs,status:g};p&&(w.reason="REFERENCE_MISMATCH"),A(w,"txHash",s),A(w,"chain",b(t.chain,o.chain,n?.chain)),A(w,"family",d),A(w,"chainId",c),A(w,"block",b(n?.block,t.block)),A(w,"blockState",b(n?.blockState,n?.inclusionState)),w.finalityState=m.status,A(w,"confirmations",b(n?.confirmations,n?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),A(w,"observedAt",b(n?.observedAt,t.observedAt)),A(w,"route",b(t.route,o.route)),A(w,"prepareHash",b(t.prepareHash,o.prepareHash)),A(w,"policyOutcome",b(t.policyOutcome,o.policyOutcome,o.policyChecks));let y=b(t.balanceChanges,n?.balanceChanges,n?.balances,o.balanceChanges,o.balances);return y!=null&&(w.balanceChanges=Bt(y)),A(w,"createdAt",b(t.createdAt,o.createdAt)),A(w,"submittedAt",b(t.submittedAt,o.submittedAt)),A(w,"finalizedAt",b(t.finalizedAt,n?.finalizedAt)),A(w,"timestamps",b(t.timestamps,o.timestamps,n?.timestamps)),I(w)}var rs,Iw,b,ue,xn=a(()=>{Ie();yn();$t();rs=1,Iw=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),b=(...e)=>e.find(t=>t!=null),ue=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype});var An={};me(An,{observeEvmReceipt:()=>Sn,verifyEvmReceipt:()=>cs});function as(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function Sn({txHash:e,chainId:t,rpcUrl:r},o={}){let n=String(e||"").trim().toLowerCase();if(!ss.test(n))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let i=Number(t);if(!Number.isSafeInteger(i)||i<=0)throw new TypeError("observe receipt: chainId required");let s=o.transactionReceipt||fn,d=o.rpcCall||Nt,c={...o.rpcOptions||{},...r?{rpcUrl:r}:{}},p;try{p=await s({txHash:n,chainId:i},c)}catch(u){return{observation:null,reason:`RPC_UNAVAILABLE: ${u.message}`}}if(!p||p.receipt==null)return{observation:null,reason:p?.reason||"receipt pending"};let m=null,l=p.blockNumber;if(Number.isSafeInteger(l))try{let u=as(await d(i,"eth_blockNumber",[],c));u!=null&&u>=l&&(m=u-l+1)}catch{}let f={txHash:n,family:"evm",chainId:String(i),receiptStatus:p.status==="success"?"SUCCESS":p.status==="reverted"?"FAIL":"UNKNOWN",block:l==null?void 0:String(l),observedAt:new Date().toISOString(),finality:{status:"LIVE",...m==null?{}:{confirmations:m}}};return m!=null&&(f.confirmations=m),{observation:f,reason:null}}async function cs({txHash:e,chainId:t,confirmations:r=1,rpcUrl:o},n={}){let{observation:i,reason:s}=await Sn({txHash:e,chainId:t,rpcUrl:o},n),d=bn({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...i?{observation:i}:{}});return{receipt:d,observed:!!i,final:d.finalityState==="FINAL",requiredConfirmations:r,reason:s}}var ss,vn=a(()=>{pn();xn();ss=/^0x[0-9a-f]{64}$/});var kn={};me(kn,{classifyReceipt:()=>Y,configDir:()=>fs,firstHourReport:()=>de,probeReceiptModule:()=>ms,probeReviewModule:()=>ps,venueMap:()=>Pe});import ls from"node:path";import{homedir as us}from"node:os";function fs(e=process.env){return e.ORACLE_CONFIG_DIR||ls.join(us(),".config","oracle")}function Pe({env:e=process.env,vault:t=null}={}){let r=t||se(),o=[];for(let[n,i]of Object.entries(we)){let s=(i.rpcEnv||[]).some(c=>String(e[c]||"").trim()),d="prepare";i.evm?s&&(d="live"):d="unavailable",o.push({key:n,chainId:i.chainId,name:i.name,family:"evm",status:d,execute:!!(r.vaultExists&&r.armed&&!r.disarmed),note:s?"rpc configured":"public read/prepare; set RPC for live reads"})}return o.push({key:"solana",chainId:null,name:"Solana",family:"sol",status:"prepare",execute:!1,note:"Jupiter quote/prepare; local sol signer"},{key:"bitcoin",chainId:null,name:"Bitcoin",family:"btc",status:"prepare",execute:!1,note:"Esplora read; local btc signer"},{key:"hyperliquid-l1",chainId:null,name:"Hyperliquid L1",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not an EVM signer family"},{key:"polymarket",chainId:null,name:"Polymarket",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not a signer family"}),o}function de({env:e=process.env,model:t=ln(),vault:r=se(),signerReachable:o=!1,quote:n=null,reviewAvailable:i=!1,receiptAvailable:s=!1}={}){let d=[],c=(u,g,w,y=null)=>d.push({id:u,status:g,detail:w,fix:y}),p=(()=>{let[u,g]=process.versions.node.split(".").map(Number);return u>20||u===20&&g>=19})();c("node",p?"ok":"fail",`node ${process.versions.node}`,p?null:"install node >= 20.19"),t?t.backend==="hermes"?c("model","warn","backend=hermes (opt-in attach)","oracle model --backend standalone"):c("model","ok",`${t.backend||"auto"} ${t.provider||""} ${t.model||""}`.trim()):c("model","fail","no model.json","oracle setup model"),r.vaultExists?r.disarmed?c("vault","warn","vault present, DISARMED","oracle signer (re-arm after confirm)"):c("vault",r.armed?"ok":"warn",r.armed?"present, armed":"present, not armed"):c("vault","fail","no local vault","oracle sign init");let m=e.ORACLE_SIGNER_HOST||"127.0.0.1";if(ds.has(m)?c("signer",o?"ok":"warn",o?`loopback ${m}:${e.ORACLE_SIGNER_PORT||9462}`:"loopback signer not reachable",o?null:"oracle signer"):c("signer","fail",`signer host ${m} is not loopback`,"unset ORACLE_SIGNER_HOST"),!n)c("quote","warn","quote not probed",null);else if(n.ok){let u=String(n.detail||"net quote returned");c("quote","ok",u.length>140?`${u.slice(0,140)}\u2026`:u)}else c("quote","warn",n.detail||"quote unavailable","check network / oracle data serve");c("review",i?"ok":"fail",i?"sign-time review renders decoded action, policy hits, approval deltas":"sign-time review module missing from this build",i?null:"reinstall @oracle-agent/oracle (src/control/sign-time-review.mjs)"),c("receipt",s?"ok":"fail",s?"oracle receipt verifies on-chain state (SUCCESS/FAIL/UNKNOWN, finality-pinned)":"verified-receipt observer missing from this build",s?null:"reinstall @oracle-agent/oracle (src/desk/observe-receipt.mjs)");let l=d.some(u=>u.status==="fail"),f=d.filter(u=>u.status==="ok").length;return{ok:!l,checks:d,firstRunScore:{ok:f,total:d.length,label:`${f}/${d.length} first-run hops green`},venues:Pe({env:e,vault:r})}}async function ps(){try{return typeof(await Promise.resolve().then(()=>(At(),zr))).createSignTimeReview=="function"}catch{return!1}}async function ms(){try{let e=await Promise.resolve().then(()=>(vn(),An));return typeof e.observeReceipt=="function"||typeof e.default=="function"||Object.values(e).some(t=>typeof t=="function")}catch{return!1}}var ds,Be=a(()=>{De();It();un();Fe();ds=new Set(["127.0.0.1","::1","localhost"])});var On={};me(On,{classifyReceipt:()=>Y,default:()=>gs,detailText:()=>In,firstHourReport:()=>de,probeQuote:()=>hs,probeSigner:()=>ws,symbol:()=>fe,vaultStatus:()=>se});async function ws(e=process.env){let t=e.ORACLE_SIGNER_HOST||"127.0.0.1",r=e.ORACLE_SIGNER_PORT||9462;try{return(await fetch(`http://${t}:${r}/status`,{signal:AbortSignal.timeout(1500)})).ok}catch{return!1}}function fe(e){let t=String(e??"?").replace(/[^\w.$-]/g,"");return t.length>12?`${t.slice(0,12)}...`:t||"?"}function In(e,t=120){let r=String(e??"").replace(/[\u0000-\u001f\u007f-\u009f]/g," ").replace(/\s+/g," ").trim();return r?r.length>t?`${r.slice(0,t)}...`:r:"quote failed"}async function hs(){try{let e=await fetch("https://api.dexscreener.com/latest/dex/search?q=WETH%20USDC",{signal:AbortSignal.timeout(4e3)});if(!e.ok)return{ok:!1,detail:`dexscreener ${e.status}`};let r=(await e.json())?.pairs?.[0];return!r?.chainId||!r?.priceUsd?{ok:!1,detail:"no pair"}:{ok:!0,detail:`${fe(r.chainId)} ${fe(r.baseToken?.symbol)}/${fe(r.quoteToken?.symbol)} $${fe(r.priceUsd)}`}}catch(e){return{ok:!1,detail:In(e instanceof Error?e.message:"quote failed")}}}var gs,Tn=a(()=>{Be();It();gs={name:"venues",summary:"label every shipped venue live / prepare / unavailable",group:"read",usage:"oracle venues [--json]",async run(e){let t=e.argv.includes("--json"),r=Pe();if(t)return process.stdout.write(`${JSON.stringify({venues:r},null,2)}
-`),0;for(let o of r)process.stdout.write(`${o.status.padEnd(12)} ${o.key.padEnd(16)} ${o.name}  exec=${o.execute?"local":"no"}
-`);return 0}}});Be();var Nn=[{n:1,title:"quote",cmd:"oracle swap quote 8453 <tokenIn> <tokenOut> <amount> --json",note:"read-only. No wallet, no keys."},{n:2,title:"prepare",cmd:"oracle swap prepare ... --taker <yourWallet>",note:"returns an UNSIGNED transaction. Oracle never holds a key."},{n:3,title:"review",cmd:"shown before any signature",note:"decoded action, route, policy pass/fail, approval deltas, prepare hash."},{n:4,title:"sign",cmd:"your wallet, or oracle signer (local encrypted vault)",note:"you type the exact digest. Nothing signs on your behalf."},{n:5,title:"receipt",cmd:"oracle receipt --hash <txid> --chain <chainId>",note:"observed chain state only. No evidence reads UNKNOWN, never success."}],qw={name:"quickstart",summary:"walk the first-run path: quote -> review -> sign locally -> verified receipt",group:"read",usage:"oracle quickstart [--json] [--check]",async run(e){let t=e.argv||[],r=t.includes("--json"),o=t.includes("--check"),n=null;if(o){let{probeSigner:s,probeQuote:d}=await Promise.resolve().then(()=>(Tn(),On)),{probeReviewModule:c,probeReceiptModule:p}=await Promise.resolve().then(()=>(Be(),kn)),[m,l,f,u]=await Promise.all([s(process.env),d(),c(),p()]);n=de({signerReachable:m,quote:l,reviewAvailable:f,receiptAvailable:u})}if(r)return process.stdout.write(`${JSON.stringify({steps:Nn,...n?{readiness:n}:{}},null,2)}
-`),n&&!n.ok?1:0;let i=["","Oracle first run \u2014 what actually happens to your money",""];for(let s of Nn)i.push(`  ${s.n}. ${s.title}`),i.push(`     ${s.cmd}`),i.push(`     ${s.note}`),i.push("");if(i.push("  Oracle prepares. You sign. Oracle verifies what happened on chain."),i.push(""),n){i.push("Readiness:");for(let s of n.checks){let d=s.status==="ok"?"ok  ":s.status==="warn"?"warn":"FAIL";i.push(`  ${d}  ${s.id.padEnd(9)} ${s.detail}${s.fix?`  -> ${s.fix}`:""}`)}i.push("")}return process.stdout.write(i.join(`
-`)),n&&!n.ok?1:0}};export{qw as default};
+${JSON.stringify(r??[])}`}async function vs(e,t,r){return Le(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function Wt(e,t,r=[],n={}){let o=String(t||""),i=Es(o),s=ys(e,n);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let c=Nn.get(s);if(c!=null)return c}let a=n.dedupe!==!1&&!n.signal?As(s,o,r):null;if(a&&be.has(a))return be.get(a);let f=(async()=>{let c=await vs(s,{jsonrpc:"2.0",id:1,method:t,params:r},n),d=Ss(c);return i==="eth_chainid"&&typeof d=="string"&&Nn.set(s,d),d})();return a&&(be.set(a,f),f.finally(()=>{be.get(a)===f&&be.delete(a)}).catch(()=>{})),f}async function _n(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=hs(e.txHash||e.hash||e.transactionHash),o=await Wt(r,"eth_getTransactionReceipt",[n],t);if(!o)return{ok:!1,chainId:r,txHash:n,status:"pending",receipt:null,reason:"receipt pending"};let i=Ut(o.status),s=i===1,u=i===1?"success":i===0?"reverted":"unknown",a=s?null:u==="reverted"?"transaction reverted":"unknown receipt status",f=e.expectedTo?zt(e.expectedTo,"expectedTo"):null,c=o.to?zt(o.to,"receipt.to"):null;return f&&c!==f&&(s=!1,a=`to mismatch: expected ${f}, got ${c||"null"}`),{ok:s,chainId:r,txHash:n,status:u,reason:a,statusCode:i,to:c,from:o.from?zt(o.from,"receipt.from"):null,blockNumber:Ut(o.blockNumber),transactionIndex:Ut(o.transactionIndex),logs:Array.isArray(o.logs)?o.logs:[],receipt:o}}var Gw,gs,bs,be,Nn,Cn=l(()=>{Pe();Ze();Gw=new ms(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);gs={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};bs=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;be=new Map,Nn=new Map});function Vt(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function Jt(e,t="control input"){try{U(e,t),Vr(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function Ee(e,{required:t=[],optional:r=[]}={},n="object"){Vt(e,n);let o=new Set([...t,...r]),i=Object.keys(e).filter(s=>!o.has(s));if(i.length)throw new TypeError(`${n} has unknown field ${i[0]}`);for(let s of t)if(!Object.hasOwn(e,s))throw new TypeError(`${n}.${s} is required`);return e}function Kt(e,t,r=200,{lower:n=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||ks.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let o=e.trim();return n?o.toLowerCase():o}function xe(e,t,r=80){let n=Kt(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(n))throw new TypeError(`${t} must be a lowercase identifier`);return n}function Je(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function L(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))L(t);Object.freeze(e)}return e}var ks,Gt=l(()=>{Fe();Ct();ks=/[\u0000-\u001f\u007f]/});function Rn({family:e,chainId:t},r="chain"){let n=xe(e,`${r}.family`,40),o;if(n==="evm"){if(typeof t=="number")o=String(Je(t,`${r}.chainId`,{positive:!0}));else if(o=Kt(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(o))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else o=xe(t,`${r}.chainId`,80);return{family:n,chainId:o}}function Ts(e,t="chain"){return Ee(e,{required:["family","chainId"]},t),L(Rn(e,t))}function $n(e,t="finality rule"){Jt(e,t),Vt(e,t);let r=e.rule;if(!Is.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let n=r==="confirmations"?"confirmations":r;Ee(e,{required:["family","chainId","rule",n]},t);let o=Rn(e,t);return r==="confirmations"?{...o,rule:r,confirmations:Je(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...o,rule:r,[n]:xe(e[n],`${t}.${n}`,80)}}function Yt(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((n,o)=>$n(n,`finality policy rule ${o}`)),r=new Set;for(let n of t){let o=`${n.family}\0${n.chainId}`;if(r.has(o))throw new TypeError(`duplicate finality rule for ${n.family}:${n.chainId}`);r.add(o)}return L({policyVersion:1,rules:t})}function Ns(e){if(Ee(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return Yt(e.rules)}function Ln(e,t){let r=Ts(t,"finality query"),o=Ns(e).rules.find(i=>i.family===r.family&&i.chainId===r.chainId);return o?L({status:"KNOWN",...r,rule:o}):L({status:Z.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function _s(e,t){if(e==null)return null;Jt(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(Ee(e,{required:["status"],optional:[r]},"finality evidence"),!Os.includes(e.status))throw new TypeError("finality evidence.status is unknown");let n={status:e.status};return e[r]!=null&&(n[r]=t.rule==="confirmations"?Je(e.confirmations,"finality evidence.confirmations",{positive:!0}):xe(e[r],`finality evidence.${r}`,80)),n}function Pn(e,t){if(!e||e.status===Z.UNKNOWN||e.rule==null)return L({status:Z.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=$n(e.rule??e,"resolved finality rule"),n=_s(t,r);if(n==null)return L({status:Z.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(n.status!=="LIVE")return L({status:Z.UNKNOWN,final:!1,reason:`${n.status}_EVIDENCE`});let o=!1;return r.rule==="confirmations"?o=n.confirmations!=null&&n.confirmations>=r.confirmations:r.rule==="finalizedTag"?o=n.finalizedTag===r.finalizedTag:o=n.checkpoint===r.checkpoint,L({status:o?Z.FINAL:Z.INCLUDED,final:o,reason:o?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var Is,Z,Os,Bn=l(()=>{Gt();Is=Object.freeze(["confirmations","finalizedTag","checkpoint"]),Z=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Os=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"])});function Rs(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function Dn(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function Zt(e){return e==null?e:Array.isArray(e)?e.map(Zt):Se(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,Zt(e[t])])):String(e)}function $s(e,t,r,n){let o=x(e.finalityEvidence,n?.finality,e.evidence),i=x(e.finalityPolicy,e.policy);try{return i==null&&Se(e.finalityRule)&&(i=Yt([{family:t,chainId:r,...e.finalityRule}])),i==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:Pn(Ln(i,{family:t,chainId:r}),o)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function _(e,t,r){r!=null&&(e[t]=r)}function Ls(e){return e==null?null:String(e).trim().toLowerCase()}function Xt(...e){let t=e.map(Ls).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function jn(e={}){if(!Se(e))throw new TypeError("verified receipt: input object required");let t=vt(e),r=x(t.actionReceipt,t.receipt),n=Se(r)?r:t,o=x(t.observation,t.chainObservation,t.observedReceipt),i=Se(o),s=x(t.txHash,n.txHash,n.transactionHash,o?.txHash,o?.transactionHash),u=x(t.family,n.family,n.chain?.family,o?.family,o?.chain?.family),a=x(t.chainId,n.chainId,n.chain?.chainId,o?.chainId,o?.chain?.chainId),f=!Xt(t.txHash,n.txHash,n.transactionHash,o?.txHash,o?.transactionHash)||!Xt(t.family,n.family,n.chain?.family,o?.family,o?.chain?.family)||!Xt(t.chainId,n.chainId,n.chain?.chainId,o?.chainId,o?.chain?.chainId),c=$s(t,u,a,i&&!f?o:null),d=Rs(x(o?.receiptStatus,o?.executionStatus,o?.status)),m=x(t.reconciliationStatus,t.reconciliation?.status,o?.reconciliationStatus),p=x(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,o?.finalityState),h="UNKNOWN";Dn(m)||!f&&(i&&d==="FAIL"||Dn(p))?h="FAIL":!f&&s&&i&&d==="SUCCESS"&&["INCLUDED","FINAL"].includes(c.status)&&(h="SUCCESS");let w={verifiedReceiptVersion:Cs,status:h};f&&(w.reason="REFERENCE_MISMATCH"),_(w,"txHash",s),_(w,"chain",x(t.chain,n.chain,o?.chain)),_(w,"family",u),_(w,"chainId",a),_(w,"block",x(o?.block,t.block)),_(w,"blockState",x(o?.blockState,o?.inclusionState)),w.finalityState=c.status,_(w,"confirmations",x(o?.confirmations,o?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),_(w,"observedAt",x(o?.observedAt,t.observedAt)),_(w,"route",x(t.route,n.route)),_(w,"prepareHash",x(t.prepareHash,n.prepareHash)),_(w,"policyOutcome",x(t.policyOutcome,n.policyOutcome,n.policyChecks));let S=x(t.balanceChanges,o?.balanceChanges,o?.balances,n.balanceChanges,n.balances);return S!=null&&(w.balanceChanges=Zt(S)),_(w,"createdAt",x(t.createdAt,n.createdAt)),_(w,"submittedAt",x(t.submittedAt,n.submittedAt)),_(w,"finalizedAt",x(t.finalizedAt,o?.finalizedAt)),_(w,"timestamps",x(t.timestamps,n.timestamps,o?.timestamps)),L(w)}var Cs,sh,x,Se,Fn=l(()=>{Fe();Bn();Gt();Cs=1,sh=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),x=(...e)=>e.find(t=>t!=null),Se=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype});var Mn={};ke(Mn,{observeEvmReceipt:()=>qn,verifyEvmReceipt:()=>Ds});function Bs(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function qn({txHash:e,chainId:t,rpcUrl:r},n={}){let o=String(e||"").trim().toLowerCase();if(!Ps.test(o))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let i=Number(t);if(!Number.isSafeInteger(i)||i<=0)throw new TypeError("observe receipt: chainId required");let s=n.transactionReceipt||_n,u=n.rpcCall||Wt,a={...n.rpcOptions||{},...r?{rpcUrl:r}:{}},f;try{f=await s({txHash:o,chainId:i},a)}catch(p){return{observation:null,reason:`RPC_UNAVAILABLE: ${p.message}`}}if(!f||f.receipt==null)return{observation:null,reason:f?.reason||"receipt pending"};let c=null,d=f.blockNumber;if(Number.isSafeInteger(d))try{let p=Bs(await u(i,"eth_blockNumber",[],a));p!=null&&p>=d&&(c=p-d+1)}catch{}let m={txHash:o,family:"evm",chainId:String(i),receiptStatus:f.status==="success"?"SUCCESS":f.status==="reverted"?"FAIL":"UNKNOWN",block:d==null?void 0:String(d),observedAt:new Date().toISOString(),finality:{status:"LIVE",...c==null?{}:{confirmations:c}}};return c!=null&&(m.confirmations=c),{observation:m,reason:null}}async function Ds({txHash:e,chainId:t,confirmations:r=1,rpcUrl:n},o={}){let{observation:i,reason:s}=await qn({txHash:e,chainId:t,rpcUrl:n},o),u=jn({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...i?{observation:i}:{}});return{receipt:u,observed:!!i,final:u.finalityState==="FINAL",requiredConfirmations:r,reason:s}}var Ps,Hn=l(()=>{Cn();Fn();Ps=/^0x[0-9a-f]{64}$/});var zn={};ke(zn,{classifyReceipt:()=>ue,configDir:()=>Ms,firstHourReport:()=>Ae,probeReceiptModule:()=>zs,probeReviewModule:()=>Hs,venueMap:()=>Ke});import js from"node:path";import{homedir as Fs}from"node:os";function Ms(e=process.env){return e.ORACLE_CONFIG_DIR||js.join(Fs(),".config","oracle")}function Ke({env:e=process.env,vault:t=null}={}){let r=t||ye(),n=[];for(let[o,i]of Object.entries(Ie)){let s=(i.rpcEnv||[]).some(a=>String(e[a]||"").trim()),u="prepare";i.evm?s&&(u="live"):u="unavailable",n.push({key:o,chainId:i.chainId,name:i.name,family:"evm",status:u,execute:!!(r.vaultExists&&r.armed&&!r.disarmed),note:s?"rpc configured":"public read/prepare; set RPC for live reads"})}return n.push({key:"solana",chainId:null,name:"Solana",family:"sol",status:"prepare",execute:!1,note:"Jupiter quote/prepare; local sol signer"},{key:"bitcoin",chainId:null,name:"Bitcoin",family:"btc",status:"prepare",execute:!1,note:"Esplora read; local btc signer"},{key:"hyperliquid-l1",chainId:null,name:"Hyperliquid L1",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not an EVM signer family"},{key:"polymarket",chainId:null,name:"Polymarket",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not a signer family"}),n}function Ae({env:e=process.env,model:t=On(),vault:r=ye(),signerReachable:n=!1,quote:o=null,reviewAvailable:i=!1,receiptAvailable:s=!1}={}){let u=[],a=(p,h,w,S=null)=>u.push({id:p,status:h,detail:w,fix:S}),f=(()=>{let[p,h]=process.versions.node.split(".").map(Number);return p>20||p===20&&h>=19})();a("node",f?"ok":"fail",`node ${process.versions.node}`,f?null:"install node >= 20.19"),t?t.backend==="hermes"?a("model","warn","backend=hermes (opt-in attach)","oracle model --backend standalone"):a("model","ok",`${t.backend||"auto"} ${t.provider||""} ${t.model||""}`.trim()):a("model","fail","no model.json","oracle setup model"),r.vaultExists?r.disarmed?a("vault","warn","vault present, DISARMED","oracle signer (re-arm after confirm)"):a("vault",r.armed?"ok":"warn",r.armed?"present, armed":"present, not armed"):a("vault","fail","no local vault","oracle sign init");let c=e.ORACLE_SIGNER_HOST||"127.0.0.1";if(qs.has(c)?a("signer",n?"ok":"warn",n?`loopback ${c}:${e.ORACLE_SIGNER_PORT||9462}`:"loopback signer not reachable",n?null:"oracle signer"):a("signer","fail",`signer host ${c} is not loopback`,"unset ORACLE_SIGNER_HOST"),!o)a("quote","warn","quote not probed",null);else if(o.ok){let p=String(o.detail||"net quote returned");a("quote","ok",p.length>140?`${p.slice(0,140)}\u2026`:p)}else a("quote","warn",o.detail||"quote unavailable","check network / oracle data serve");a("review",i?"ok":"fail",i?"sign-time review renders decoded action, policy hits, approval deltas":"sign-time review module missing from this build",i?null:"reinstall @oracle-agent/oracle (src/control/sign-time-review.mjs)"),a("receipt",s?"ok":"fail",s?"oracle receipt verifies on-chain state (SUCCESS/FAIL/UNKNOWN, finality-pinned)":"verified-receipt observer missing from this build",s?null:"reinstall @oracle-agent/oracle (src/desk/observe-receipt.mjs)");let d=u.some(p=>p.status==="fail"),m=u.filter(p=>p.status==="ok").length;return{ok:!d,checks:u,firstRunScore:{ok:m,total:u.length,label:`${m}/${u.length} first-run hops green`},venues:Ke({env:e,vault:r})}}async function Hs(){try{return typeof(await Promise.resolve().then(()=>(Ft(),cn))).createSignTimeReview=="function"}catch{return!1}}async function zs(){try{let e=await Promise.resolve().then(()=>(Hn(),Mn));return typeof e.observeReceipt=="function"||typeof e.default=="function"||Object.values(e).some(t=>typeof t=="function")}catch{return!1}}var qs,Ge=l(()=>{Ze();Ht();Tn();Qe();qs=new Set(["127.0.0.1","::1","localhost"])});var Wn={};ke(Wn,{classifyReceipt:()=>ue,default:()=>Vs,detailText:()=>Un,firstHourReport:()=>Ae,probeQuote:()=>Ws,probeSigner:()=>Us,symbol:()=>ve,vaultStatus:()=>ye});async function Us(e=process.env){let t=e.ORACLE_SIGNER_HOST||"127.0.0.1",r=e.ORACLE_SIGNER_PORT||9462;try{return(await fetch(`http://${t}:${r}/status`,{signal:AbortSignal.timeout(1500)})).ok}catch{return!1}}function ve(e){let t=String(e??"?").replace(/[^\w.$-]/g,"");return t.length>12?`${t.slice(0,12)}...`:t||"?"}function Un(e,t=120){let r=String(e??"").replace(/[\u0000-\u001f\u007f-\u009f]/g," ").replace(/\s+/g," ").trim();return r?r.length>t?`${r.slice(0,t)}...`:r:"quote failed"}async function Ws(){try{let e=await fetch("https://api.dexscreener.com/latest/dex/search?q=WETH%20USDC",{signal:AbortSignal.timeout(4e3)});if(!e.ok)return{ok:!1,detail:`dexscreener ${e.status}`};let r=(await e.json())?.pairs?.[0];return!r?.chainId||!r?.priceUsd?{ok:!1,detail:"no pair"}:{ok:!0,detail:`${ve(r.chainId)} ${ve(r.baseToken?.symbol)}/${ve(r.quoteToken?.symbol)} $${ve(r.priceUsd)}`}}catch(e){return{ok:!1,detail:Un(e instanceof Error?e.message:"quote failed")}}}var Vs,Vn=l(()=>{Ge();Ht();Vs={name:"venues",summary:"label every shipped venue live / prepare / unavailable",group:"read",usage:"oracle venues [--json]",async run(e){let t=e.argv.includes("--json"),r=Ke();if(t)return process.stdout.write(`${JSON.stringify({venues:r},null,2)}
+`),0;for(let n of r)process.stdout.write(`${n.status.padEnd(12)} ${n.key.padEnd(16)} ${n.name}  exec=${n.execute?"local":"no"}
+`);return 0}}});Ge();var Jn=[{n:1,title:"quote",cmd:"oracle swap quote 8453 <tokenIn> <tokenOut> <amount> --json",note:"read-only. No wallet, no keys."},{n:2,title:"prepare",cmd:"oracle swap prepare ... --taker <yourWallet>",note:"returns an UNSIGNED transaction. Oracle never holds a key."},{n:3,title:"review",cmd:"shown before any signature",note:"decoded action, route, policy pass/fail, approval deltas, prepare hash."},{n:4,title:"sign",cmd:"your wallet, or oracle signer (local encrypted vault)",note:"you type the exact digest. Nothing signs on your behalf."},{n:5,title:"receipt",cmd:"oracle receipt --hash <txid> --chain <chainId>",note:"observed chain state only. No evidence reads UNKNOWN, never success."}],bh={name:"quickstart",summary:"walk the first-run path: quote -> review -> sign locally -> verified receipt",group:"read",usage:"oracle quickstart [--json] [--check]",async run(e){let t=e.argv||[],r=t.includes("--json"),n=t.includes("--check"),o=null;if(n){let{probeSigner:s,probeQuote:u}=await Promise.resolve().then(()=>(Vn(),Wn)),{probeReviewModule:a,probeReceiptModule:f}=await Promise.resolve().then(()=>(Ge(),zn)),[c,d,m,p]=await Promise.all([s(process.env),u(),a(),f()]);o=Ae({signerReachable:c,quote:d,reviewAvailable:m,receiptAvailable:p})}if(r)return process.stdout.write(`${JSON.stringify({steps:Jn,...o?{readiness:o}:{}},null,2)}
+`),o&&!o.ok?1:0;let i=["","Oracle first run \u2014 what actually happens to your money",""];for(let s of Jn)i.push(`  ${s.n}. ${s.title}`),i.push(`     ${s.cmd}`),i.push(`     ${s.note}`),i.push("");if(i.push("  Oracle prepares. You sign. Oracle verifies what happened on chain."),i.push(""),o){i.push("Readiness:");for(let s of o.checks){let u=s.status==="ok"?"ok  ":s.status==="warn"?"warn":"FAIL";i.push(`  ${u}  ${s.id.padEnd(9)} ${s.detail}${s.fix?`  -> ${s.fix}`:""}`)}i.push("")}return process.stdout.write(i.join(`
+`)),o&&!o.ok?1:0}};export{bh as default};