@oracle-agent/oracle 0.35.34 → 0.35.36

package/dist/bin/oracle-public-server.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 var $e=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};import fe from"node:net";import Wr from"node:dns";function Be(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let n=a=>{if(!a)return[];let d=a.split(":"),f=d.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(b=>!Number.isInteger(b)||b<0||b>255))return null;d.splice(d.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return d.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:d.map(u=>Number.parseInt(u,16))},[r,o]=t.split("::"),i=n(r),s=n(o);if(!i||!s)return null;let c=t.includes("::"),l=8-i.length-s.length;if(!c&&l!==0||c&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(a=>[a>>8,a&255]))}function nt(e,t,n){let r=Math.floor(n/8),o=n%8;for(let s=0;s<r;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[r]&i)===(t[r]&i)}function rt(e){if(fe.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(fe.isIPv6(e)){let t=Be(e);if(!t)return!1;let n=Be("::ffff:0:0");return nt(t,n,96)?rt([...t.slice(12)].join(".")):nt(t,Be("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>nt(t,Be(o),i)):!1}return!1}function Kr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let n=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Gr.has(n)||n.endsWith(".localhost")||n.endsWith(".internal"))return{ok:!1,error:`refused internal host ${n}`};let r=fe.isIP(n);return r!==0&&!rt(n)?{ok:!1,error:`refused private address ${n}`}:{ok:!0,url:t,host:n,isLiteralIp:r!==0}}async function ot(e,{lookupFn:t=Wr.promises.lookup}={}){let n=Kr(e);if(!n.ok)return n;if(n.isLiteralIp)return{ok:!0,url:n.url,addresses:[{address:n.host,family:fe.isIPv6(n.host)?6:4}]};let r;try{r=await t(n.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${n.host} did not resolve`}}return!Array.isArray(r)||r.length===0||r.some(o=>!rt(o.address))?{ok:!1,error:`refused: ${n.host} resolves to a non-public address`}:{ok:!0,url:n.url,addresses:r}}async function it({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let n,r;try{let d=await t();n=d.Agent,r=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof n!="function"||typeof r!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(fe.isIPv6(f.address)?6:4)})),c=(d,f,u)=>{i.set(o(d),s(typeof f=="string"?[{address:f,family:u}]:f))},l=d=>{let f=o(d);if(fe.isIP(f))return[{address:f,family:fe.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return u},p=new n({connect:{lookup(d,f,u){let b;try{b=l(d)}catch(v){return u(v)}return f?.all?u(null,b):u(null,b[0].address,b[0].family)}}}),a=Yr((d,f={})=>r(d,{...f,dispatcher:p}),c);return{dispatcher:p,fetch:a,pin:c,resolve:l,async close(){try{await p.destroy()}catch{}}}}function Yr(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[st]=Object.freeze({pin:t}),e}function at(e){return typeof e=="function"&&typeof e[st]?.pin=="function"}function gn(e,t,n){if(!at(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[st].pin(t,n)}var Gr,st,wn=$e(()=>{Gr=new Set(["localhost","metadata.google.internal","metadata.goog"]);st=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as Jr}from"node:crypto";import{types as oe}from"node:util";function U(e){return ce(`HTTP JSON body refused: ${e}`)}function io(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof oe[t]=="function"&&oe[t](e))}function so(e){let t=[],n=0,r=0,o=0,i=0,s=new WeakSet,c=a=>{if(n+=Buffer.byteLength(a,"utf8"),n>re.bytes)throw U("serialized byte limit exceeded");t.push(a)},l=a=>{if(Buffer.byteLength(a,"utf8")>re.bytes)throw U("serialized byte limit exceeded");return JSON.stringify(a)},p=(a,d)=>{if(r+=1,r>re.nodes)throw U("node limit exceeded");if(d>re.depth)throw U("depth limit exceeded");if(a===null){c("null");return}if(typeof a=="string"){c(l(a));return}if(typeof a=="boolean"){c(a?"true":"false");return}if(typeof a=="number"){if(!Number.isFinite(a))throw U("non-finite number");c(Object.is(a,-0)?"0":String(a));return}if(typeof a!="object")throw U("unsupported non-JSON value");if(oe.isProxy(a))throw U("proxy value");if(io(a))throw U("unsupported exotic object");if(s.has(a))throw U("cyclic value");s.add(a);try{if(Object.getOwnPropertySymbols(a).length>0)throw U("symbol-keyed fields are unsupported");if(Array.isArray(a)){let b=Object.getPrototypeOf(a),v=0;for(;b!==null;){if(oe.isProxy(b))throw U("proxy array prototype");if(v+=1,v>re.depth)throw U("array prototype depth limit exceeded");b=Object.getPrototypeOf(b)}if(a.length>re.arrayLength)throw U("array length limit exceeded");for(let A=0;A<a.length;A+=1){let $=Object.getOwnPropertyDescriptor(a,String(A));if(!$||!Object.hasOwn($,"value")||$.enumerable!==!0)throw U("array entries must be dense enumerable own data")}let g=0;for(let A in a){if(i+=1,i>re.fields)throw U("enumeration limit exceeded");if(Object.hasOwn(a,A)&&(g+=1,g>a.length))throw U("named array fields are unsupported")}if(g!==a.length)throw U("array entries must be dense enumerable own data");c("[");for(let A=0;A<a.length;A+=1)A&&c(","),p(Object.getOwnPropertyDescriptor(a,String(A)).value,d+1);c("]");return}let f=Object.getPrototypeOf(a);if(f!==Object.prototype&&f!==null)throw U("non-plain object");let u=[];for(let b in a){if(i+=1,i>re.fields)throw U("enumeration limit exceeded");if(!Object.hasOwn(a,b))continue;if(o+=1,o>re.fields)throw U("field limit exceeded");let v=Object.getOwnPropertyDescriptor(a,b);if(!v||!Object.hasOwn(v,"value")||v.enumerable!==!0)throw U("object fields must be enumerable own data");u.push([b,v.value])}c("{");for(let b=0;b<u.length;b+=1)b&&c(","),c(l(u[b][0])),c(":"),p(u[b][1],d+1);c("}")}finally{s.delete(a)}};return p(e,0),t.join("")}function ao(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(oe.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let n=new Set;for(let r of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(r))throw new TypeError("HTTP header names must be valid tokens");let o=r.toLowerCase();if(n.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");n.add(o);let i=Object.getOwnPropertyDescriptor(e,r);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[r]=String(s)}return t}function co(){return Object.assign(Object.create(null),{Accept:"application/json"})}function lo(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function uo(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Fe(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=xn.get(e);return t||(t=An,An+=1,xn.set(e,t)),`reference:${t}`}function In(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?po.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function kn(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let n=t;if(typeof t=="string")try{n=JSON.parse(t)}catch{return!1}if(Array.isArray(n))return n.length>0&&n.every(In);if(!n||typeof n!="object")return!1;if(Object.hasOwn(n,"jsonrpc")||Object.hasOwn(n,"method"))return In(n);let r=Object.hasOwn(n,"type")?n.type:null;return typeof r=="string"&&fo.has(r)&&(!Object.hasOwn(n,"action")||n.action==null)&&(!Object.hasOwn(n,"signature")||n.signature==null)&&(!Object.hasOwn(n,"nonce")||n.nonce==null)}function mo(e,t,n,r={},o=null){let i=Jr("sha256"),s=(l,p)=>{let a=String(p);i.update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l),i.update("=").update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a).update(`
-`)};s("method",e),s("url",t),Object.keys(n||{}).map((l,p)=>({name:l.toLowerCase(),order:p,value:String(n[l])})).sort((l,p)=>l.name.localeCompare(p.name)||l.order-p.order).forEach((l,p)=>{s(`header-name-${p}`,l.name),s(`header-value-${p}`,l.value)}),s("body",o??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${l}`,r[l]??"-");return i.digest("hex")}function ho(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,vn):Math.min(250*2**e,vn)+Math.floor(Math.random()*100)}function ce(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function lt(e,t,n){return ce(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function me(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function bo(e){return e?e.byteLength??e.length??0:0}async function go(e,t,{url:n,truncate:r=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(me(e),!r))throw lt(n,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!r)throw lt(n,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let c=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(c.push(Buffer.from(d)),l+=bo(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!r))throw lt(n,`streamed ${l} bytes`,t);let a=Buffer.concat(c);return(p?a.subarray(0,t):a).toString("utf8")}function wo(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function So(e,{fetchImpl:t,method:n,headers:r,body:o,timeoutMs:i,lookupFn:s,realFetch:c,untrustedUrl:l=!1,maxResponseBytes:p=null,sameOriginRedirectsOnly:a=!1,importUndici:d,validateResponse:f,signal:u,redirectPolicy:b="follow",maxRedirects:v=Me}){let g=new AbortController,A=setTimeout(()=>g.abort(),i),$=u?En?En([u,g.signal]):u:g.signal,k=null,m=t,x=s?{lookupFn:s}:{};if(l&&!c&&!at(m))throw ce(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let O=async(E,{status:P=null}={})=>{let C=await ot(E,x);if(!C.ok)throw ce(P==null?`HTTP refused ${E}: ${C.error}`:`HTTP redirect to ${E} ${C.error}`,P==null?{}:{status:P});let H=new URL(E).hostname;if(c){if(k&&(await k.close(),k=null),!k)try{k=await it({requireUndici:!0,...d?{importUndici:d}:{}})}catch(w){throw ce(P==null?`HTTP refused ${E}: ${w?.message||w}`:`HTTP redirect to ${E} refused: ${w?.message||w}`,P==null?{}:{status:P})}k.pin(H,C.addresses),m=k.fetch}else gn(m,H,C.addresses);return C};try{let E=String(e),P=Object.assign(Object.create(null),r||{});l&&await O(E);for(let C=0;C<=v;C+=1){let H=Object.assign(Object.create(null),{method:n,headers:P,body:o,signal:$,redirect:"manual",dispatcher:void 0}),w=await m(E,H);if((b==="error"||v===0)&&w.status>=300&&w.status<400)throw me(w),ce(`HTTP ${w.status} ${n} redirect refused`,{status:w.status,redirectRefused:!0});if(oo.has(w.status)){let z=a===!0&&n==="POST"&&[307,308].includes(w.status)&&kn(n,o);if(n!=="GET"&&n!=="HEAD"&&!z){me(w);let T=new Error(`HTTP ${w.status} ${n} ${E} redirected non-idempotent request`);throw T.status=w.status,T}if(C===v)throw me(w),ce(`HTTP ${w.status} ${n} redirect budget exhausted`,{status:w.status,redirectRefused:!0});let Re=w.headers?.get?.("location"),W;try{W=lo(Re,E)}catch(T){throw me(w),T}let G=!uo(W,E);if(me(w),G&&n==="POST"){let T=new Error(`HTTP ${w.status} ${n} cross-origin redirect refused`);throw T.status=w.status,T}if(G&&a){let T=new Error(`HTTP ${w.status} ${n} cross-origin redirect refused`);throw T.status=w.status,T.retryable=!1,T}if(G&&(P=co(P)),l)await O(W,{status:w.status});else if(G){let T=await ot(W,x);if(!T.ok){let _=new Error(`HTTP redirect from ${E} ${T.error}`);throw _.status=w.status,_.retryable=!1,_}c&&T.addresses?.length&&(k||(k=await it(d?{importUndici:d}:{})),k&&(k.pin(new URL(W).hostname,T.addresses),m=k.fetch))}E=W;continue}if(typeof f=="function")try{await f(w,{url:E})}catch(z){throw me(w),ce(z?.message||String(z))}let V=await go(w,p,{url:E,onOversize:()=>g.abort()}),ne=wo(V);if(!w.ok){let z=new Error(`HTTP ${w.status} ${n} ${E}`);throw z.status=w.status,z.retryAfter=w.headers?.get?.("retry-after")??null,z.body=ne??V.slice(0,300),z}return ne??V}throw new Error(`HTTP redirect loop for ${e}`)}catch(E){if(g.signal.aborted&&!ut(u)){let P=E&&(typeof E=="object"||typeof E=="function")&&!oe.isProxy(E)?E:null,C=P?Object.getOwnPropertyDescriptor(P,"oversize"):null;if(!(C&&Object.hasOwn(C,"value")&&C.value===!0))try{if(!P)throw new TypeError("unsafe rejection");Object.defineProperties(P,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let w=new Error("HTTP request timed out");throw Object.defineProperties(w,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),w}}throw E}finally{clearTimeout(A),k&&await k.close()}}async function M(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&oe.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let n=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let _ of Object.getOwnPropertyNames(t)){let N=Object.getOwnPropertyDescriptor(t,_);if(!(_==="toJSON"&&N&&Object.hasOwn(N,"value")&&N.value===void 0)){if(!n.has(_))throw new TypeError("HTTP options contain unknown fields");if(!N||!N.enumerable||!Object.hasOwn(N,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let r=_=>{if(t==null||!Object.hasOwn(t,_))return;let N=Object.getOwnPropertyDescriptor(t,_);if(!N||!Object.hasOwn(N,"value"))throw new TypeError("HTTP options must contain own data properties");return N.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=r("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=r("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=r("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let c=r("redirectPolicy");if(c!==void 0&&c!=="follow"&&c!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=r("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>Me))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${Me}`);if(c==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let p=c??"follow",a=p==="error"?0:l??Me;for(let _ of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let N=r(_);if(N!==void 0&&typeof N!="boolean")throw new TypeError(`HTTP ${_} must be boolean`)}let d=r("maxResponseBytes");if(d!==void 0&&(!Number.isInteger(d)||d<1||d>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let f=r("signal");if(f!==void 0){if(oe.isProxy(f)||!(f instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{ut(f)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let _ of["importUndici","lookupFn","validateResponse"]){let N=r(_);if(N!==void 0&&typeof N!="function")throw new TypeError(`HTTP ${_} must be a function`)}let u=r("fetchImpl"),b=u||globalThis.fetch;if(typeof b!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let v=i??12e3,g=(o||"GET").toUpperCase(),A=r("headers"),$=ao(A),k=Object.assign(Object.create(null),$);Object.keys(k).some(_=>_.toLowerCase()==="accept")||(k.Accept="application/json");let m=r("body");m!=null&&typeof m!="string"&&(Object.keys(k).find(N=>N.toLowerCase()==="content-type")||(k["Content-Type"]="application/json"),m=so(m));let x=s??Qr,O=r("lookupFn"),E=!u,P=r("untrustedUrl")===!0,C=r("sameOriginRedirectsOnly")===!0,H=r("importUndici"),w=r("validateResponse"),V=f,ne=d??null,z=async()=>{let _;for(let N=0;N<=x;N++){V&&to.call(V);try{return await So(e,{fetchImpl:b,method:g,headers:k,body:m,timeoutMs:v,lookupFn:O,realFetch:E,untrustedUrl:P,maxResponseBytes:ne,sameOriginRedirectsOnly:C,importUndici:H,validateResponse:w,signal:V,redirectPolicy:p,maxRedirects:a})}catch(J){_=J;let se=F=>{if(!J||typeof J!="object"&&typeof J!="function"||oe.isProxy(J))return;let S=Object.getOwnPropertyDescriptor(J,F);return S&&Object.hasOwn(S,"value")?S.value:void 0},h=se("status"),y=se("oracleTimeout")===!0||se("name")==="AbortError"||se("name")==="TimeoutError"||ut(V),I=new Set([408,425,429]),L=se("retryable")===!1?!1:h!=null?I.has(h)||Xr.has(h)&&Sn.has(g):!y&&Sn.has(g);if(N===x||!L)throw J;let B=ho(N,se("retryAfter"));V?await new Promise((F,S)=>{let R=setTimeout(F,B);no.call(V,"abort",()=>{clearTimeout(R),S(ro(V)||new DOMException("Aborted","AbortError"))},{once:!0})}):await yo(B)}}throw _};if(!(r("dedupe")!==!1&&!V&&kn(g,m)))return z();let W=mo(g,e,k,{untrustedUrl:P,maxResponseBytes:ne,sameOriginRedirectsOnly:C,redirectPolicy:p,maxRedirects:a,timeoutMs:v,retries:x,fetchImpl:Fe(b),realFetch:E,lookupFn:Fe(O),importUndici:Fe(H),validateResponse:Fe(w)},m),G=ct.get(W);if(G)return G;let T=z().finally(()=>ct.delete(W));return ct.set(W,T),T}async function D(e){let t=Date.now();try{let n=await e();return{ok:!0,ms:Date.now()-t,data:n}}catch(n){return{ok:!1,ms:Date.now()-t,error:String(n.message||n),status:n.status??null}}}async function Z(e,t,n){let r=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,r.length||1)),i=new Array(r.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<r.length;){let c=s++;i[c]=await n(r[c],c)}})),i}var Xr,Sn,Qr,vn,Zr,eo,to,no,En,ut,ro,oo,Me,sa,re,ct,xn,An,po,fo,yo,j=$e(()=>{wn();Xr=new Set([408,425,429,500,502,503,504]),Sn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Qr=2,vn=4e3,Zr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,eo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,to=AbortSignal.prototype.throwIfAborted,no=EventTarget.prototype.addEventListener,En=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,ut=e=>e?Zr.call(e):!1,ro=e=>e?eo.call(e):void 0,oo=new Set([301,302,303,307,308]),Me=3,sa=64*1024,re=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});ct=new Map,xn=new WeakMap,An=1;po=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),fo=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);yo=e=>new Promise(t=>setTimeout(t,e))});function _n(e){return vo.get(Number(e))||null}function Nn(e,t=process.env){let n=_n(e);if(!n)return null;for(let r of n.rpcEnv){let o=(t[r]||"").trim();if(o)return o}return null}var Tn,vo,Pn=$e(()=>{Tn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},vo=new Map(Object.values(Tn).map(e=>[e.chainId,e]))});import{Interface as Eo,getAddress as xo}from"ethers";function dt(e,t){try{return xo(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Io(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=Nn(e,n);return r||Ao[Number(e)]||null}function To(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!ko.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}function _o(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function No(e){if(e?.error)throw _o(e.error);return e?.result}function Po(e,t,n){return`${e}
+`)};s("method",e),s("url",t),Object.keys(n||{}).map((l,p)=>({name:l.toLowerCase(),order:p,value:String(n[l])})).sort((l,p)=>l.name.localeCompare(p.name)||l.order-p.order).forEach((l,p)=>{s(`header-name-${p}`,l.name),s(`header-value-${p}`,l.value)}),s("body",o??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${l}`,r[l]??"-");return i.digest("hex")}function ho(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,vn):Math.min(250*2**e,vn)+Math.floor(Math.random()*100)}function ce(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function lt(e,t,n){return ce(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function me(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function bo(e){return e?e.byteLength??e.length??0:0}async function go(e,t,{url:n,truncate:r=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(me(e),!r))throw lt(n,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!r)throw lt(n,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let c=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(c.push(Buffer.from(d)),l+=bo(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!r))throw lt(n,`streamed ${l} bytes`,t);let a=Buffer.concat(c);return(p?a.subarray(0,t):a).toString("utf8")}function wo(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function So(e,{fetchImpl:t,method:n,headers:r,body:o,timeoutMs:i,lookupFn:s,realFetch:c,untrustedUrl:l=!1,maxResponseBytes:p=null,sameOriginRedirectsOnly:a=!1,importUndici:d,validateResponse:f,signal:u,redirectPolicy:b="follow",maxRedirects:v=Me}){let g=new AbortController,A=setTimeout(()=>g.abort(),i),$=u?En?En([u,g.signal]):u:g.signal,k=null,m=t,x=s?{lookupFn:s}:{};if(l&&!c&&!at(m))throw ce(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let P=async(E,{status:O=null}={})=>{let C=await ot(E,x);if(!C.ok)throw ce(O==null?`HTTP refused ${E}: ${C.error}`:`HTTP redirect to ${E} ${C.error}`,O==null?{}:{status:O});let H=new URL(E).hostname;if(c){if(k&&(await k.close(),k=null),!k)try{k=await it({requireUndici:!0,...d?{importUndici:d}:{}})}catch(w){throw ce(O==null?`HTTP refused ${E}: ${w?.message||w}`:`HTTP redirect to ${E} refused: ${w?.message||w}`,O==null?{}:{status:O})}k.pin(H,C.addresses),m=k.fetch}else gn(m,H,C.addresses);return C};try{let E=String(e),O=Object.assign(Object.create(null),r||{});l&&await P(E);for(let C=0;C<=v;C+=1){let H=Object.assign(Object.create(null),{method:n,headers:O,body:o,signal:$,redirect:"manual",dispatcher:void 0}),w=await m(E,H);if((b==="error"||v===0)&&w.status>=300&&w.status<400)throw me(w),ce(`HTTP ${w.status} ${n} redirect refused`,{status:w.status,redirectRefused:!0});if(oo.has(w.status)){let z=a===!0&&n==="POST"&&[307,308].includes(w.status)&&kn(n,o);if(n!=="GET"&&n!=="HEAD"&&!z){me(w);let T=new Error(`HTTP ${w.status} ${n} ${E} redirected non-idempotent request`);throw T.status=w.status,T}if(C===v)throw me(w),ce(`HTTP ${w.status} ${n} redirect budget exhausted`,{status:w.status,redirectRefused:!0});let Re=w.headers?.get?.("location"),W;try{W=lo(Re,E)}catch(T){throw me(w),T}let G=!uo(W,E);if(me(w),G&&n==="POST"){let T=new Error(`HTTP ${w.status} ${n} cross-origin redirect refused`);throw T.status=w.status,T}if(G&&a){let T=new Error(`HTTP ${w.status} ${n} cross-origin redirect refused`);throw T.status=w.status,T.retryable=!1,T}if(G&&(O=co(O)),l)await P(W,{status:w.status});else if(G){let T=await ot(W,x);if(!T.ok){let _=new Error(`HTTP redirect from ${E} ${T.error}`);throw _.status=w.status,_.retryable=!1,_}c&&T.addresses?.length&&(k||(k=await it(d?{importUndici:d}:{})),k&&(k.pin(new URL(W).hostname,T.addresses),m=k.fetch))}E=W;continue}if(typeof f=="function")try{await f(w,{url:E})}catch(z){throw me(w),ce(z?.message||String(z))}let V=await go(w,p,{url:E,onOversize:()=>g.abort()}),ne=wo(V);if(!w.ok){let z=new Error(`HTTP ${w.status} ${n} ${E}`);throw z.status=w.status,z.retryAfter=w.headers?.get?.("retry-after")??null,z.body=ne??V.slice(0,300),z}return ne??V}throw new Error(`HTTP redirect loop for ${e}`)}catch(E){if(g.signal.aborted&&!ut(u)){let O=E&&(typeof E=="object"||typeof E=="function")&&!oe.isProxy(E)?E:null,C=O?Object.getOwnPropertyDescriptor(O,"oversize"):null;if(!(C&&Object.hasOwn(C,"value")&&C.value===!0))try{if(!O)throw new TypeError("unsafe rejection");Object.defineProperties(O,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let w=new Error("HTTP request timed out");throw Object.defineProperties(w,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),w}}throw E}finally{clearTimeout(A),k&&await k.close()}}async function M(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&oe.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let n=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let _ of Object.getOwnPropertyNames(t)){let N=Object.getOwnPropertyDescriptor(t,_);if(!(_==="toJSON"&&N&&Object.hasOwn(N,"value")&&N.value===void 0)){if(!n.has(_))throw new TypeError("HTTP options contain unknown fields");if(!N||!N.enumerable||!Object.hasOwn(N,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let r=_=>{if(t==null||!Object.hasOwn(t,_))return;let N=Object.getOwnPropertyDescriptor(t,_);if(!N||!Object.hasOwn(N,"value"))throw new TypeError("HTTP options must contain own data properties");return N.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=r("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=r("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=r("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let c=r("redirectPolicy");if(c!==void 0&&c!=="follow"&&c!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=r("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>Me))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${Me}`);if(c==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let p=c??"follow",a=p==="error"?0:l??Me;for(let _ of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let N=r(_);if(N!==void 0&&typeof N!="boolean")throw new TypeError(`HTTP ${_} must be boolean`)}let d=r("maxResponseBytes");if(d!==void 0&&(!Number.isInteger(d)||d<1||d>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let f=r("signal");if(f!==void 0){if(oe.isProxy(f)||!(f instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{ut(f)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let _ of["importUndici","lookupFn","validateResponse"]){let N=r(_);if(N!==void 0&&typeof N!="function")throw new TypeError(`HTTP ${_} must be a function`)}let u=r("fetchImpl"),b=u||globalThis.fetch;if(typeof b!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let v=i??12e3,g=(o||"GET").toUpperCase(),A=r("headers"),$=ao(A),k=Object.assign(Object.create(null),$);Object.keys(k).some(_=>_.toLowerCase()==="accept")||(k.Accept="application/json");let m=r("body");m!=null&&typeof m!="string"&&(Object.keys(k).find(N=>N.toLowerCase()==="content-type")||(k["Content-Type"]="application/json"),m=so(m));let x=s??Qr,P=r("lookupFn"),E=!u,O=r("untrustedUrl")===!0,C=r("sameOriginRedirectsOnly")===!0,H=r("importUndici"),w=r("validateResponse"),V=f,ne=d??null,z=async()=>{let _;for(let N=0;N<=x;N++){V&&to.call(V);try{return await So(e,{fetchImpl:b,method:g,headers:k,body:m,timeoutMs:v,lookupFn:P,realFetch:E,untrustedUrl:O,maxResponseBytes:ne,sameOriginRedirectsOnly:C,importUndici:H,validateResponse:w,signal:V,redirectPolicy:p,maxRedirects:a})}catch(J){_=J;let se=F=>{if(!J||typeof J!="object"&&typeof J!="function"||oe.isProxy(J))return;let S=Object.getOwnPropertyDescriptor(J,F);return S&&Object.hasOwn(S,"value")?S.value:void 0},h=se("status"),y=se("oracleTimeout")===!0||se("name")==="AbortError"||se("name")==="TimeoutError"||ut(V),I=new Set([408,425,429]),L=se("retryable")===!1?!1:h!=null?I.has(h)||Xr.has(h)&&Sn.has(g):!y&&Sn.has(g);if(N===x||!L)throw J;let B=ho(N,se("retryAfter"));V?await new Promise((F,S)=>{let R=setTimeout(F,B);no.call(V,"abort",()=>{clearTimeout(R),S(ro(V)||new DOMException("Aborted","AbortError"))},{once:!0})}):await yo(B)}}throw _};if(!(r("dedupe")!==!1&&!V&&kn(g,m)))return z();let W=mo(g,e,k,{untrustedUrl:O,maxResponseBytes:ne,sameOriginRedirectsOnly:C,redirectPolicy:p,maxRedirects:a,timeoutMs:v,retries:x,fetchImpl:Fe(b),realFetch:E,lookupFn:Fe(P),importUndici:Fe(H),validateResponse:Fe(w)},m),G=ct.get(W);if(G)return G;let T=z().finally(()=>ct.delete(W));return ct.set(W,T),T}async function D(e){let t=Date.now();try{let n=await e();return{ok:!0,ms:Date.now()-t,data:n}}catch(n){return{ok:!1,ms:Date.now()-t,error:String(n.message||n),status:n.status??null}}}async function Z(e,t,n){let r=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,r.length||1)),i=new Array(r.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<r.length;){let c=s++;i[c]=await n(r[c],c)}})),i}var Xr,Sn,Qr,vn,Zr,eo,to,no,En,ut,ro,oo,Me,sa,re,ct,xn,An,po,fo,yo,j=$e(()=>{wn();Xr=new Set([408,425,429,500,502,503,504]),Sn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Qr=2,vn=4e3,Zr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,eo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,to=AbortSignal.prototype.throwIfAborted,no=EventTarget.prototype.addEventListener,En=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,ut=e=>e?Zr.call(e):!1,ro=e=>e?eo.call(e):void 0,oo=new Set([301,302,303,307,308]),Me=3,sa=64*1024,re=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});ct=new Map,xn=new WeakMap,An=1;po=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),fo=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);yo=e=>new Promise(t=>setTimeout(t,e))});function _n(e){return vo.get(Number(e))||null}function Nn(e,t=process.env){let n=_n(e);if(!n)return null;for(let r of n.rpcEnv){let o=(t[r]||"").trim();if(o)return o}return null}var Tn,vo,On=$e(()=>{Tn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},vo=new Map(Object.values(Tn).map(e=>[e.chainId,e]))});import{Interface as Eo,getAddress as xo}from"ethers";function dt(e,t){try{return xo(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Io(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=Nn(e,n);return r||Ao[Number(e)]||null}function To(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!ko.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}function _o(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function No(e){if(e?.error)throw _o(e.error);return e?.result}function Oo(e,t,n){return`${e}
 ${t}
-${JSON.stringify(n??[])}`}async function Oo(e,t,n){return M(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function ee(e,t,n=[],r={}){let o=String(t||""),i=To(o),s=Io(e,r);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&r.cacheChainId!==!1){let a=Cn.get(s);if(a!=null)return a}let l=r.dedupe!==!1&&!r.signal?Po(s,o,n):null;if(l&&Te.has(l))return Te.get(l);let p=(async()=>{let a=await Oo(s,{jsonrpc:"2.0",id:1,method:t,params:n},r),d=No(a);return i==="eth_chainid"&&typeof d=="string"&&Cn.set(s,d),d})();return l&&(Te.set(l,p),p.finally(()=>{Te.get(l)===p&&Te.delete(l)}).catch(()=>{})),p}async function pt(e,t={}){let n=await ee(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function ft(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await ee(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function Rn(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=dt(e.token||e.tokenAddress,"token"),o=dt(e.owner,"owner"),i=dt(e.spender,"spender"),s=On.encodeFunctionData("allowance",[o,i]),c=await ee(n,"eth_call",[{to:r,data:s},e.blockTag||"latest"],t),l=On.decodeFunctionResult("allowance",c),p=BigInt(l[0]);return{chainId:n,token:r,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var On,Ao,ko,Te,Cn,ge=$e(()=>{j();Pn();On=new Eo(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Ao={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};ko=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;Te=new Map,Cn=new Map});import{createServer as cs}from"node:http";import{readFileSync as jt,existsSync as kr}from"node:fs";import{dirname as ls,join as Ce,normalize as Dt,sep as us}from"node:path";import{fileURLToPath as ds}from"node:url";import{createHash as Pr}from"node:crypto";var Ie=1,Kt=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Or=Object.freeze(["read","simulate"]),Yt=1e4,Jt=1440*60,Xt=128,Qt=256,Zt=64,en=256,tn=/^0x[0-9a-fA-F]{40}$/,Cr=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,Rr=/^[a-z][a-z0-9_-]*:\*$/,$r=/^[A-Za-z0-9._:-]+$/,Lr=/^[A-Za-z0-9._:-]+$/,nn=/^(0|[1-9][0-9]*)$/,Q=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function rn(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function Ur(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return nn.test(t)?t:null}return null}function ae(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!nn.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function Xe(e){let t=String(e).split(":")[0];return Or.includes(t)}function Qe(e,t={}){let n=[],r=(d,f)=>n.push({field:d,message:f});if(!rn(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let d of Object.keys(e))Kt.includes(d)||r(d,"unknown field is not allowed");for(let d of Kt)(!(d in e)||e[d]==null)&&r(d,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let o={},i=ae(e.chainId);i==null||i<=0?r("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!tn.test(f.trim())?r(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>Zt)r("actions",`too many actions (max ${Zt})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){r("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&Rr.test(u)?d.push(u):r("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!Cr.test(u)){r("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>en)r("targets",`too many targets (max ${en})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!tn.test(u)){r("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!Xe(u));(f.length>0||o.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=Ur(e[d]);f==null?r(d,"must be a non-negative integer wei amount"):o[d]=f}let s=ae(e.maxSlippageBps);s==null||s>Yt?r("maxSlippageBps",`must be an integer between 0 and ${Yt}`):o.maxSlippageBps=s;let c=864e10,l=ae(e.expiresAt);if(l==null||l<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(l>c)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=ae(t.now);d==null?r("expiresAt","opts.now must be a unix-seconds integer"):l<=d?r("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>Jt&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${Jt} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():ae(e.nonce)!=null?String(ae(e.nonce)):null;!p||p.length>Xt||!$r.test(p)?r("nonce",`must be a non-empty string (max ${Xt} chars, [A-Za-z0-9._:-])`):o.nonce=p;let a=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!a||a.length>Qt||!Lr.test(a)?r("revocationKey",`must be a non-empty public identifier (max ${Qt} chars, [A-Za-z0-9._:-])`):o.revocationKey=a,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:o}}function Le(e,t={}){let{ok:n,errors:r,grant:o}=Qe(e,t);if(!n)throw new Q(r);return o}function Ze(e,t={}){let n=Le(e,t),o=Object.keys(n).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(n[i])}`);return`{"version":${Ie},${o.join(",")}}`}function Ue(e,t={}){return Pr("sha256").update(Ze(e,t),"utf8").digest("hex")}function on(e,t){let n=ae(t),r=ae(rn(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var sn="oracle-connect-request",Br="oracle-unsigned-grant",Fr="oracle-grant-canonical-json-utf8-v1",X=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},Mr=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Dr=Object.freeze(["privkey","wif","xprv","seed"]);function et(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return Mr.test(t)||Dr.includes(n)}var an=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),cn=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function qr(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>cn.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function ln(e){let t;try{t=JSON.stringify(e)}catch(o){throw new X("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let n=qr(t);for(let{rule:o,re:i}of an)if(i.test(n))throw new X("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new X("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&et(o))throw new X(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function Y(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let o=cn.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of an)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new X(t,i);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&et(o))throw new X(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");Y(o,`${t}[key]`,n),Y(i,`${t}[${String(o)}]`,n)}return e}if(e instanceof Set){let o=0;for(let i of e.values())Y(i,`${t}[${o++}]`,n);return e}if(Array.isArray(e))return e.forEach((o,i)=>Y(o,`${t}[${i}]`,n)),e;for(let[o,i]of Object.entries(e)){if(et(o))throw new X(`${t}.${o}`,"forbidden-key-name");Y(i,`${t}.${o}`,n,o)}return e}function ke(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))ke(t)}return e}function un(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new Q([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function dn(e){if(e?.now==null)throw new Q([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return un(e.now,"opts.now")}function jr(e){return new Date(e*1e3).toISOString()}function Hr(e,t){let n=e.actions.every(r=>Xe(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${Ie}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${jr(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
-`)}function pn(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new Q([{field:"request",message:"request must be a plain object"}]);let n=dn(t),{ttlSeconds:r,...o}=e,i={...o};if(r!=null){if(i.expiresAt!=null)throw new Q([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=un(r,"ttlSeconds");i.expiresAt=n+l}let s=Le(i,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),c=ke({kind:sn,version:Ie,grant:s});return Y(c)}function fn(e={},t={}){let n=dn(t),r=e&&e.kind===sn?e.grant:e,o=Le(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),i=Ze(o),s=Ue(o),c=Buffer.from(i,"utf8"),l=ke({kind:Br,unsigned:!0,payload:ke({version:Ie,grantId:s,grant:o,canonical:i}),signing:ke({scheme:Fr,message:i,bytesHex:`0x${c.toString("hex")}`,byteLength:c.length,sha256:s}),render:Hr(o,s)});return Y(l)}var be=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function mn(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function Vr(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function tt(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function zr(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(o=>e.has(o)):Array.isArray(e)?r.some(o=>e.includes(o)):typeof e.has=="function"?r.some(o=>e.has(o)):!1}function hn(e,{now:t,revoked:n}={}){let r=tt(t),{grant:o,revoked:i}=Vr(e),{ok:s,grant:c}=Qe(o);if(!s)return{status:be.INVALID,id:null,grant:null};let l=Ue(c);return i||zr(n,l,c)?{status:be.REVOKED,id:l,grant:c}:on(c,r)?{status:be.EXPIRED,id:l,grant:c}:{status:be.ACTIVE,id:l,grant:c}}function yn(e,{now:t,revoked:n,agentAddress:r,accountAddress:o,chainId:i}={}){let s=tt(t),c=r!=null?String(r).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,a=[];for(let d of mn(e)){let{status:f,id:u,grant:b}=hn(d,{now:s,revoked:n});f===be.ACTIVE&&(c!=null&&b.agentAddress!==c||l!=null&&b.accountAddress!==l||p!=null&&b.chainId!==p||a.push(Object.freeze({id:u,grant:b})))}return a.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),Y(Object.freeze(a))}function bn(e,t,{now:n,revoked:r}={}){let o=tt(n),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of mn(e)){let c=hn(s,{now:o,revoked:r});if(c.status!==be.INVALID&&c.id===i)return Y(Object.freeze({id:c.id,status:c.status,grant:c.grant}))}return null}import{Interface as Mn,getAddress as Ro,id as Dn}from"ethers";ge();j();var ba=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});j();var wa=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),mt=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),ht=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ge();ge();var De=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);j();ge();var $n=new Mn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),Ln=new Mn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),$o=Dn("Approval(address,address,uint256)"),Ya=Dn("ApprovalForAll(address,address,bool)"),Lo=1e4,Uo=2e5,Bo=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),Fo=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),Mo=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),Do=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),qo=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),jo=(1n<<256n)-1n,Ho=jo/2n,Vo=4320*60*60*1e3,zo=360*60*1e3,Wo=600*1e3,Go=45*1e3,Ko=512,Yo=128,Un=new Map,yt=new Map,Bn=new Map;function we(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function gt(e,t,n){let r=e.get(t);return r?Date.now()-r.at>n?(e.delete(t),null):r:null}function qe(e,t,n,r){for(e.delete(t),e.set(t,{at:Date.now(),value:n});e.size>r;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function Jo(e,t){try{return Ro(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Xo(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function Fn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Qo({unlimited:e,spenderLabel:t,lastActivityAt:n}){if(e)return"unlimited";if(!t)return"unknown-spender";if(n){let r=Date.parse(n);if(Number.isFinite(r)&&Date.now()-r>Vo)return"stale"}return"scoped"}function Zo(e,t,n){if(n)return"UNLIMITED";if(t==null)return e.toString();let r=10n**BigInt(t),o=e/r,i=e%r;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function ei(e,t,n,r){let o=`${e}:${t}`,i=r?.get(o);if(i)return i;if(we(n)){let c=gt(Un,o,zo);if(c)return c.value}let s=(async()=>{let c=async d=>{try{let f=$n.encodeFunctionData(d,[]),u=await ee(e,"eth_call",[{to:t,data:f},"latest"],n);return!u||u==="0x"?null:$n.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([c("decimals"),c("symbol")]),a={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return we(n)&&qe(Un,o,a,Ko),a})();return r?.set(o,s),s}async function ti(e,t,n){let r=Math.min(Math.max(Number(n.lookbackBlocks)||Lo,1),Uo),o=await pt(e,n);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-r),s=await ee(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[$o,Xo(t)]}],n);if(!Array.isArray(s))throw new Error("log scan returned no array");let c=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),a=l?.topics?.[2];!p||!a||c.set(`${p}:${Fn(a)}`,{token:p,spender:Fn(a)})}return{pairs:[...c.values()],fromBlock:i,toBlock:o}}function ni(e){return(qo[e]||[]).flatMap(n=>Fo.map(r=>({token:n.address,spender:r.address,symbol:n.symbol,decimals:n.decimals})))}async function ri(e,t,n={}){let r=[],o="direct-probe",i=null,s=ni(e),c=bt(e),l=we(n)&&gt(yt,e,Wo)?.value===!1;if(s.length===0&&c.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await ti(e,t,n);r=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},we(n)&&qe(yt,e,!0,64)}catch{if(we(n)&&qe(yt,e,!1,64),r=s,r.length===0&&c.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await Z(r,n.concurrency||4,async u=>{try{let b=await Rn({chainId:e,token:u.token,owner:t,spender:u.spender},n),v=BigInt(b.allowance);if(v<=0n)return null;let g=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await ei(e,u.token,n,p),A=v>=Ho,$=Bo[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:g.symbol,decimals:g.decimals,spender:u.spender,spenderLabel:$,allowance:v.toString(),allowanceDisplay:Zo(v,g.decimals,A),unlimited:A,lastActivityAt:null,risk:Qo({unlimited:A,spenderLabel:$,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await ii(e,t,n);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:r.length,collectionsProbed:bt(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function oi(e,t,n,r,o){try{let i=Ln.encodeFunctionData("isApprovedForAll",[n,r]),s=await ee(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!Ln.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function bt(e){return(Do[e]||[]).flatMap(n=>Mo.map(r=>({collection:n.address,collectionName:n.name,operator:r.address,operatorLabel:r.label})))}async function ii(e,t,n){let r=bt(e);return r.length===0?[]:(await Z(r,n.concurrency||4,async i=>await oi(e,i.collection,t,i.operator,n)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function qn(e={},t={}){let n=Jo(e.owner||e.address,"owner"),r=new Map(De.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>r.has(u)):[...r.keys()],i=`${n}:${[...o].sort((u,b)=>u-b).join(",")}:${e.lookbackBlocks??""}`,s=we(t)&&!e.refresh;if(s){let u=gt(Bn,i,Go);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let c=await Z(o,e.concurrency||3,u=>ri(u,n,{...t,lookbackBlocks:e.lookbackBlocks})),l=c.flatMap(u=>u.approvals),p=c.map(u=>u.scan),a=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:n,scannedRange:a?`last ${a.toBlock-a.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&qe(Bn,i,f,Yo),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as _i}from"ethers";j();ge();j();import{types as wt}from"node:util";function je(e){if(!e||typeof e!="object"||wt.isProxy(e)||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function _e(e,t){if(e==null||(typeof e=="object"||typeof e=="function")&&wt.isProxy(e)||!Object.hasOwn(Object(e),t))return;let n=Object.getOwnPropertyDescriptor(Object(e),t);return n&&Object.hasOwn(n,"value")?n.value:void 0}function te(e,t="provider response",n=0){if(n>64)throw new Error(`${t} exceeds the JSON nesting bound`);if(e===null||typeof e=="string"||typeof e=="boolean"||typeof e=="number"&&Number.isFinite(e))return e;if(Array.isArray(e)){if(wt.isProxy(e)||e.length>1e5)throw new Error(`${t} contains an invalid array`);let o=new Array(e.length);for(let i=0;i<e.length;i+=1){let s=Object.getOwnPropertyDescriptor(e,String(i));if(!s||!Object.hasOwn(s,"value"))throw new Error(`${t} arrays must contain dense own data`);o[i]=te(s.value,t,n+1)}return o}if(!je(e))throw new Error(`${t} contains a non-JSON value`);let r=Object.create(null);for(let o of Object.keys(e)){let i=Object.getOwnPropertyDescriptor(e,o);if(!i||!Object.hasOwn(i,"value"))throw new Error(`${t} objects must contain own data`);r[o]=te(i.value,t,n+1)}return r}var jn="mainnet-beta",si="https://api.mainnet-beta.solana.com",St="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function ai(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||si).trim()}function he(e,t="address"){let n=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return n}function ci(e,t){return t?[...e,{commitment:t}]:e}async function Hn(e,t=[],n={}){let r=String(e||"");if(r==="sendTransaction"||r==="sendRawTransaction"||r==="requestAirdrop"||r==="requestAirDrop"||/airdrop/i.test(r)||/^send/i.test(r))throw new Error(`solana-rpc: ${r} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=te(await M(ai(n),{method:"POST",body:{jsonrpc:"2.0",id:n.id||1,method:e,params:t},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,maxResponseBytes:n.maxResponseBytes,sameOriginRedirectsOnly:n.sameOriginRedirectsOnly}),"solana-rpc response");if(!je(o))throw new Error(`solana-rpc ${e}: invalid response envelope`);let i=_e(o,"error");if(i)throw new Error(`solana-rpc ${e}: ${_e(i,"message")||JSON.stringify(i)}`);if(!Object.hasOwn(o,"result"))throw new Error(`solana-rpc ${e}: missing result`);return _e(o,"result")}async function Vn(e={},t={}){let n=he(e.address||e.owner,"address"),r=await Hn("getBalance",ci([n],e.commitment),t);return{provider:"solana-rpc",cluster:jn,address:n,lamports:String(r?.value??0),slot:r?.context?.slot??null,raw:r}}function li(e={}){let t=e.account?.data?.parsed?.info||{},n=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(n.amount??"0"),decimals:n.decimals??null,uiAmount:n.uiAmount??null,uiAmountString:n.uiAmountString??null,raw:e}}async function vt(e={},t={}){let n=he(e.owner||e.address,"owner"),r=e.mint?{mint:he(e.mint,"mint")}:{programId:he(e.programId||St,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await Hn("getTokenAccountsByOwner",[n,r,o],t),s=Array.isArray(i?.value)?i.value.map(li):[];return{provider:"solana-rpc",cluster:jn,owner:n,filter:r,slot:i?.context?.slot??null,accounts:s,raw:i}}j();var ui="mainnet",di="https://mempool.space/api",pi="https://mempool.space/testnet/api";function zn(e={}){return String(e.network||process.env.BTC_NETWORK||ui).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function fi(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):zn(e)==="testnet"?pi:di}function le(e,t="address"){let n=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(n)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(n))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return n}async function mi(e,t={}){let n=`${fi(t)}${e.startsWith("/")?e:`/${e}`}`;return te(await M(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"bitcoin-esplora response")}async function Wn(e={},t={}){let n=le(e.address||e.addr,"address"),r=await mi(`/address/${n}`,t),o=r.chain_stats||{},i=r.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),c=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:zn(t),address:n,balanceSats:String(s-c),chainStats:o,mempoolStats:i,raw:r}}var Gn="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function Se({provider:e,defaultUrl:t,hosts:n=[],url:r,strict:o=!1}){let s=(String(r??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Kn(t)};let c;try{c=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(c.protocol!=="http:"&&c.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=c.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Kn(t),...n]).has(l)){let a=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return c.protocol==="http:"&&!a?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[Gn]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${Gn}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Kn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function ye(e,t,n){let r={...e};if(!n)return r;for(let[o,i]of Object.entries(t||{}))i&&(r[o]=i);return r}function Et(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var hi=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function yi(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",n=!1;try{let r=Et(e);if(r){let o=new URL(r).host,i=new URL(r).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);n=hi.includes(o)&&(i==="https:"||s)}}catch{n=!1}return ye({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},n)}async function Yn(e,t={}){let r=await(t.fetchImpl||fetch)(e,{method:"GET",headers:yi(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await r.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!r.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${r.status} ${String(o).slice(0,160)}`);return i}async function Jn(e={},t={}){let n=le(e.address||e.addr,"address"),r=Et(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${r}/v1/indexer/address/${n}/runes/balance-list?start=0&limit=100`,`${r}/v1/runes/address/${n}`,`${r}/runes/balance/${n}`,`${r}/address/${n}/runes`],i=null;for(let s of o)try{let c=await Yn(s,t),l=bi(c);return{provider:"bitcoin-meta",address:n,ok:!0,count:l.length,balances:l,source:s}}catch(c){i=c}return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function bi(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({rune:r.rune||r.runeid||r.runeId||r.spacedRune||r.name||r.ticker||null,runeId:r.runeid||r.runeId||r.id||null,amount:String(r.amount??r.balance??r.total??r.qty??"0"),symbol:r.symbol||null,divisibility:r.divisibility??r.div??null,raw:r}))}async function He(e={},t={}){let n=le(e.address||e.addr,"address"),r=Et(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${r}/v1/indexer/address/${n}/inscription-data?cursor=0&size=${o}`,`${r}/v1/inscriptions/address/${n}?limit=${o}`,`${r}/address/${n}/inscriptions?limit=${o}`],s=null;for(let c of i)try{let l=await Yn(c,t),p=gi(l);return{provider:"bitcoin-meta",address:n,ok:!0,count:p.length,inscriptions:p,source:c}}catch(l){s=l}return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function gi(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({id:r.inscriptionId||r.id||r.inscription_id||null,number:r.inscriptionNumber??r.number??null,sat:r.sat||r.satoshi||null,contentType:r.contentType||r.content_type||null,utxo:r.utxo||r.output||(r.txid!=null?`${r.txid}:${r.vout??r.n}`:null),raw:r}))}j();var wi="https://api.hyperliquid.xyz/info",Si="https://api.hyperliquid-testnet.xyz/info";function vi({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let n=process.env.HL_API_URL.replace(/\/$/,"");return n.endsWith("/info")?n:`${n}/info`}return e||process.env.HL_TESTNET==="1"?Si:wi}async function xt(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let n=vi(t);return te(await M(n,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"hyperliquid info response")}async function Xn(e={}){return xt({type:"allMids"},e)}async function Qn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return xt({type:"spotClearinghouseState",user:e},t)}async function Zn(e,t={}){if(!e)throw new Error("hlUserState requires user");return xt({type:"clearinghouseState",user:e},t)}j();var Ei="https://coins.llama.fi";function xi(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||Ei).replace(/\/$/,"")}async function At(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let n=e.map(encodeURIComponent).join(",");return M(`${xi(t)}/prices/current/${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}j();var er=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,Ai=/[<>&`*_~[\]()|\\]/g,Ii=/[\u0000-\u001F\u007F]/g;function It(e,{max:t=32,fallback:n=""}={}){return e==null?n:String(e).normalize("NFKC").replace(er,"").replace(Ii,"").replace(Ai,"").replace(/\s+/g," ").trim().slice(0,t).trim()||n}function kt(e){if(e==null)return!1;let t=String(e);return er.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var tr=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"}),ki=Object.freeze(["block_number","index"]),gc=new Set([...ki,"items_count","value","hash","inserted_at","fee"]);function Ti(e,t={}){let n=Number(e),r=t.baseUrl||tr[n];if(!r)throw new Error(`Blockscout not configured for chainId ${n}`);return r.replace(/\/$/,"")}function nr(e){return!!tr[Number(e)]}async function rr(e={},t={}){if(!e.address)throw new Error("address required");let n=Number(e.chainId||1),r=`${Ti(n,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=te(await M(r,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}}),"blockscout token balances response");return Array.isArray(o)?o:[]}function or(e=[],{fungibleOnly:t=!0}={}){let n=[];for(let r of e){if(!r||typeof r!="object")continue;let o=r.token&&typeof r.token=="object"?r.token:{},i=String(o.type||r.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||r.token_address||r.tokenAddress||null;if(!s||typeof s!="string")continue;let c=String(r.value??r.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(c)||c==="0")continue;let l=o.decimals??r.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=It(o.symbol||o.name,{max:32,fallback:"TOKEN"}),a=It(o.name,{max:80,fallback:""})||null;n.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:a,decimals:l,amountRaw:c,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:kt(o.symbol)||kt(o.name)||void 0})}return n}var Ni="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",sr=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function ue(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Ve(e,...t){for(let n of t){let r=String(e?.[n]||"").trim();if(r)return r}return null}function ir(e){if(!e)return null;try{return _i(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function Nt(e={},t=process.env){let n=e.addresses||{},r=ir(n.evm||e.evmAddress||Ve(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=n.solana||e.solanaAddress||Ve(t,"ORACLE_SOLANA_ADDRESS"),i=n.bitcoin||e.bitcoinAddress||Ve(t,"ORACLE_BITCOIN_ADDRESS"),s=ir(n.hyperliquid||e.hyperliquidAddress||Ve(t,"ORACLE_HYPERLIQUID_ADDRESS")||r);return{evm:r,solana:o?he(o,"portfolio Solana address"):null,bitcoin:i?le(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function Ne(e,t){let n=BigInt(String(e||"0")),r=Number(t);if(!Number.isInteger(r)||r<0||r>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(r===0)return n.toString();let o=n<0n,i=o?-n:n,s=10n**BigInt(r),c=i/s,l=String(i%s).padStart(r,"0").replace(/0+$/,"");return`${o?"-":""}${c}${l?`.${l}`:""}`}function ve(e){let t=Number(e);return Number.isFinite(t)?t:null}function ze(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function de(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function ar(e,t){let n=sr[t],r=n?e?.coins?.[n]:null,o=Number(r?.price);return{key:n||null,priceUsd:Number.isFinite(o)?o:null,timestamp:r?.timestamp??null,confidence:r?.confidence??null}}function Pi(e){let t=new Map;for(let n of e)if(n?.ok)for(let r of n.data?.accounts||[]){let o=BigInt(String(r.amount||"0"));if(o===0n||!r.mint)continue;let i=`${r.mint}:${r.decimals??"unknown"}`,s=t.get(i)||{mint:r.mint,amountRaw:0n,decimals:r.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,n.program&&s.programs.add(n.program),t.set(i,s)}return[...t.values()].map(n=>{let r=n.amountRaw.toString(),o=n.decimals==null?null:Ne(r,n.decimals),i=n.decimals===0&&n.amountRaw===1n;return{mint:n.mint,amountRaw:r,amount:o,decimals:n.decimals,tokenPrograms:[...n.programs],accountCount:n.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function Tt(e,t){return{family:e,status:"unsupported",reason:t}}function _t(e,t){if(!e||e.status!=="ok")return e;let n=ar(t,e.symbol),r=ve(e.amount),o=r!=null&&n.priceUsd!=null?ze(r*n.priceUsd):null;return{...e,price:n,usdValue:o}}async function cr(e={},t={}){let n=new Date().toISOString(),r=Nt(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,c=new Map(De.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...c.keys()],p=[...new Set(Object.values(sr))],a=o?D(()=>At(p,ue(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=Z(l,e.concurrency||5,async h=>{let y=c.get(h);if(!y)return{family:"evm",chainId:h,name:null,address:r.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!r.evm)return{family:"evm",chainId:h,name:y.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let I={...ue(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},L=await D(()=>ft(h,r.evm,I));if(!L.ok)return{family:"evm",chainId:h,name:y.name,address:r.evm,status:"unavailable",latencyMs:L.ms,error:L.error};let B=y.nativeCurrency?.decimals??18,F=y.nativeCurrency?.symbol||"NATIVE",S=L.data.balanceWei,R={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&nr(h)){let pe=await D(()=>rr({chainId:h,address:r.evm},{...ue(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));pe.ok?R={status:"ok",assets:or(pe.data,{fungibleOnly:!0}).map(xe=>{let Ae=Ne(xe.amountRaw,xe.decimals);return{...xe,amount:Ae,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:pe.ms}:R={status:"unavailable",assets:[],reason:pe.error||"blockscout token-balances failed",source:"blockscout",latencyMs:pe.ms}}return{family:"evm",chainId:h,name:y.name,address:r.evm,status:"ok",latencyMs:L.ms,native:{status:"ok",symbol:F,amountRaw:S,decimals:B,amount:Ne(S,B)},fungibleTokens:R,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:R.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!r.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=ue(t,"solana"),y=await D(()=>Vn({address:r.solana},h)),I=i||s?await Promise.all([D(()=>vt({owner:r.solana,programId:St},h)).then(R=>({...R,program:"spl-token"})),D(()=>vt({owner:r.solana,programId:Ni},h)).then(R=>({...R,program:"token-2022"}))]):[],L=Pi(I),B=L.filter(R=>R.classification==="collectible-candidate"),F=L.filter(R=>R.classification!=="collectible-candidate"),S=I.filter(R=>!R.ok).map(R=>R.error);return{family:"solana",name:"Solana Mainnet",address:r.solana,status:y.ok||I.some(R=>R.ok)?"ok":"unavailable",native:y.ok?{status:"ok",symbol:"SOL",amountRaw:y.data.lamports,decimals:9,amount:Ne(y.data.lamports,9),slot:y.data.slot}:{status:"unavailable",symbol:"SOL",error:y.error},fungibleTokens:{status:i?S.length===I.length?"unavailable":S.length?"partial":"ok":"not-requested",assets:i?F:[],errors:S,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?S.length===I.length?"unavailable":"partial":"not-requested",assets:s?B:[],errors:S,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!r.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=ue(t,"bitcoin"),y=ue(t,"bitcoinMeta"),[I,L,B]=await Promise.all([D(()=>Wn({address:r.bitcoin},h)),i?D(()=>Jn({address:r.bitcoin},y)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?D(()=>He({address:r.bitcoin},y)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),F=L.ok?L.data:null,S=B.ok?B.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:r.bitcoin,status:I.ok||F?.ok||S?.ok?"ok":"unavailable",native:I.ok?{status:"ok",symbol:"BTC",amountRaw:I.data.balanceSats,decimals:8,amount:Ne(I.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:I.error},fungibleTokens:{status:i?F?.ok?"ok":"unavailable":"not-requested",assets:F?.balances||[],error:F?.ok?null:F?.error||L.error,verification:"indexer-reported"},collectibles:{status:s?S?.ok?"ok":"unavailable":"not-requested",assets:S?.inscriptions||[],error:S?.ok?null:S?.error||B.error,unknownNotEmpty:!!S?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),b=(async()=>{if(!r.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=ue(t,"hyperliquid"),[y,I,L]=await Promise.all([D(()=>Qn(r.hyperliquid,h)),D(()=>Zn(r.hyperliquid,h)),D(()=>Xn(h))]),B=(y.ok&&Array.isArray(y.data?.balances)?y.data.balances:[]).filter(S=>de(S.total)||de(S.hold)).map(S=>({coin:S.coin||null,total:String(S.total??"0"),hold:String(S.hold??"0"),priceUsd:null,usdValue:null})),F=(I.ok&&Array.isArray(I.data?.assetPositions)?I.data.assetPositions:[]).map(S=>S.position||S).filter(S=>de(S.szi)).map(S=>({coin:S.coin||null,size:String(S.szi??"0"),entryPrice:S.entryPx??null,positionValueUsd:S.positionValue??null,unrealizedPnlUsd:S.unrealizedPnl??null,liquidationPrice:S.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:r.hyperliquid,status:y.ok||I.ok?"ok":"unavailable",spot:{status:y.ok?"ok":"unavailable",balances:B,error:y.ok?null:y.error},perps:{status:I.ok?"ok":"unavailable",accountValueUsd:I.data?.marginSummary?.accountValue??null,withdrawableUsd:I.data?.withdrawable??null,positions:F,error:I.ok?null:I.error},mids:L.ok?L.data:{},source:"hyperliquid-info"}})(),[v,g,A,$,k]=await Promise.all([d,f,u,b,a]),m=k.ok?k.data:null,x=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),O=[];for(let h of v){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let y=x[h.chainId];if(y)for(let I of h.fungibleTokens.assets||[])I.address&&O.push(`${y}:${String(I.address).toLowerCase()}`)}let E=null;if(o&&O.length){let h=[...new Set(O)],y=await D(()=>At(h,ue(t,"prices")));y.ok&&(E=y.data)}let P=v.map(h=>{let y=h.native?{...h,native:_t(h.native,m)}:h;if(y.fungibleTokens?.status==="ok"&&Array.isArray(y.fungibleTokens.assets)){let I=x[y.chainId],L=y.fungibleTokens.assets.map(B=>{let F=String(B.symbol||"").toUpperCase(),S=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(F)&&(S=1),S==null&&I&&B.address&&E?.coins){let Gt=`${I}:${String(B.address).toLowerCase()}`,xe=E.coins[Gt],Ae=Number(xe?.price);Number.isFinite(Ae)&&Ae>0&&(S=Ae)}let R=ve(B.amount),pe=R!=null&&S!=null?ze(R*S):null;return{...B,priceUsd:S,usdValue:pe}});y={...y,fungibleTokens:{...y.fungibleTokens,assets:L}}}return y});g.native&&(g.native=_t(g.native,m)),A.native&&(A.native=_t(A.native,m));let C=0,H=0,w=0;for(let h of[...P,g,A]){h.native?.status==="ok"&&de(h.native.amount)&&(h.native.usdValue!=null?(C+=h.native.usdValue,H+=1):w+=1);for(let y of h.fungibleTokens?.assets||[])!de(y.amount)&&!de(y.amountRaw)||(y.usdValue!=null?(C+=y.usdValue,H+=1):w+=1)}let V=ar(m,"HYPE");for(let h of $.spot?.balances||[]){let y=String(h.coin||"").toUpperCase(),I=y==="USDC"||y==="USDT"||y==="USDT0"?1:y==="HYPE"?V.priceUsd||ve($.mids?.HYPE):ve($.mids?.[h.coin]),L=ve(h.total);h.priceUsd=I,h.usdValue=L!=null&&I!=null?ze(L*I):null,de(h.total)&&(h.usdValue!=null?(C+=h.usdValue,H+=1):w+=1)}let ne=ve($.perps?.accountValueUsd);ne!=null&&ne!==0&&(C+=ne,H+=1);let z=[...g.fungibleTokens?.assets||[],...g.collectibles?.assets||[]].filter(h=>de(h.amount)).length,Re=(A.fungibleTokens?.assets||[]).length+(A.collectibles?.assets||[]).length;w+=z+Re;let W=[...P,g,A,$],G=h=>W.filter(y=>y.status===h).length,T=[],_=P.filter(h=>h.fungibleTokens?.status==="unavailable"),N=P.filter(h=>h.fungibleTokens?.status==="ok");_.length&&!N.length?T.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):_.length&&T.push(`EVM token discovery partial: Blockscout covered ${N.length} chain(s); ${_.length} chain(s) still native-only.`),(g.fungibleTokens?.assets?.length||g.collectibles?.assets?.length)&&T.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),A.collectibles?.unknownNotEmpty&&T.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),k.ok||T.push(`Price provider unavailable: ${k.error}`);let J=[Tt("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),Tt("sui","Sui balance adapter is not installed"),Tt("aptos","Aptos balance adapter is not installed")],se=W.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:n,addresses:r,coverage:{requestedSurfaces:W.length,ok:G("ok"),unavailable:G("unavailable"),notConfigured:G("not-configured"),unsupported:G("unsupported")+J.length,evmChainsRequested:l.length,evmChainsOk:P.filter(h=>h.status==="ok").length},valuation:{knownUsd:ze(C),label:"known priced value, not a complete portfolio total",pricedItems:H,unpricedNonzeroItems:w,complete:w===0&&!se&&G("unavailable")===0&&G("not-configured")===0&&J.length===0,priceSource:o?"DefiLlama":null,priceStatus:k.ok?"ok":"unavailable",priceQueriedAt:n},chains:[...P,g,A,$],unsupportedFamilies:J,warnings:T}}j();j();import{readFileSync as Ci,existsSync as Ri}from"node:fs";import{getAddress as $i,Interface as We,TypedDataEncoder as Bc,parseUnits as Fc}from"ethers";var Oi=300*1e3,Oc=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var Li="https://api.opensea.io/api/v2",Ui="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",Hc=new We([`function ${Ui}`]),Vc=new We(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Bi=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),Fi=new Set(Bi),Mi=new Set(["solana","flow"]);function Di(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!Ri(e))return"";try{for(let t of Ci(e,"utf8").split(`
-`)){let n=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(n)return n[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function Ot(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||Di()}function ur(e={}){return Se({provider:"opensea",defaultUrl:Li,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function dr(e={}){return ur(e).baseUrl}function pr(e={}){return ye({accept:"application/json"},{"x-api-key":Ot(e)},ur(e).trusted)}function qi(e){let t=String(e||"ethereum").trim().toLowerCase();if(!Fi.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function lr(e,t="address"){try{return $i(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function fr(e,t=null){let n=String(e||"").trim();if(!n)throw new Error("opensea: account address required");if(t&&!Mi.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(n))return lr(n,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(n))throw new Error("opensea: invalid account address");return n}function ji(e={},t,n){return{chain:t,owner:n,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function Ct(e={},t={}){if(!Ot(t))throw new Error("OPENSEA_API_KEY required");let n=qi(e.chain),r=fr(e.address||e.owner,n),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],c=e.next?String(e.next):null,l=0;do{let p=new URL(`${dr(t)}/chain/${encodeURIComponent(n)}/account/${encodeURIComponent(r)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),c&&p.searchParams.set("next",c);let a=await M(p.toString(),{headers:pr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(a?.nfts)?a.nfts:[])s.push(ji(d,n,r));c=a?.next?String(a.next):null,l+=1}while(c&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:n,owner:r,count:s.length,pages:l,complete:!c,next:c,nfts:s,exec:!1,readOnly:!0}}async function mr(e={},t={}){if(!Ot(t))throw new Error("OPENSEA_API_KEY required");let n=fr(e.address||e.owner),r=await M(`${dr(t)}/account/${encodeURIComponent(n)}/pnl`,{headers:pr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:n,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:r?.realized_pnl_usd??null,unrealizedPnlUsd:r?.unrealized_pnl_usd??null,totalPnlUsd:r?.total_pnl_usd??null,netInvestedUsd:r?.net_invested_usd??null,currentValueUsd:r?.current_value_usd??null,returnPercentage:r?.return_percentage??null,itemLevelPnlAvailable:!1,raw:r,exec:!1,readOnly:!0}}var zc=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var Wc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var Gc=new We(["function setApprovalForAll(address operator,bool approved)"]),Kc=new We(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var Vi="https://api.satflow.com/v1";function hr(e={}){return Se({provider:"satflow",defaultUrl:Vi,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function zi(e={}){return hr(e).baseUrl}function yr(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function Wi(e={}){return ye({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":yr(e)},hr(e).trusted)}async function Gi(e,{method:t="GET",body:n,opts:r={}}={}){if(!yr(r))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${zi(r)}${e.startsWith("/")?e:`/${e}`}`,c=await(r.fetchImpl||fetch)(i,{method:t,headers:Wi(r),body:n!=null?JSON.stringify(n):void 0,signal:AbortSignal.timeout(r.timeoutMs??2e4)}),l=await c.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!c.ok)throw new Error(`satflow ${t} ${e}: HTTP ${c.status} ${String(l).slice(0,200)}`);return p}async function br(e={},t={}){let n=le(e.address||e.addr,"address"),r=new URLSearchParams({address:n});e.type&&r.set("type",e.type),e.limit!=null&&r.set("limit",String(e.limit)),e.offset!=null&&r.set("offset",String(e.offset));let o=await Gi(`/address/wallet-contents?${r}`,{opts:t});return{provider:"satflow",address:n,contents:o}}j();j();var ll=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Ki=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],Yi=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Ji=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Xi(e={}){let t=[],n=String(e.name||""),r=String(e.description||""),o=`${n} ${r}`;Yi.test(n)&&t.push("url-in-name");let i=Ki.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),Ji.test(n)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(n)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,c=!Array.isArray(e.traits)||e.traits.length===0;s&&c&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function gr(e={}){let t=Xi(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Qi=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Zi=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function Rt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function Pe(e,t){let n=await D(t);return n.ok?{ok:!0,data:n.data}:{ok:!1,error:`${e}: ${n.error}`.slice(0,300)}}function es(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function ts(e={},t){let n=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:n==null?null:String(n),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(n?`Inscription ${n}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function ns(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function wr(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function rs(e){let t=new Map;if(Array.isArray(e)){for(let n of e)n?.assetKey&&t.set(String(n.assetKey).toLowerCase(),n);return t}if(e&&typeof e=="object")for(let[n,r]of Object.entries(e))t.set(n.toLowerCase(),r);return t}function os(e,t){let n=wr(e),r=t.get(n),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!r)return{...e,assetKey:n};let i=Number(r.costUsd),s=Number(r.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:n,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let c=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-c)*100)/100,currentValueUsd:o,totalCostUsd:c,realizedUsd:null}}:{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function is(e){let t=new Map;for(let n of e){let r=wr(n);t.has(r)||t.set(r,n)}return[...t.values()]}function ss(e,t){let n=e.filter(i=>i.itemPnl?.status==="estimated"),r=e.length-n.length,o=Math.round(n.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:r===0&&e.length?"estimated-complete-for-held-items":n.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:n.length,unknownItems:r,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function Sr(e={},t={}){let n=new Date().toISOString(),r=Nt(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=Qi.filter(m=>!o||o.has(m.chain)),s=[],c=[],l=Rt(t,"opensea"),p=r.evm?i.filter(m=>m.family!=="solana"):[],a=await Z(p,4,async m=>({row:m,result:await Pe(`opensea-${m.chain}`,()=>Ct({chain:m.chain,address:r.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:x}of a)if(x.ok){let O=x.data.nfts.map(E=>({...E,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));c.push(...O),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:x.data.complete?"ok":"partial",count:O.length,complete:x.data.complete,next:x.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:x.error,source:"opensea"});if(!r.evm)for(let m of i.filter(x=>x.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(r.solana&&(!o||o.has("solana"))){let m=await Pe("opensea-solana",()=>Ct({chain:"solana",address:r.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let x=m.data.nfts.map(O=>({...O,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));c.push(...x),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:x.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(r.bitcoin&&(!o||o.has("bitcoin"))){let m=await Pe("satflow-wallet-contents",()=>br({address:r.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},Rt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let x=es(m.data.contents).map(E=>ts(E,r.bitcoin));c.push(...x);let O=x.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:O?"ok":"partial",count:x.length,complete:O,source:"satflow"})}else{let x=await Pe("bitcoin-meta-inscriptions",()=>He({address:r.bitcoin},Rt(t,"bitcoinMeta")),t.timeoutMs??35e3),O=x.ok&&x.data?.ok&&Array.isArray(x.data.inscriptions)?x.data.inscriptions:[];c.push(...O.map(E=>ns(E,r.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:O.length?"partial":"unavailable",count:O.length,complete:!1,source:O.length?"bitcoin-meta":"satflow",error:O.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([r.evm,r.solana].filter(Boolean))]){let x=await Pe(`opensea-pnl-${m}`,()=>mr({address:m},l),t.timeoutMs??35e3);d.push(x.ok?{status:"ok",...x.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:x.error})}let f=rs(e.costBasis),u=is(c).map(m=>os(m,f)).map(m=>gr(m)),b=u.filter(m=>!m.spam),v=u.filter(m=>m.spam),g=b.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),A=Math.round(g.reduce((m,x)=>m+Number(x.estimatedValueUsd),0)*100)/100,$=b.length-g.length,k=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:n,addresses:r,coverage:s,unsupported:Zi,inventory:{count:u.length,visibleCount:b.length,flaggedCount:v.length,items:u,visibleItems:b,flaggedItems:v},valuation:{estimatedCurrentValueUsd:A,valuedItems:g.length,unvaluedItems:$,complete:$===0&&k.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:ss(b,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as $t}from"node:os";import{join as Lt}from"node:path";var vr=process.env.ORACLE_PUBLIC_DESKTOP==="1",as=vr?process.env.ORACLE_CONFIG_DIR||Lt($t(),".config","oracle"):Lt($t(),".config","oracle"),_l=vr?as:Lt($t(),".config","mad-desk");function Ut(e,t,n=""){let r=process.env[e];if(r!=null&&String(r).trim()!=="")return r;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:n}var ps=JSON.parse(jt(new URL("../../package.json",import.meta.url),"utf8")),Ee="public",fs="127.0.0.1",ms=8799,Ke=ps.version,hs=new Set(["127.0.0.1","localhost","::1"]),qt=Ce(ls(ds(import.meta.url)),"../.."),Bt=Ce(qt,"public","oracle-console"),Er=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),ys=1e6,q=class extends Error{constructor(t,n,r){super(r||n),this.status=t,this.code=n}};function ie(e,t,n){let r=t,o;try{Y(n),o=ln(n)}catch{r=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(r,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":Ee,"x-oracle-unsigned":"true"}),e.end(o)}function bs(e){return new Promise((t,n)=>{let r=[],o=0;e.on("data",i=>{if(o+=i.length,o>ys){n(new q(413,"payload-too-large","request body too large")),e.destroy();return}r.push(i)}),e.on("end",()=>{let i=Buffer.concat(r).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{n(new q(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>n(new q(400,"bad-request","request stream error")))})}function K(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new q(400,t,`${t} must be a JSON object`);return e}function gs(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function ws(e){let t=gs(e);if(!hs.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function Ss(){return{status:200,body:{ok:!0,plane:Ee,version:Ke}}}function Ye(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function vs(e){let t=K(e,"body"),n=t.input!==void 0?K(t.input,"input"):t,r=Ye(K(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:pn(o,r)}}function Es(e){let t=K(e,"body"),n=t.request!==void 0?K(t.request,"request"):t.input!==void 0?K(t.input,"input"):t,r=Ye(K(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:fn(o,r)}}function xs(e){let t=K(e,"body"),n=Ye(K(t.opts,"opts")),r=yn(t.store??[],n);return{status:200,body:{ok:!0,count:r.length,grants:r}}}function As(e){let t=K(e,"body"),n=Ye(K(t.opts,"opts")),r=bn(t.store??[],t.id,n);return r==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:r}}function Is(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,n=!0,r=[];return t&&r.push("privy"),n&&r.push("injected"),{status:200,body:{ok:!0,plane:Ee,version:Ke,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:n,modes:r},privy:{appId:e||null}}}}var Ft=400;function ks(e=[]){if(e.length<=Ft)return{rows:e,truncated:!1,omitted:0};let t=r=>r?.kind==="native"?0:r?.priced?1:2;return{rows:[...e].sort((r,o)=>t(r)-t(o)).slice(0,Ft),truncated:!0,omitted:e.length-Ft}}var Mt=300;function Ts(e=[]){if(e.length<=Mt)return{items:e,truncated:!1,omitted:0};let t=r=>r?.spam===!0||r?.nsfw===!0?2:Number.isFinite(Number(r?.floorUsd))&&Number(r?.floorUsd)>0?0:1;return{items:[...e].sort((r,o)=>t(r)-t(o)).slice(0,Mt),truncated:!0,omitted:e.length-Mt}}var Ge=12;async function _s(e){let t=K(e,"body"),n=typeof t.owner=="string"?t.owner:null;if(!n)throw new q(400,"owner-required","owner must be an EVM address");let r=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(r&&r.length>Ge)throw new q(400,"too-many-chains",`at most ${Ge} chainIds per request`);let i=await qn({owner:n,chainIds:r},Ht());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var Ns=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,Ps=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function Os(e){if(typeof e!="string")return null;let t=e.trim();return Ns.test(t)?t:null}function Cs(e){if(typeof e!="string")return null;let t=e.trim();return Ps.test(t)?t:null}function Tr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function Rs(e){let t=K(e,"body"),n=Tr(t.owner),r=Os(t.solana),o=Cs(t.bitcoin);if(!n&&!r&&!o)throw new q(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>Ge)throw new q(400,"too-many-chains",`at most ${Ge} chainIds per request`);let s=await cr({addresses:{evm:n,solana:r,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},Ht()),c=[],l=[],p=0,a=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let b=u.fungibleTokens?.status??"unavailable";b==="ok"?p+=1:b==="unavailable"&&(a+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:b,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let v=u.native;u.status==="ok"&&v&&v.status==="ok"&&v.amountRaw&&v.amountRaw!=="0"&&v.amountRaw!=="0x0"&&c.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:v.symbol,decimals:v.decimals,amount:String(v.amountRaw),amountRaw:String(v.amountRaw),amountFormatted:v.amount,kind:"native",valueUsd:v.usdValue!=null?String(v.usdValue):null,priced:v.usdValue!=null});for(let g of u.fungibleTokens?.assets||[]){let A=g.amountRaw!=null?String(g.amountRaw):null;if(!A||A==="0")continue;let $=typeof g.decimals=="number"&&Number.isInteger(g.decimals)?g.decimals:null;c.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:g.symbol||g.coin||"TOKEN",decimals:$,amount:A,amountRaw:A,amountFormatted:g.amount!=null?String(g.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:g.address||g.mint||null,valueUsd:g.usdValue!=null?String(g.usdValue):null,priced:g.usdValue!=null,source:g.source||u.fungibleTokens?.source||null})}}let d=a>0||!!(s.valuation&&s.valuation.complete===!1),f=ks(c);return{status:200,body:{ok:!0,owner:s.addresses?.evm??n,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&a===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${a} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function Ht(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function $s(e){let t=K(e,"body"),n=Tr(t.owner);if(!n)throw new q(400,"owner-required","owner must be an EVM address");let r=await Sr({addresses:{evm:n}},Ht()),o=r?.inventory&&typeof r.inventory=="object"?r.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(r?.items)?r.items:[]).map(a=>{if(!a||typeof a!="object")return null;let d=typeof a.collection=="string"?a.collection:a.collection&&typeof a.collection=="object"&&typeof a.collection.slug=="string"?a.collection.slug:typeof a.contract=="string"?a.contract:null;return{chain:a.chain??null,chainId:a.chainId??null,family:a.family??null,owner:a.owner??n,contract:a.contract??null,tokenId:a.tokenId==null?null:String(a.tokenId),tokenStandard:a.tokenStandard??null,collection:d,name:typeof a.name=="string"?a.name.slice(0,160):null,imageUrl:a.imageUrl??a.image??null,estimatedValueUsd:a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,floorUsd:a.floorUsd!=null&&Number.isFinite(Number(a.floorUsd))?Number(a.floorUsd):a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,spam:a.spam===!0,nsfw:a.nsfw===!0,source:typeof a.source=="string"?a.source.slice(0,64):null}}).filter(Boolean),c=Array.isArray(r?.coverage)?r.coverage:[],l=Ts(s),p=r?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:n,queriedAt:r.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:c.map(a=>({family:a?.family??null,chain:a?.chain??null,chainId:a?.chainId??null,status:a?.status??null,count:a?.count??null,complete:a?.complete===!0,source:a?.source??null,error:null,reason:typeof a?.reason=="string"?a.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:c.filter(a=>a?.status==="partial").map(a=>a.chain).filter(Boolean),unavailable:c.filter(a=>a?.status==="unavailable").map(a=>a.chain).filter(Boolean),unconfigured:c.filter(a=>a?.status==="not-configured").map(a=>a.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:r?.valuation?{estimatedCurrentValueUsd:r.valuation.estimatedCurrentValueUsd??null,valuedItems:r.valuation.valuedItems??null,unvaluedItems:r.valuation.unvaluedItems??null,complete:r.valuation.complete===!0}:null}}}var Ls=6e4,Us=120,_r=10,Bs=300,Fs=_r,xr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),Ms=4096,Oe=new Map;function Ds(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let n=t.split(",")[0].trim();if(n)return n.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function qs(e,t){let n=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),r=n==="127.0.0.1"||n==="::1"||n.startsWith("127."),o=Ds(e),i=r&&o!==n,s=xr.has(t)?r&&!i?Fs:_r:r&&!i?Bs:Us,c=Date.now(),l=`${o}:${xr.has(t)?"amp":"std"}`,p=Oe.get(l);if(!p||c>=p.resetAt){for(Oe.set(l,{count:1,resetAt:c+Ls});Oe.size>Ms;){let a=Oe.keys().next();if(a.done)break;Oe.delete(a.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-c)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var Ar=Object.freeze({"GET /public/health":Ss,"GET /public/config":Is,"GET /eval":Ir,"GET /public/eval":Ir,"POST /public/connect/request":vs,"POST /public/connect/assemble":Es,"POST /public/grants/active":xs,"POST /public/grants/get":As,"POST /public/approvals":_s,"POST /public/portfolio":Rs,"POST /public/nfts":$s});function Ir(){let t=[Dt(Ce(qt,"public","eval-report.json")),Dt(Ce(qt,"docs","eval-report.json"))].find(r=>kr(r));if(!t)throw new q(404,"not-found","no committed eval report in this build");let n;try{n=JSON.parse(jt(t,"utf8"))}catch{throw new q(500,"eval-report-invalid","committed eval report is not valid JSON")}return{status:200,body:{...n,servedAt:new Date().toISOString(),note:"Static release artifact. Reproduce: npx @oracle-agent/oracle eval guards|adversarial|fidelity --json"}}}function Vt(e={}){return{"cache-control":"no-store","x-oracle-plane":Ee,"x-oracle-unsigned":"true",...e}}function js(e,t,n,r){e.writeHead(t,Vt({"content-type":n})),e.end(r)}function Hs(e,t,n){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let r=n===""?"/":n,o=Er[r]||Er[r.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Dt(Ce(Bt,o.file));if(!i.startsWith(Bt+us)&&i!==Bt)return ie(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!kr(i))return ie(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=jt(i);return e.method==="HEAD"?(t.writeHead(200,Vt({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(js(t,200,o.type,s),!0)}async function Vs(e,t){let r=new URL(e.url,"http://localhost").pathname||"/";r.length>1&&r.endsWith("/")&&r!=="/oracle-console/"&&(r=r.replace(/\/+$/,"")),r===""&&(r="/");let o=r.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=Ar[i];try{if(!s){if(Hs(e,t,r))return;throw Object.keys(Ar).some(d=>d.endsWith(` ${o}`))?new q(405,"method-not-allowed",`unsupported method for ${o}`):new q(404,"not-found",`unknown route ${o}`)}let c=qs(e,o);if(!c.allowed){t.writeHead(429,Vt({"content-type":"application/json","retry-after":String(c.retryAfterSec),"x-ratelimit-limit":String(c.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${c.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await bs(e),p=await s(l);ie(t,p.status,p.body)}catch(c){if(c instanceof X){ie(t,500,{error:"secret-leak-blocked"});return}if(c instanceof Q){ie(t,400,{error:"invalid-grant",errors:c.errors.map(l=>({field:l.field,message:l.message}))});return}if(c instanceof q){ie(t,c.status,{error:c.code,message:c.message});return}if(c instanceof TypeError){ie(t,400,{error:"bad-request",message:c.message});return}ie(t,500,{error:"internal-error"})}}function zs(){return cs((e,t)=>{Vs(e,t).catch(()=>{try{ie(t,500,{error:"internal-error"})}catch{}})})}function zt({host:e,port:t}={}){let n=ws(e??Ut("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",fs)),r=t??Ut("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(ms)),o=Number(r);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(r)}`);return{host:n,port:o}}function Nr(e={}){let{host:t,port:n}=zt(e),r=zs();return r.listen(n,t),r}var Wt=zt(),Je=Nr(Wt);Je.on("listening",()=>{let e=Je.address(),t=typeof e=="object"&&e?e.address:Wt.host,n=typeof e=="object"&&e?e.port:Wt.port;console.log(`oracle-public-server listening on http://${t}:${n} (plane=${Ee}, version=${Ke}, unsigned-only)`)});Je.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{Je.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});
+${JSON.stringify(n??[])}`}async function Po(e,t,n){return M(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function ee(e,t,n=[],r={}){let o=String(t||""),i=To(o),s=Io(e,r);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&r.cacheChainId!==!1){let a=Cn.get(s);if(a!=null)return a}let l=r.dedupe!==!1&&!r.signal?Oo(s,o,n):null;if(l&&Te.has(l))return Te.get(l);let p=(async()=>{let a=await Po(s,{jsonrpc:"2.0",id:1,method:t,params:n},r),d=No(a);return i==="eth_chainid"&&typeof d=="string"&&Cn.set(s,d),d})();return l&&(Te.set(l,p),p.finally(()=>{Te.get(l)===p&&Te.delete(l)}).catch(()=>{})),p}async function pt(e,t={}){let n=await ee(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function ft(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await ee(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function Rn(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=dt(e.token||e.tokenAddress,"token"),o=dt(e.owner,"owner"),i=dt(e.spender,"spender"),s=Pn.encodeFunctionData("allowance",[o,i]),c=await ee(n,"eth_call",[{to:r,data:s},e.blockTag||"latest"],t),l=Pn.decodeFunctionResult("allowance",c),p=BigInt(l[0]);return{chainId:n,token:r,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var Pn,Ao,ko,Te,Cn,ge=$e(()=>{j();On();Pn=new Eo(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Ao={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};ko=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;Te=new Map,Cn=new Map});import{createServer as cs}from"node:http";import{readFileSync as jt,existsSync as kr}from"node:fs";import{dirname as ls,join as Ce,normalize as Dt,sep as us}from"node:path";import{fileURLToPath as ds}from"node:url";import{createHash as Or}from"node:crypto";var Ie=1,Kt=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Pr=Object.freeze(["read","simulate"]),Yt=1e4,Jt=1440*60,Xt=128,Qt=256,Zt=64,en=256,tn=/^0x[0-9a-fA-F]{40}$/,Cr=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,Rr=/^[a-z][a-z0-9_-]*:\*$/,$r=/^[A-Za-z0-9._:-]+$/,Lr=/^[A-Za-z0-9._:-]+$/,nn=/^(0|[1-9][0-9]*)$/,Q=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function rn(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function Ur(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return nn.test(t)?t:null}return null}function ae(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!nn.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function Xe(e){let t=String(e).split(":")[0];return Pr.includes(t)}function Qe(e,t={}){let n=[],r=(d,f)=>n.push({field:d,message:f});if(!rn(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let d of Object.keys(e))Kt.includes(d)||r(d,"unknown field is not allowed");for(let d of Kt)(!(d in e)||e[d]==null)&&r(d,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let o={},i=ae(e.chainId);i==null||i<=0?r("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!tn.test(f.trim())?r(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>Zt)r("actions",`too many actions (max ${Zt})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){r("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&Rr.test(u)?d.push(u):r("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!Cr.test(u)){r("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>en)r("targets",`too many targets (max ${en})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!tn.test(u)){r("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!Xe(u));(f.length>0||o.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=Ur(e[d]);f==null?r(d,"must be a non-negative integer wei amount"):o[d]=f}let s=ae(e.maxSlippageBps);s==null||s>Yt?r("maxSlippageBps",`must be an integer between 0 and ${Yt}`):o.maxSlippageBps=s;let c=864e10,l=ae(e.expiresAt);if(l==null||l<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(l>c)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=ae(t.now);d==null?r("expiresAt","opts.now must be a unix-seconds integer"):l<=d?r("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>Jt&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${Jt} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():ae(e.nonce)!=null?String(ae(e.nonce)):null;!p||p.length>Xt||!$r.test(p)?r("nonce",`must be a non-empty string (max ${Xt} chars, [A-Za-z0-9._:-])`):o.nonce=p;let a=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!a||a.length>Qt||!Lr.test(a)?r("revocationKey",`must be a non-empty public identifier (max ${Qt} chars, [A-Za-z0-9._:-])`):o.revocationKey=a,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:o}}function Le(e,t={}){let{ok:n,errors:r,grant:o}=Qe(e,t);if(!n)throw new Q(r);return o}function Ze(e,t={}){let n=Le(e,t),o=Object.keys(n).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(n[i])}`);return`{"version":${Ie},${o.join(",")}}`}function Ue(e,t={}){return Or("sha256").update(Ze(e,t),"utf8").digest("hex")}function on(e,t){let n=ae(t),r=ae(rn(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var sn="oracle-connect-request",Br="oracle-unsigned-grant",Fr="oracle-grant-canonical-json-utf8-v1",X=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},Mr=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Dr=Object.freeze(["privkey","wif","xprv","seed"]);function et(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return Mr.test(t)||Dr.includes(n)}var an=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),cn=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function qr(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>cn.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function ln(e){let t;try{t=JSON.stringify(e)}catch(o){throw new X("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let n=qr(t);for(let{rule:o,re:i}of an)if(i.test(n))throw new X("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new X("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&et(o))throw new X(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function Y(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let o=cn.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of an)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new X(t,i);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&et(o))throw new X(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");Y(o,`${t}[key]`,n),Y(i,`${t}[${String(o)}]`,n)}return e}if(e instanceof Set){let o=0;for(let i of e.values())Y(i,`${t}[${o++}]`,n);return e}if(Array.isArray(e))return e.forEach((o,i)=>Y(o,`${t}[${i}]`,n)),e;for(let[o,i]of Object.entries(e)){if(et(o))throw new X(`${t}.${o}`,"forbidden-key-name");Y(i,`${t}.${o}`,n,o)}return e}function ke(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))ke(t)}return e}function un(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new Q([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function dn(e){if(e?.now==null)throw new Q([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return un(e.now,"opts.now")}function jr(e){return new Date(e*1e3).toISOString()}function Hr(e,t){let n=e.actions.every(r=>Xe(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${Ie}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${jr(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
+`)}function pn(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new Q([{field:"request",message:"request must be a plain object"}]);let n=dn(t),{ttlSeconds:r,...o}=e,i={...o};if(r!=null){if(i.expiresAt!=null)throw new Q([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=un(r,"ttlSeconds");i.expiresAt=n+l}let s=Le(i,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),c=ke({kind:sn,version:Ie,grant:s});return Y(c)}function fn(e={},t={}){let n=dn(t),r=e&&e.kind===sn?e.grant:e,o=Le(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),i=Ze(o),s=Ue(o),c=Buffer.from(i,"utf8"),l=ke({kind:Br,unsigned:!0,payload:ke({version:Ie,grantId:s,grant:o,canonical:i}),signing:ke({scheme:Fr,message:i,bytesHex:`0x${c.toString("hex")}`,byteLength:c.length,sha256:s}),render:Hr(o,s)});return Y(l)}var be=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function mn(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function Vr(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function tt(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function zr(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(o=>e.has(o)):Array.isArray(e)?r.some(o=>e.includes(o)):typeof e.has=="function"?r.some(o=>e.has(o)):!1}function hn(e,{now:t,revoked:n}={}){let r=tt(t),{grant:o,revoked:i}=Vr(e),{ok:s,grant:c}=Qe(o);if(!s)return{status:be.INVALID,id:null,grant:null};let l=Ue(c);return i||zr(n,l,c)?{status:be.REVOKED,id:l,grant:c}:on(c,r)?{status:be.EXPIRED,id:l,grant:c}:{status:be.ACTIVE,id:l,grant:c}}function yn(e,{now:t,revoked:n,agentAddress:r,accountAddress:o,chainId:i}={}){let s=tt(t),c=r!=null?String(r).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,a=[];for(let d of mn(e)){let{status:f,id:u,grant:b}=hn(d,{now:s,revoked:n});f===be.ACTIVE&&(c!=null&&b.agentAddress!==c||l!=null&&b.accountAddress!==l||p!=null&&b.chainId!==p||a.push(Object.freeze({id:u,grant:b})))}return a.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),Y(Object.freeze(a))}function bn(e,t,{now:n,revoked:r}={}){let o=tt(n),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of mn(e)){let c=hn(s,{now:o,revoked:r});if(c.status!==be.INVALID&&c.id===i)return Y(Object.freeze({id:c.id,status:c.status,grant:c.grant}))}return null}import{Interface as Mn,getAddress as Ro,id as Dn}from"ethers";ge();j();var ba=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});j();var wa=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),mt=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),ht=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ge();ge();var De=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);j();ge();var $n=new Mn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),Ln=new Mn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),$o=Dn("Approval(address,address,uint256)"),Ya=Dn("ApprovalForAll(address,address,bool)"),Lo=1e4,Uo=2e5,Bo=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),Fo=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),Mo=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),Do=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),qo=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),jo=(1n<<256n)-1n,Ho=jo/2n,Vo=4320*60*60*1e3,zo=360*60*1e3,Wo=600*1e3,Go=45*1e3,Ko=512,Yo=128,Un=new Map,yt=new Map,Bn=new Map;function we(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function gt(e,t,n){let r=e.get(t);return r?Date.now()-r.at>n?(e.delete(t),null):r:null}function qe(e,t,n,r){for(e.delete(t),e.set(t,{at:Date.now(),value:n});e.size>r;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function Jo(e,t){try{return Ro(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Xo(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function Fn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Qo({unlimited:e,spenderLabel:t,lastActivityAt:n}){if(e)return"unlimited";if(!t)return"unknown-spender";if(n){let r=Date.parse(n);if(Number.isFinite(r)&&Date.now()-r>Vo)return"stale"}return"scoped"}function Zo(e,t,n){if(n)return"UNLIMITED";if(t==null)return e.toString();let r=10n**BigInt(t),o=e/r,i=e%r;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function ei(e,t,n,r){let o=`${e}:${t}`,i=r?.get(o);if(i)return i;if(we(n)){let c=gt(Un,o,zo);if(c)return c.value}let s=(async()=>{let c=async d=>{try{let f=$n.encodeFunctionData(d,[]),u=await ee(e,"eth_call",[{to:t,data:f},"latest"],n);return!u||u==="0x"?null:$n.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([c("decimals"),c("symbol")]),a={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return we(n)&&qe(Un,o,a,Ko),a})();return r?.set(o,s),s}async function ti(e,t,n){let r=Math.min(Math.max(Number(n.lookbackBlocks)||Lo,1),Uo),o=await pt(e,n);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-r),s=await ee(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[$o,Xo(t)]}],n);if(!Array.isArray(s))throw new Error("log scan returned no array");let c=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),a=l?.topics?.[2];!p||!a||c.set(`${p}:${Fn(a)}`,{token:p,spender:Fn(a)})}return{pairs:[...c.values()],fromBlock:i,toBlock:o}}function ni(e){return(qo[e]||[]).flatMap(n=>Fo.map(r=>({token:n.address,spender:r.address,symbol:n.symbol,decimals:n.decimals})))}async function ri(e,t,n={}){let r=[],o="direct-probe",i=null,s=ni(e),c=bt(e),l=we(n)&&gt(yt,e,Wo)?.value===!1;if(s.length===0&&c.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await ti(e,t,n);r=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},we(n)&&qe(yt,e,!0,64)}catch{if(we(n)&&qe(yt,e,!1,64),r=s,r.length===0&&c.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await Z(r,n.concurrency||4,async u=>{try{let b=await Rn({chainId:e,token:u.token,owner:t,spender:u.spender},n),v=BigInt(b.allowance);if(v<=0n)return null;let g=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await ei(e,u.token,n,p),A=v>=Ho,$=Bo[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:g.symbol,decimals:g.decimals,spender:u.spender,spenderLabel:$,allowance:v.toString(),allowanceDisplay:Zo(v,g.decimals,A),unlimited:A,lastActivityAt:null,risk:Qo({unlimited:A,spenderLabel:$,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await ii(e,t,n);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:r.length,collectionsProbed:bt(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function oi(e,t,n,r,o){try{let i=Ln.encodeFunctionData("isApprovedForAll",[n,r]),s=await ee(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!Ln.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function bt(e){return(Do[e]||[]).flatMap(n=>Mo.map(r=>({collection:n.address,collectionName:n.name,operator:r.address,operatorLabel:r.label})))}async function ii(e,t,n){let r=bt(e);return r.length===0?[]:(await Z(r,n.concurrency||4,async i=>await oi(e,i.collection,t,i.operator,n)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function qn(e={},t={}){let n=Jo(e.owner||e.address,"owner"),r=new Map(De.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>r.has(u)):[...r.keys()],i=`${n}:${[...o].sort((u,b)=>u-b).join(",")}:${e.lookbackBlocks??""}`,s=we(t)&&!e.refresh;if(s){let u=gt(Bn,i,Go);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let c=await Z(o,e.concurrency||3,u=>ri(u,n,{...t,lookbackBlocks:e.lookbackBlocks})),l=c.flatMap(u=>u.approvals),p=c.map(u=>u.scan),a=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:n,scannedRange:a?`last ${a.toBlock-a.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&qe(Bn,i,f,Yo),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as _i}from"ethers";j();ge();j();import{types as wt}from"node:util";function je(e){if(!e||typeof e!="object"||wt.isProxy(e)||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function _e(e,t){if(e==null||(typeof e=="object"||typeof e=="function")&&wt.isProxy(e)||!Object.hasOwn(Object(e),t))return;let n=Object.getOwnPropertyDescriptor(Object(e),t);return n&&Object.hasOwn(n,"value")?n.value:void 0}function te(e,t="provider response",n=0){if(n>64)throw new Error(`${t} exceeds the JSON nesting bound`);if(e===null||typeof e=="string"||typeof e=="boolean"||typeof e=="number"&&Number.isFinite(e))return e;if(Array.isArray(e)){if(wt.isProxy(e)||e.length>1e5)throw new Error(`${t} contains an invalid array`);let o=new Array(e.length);for(let i=0;i<e.length;i+=1){let s=Object.getOwnPropertyDescriptor(e,String(i));if(!s||!Object.hasOwn(s,"value"))throw new Error(`${t} arrays must contain dense own data`);o[i]=te(s.value,t,n+1)}return o}if(!je(e))throw new Error(`${t} contains a non-JSON value`);let r=Object.create(null);for(let o of Object.keys(e)){let i=Object.getOwnPropertyDescriptor(e,o);if(!i||!Object.hasOwn(i,"value"))throw new Error(`${t} objects must contain own data`);r[o]=te(i.value,t,n+1)}return r}var jn="mainnet-beta",si="https://api.mainnet-beta.solana.com",St="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function ai(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||si).trim()}function he(e,t="address"){let n=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return n}function ci(e,t){return t?[...e,{commitment:t}]:e}async function Hn(e,t=[],n={}){let r=String(e||"");if(r==="sendTransaction"||r==="sendRawTransaction"||r==="requestAirdrop"||r==="requestAirDrop"||/airdrop/i.test(r)||/^send/i.test(r))throw new Error(`solana-rpc: ${r} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=te(await M(ai(n),{method:"POST",body:{jsonrpc:"2.0",id:n.id||1,method:e,params:t},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,maxResponseBytes:n.maxResponseBytes,sameOriginRedirectsOnly:n.sameOriginRedirectsOnly}),"solana-rpc response");if(!je(o))throw new Error(`solana-rpc ${e}: invalid response envelope`);let i=_e(o,"error");if(i)throw new Error(`solana-rpc ${e}: ${_e(i,"message")||JSON.stringify(i)}`);if(!Object.hasOwn(o,"result"))throw new Error(`solana-rpc ${e}: missing result`);return _e(o,"result")}async function Vn(e={},t={}){let n=he(e.address||e.owner,"address"),r=await Hn("getBalance",ci([n],e.commitment),t);return{provider:"solana-rpc",cluster:jn,address:n,lamports:String(r?.value??0),slot:r?.context?.slot??null,raw:r}}function li(e={}){let t=e.account?.data?.parsed?.info||{},n=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(n.amount??"0"),decimals:n.decimals??null,uiAmount:n.uiAmount??null,uiAmountString:n.uiAmountString??null,raw:e}}async function vt(e={},t={}){let n=he(e.owner||e.address,"owner"),r=e.mint?{mint:he(e.mint,"mint")}:{programId:he(e.programId||St,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await Hn("getTokenAccountsByOwner",[n,r,o],t),s=Array.isArray(i?.value)?i.value.map(li):[];return{provider:"solana-rpc",cluster:jn,owner:n,filter:r,slot:i?.context?.slot??null,accounts:s,raw:i}}j();var ui="mainnet",di="https://mempool.space/api",pi="https://mempool.space/testnet/api";function zn(e={}){return String(e.network||process.env.BTC_NETWORK||ui).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function fi(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):zn(e)==="testnet"?pi:di}function le(e,t="address"){let n=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(n)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(n))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return n}async function mi(e,t={}){let n=`${fi(t)}${e.startsWith("/")?e:`/${e}`}`;return te(await M(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"bitcoin-esplora response")}async function Wn(e={},t={}){let n=le(e.address||e.addr,"address"),r=await mi(`/address/${n}`,t),o=r.chain_stats||{},i=r.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),c=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:zn(t),address:n,balanceSats:String(s-c),chainStats:o,mempoolStats:i,raw:r}}var Gn="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function Se({provider:e,defaultUrl:t,hosts:n=[],url:r,strict:o=!1}){let s=(String(r??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Kn(t)};let c;try{c=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(c.protocol!=="http:"&&c.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=c.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Kn(t),...n]).has(l)){let a=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return c.protocol==="http:"&&!a?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[Gn]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${Gn}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Kn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function ye(e,t,n){let r={...e};if(!n)return r;for(let[o,i]of Object.entries(t||{}))i&&(r[o]=i);return r}function Et(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var hi=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function yi(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",n=!1;try{let r=Et(e);if(r){let o=new URL(r).host,i=new URL(r).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);n=hi.includes(o)&&(i==="https:"||s)}}catch{n=!1}return ye({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},n)}async function Yn(e,t={}){let r=await(t.fetchImpl||fetch)(e,{method:"GET",headers:yi(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await r.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!r.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${r.status} ${String(o).slice(0,160)}`);return i}async function Jn(e={},t={}){let n=le(e.address||e.addr,"address"),r=Et(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${r}/v1/indexer/address/${n}/runes/balance-list?start=0&limit=100`,`${r}/v1/runes/address/${n}`,`${r}/runes/balance/${n}`,`${r}/address/${n}/runes`],i=null;for(let s of o)try{let c=await Yn(s,t),l=bi(c);return{provider:"bitcoin-meta",address:n,ok:!0,count:l.length,balances:l,source:s}}catch(c){i=c}return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function bi(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({rune:r.rune||r.runeid||r.runeId||r.spacedRune||r.name||r.ticker||null,runeId:r.runeid||r.runeId||r.id||null,amount:String(r.amount??r.balance??r.total??r.qty??"0"),symbol:r.symbol||null,divisibility:r.divisibility??r.div??null,raw:r}))}async function He(e={},t={}){let n=le(e.address||e.addr,"address"),r=Et(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${r}/v1/indexer/address/${n}/inscription-data?cursor=0&size=${o}`,`${r}/v1/inscriptions/address/${n}?limit=${o}`,`${r}/address/${n}/inscriptions?limit=${o}`],s=null;for(let c of i)try{let l=await Yn(c,t),p=gi(l);return{provider:"bitcoin-meta",address:n,ok:!0,count:p.length,inscriptions:p,source:c}}catch(l){s=l}return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function gi(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({id:r.inscriptionId||r.id||r.inscription_id||null,number:r.inscriptionNumber??r.number??null,sat:r.sat||r.satoshi||null,contentType:r.contentType||r.content_type||null,utxo:r.utxo||r.output||(r.txid!=null?`${r.txid}:${r.vout??r.n}`:null),raw:r}))}j();var wi="https://api.hyperliquid.xyz/info",Si="https://api.hyperliquid-testnet.xyz/info";function vi({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let n=process.env.HL_API_URL.replace(/\/$/,"");return n.endsWith("/info")?n:`${n}/info`}return e||process.env.HL_TESTNET==="1"?Si:wi}async function xt(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let n=vi(t);return te(await M(n,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"hyperliquid info response")}async function Xn(e={}){return xt({type:"allMids"},e)}async function Qn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return xt({type:"spotClearinghouseState",user:e},t)}async function Zn(e,t={}){if(!e)throw new Error("hlUserState requires user");return xt({type:"clearinghouseState",user:e},t)}j();var Ei="https://coins.llama.fi";function xi(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||Ei).replace(/\/$/,"")}async function At(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let n=e.map(encodeURIComponent).join(",");return M(`${xi(t)}/prices/current/${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}j();var er=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,Ai=/[<>&`*_~[\]()|\\]/g,Ii=/[\u0000-\u001F\u007F]/g;function It(e,{max:t=32,fallback:n=""}={}){return e==null?n:String(e).normalize("NFKC").replace(er,"").replace(Ii,"").replace(Ai,"").replace(/\s+/g," ").trim().slice(0,t).trim()||n}function kt(e){if(e==null)return!1;let t=String(e);return er.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var tr=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"}),ki=Object.freeze(["block_number","index"]),gc=new Set([...ki,"items_count","value","hash","inserted_at","fee"]);function Ti(e,t={}){let n=Number(e),r=t.baseUrl||tr[n];if(!r)throw new Error(`Blockscout not configured for chainId ${n}`);return r.replace(/\/$/,"")}function nr(e){return!!tr[Number(e)]}async function rr(e={},t={}){if(!e.address)throw new Error("address required");let n=Number(e.chainId||1),r=`${Ti(n,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=te(await M(r,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}}),"blockscout token balances response");return Array.isArray(o)?o:[]}function or(e=[],{fungibleOnly:t=!0}={}){let n=[];for(let r of e){if(!r||typeof r!="object")continue;let o=r.token&&typeof r.token=="object"?r.token:{},i=String(o.type||r.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||r.token_address||r.tokenAddress||null;if(!s||typeof s!="string")continue;let c=String(r.value??r.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(c)||c==="0")continue;let l=o.decimals??r.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=It(o.symbol||o.name,{max:32,fallback:"TOKEN"}),a=It(o.name,{max:80,fallback:""})||null;n.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:a,decimals:l,amountRaw:c,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:kt(o.symbol)||kt(o.name)||void 0})}return n}var Ni="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",sr=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function ue(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Ve(e,...t){for(let n of t){let r=String(e?.[n]||"").trim();if(r)return r}return null}function ir(e){if(!e)return null;try{return _i(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function Nt(e={},t=process.env){let n=e.addresses||{},r=ir(n.evm||e.evmAddress||Ve(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=n.solana||e.solanaAddress||Ve(t,"ORACLE_SOLANA_ADDRESS"),i=n.bitcoin||e.bitcoinAddress||Ve(t,"ORACLE_BITCOIN_ADDRESS"),s=ir(n.hyperliquid||e.hyperliquidAddress||Ve(t,"ORACLE_HYPERLIQUID_ADDRESS")||r);return{evm:r,solana:o?he(o,"portfolio Solana address"):null,bitcoin:i?le(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function Ne(e,t){let n=BigInt(String(e||"0")),r=Number(t);if(!Number.isInteger(r)||r<0||r>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(r===0)return n.toString();let o=n<0n,i=o?-n:n,s=10n**BigInt(r),c=i/s,l=String(i%s).padStart(r,"0").replace(/0+$/,"");return`${o?"-":""}${c}${l?`.${l}`:""}`}function ve(e){let t=Number(e);return Number.isFinite(t)?t:null}function ze(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function de(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function ar(e,t){let n=sr[t],r=n?e?.coins?.[n]:null,o=Number(r?.price);return{key:n||null,priceUsd:Number.isFinite(o)?o:null,timestamp:r?.timestamp??null,confidence:r?.confidence??null}}function Oi(e){let t=new Map;for(let n of e)if(n?.ok)for(let r of n.data?.accounts||[]){let o=BigInt(String(r.amount||"0"));if(o===0n||!r.mint)continue;let i=`${r.mint}:${r.decimals??"unknown"}`,s=t.get(i)||{mint:r.mint,amountRaw:0n,decimals:r.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,n.program&&s.programs.add(n.program),t.set(i,s)}return[...t.values()].map(n=>{let r=n.amountRaw.toString(),o=n.decimals==null?null:Ne(r,n.decimals),i=n.decimals===0&&n.amountRaw===1n;return{mint:n.mint,amountRaw:r,amount:o,decimals:n.decimals,tokenPrograms:[...n.programs],accountCount:n.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function Tt(e,t){return{family:e,status:"unsupported",reason:t}}function _t(e,t){if(!e||e.status!=="ok")return e;let n=ar(t,e.symbol),r=ve(e.amount),o=r!=null&&n.priceUsd!=null?ze(r*n.priceUsd):null;return{...e,price:n,usdValue:o}}async function cr(e={},t={}){let n=new Date().toISOString(),r=Nt(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,c=new Map(De.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...c.keys()],p=[...new Set(Object.values(sr))],a=o?D(()=>At(p,ue(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=Z(l,e.concurrency||5,async h=>{let y=c.get(h);if(!y)return{family:"evm",chainId:h,name:null,address:r.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!r.evm)return{family:"evm",chainId:h,name:y.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let I={...ue(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},L=await D(()=>ft(h,r.evm,I));if(!L.ok)return{family:"evm",chainId:h,name:y.name,address:r.evm,status:"unavailable",latencyMs:L.ms,error:L.error};let B=y.nativeCurrency?.decimals??18,F=y.nativeCurrency?.symbol||"NATIVE",S=L.data.balanceWei,R={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&nr(h)){let pe=await D(()=>rr({chainId:h,address:r.evm},{...ue(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));pe.ok?R={status:"ok",assets:or(pe.data,{fungibleOnly:!0}).map(xe=>{let Ae=Ne(xe.amountRaw,xe.decimals);return{...xe,amount:Ae,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:pe.ms}:R={status:"unavailable",assets:[],reason:pe.error||"blockscout token-balances failed",source:"blockscout",latencyMs:pe.ms}}return{family:"evm",chainId:h,name:y.name,address:r.evm,status:"ok",latencyMs:L.ms,native:{status:"ok",symbol:F,amountRaw:S,decimals:B,amount:Ne(S,B)},fungibleTokens:R,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:R.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!r.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=ue(t,"solana"),y=await D(()=>Vn({address:r.solana},h)),I=i||s?await Promise.all([D(()=>vt({owner:r.solana,programId:St},h)).then(R=>({...R,program:"spl-token"})),D(()=>vt({owner:r.solana,programId:Ni},h)).then(R=>({...R,program:"token-2022"}))]):[],L=Oi(I),B=L.filter(R=>R.classification==="collectible-candidate"),F=L.filter(R=>R.classification!=="collectible-candidate"),S=I.filter(R=>!R.ok).map(R=>R.error);return{family:"solana",name:"Solana Mainnet",address:r.solana,status:y.ok||I.some(R=>R.ok)?"ok":"unavailable",native:y.ok?{status:"ok",symbol:"SOL",amountRaw:y.data.lamports,decimals:9,amount:Ne(y.data.lamports,9),slot:y.data.slot}:{status:"unavailable",symbol:"SOL",error:y.error},fungibleTokens:{status:i?S.length===I.length?"unavailable":S.length?"partial":"ok":"not-requested",assets:i?F:[],errors:S,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?S.length===I.length?"unavailable":"partial":"not-requested",assets:s?B:[],errors:S,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!r.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=ue(t,"bitcoin"),y=ue(t,"bitcoinMeta"),[I,L,B]=await Promise.all([D(()=>Wn({address:r.bitcoin},h)),i?D(()=>Jn({address:r.bitcoin},y)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?D(()=>He({address:r.bitcoin},y)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),F=L.ok?L.data:null,S=B.ok?B.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:r.bitcoin,status:I.ok||F?.ok||S?.ok?"ok":"unavailable",native:I.ok?{status:"ok",symbol:"BTC",amountRaw:I.data.balanceSats,decimals:8,amount:Ne(I.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:I.error},fungibleTokens:{status:i?F?.ok?"ok":"unavailable":"not-requested",assets:F?.balances||[],error:F?.ok?null:F?.error||L.error,verification:"indexer-reported"},collectibles:{status:s?S?.ok?"ok":"unavailable":"not-requested",assets:S?.inscriptions||[],error:S?.ok?null:S?.error||B.error,unknownNotEmpty:!!S?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),b=(async()=>{if(!r.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=ue(t,"hyperliquid"),[y,I,L]=await Promise.all([D(()=>Qn(r.hyperliquid,h)),D(()=>Zn(r.hyperliquid,h)),D(()=>Xn(h))]),B=(y.ok&&Array.isArray(y.data?.balances)?y.data.balances:[]).filter(S=>de(S.total)||de(S.hold)).map(S=>({coin:S.coin||null,total:String(S.total??"0"),hold:String(S.hold??"0"),priceUsd:null,usdValue:null})),F=(I.ok&&Array.isArray(I.data?.assetPositions)?I.data.assetPositions:[]).map(S=>S.position||S).filter(S=>de(S.szi)).map(S=>({coin:S.coin||null,size:String(S.szi??"0"),entryPrice:S.entryPx??null,positionValueUsd:S.positionValue??null,unrealizedPnlUsd:S.unrealizedPnl??null,liquidationPrice:S.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:r.hyperliquid,status:y.ok||I.ok?"ok":"unavailable",spot:{status:y.ok?"ok":"unavailable",balances:B,error:y.ok?null:y.error},perps:{status:I.ok?"ok":"unavailable",accountValueUsd:I.data?.marginSummary?.accountValue??null,withdrawableUsd:I.data?.withdrawable??null,positions:F,error:I.ok?null:I.error},mids:L.ok?L.data:{},source:"hyperliquid-info"}})(),[v,g,A,$,k]=await Promise.all([d,f,u,b,a]),m=k.ok?k.data:null,x=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),P=[];for(let h of v){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let y=x[h.chainId];if(y)for(let I of h.fungibleTokens.assets||[])I.address&&P.push(`${y}:${String(I.address).toLowerCase()}`)}let E=null;if(o&&P.length){let h=[...new Set(P)],y=await D(()=>At(h,ue(t,"prices")));y.ok&&(E=y.data)}let O=v.map(h=>{let y=h.native?{...h,native:_t(h.native,m)}:h;if(y.fungibleTokens?.status==="ok"&&Array.isArray(y.fungibleTokens.assets)){let I=x[y.chainId],L=y.fungibleTokens.assets.map(B=>{let F=String(B.symbol||"").toUpperCase(),S=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(F)&&(S=1),S==null&&I&&B.address&&E?.coins){let Gt=`${I}:${String(B.address).toLowerCase()}`,xe=E.coins[Gt],Ae=Number(xe?.price);Number.isFinite(Ae)&&Ae>0&&(S=Ae)}let R=ve(B.amount),pe=R!=null&&S!=null?ze(R*S):null;return{...B,priceUsd:S,usdValue:pe}});y={...y,fungibleTokens:{...y.fungibleTokens,assets:L}}}return y});g.native&&(g.native=_t(g.native,m)),A.native&&(A.native=_t(A.native,m));let C=0,H=0,w=0;for(let h of[...O,g,A]){h.native?.status==="ok"&&de(h.native.amount)&&(h.native.usdValue!=null?(C+=h.native.usdValue,H+=1):w+=1);for(let y of h.fungibleTokens?.assets||[])!de(y.amount)&&!de(y.amountRaw)||(y.usdValue!=null?(C+=y.usdValue,H+=1):w+=1)}let V=ar(m,"HYPE");for(let h of $.spot?.balances||[]){let y=String(h.coin||"").toUpperCase(),I=y==="USDC"||y==="USDT"||y==="USDT0"?1:y==="HYPE"?V.priceUsd||ve($.mids?.HYPE):ve($.mids?.[h.coin]),L=ve(h.total);h.priceUsd=I,h.usdValue=L!=null&&I!=null?ze(L*I):null,de(h.total)&&(h.usdValue!=null?(C+=h.usdValue,H+=1):w+=1)}let ne=ve($.perps?.accountValueUsd);ne!=null&&ne!==0&&(C+=ne,H+=1);let z=[...g.fungibleTokens?.assets||[],...g.collectibles?.assets||[]].filter(h=>de(h.amount)).length,Re=(A.fungibleTokens?.assets||[]).length+(A.collectibles?.assets||[]).length;w+=z+Re;let W=[...O,g,A,$],G=h=>W.filter(y=>y.status===h).length,T=[],_=O.filter(h=>h.fungibleTokens?.status==="unavailable"),N=O.filter(h=>h.fungibleTokens?.status==="ok");_.length&&!N.length?T.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):_.length&&T.push(`EVM token discovery partial: Blockscout covered ${N.length} chain(s); ${_.length} chain(s) still native-only.`),(g.fungibleTokens?.assets?.length||g.collectibles?.assets?.length)&&T.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),A.collectibles?.unknownNotEmpty&&T.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),k.ok||T.push(`Price provider unavailable: ${k.error}`);let J=[Tt("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),Tt("sui","Sui balance adapter is not installed"),Tt("aptos","Aptos balance adapter is not installed")],se=W.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:n,addresses:r,coverage:{requestedSurfaces:W.length,ok:G("ok"),unavailable:G("unavailable"),notConfigured:G("not-configured"),unsupported:G("unsupported")+J.length,evmChainsRequested:l.length,evmChainsOk:O.filter(h=>h.status==="ok").length},valuation:{knownUsd:ze(C),label:"known priced value, not a complete portfolio total",pricedItems:H,unpricedNonzeroItems:w,complete:w===0&&!se&&G("unavailable")===0&&G("not-configured")===0&&J.length===0,priceSource:o?"DefiLlama":null,priceStatus:k.ok?"ok":"unavailable",priceQueriedAt:n},chains:[...O,g,A,$],unsupportedFamilies:J,warnings:T}}j();j();import{readFileSync as Ci,existsSync as Ri}from"node:fs";import{getAddress as $i,Interface as We,TypedDataEncoder as Bc,parseUnits as Fc}from"ethers";var Pi=300*1e3,Pc=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var Li="https://api.opensea.io/api/v2",Ui="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",Hc=new We([`function ${Ui}`]),Vc=new We(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Bi=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),Fi=new Set(Bi),Mi=new Set(["solana","flow"]);function Di(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!Ri(e))return"";try{for(let t of Ci(e,"utf8").split(`
+`)){let n=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(n)return n[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function Pt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||Di()}function ur(e={}){return Se({provider:"opensea",defaultUrl:Li,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function dr(e={}){return ur(e).baseUrl}function pr(e={}){return ye({accept:"application/json"},{"x-api-key":Pt(e)},ur(e).trusted)}function qi(e){let t=String(e||"ethereum").trim().toLowerCase();if(!Fi.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function lr(e,t="address"){try{return $i(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function fr(e,t=null){let n=String(e||"").trim();if(!n)throw new Error("opensea: account address required");if(t&&!Mi.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(n))return lr(n,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(n))throw new Error("opensea: invalid account address");return n}function ji(e={},t,n){return{chain:t,owner:n,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function Ct(e={},t={}){if(!Pt(t))throw new Error("OPENSEA_API_KEY required");let n=qi(e.chain),r=fr(e.address||e.owner,n),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],c=e.next?String(e.next):null,l=0;do{let p=new URL(`${dr(t)}/chain/${encodeURIComponent(n)}/account/${encodeURIComponent(r)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),c&&p.searchParams.set("next",c);let a=await M(p.toString(),{headers:pr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(a?.nfts)?a.nfts:[])s.push(ji(d,n,r));c=a?.next?String(a.next):null,l+=1}while(c&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:n,owner:r,count:s.length,pages:l,complete:!c,next:c,nfts:s,exec:!1,readOnly:!0}}async function mr(e={},t={}){if(!Pt(t))throw new Error("OPENSEA_API_KEY required");let n=fr(e.address||e.owner),r=await M(`${dr(t)}/account/${encodeURIComponent(n)}/pnl`,{headers:pr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:n,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:r?.realized_pnl_usd??null,unrealizedPnlUsd:r?.unrealized_pnl_usd??null,totalPnlUsd:r?.total_pnl_usd??null,netInvestedUsd:r?.net_invested_usd??null,currentValueUsd:r?.current_value_usd??null,returnPercentage:r?.return_percentage??null,itemLevelPnlAvailable:!1,raw:r,exec:!1,readOnly:!0}}var zc=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var Wc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var Gc=new We(["function setApprovalForAll(address operator,bool approved)"]),Kc=new We(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var Vi="https://api.satflow.com/v1";function hr(e={}){return Se({provider:"satflow",defaultUrl:Vi,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function zi(e={}){return hr(e).baseUrl}function yr(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function Wi(e={}){return ye({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":yr(e)},hr(e).trusted)}async function Gi(e,{method:t="GET",body:n,opts:r={}}={}){if(!yr(r))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${zi(r)}${e.startsWith("/")?e:`/${e}`}`,c=await(r.fetchImpl||fetch)(i,{method:t,headers:Wi(r),body:n!=null?JSON.stringify(n):void 0,signal:AbortSignal.timeout(r.timeoutMs??2e4)}),l=await c.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!c.ok)throw new Error(`satflow ${t} ${e}: HTTP ${c.status} ${String(l).slice(0,200)}`);return p}async function br(e={},t={}){let n=le(e.address||e.addr,"address"),r=new URLSearchParams({address:n});e.type&&r.set("type",e.type),e.limit!=null&&r.set("limit",String(e.limit)),e.offset!=null&&r.set("offset",String(e.offset));let o=await Gi(`/address/wallet-contents?${r}`,{opts:t});return{provider:"satflow",address:n,contents:o}}j();j();var ll=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Ki=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],Yi=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Ji=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Xi(e={}){let t=[],n=String(e.name||""),r=String(e.description||""),o=`${n} ${r}`;Yi.test(n)&&t.push("url-in-name");let i=Ki.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),Ji.test(n)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(n)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,c=!Array.isArray(e.traits)||e.traits.length===0;s&&c&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function gr(e={}){let t=Xi(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Qi=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Zi=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function Rt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function Oe(e,t){let n=await D(t);return n.ok?{ok:!0,data:n.data}:{ok:!1,error:`${e}: ${n.error}`.slice(0,300)}}function es(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function ts(e={},t){let n=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:n==null?null:String(n),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(n?`Inscription ${n}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function ns(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function wr(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function rs(e){let t=new Map;if(Array.isArray(e)){for(let n of e)n?.assetKey&&t.set(String(n.assetKey).toLowerCase(),n);return t}if(e&&typeof e=="object")for(let[n,r]of Object.entries(e))t.set(n.toLowerCase(),r);return t}function os(e,t){let n=wr(e),r=t.get(n),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!r)return{...e,assetKey:n};let i=Number(r.costUsd),s=Number(r.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:n,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let c=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-c)*100)/100,currentValueUsd:o,totalCostUsd:c,realizedUsd:null}}:{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function is(e){let t=new Map;for(let n of e){let r=wr(n);t.has(r)||t.set(r,n)}return[...t.values()]}function ss(e,t){let n=e.filter(i=>i.itemPnl?.status==="estimated"),r=e.length-n.length,o=Math.round(n.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:r===0&&e.length?"estimated-complete-for-held-items":n.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:n.length,unknownItems:r,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function Sr(e={},t={}){let n=new Date().toISOString(),r=Nt(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=Qi.filter(m=>!o||o.has(m.chain)),s=[],c=[],l=Rt(t,"opensea"),p=r.evm?i.filter(m=>m.family!=="solana"):[],a=await Z(p,4,async m=>({row:m,result:await Oe(`opensea-${m.chain}`,()=>Ct({chain:m.chain,address:r.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:x}of a)if(x.ok){let P=x.data.nfts.map(E=>({...E,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));c.push(...P),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:x.data.complete?"ok":"partial",count:P.length,complete:x.data.complete,next:x.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:x.error,source:"opensea"});if(!r.evm)for(let m of i.filter(x=>x.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(r.solana&&(!o||o.has("solana"))){let m=await Oe("opensea-solana",()=>Ct({chain:"solana",address:r.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let x=m.data.nfts.map(P=>({...P,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));c.push(...x),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:x.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(r.bitcoin&&(!o||o.has("bitcoin"))){let m=await Oe("satflow-wallet-contents",()=>br({address:r.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},Rt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let x=es(m.data.contents).map(E=>ts(E,r.bitcoin));c.push(...x);let P=x.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:P?"ok":"partial",count:x.length,complete:P,source:"satflow"})}else{let x=await Oe("bitcoin-meta-inscriptions",()=>He({address:r.bitcoin},Rt(t,"bitcoinMeta")),t.timeoutMs??35e3),P=x.ok&&x.data?.ok&&Array.isArray(x.data.inscriptions)?x.data.inscriptions:[];c.push(...P.map(E=>ns(E,r.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:P.length?"partial":"unavailable",count:P.length,complete:!1,source:P.length?"bitcoin-meta":"satflow",error:P.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([r.evm,r.solana].filter(Boolean))]){let x=await Oe(`opensea-pnl-${m}`,()=>mr({address:m},l),t.timeoutMs??35e3);d.push(x.ok?{status:"ok",...x.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:x.error})}let f=rs(e.costBasis),u=is(c).map(m=>os(m,f)).map(m=>gr(m)),b=u.filter(m=>!m.spam),v=u.filter(m=>m.spam),g=b.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),A=Math.round(g.reduce((m,x)=>m+Number(x.estimatedValueUsd),0)*100)/100,$=b.length-g.length,k=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:n,addresses:r,coverage:s,unsupported:Zi,inventory:{count:u.length,visibleCount:b.length,flaggedCount:v.length,items:u,visibleItems:b,flaggedItems:v},valuation:{estimatedCurrentValueUsd:A,valuedItems:g.length,unvaluedItems:$,complete:$===0&&k.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:ss(b,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as $t}from"node:os";import{join as Lt}from"node:path";var vr=process.env.ORACLE_PUBLIC_DESKTOP==="1",as=vr?process.env.ORACLE_CONFIG_DIR||Lt($t(),".config","oracle"):Lt($t(),".config","oracle"),_l=vr?as:Lt($t(),".config","mad-desk");function Ut(e,t,n=""){let r=process.env[e];if(r!=null&&String(r).trim()!=="")return r;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:n}var ps=JSON.parse(jt(new URL("../../package.json",import.meta.url),"utf8")),Ee="public",fs="127.0.0.1",ms=8799,Ke=ps.version,hs=new Set(["127.0.0.1","localhost","::1"]),qt=Ce(ls(ds(import.meta.url)),"../.."),Bt=Ce(qt,"public","oracle-console"),Er=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),ys=1e6,q=class extends Error{constructor(t,n,r){super(r||n),this.status=t,this.code=n}};function ie(e,t,n){let r=t,o;try{Y(n),o=ln(n)}catch{r=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(r,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":Ee,"x-oracle-unsigned":"true"}),e.end(o)}function bs(e){return new Promise((t,n)=>{let r=[],o=0;e.on("data",i=>{if(o+=i.length,o>ys){n(new q(413,"payload-too-large","request body too large")),e.destroy();return}r.push(i)}),e.on("end",()=>{let i=Buffer.concat(r).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{n(new q(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>n(new q(400,"bad-request","request stream error")))})}function K(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new q(400,t,`${t} must be a JSON object`);return e}function gs(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function ws(e){let t=gs(e);if(!hs.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function Ss(){return{status:200,body:{ok:!0,plane:Ee,version:Ke}}}function Ye(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function vs(e){let t=K(e,"body"),n=t.input!==void 0?K(t.input,"input"):t,r=Ye(K(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:pn(o,r)}}function Es(e){let t=K(e,"body"),n=t.request!==void 0?K(t.request,"request"):t.input!==void 0?K(t.input,"input"):t,r=Ye(K(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:fn(o,r)}}function xs(e){let t=K(e,"body"),n=Ye(K(t.opts,"opts")),r=yn(t.store??[],n);return{status:200,body:{ok:!0,count:r.length,grants:r}}}function As(e){let t=K(e,"body"),n=Ye(K(t.opts,"opts")),r=bn(t.store??[],t.id,n);return r==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:r}}function Is(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,n=!0,r=[];return t&&r.push("privy"),n&&r.push("injected"),{status:200,body:{ok:!0,plane:Ee,version:Ke,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:n,modes:r},privy:{appId:e||null}}}}var Ft=400;function ks(e=[]){if(e.length<=Ft)return{rows:e,truncated:!1,omitted:0};let t=r=>r?.kind==="native"?0:r?.priced?1:2;return{rows:[...e].sort((r,o)=>t(r)-t(o)).slice(0,Ft),truncated:!0,omitted:e.length-Ft}}var Mt=300;function Ts(e=[]){if(e.length<=Mt)return{items:e,truncated:!1,omitted:0};let t=r=>r?.spam===!0||r?.nsfw===!0?2:Number.isFinite(Number(r?.floorUsd))&&Number(r?.floorUsd)>0?0:1;return{items:[...e].sort((r,o)=>t(r)-t(o)).slice(0,Mt),truncated:!0,omitted:e.length-Mt}}var Ge=12;async function _s(e){let t=K(e,"body"),n=typeof t.owner=="string"?t.owner:null;if(!n)throw new q(400,"owner-required","owner must be an EVM address");let r=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(r&&r.length>Ge)throw new q(400,"too-many-chains",`at most ${Ge} chainIds per request`);let i=await qn({owner:n,chainIds:r},Ht());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var Ns=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,Os=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function Ps(e){if(typeof e!="string")return null;let t=e.trim();return Ns.test(t)?t:null}function Cs(e){if(typeof e!="string")return null;let t=e.trim();return Os.test(t)?t:null}function Tr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function Rs(e){let t=K(e,"body"),n=Tr(t.owner),r=Ps(t.solana),o=Cs(t.bitcoin);if(!n&&!r&&!o)throw new q(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>Ge)throw new q(400,"too-many-chains",`at most ${Ge} chainIds per request`);let s=await cr({addresses:{evm:n,solana:r,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},Ht()),c=[],l=[],p=0,a=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let b=u.fungibleTokens?.status??"unavailable";b==="ok"?p+=1:b==="unavailable"&&(a+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:b,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let v=u.native;u.status==="ok"&&v&&v.status==="ok"&&v.amountRaw&&v.amountRaw!=="0"&&v.amountRaw!=="0x0"&&c.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:v.symbol,decimals:v.decimals,amount:String(v.amountRaw),amountRaw:String(v.amountRaw),amountFormatted:v.amount,kind:"native",valueUsd:v.usdValue!=null?String(v.usdValue):null,priced:v.usdValue!=null});for(let g of u.fungibleTokens?.assets||[]){let A=g.amountRaw!=null?String(g.amountRaw):null;if(!A||A==="0")continue;let $=typeof g.decimals=="number"&&Number.isInteger(g.decimals)?g.decimals:null;c.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:g.symbol||g.coin||"TOKEN",decimals:$,amount:A,amountRaw:A,amountFormatted:g.amount!=null?String(g.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:g.address||g.mint||null,valueUsd:g.usdValue!=null?String(g.usdValue):null,priced:g.usdValue!=null,source:g.source||u.fungibleTokens?.source||null})}}let d=a>0||!!(s.valuation&&s.valuation.complete===!1),f=ks(c);return{status:200,body:{ok:!0,owner:s.addresses?.evm??n,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&a===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${a} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function Ht(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function $s(e){let t=K(e,"body"),n=Tr(t.owner);if(!n)throw new q(400,"owner-required","owner must be an EVM address");let r=await Sr({addresses:{evm:n}},Ht()),o=r?.inventory&&typeof r.inventory=="object"?r.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(r?.items)?r.items:[]).map(a=>{if(!a||typeof a!="object")return null;let d=typeof a.collection=="string"?a.collection:a.collection&&typeof a.collection=="object"&&typeof a.collection.slug=="string"?a.collection.slug:typeof a.contract=="string"?a.contract:null;return{chain:a.chain??null,chainId:a.chainId??null,family:a.family??null,owner:a.owner??n,contract:a.contract??null,tokenId:a.tokenId==null?null:String(a.tokenId),tokenStandard:a.tokenStandard??null,collection:d,name:typeof a.name=="string"?a.name.slice(0,160):null,imageUrl:a.imageUrl??a.image??null,estimatedValueUsd:a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,floorUsd:a.floorUsd!=null&&Number.isFinite(Number(a.floorUsd))?Number(a.floorUsd):a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,spam:a.spam===!0,nsfw:a.nsfw===!0,source:typeof a.source=="string"?a.source.slice(0,64):null}}).filter(Boolean),c=Array.isArray(r?.coverage)?r.coverage:[],l=Ts(s),p=r?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:n,queriedAt:r.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:c.map(a=>({family:a?.family??null,chain:a?.chain??null,chainId:a?.chainId??null,status:a?.status??null,count:a?.count??null,complete:a?.complete===!0,source:a?.source??null,error:null,reason:typeof a?.reason=="string"?a.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:c.filter(a=>a?.status==="partial").map(a=>a.chain).filter(Boolean),unavailable:c.filter(a=>a?.status==="unavailable").map(a=>a.chain).filter(Boolean),unconfigured:c.filter(a=>a?.status==="not-configured").map(a=>a.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:r?.valuation?{estimatedCurrentValueUsd:r.valuation.estimatedCurrentValueUsd??null,valuedItems:r.valuation.valuedItems??null,unvaluedItems:r.valuation.unvaluedItems??null,complete:r.valuation.complete===!0}:null}}}var Ls=6e4,Us=120,_r=10,Bs=300,Fs=_r,xr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),Ms=4096,Pe=new Map;function Ds(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let n=t.split(",")[0].trim();if(n)return n.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function qs(e,t){let n=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),r=n==="127.0.0.1"||n==="::1"||n.startsWith("127."),o=Ds(e),i=r&&o!==n,s=xr.has(t)?r&&!i?Fs:_r:r&&!i?Bs:Us,c=Date.now(),l=`${o}:${xr.has(t)?"amp":"std"}`,p=Pe.get(l);if(!p||c>=p.resetAt){for(Pe.set(l,{count:1,resetAt:c+Ls});Pe.size>Ms;){let a=Pe.keys().next();if(a.done)break;Pe.delete(a.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-c)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var Ar=Object.freeze({"GET /public/health":Ss,"GET /public/config":Is,"GET /eval":Ir,"GET /public/eval":Ir,"POST /public/connect/request":vs,"POST /public/connect/assemble":Es,"POST /public/grants/active":xs,"POST /public/grants/get":As,"POST /public/approvals":_s,"POST /public/portfolio":Rs,"POST /public/nfts":$s});function Ir(){let t=[Dt(Ce(qt,"public","eval-report.json")),Dt(Ce(qt,"docs","eval-report.json"))].find(r=>kr(r));if(!t)throw new q(404,"not-found","no committed eval report in this build");let n;try{n=JSON.parse(jt(t,"utf8"))}catch{throw new q(500,"eval-report-invalid","committed eval report is not valid JSON")}return{status:200,body:{...n,servedAt:new Date().toISOString(),note:"Static release artifact. Reproduce: npx @oracle-agent/oracle eval guards|adversarial|fidelity --json"}}}function Vt(e={}){return{"cache-control":"no-store","x-oracle-plane":Ee,"x-oracle-unsigned":"true",...e}}function js(e,t,n,r){e.writeHead(t,Vt({"content-type":n})),e.end(r)}function Hs(e,t,n){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let r=n===""?"/":n,o=Er[r]||Er[r.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Dt(Ce(Bt,o.file));if(!i.startsWith(Bt+us)&&i!==Bt)return ie(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!kr(i))return ie(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=jt(i);return e.method==="HEAD"?(t.writeHead(200,Vt({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(js(t,200,o.type,s),!0)}async function Vs(e,t){let r=new URL(e.url,"http://localhost").pathname||"/";r.length>1&&r.endsWith("/")&&r!=="/oracle-console/"&&(r=r.replace(/\/+$/,"")),r===""&&(r="/");let o=r.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=Ar[i];try{if(!s){if(Hs(e,t,r))return;throw Object.keys(Ar).some(d=>d.endsWith(` ${o}`))?new q(405,"method-not-allowed",`unsupported method for ${o}`):new q(404,"not-found",`unknown route ${o}`)}let c=qs(e,o);if(!c.allowed){t.writeHead(429,Vt({"content-type":"application/json","retry-after":String(c.retryAfterSec),"x-ratelimit-limit":String(c.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${c.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await bs(e),p=await s(l);ie(t,p.status,p.body)}catch(c){if(c instanceof X){ie(t,500,{error:"secret-leak-blocked"});return}if(c instanceof Q){ie(t,400,{error:"invalid-grant",errors:c.errors.map(l=>({field:l.field,message:l.message}))});return}if(c instanceof q){ie(t,c.status,{error:c.code,message:c.message});return}if(c instanceof TypeError){ie(t,400,{error:"bad-request",message:c.message});return}ie(t,500,{error:"internal-error"})}}function zs(){return cs((e,t)=>{Vs(e,t).catch(()=>{try{ie(t,500,{error:"internal-error"})}catch{}})})}function zt({host:e,port:t}={}){let n=ws(e??Ut("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",fs)),r=t??Ut("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(ms)),o=Number(r);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(r)}`);return{host:n,port:o}}function Nr(e={}){let{host:t,port:n}=zt(e),r=zs();return r.listen(n,t),r}var Wt=zt(),Je=Nr(Wt);Je.on("listening",()=>{let e=Je.address(),t=typeof e=="object"&&e?e.address:Wt.host,n=typeof e=="object"&&e?e.port:Wt.port;console.log(`oracle-public-server listening on http://${t}:${n} (plane=${Ee}, version=${Ke}, unsigned-only)`)});Je.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{Je.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});