@oracle-agent/oracle 0.35.34 → 0.35.36

package/dist/cli/commands/quickstart.mjs

@@ -1,8 +1,8 @@
-var Zn=Object.defineProperty;var l=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var ke=(e,t)=>{for(var r in t)Zn(e,r,{get:t[r],enumerable:!0})};function tr(e){return Qn.get(Number(e))||null}function rr(e,t=process.env){let r=tr(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}var Ie,Qn,Ze=l(()=>{Ie={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Qn=new Map(Object.values(Ie).map(e=>[e.chainId,e]))});function ue(e){let t=e?.transactionHash||e?.hash||e?.txid||null;return t?{happened:!0,hash:String(t),note:null}:{happened:!1,hash:null,note:"no transaction hash \u2014 the action did not succeed"}}var Qe=l(()=>{});var nr=l(()=>{});var or=l(()=>{});var de=l(()=>{});var ee=l(()=>{});var Te=l(()=>{de();ee()});import{isAddress as oa}from"ethers";var tt=l(()=>{Te();de();ee()});import{Interface as ro,isAddress as ua}from"ethers";var ma,ir=l(()=>{tt();de();ee();ma=new ro(["function approve(address spender,uint256 amount) returns (bool)"])});import{Interface as no,isAddress as ga}from"ethers";var xa,Sa,sr=l(()=>{tt();de();ee();xa=new no(["function approve(address spender,uint256 amount) returns (bool)"]),Sa=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"})});var J=l(()=>{});import{Interface as oo,MaxUint256 as Na,isAddress as _a,keccak256 as Ca,toUtf8Bytes as Ra}from"ethers";var ja,K=l(()=>{or();ir();sr();J();ee();ja=new oo(["function approve(address spender,uint256 amount) returns (bool)"])});var qa,Ma,Ne=l(()=>{qa=300*1e3,Ma=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});var _e=l(()=>{K()});import{Address as Va,NETWORK as Ja,OutScript as Ka,RawTx as Ga,SigHash as Ya,TEST_NETWORK as Xa,Transaction as Za}from"@scure/btc-signer";var ot=l(()=>{});import{createHash as io}from"node:crypto";import{base58 as rc}from"@scure/base";import{getCompiledTransactionMessageDecoder as oc}from"@solana/transaction-messages";var ar,ic,it=l(()=>{ar=e=>io("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),ic=new Map([[ar("route"),{name:"route",prefixBytes:0}],[ar("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]])});import G from"node:net";import so from"node:dns";function Ce(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let d=c.split(":"),m=d.at(-1);if(m?.includes(".")){let p=m.split(".").map(Number);if(p.length!==4||p.some(h=>!Number.isInteger(h)||h<0||h>255))return null;d.splice(d.length-1,1,(p[0]<<8|p[1]).toString(16),(p[2]<<8|p[3]).toString(16))}return d.some(p=>!/^[0-9a-f]{1,4}$/.test(p))?null:d.map(p=>Number.parseInt(p,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let u=t.includes("::"),a=8-i.length-s.length;if(!u&&a!==0||u&&a<1)return null;let f=[...i,...Array(Math.max(0,a)).fill(0),...s];return f.length!==8?null:Uint8Array.from(f.flatMap(c=>[c>>8,c&255]))}function st(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function at(e){if(G.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(G.isIPv6(e)){let t=Ce(e);if(!t)return!1;let r=Ce("::ffff:0:0");return st(t,r,96)?at([...t.slice(12)].join(".")):st(t,Ce("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>st(t,Ce(o),i)):!1}return!1}function co(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(ao.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=G.isIP(r);return n!==0&&!at(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function ct(e,{lookupFn:t=so.promises.lookup}={}){let r=co(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:G.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!at(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function lt({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let d=await t();r=d.Agent,n=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(m=>typeof m=="string"?{address:m}:m).filter(m=>m&&m.address).map(m=>({address:m.address,family:m.family||(G.isIPv6(m.address)?6:4)})),u=(d,m,p)=>{i.set(o(d),s(typeof m=="string"?[{address:m,family:p}]:m))},a=d=>{let m=o(d);if(G.isIP(m))return[{address:m,family:G.isIPv6(m)?6:4}];let p=i.get(m);if(!p||!p.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return p},f=new r({connect:{lookup(d,m,p){let h;try{h=a(d)}catch(w){return p(w)}return m?.all?p(null,h):p(null,h[0].address,h[0].family)}}}),c=lo((d,m={})=>n(d,{...m,dispatcher:f}),u);return{dispatcher:f,fetch:c,pin:u,resolve:a,async close(){try{await f.destroy()}catch{}}}}function lo(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[ut]=Object.freeze({pin:t}),e}function dt(e){return typeof e=="function"&&typeof e[ut]?.pin=="function"}function cr(e,t,r){if(!dt(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[ut].pin(t,r)}var ao,ut,lr=l(()=>{ao=new Set(["localhost","metadata.google.internal","metadata.goog"]);ut=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as uo}from"node:crypto";import{types as j}from"node:util";function v(e){return z(`HTTP JSON body refused: ${e}`)}function Eo(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof j[t]=="function"&&j[t](e))}function xo(e){let t=[],r=0,n=0,o=0,i=0,s=new WeakSet,u=c=>{if(r+=Buffer.byteLength(c,"utf8"),r>D.bytes)throw v("serialized byte limit exceeded");t.push(c)},a=c=>{if(Buffer.byteLength(c,"utf8")>D.bytes)throw v("serialized byte limit exceeded");return JSON.stringify(c)},f=(c,d)=>{if(n+=1,n>D.nodes)throw v("node limit exceeded");if(d>D.depth)throw v("depth limit exceeded");if(c===null){u("null");return}if(typeof c=="string"){u(a(c));return}if(typeof c=="boolean"){u(c?"true":"false");return}if(typeof c=="number"){if(!Number.isFinite(c))throw v("non-finite number");u(Object.is(c,-0)?"0":String(c));return}if(typeof c!="object")throw v("unsupported non-JSON value");if(j.isProxy(c))throw v("proxy value");if(Eo(c))throw v("unsupported exotic object");if(s.has(c))throw v("cyclic value");s.add(c);try{if(Object.getOwnPropertySymbols(c).length>0)throw v("symbol-keyed fields are unsupported");if(Array.isArray(c)){let h=Object.getPrototypeOf(c),w=0;for(;h!==null;){if(j.isProxy(h))throw v("proxy array prototype");if(w+=1,w>D.depth)throw v("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(c.length>D.arrayLength)throw v("array length limit exceeded");for(let T=0;T<c.length;T+=1){let P=Object.getOwnPropertyDescriptor(c,String(T));if(!P||!Object.hasOwn(P,"value")||P.enumerable!==!0)throw v("array entries must be dense enumerable own data")}let S=0;for(let T in c){if(i+=1,i>D.fields)throw v("enumeration limit exceeded");if(Object.hasOwn(c,T)&&(S+=1,S>c.length))throw v("named array fields are unsupported")}if(S!==c.length)throw v("array entries must be dense enumerable own data");u("[");for(let T=0;T<c.length;T+=1)T&&u(","),f(Object.getOwnPropertyDescriptor(c,String(T)).value,d+1);u("]");return}let m=Object.getPrototypeOf(c);if(m!==Object.prototype&&m!==null)throw v("non-plain object");let p=[];for(let h in c){if(i+=1,i>D.fields)throw v("enumeration limit exceeded");if(!Object.hasOwn(c,h))continue;if(o+=1,o>D.fields)throw v("field limit exceeded");let w=Object.getOwnPropertyDescriptor(c,h);if(!w||!Object.hasOwn(w,"value")||w.enumerable!==!0)throw v("object fields must be enumerable own data");p.push([h,w.value])}u("{");for(let h=0;h<p.length;h+=1)h&&u(","),u(a(p[h][0])),u(":"),f(p[h][1],d+1);u("}")}finally{s.delete(c)}};return f(e,0),t.join("")}function So(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(j.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let i=Object.getOwnPropertyDescriptor(e,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[n]=String(s)}return t}function Ao(){return Object.assign(Object.create(null),{Accept:"application/json"})}function vo(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function ko(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Re(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=pr.get(e);return t||(t=mr,mr+=1,pr.set(e,t)),`reference:${t}`}function wr(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Io.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function hr(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(wr);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return wr(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&Oo.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function To(e,t,r,n={},o=null){let i=uo("sha256"),s=(a,f)=>{let c=String(f);i.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),i.update("=").update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c).update(`
-`)};s("method",e),s("url",t),Object.keys(r||{}).map((a,f)=>({name:a.toLowerCase(),order:f,value:String(r[a])})).sort((a,f)=>a.name.localeCompare(f.name)||a.order-f.order).forEach((a,f)=>{s(`header-name-${f}`,a.name),s(`header-value-${f}`,a.value)}),s("body",o??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${a}`,n[a]??"-");return i.digest("hex")}function No(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,dr):Math.min(250*2**e,dr)+Math.floor(Math.random()*100)}function z(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function pt(e,t,r){return z(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function Y(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Co(e){return e?e.byteLength??e.length??0:0}async function Ro(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(Y(e),!n))throw pt(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),m=Buffer.byteLength(d,"utf8");if(m>t){if(!n)throw pt(r,`body ${m} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let u=[],a=0,f=!1;try{for(;;){let{value:d,done:m}=await s.read();if(m)break;if(d&&(u.push(Buffer.from(d)),a+=Co(d),a>t)){f=!0;break}}}finally{if(f)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(f&&(typeof o=="function"&&o(),!n))throw pt(r,`streamed ${a} bytes`,t);let c=Buffer.concat(u);return(f?c.subarray(0,t):c).toString("utf8")}function $o(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Lo(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:u,untrustedUrl:a=!1,maxResponseBytes:f=null,sameOriginRedirectsOnly:c=!1,importUndici:d,validateResponse:m,signal:p,redirectPolicy:h="follow",maxRedirects:w=$e}){let S=new AbortController,T=setTimeout(()=>S.abort(),i),P=p?fr?fr([p,S.signal]):p:S.signal,b=null,N=t,M=s?{lookupFn:s}:{};if(a&&!u&&!dt(N))throw z(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let ae=async(y,{status:I=null}={})=>{let O=await ct(y,M);if(!O.ok)throw z(I==null?`HTTP refused ${y}: ${O.error}`:`HTTP redirect to ${y} ${O.error}`,I==null?{}:{status:I});let H=new URL(y).hostname;if(u){if(b&&(await b.close(),b=null),!b)try{b=await lt({requireUndici:!0,...d?{importUndici:d}:{}})}catch(g){throw z(I==null?`HTTP refused ${y}: ${g?.message||g}`:`HTTP redirect to ${y} refused: ${g?.message||g}`,I==null?{}:{status:I})}b.pin(H,O.addresses),N=b.fetch}else cr(N,H,O.addresses);return O};try{let y=String(e),I=Object.assign(Object.create(null),n||{});a&&await ae(y);for(let O=0;O<=w;O+=1){let H=Object.assign(Object.create(null),{method:r,headers:I,body:o,signal:P,redirect:"manual",dispatcher:void 0}),g=await N(y,H);if((h==="error"||w===0)&&g.status>=300&&g.status<400)throw Y(g),z(`HTTP ${g.status} ${r} redirect refused`,{status:g.status,redirectRefused:!0});if(bo.has(g.status)){let $=c===!0&&r==="POST"&&[307,308].includes(g.status)&&hr(r,o);if(r!=="GET"&&r!=="HEAD"&&!$){Y(g);let k=new Error(`HTTP ${g.status} ${r} ${y} redirected non-idempotent request`);throw k.status=g.status,k}if(O===w)throw Y(g),z(`HTTP ${g.status} ${r} redirect budget exhausted`,{status:g.status,redirectRefused:!0});let Qt=g.headers?.get?.("location"),B;try{B=vo(Qt,y)}catch(k){throw Y(g),k}let W=!ko(B,y);if(Y(g),W&&r==="POST"){let k=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw k.status=g.status,k}if(W&&c){let k=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw k.status=g.status,k.retryable=!1,k}if(W&&(I=Ao(I)),a)await ae(B,{status:g.status});else if(W){let k=await ct(B,M);if(!k.ok){let A=new Error(`HTTP redirect from ${y} ${k.error}`);throw A.status=g.status,A.retryable=!1,A}u&&k.addresses?.length&&(b||(b=await lt(d?{importUndici:d}:{})),b&&(b.pin(new URL(B).hostname,k.addresses),N=b.fetch))}y=B;continue}if(typeof m=="function")try{await m(g,{url:y})}catch($){throw Y(g),z($?.message||String($))}let R=await Ro(g,f,{url:y,onOversize:()=>S.abort()}),ce=$o(R);if(!g.ok){let $=new Error(`HTTP ${g.status} ${r} ${y}`);throw $.status=g.status,$.retryAfter=g.headers?.get?.("retry-after")??null,$.body=ce??R.slice(0,300),$}return ce??R}throw new Error(`HTTP redirect loop for ${e}`)}catch(y){if(S.signal.aborted&&!mt(p)){let I=y&&(typeof y=="object"||typeof y=="function")&&!j.isProxy(y)?y:null,O=I?Object.getOwnPropertyDescriptor(I,"oversize"):null;if(!(O&&Object.hasOwn(O,"value")&&O.value===!0))try{if(!I)throw new TypeError("unsafe rejection");Object.defineProperties(I,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let g=new Error("HTTP request timed out");throw Object.defineProperties(g,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),g}}throw y}finally{clearTimeout(T),b&&await b.close()}}async function Le(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&j.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let A of Object.getOwnPropertyNames(t)){let E=Object.getOwnPropertyDescriptor(t,A);if(!(A==="toJSON"&&E&&Object.hasOwn(E,"value")&&E.value===void 0)){if(!r.has(A))throw new TypeError("HTTP options contain unknown fields");if(!E||!E.enumerable||!Object.hasOwn(E,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=A=>{if(t==null||!Object.hasOwn(t,A))return;let E=Object.getOwnPropertyDescriptor(t,A);if(!E||!Object.hasOwn(E,"value"))throw new TypeError("HTTP options must contain own data properties");return E.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=n("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let u=n("redirectPolicy");if(u!==void 0&&u!=="follow"&&u!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>$e))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${$e}`);if(u==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let f=u??"follow",c=f==="error"?0:a??$e;for(let A of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let E=n(A);if(E!==void 0&&typeof E!="boolean")throw new TypeError(`HTTP ${A} must be boolean`)}let d=n("maxResponseBytes");if(d!==void 0&&(!Number.isInteger(d)||d<1||d>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let m=n("signal");if(m!==void 0){if(j.isProxy(m)||!(m instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{mt(m)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let A of["importUndici","lookupFn","validateResponse"]){let E=n(A);if(E!==void 0&&typeof E!="function")throw new TypeError(`HTTP ${A} must be a function`)}let p=n("fetchImpl"),h=p||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let w=i??12e3,S=(o||"GET").toUpperCase(),T=n("headers"),P=So(T),b=Object.assign(Object.create(null),P);Object.keys(b).some(A=>A.toLowerCase()==="accept")||(b.Accept="application/json");let N=n("body");N!=null&&typeof N!="string"&&(Object.keys(b).find(E=>E.toLowerCase()==="content-type")||(b["Content-Type"]="application/json"),N=xo(N));let M=s??po,ae=n("lookupFn"),y=!p,I=n("untrustedUrl")===!0,O=n("sameOriginRedirectsOnly")===!0,H=n("importUndici"),g=n("validateResponse"),R=m,ce=d??null,$=async()=>{let A;for(let E=0;E<=M;E++){R&&ho.call(R);try{return await Lo(e,{fetchImpl:h,method:S,headers:b,body:N,timeoutMs:w,lookupFn:ae,realFetch:y,untrustedUrl:I,maxResponseBytes:ce,sameOriginRedirectsOnly:O,importUndici:H,validateResponse:g,signal:R,redirectPolicy:f,maxRedirects:c})}catch(V){A=V;let Q=Xe=>{if(!V||typeof V!="object"&&typeof V!="function"||j.isProxy(V))return;let le=Object.getOwnPropertyDescriptor(V,Xe);return le&&Object.hasOwn(le,"value")?le.value:void 0},Ye=Q("status"),Kn=Q("oracleTimeout")===!0||Q("name")==="AbortError"||Q("name")==="TimeoutError"||mt(R),Gn=new Set([408,425,429]),Yn=Q("retryable")===!1?!1:Ye!=null?Gn.has(Ye)||fo.has(Ye)&&ur.has(S):!Kn&&ur.has(S);if(E===M||!Yn)throw V;let er=No(E,Q("retryAfter"));R?await new Promise((Xe,le)=>{let Xn=setTimeout(Xe,er);go.call(R,"abort",()=>{clearTimeout(Xn),le(yo(R)||new DOMException("Aborted","AbortError"))},{once:!0})}):await _o(er)}}throw A};if(!(n("dedupe")!==!1&&!R&&hr(S,N)))return $();let B=To(S,e,b,{untrustedUrl:I,maxResponseBytes:ce,sameOriginRedirectsOnly:O,redirectPolicy:f,maxRedirects:c,timeoutMs:w,retries:M,fetchImpl:Re(h),realFetch:y,lookupFn:Re(ae),importUndici:Re(H),validateResponse:Re(g)},N),W=ft.get(B);if(W)return W;let k=$().finally(()=>ft.delete(B));return ft.set(B,k),k}var fo,ur,po,dr,mo,wo,ho,go,fr,mt,yo,bo,$e,pc,D,ft,pr,mr,Io,Oo,_o,Pe=l(()=>{lr();fo=new Set([408,425,429,500,502,503,504]),ur=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),po=2,dr=4e3,mo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,wo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,ho=AbortSignal.prototype.throwIfAborted,go=EventTarget.prototype.addEventListener,fr=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,mt=e=>e?mo.call(e):!1,yo=e=>e?wo.call(e):void 0,bo=new Set([301,302,303,307,308]),$e=3,pc=64*1024,D=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});ft=new Map,pr=new WeakMap,mr=1;Io=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Oo=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);_o=e=>new Promise(t=>setTimeout(t,e))});var gr=l(()=>{});var yr=l(()=>{Pe();gr()});var br=l(()=>{yr()});var Oc,Tc,ht=l(()=>{J();br();Oc=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Tc=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"})});var Cc,gt=l(()=>{J();Cc="0x"+"00".repeat(32)});var Po,Bc,yt=l(()=>{gt();J();Po=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Bc=Object.freeze(Po.map(e=>e[0]))});var Be=l(()=>{J()});import{TypedDataEncoder as Mc,getAddress as Hc,isAddress as zc}from"ethers";var Do,jo,Ar=l(()=>{Ne();Do=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),jo=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]})});var Vc,vr=l(()=>{Vc=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"})});var kr=l(()=>{});import{TypedDataEncoder as el,getAddress as tl,isAddress as rl}from"ethers";var Fo,ll,qo,ul,Ir=l(()=>{Pe();Te();vr();kr();Ne();Fo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),ll=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),qo=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),ul=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]})});import{TypedDataEncoder as pl,getAddress as ml}from"ethers";var gl,bt=l(()=>{Ar();Ir();gl=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"])});import{Interface as Tr}from"ethers";var Vo,Ll,Jo,Pl,Bl,Dl,jl,Ko,Fl,De=l(()=>{K();Te();Ne();_e();ot();it();ht();yt();Be();bt();Vo=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]),Ll=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),Jo=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Pl=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),Bl=new Tr(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Dl=new Tr(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),jl=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}}),Ko=Object.freeze([...Vo]),Fl=Object.freeze({...Jo})});import{encode as Hl}from"@msgpack/msgpack";import{keccak256 as Ul,verifyTypedData as Wl}from"ethers";var Vl,Jl,Et=l(()=>{Vl=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Jl=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]})});var xt=l(()=>{Be()});import{ed25519 as tu}from"@noble/curves/ed25519.js";import{base58 as nu}from"@scure/base";import{RawTx as iu,SigHash as su,Transaction as au}from"@scure/btc-signer";import{Transaction as lu,keccak256 as uu,verifyTypedData as du}from"ethers";var St=l(()=>{Et();xt()});import{base58 as yu}from"@scure/base";var je=l(()=>{De();_e();K();St()});var _r=l(()=>{je();De()});import{wordlists as Xo}from"ethers";function ti(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return ei.has(t.length)&&t.every(r=>Xo.en.getWordIndex(r)>=0)}function ii(e){let t=Cr(e);return oi.has(t)||ni.test(t)}function Cr(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function si(e){let t=Cr(e);return[...Zo].some(r=>t.includes(r))}function ai(e,t,r){if(typeof t=="string"){if(Qo.some(n=>n.test(t))||ti(t))throw new pe(r);if(ri.test(t)&&!ii(e))throw new pe(r)}}function At(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return ai(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((o,i)=>At(o,`${t}[${i}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let n={};for(let o of Object.keys(e).sort()){let i=`${t}.${o}`;if(si(o))throw new pe(i);e[o]!==void 0&&(n[o]=At(e[o],i,o))}return n}function vt(e){return At(e)}var Zo,Qo,ei,ri,ni,oi,pe,Fe=l(()=>{Zo=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),Qo=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],ei=new Set([12,15,18,21,24]);ri=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,ni=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,oi=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);pe=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}}});import{wordlists as $u}from"ethers";var Rr,Pu,te=l(()=>{Fe();Rr=64*1024,Pu=32*1024});var ui,ju,Fu,Me=l(()=>{te();ui=["schemaVersion","buildVersion","recordType","execution","custody"],ju=[...ui,"recordHash"],Fu=Object.freeze({signed:new Set(["workflow.signed","legacy.signed"]),submitted:new Set(["workflow.submitted","legacy.broadcast"]),finalized:new Set(["workflow.finalized"]),reorged:new Set(["workflow.reorged"]),orphaned:new Set(["workflow.orphaned"]),compensating:new Set(["workflow.compensating"]),compensated:new Set(["workflow.compensated"])})});var di,Mr,Uu,Nt=l(()=>{te();Me();di=Object.freeze(["draft","checked","approval","signed","submitted","finalized","reorged","orphaned","compensating","compensated","failed","cancelled"]),Mr=Object.freeze(["workflow.drafted","workflow.checked","workflow.approval_requested","workflow.approval_granted","workflow.signed","workflow.submitted","workflow.finalized","workflow.reorged","workflow.orphaned","workflow.compensating","workflow.compensated","workflow.failed","workflow.cancelled","workflow.annotated"]),Uu=new Set(Mr)});var gi,Hr=l(()=>{te();Nt();gi=64*1024*1024});var Xu,Zu,Qu,zr=l(()=>{Xu=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Zu=Object.freeze(["read","simulate"]),Qu=1440*60});function _t(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return yi.test(t)||bi.includes(r)}function Ei(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Wr.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Vr(e){let t;try{t=JSON.stringify(e)}catch(o){throw new F("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=Ei(t);for(let{rule:o,re:i}of Ur)if(i.test(r))throw new F("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new F("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&_t(o))throw new F(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function U(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Wr.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Ur)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new F(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&_t(o))throw new F(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");U(o,`${t}[key]`,r),U(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())U(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>U(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if(_t(o))throw new F(`${t}.${o}`,"forbidden-key-name");U(i,`${t}.${o}`,r,o)}return e}var F,yi,bi,Ur,Wr,Ct=l(()=>{zr();F=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},yi=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,bi=Object.freeze(["privkey","wif","xprv","seed"]);Ur=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Wr=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"])});var Rt,ud,Jr=l(()=>{Ct();Rt=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),ud=Object.freeze(Object.fromEntries(Rt.map((e,t)=>[e,Object.freeze(t+1<Rt.length?[Rt[t+1]]:[])])))});var xi,Kr=l(()=>{Jr();te();Me();xi=Object.freeze({intent:"draft",quote_comparison:"draft",simulation:"draft",prepared:"checked",approval:"approval",signed:"signed",broadcast:"submitted",settlement:"finalized",balance_delta:"compensated",position:"compensated"})});var Gr=l(()=>{te();Me();Nt();Hr();Kr()});var Ai,vi,ki,Kd,Gd,Yd,Xd,Zd,Ii,Qd,Yr=l(()=>{Ai=Object.freeze(["owner","operator","agent","viewer"]),vi=Object.freeze(["tenant","config","policy","grant","workflow","trade","receipt","audit","telemetry","context","lifecycle"]),ki=Object.freeze({read:"read",create:"create",update:"update",delete:"delete",manage:"manage",prepare:"prepare",cancel:"cancel",export:"export",approve:"approve"}),Kd=Object.freeze(["owner"]),Gd=Object.freeze({ALLOW_ROLE_PERMISSION:"allow.role_permission",DENY_MISSING_CONTEXT:"deny.missing_context",DENY_INVALID_CONTEXT:"deny.invalid_context",DENY_INVALID_REQUEST:"deny.invalid_request",DENY_UNKNOWN_RESOURCE:"deny.unknown_resource",DENY_UNKNOWN_ACTION:"deny.unknown_action",DENY_UNBOUND_OBJECT:"deny.unbound_object",DENY_TENANT_MISMATCH:"deny.tenant_mismatch",DENY_RESOURCE_MISMATCH:"deny.resource_mismatch",DENY_ROLE_PERMISSION:"deny.role_permission",DENY_POLICY_NOT_APPROVER:"deny.policy_not_approver"}),Yd=new Set(Ai),Xd=new Set(vi),Zd=new Set(Object.values(ki)),Ii=Object.freeze({owner:Object.freeze(["tenant:read","tenant:manage","config:read","config:manage","policy:read","policy:manage","grant:read","grant:create","grant:update","grant:delete","grant:manage","workflow:read","workflow:create","workflow:update","workflow:delete","workflow:cancel","workflow:approve","trade:read","trade:prepare","receipt:read","receipt:export","audit:read","audit:export","telemetry:read","telemetry:create","telemetry:export","context:read","context:create","context:update","context:delete","context:manage","context:export","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:delete","lifecycle:manage","lifecycle:approve","lifecycle:export"]),operator:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","workflow:cancel","trade:read","trade:prepare","receipt:read","audit:read","telemetry:read","telemetry:create","context:read","context:create","context:update","context:delete","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:manage"]),agent:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","trade:read","trade:prepare","receipt:read","telemetry:create","context:read","context:create","context:update","lifecycle:read"]),viewer:Object.freeze(["tenant:read","config:read","grant:read","workflow:read","trade:read","receipt:read","audit:read","telemetry:read","context:read","lifecycle:read"])}),Qd=Object.freeze(Object.fromEntries(Object.entries(Ii).map(([e,t])=>[e,Object.freeze([...t])])))});var Oi,Ti,Ni,nf,of,sf,af,cf,lf,$t=l(()=>{Yr();Oi=Object.freeze(["succeeded","denied","invalid","failed","cancelled","timed_out","unavailable","skipped"]),Ti=Object.freeze(["workflow","task","intent","plan","run","event","eval"]),Ni=Object.freeze(["taskId","intentId","planId","runId","eventId"]),nf=Object.freeze({maxAttributes:24,maxKeyLength:48,maxStringLength:256,maxArrayLength:8}),of=new Set(Oi),sf=new Set(Ti),af=new Set(Ni),cf=Object.freeze(["authorization","bearer","cookie","credential","password","passphrase","secret","token","privatekey","privkey","seed","mnemonic","keystore","signature","prompt","systemmessage","usermessage","assistantmessage","rawtransaction","signedtransaction","serializedtransaction","transactionbytes","calldata","callbytes","inputdata"]),lf=Object.freeze({taskId:"x-oracle-task-id",intentId:"x-oracle-intent-id",planId:"x-oracle-plan-id",runId:"x-oracle-run-id",eventId:"x-oracle-event-id"})});var wf,Xr=l(()=>{Gr();$t();wf=Object.freeze({"workflow.cancelled":"cancelled","workflow.failed":"failed"})});var xf,Zr=l(()=>{$t();xf=32*1024*1024});var Af,vf,kf,re=l(()=>{Af=Object.freeze({N:1<<17,r:8,p:1}),vf=256*1024*1024,kf=16*1024});var Of,Qr=l(()=>{Of=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}})});import{homedir as Lt}from"node:os";import{join as Pt}from"node:path";var en,_i,Cf,tn=l(()=>{en=process.env.ORACLE_PUBLIC_DESKTOP==="1",_i=en?process.env.ORACLE_CONFIG_DIR||Pt(Lt(),".config","oracle"):Pt(Lt(),".config","oracle"),Cf=en?_i:Pt(Lt(),".config","mad-desk")});var Bf,Df,jf,rn=l(()=>{tn();Bf="0".repeat(64),Df=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"}),jf=Promise.resolve()});var Bt=l(()=>{rn();J();re();je()});var on=l(()=>{});var cn={};ke(cn,{SIGN_TIME_REVIEW_VERSION:()=>Ci,SignTimeReviewSecretError:()=>me,createSignTimeReview:()=>an});function Dt(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string"){let o=e.trim().split(/\s+/);if(Bi.test(e)||Di.has(o.length)&&o.every(i=>/^[a-z]+$/i.test(i)))throw new me(t);return e}if(typeof e=="bigint")return e.toString();if(typeof e=="number"){if(!Number.isSafeInteger(e))throw new TypeError(`sign-time review: safe integer required at ${t}`);return e}if(Array.isArray(e))return e.map((o,i)=>Dt(o,`${t}[${i}]`,r));X(e,t);let n={};for(let o of Object.keys(e).sort()){let i=o.replace(/[^a-z0-9]/gi,"");if(Pi.test(i))throw new me(`${t}.${o}`);e[o]!==void 0&&(n[o]=Dt(e[o],`${t}.${o}`,o))}return n}function X(e,t){if(e==null||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`sign-time review: ${t} must be a plain object`);return e}function we(e,t){if(e==null||e==="")throw new TypeError(`sign-time review: ${t} required`);return e}function ne(e,t){let r=String(we(e,t)).toLowerCase();if(!Ri.test(r))throw new TypeError(`sign-time review: ${t} must be an EVM address`);return r}function q(e,t,{positive:r=!1}={}){try{let n=BigInt(we(e,t));if(n<0n||r&&n===0n)throw new Error;return n.toString()}catch{throw new TypeError(`sign-time review: ${t} must be an unsigned integer`)}}function jt(e,t){if(typeof e!="string"||e.length===0||e.length>500||e!==e.trim())throw new TypeError(`sign-time review: ${t} must be non-empty text`);return e}function sn(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))sn(t);Object.freeze(e)}return e}function ji(e,t){if(typeof e=="boolean")return{passed:e,reason:e?"passed":"failed"};X(e,t);let r=e.passed??e.ok??e.allowed;if(typeof r!="boolean")throw new TypeError(`sign-time review: ${t} needs a boolean result`);let n=e.reason??e.message??e.name??(r?"passed":"failed");return{...e,passed:r,reason:jt(String(n),`${t}.reason`)}}function Fi(e){if(!Array.isArray(e))throw new TypeError("sign-time review: policyChecks must be an array");let t=e.map((n,o)=>ji(n,`policyChecks[${o}]`)),r=t.filter(n=>!n.passed);return{checks:t,passed:t.length-r.length,failed:r.length,reasons:r.map(n=>n.reason)}}function qi(e){if(e==null)return null;if(X(e,"simulation"),typeof e.status!="string"||!["ok","success","failed","error","unavailable","unknown"].includes(e.status))throw new TypeError("sign-time review: simulation.status is invalid");if(e.willRevert!==!0&&e.willRevert!==!1&&e.willRevert!==null)throw new TypeError("sign-time review: simulation.willRevert must be boolean or null");let t={status:e.status,willRevert:e.willRevert??null,summary:jt(String(e.summary??"simulation result recorded"),"simulation.summary")};return e.gasEstimate!=null&&(t.gasEstimate=q(e.gasEstimate,"simulation.gasEstimate")),e.gasLimit!=null&&(t.gasLimit=q(e.gasLimit,"simulation.gasLimit")),t}function Mi(e){if(e==null)return null;if(!Array.isArray(e)||e.length===0)throw new TypeError("sign-time review: assetDeltas must be a non-empty array");return e.map((t,r)=>{X(t,`assetDeltas[${r}]`);let n=q(t.before,`assetDeltas[${r}].before`),o=q(t.after,`assetDeltas[${r}].after`),i=(BigInt(o)-BigInt(n)).toString(),s;try{s=t.delta==null?i:BigInt(t.delta).toString()}catch{throw new TypeError(`sign-time review: assetDeltas[${r}].delta must be an integer`)}if(s!==i)throw new TypeError(`sign-time review: assetDeltas[${r}].delta does not match before/after`);return{...t,asset:jt(String(we(t.asset??t.token,`assetDeltas[${r}].asset`)),`assetDeltas[${r}].asset`),before:n,after:o,delta:s}})}function Hi(e){if(e==null)return[];if(!Array.isArray(e))throw new TypeError("sign-time review: approvalDeltas must be an array");return e.map((t,r)=>{X(t,`approvalDeltas[${r}]`);let n=q(t.amount??t.after,`approvalDeltas[${r}].amount`);if(t.revokeLike!=null&&typeof t.revokeLike!="boolean")throw new TypeError(`sign-time review: approvalDeltas[${r}].revokeLike must be boolean`);return{token:ne(t.token,`approvalDeltas[${r}].token`),spender:ne(t.spender,`approvalDeltas[${r}].spender`),owner:ne(t.owner,`approvalDeltas[${r}].owner`),amount:n,revokeLike:t.revokeLike??BigInt(n)===0n}})}function an(e={}){X(e,"input");let t=Dt(e),r=t.tx==null?t:X(t.tx,"tx"),n=q(t.chainId??r.chainId,"chainId",{positive:!0}),o=ne(t.account??t.from??r.from,"account/from"),i=ne(t.destination??t.to??r.to,"destination/to"),s=String(we(t.prepareHash,"prepareHash")).toLowerCase();if(!Li.test(s))throw new TypeError("sign-time review: prepareHash must be a 32-byte hash");let u=t.route??t.venue;if(u==null)throw new TypeError("sign-time review: route/venue required");let a=t.decodedCalldata??t.decodedAction;if(a==null)throw new TypeError("sign-time review: decodedCalldata or decodedAction required");let f=String(we(t.calldata??t.data??r.data,"calldata/data")).toLowerCase();if(!$i.test(f))throw new TypeError("sign-time review: calldata/data must be even-length hex");let c=t.policyChecks!==void 0&&t.policyChecks!==null,d=Fi(c?t.policyChecks:[]),m=qi(t.simulation),p=Mi(t.assetDeltas),h=Hi(t.approvalDeltas),w=t.allowlistHits??[];if(!Array.isArray(w))throw new TypeError("sign-time review: allowlistHits must be an array");let S=m?.willRevert===!0||["failed","error"].includes(m?.status),T=m!=null&&m.willRevert===!1&&["ok","success"].includes(m.status),P=S||d.failed>0?"BLOCKED":T&&c&&d.checks.length>0&&p!=null?"READY":"UNKNOWN",b=typeof a=="string"?a:a.method??a.action??a.type??"transaction",N=`${P}: review ${b} on chain ${n}; policy ${d.passed} passed, ${d.failed} failed; ${p?.length??0} asset delta${p?.length===1?"":"s"}; local signature required`,M={reviewVersion:1,status:P,requiresLocalSignature:!0,signingLocal:!0,custody:"none",execution:"review-only",chainId:n,account:o,from:o,route:u,venue:t.venue??(typeof u=="string"?u:u.venue??u.provider??null),destination:i,to:i,...t.spender==null?{}:{spender:ne(t.spender,"spender")},prepareHash:s,...t.decodedCalldata!==void 0?{decodedCalldata:t.decodedCalldata}:{decodedAction:t.decodedAction},calldata:f,data:f,selector:f.length>=10?f.slice(0,10):null,value:q(t.value??r.value??0,"value"),...(t.gasEstimate??r.gasEstimate)==null?{}:{gasEstimate:q(t.gasEstimate??r.gasEstimate,"gasEstimate")},...(t.gasLimit??r.gasLimit)==null?{}:{gasLimit:q(t.gasLimit??r.gasLimit,"gasLimit")},simulation:m,policyChecks:d,allowlistHits:w,assetDeltas:p,approvalDeltas:h,summary:N};return sn(M)}var Ci,Ri,$i,Li,Pi,Bi,Di,me,Ft=l(()=>{Ci=1,Ri=/^0x[0-9a-f]{40}$/,$i=/^0x(?:[0-9a-f]{2})*$/,Li=/^(?:0x)?[0-9a-f]{64}$/,Pi=/(privatekey|privkey|secretkey|seedphrase|mnemonic|passphrase|password|keystore|keymaterial|wif|xprv|xpriv|bearer|authorization|signature|apikey|credential)/i,Bi=/\b(?:[5KL][1-9A-HJ-NP-Za-km-z]{50,51}|xprv[0-9A-Za-z]{50,})\b/,Di=new Set([12,15,18,21,24]),me=class extends Error{constructor(t){super(`sign-time review refused: secret-bearing field at ${t}`),this.name="SignTimeReviewSecretError",this.code="SIGN_TIME_REVIEW_SECRET"}}});import{readFileSync as Kf,readdirSync as Gf,existsSync as zi}from"node:fs";import{dirname as Ui,join as he}from"node:path";import{fileURLToPath as Wi}from"node:url";function Vi(){let e=[he(ge,"descriptors"),he(ge,"clear-sign","descriptors"),he(ge,"..","clear-sign","descriptors"),he(ge,"..","..","clear-sign","descriptors"),he(ge,"..","..","..","clear-sign","descriptors")];for(let t of e)if(zi(t))return t;return e[0]}var ge,Qf,ep,ln=l(()=>{K();ge=Ui(Wi(import.meta.url));Qf=Vi(),ep=(1n<<256n)-1n});var un=l(()=>{Ft();K();ln()});import{Wallet as cp}from"ethers";import{base58 as up}from"@scure/base";import{ed25519 as fp}from"@noble/curves/ed25519.js";import{NETWORK as mp,TEST_NETWORK as wp,WIF as hp,p2wpkh as gp}from"@scure/btc-signer";import{pubECDSA as bp}from"@scure/btc-signer/utils.js";var dn=l(()=>{});var Sp,Ap,vp,kp,Ip,Op,Tp,Np,_p,Cp,Rp,fn=l(()=>{Bt();Sp=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Ap=Object.freeze(["binance","bybit","okx","coinbase"]),vp=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),kp=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Ip=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),Op=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),Tp=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),Np=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),_p=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),Cp=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Rp=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"})});var pn=l(()=>{re()});var Gi,mn,ze=l(()=>{Gi=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),mn=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"})});var wn=l(()=>{ze()});var Hp,hn=l(()=>{ze();wn();Hp=256*1024});var gn=l(()=>{ze();hn()});var yn=l(()=>{re()});import C from"node:path";import Yi from"node:os";import{createHash as Xi,randomBytes as Pm}from"node:crypto";import{Interface as qt,keccak256 as Dm}from"ethers";import{Transaction as Fm}from"@scure/btc-signer";import{ed25519 as Mm}from"@noble/curves/ed25519.js";function bn(e){let t=process.env.ORACLE_SIGNER_STATE_DIR||C.join(process.env.XDG_STATE_HOME||C.join(Yi.homedir(),".local","state"),"oracle"),r=Xi("sha256").update(C.resolve(e)).digest("hex").slice(0,16);return{vault:C.join(e,"vault.json"),policy:C.join(e,"signer-policy.json"),policyKey:C.join(e,"policy-integrity-key"),policyAnchor:C.join(t,`signer-policy-${r}.high-water`),ledger:C.join(e,"signer-ledger.json"),ledgerAnchor:C.join(t,`signer-ledger-${r}.high-water`),cexOrders:C.join(e,"cex-orders.json"),cexOrdersAnchor:C.join(t,`cex-orders-${r}.high-water`),token:C.join(e,"signer-token"),lock:C.join(t,`signer-${r}.lock`),workflowLedger:C.join(e,"workflow-events.jsonl")}}var gw,yw,bw,En=l(()=>{_r();Xr();Zr();je();re();Qr();Bt();on();K();un();De();_e();St();ht();yt();Be();xt();gt();Et();ot();it();bt();dn();fn();pn();gn();yn();gw=new qt(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),yw=new qt(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),bw=new qt(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"])});import Mt from"node:fs";import xn from"node:path";import{homedir as Zi}from"node:os";function Qi(){return process.env.ORACLE_CONFIG_DIR||xn.join(Zi(),".config","oracle")}function ye(){let e=bn(xn.join(Qi(),"signer")),t=Mt.existsSync(e.vault),r=Mt.existsSync(e.lock),n=t?r?"disarmed":"armed-owner-confirmed":"inert-no-key";return{vaultExists:t,policyConfigured:Mt.existsSync(e.policy),armed:t&&!r,disarmed:r,capabilities:{swap:n,bridge:n},autonomous:!1,note:"Keys stay on this machine. Exact confirmation is required before any broadcast."}}var _w,Ht=l(()=>{Qe();nr();En();re();_w=Object.freeze([{type:"function",function:{name:"vault_status",description:"Read local Oracle vault/signer readiness. Never returns key material.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_status",description:"Ping the loopback signer. Fails closed if it is not running.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_pending",description:"List pending local-signer artifacts. Read-only. Does not approve, sign, or broadcast.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_queue",description:"Queue a prepared unsigned artifact on the loopback signer. Does not broadcast.",parameters:{type:"object",properties:{artifact:{type:"object"}},required:["artifact"],additionalProperties:!1}}},{type:"function",function:{name:"signer_ack",description:"Execute one pending artifact through the armed local signer (same path as Telegram Allow). Fails if the signer is not running or disarmed. Never holds keys.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_deny",description:"Drop one pending local-signer artifact. Nothing signed.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_execute",description:"Broadcast one already-confirmed local artifact. Requires a one-use confirmationNonce from the local signer TTY confirm. Cannot mint confirmation itself.",parameters:{type:"object",properties:{artifact:{type:"object"},confirmationNonce:{type:"string",minLength:32,maxLength:128}},required:["artifact","confirmationNonce"],additionalProperties:!1}}},{type:"function",function:{name:"signer_disarm",description:"Global kill switch. Stops the local signer from broadcasting.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"receipt_report",description:"Receipt or it did not happen. Requires transactionHash/hash/txid.",parameters:{type:"object",properties:{receipt:{type:"object"},transactionHash:{type:"string"},hash:{type:"string"},txid:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"watch_create",description:"Create an alert-only watch. Never execute.",parameters:{type:"object",properties:{chain:{type:"string"},token:{type:"string"},condition:{type:"string"},note:{type:"string"}},required:["chain","token","condition"],additionalProperties:!1}}},{type:"function",function:{name:"watch_list",description:"List local alert-only watches.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"portfolio_snapshot",description:"How to read the one portfolio snapshot. knownUsd is incomplete if a provider is missing.",parameters:{type:"object",properties:{},additionalProperties:!1}}}])});import Ue from"node:fs";import es from"node:os";import ie from"node:path";import{fileURLToPath as ts}from"node:url";function Sn(){return process.env.ORACLE_FAKE_HOME||es.homedir()}function ns(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function We(){return ns()?process.env.ORACLE_CONFIG_DIR||ie.join(Sn(),".config","oracle"):ie.join(Sn(),".config","oracle")}function os(){return ie.join(We(),"desk.json")}function is(){return ie.join(We(),"env")}function oe({force:e=!1}={}){if(oe._done&&!e)return oe._result||null;oe._done=!0;let t={},r=(o,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=s,t[o]=s))};try{let o=is();if(Ue.existsSync(o))for(let i of Ue.readFileSync(o,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let u=s[2];(u.startsWith('"')&&u.endsWith('"')||u.startsWith("'")&&u.endsWith("'"))&&(u=u.slice(1,-1)),r(s[1],u)}}catch{}try{let o=os();if(Ue.existsSync(o)){let i=JSON.parse(Ue.readFileSync(o,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),oe._result=Object.keys(t).length?t:null,oe._result}var rs,Bw,An=l(()=>{rs=ie.dirname(ts(import.meta.url)),Bw=ie.resolve(rs,"../..");try{oe()}catch{}});function Ve(e){return String(e||"").trim()||void 0}function as(e,{required:t=!1}={}){let r=Ve(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!ss.has(r))throw new Error(`unsupported provider: ${r}`);return r}function cs(e,{required:t=!1}={}){let r=Ve(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function ls(e){let t=Ve(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function vn({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=as(e),i=cs(t,{required:n});if(o==="custom")return{provider:o,...i?{model:i}:{},baseUrl:ls(r)};if(Ve(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...i?{model:i}:{}}}var ss,kn=l(()=>{ss=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"])});import In from"node:fs";import us from"node:path";function fs(){return us.join(We(),"model.json")}function se(e){return String(e||"").trim()||void 0}function ps(e={}){let t=se(e.backend)?.toLowerCase()||"auto",r=vn({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=se(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),i=se(e.reasoningEffort),s=se(e.computeHost||e.remoteHost),u=se(e.computeUser||e.remoteUser),a=se(e.computePath||e.remotePath);if(!ds.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...i?{reasoningEffort:i}:{},...s?{computeHost:s}:{},...u?{computeUser:u}:{},...a?{computePath:a}:{}}}function On(){let e=fs();if(!In.existsSync(e))return null;try{return ps(JSON.parse(In.readFileSync(e,"utf8")))}catch{return null}}var ds,Tn=l(()=>{An();kn();ds=new Set(["auto","standalone","hermes","remote","arch"])});import{Interface as ms,getAddress as ws}from"ethers";function zt(e,t){try{return ws(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function hs(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function Ut(e){return e==null?null:Number.parseInt(String(e),16)}function ys(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=rr(e,r);return n||gs[Number(e)]||null}function Es(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!bs.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}function xs(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Ss(e){if(e?.error)throw xs(e.error);return e?.result}function As(e,t,r){return`${e}
+var Qn=Object.defineProperty;var u=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var Oe=(e,t)=>{for(var r in t)Qn(e,r,{get:t[r],enumerable:!0})};function rr(e){return eo.get(Number(e))||null}function nr(e,t=process.env){let r=rr(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}var Te,eo,Qe=u(()=>{Te={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},eo=new Map(Object.values(Te).map(e=>[e.chainId,e]))});function le(e){let t=e?.transactionHash||e?.hash||e?.txid||null;return t?{happened:!0,hash:String(t),note:null}:{happened:!1,hash:null,note:"no transaction hash \u2014 the action did not succeed"}}var et=u(()=>{});var or=u(()=>{});var ir=u(()=>{});var de=u(()=>{});var ee=u(()=>{});var Ce=u(()=>{de();ee()});import{isAddress as sa}from"ethers";var rt=u(()=>{Ce();de();ee()});import{Interface as no,isAddress as fa}from"ethers";var ha,sr=u(()=>{rt();de();ee();ha=new no(["function approve(address spender,uint256 amount) returns (bool)"])});import{Interface as oo,isAddress as ba}from"ethers";var Aa,va,ar=u(()=>{rt();de();ee();Aa=new oo(["function approve(address spender,uint256 amount) returns (bool)"]),va=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"})});var K=u(()=>{});import{Interface as io,MaxUint256 as _a,isAddress as Ra,keccak256 as La,toUtf8Bytes as $a}from"ethers";var qa,J=u(()=>{ir();sr();ar();K();ee();qa=new io(["function approve(address spender,uint256 amount) returns (bool)"])});var Ha,za,_e=u(()=>{Ha=300*1e3,za=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});var Re=u(()=>{J()});import{Address as Ja,NETWORK as Ga,OutScript as Ya,RawTx as Xa,SigHash as Za,TEST_NETWORK as Qa,Transaction as ec}from"@scure/btc-signer";var it=u(()=>{});import{createHash as so}from"node:crypto";import{base58 as oc}from"@scure/base";import{getCompiledTransactionMessageDecoder as sc}from"@solana/transaction-messages";var cr,ac,st=u(()=>{cr=e=>so("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),ac=new Map([[cr("route"),{name:"route",prefixBytes:0}],[cr("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]])});import G from"node:net";import ao from"node:dns";function Le(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let d=c.split(":"),m=d.at(-1);if(m?.includes(".")){let p=m.split(".").map(Number);if(p.length!==4||p.some(h=>!Number.isInteger(h)||h<0||h>255))return null;d.splice(d.length-1,1,(p[0]<<8|p[1]).toString(16),(p[2]<<8|p[3]).toString(16))}return d.some(p=>!/^[0-9a-f]{1,4}$/.test(p))?null:d.map(p=>Number.parseInt(p,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let l=t.includes("::"),a=8-i.length-s.length;if(!l&&a!==0||l&&a<1)return null;let f=[...i,...Array(Math.max(0,a)).fill(0),...s];return f.length!==8?null:Uint8Array.from(f.flatMap(c=>[c>>8,c&255]))}function at(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function ct(e){if(G.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(G.isIPv6(e)){let t=Le(e);if(!t)return!1;let r=Le("::ffff:0:0");return at(t,r,96)?ct([...t.slice(12)].join(".")):at(t,Le("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>at(t,Le(o),i)):!1}return!1}function uo(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(co.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=G.isIP(r);return n!==0&&!ct(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function ut(e,{lookupFn:t=ao.promises.lookup}={}){let r=uo(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:G.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!ct(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function lt({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let d=await t();r=d.Agent,n=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(m=>typeof m=="string"?{address:m}:m).filter(m=>m&&m.address).map(m=>({address:m.address,family:m.family||(G.isIPv6(m.address)?6:4)})),l=(d,m,p)=>{i.set(o(d),s(typeof m=="string"?[{address:m,family:p}]:m))},a=d=>{let m=o(d);if(G.isIP(m))return[{address:m,family:G.isIPv6(m)?6:4}];let p=i.get(m);if(!p||!p.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return p},f=new r({connect:{lookup(d,m,p){let h;try{h=a(d)}catch(w){return p(w)}return m?.all?p(null,h):p(null,h[0].address,h[0].family)}}}),c=lo((d,m={})=>n(d,{...m,dispatcher:f}),l);return{dispatcher:f,fetch:c,pin:l,resolve:a,async close(){try{await f.destroy()}catch{}}}}function lo(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[dt]=Object.freeze({pin:t}),e}function ft(e){return typeof e=="function"&&typeof e[dt]?.pin=="function"}function ur(e,t,r){if(!ft(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[dt].pin(t,r)}var co,dt,lr=u(()=>{co=new Set(["localhost","metadata.google.internal","metadata.goog"]);dt=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as fo}from"node:crypto";import{types as j}from"node:util";function v(e){return z(`HTTP JSON body refused: ${e}`)}function xo(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof j[t]=="function"&&j[t](e))}function So(e){let t=[],r=0,n=0,o=0,i=0,s=new WeakSet,l=c=>{if(r+=Buffer.byteLength(c,"utf8"),r>D.bytes)throw v("serialized byte limit exceeded");t.push(c)},a=c=>{if(Buffer.byteLength(c,"utf8")>D.bytes)throw v("serialized byte limit exceeded");return JSON.stringify(c)},f=(c,d)=>{if(n+=1,n>D.nodes)throw v("node limit exceeded");if(d>D.depth)throw v("depth limit exceeded");if(c===null){l("null");return}if(typeof c=="string"){l(a(c));return}if(typeof c=="boolean"){l(c?"true":"false");return}if(typeof c=="number"){if(!Number.isFinite(c))throw v("non-finite number");l(Object.is(c,-0)?"0":String(c));return}if(typeof c!="object")throw v("unsupported non-JSON value");if(j.isProxy(c))throw v("proxy value");if(xo(c))throw v("unsupported exotic object");if(s.has(c))throw v("cyclic value");s.add(c);try{if(Object.getOwnPropertySymbols(c).length>0)throw v("symbol-keyed fields are unsupported");if(Array.isArray(c)){let h=Object.getPrototypeOf(c),w=0;for(;h!==null;){if(j.isProxy(h))throw v("proxy array prototype");if(w+=1,w>D.depth)throw v("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(c.length>D.arrayLength)throw v("array length limit exceeded");for(let T=0;T<c.length;T+=1){let P=Object.getOwnPropertyDescriptor(c,String(T));if(!P||!Object.hasOwn(P,"value")||P.enumerable!==!0)throw v("array entries must be dense enumerable own data")}let S=0;for(let T in c){if(i+=1,i>D.fields)throw v("enumeration limit exceeded");if(Object.hasOwn(c,T)&&(S+=1,S>c.length))throw v("named array fields are unsupported")}if(S!==c.length)throw v("array entries must be dense enumerable own data");l("[");for(let T=0;T<c.length;T+=1)T&&l(","),f(Object.getOwnPropertyDescriptor(c,String(T)).value,d+1);l("]");return}let m=Object.getPrototypeOf(c);if(m!==Object.prototype&&m!==null)throw v("non-plain object");let p=[];for(let h in c){if(i+=1,i>D.fields)throw v("enumeration limit exceeded");if(!Object.hasOwn(c,h))continue;if(o+=1,o>D.fields)throw v("field limit exceeded");let w=Object.getOwnPropertyDescriptor(c,h);if(!w||!Object.hasOwn(w,"value")||w.enumerable!==!0)throw v("object fields must be enumerable own data");p.push([h,w.value])}l("{");for(let h=0;h<p.length;h+=1)h&&l(","),l(a(p[h][0])),l(":"),f(p[h][1],d+1);l("}")}finally{s.delete(c)}};return f(e,0),t.join("")}function Ao(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(j.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let i=Object.getOwnPropertyDescriptor(e,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[n]=String(s)}return t}function vo(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Io(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function ko(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function $e(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=mr.get(e);return t||(t=wr,wr+=1,mr.set(e,t)),`reference:${t}`}function hr(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Oo.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function gr(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(hr);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return hr(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&To.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function No(e,t,r,n={},o=null){let i=fo("sha256"),s=(a,f)=>{let c=String(f);i.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),i.update("=").update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c).update(`
+`)};s("method",e),s("url",t),Object.keys(r||{}).map((a,f)=>({name:a.toLowerCase(),order:f,value:String(r[a])})).sort((a,f)=>a.name.localeCompare(f.name)||a.order-f.order).forEach((a,f)=>{s(`header-name-${f}`,a.name),s(`header-value-${f}`,a.value)}),s("body",o??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${a}`,n[a]??"-");return i.digest("hex")}function Co(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,fr):Math.min(250*2**e,fr)+Math.floor(Math.random()*100)}function z(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function mt(e,t,r){return z(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function Y(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Ro(e){return e?e.byteLength??e.length??0:0}async function Lo(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(Y(e),!n))throw mt(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),m=Buffer.byteLength(d,"utf8");if(m>t){if(!n)throw mt(r,`body ${m} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let l=[],a=0,f=!1;try{for(;;){let{value:d,done:m}=await s.read();if(m)break;if(d&&(l.push(Buffer.from(d)),a+=Ro(d),a>t)){f=!0;break}}}finally{if(f)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(f&&(typeof o=="function"&&o(),!n))throw mt(r,`streamed ${a} bytes`,t);let c=Buffer.concat(l);return(f?c.subarray(0,t):c).toString("utf8")}function $o(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Po(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:l,untrustedUrl:a=!1,maxResponseBytes:f=null,sameOriginRedirectsOnly:c=!1,importUndici:d,validateResponse:m,signal:p,redirectPolicy:h="follow",maxRedirects:w=Pe}){let S=new AbortController,T=setTimeout(()=>S.abort(),i),P=p?pr?pr([p,S.signal]):p:S.signal,b=null,N=t,M=s?{lookupFn:s}:{};if(a&&!l&&!ft(N))throw z(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let ae=async(y,{status:k=null}={})=>{let O=await ut(y,M);if(!O.ok)throw z(k==null?`HTTP refused ${y}: ${O.error}`:`HTTP redirect to ${y} ${O.error}`,k==null?{}:{status:k});let H=new URL(y).hostname;if(l){if(b&&(await b.close(),b=null),!b)try{b=await lt({requireUndici:!0,...d?{importUndici:d}:{}})}catch(g){throw z(k==null?`HTTP refused ${y}: ${g?.message||g}`:`HTTP redirect to ${y} refused: ${g?.message||g}`,k==null?{}:{status:k})}b.pin(H,O.addresses),N=b.fetch}else ur(N,H,O.addresses);return O};try{let y=String(e),k=Object.assign(Object.create(null),n||{});a&&await ae(y);for(let O=0;O<=w;O+=1){let H=Object.assign(Object.create(null),{method:r,headers:k,body:o,signal:P,redirect:"manual",dispatcher:void 0}),g=await N(y,H);if((h==="error"||w===0)&&g.status>=300&&g.status<400)throw Y(g),z(`HTTP ${g.status} ${r} redirect refused`,{status:g.status,redirectRefused:!0});if(Eo.has(g.status)){let L=c===!0&&r==="POST"&&[307,308].includes(g.status)&&gr(r,o);if(r!=="GET"&&r!=="HEAD"&&!L){Y(g);let I=new Error(`HTTP ${g.status} ${r} ${y} redirected non-idempotent request`);throw I.status=g.status,I}if(O===w)throw Y(g),z(`HTTP ${g.status} ${r} redirect budget exhausted`,{status:g.status,redirectRefused:!0});let er=g.headers?.get?.("location"),B;try{B=Io(er,y)}catch(I){throw Y(g),I}let W=!ko(B,y);if(Y(g),W&&r==="POST"){let I=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw I.status=g.status,I}if(W&&c){let I=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw I.status=g.status,I.retryable=!1,I}if(W&&(k=vo(k)),a)await ae(B,{status:g.status});else if(W){let I=await ut(B,M);if(!I.ok){let A=new Error(`HTTP redirect from ${y} ${I.error}`);throw A.status=g.status,A.retryable=!1,A}l&&I.addresses?.length&&(b||(b=await lt(d?{importUndici:d}:{})),b&&(b.pin(new URL(B).hostname,I.addresses),N=b.fetch))}y=B;continue}if(typeof m=="function")try{await m(g,{url:y})}catch(L){throw Y(g),z(L?.message||String(L))}let R=await Lo(g,f,{url:y,onOversize:()=>S.abort()}),ce=$o(R);if(!g.ok){let L=new Error(`HTTP ${g.status} ${r} ${y}`);throw L.status=g.status,L.retryAfter=g.headers?.get?.("retry-after")??null,L.body=ce??R.slice(0,300),L}return ce??R}throw new Error(`HTTP redirect loop for ${e}`)}catch(y){if(S.signal.aborted&&!wt(p)){let k=y&&(typeof y=="object"||typeof y=="function")&&!j.isProxy(y)?y:null,O=k?Object.getOwnPropertyDescriptor(k,"oversize"):null;if(!(O&&Object.hasOwn(O,"value")&&O.value===!0))try{if(!k)throw new TypeError("unsafe rejection");Object.defineProperties(k,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let g=new Error("HTTP request timed out");throw Object.defineProperties(g,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),g}}throw y}finally{clearTimeout(T),b&&await b.close()}}async function Be(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&j.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let A of Object.getOwnPropertyNames(t)){let E=Object.getOwnPropertyDescriptor(t,A);if(!(A==="toJSON"&&E&&Object.hasOwn(E,"value")&&E.value===void 0)){if(!r.has(A))throw new TypeError("HTTP options contain unknown fields");if(!E||!E.enumerable||!Object.hasOwn(E,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=A=>{if(t==null||!Object.hasOwn(t,A))return;let E=Object.getOwnPropertyDescriptor(t,A);if(!E||!Object.hasOwn(E,"value"))throw new TypeError("HTTP options must contain own data properties");return E.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=n("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let l=n("redirectPolicy");if(l!==void 0&&l!=="follow"&&l!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>Pe))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${Pe}`);if(l==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let f=l??"follow",c=f==="error"?0:a??Pe;for(let A of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let E=n(A);if(E!==void 0&&typeof E!="boolean")throw new TypeError(`HTTP ${A} must be boolean`)}let d=n("maxResponseBytes");if(d!==void 0&&(!Number.isInteger(d)||d<1||d>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let m=n("signal");if(m!==void 0){if(j.isProxy(m)||!(m instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{wt(m)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let A of["importUndici","lookupFn","validateResponse"]){let E=n(A);if(E!==void 0&&typeof E!="function")throw new TypeError(`HTTP ${A} must be a function`)}let p=n("fetchImpl"),h=p||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let w=i??12e3,S=(o||"GET").toUpperCase(),T=n("headers"),P=Ao(T),b=Object.assign(Object.create(null),P);Object.keys(b).some(A=>A.toLowerCase()==="accept")||(b.Accept="application/json");let N=n("body");N!=null&&typeof N!="string"&&(Object.keys(b).find(E=>E.toLowerCase()==="content-type")||(b["Content-Type"]="application/json"),N=So(N));let M=s??mo,ae=n("lookupFn"),y=!p,k=n("untrustedUrl")===!0,O=n("sameOriginRedirectsOnly")===!0,H=n("importUndici"),g=n("validateResponse"),R=m,ce=d??null,L=async()=>{let A;for(let E=0;E<=M;E++){R&&go.call(R);try{return await Po(e,{fetchImpl:h,method:S,headers:b,body:N,timeoutMs:w,lookupFn:ae,realFetch:y,untrustedUrl:k,maxResponseBytes:ce,sameOriginRedirectsOnly:O,importUndici:H,validateResponse:g,signal:R,redirectPolicy:f,maxRedirects:c})}catch(V){A=V;let Q=Ze=>{if(!V||typeof V!="object"&&typeof V!="function"||j.isProxy(V))return;let ue=Object.getOwnPropertyDescriptor(V,Ze);return ue&&Object.hasOwn(ue,"value")?ue.value:void 0},Xe=Q("status"),Gn=Q("oracleTimeout")===!0||Q("name")==="AbortError"||Q("name")==="TimeoutError"||wt(R),Yn=new Set([408,425,429]),Xn=Q("retryable")===!1?!1:Xe!=null?Yn.has(Xe)||po.has(Xe)&&dr.has(S):!Gn&&dr.has(S);if(E===M||!Xn)throw V;let tr=Co(E,Q("retryAfter"));R?await new Promise((Ze,ue)=>{let Zn=setTimeout(Ze,tr);yo.call(R,"abort",()=>{clearTimeout(Zn),ue(bo(R)||new DOMException("Aborted","AbortError"))},{once:!0})}):await _o(tr)}}throw A};if(!(n("dedupe")!==!1&&!R&&gr(S,N)))return L();let B=No(S,e,b,{untrustedUrl:k,maxResponseBytes:ce,sameOriginRedirectsOnly:O,redirectPolicy:f,maxRedirects:c,timeoutMs:w,retries:M,fetchImpl:$e(h),realFetch:y,lookupFn:$e(ae),importUndici:$e(H),validateResponse:$e(g)},N),W=pt.get(B);if(W)return W;let I=L().finally(()=>pt.delete(B));return pt.set(B,I),I}var po,dr,mo,fr,wo,ho,go,yo,pr,wt,bo,Eo,Pe,wc,D,pt,mr,wr,Oo,To,_o,De=u(()=>{lr();po=new Set([408,425,429,500,502,503,504]),dr=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),mo=2,fr=4e3,wo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,ho=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,go=AbortSignal.prototype.throwIfAborted,yo=EventTarget.prototype.addEventListener,pr=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,wt=e=>e?wo.call(e):!1,bo=e=>e?ho.call(e):void 0,Eo=new Set([301,302,303,307,308]),Pe=3,wc=64*1024,D=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});pt=new Map,mr=new WeakMap,wr=1;Oo=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),To=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);_o=e=>new Promise(t=>setTimeout(t,e))});var yr=u(()=>{});var br=u(()=>{De();yr()});var Ic,Er=u(()=>{br();Ic=Object.freeze({tradexyz:"xyz",ventuals:"vntl",hypernova:"hyna",paradex:"para"})});var Cc,_c,gt=u(()=>{K();Er();Cc=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),_c=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"})});var $c,yt=u(()=>{K();$c="0x"+"00".repeat(32)});var Bo,Fc,bt=u(()=>{yt();K();Bo=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Fc=Object.freeze(Bo.map(e=>e[0]))});var je=u(()=>{K()});import{TypedDataEncoder as Uc,getAddress as Wc,isAddress as Vc}from"ethers";var jo,Fo,vr=u(()=>{_e();jo=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Fo=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]})});var Gc,Ir=u(()=>{Gc=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"})});var kr=u(()=>{});import{TypedDataEncoder as nu,getAddress as ou,isAddress as iu}from"ethers";var qo,fu,Mo,pu,Or=u(()=>{De();Ce();Ir();kr();_e();qo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),fu=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),Mo=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),pu=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]})});import{TypedDataEncoder as hu,getAddress as gu}from"ethers";var Eu,Et=u(()=>{vr();Or();Eu=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"])});import{Interface as Nr}from"ethers";var Ko,Du,Jo,ju,Fu,qu,Mu,Go,Hu,Fe=u(()=>{J();Ce();_e();Re();it();st();gt();bt();je();Et();Ko=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]),Du=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),Jo=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),ju=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),Fu=new Nr(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),qu=new Nr(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Mu=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}}),Go=Object.freeze([...Ko]),Hu=Object.freeze({...Jo})});import{encode as Wu}from"@msgpack/msgpack";import{keccak256 as Ku,verifyTypedData as Ju}from"ethers";var Gu,Yu,xt=u(()=>{Gu=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Yu=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]})});var St=u(()=>{je()});import{ed25519 as ol}from"@noble/curves/ed25519.js";import{base58 as sl}from"@scure/base";import{RawTx as cl,SigHash as ul,Transaction as ll}from"@scure/btc-signer";import{Transaction as fl,keccak256 as pl,verifyTypedData as ml}from"ethers";var At=u(()=>{xt();St()});import{base58 as xl}from"@scure/base";var pe=u(()=>{Fe();Re();J();At()});var Cr=u(()=>{pe();Fe()});import{wordlists as Zo}from"ethers";function ri(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return ti.has(t.length)&&t.every(r=>Zo.en.getWordIndex(r)>=0)}function si(e){let t=_r(e);return ii.has(t)||oi.test(t)}function _r(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function ai(e){let t=_r(e);return[...Qo].some(r=>t.includes(r))}function ci(e,t,r){if(typeof t=="string"){if(ei.some(n=>n.test(t))||ri(t))throw new me(r);if(ni.test(t)&&!si(e))throw new me(r)}}function It(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return ci(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((o,i)=>It(o,`${t}[${i}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let n={};for(let o of Object.keys(e).sort()){let i=`${t}.${o}`;if(ai(o))throw new me(i);e[o]!==void 0&&(n[o]=It(e[o],i,o))}return n}function qe(e){return It(e)}var Qo,ei,ti,ni,oi,ii,me,we=u(()=>{Qo=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),ei=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],ti=new Set([12,15,18,21,24]);ni=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,oi=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,ii=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);me=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}}});import{closeSync as Bl,constants as ui,fchmodSync as Dl,fsyncSync as jl,lstatSync as Fl,mkdirSync as ql,openSync as Ml,readFileSync as Hl,renameSync as zl,rmSync as Ul,writeFileSync as Wl}from"node:fs";var Jl,Rr=u(()=>{we();pe();Jl=ui.O_NOFOLLOW??0});import{wordlists as Xl}from"ethers";var Lr,Ql,te=u(()=>{we();Lr=64*1024,Ql=32*1024});var fi,rd,nd,He=u(()=>{te();fi=["schemaVersion","buildVersion","recordType","execution","custody"],rd=[...fi,"recordHash"],nd=Object.freeze({signed:new Set(["workflow.signed","legacy.signed"]),submitted:new Set(["workflow.submitted","legacy.broadcast"]),finalized:new Set(["workflow.finalized"]),reorged:new Set(["workflow.reorged"]),orphaned:new Set(["workflow.orphaned"]),compensating:new Set(["workflow.compensating"]),compensated:new Set(["workflow.compensated"])})});var pi,Hr,cd,Ct=u(()=>{te();He();pi=Object.freeze(["draft","checked","approval","signed","submitted","finalized","reorged","orphaned","compensating","compensated","failed","cancelled"]),Hr=Object.freeze(["workflow.drafted","workflow.checked","workflow.approval_requested","workflow.approval_granted","workflow.signed","workflow.submitted","workflow.finalized","workflow.reorged","workflow.orphaned","workflow.compensating","workflow.compensated","workflow.failed","workflow.cancelled","workflow.annotated"]),cd=new Set(Hr)});var bi,zr=u(()=>{te();Ct();bi=64*1024*1024});var wd,hd,gd,Ur=u(()=>{wd=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),hd=Object.freeze(["read","simulate"]),gd=1440*60});function _t(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return Ei.test(t)||xi.includes(r)}function Si(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Vr.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Kr(e){let t;try{t=JSON.stringify(e)}catch(o){throw new F("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=Si(t);for(let{rule:o,re:i}of Wr)if(i.test(r))throw new F("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new F("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&_t(o))throw new F(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function U(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Vr.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of Wr)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new F(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&_t(o))throw new F(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");U(o,`${t}[key]`,r),U(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())U(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>U(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if(_t(o))throw new F(`${t}.${o}`,"forbidden-key-name");U(i,`${t}.${o}`,r,o)}return e}var F,Ei,xi,Wr,Vr,Rt=u(()=>{Ur();F=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},Ei=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,xi=Object.freeze(["privkey","wif","xprv","seed"]);Wr=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Vr=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"])});var Lt,Td,Jr=u(()=>{Rt();Lt=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),Td=Object.freeze(Object.fromEntries(Lt.map((e,t)=>[e,Object.freeze(t+1<Lt.length?[Lt[t+1]]:[])])))});var Ai,Gr=u(()=>{Jr();te();He();Ai=Object.freeze({intent:"draft",quote_comparison:"draft",simulation:"draft",prepared:"checked",approval:"approval",signed:"signed",broadcast:"submitted",settlement:"finalized",balance_delta:"compensated",position:"compensated"})});var Yr=u(()=>{te();He();Ct();zr();Gr()});var Ii,ki,Oi,pf,mf,wf,hf,gf,Ti,yf,Xr=u(()=>{Ii=Object.freeze(["owner","operator","agent","viewer"]),ki=Object.freeze(["tenant","config","policy","grant","workflow","trade","receipt","audit","telemetry","context","lifecycle"]),Oi=Object.freeze({read:"read",create:"create",update:"update",delete:"delete",manage:"manage",prepare:"prepare",cancel:"cancel",export:"export",approve:"approve"}),pf=Object.freeze(["owner"]),mf=Object.freeze({ALLOW_ROLE_PERMISSION:"allow.role_permission",DENY_MISSING_CONTEXT:"deny.missing_context",DENY_INVALID_CONTEXT:"deny.invalid_context",DENY_INVALID_REQUEST:"deny.invalid_request",DENY_UNKNOWN_RESOURCE:"deny.unknown_resource",DENY_UNKNOWN_ACTION:"deny.unknown_action",DENY_UNBOUND_OBJECT:"deny.unbound_object",DENY_TENANT_MISMATCH:"deny.tenant_mismatch",DENY_RESOURCE_MISMATCH:"deny.resource_mismatch",DENY_ROLE_PERMISSION:"deny.role_permission",DENY_POLICY_NOT_APPROVER:"deny.policy_not_approver"}),wf=new Set(Ii),hf=new Set(ki),gf=new Set(Object.values(Oi)),Ti=Object.freeze({owner:Object.freeze(["tenant:read","tenant:manage","config:read","config:manage","policy:read","policy:manage","grant:read","grant:create","grant:update","grant:delete","grant:manage","workflow:read","workflow:create","workflow:update","workflow:delete","workflow:cancel","workflow:approve","trade:read","trade:prepare","receipt:read","receipt:export","audit:read","audit:export","telemetry:read","telemetry:create","telemetry:export","context:read","context:create","context:update","context:delete","context:manage","context:export","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:delete","lifecycle:manage","lifecycle:approve","lifecycle:export"]),operator:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","workflow:cancel","trade:read","trade:prepare","receipt:read","audit:read","telemetry:read","telemetry:create","context:read","context:create","context:update","context:delete","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:manage"]),agent:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","trade:read","trade:prepare","receipt:read","telemetry:create","context:read","context:create","context:update","lifecycle:read"]),viewer:Object.freeze(["tenant:read","config:read","grant:read","workflow:read","trade:read","receipt:read","audit:read","telemetry:read","context:read","lifecycle:read"])}),yf=Object.freeze(Object.fromEntries(Object.entries(Ti).map(([e,t])=>[e,Object.freeze([...t])])))});var Ni,Ci,_i,Sf,Af,vf,If,kf,Of,$t=u(()=>{Xr();Ni=Object.freeze(["succeeded","denied","invalid","failed","cancelled","timed_out","unavailable","skipped"]),Ci=Object.freeze(["workflow","task","intent","plan","run","event","eval"]),_i=Object.freeze(["taskId","intentId","planId","runId","eventId"]),Sf=Object.freeze({maxAttributes:24,maxKeyLength:48,maxStringLength:256,maxArrayLength:8}),Af=new Set(Ni),vf=new Set(Ci),If=new Set(_i),kf=Object.freeze(["authorization","bearer","cookie","credential","password","passphrase","secret","token","privatekey","privkey","seed","mnemonic","keystore","signature","prompt","systemmessage","usermessage","assistantmessage","rawtransaction","signedtransaction","serializedtransaction","transactionbytes","calldata","callbytes","inputdata"]),Of=Object.freeze({taskId:"x-oracle-task-id",intentId:"x-oracle-intent-id",planId:"x-oracle-plan-id",runId:"x-oracle-run-id",eventId:"x-oracle-event-id"})});var Lf,Zr=u(()=>{Yr();$t();Lf=Object.freeze({"workflow.cancelled":"cancelled","workflow.failed":"failed"})});var Ff,Qr=u(()=>{$t();Ff=32*1024*1024});var Mf,Hf,zf,re=u(()=>{Mf=Object.freeze({N:1<<17,r:8,p:1}),Hf=256*1024*1024,zf=16*1024});var Wf,en=u(()=>{Wf=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}})});import{homedir as Pt}from"node:os";import{join as Bt}from"node:path";var tn,Ri,Gf,rn=u(()=>{tn=process.env.ORACLE_PUBLIC_DESKTOP==="1",Ri=tn?process.env.ORACLE_CONFIG_DIR||Bt(Pt(),".config","oracle"):Bt(Pt(),".config","oracle"),Gf=tn?Ri:Bt(Pt(),".config","mad-desk")});var ep,tp,rp,nn=u(()=>{rn();ep="0".repeat(64),tp=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"}),rp=Promise.resolve()});var Dt=u(()=>{nn();K();re();pe()});var sn=u(()=>{});var un={};Oe(un,{SIGN_TIME_REVIEW_VERSION:()=>Li,SignTimeReviewSecretError:()=>he,createSignTimeReview:()=>cn});function jt(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string"){let o=e.trim().split(/\s+/);if(ji.test(e)||Fi.has(o.length)&&o.every(i=>/^[a-z]+$/i.test(i)))throw new he(t);return e}if(typeof e=="bigint")return e.toString();if(typeof e=="number"){if(!Number.isSafeInteger(e))throw new TypeError(`sign-time review: safe integer required at ${t}`);return e}if(Array.isArray(e))return e.map((o,i)=>jt(o,`${t}[${i}]`,r));X(e,t);let n={};for(let o of Object.keys(e).sort()){let i=o.replace(/[^a-z0-9]/gi,"");if(Di.test(i))throw new he(`${t}.${o}`);e[o]!==void 0&&(n[o]=jt(e[o],`${t}.${o}`,o))}return n}function X(e,t){if(e==null||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`sign-time review: ${t} must be a plain object`);return e}function ge(e,t){if(e==null||e==="")throw new TypeError(`sign-time review: ${t} required`);return e}function ne(e,t){let r=String(ge(e,t)).toLowerCase();if(!$i.test(r))throw new TypeError(`sign-time review: ${t} must be an EVM address`);return r}function q(e,t,{positive:r=!1}={}){try{let n=BigInt(ge(e,t));if(n<0n||r&&n===0n)throw new Error;return n.toString()}catch{throw new TypeError(`sign-time review: ${t} must be an unsigned integer`)}}function Ft(e,t){if(typeof e!="string"||e.length===0||e.length>500||e!==e.trim())throw new TypeError(`sign-time review: ${t} must be non-empty text`);return e}function an(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))an(t);Object.freeze(e)}return e}function qi(e,t){if(typeof e=="boolean")return{passed:e,reason:e?"passed":"failed"};X(e,t);let r=e.passed??e.ok??e.allowed;if(typeof r!="boolean")throw new TypeError(`sign-time review: ${t} needs a boolean result`);let n=e.reason??e.message??e.name??(r?"passed":"failed");return{...e,passed:r,reason:Ft(String(n),`${t}.reason`)}}function Mi(e){if(!Array.isArray(e))throw new TypeError("sign-time review: policyChecks must be an array");let t=e.map((n,o)=>qi(n,`policyChecks[${o}]`)),r=t.filter(n=>!n.passed);return{checks:t,passed:t.length-r.length,failed:r.length,reasons:r.map(n=>n.reason)}}function Hi(e){if(e==null)return null;if(X(e,"simulation"),typeof e.status!="string"||!["ok","success","failed","error","unavailable","unknown"].includes(e.status))throw new TypeError("sign-time review: simulation.status is invalid");if(e.willRevert!==!0&&e.willRevert!==!1&&e.willRevert!==null)throw new TypeError("sign-time review: simulation.willRevert must be boolean or null");let t={status:e.status,willRevert:e.willRevert??null,summary:Ft(String(e.summary??"simulation result recorded"),"simulation.summary")};return e.gasEstimate!=null&&(t.gasEstimate=q(e.gasEstimate,"simulation.gasEstimate")),e.gasLimit!=null&&(t.gasLimit=q(e.gasLimit,"simulation.gasLimit")),t}function zi(e){if(e==null)return null;if(!Array.isArray(e)||e.length===0)throw new TypeError("sign-time review: assetDeltas must be a non-empty array");return e.map((t,r)=>{X(t,`assetDeltas[${r}]`);let n=q(t.before,`assetDeltas[${r}].before`),o=q(t.after,`assetDeltas[${r}].after`),i=(BigInt(o)-BigInt(n)).toString(),s;try{s=t.delta==null?i:BigInt(t.delta).toString()}catch{throw new TypeError(`sign-time review: assetDeltas[${r}].delta must be an integer`)}if(s!==i)throw new TypeError(`sign-time review: assetDeltas[${r}].delta does not match before/after`);return{...t,asset:Ft(String(ge(t.asset??t.token,`assetDeltas[${r}].asset`)),`assetDeltas[${r}].asset`),before:n,after:o,delta:s}})}function Ui(e){if(e==null)return[];if(!Array.isArray(e))throw new TypeError("sign-time review: approvalDeltas must be an array");return e.map((t,r)=>{X(t,`approvalDeltas[${r}]`);let n=q(t.amount??t.after,`approvalDeltas[${r}].amount`);if(t.revokeLike!=null&&typeof t.revokeLike!="boolean")throw new TypeError(`sign-time review: approvalDeltas[${r}].revokeLike must be boolean`);return{token:ne(t.token,`approvalDeltas[${r}].token`),spender:ne(t.spender,`approvalDeltas[${r}].spender`),owner:ne(t.owner,`approvalDeltas[${r}].owner`),amount:n,revokeLike:t.revokeLike??BigInt(n)===0n}})}function cn(e={}){X(e,"input");let t=jt(e),r=t.tx==null?t:X(t.tx,"tx"),n=q(t.chainId??r.chainId,"chainId",{positive:!0}),o=ne(t.account??t.from??r.from,"account/from"),i=ne(t.destination??t.to??r.to,"destination/to"),s=String(ge(t.prepareHash,"prepareHash")).toLowerCase();if(!Bi.test(s))throw new TypeError("sign-time review: prepareHash must be a 32-byte hash");let l=t.route??t.venue;if(l==null)throw new TypeError("sign-time review: route/venue required");let a=t.decodedCalldata??t.decodedAction;if(a==null)throw new TypeError("sign-time review: decodedCalldata or decodedAction required");let f=String(ge(t.calldata??t.data??r.data,"calldata/data")).toLowerCase();if(!Pi.test(f))throw new TypeError("sign-time review: calldata/data must be even-length hex");let c=t.policyChecks!==void 0&&t.policyChecks!==null,d=Mi(c?t.policyChecks:[]),m=Hi(t.simulation),p=zi(t.assetDeltas),h=Ui(t.approvalDeltas),w=t.allowlistHits??[];if(!Array.isArray(w))throw new TypeError("sign-time review: allowlistHits must be an array");let S=m?.willRevert===!0||["failed","error"].includes(m?.status),T=m!=null&&m.willRevert===!1&&["ok","success"].includes(m.status),P=S||d.failed>0?"BLOCKED":T&&c&&d.checks.length>0&&p!=null?"READY":"UNKNOWN",b=typeof a=="string"?a:a.method??a.action??a.type??"transaction",N=`${P}: review ${b} on chain ${n}; policy ${d.passed} passed, ${d.failed} failed; ${p?.length??0} asset delta${p?.length===1?"":"s"}; local signature required`,M={reviewVersion:1,status:P,requiresLocalSignature:!0,signingLocal:!0,custody:"none",execution:"review-only",chainId:n,account:o,from:o,route:l,venue:t.venue??(typeof l=="string"?l:l.venue??l.provider??null),destination:i,to:i,...t.spender==null?{}:{spender:ne(t.spender,"spender")},prepareHash:s,...t.decodedCalldata!==void 0?{decodedCalldata:t.decodedCalldata}:{decodedAction:t.decodedAction},calldata:f,data:f,selector:f.length>=10?f.slice(0,10):null,value:q(t.value??r.value??0,"value"),...(t.gasEstimate??r.gasEstimate)==null?{}:{gasEstimate:q(t.gasEstimate??r.gasEstimate,"gasEstimate")},...(t.gasLimit??r.gasLimit)==null?{}:{gasLimit:q(t.gasLimit??r.gasLimit,"gasLimit")},simulation:m,policyChecks:d,allowlistHits:w,assetDeltas:p,approvalDeltas:h,summary:N};return an(M)}var Li,$i,Pi,Bi,Di,ji,Fi,he,qt=u(()=>{Li=1,$i=/^0x[0-9a-f]{40}$/,Pi=/^0x(?:[0-9a-f]{2})*$/,Bi=/^(?:0x)?[0-9a-f]{64}$/,Di=/(privatekey|privkey|secretkey|seedphrase|mnemonic|passphrase|password|keystore|keymaterial|wif|xprv|xpriv|bearer|authorization|signature|apikey|credential)/i,ji=/\b(?:[5KL][1-9A-HJ-NP-Za-km-z]{50,51}|xprv[0-9A-Za-z]{50,})\b/,Fi=new Set([12,15,18,21,24]),he=class extends Error{constructor(t){super(`sign-time review refused: secret-bearing field at ${t}`),this.name="SignTimeReviewSecretError",this.code="SIGN_TIME_REVIEW_SECRET"}}});import{readFileSync as fp,readdirSync as pp,existsSync as Wi}from"node:fs";import{dirname as Vi,join as ye}from"node:path";import{fileURLToPath as Ki}from"node:url";function Ji(){let e=[ye(be,"descriptors"),ye(be,"clear-sign","descriptors"),ye(be,"..","clear-sign","descriptors"),ye(be,"..","..","clear-sign","descriptors"),ye(be,"..","..","..","clear-sign","descriptors")];for(let t of e)if(Wi(t))return t;return e[0]}var be,gp,yp,ln=u(()=>{J();be=Vi(Ki(import.meta.url));gp=Ji(),yp=(1n<<256n)-1n});var dn=u(()=>{qt();J();ln()});import{Wallet as kp}from"ethers";import{base58 as Tp}from"@scure/base";import{ed25519 as Cp}from"@noble/curves/ed25519.js";import{NETWORK as Rp,TEST_NETWORK as Lp,WIF as $p,p2wpkh as Pp}from"@scure/btc-signer";import{pubECDSA as Dp}from"@scure/btc-signer/utils.js";var fn=u(()=>{});var qp,Mp,Hp,zp,Up,Wp,Vp,Kp,Jp,Gp,Yp,pn=u(()=>{Dt();qp=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Mp=Object.freeze(["binance","bybit","okx","coinbase"]),Hp=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),zp=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Up=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),Wp=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),Vp=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),Kp=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),Jp=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),Gp=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Yp=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"})});var mn=u(()=>{re()});var Xi,wn,Ue=u(()=>{Xi=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),wn=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"})});var hn=u(()=>{Ue()});var sm,gn=u(()=>{Ue();hn();sm=256*1024});var yn=u(()=>{Ue();gn()});var bn=u(()=>{re()});import C from"node:path";import Zi from"node:os";import{createHash as Qi,randomBytes as ew}from"node:crypto";import{Interface as Mt,keccak256 as rw}from"ethers";import{Transaction as ow}from"@scure/btc-signer";import{ed25519 as sw}from"@noble/curves/ed25519.js";function En(e){let t=process.env.ORACLE_SIGNER_STATE_DIR||C.join(process.env.XDG_STATE_HOME||C.join(Zi.homedir(),".local","state"),"oracle"),r=Qi("sha256").update(C.resolve(e)).digest("hex").slice(0,16);return{vault:C.join(e,"vault.json"),policy:C.join(e,"signer-policy.json"),policyKey:C.join(e,"policy-integrity-key"),policyAnchor:C.join(t,`signer-policy-${r}.high-water`),ledger:C.join(e,"signer-ledger.json"),ledgerAnchor:C.join(t,`signer-ledger-${r}.high-water`),executionOutbox:C.join(e,"signer-execution-outbox.json"),cexOrders:C.join(e,"cex-orders.json"),cexOrdersAnchor:C.join(t,`cex-orders-${r}.high-water`),token:C.join(e,"signer-token"),lock:C.join(t,`signer-${r}.lock`),workflowLedger:C.join(e,"workflow-events.jsonl")}}var Dw,jw,Fw,xn=u(()=>{Cr();Rr();Zr();Qr();pe();re();en();Dt();sn();J();dn();Fe();Re();At();gt();bt();je();St();yt();xt();it();st();Et();fn();pn();mn();yn();bn();Dw=new Mt(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),jw=new Mt(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),Fw=new Mt(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"])});import Ht from"node:fs";import Sn from"node:path";import{homedir as es}from"node:os";function ts(){return process.env.ORACLE_CONFIG_DIR||Sn.join(es(),".config","oracle")}function Ee(){let e=En(Sn.join(ts(),"signer")),t=Ht.existsSync(e.vault),r=Ht.existsSync(e.lock),n=t?r?"disarmed":"armed-owner-confirmed":"inert-no-key";return{vaultExists:t,policyConfigured:Ht.existsSync(e.policy),armed:t&&!r,disarmed:r,capabilities:{swap:n,bridge:n},autonomous:!1,note:"Keys stay on this machine. Exact confirmation is required before any broadcast."}}var Yw,zt=u(()=>{et();or();xn();re();Yw=Object.freeze([{type:"function",function:{name:"vault_status",description:"Read local Oracle vault/signer readiness. Never returns key material.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_status",description:"Ping the loopback signer. Fails closed if it is not running.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_pending",description:"List pending local-signer artifacts. Read-only. Does not approve, sign, or broadcast.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_queue",description:"Queue a prepared unsigned artifact on the loopback signer. Does not broadcast.",parameters:{type:"object",properties:{artifact:{type:"object"}},required:["artifact"],additionalProperties:!1}}},{type:"function",function:{name:"signer_deny",description:"Drop one pending local-signer artifact. Nothing signed.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_execute",description:"Broadcast one already-confirmed local artifact. Requires a one-use confirmationNonce from the local signer TTY confirm. Cannot mint confirmation itself.",parameters:{type:"object",properties:{artifact:{type:"object"},confirmationNonce:{type:"string",minLength:32,maxLength:128}},required:["artifact","confirmationNonce"],additionalProperties:!1}}},{type:"function",function:{name:"signer_disarm",description:"Global kill switch. Stops the local signer from broadcasting.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"receipt_report",description:"Receipt or it did not happen. Requires transactionHash/hash/txid.",parameters:{type:"object",properties:{receipt:{type:"object"},transactionHash:{type:"string"},hash:{type:"string"},txid:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"watch_create",description:"Create an alert-only watch. Never execute.",parameters:{type:"object",properties:{chain:{type:"string"},token:{type:"string"},condition:{type:"string"},note:{type:"string"}},required:["chain","token","condition"],additionalProperties:!1}}},{type:"function",function:{name:"watch_list",description:"List local alert-only watches.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"portfolio_snapshot",description:"How to read the one portfolio snapshot. knownUsd is incomplete if a provider is missing.",parameters:{type:"object",properties:{},additionalProperties:!1}}}])});import We from"node:fs";import rs from"node:os";import ie from"node:path";import{fileURLToPath as ns}from"node:url";function An(){return process.env.ORACLE_FAKE_HOME||rs.homedir()}function is(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function Ve(){return is()?process.env.ORACLE_CONFIG_DIR||ie.join(An(),".config","oracle"):ie.join(An(),".config","oracle")}function ss(){return ie.join(Ve(),"desk.json")}function as(){return ie.join(Ve(),"env")}function oe({force:e=!1}={}){if(oe._done&&!e)return oe._result||null;oe._done=!0;let t={},r=(o,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=s,t[o]=s))};try{let o=as();if(We.existsSync(o))for(let i of We.readFileSync(o,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let l=s[2];(l.startsWith('"')&&l.endsWith('"')||l.startsWith("'")&&l.endsWith("'"))&&(l=l.slice(1,-1)),r(s[1],l)}}catch{}try{let o=ss();if(We.existsSync(o)){let i=JSON.parse(We.readFileSync(o,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),oe._result=Object.keys(t).length?t:null,oe._result}var os,rh,vn=u(()=>{os=ie.dirname(ns(import.meta.url)),rh=ie.resolve(os,"../..");try{oe()}catch{}});function Ke(e){return String(e||"").trim()||void 0}function us(e,{required:t=!1}={}){let r=Ke(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!cs.has(r))throw new Error(`unsupported provider: ${r}`);return r}function ls(e,{required:t=!1}={}){let r=Ke(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function ds(e){let t=Ke(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function In({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=us(e),i=ls(t,{required:n});if(o==="custom")return{provider:o,...i?{model:i}:{},baseUrl:ds(r)};if(Ke(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...i?{model:i}:{}}}var cs,kn=u(()=>{cs=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"])});import On from"node:fs";import fs from"node:path";function ms(){return fs.join(Ve(),"model.json")}function se(e){return String(e||"").trim()||void 0}function ws(e={}){let t=se(e.backend)?.toLowerCase()||"auto",r=In({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=se(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),i=se(e.reasoningEffort),s=se(e.computeHost||e.remoteHost),l=se(e.computeUser||e.remoteUser),a=se(e.computePath||e.remotePath);if(!ps.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...i?{reasoningEffort:i}:{},...s?{computeHost:s}:{},...l?{computeUser:l}:{},...a?{computePath:a}:{}}}function Tn(){let e=ms();if(!On.existsSync(e))return null;try{return ws(JSON.parse(On.readFileSync(e,"utf8")))}catch{return null}}var ps,Nn=u(()=>{vn();kn();ps=new Set(["auto","standalone","hermes","remote","arch"])});import{Interface as hs,getAddress as gs}from"ethers";function Ut(e,t){try{return gs(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function ys(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function Wt(e){return e==null?null:Number.parseInt(String(e),16)}function Es(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=nr(e,r);return n||bs[Number(e)]||null}function Ss(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!xs.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}function As(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function vs(e){if(e?.error)throw As(e.error);return e?.result}function Is(e,t,r){return`${e}
 ${t}
-${JSON.stringify(r??[])}`}async function vs(e,t,r){return Le(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function Wt(e,t,r=[],n={}){let o=String(t||""),i=Es(o),s=ys(e,n);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let c=Nn.get(s);if(c!=null)return c}let a=n.dedupe!==!1&&!n.signal?As(s,o,r):null;if(a&&be.has(a))return be.get(a);let f=(async()=>{let c=await vs(s,{jsonrpc:"2.0",id:1,method:t,params:r},n),d=Ss(c);return i==="eth_chainid"&&typeof d=="string"&&Nn.set(s,d),d})();return a&&(be.set(a,f),f.finally(()=>{be.get(a)===f&&be.delete(a)}).catch(()=>{})),f}async function _n(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=hs(e.txHash||e.hash||e.transactionHash),o=await Wt(r,"eth_getTransactionReceipt",[n],t);if(!o)return{ok:!1,chainId:r,txHash:n,status:"pending",receipt:null,reason:"receipt pending"};let i=Ut(o.status),s=i===1,u=i===1?"success":i===0?"reverted":"unknown",a=s?null:u==="reverted"?"transaction reverted":"unknown receipt status",f=e.expectedTo?zt(e.expectedTo,"expectedTo"):null,c=o.to?zt(o.to,"receipt.to"):null;return f&&c!==f&&(s=!1,a=`to mismatch: expected ${f}, got ${c||"null"}`),{ok:s,chainId:r,txHash:n,status:u,reason:a,statusCode:i,to:c,from:o.from?zt(o.from,"receipt.from"):null,blockNumber:Ut(o.blockNumber),transactionIndex:Ut(o.transactionIndex),logs:Array.isArray(o.logs)?o.logs:[],receipt:o}}var Gw,gs,bs,be,Nn,Cn=l(()=>{Pe();Ze();Gw=new ms(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);gs={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};bs=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;be=new Map,Nn=new Map});function Vt(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function Jt(e,t="control input"){try{U(e,t),Vr(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function Ee(e,{required:t=[],optional:r=[]}={},n="object"){Vt(e,n);let o=new Set([...t,...r]),i=Object.keys(e).filter(s=>!o.has(s));if(i.length)throw new TypeError(`${n} has unknown field ${i[0]}`);for(let s of t)if(!Object.hasOwn(e,s))throw new TypeError(`${n}.${s} is required`);return e}function Kt(e,t,r=200,{lower:n=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||ks.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let o=e.trim();return n?o.toLowerCase():o}function xe(e,t,r=80){let n=Kt(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(n))throw new TypeError(`${t} must be a lowercase identifier`);return n}function Je(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function L(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))L(t);Object.freeze(e)}return e}var ks,Gt=l(()=>{Fe();Ct();ks=/[\u0000-\u001f\u007f]/});function Rn({family:e,chainId:t},r="chain"){let n=xe(e,`${r}.family`,40),o;if(n==="evm"){if(typeof t=="number")o=String(Je(t,`${r}.chainId`,{positive:!0}));else if(o=Kt(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(o))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else o=xe(t,`${r}.chainId`,80);return{family:n,chainId:o}}function Ts(e,t="chain"){return Ee(e,{required:["family","chainId"]},t),L(Rn(e,t))}function $n(e,t="finality rule"){Jt(e,t),Vt(e,t);let r=e.rule;if(!Is.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let n=r==="confirmations"?"confirmations":r;Ee(e,{required:["family","chainId","rule",n]},t);let o=Rn(e,t);return r==="confirmations"?{...o,rule:r,confirmations:Je(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...o,rule:r,[n]:xe(e[n],`${t}.${n}`,80)}}function Yt(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((n,o)=>$n(n,`finality policy rule ${o}`)),r=new Set;for(let n of t){let o=`${n.family}\0${n.chainId}`;if(r.has(o))throw new TypeError(`duplicate finality rule for ${n.family}:${n.chainId}`);r.add(o)}return L({policyVersion:1,rules:t})}function Ns(e){if(Ee(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return Yt(e.rules)}function Ln(e,t){let r=Ts(t,"finality query"),o=Ns(e).rules.find(i=>i.family===r.family&&i.chainId===r.chainId);return o?L({status:"KNOWN",...r,rule:o}):L({status:Z.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function _s(e,t){if(e==null)return null;Jt(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(Ee(e,{required:["status"],optional:[r]},"finality evidence"),!Os.includes(e.status))throw new TypeError("finality evidence.status is unknown");let n={status:e.status};return e[r]!=null&&(n[r]=t.rule==="confirmations"?Je(e.confirmations,"finality evidence.confirmations",{positive:!0}):xe(e[r],`finality evidence.${r}`,80)),n}function Pn(e,t){if(!e||e.status===Z.UNKNOWN||e.rule==null)return L({status:Z.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=$n(e.rule??e,"resolved finality rule"),n=_s(t,r);if(n==null)return L({status:Z.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(n.status!=="LIVE")return L({status:Z.UNKNOWN,final:!1,reason:`${n.status}_EVIDENCE`});let o=!1;return r.rule==="confirmations"?o=n.confirmations!=null&&n.confirmations>=r.confirmations:r.rule==="finalizedTag"?o=n.finalizedTag===r.finalizedTag:o=n.checkpoint===r.checkpoint,L({status:o?Z.FINAL:Z.INCLUDED,final:o,reason:o?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var Is,Z,Os,Bn=l(()=>{Gt();Is=Object.freeze(["confirmations","finalizedTag","checkpoint"]),Z=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Os=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"])});function Rs(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function Dn(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function Zt(e){return e==null?e:Array.isArray(e)?e.map(Zt):Se(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,Zt(e[t])])):String(e)}function $s(e,t,r,n){let o=x(e.finalityEvidence,n?.finality,e.evidence),i=x(e.finalityPolicy,e.policy);try{return i==null&&Se(e.finalityRule)&&(i=Yt([{family:t,chainId:r,...e.finalityRule}])),i==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:Pn(Ln(i,{family:t,chainId:r}),o)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function _(e,t,r){r!=null&&(e[t]=r)}function Ls(e){return e==null?null:String(e).trim().toLowerCase()}function Xt(...e){let t=e.map(Ls).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function jn(e={}){if(!Se(e))throw new TypeError("verified receipt: input object required");let t=vt(e),r=x(t.actionReceipt,t.receipt),n=Se(r)?r:t,o=x(t.observation,t.chainObservation,t.observedReceipt),i=Se(o),s=x(t.txHash,n.txHash,n.transactionHash,o?.txHash,o?.transactionHash),u=x(t.family,n.family,n.chain?.family,o?.family,o?.chain?.family),a=x(t.chainId,n.chainId,n.chain?.chainId,o?.chainId,o?.chain?.chainId),f=!Xt(t.txHash,n.txHash,n.transactionHash,o?.txHash,o?.transactionHash)||!Xt(t.family,n.family,n.chain?.family,o?.family,o?.chain?.family)||!Xt(t.chainId,n.chainId,n.chain?.chainId,o?.chainId,o?.chain?.chainId),c=$s(t,u,a,i&&!f?o:null),d=Rs(x(o?.receiptStatus,o?.executionStatus,o?.status)),m=x(t.reconciliationStatus,t.reconciliation?.status,o?.reconciliationStatus),p=x(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,o?.finalityState),h="UNKNOWN";Dn(m)||!f&&(i&&d==="FAIL"||Dn(p))?h="FAIL":!f&&s&&i&&d==="SUCCESS"&&["INCLUDED","FINAL"].includes(c.status)&&(h="SUCCESS");let w={verifiedReceiptVersion:Cs,status:h};f&&(w.reason="REFERENCE_MISMATCH"),_(w,"txHash",s),_(w,"chain",x(t.chain,n.chain,o?.chain)),_(w,"family",u),_(w,"chainId",a),_(w,"block",x(o?.block,t.block)),_(w,"blockState",x(o?.blockState,o?.inclusionState)),w.finalityState=c.status,_(w,"confirmations",x(o?.confirmations,o?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),_(w,"observedAt",x(o?.observedAt,t.observedAt)),_(w,"route",x(t.route,n.route)),_(w,"prepareHash",x(t.prepareHash,n.prepareHash)),_(w,"policyOutcome",x(t.policyOutcome,n.policyOutcome,n.policyChecks));let S=x(t.balanceChanges,o?.balanceChanges,o?.balances,n.balanceChanges,n.balances);return S!=null&&(w.balanceChanges=Zt(S)),_(w,"createdAt",x(t.createdAt,n.createdAt)),_(w,"submittedAt",x(t.submittedAt,n.submittedAt)),_(w,"finalizedAt",x(t.finalizedAt,o?.finalizedAt)),_(w,"timestamps",x(t.timestamps,n.timestamps,o?.timestamps)),L(w)}var Cs,sh,x,Se,Fn=l(()=>{Fe();Bn();Gt();Cs=1,sh=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),x=(...e)=>e.find(t=>t!=null),Se=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype});var Mn={};ke(Mn,{observeEvmReceipt:()=>qn,verifyEvmReceipt:()=>Ds});function Bs(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function qn({txHash:e,chainId:t,rpcUrl:r},n={}){let o=String(e||"").trim().toLowerCase();if(!Ps.test(o))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let i=Number(t);if(!Number.isSafeInteger(i)||i<=0)throw new TypeError("observe receipt: chainId required");let s=n.transactionReceipt||_n,u=n.rpcCall||Wt,a={...n.rpcOptions||{},...r?{rpcUrl:r}:{}},f;try{f=await s({txHash:o,chainId:i},a)}catch(p){return{observation:null,reason:`RPC_UNAVAILABLE: ${p.message}`}}if(!f||f.receipt==null)return{observation:null,reason:f?.reason||"receipt pending"};let c=null,d=f.blockNumber;if(Number.isSafeInteger(d))try{let p=Bs(await u(i,"eth_blockNumber",[],a));p!=null&&p>=d&&(c=p-d+1)}catch{}let m={txHash:o,family:"evm",chainId:String(i),receiptStatus:f.status==="success"?"SUCCESS":f.status==="reverted"?"FAIL":"UNKNOWN",block:d==null?void 0:String(d),observedAt:new Date().toISOString(),finality:{status:"LIVE",...c==null?{}:{confirmations:c}}};return c!=null&&(m.confirmations=c),{observation:m,reason:null}}async function Ds({txHash:e,chainId:t,confirmations:r=1,rpcUrl:n},o={}){let{observation:i,reason:s}=await qn({txHash:e,chainId:t,rpcUrl:n},o),u=jn({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...i?{observation:i}:{}});return{receipt:u,observed:!!i,final:u.finalityState==="FINAL",requiredConfirmations:r,reason:s}}var Ps,Hn=l(()=>{Cn();Fn();Ps=/^0x[0-9a-f]{64}$/});var zn={};ke(zn,{classifyReceipt:()=>ue,configDir:()=>Ms,firstHourReport:()=>Ae,probeReceiptModule:()=>zs,probeReviewModule:()=>Hs,venueMap:()=>Ke});import js from"node:path";import{homedir as Fs}from"node:os";function Ms(e=process.env){return e.ORACLE_CONFIG_DIR||js.join(Fs(),".config","oracle")}function Ke({env:e=process.env,vault:t=null}={}){let r=t||ye(),n=[];for(let[o,i]of Object.entries(Ie)){let s=(i.rpcEnv||[]).some(a=>String(e[a]||"").trim()),u="prepare";i.evm?s&&(u="live"):u="unavailable",n.push({key:o,chainId:i.chainId,name:i.name,family:"evm",status:u,execute:!!(r.vaultExists&&r.armed&&!r.disarmed),note:s?"rpc configured":"public read/prepare; set RPC for live reads"})}return n.push({key:"solana",chainId:null,name:"Solana",family:"sol",status:"prepare",execute:!1,note:"Jupiter quote/prepare; local sol signer"},{key:"bitcoin",chainId:null,name:"Bitcoin",family:"btc",status:"prepare",execute:!1,note:"Esplora read; local btc signer"},{key:"hyperliquid-l1",chainId:null,name:"Hyperliquid L1",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not an EVM signer family"},{key:"polymarket",chainId:null,name:"Polymarket",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not a signer family"}),n}function Ae({env:e=process.env,model:t=On(),vault:r=ye(),signerReachable:n=!1,quote:o=null,reviewAvailable:i=!1,receiptAvailable:s=!1}={}){let u=[],a=(p,h,w,S=null)=>u.push({id:p,status:h,detail:w,fix:S}),f=(()=>{let[p,h]=process.versions.node.split(".").map(Number);return p>20||p===20&&h>=19})();a("node",f?"ok":"fail",`node ${process.versions.node}`,f?null:"install node >= 20.19"),t?t.backend==="hermes"?a("model","warn","backend=hermes (opt-in attach)","oracle model --backend standalone"):a("model","ok",`${t.backend||"auto"} ${t.provider||""} ${t.model||""}`.trim()):a("model","fail","no model.json","oracle setup model"),r.vaultExists?r.disarmed?a("vault","warn","vault present, DISARMED","oracle signer (re-arm after confirm)"):a("vault",r.armed?"ok":"warn",r.armed?"present, armed":"present, not armed"):a("vault","fail","no local vault","oracle sign init");let c=e.ORACLE_SIGNER_HOST||"127.0.0.1";if(qs.has(c)?a("signer",n?"ok":"warn",n?`loopback ${c}:${e.ORACLE_SIGNER_PORT||9462}`:"loopback signer not reachable",n?null:"oracle signer"):a("signer","fail",`signer host ${c} is not loopback`,"unset ORACLE_SIGNER_HOST"),!o)a("quote","warn","quote not probed",null);else if(o.ok){let p=String(o.detail||"net quote returned");a("quote","ok",p.length>140?`${p.slice(0,140)}\u2026`:p)}else a("quote","warn",o.detail||"quote unavailable","check network / oracle data serve");a("review",i?"ok":"fail",i?"sign-time review renders decoded action, policy hits, approval deltas":"sign-time review module missing from this build",i?null:"reinstall @oracle-agent/oracle (src/control/sign-time-review.mjs)"),a("receipt",s?"ok":"fail",s?"oracle receipt verifies on-chain state (SUCCESS/FAIL/UNKNOWN, finality-pinned)":"verified-receipt observer missing from this build",s?null:"reinstall @oracle-agent/oracle (src/desk/observe-receipt.mjs)");let d=u.some(p=>p.status==="fail"),m=u.filter(p=>p.status==="ok").length;return{ok:!d,checks:u,firstRunScore:{ok:m,total:u.length,label:`${m}/${u.length} first-run hops green`},venues:Ke({env:e,vault:r})}}async function Hs(){try{return typeof(await Promise.resolve().then(()=>(Ft(),cn))).createSignTimeReview=="function"}catch{return!1}}async function zs(){try{let e=await Promise.resolve().then(()=>(Hn(),Mn));return typeof e.observeReceipt=="function"||typeof e.default=="function"||Object.values(e).some(t=>typeof t=="function")}catch{return!1}}var qs,Ge=l(()=>{Ze();Ht();Tn();Qe();qs=new Set(["127.0.0.1","::1","localhost"])});var Wn={};ke(Wn,{classifyReceipt:()=>ue,default:()=>Vs,detailText:()=>Un,firstHourReport:()=>Ae,probeQuote:()=>Ws,probeSigner:()=>Us,symbol:()=>ve,vaultStatus:()=>ye});async function Us(e=process.env){let t=e.ORACLE_SIGNER_HOST||"127.0.0.1",r=e.ORACLE_SIGNER_PORT||9462;try{return(await fetch(`http://${t}:${r}/status`,{signal:AbortSignal.timeout(1500)})).ok}catch{return!1}}function ve(e){let t=String(e??"?").replace(/[^\w.$-]/g,"");return t.length>12?`${t.slice(0,12)}...`:t||"?"}function Un(e,t=120){let r=String(e??"").replace(/[\u0000-\u001f\u007f-\u009f]/g," ").replace(/\s+/g," ").trim();return r?r.length>t?`${r.slice(0,t)}...`:r:"quote failed"}async function Ws(){try{let e=await fetch("https://api.dexscreener.com/latest/dex/search?q=WETH%20USDC",{signal:AbortSignal.timeout(4e3)});if(!e.ok)return{ok:!1,detail:`dexscreener ${e.status}`};let r=(await e.json())?.pairs?.[0];return!r?.chainId||!r?.priceUsd?{ok:!1,detail:"no pair"}:{ok:!0,detail:`${ve(r.chainId)} ${ve(r.baseToken?.symbol)}/${ve(r.quoteToken?.symbol)} $${ve(r.priceUsd)}`}}catch(e){return{ok:!1,detail:Un(e instanceof Error?e.message:"quote failed")}}}var Vs,Vn=l(()=>{Ge();Ht();Vs={name:"venues",summary:"label every shipped venue live / prepare / unavailable",group:"read",usage:"oracle venues [--json]",async run(e){let t=e.argv.includes("--json"),r=Ke();if(t)return process.stdout.write(`${JSON.stringify({venues:r},null,2)}
+${JSON.stringify(r??[])}`}async function ks(e,t,r){return Be(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function Vt(e,t,r=[],n={}){let o=String(t||""),i=Ss(o),s=Es(e,n);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let c=Cn.get(s);if(c!=null)return c}let a=n.dedupe!==!1&&!n.signal?Is(s,o,r):null;if(a&&xe.has(a))return xe.get(a);let f=(async()=>{let c=await ks(s,{jsonrpc:"2.0",id:1,method:t,params:r},n),d=vs(c);return i==="eth_chainid"&&typeof d=="string"&&Cn.set(s,d),d})();return a&&(xe.set(a,f),f.finally(()=>{xe.get(a)===f&&xe.delete(a)}).catch(()=>{})),f}async function _n(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=ys(e.txHash||e.hash||e.transactionHash),o=await Vt(r,"eth_getTransactionReceipt",[n],t);if(!o)return{ok:!1,chainId:r,txHash:n,status:"pending",receipt:null,reason:"receipt pending"};let i=Wt(o.status),s=i===1,l=i===1?"success":i===0?"reverted":"unknown",a=s?null:l==="reverted"?"transaction reverted":"unknown receipt status",f=e.expectedTo?Ut(e.expectedTo,"expectedTo"):null,c=o.to?Ut(o.to,"receipt.to"):null;return f&&c!==f&&(s=!1,a=`to mismatch: expected ${f}, got ${c||"null"}`),{ok:s,chainId:r,txHash:n,status:l,reason:a,statusCode:i,to:c,from:o.from?Ut(o.from,"receipt.from"):null,blockNumber:Wt(o.blockNumber),transactionIndex:Wt(o.transactionIndex),logs:Array.isArray(o.logs)?o.logs:[],receipt:o}}var wh,bs,xs,xe,Cn,Rn=u(()=>{De();Qe();wh=new hs(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);bs={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};xs=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;xe=new Map,Cn=new Map});function Kt(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function Jt(e,t="control input"){try{U(e,t),Kr(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function Se(e,{required:t=[],optional:r=[]}={},n="object"){Kt(e,n);let o=new Set([...t,...r]),i=Object.keys(e).filter(s=>!o.has(s));if(i.length)throw new TypeError(`${n} has unknown field ${i[0]}`);for(let s of t)if(!Object.hasOwn(e,s))throw new TypeError(`${n}.${s} is required`);return e}function Gt(e,t,r=200,{lower:n=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||Os.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let o=e.trim();return n?o.toLowerCase():o}function Ae(e,t,r=80){let n=Gt(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(n))throw new TypeError(`${t} must be a lowercase identifier`);return n}function Je(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function $(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))$(t);Object.freeze(e)}return e}var Os,Yt=u(()=>{we();Rt();Os=/[\u0000-\u001f\u007f]/});function Ln({family:e,chainId:t},r="chain"){let n=Ae(e,`${r}.family`,40),o;if(n==="evm"){if(typeof t=="number")o=String(Je(t,`${r}.chainId`,{positive:!0}));else if(o=Gt(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(o))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else o=Ae(t,`${r}.chainId`,80);return{family:n,chainId:o}}function Cs(e,t="chain"){return Se(e,{required:["family","chainId"]},t),$(Ln(e,t))}function $n(e,t="finality rule"){Jt(e,t),Kt(e,t);let r=e.rule;if(!Ts.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let n=r==="confirmations"?"confirmations":r;Se(e,{required:["family","chainId","rule",n]},t);let o=Ln(e,t);return r==="confirmations"?{...o,rule:r,confirmations:Je(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...o,rule:r,[n]:Ae(e[n],`${t}.${n}`,80)}}function Xt(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((n,o)=>$n(n,`finality policy rule ${o}`)),r=new Set;for(let n of t){let o=`${n.family}\0${n.chainId}`;if(r.has(o))throw new TypeError(`duplicate finality rule for ${n.family}:${n.chainId}`);r.add(o)}return $({policyVersion:1,rules:t})}function _s(e){if(Se(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return Xt(e.rules)}function Pn(e,t){let r=Cs(t,"finality query"),o=_s(e).rules.find(i=>i.family===r.family&&i.chainId===r.chainId);return o?$({status:"KNOWN",...r,rule:o}):$({status:Z.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function Rs(e,t){if(e==null)return null;Jt(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(Se(e,{required:["status"],optional:[r]},"finality evidence"),!Ns.includes(e.status))throw new TypeError("finality evidence.status is unknown");let n={status:e.status};return e[r]!=null&&(n[r]=t.rule==="confirmations"?Je(e.confirmations,"finality evidence.confirmations",{positive:!0}):Ae(e[r],`finality evidence.${r}`,80)),n}function Bn(e,t){if(!e||e.status===Z.UNKNOWN||e.rule==null)return $({status:Z.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=$n(e.rule??e,"resolved finality rule"),n=Rs(t,r);if(n==null)return $({status:Z.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(n.status!=="LIVE")return $({status:Z.UNKNOWN,final:!1,reason:`${n.status}_EVIDENCE`});let o=!1;return r.rule==="confirmations"?o=n.confirmations!=null&&n.confirmations>=r.confirmations:r.rule==="finalizedTag"?o=n.finalizedTag===r.finalizedTag:o=n.checkpoint===r.checkpoint,$({status:o?Z.FINAL:Z.INCLUDED,final:o,reason:o?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var Ts,Z,Ns,Dn=u(()=>{Yt();Ts=Object.freeze(["confirmations","finalizedTag","checkpoint"]),Z=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Ns=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"])});function $s(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function jn(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function Qt(e){return e==null?e:Array.isArray(e)?e.map(Qt):ve(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,Qt(e[t])])):String(e)}function Ps(e,t,r,n){let o=x(e.finalityEvidence,n?.finality,e.evidence),i=x(e.finalityPolicy,e.policy);try{return i==null&&ve(e.finalityRule)&&(i=Xt([{family:t,chainId:r,...e.finalityRule}])),i==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:Bn(Pn(i,{family:t,chainId:r}),o)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function _(e,t,r){r!=null&&(e[t]=r)}function Bs(e){return e==null?null:String(e).trim().toLowerCase()}function Zt(...e){let t=e.map(Bs).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function Fn(e={}){if(!ve(e))throw new TypeError("verified receipt: input object required");let t=qe(e),r=x(t.actionReceipt,t.receipt),n=ve(r)?r:t,o=x(t.observation,t.chainObservation,t.observedReceipt),i=ve(o),s=x(t.txHash,n.txHash,n.transactionHash,o?.txHash,o?.transactionHash),l=x(t.family,n.family,n.chain?.family,o?.family,o?.chain?.family),a=x(t.chainId,n.chainId,n.chain?.chainId,o?.chainId,o?.chain?.chainId),f=!Zt(t.txHash,n.txHash,n.transactionHash,o?.txHash,o?.transactionHash)||!Zt(t.family,n.family,n.chain?.family,o?.family,o?.chain?.family)||!Zt(t.chainId,n.chainId,n.chain?.chainId,o?.chainId,o?.chain?.chainId),c=Ps(t,l,a,i&&!f?o:null),d=$s(x(o?.receiptStatus,o?.executionStatus,o?.status)),m=x(t.reconciliationStatus,t.reconciliation?.status,o?.reconciliationStatus),p=x(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,o?.finalityState),h="UNKNOWN";jn(m)||!f&&(i&&d==="FAIL"||jn(p))?h="FAIL":!f&&s&&i&&d==="SUCCESS"&&["INCLUDED","FINAL"].includes(c.status)&&(h="SUCCESS");let w={verifiedReceiptVersion:Ls,status:h};f&&(w.reason="REFERENCE_MISMATCH"),_(w,"txHash",s),_(w,"chain",x(t.chain,n.chain,o?.chain)),_(w,"family",l),_(w,"chainId",a),_(w,"block",x(o?.block,t.block)),_(w,"blockState",x(o?.blockState,o?.inclusionState)),w.finalityState=c.status,_(w,"confirmations",x(o?.confirmations,o?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),_(w,"observedAt",x(o?.observedAt,t.observedAt)),_(w,"route",x(t.route,n.route)),_(w,"prepareHash",x(t.prepareHash,n.prepareHash)),_(w,"policyOutcome",x(t.policyOutcome,n.policyOutcome,n.policyChecks));let S=x(t.balanceChanges,o?.balanceChanges,o?.balances,n.balanceChanges,n.balances);return S!=null&&(w.balanceChanges=Qt(S)),_(w,"createdAt",x(t.createdAt,n.createdAt)),_(w,"submittedAt",x(t.submittedAt,n.submittedAt)),_(w,"finalizedAt",x(t.finalizedAt,o?.finalizedAt)),_(w,"timestamps",x(t.timestamps,n.timestamps,o?.timestamps)),$(w)}var Ls,kh,x,ve,qn=u(()=>{we();Dn();Yt();Ls=1,kh=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),x=(...e)=>e.find(t=>t!=null),ve=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype});var Hn={};Oe(Hn,{observeEvmReceipt:()=>Mn,verifyEvmReceipt:()=>Fs});function js(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function Mn({txHash:e,chainId:t,rpcUrl:r},n={}){let o=String(e||"").trim().toLowerCase();if(!Ds.test(o))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let i=Number(t);if(!Number.isSafeInteger(i)||i<=0)throw new TypeError("observe receipt: chainId required");let s=n.transactionReceipt||_n,l=n.rpcCall||Vt,a={...n.rpcOptions||{},...r?{rpcUrl:r}:{}},f;try{f=await s({txHash:o,chainId:i},a)}catch(p){return{observation:null,reason:`RPC_UNAVAILABLE: ${p.message}`}}if(!f||f.receipt==null)return{observation:null,reason:f?.reason||"receipt pending"};let c=null,d=f.blockNumber;if(Number.isSafeInteger(d))try{let p=js(await l(i,"eth_blockNumber",[],a));p!=null&&p>=d&&(c=p-d+1)}catch{}let m={txHash:o,family:"evm",chainId:String(i),receiptStatus:f.status==="success"?"SUCCESS":f.status==="reverted"?"FAIL":"UNKNOWN",block:d==null?void 0:String(d),observedAt:new Date().toISOString(),finality:{status:"LIVE",...c==null?{}:{confirmations:c}}};return c!=null&&(m.confirmations=c),{observation:m,reason:null}}async function Fs({txHash:e,chainId:t,confirmations:r=1,rpcUrl:n},o={}){let{observation:i,reason:s}=await Mn({txHash:e,chainId:t,rpcUrl:n},o),l=Fn({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...i?{observation:i}:{}});return{receipt:l,observed:!!i,final:l.finalityState==="FINAL",requiredConfirmations:r,reason:s}}var Ds,zn=u(()=>{Rn();qn();Ds=/^0x[0-9a-f]{64}$/});var Un={};Oe(Un,{classifyReceipt:()=>le,configDir:()=>zs,firstHourReport:()=>Ie,probeReceiptModule:()=>Ws,probeReviewModule:()=>Us,venueMap:()=>Ge});import qs from"node:path";import{homedir as Ms}from"node:os";function zs(e=process.env){return e.ORACLE_CONFIG_DIR||qs.join(Ms(),".config","oracle")}function Ge({env:e=process.env,vault:t=null}={}){let r=t||Ee(),n=[];for(let[o,i]of Object.entries(Te)){let s=(i.rpcEnv||[]).some(a=>String(e[a]||"").trim()),l="prepare";i.evm?s&&(l="live"):l="unavailable",n.push({key:o,chainId:i.chainId,name:i.name,family:"evm",status:l,execute:!!(r.vaultExists&&r.armed&&!r.disarmed),note:s?"rpc configured":"public read/prepare; set RPC for live reads"})}return n.push({key:"solana",chainId:null,name:"Solana",family:"sol",status:"prepare",execute:!1,note:"Jupiter quote/prepare; local sol signer"},{key:"bitcoin",chainId:null,name:"Bitcoin",family:"btc",status:"prepare",execute:!1,note:"Esplora read; local btc signer"},{key:"hyperliquid-l1",chainId:null,name:"Hyperliquid L1",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not an EVM signer family"},{key:"polymarket",chainId:null,name:"Polymarket",family:"data",status:"live",execute:!1,note:"data/prepare only \u2014 not a signer family"}),n}function Ie({env:e=process.env,model:t=Tn(),vault:r=Ee(),signerReachable:n=!1,quote:o=null,reviewAvailable:i=!1,receiptAvailable:s=!1}={}){let l=[],a=(p,h,w,S=null)=>l.push({id:p,status:h,detail:w,fix:S}),f=(()=>{let[p,h]=process.versions.node.split(".").map(Number);return p>20||p===20&&h>=19})();a("node",f?"ok":"fail",`node ${process.versions.node}`,f?null:"install node >= 20.19"),t?t.backend==="hermes"?a("model","warn","backend=hermes (opt-in attach)","oracle model --backend standalone"):a("model","ok",`${t.backend||"auto"} ${t.provider||""} ${t.model||""}`.trim()):a("model","fail","no model.json","oracle setup model"),r.vaultExists?r.disarmed?a("vault","warn","vault present, DISARMED","oracle signer (re-arm after confirm)"):a("vault",r.armed?"ok":"warn",r.armed?"present, armed":"present, not armed"):a("vault","fail","no local vault","oracle sign init");let c=e.ORACLE_SIGNER_HOST||"127.0.0.1";if(Hs.has(c)?a("signer",n?"ok":"warn",n?`loopback ${c}:${e.ORACLE_SIGNER_PORT||9462}`:"loopback signer not reachable",n?null:"oracle signer"):a("signer","fail",`signer host ${c} is not loopback`,"unset ORACLE_SIGNER_HOST"),!o)a("quote","warn","quote not probed",null);else if(o.ok){let p=String(o.detail||"net quote returned");a("quote","ok",p.length>140?`${p.slice(0,140)}\u2026`:p)}else a("quote","warn",o.detail||"quote unavailable","check network / oracle data serve");a("review",i?"ok":"fail",i?"sign-time review renders decoded action, policy hits, approval deltas":"sign-time review module missing from this build",i?null:"reinstall @oracle-agent/oracle (src/control/sign-time-review.mjs)"),a("receipt",s?"ok":"fail",s?"oracle receipt verifies on-chain state (SUCCESS/FAIL/UNKNOWN, finality-pinned)":"verified-receipt observer missing from this build",s?null:"reinstall @oracle-agent/oracle (src/desk/observe-receipt.mjs)");let d=l.some(p=>p.status==="fail"),m=l.filter(p=>p.status==="ok").length;return{ok:!d,checks:l,firstRunScore:{ok:m,total:l.length,label:`${m}/${l.length} first-run hops green`},venues:Ge({env:e,vault:r})}}async function Us(){try{return typeof(await Promise.resolve().then(()=>(qt(),un))).createSignTimeReview=="function"}catch{return!1}}async function Ws(){try{let e=await Promise.resolve().then(()=>(zn(),Hn));return typeof e.observeReceipt=="function"||typeof e.default=="function"||Object.values(e).some(t=>typeof t=="function")}catch{return!1}}var Hs,Ye=u(()=>{Qe();zt();Nn();et();Hs=new Set(["127.0.0.1","::1","localhost"])});var Vn={};Oe(Vn,{classifyReceipt:()=>le,default:()=>Js,detailText:()=>Wn,firstHourReport:()=>Ie,probeQuote:()=>Ks,probeSigner:()=>Vs,symbol:()=>ke,vaultStatus:()=>Ee});async function Vs(e=process.env){let t=e.ORACLE_SIGNER_HOST||"127.0.0.1",r=e.ORACLE_SIGNER_PORT||9462;try{return(await fetch(`http://${t}:${r}/status`,{signal:AbortSignal.timeout(1500)})).ok}catch{return!1}}function ke(e){let t=String(e??"?").replace(/[^\w.$-]/g,"");return t.length>12?`${t.slice(0,12)}...`:t||"?"}function Wn(e,t=120){let r=String(e??"").replace(/[\u0000-\u001f\u007f-\u009f]/g," ").replace(/\s+/g," ").trim();return r?r.length>t?`${r.slice(0,t)}...`:r:"quote failed"}async function Ks(){try{let e=await fetch("https://api.dexscreener.com/latest/dex/search?q=WETH%20USDC",{signal:AbortSignal.timeout(4e3)});if(!e.ok)return{ok:!1,detail:`dexscreener ${e.status}`};let r=(await e.json())?.pairs?.[0];return!r?.chainId||!r?.priceUsd?{ok:!1,detail:"no pair"}:{ok:!0,detail:`${ke(r.chainId)} ${ke(r.baseToken?.symbol)}/${ke(r.quoteToken?.symbol)} $${ke(r.priceUsd)}`}}catch(e){return{ok:!1,detail:Wn(e instanceof Error?e.message:"quote failed")}}}var Js,Kn=u(()=>{Ye();zt();Js={name:"venues",summary:"label every shipped venue live / prepare / unavailable",group:"read",usage:"oracle venues [--json]",async run(e){let t=e.argv.includes("--json"),r=Ge();if(t)return process.stdout.write(`${JSON.stringify({venues:r},null,2)}
 `),0;for(let n of r)process.stdout.write(`${n.status.padEnd(12)} ${n.key.padEnd(16)} ${n.name}  exec=${n.execute?"local":"no"}
-`);return 0}}});Ge();var Jn=[{n:1,title:"quote",cmd:"oracle swap quote 8453 <tokenIn> <tokenOut> <amount> --json",note:"read-only. No wallet, no keys."},{n:2,title:"prepare",cmd:"oracle swap prepare ... --taker <yourWallet>",note:"returns an UNSIGNED transaction. Oracle never holds a key."},{n:3,title:"review",cmd:"shown before any signature",note:"decoded action, route, policy pass/fail, approval deltas, prepare hash."},{n:4,title:"sign",cmd:"your wallet, or oracle signer (local encrypted vault)",note:"you type the exact digest. Nothing signs on your behalf."},{n:5,title:"receipt",cmd:"oracle receipt --hash <txid> --chain <chainId>",note:"observed chain state only. No evidence reads UNKNOWN, never success."}],bh={name:"quickstart",summary:"walk the first-run path: quote -> review -> sign locally -> verified receipt",group:"read",usage:"oracle quickstart [--json] [--check]",async run(e){let t=e.argv||[],r=t.includes("--json"),n=t.includes("--check"),o=null;if(n){let{probeSigner:s,probeQuote:u}=await Promise.resolve().then(()=>(Vn(),Wn)),{probeReviewModule:a,probeReceiptModule:f}=await Promise.resolve().then(()=>(Ge(),zn)),[c,d,m,p]=await Promise.all([s(process.env),u(),a(),f()]);o=Ae({signerReachable:c,quote:d,reviewAvailable:m,receiptAvailable:p})}if(r)return process.stdout.write(`${JSON.stringify({steps:Jn,...o?{readiness:o}:{}},null,2)}
-`),o&&!o.ok?1:0;let i=["","Oracle first run \u2014 what actually happens to your money",""];for(let s of Jn)i.push(`  ${s.n}. ${s.title}`),i.push(`     ${s.cmd}`),i.push(`     ${s.note}`),i.push("");if(i.push("  Oracle prepares. You sign. Oracle verifies what happened on chain."),i.push(""),o){i.push("Readiness:");for(let s of o.checks){let u=s.status==="ok"?"ok  ":s.status==="warn"?"warn":"FAIL";i.push(`  ${u}  ${s.id.padEnd(9)} ${s.detail}${s.fix?`  -> ${s.fix}`:""}`)}i.push("")}return process.stdout.write(i.join(`
-`)),o&&!o.ok?1:0}};export{bh as default};
+`);return 0}}});Ye();var Jn=[{n:1,title:"quote",cmd:"oracle swap quote 8453 <tokenIn> <tokenOut> <amount> --json",note:"read-only. No wallet, no keys."},{n:2,title:"prepare",cmd:"oracle swap prepare ... --taker <yourWallet>",note:"returns an UNSIGNED transaction. Oracle never holds a key."},{n:3,title:"review",cmd:"shown before any signature",note:"decoded action, route, policy pass/fail, approval deltas, prepare hash."},{n:4,title:"sign",cmd:"your wallet, or oracle signer (local encrypted vault)",note:"you type the exact digest. Nothing signs on your behalf."},{n:5,title:"receipt",cmd:"oracle receipt --hash <txid> --chain <chainId>",note:"observed chain state only. No evidence reads UNKNOWN, never success."}],Fh={name:"quickstart",summary:"walk the first-run path: quote -> review -> sign locally -> verified receipt",group:"read",usage:"oracle quickstart [--json] [--check]",async run(e){let t=e.argv||[],r=t.includes("--json"),n=t.includes("--check"),o=null;if(n){let{probeSigner:s,probeQuote:l}=await Promise.resolve().then(()=>(Kn(),Vn)),{probeReviewModule:a,probeReceiptModule:f}=await Promise.resolve().then(()=>(Ye(),Un)),[c,d,m,p]=await Promise.all([s(process.env),l(),a(),f()]);o=Ie({signerReachable:c,quote:d,reviewAvailable:m,receiptAvailable:p})}if(r)return process.stdout.write(`${JSON.stringify({steps:Jn,...o?{readiness:o}:{}},null,2)}
+`),o&&!o.ok?1:0;let i=["","Oracle first run \u2014 what actually happens to your money",""];for(let s of Jn)i.push(`  ${s.n}. ${s.title}`),i.push(`     ${s.cmd}`),i.push(`     ${s.note}`),i.push("");if(i.push("  Oracle prepares. You sign. Oracle verifies what happened on chain."),i.push(""),o){i.push("Readiness:");for(let s of o.checks){let l=s.status==="ok"?"ok  ":s.status==="warn"?"warn":"FAIL";i.push(`  ${l}  ${s.id.padEnd(9)} ${s.detail}${s.fix?`  -> ${s.fix}`:""}`)}i.push("")}return process.stdout.write(i.join(`
+`)),o&&!o.ok?1:0}};export{Fh as default};

package/dist/cli/commands/session-vault.mjs

@@ -1,4 +1,4 @@
-import{homedir as E}from"node:os";import{join as w}from"node:path";var v=process.env.ORACLE_PUBLIC_DESKTOP==="1",X=v?process.env.ORACLE_CONFIG_DIR||w(E(),".config","oracle"):w(E(),".config","oracle"),xe=v?X:w(E(),".config","mad-desk");var A={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},ge=new Map(Object.values(A).map(e=>[e.chainId,e]));function K(e,t="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${t} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${t} must be a number or decimal string`);return e}throw new Error(`${t} must be a number or decimal string`)}function p(e,t="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${t} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let n=K(e,t);if(n==="")throw new Error(`${t} is required`);if(!/^-?\d+$/.test(n)&&!/^0x[0-9a-fA-F]+$/.test(n))throw new Error(`${t} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(n)}`);try{return BigInt(n)}catch{throw new Error(`${t} must be an integer, got ${JSON.stringify(n)}`)}}var _=Object.freeze({SAFE:"safe",KERNEL_ZERODEV:"kernel-zerodev",BICONOMY_NEXUS:"biconomy-nexus",PERMISSIONLESS_VIEM:"permissionless-viem"}),Ae=Object.freeze(Object.values(_)),_e=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked"}),Ne=1440*60*1e3;var N=["0x000000000022d473030f116ddee9f6b43ac78ba3"],O={4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7","0x1f7d7550b1b028f7571e69a784071f0205fd2efa","0x0bd7d308f8e1639fab988df18a8011f41eacad73","0x5fc5360d0400a0fd4f2af552add042d716f1d168","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x3d4e44eb1374240ce5f1b871ab261cd16335b76a","0x33128a8fc17869897dce68ed026d694621f6fdfd","0x4200000000000000000000000000000000000006","0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5","0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0","0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x61ffe014ba17989e743c5f6cb21bf9697530b21e","0x82af49447d8a07e3bd95bd0d56f35241523fbab1","0xaf88d065e77c8cc2239327c5edb3a432268e5831","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110","0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41","0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6"],1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983","0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2","0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x817997ca8394e26cce3de3a076a4889b27dbf9de","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83","0x779ded0c9e1022225f8e0630b35a9b54be713736","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"]},R={1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983"]};import{encodeFunctionData as V}from"viem";import{keccak256 as C,concat as P,getContractAddress as J}from"viem";import{readFileSync as Z}from"node:fs";import{dirname as Q,join as ee}from"node:path";import{fileURLToPath as te}from"node:url";var S="0x4e59b44847b379578588920ca78fbf26c0b4956c";var L="0x365dc643926d7084c9e2f1ad68eb1a944b3aac8abe83c933aaf40c014579414f",m="0xe776361e49a5ba2c978483b2e2717e45f6fe8577172e6c5e2c1d5b0c7bd34e26",D="0x4360b0c758245b325bea83328c6444f8f4b06355388708bc9ee1dc12092d3c52",ne=Object.freeze({1:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Ethereum Pectra (2025-05-07) activated EIP-7702. https://ethereum.org/roadmap/pectra/7702/"}),10:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC mainnet.optimism.io 2026-08-25: eth_estimateGas type=0x4 \u2192 'EIP-7702 authorization list has invalid fields' (type-4 parsed)."}),56:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC bsc-dataseed.binance.org 2026-08-25: type=0x4 \u2192 'EIP-7702 transaction with empty auth list'."}),137:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Polygon mainnet. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),988:Object.freeze({status:"ready",path:"session-vault",evidence:"No EIP-7702 (type-4 == type-2 21000). Nick factory present. Vault stack."}),999:Object.freeze({status:"ready",path:"session-vault",evidence:"Live RPC: EIP-7702 authorization list not supported. Nick factory present. Vault stack."}),2741:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702-specific RPC behavior; zkSync-family AA. Vault is the portable EVM lock."}),4663:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC rpc.mainnet.chain.robinhood.com 2026-08-25: type-4 empty-auth \u2192 EIP-7702 empty auth list. Nick factory present."}),8453:Object.freeze({status:"draft",path:"eip7702-delegate",evidence:"Foundry 9/9 Prague + committed deployedBytecodeHash. No on-chain module address yet."}),42161:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Arbitrum. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),43114:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702 activation (type-4 ignored as 21000). Nick factory present. Vault stack."})});function x(e){return ne[Number(e)]||null}function M(e){return x(e)?.path==="eip7702-delegate"}function T(e){return x(e)?.path==="session-vault"}function z(e){return M(e)||T(e)}var re=/^0x[0-9a-fA-F]{40}$/;function h(e){let t=String(e||"").trim().toLowerCase();if(!re.test(t))throw new Error("session-chain-plan: owner must be a 20-byte address");return C(P([L,t]))}function y(e){return J({opcode:"CREATE2",from:S,salt:h(e),bytecodeHash:m}).toLowerCase()}var b;function se(){if(b)return b;let e=ee(Q(te(import.meta.url)),"../../contracts/session-delegate/vault-creation.hex"),t=Z(e,"utf8").trim().toLowerCase();if(!t.startsWith("0x")||t.length<10)throw new Error("session-chain-plan: vault creation bytecode missing");if(C(t)!==m)throw new Error("session-chain-plan: vault creation bytecode does not match VAULT_INIT_CODE_HASH");return b=t,b}function $(e){let t=h(e);return P([t,se()])}var ae=/^0x[0-9a-fA-F]{40}$/;var k=!0;var Ye=Object.freeze({});function g(e){let t=Number(e);if(!z(t)){let r=x(t)?.evidence||"no session path";throw new Error(`pinned-session-module: chain ${t} refused \u2014 ${r}`)}return t}function oe(e,t){let n=g(e),r=h(t),s=y(t),a=$(t);return Object.freeze({ok:!0,exec:!1,requiresUserSignature:!0,signingReady:!1,userCanSign:!0,broadcastReady:!1,executionReady:!1,chainId:n,stack:"session-vault",from:String(t).trim().toLowerCase(),to:S,value:"0",data:a,salt:r,saltScheme:"keccak256(oracle.session.vault.v1 || owner)",initCodeHash:m,predictedModule:s,bytecodeHash:D,initialize:Object.freeze({status:"blocked",reason:"recovery address not bound \u2014 name a cold key that is not the owner"}),note:"Unsigned CREATE2. Oracle will not broadcast. Fuse still off."})}var ie=(1n<<128n)-1n,ce=720*60*60*1e3;function de({capWei:e,expiresAtMs:t,nowMs:n=Date.now()}={}){let r=p(e??"0","capWei");if(r<=0n||r===ie)throw new Error("pinned-session-module: cap cannot be zero or limitless");let s=Number(t),a=Number(n);if(!Number.isFinite(s)||!Number.isFinite(a)||s<=a)throw new Error("pinned-session-module: expiry must be in the future");if(s-a>ce)throw new Error("pinned-session-module: expiry cannot exceed 30 days");return Object.freeze({ok:!0,capWei:r.toString(),expiresAtMs:s})}var fe=[{type:"function",name:"initialize",stateMutability:"nonpayable",inputs:[{name:"sessionOwner",type:"address"},{name:"sessionAgent",type:"address"},{name:"sessionRecovery",type:"address"},{name:"sessionGuardian",type:"address"},{name:"sessionExpiry",type:"uint48"},{name:"sessionCapWei",type:"uint128"},{name:"sessionDelay",type:"uint48"},{name:"targets",type:"address[]"}],outputs:[]}];function I(e,t){return e==null||String(e).trim()===""?null:c(e,t)}function U(e={}){let t=g(e.chainId),n=I(e.owner,"owner"),r=I(e.recovery,"recovery"),s=I(e.agent,"agent");if(!n)throw new Error("pinned-session-module: owner is required (the user's wallet)");if(!r)throw new Error("pinned-session-module: recovery is required (the user's spare key, never a house default)");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s&&(s===n||s===r))throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=e.delaySeconds==null?3600:Number(e.delaySeconds);if(!Number.isFinite(a)||a<3600||a>720*3600)throw new Error("pinned-session-module: delay must be 1 hour\u201330 days");let i=oe(t,n),l=e.guardian?c(e.guardian,"guardian"):null,d=[];Array.isArray(e.targets)&&e.targets.length&&(d=e.targets.map(Y=>W(Y,{chainId:t,banned:[n,r,s,l]})));let f={ok:!0,optional:!0,defaultOn:!1,exec:!1,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t,owner:n,recovery:r,agent:s||null,guardian:l,predictedModule:i.predictedModule,deploy:i};if(!s||e.capWei==null||e.expiresAtMs==null)return Object.freeze({...f,initialize:Object.freeze({status:"blocked",reason:"agent, cap, and expiry are required \u2014 no house defaults",targets:d}),note:"Optional. Unsigned. User signs. Fuse off."});if(de({capWei:e.capWei,expiresAtMs:e.expiresAtMs,nowMs:e.nowMs}),d.length===0)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let u=Math.floor(Number(e.expiresAtMs)/1e3),q=V({abi:fe,functionName:"initialize",args:[n,s,r,f.guardian||"0x0000000000000000000000000000000000000000",u,BigInt(e.capWei),a,d]});return Object.freeze({...f,initialize:Object.freeze({status:"ready",exec:!1,requiresUserSignature:!0,userCanSign:!0,to:i.predictedModule,data:q,value:"0",targets:d,capWei:String(e.capWei),expiresAtMs:Number(e.expiresAtMs),delaySeconds:a}),userCanSign:!0,note:"Optional. Unsigned deploy + initialize. User wallet signs. Oracle does not broadcast. Fuse off."})}function c(e,t){let n=String(e||"").trim().toLowerCase();if(!ae.test(n))throw new Error(`pinned-session-module: ${t} must be a 20-byte address`);return n}function W(e,{chainId:t,banned:n=[]}={}){let r=c(e,"target");if(r==="0x0000000000000000000000000000000000000000"||n.map(i=>String(i||"").toLowerCase()).includes(r))throw new Error("pinned-session-module: target cannot be owner, recovery, agent, guardian, or zero");if(new Set([...R[Number(t)]||[],...O[Number(t)]||[],...N].map(i=>String(i).toLowerCase())).has(r))throw new Error("pinned-session-module: swap routers are not native-pay targets");return r}var ue=[{type:"function",name:"execute",stateMutability:"payable",inputs:[{name:"target",type:"address"},{name:"value",type:"uint256"},{name:"data",type:"bytes"}],outputs:[]}];function j(e,t){return`${Number(e)}:${c(t,"owner")}`}function F(e={}){if(!k)throw new Error("pinned-session-module: optional vault spend is off");let t=g(e.chainId),n=c(e.owner,"owner"),r=c(e.recovery,"recovery"),s=c(e.agent,"agent");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s===n||s===r)throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=(e.targets||[]).map(u=>c(u,"target"));if(!a.length)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let i=e.guardian?c(e.guardian,"guardian"):null;for(let u of a)W(u,{chainId:t,banned:[n,r,s,i]});let l=y(n),d=Object.freeze({optIn:!0,chainId:t,owner:n,recovery:r,agent:s,vault:l,targets:Object.freeze([...a])}),f=e.store;return f&&typeof f.set=="function"&&f.set(j(t,n),d),d}function le(e={}){let t=e.store;if(!t||typeof t.get!="function")return null;let n=g(e.chainId),r=c(e.owner,"owner");return t.get(j(n,r))||null}function B(e={}){if(!k)throw new Error("pinned-session-module: optional vault spend is off");let t=le(e);if(!t)throw new Error("pinned-session-module: not opted in");let n=c(e.target,"target");if(!t.targets.includes(n))throw new Error("pinned-session-module: target not permitted");let r=p(e.valueWei??"0","valueWei");if(r<0n)throw new Error("pinned-session-module: valueWei must not be negative");let s=V({abi:ue,functionName:"execute",args:[n,r,"0x"]});return Object.freeze({ok:!0,optIn:!0,exec:!1,requiresUserSignature:!0,userCanSign:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t.chainId,from:t.agent,to:t.vault,value:"0",data:s,target:n,valueWei:r.toString(),note:"Unsigned vault.execute. Agent key signs. Oracle does not broadcast."})}var pe=`oracle session-vault \u2014 optional per-user vault (unsigned)
+import{homedir as E}from"node:os";import{join as w}from"node:path";var I=process.env.ORACLE_PUBLIC_DESKTOP==="1",X=I?process.env.ORACLE_CONFIG_DIR||w(E(),".config","oracle"):w(E(),".config","oracle"),xe=I?X:w(E(),".config","mad-desk");var A={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},ge=new Map(Object.values(A).map(e=>[e.chainId,e]));function K(e,t="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${t} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${t} must be a number or decimal string`);return e}throw new Error(`${t} must be a number or decimal string`)}function p(e,t="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${t} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let n=K(e,t);if(n==="")throw new Error(`${t} is required`);if(!/^-?\d+$/.test(n)&&!/^0x[0-9a-fA-F]+$/.test(n))throw new Error(`${t} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(n)}`);try{return BigInt(n)}catch{throw new Error(`${t} must be an integer, got ${JSON.stringify(n)}`)}}var _=Object.freeze({SAFE:"safe",KERNEL_ZERODEV:"kernel-zerodev",BICONOMY_NEXUS:"biconomy-nexus",PERMISSIONLESS_VIEM:"permissionless-viem"}),Ae=Object.freeze(Object.values(_)),_e=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked"}),Ne=1440*60*1e3;var N=["0x000000000022d473030f116ddee9f6b43ac78ba3"],O={4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7","0x1f7d7550b1b028f7571e69a784071f0205fd2efa","0x0bd7d308f8e1639fab988df18a8011f41eacad73","0x5fc5360d0400a0fd4f2af552add042d716f1d168","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x3d4e44eb1374240ce5f1b871ab261cd16335b76a","0x33128a8fc17869897dce68ed026d694621f6fdfd","0x4200000000000000000000000000000000000006","0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5","0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0","0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x61ffe014ba17989e743c5f6cb21bf9697530b21e","0x82af49447d8a07e3bd95bd0d56f35241523fbab1","0xaf88d065e77c8cc2239327c5edb3a432268e5831","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110","0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41","0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6"],1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983","0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2","0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x817997ca8394e26cce3de3a076a4889b27dbf9de","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83","0x779ded0c9e1022225f8e0630b35a9b54be713736","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"]},R={1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983"]};import{encodeFunctionData as V}from"viem";import{keccak256 as C,concat as P,getContractAddress as J}from"viem";import{readFileSync as Z}from"node:fs";import{dirname as Q,join as ee}from"node:path";import{fileURLToPath as te}from"node:url";var S="0x4e59b44847b379578588920ca78fbf26c0b4956c";var L="0x365dc643926d7084c9e2f1ad68eb1a944b3aac8abe83c933aaf40c014579414f",m="0xe776361e49a5ba2c978483b2e2717e45f6fe8577172e6c5e2c1d5b0c7bd34e26",D="0x4360b0c758245b325bea83328c6444f8f4b06355388708bc9ee1dc12092d3c52",ne=Object.freeze({1:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Ethereum Pectra (2025-05-07) activated EIP-7702. https://ethereum.org/roadmap/pectra/7702/"}),10:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC mainnet.optimism.io 2026-08-25: eth_estimateGas type=0x4 \u2192 'EIP-7702 authorization list has invalid fields' (type-4 parsed)."}),56:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC bsc-dataseed.binance.org 2026-08-25: type=0x4 \u2192 'EIP-7702 transaction with empty auth list'."}),137:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Polygon mainnet. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),988:Object.freeze({status:"ready",path:"session-vault",evidence:"No EIP-7702 (type-4 == type-2 21000). Nick factory present. Vault stack."}),999:Object.freeze({status:"ready",path:"session-vault",evidence:"Live RPC: EIP-7702 authorization list not supported. Nick factory present. Vault stack."}),2741:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702-specific RPC behavior; zkSync-family AA. Vault is the portable EVM lock."}),4663:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC rpc.mainnet.chain.robinhood.com 2026-08-25: type-4 empty-auth \u2192 EIP-7702 empty auth list. Nick factory present."}),8453:Object.freeze({status:"draft",path:"eip7702-delegate",evidence:"Foundry 9/9 Prague + committed deployedBytecodeHash. No on-chain module address yet."}),42161:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Arbitrum. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),43114:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702 activation (type-4 ignored as 21000). Nick factory present. Vault stack."})});function x(e){return ne[Number(e)]||null}function M(e){return x(e)?.path==="eip7702-delegate"}function T(e){return x(e)?.path==="session-vault"}function z(e){return M(e)||T(e)}var re=/^0x[0-9a-fA-F]{40}$/;function h(e){let t=String(e||"").trim().toLowerCase();if(!re.test(t))throw new Error("session-chain-plan: owner must be a 20-byte address");return C(P([L,t]))}function y(e){return J({opcode:"CREATE2",from:S,salt:h(e),bytecodeHash:m}).toLowerCase()}var b;function se(){if(b)return b;let e=ee(Q(te(import.meta.url)),"../../contracts/session-delegate/vault-creation.hex"),t=Z(e,"utf8").trim().toLowerCase();if(!t.startsWith("0x")||t.length<10)throw new Error("session-chain-plan: vault creation bytecode missing");if(C(t)!==m)throw new Error("session-chain-plan: vault creation bytecode does not match VAULT_INIT_CODE_HASH");return b=t,b}function $(e){let t=h(e);return P([t,se()])}var ae=/^0x[0-9a-fA-F]{40}$/;var k=!0;var Ye=Object.freeze({});function g(e){let t=Number(e);if(!z(t)){let r=x(t)?.evidence||"no session path";throw new Error(`pinned-session-module: chain ${t} refused \u2014 ${r}`)}return t}function oe(e,t){let n=g(e),r=h(t),s=y(t),a=$(t);return Object.freeze({ok:!0,exec:!1,requiresUserSignature:!0,signingReady:!1,userCanSign:!0,broadcastReady:!1,executionReady:!1,chainId:n,stack:"session-vault",from:String(t).trim().toLowerCase(),to:S,value:"0",data:a,salt:r,saltScheme:"keccak256(oracle.session.vault.v1 || owner)",initCodeHash:m,predictedModule:s,bytecodeHash:D,initialize:Object.freeze({status:"blocked",reason:"recovery address not bound \u2014 name a cold key that is not the owner"}),note:"Unsigned CREATE2. Oracle will not broadcast. Fuse still off."})}var ie=(1n<<128n)-1n,ce=720*60*60*1e3;function de({capWei:e,expiresAtMs:t,nowMs:n=Date.now()}={}){let r=p(e??"0","capWei");if(r<=0n||r===ie)throw new Error("pinned-session-module: cap cannot be zero or limitless");let s=Number(t),a=Number(n);if(!Number.isFinite(s)||!Number.isFinite(a)||s<=a)throw new Error("pinned-session-module: expiry must be in the future");if(s-a>ce)throw new Error("pinned-session-module: expiry cannot exceed 30 days");return Object.freeze({ok:!0,capWei:r.toString(),expiresAtMs:s})}var fe=[{type:"function",name:"initialize",stateMutability:"nonpayable",inputs:[{name:"sessionOwner",type:"address"},{name:"sessionAgent",type:"address"},{name:"sessionRecovery",type:"address"},{name:"sessionGuardian",type:"address"},{name:"sessionExpiry",type:"uint48"},{name:"sessionCapWei",type:"uint128"},{name:"sessionDelay",type:"uint48"},{name:"targets",type:"address[]"}],outputs:[]}];function v(e,t){return e==null||String(e).trim()===""?null:c(e,t)}function U(e={}){let t=g(e.chainId),n=v(e.owner,"owner"),r=v(e.recovery,"recovery"),s=v(e.agent,"agent");if(!n)throw new Error("pinned-session-module: owner is required (the user's wallet)");if(!r)throw new Error("pinned-session-module: recovery is required (the user's spare key, never a house default)");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s&&(s===n||s===r))throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=e.delaySeconds==null?3600:Number(e.delaySeconds);if(!Number.isFinite(a)||a<3600||a>720*3600)throw new Error("pinned-session-module: delay must be 1 hour\u201330 days");let i=oe(t,n),l=e.guardian?c(e.guardian,"guardian"):null,d=[];Array.isArray(e.targets)&&e.targets.length&&(d=e.targets.map(Y=>W(Y,{chainId:t,banned:[n,r,s,l]})));let f={ok:!0,optional:!0,defaultOn:!1,exec:!1,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t,owner:n,recovery:r,agent:s||null,guardian:l,predictedModule:i.predictedModule,deploy:i};if(!s||e.capWei==null||e.expiresAtMs==null)return Object.freeze({...f,initialize:Object.freeze({status:"blocked",reason:"agent, cap, and expiry are required \u2014 no house defaults",targets:d}),note:"Optional. Unsigned. User signs. Fuse off."});if(de({capWei:e.capWei,expiresAtMs:e.expiresAtMs,nowMs:e.nowMs}),d.length===0)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let u=Math.floor(Number(e.expiresAtMs)/1e3),q=V({abi:fe,functionName:"initialize",args:[n,s,r,f.guardian||"0x0000000000000000000000000000000000000000",u,BigInt(e.capWei),a,d]});return Object.freeze({...f,initialize:Object.freeze({status:"ready",exec:!1,requiresUserSignature:!0,userCanSign:!0,to:i.predictedModule,data:q,value:"0",targets:d,capWei:String(e.capWei),expiresAtMs:Number(e.expiresAtMs),delaySeconds:a}),userCanSign:!0,note:"Optional. Unsigned deploy + initialize. User wallet signs. Oracle does not broadcast. Fuse off."})}function c(e,t){let n=String(e||"").trim().toLowerCase();if(!ae.test(n))throw new Error(`pinned-session-module: ${t} must be a 20-byte address`);return n}function W(e,{chainId:t,banned:n=[]}={}){let r=c(e,"target");if(r==="0x0000000000000000000000000000000000000000"||n.map(i=>String(i||"").toLowerCase()).includes(r))throw new Error("pinned-session-module: target cannot be owner, recovery, agent, guardian, or zero");if(new Set([...R[Number(t)]||[],...O[Number(t)]||[],...N].map(i=>String(i).toLowerCase())).has(r))throw new Error("pinned-session-module: swap routers are not native-pay targets");return r}var ue=[{type:"function",name:"execute",stateMutability:"payable",inputs:[{name:"target",type:"address"},{name:"value",type:"uint256"},{name:"data",type:"bytes"}],outputs:[]}];function j(e,t){return`${Number(e)}:${c(t,"owner")}`}function F(e={}){if(!k)throw new Error("pinned-session-module: optional vault spend is off");let t=g(e.chainId),n=c(e.owner,"owner"),r=c(e.recovery,"recovery"),s=c(e.agent,"agent");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s===n||s===r)throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=(e.targets||[]).map(u=>c(u,"target"));if(!a.length)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let i=e.guardian?c(e.guardian,"guardian"):null;for(let u of a)W(u,{chainId:t,banned:[n,r,s,i]});let l=y(n),d=Object.freeze({optIn:!0,chainId:t,owner:n,recovery:r,agent:s,vault:l,targets:Object.freeze([...a])}),f=e.store;return f&&typeof f.set=="function"&&f.set(j(t,n),d),d}function le(e={}){let t=e.store;if(!t||typeof t.get!="function")return null;let n=g(e.chainId),r=c(e.owner,"owner");return t.get(j(n,r))||null}function B(e={}){if(!k)throw new Error("pinned-session-module: optional vault spend is off");let t=le(e);if(!t)throw new Error("pinned-session-module: not opted in");let n=c(e.target,"target");if(!t.targets.includes(n))throw new Error("pinned-session-module: target not permitted");let r=p(e.valueWei??"0","valueWei");if(r<0n)throw new Error("pinned-session-module: valueWei must not be negative");let s=V({abi:ue,functionName:"execute",args:[n,r,"0x"]});return Object.freeze({ok:!0,optIn:!0,exec:!1,requiresUserSignature:!0,userCanSign:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t.chainId,from:t.agent,to:t.vault,value:"0",data:s,target:n,valueWei:r.toString(),note:"Unsigned vault.execute. Agent key signs. Oracle does not broadcast."})}var pe=`oracle session-vault \u2014 optional per-user vault (unsigned)
 
   oracle session-vault prepare ...
   oracle session-vault spend --chain <id> --owner 0x --recovery 0x --agent 0x \\