@oracle-agent/oracle 0.35.34 → 0.35.36

package/dist/local-signer/index.mjs

@@ -1,3 +1,3 @@
-import{createHash as lo,randomBytes as fo,timingSafeEqual as po}from"node:crypto";import{base58 as Vt}from"@scure/base";import{Interface as Mt}from"ethers";import{Interface as gr,MaxUint256 as yr,isAddress as br,keccak256 as ki,toUtf8Bytes as Ni}from"ethers";import{Interface as wr,isAddress as ui}from"ethers";import{isAddress as ni}from"ethers";import{createHash as ar,createHmac as sr,timingSafeEqual as cr}from"node:crypto";import{readFileSync as rr}from"node:fs";import{homedir as nr}from"node:os";import{join as he}from"node:path";function or(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=nr();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||he(r,".config","oracle")).trim();return[e,he(t,"exec.env")].filter(Boolean)}return[e,he(r,".config","oracle","exec.env"),he(r,".config","mad-desk","exec.env")].filter(Boolean)}function ie(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let o of or())try{let i=rr(o,"utf8"),a=i.match(new RegExp(`^${r}=(.*)$`,"m"))||i.match(new RegExp(`^${t}=(.*)$`,"m"));if(a&&(n=a[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function Z(e,r,t="guard"){if(typeof r!="number"||!Number.isFinite(r))throw new Error(`${t}: current time must be a finite number (got ${ir(r)})`);let n=r,o=Number(e?.issuedAtMs),i=Number(e?.expiresAtMs);if(!Number.isFinite(i))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>i)throw new Error(`${t} expired at ${i}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(o))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(i<=o)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:o,expiresAtMs:i}}function ir(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var We=100;function ve(e){return Array.isArray(e)?`[${e.map(ve).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${ve(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function ur(e,{required:r=!1}={}){try{return ie(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function dr(e){let{signature:r,...t}=e;return t}function lr(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return ar("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function fr(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:cr(t,n)}function pr(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let i=10;i+64<=r.length;i+=64)n.push(r.slice(i,i+64));let o=i=>n[i]==null?null:BigInt("0x"+n[i]);switch(t){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+4)}case"0xb858183f":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}function Te(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:o,tx:i,requireSigned:a=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let l=ur(o,{required:a});if(a&&!l)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(l){let p=sr("sha256",l).update(ve(dr(e))).digest("hex");if(!fr(e.signature,p))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let c=Number(e.selectedBps),s=Number(e.capBps);if(!Number.isInteger(c)||c<0||c>We)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(s)||s<0||s>We||c>s)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{Z({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(p){throw new Error(`${p.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let d=BigInt(e.quoteAmountOut??0),u=BigInt(e.minAmountOut??0);if(d<=0n||u<=0n)throw new Error("auto-slippage guard amounts must be positive");let w=d*BigInt(1e4-c),f=w/10000n;if(w%10000n!==0n&&(f+=1n),u<f)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(i?.data&&e.minAmountOut!=null){let p=pr(i.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==lr(i.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(p!=null&&p!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${p}, not the guard floor ${e.minAmountOut}`)}else{if(p==null){let m=String(i.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${m}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(p!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${p}`)}}return!0}var pi=new wr(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as hr,isAddress as hi}from"ethers";var xi=new hr(["function approve(address spender,uint256 amount) returns (bool)"]),Ei=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function T(e,r="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${r} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${r} must be a number or decimal string`);return e}throw new Error(`${r} must be a number or decimal string`)}function L(e,r="value"){if(typeof e!="string"||e==="")throw new Error(`${r} must be a string`);return e}function W(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=T(e,r);if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}function _(e,r="amount"){let t=W(e,r);if(t<=0n)throw new Error(`${r} must be positive`);return t}function I(e,r,t="amount"){let n=T(e,t);if(!/^-?\d*(\.\d+)?$/.test(n)||n===""||n==="."||n==="-")throw new Error(`${t} must be a decimal number, got ${JSON.stringify(n)}`);let o=n.startsWith("-"),i=o?n.slice(1):n,[a="0",l=""]=i.split(".");if(l.length>r)throw new Error(`${t} has more than ${r} decimal places, which would lose precision`);let c=BigInt((a||"0")+l.padEnd(r,"0"));return o?-c:c}var Fi=new gr(["function approve(address spender,uint256 amount) returns (bool)"]);function He(e,r){let t=String(e||"").trim();if(!br(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function xr(e,r="approval amount",{allowZero:t=!1}={}){let n=W(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=yr)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var ze=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),Er=new Set(["0x39509351","0xf9255c1f"]);function Y(e){let r=String(e||"").toLowerCase();return r.length<10?!1:ze.has(r.slice(0,10))}function Je(e){if(!Y(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],o=s=>n[s]?"0x"+n[s].slice(24):null,i=s=>n[s]?BigInt("0x"+n[s]):null,a=null,l=null,c=null;switch(t){case"0x095ea7b3":case"0x39509351":a=o(0),l=i(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":c=o(0),a=o(1),l=i(2);break;case"0xd505accf":a=o(1),l=i(2);break;case"0x8fcbaf0c":{a=o(1),l=i(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":c=o(0),a=o(1),l=i(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(a==null||l==null)throw new Error("invalid approve calldata");return{spender:He(a,"approval spender"),token:c==null?null:He(c,"approval token"),amount:xr(l,"approval amount",{allowZero:!0}),selector:t,additive:Er.has(t)}}import{createHash as Ar,createHmac as Ri,timingSafeEqual as Di}from"node:crypto";var Sr=2,Ie=300*1e3,Ge=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function vr(e){let r=e==null||e===""?Ie:Number(e);return!Number.isFinite(r)||r<0?Ie:Math.min(r,Ge)}function Oe(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(Oe).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${Oe(e[t])}`).join(",")}}`}function Tr(e){let{prepareHash:r,prepareMac:t,note:n,...o}=e||{};return o}function Ir(e){let r=Tr(e);return Ar("sha256").update(Oe(r)).digest("hex")}function Ve(e,{maxAgeMs:r=Ie,nowMs:t=Date.now(),providers:n=null,kinds:o=null,label:i="operator"}={}){if(!e||typeof e!="object")throw new Error(`${i}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${i}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==Sr)throw new Error(`${i}: unsupported prepareVersion ${e.prepareVersion}`);let a=Ir(e);if(String(e.prepareHash||"")!==a)throw new Error(`${i}: prepareHash mismatch \u2014 payload was altered after prepare`);let l=Number(e.preparedAt),c=Number(e.expiresAt),s=vr(r),d=t-l,u=c-l;if(!Number.isFinite(d)||!Number.isFinite(c)||!Number.isFinite(u)||d<0||u<=0||u>Ge||d>s||t>=c)throw new Error(`${i}: prepare envelope expired or clock-skewed (ageMs=${d}, max=${s})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${i}: provider ${e.provider} not allowed here`);if(o&&!new Set(o).has(e.kind))throw new Error(`${i}: kind ${e.kind} not allowed here`);return!0}var ae=e=>String(e||"").toLowerCase(),Or=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","authorizationList","slippageBps","expiresAtMs"]),kr=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function J(e){try{return kr.has(BigInt(e))}catch{return!1}}var B=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Ye=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},ee=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function ge(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:o=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(f=>!Or.has(f)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2,4].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");if(Number(e.type)===4){if(!Array.isArray(e.authorizationList)||e.authorizationList.length===0||e.authorizationList.length>8)throw new Error("policy: type-4 requires 1-8 authorizationList entries");for(let[f,p]of e.authorizationList.entries()){if(!p||typeof p!="object")throw new Error(`policy: authorizationList[${f}] required`);ee(p.address,r.destinations,"destination",ae);try{if(BigInt(p.chainId)!==BigInt(e.chainId))throw new Error("policy: type-4 authorization chainId must match transaction")}catch(m){throw String(m?.message||"").includes("authorization chainId")?m:new Error("policy: type-4 authorization chainId must match transaction")}}if(String(e.data||"0x").toLowerCase()!=="0x")throw new Error("policy: type-4 calldata must be empty");if(B(e.value,"value")!==0n)throw new Error("policy: type-4 cannot transfer native value")}else if(e.authorizationList!=null)throw new Error("policy: authorizationList is only valid on type-4");let i=(f,p)=>{try{return BigInt(f)===BigInt(p)}catch{return String(f)===String(p)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(f=>i(f,e.chainId)))throw new Error("policy: chain not allowed");if(ee(e.to,r.destinations,"destination",ae),ee(String(e.data||"0x").slice(0,10),r.selectors,"selector",f=>String(f).toLowerCase()),ee(e.from,r.owners,"owner",ae),Y(e.data)){let f;try{f=Je(e.data)}catch(m){throw new Error(`policy: malformed approval calldata: ${m?.message||m}`)}ee(f.spender,r.spenders,"spender",ae),ee(f.token||e.to,r.erc20Tokens,"ERC-20 token",ae);let p=B(r.maxApproval,"maxApproval");if(BigInt(f.amount)>p)throw new Error("policy: approval exceeds cap");if(f.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if(B(e.value,"value")>B(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let a=B(e.gasLimit,"gasLimit");if(a>B(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let l=e.maxFeePerGas??e.gasPrice,c=B(l,"feePerGas")*a,s=0n;try{if(J(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(s+=B(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(s+=B(e.operatorFeeWei,"operatorFeeWei")),J(e.chainId)&&(o||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let f=B(n.l1FeeWei,"estimated l1FeeWei")+B(n.operatorFeeWei,"estimated operatorFeeWei");if(s<f)throw new Error("policy: rollup fee attestation understates estimate")}if(c+s>B(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let u=Ye(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>u)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let w=Ye(r.maxTtlMs??12e4,"maxTtlMs");if(w<=0||e.expiresAtMs-t>w)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as Ke}from"node:crypto";import{Address as Nr,NETWORK as Pr,OutScript as Xe,RawTx as Cr,SigHash as Qe,TEST_NETWORK as Lr,Transaction as _r}from"@scure/btc-signer";var Ze=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Br=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},Fr=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,$r=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),K=e=>$r(e)?String(e).toLowerCase():String(e),ke=(e,r)=>Array.isArray(r)&&r.some(t=>K(t)===K(e)),Mr=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function Rr(e){let r=Buffer.from(Cr.encode(e)),t=Ke("sha256").update(r).digest();return Buffer.from(Ke("sha256").update(t).digest()).reverse().toString("hex")}function Dr(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(Rr(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!Mr(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function qr(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(u=>!["network","psbt"].includes(u)))throw new Error("envelope: unexpected BTC artifact field");if(!ke(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?Pr:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?Lr:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let o;try{o=_r.fromPSBT(Br(t.psbt,"PSBT"))}catch(u){throw new Error(`envelope: invalid PSBT: ${u?.message||u}`)}if(o.inputsLength===0||o.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let i=Nr(n);for(let u=0;u<o.inputsLength;u++){let w=o.getInput(u);for(let m of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(Fr(w[m]))throw new Error("envelope: signed or finalized PSBT refused");if(w.sighashType!==void 0&&w.sighashType!==Qe.DEFAULT&&w.sighashType!==Qe.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let f=Dr(w),p;try{let m=Xe.decode(f.script);if(!["wpkh"].includes(m.type))throw new Error("unsupported input");p=i.encode(m)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!ke(p,r.owners)||K(p)!==K(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let a=new Set([e.owner,...r.changeAddresses||[]].map(u=>K(u))),l=0n,c=!1,s=[];for(let u=0;u<o.outputsLength;u++){let w=o.getOutput(u),f;try{f=i.encode(Xe.decode(w.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let p=K(f);if(s.push(`${f}:${w.amount}`),p===K(e.destination)){c=!0,l+=w.amount;continue}if(ke(f,r.destinations)){l+=w.amount;continue}if(!a.has(p))throw new Error("policy: Bitcoin output destination not allowed")}if(!c)throw new Error("envelope: Bitcoin destination mismatch");let d;try{d=o.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(d<0n||d>Ze(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(l>Ze(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:l.toString(),notional:(l+d).toString(),fee:d.toString(),outputs:Object.freeze(s)})}function et(e,r){let{unit:t,value:n,notional:o,fee:i}=qr(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}import{createHash as Pe}from"node:crypto";import{base58 as at}from"@scure/base";import{getCompiledTransactionMessageDecoder as jr}from"@solana/transaction-messages";var Ce="11111111111111111111111111111111",Ur="ComputeBudget111111111111111111111111111111",Wr="So11111111111111111111111111111111111111112",st="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";var ct="ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",Hr=5000n,zr=2039280n,Jr=37095705934669439343138083508754565189542113879843219016388785533085940283555n,P=57896044618658097711785492504343953926634992332820282019728792003956564819949n,tt=19681161376707505956807079304988542015446066515923890162744021073123829784752n,rt=e=>Pe("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Gr=new Map([[rt("route"),{name:"route",prefixBytes:0}],[rt("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]),$=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Vr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},H=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e)),R=e=>String(e||""),Yr=e=>Array.isArray(e.solMints)&&e.solMints.length?e.solMints:e.tokens,be=e=>Pe("sha256").update(e).digest("hex");function ye(e,r){try{let t=Buffer.from(at.decode(String(e||"")));if(t.length!==32)throw new Error("wrong length");return t}catch{throw new Error(`envelope: invalid Solana ${r}`)}}function F(e){let r=e%P;return r>=0n?r:P+r}function j(e,r){let t=e;for(;r-- >0n;)t=t*t%P;return t}function Kr(e){let t=e*e%P*e%P,n=j(t,2n)*t%P,o=j(n,1n)*e%P,i=j(o,5n)*o%P,a=j(i,10n)*i%P,l=j(a,20n)*a%P,c=j(l,40n)*l%P,s=j(c,80n)*c%P,d=j(s,80n)*c%P,u=j(d,10n)*i%P;return j(u,2n)*e%P}function Xr(e,r){let t=F(r*r*r),n=F(t*t*r),o=Kr(e*n),i=F(e*t*o),a=F(r*i*i),l=i,c=F(i*tt),s=a===e,d=a===F(-e),u=a===F(-e*tt);return s&&(i=l),(d||u)&&(i=c),(F(i)&1n)===1n&&(i=F(-i)),!s&&!d?null:i}function Qr(e){if(!e||e.length!==32)return!1;let r=0n;for(let o=31;o>=0;o--)r=(r<<8n)+BigInt(o===31?e[o]&127:e[o]);let t=F(r*r),n=Xr(F(t-1n),F(Jr*t+1n));return n===null?!1:!(n===0n&&(e[31]&128)!==0)}function Zr(e,r){let t=Buffer.concat([...e,ye(r,"program id"),Buffer.from("ProgramDerivedAddress")]),n=Pe("sha256").update(t).digest();if(Qr(n))throw new Error("envelope: derived Solana program address is on curve");return at.encode(n)}function Le(e,r,t=st){let n=[ye(e,"owner"),ye(t,"token program"),ye(r,"mint")];for(let o=255;o>=0;o--)try{return Zr([...n,Buffer.from([o])],ct)}catch(i){if(!/on curve/.test(String(i?.message||i)))throw i}throw new Error("envelope: unable to derive associated token account")}function en(e,r){return(r.accountIndices||[]).map(t=>R(e.staticAccounts[t]))}function se(e){return Buffer.from(e.data||[])}function tn(e,r){return R(e.staticAccounts[r.programAddressIndex])}function ut(e,r){return Number(r)<e.header.numSignerAccounts}function rn(e,r){let t=e.header.numSignerAccounts,n=e.header.numReadonlySignerAccounts,o=e.header.numReadonlyNonSignerAccounts,i=e.staticAccounts.length;return Number(r)<t?Number(r)<t-n:Number(r)<i-o}function ce(e){return e.accountIndices||[]}function Ne(e,r){if(!Array.isArray(e)||!e.length)throw new Error(`policy: ${r} allowlist required`);return e.map(String)}function nt(e,r){let t=ce(r).map(n=>{let o=ut(e,n)?"s":"n",i=rn(e,n)?"w":"r";return`${n}:${R(e.staticAccounts[n])}:${o}:${i}`});return be(Buffer.from(t.join(`
-`)))}function ot(e,r,t){if(r+8>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readBigUInt64LE(r)}function nn(e,r,t){if(r+2>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt16LE(r)}function on(e,r,t){if(r+4>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt32LE(r)}function an(e,r,t){let n=t.maxJupiterRoutePlanSteps===void 0?1:Number(t.maxJupiterRoutePlanSteps);if(!Number.isSafeInteger(n)||n<1)throw new Error("policy: maxJupiterRoutePlanSteps must be a positive integer");if(r<1||r>n)throw new Error("policy: Jupiter route-plan step count exceeds reviewed cap");let o=Array.isArray(t.jupiterRouteVariants)?t.jupiterRouteVariants.map(Number):[];if(!o.length)throw new Error("policy: Jupiter route variant allowlist required");let i=t.jupiterRouteVariantPayloadBytes||{},a=0,l=0,c=[];for(let s=0;s<r;s++){if(a>=e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let d=e[a++];if(!o.includes(d))throw new Error("policy: Jupiter route variant not allowed");if(!Object.hasOwn(i,String(d)))throw new Error("policy: Jupiter route variant payload size required");let u=Number(i[String(d)]);if(!Number.isSafeInteger(u)||u<0||u>16)throw new Error("policy: Jupiter route variant payload size invalid");if(a+u+3>e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let w=e.subarray(a,a+u);a+=u;let f=w.toString("hex"),p=t.jupiterRouteVariantPayloads?.[String(d)];if(!Array.isArray(p)||!p.map(String).includes(f))throw new Error("policy: Jupiter route variant payload not allowed");let m=e[a++],h=e[a++],g=e[a++];if(m<1||m>100)throw new Error("envelope: Jupiter route-plan percent invalid");if(h!==s||g!==s+1)throw new Error("envelope: unsupported Jupiter route-plan token index");l+=m,c.push(Object.freeze({swapVariant:d,variantPayloadHex:f,percent:m,inputIndex:h,outputIndex:g}))}if(a!==e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");if(l!==100*r)throw new Error("envelope: Jupiter route-plan percent total mismatch");return Object.freeze(c)}function sn(e,r){let t=se({data:e}),n=t.subarray(0,8).toString("hex"),o=Gr.get(n);if(!o)throw new Error("envelope: unsupported Jupiter instruction discriminator");let i=19,a=o.prefixBytes===1?t[8]:null;if(o.prefixBytes===1&&t.length<9)throw new Error("envelope: malformed Jupiter shared route payload");let l=8+o.prefixBytes,c=l+4,s=t.length-i;if(s<=c)throw new Error("envelope: malformed Jupiter route payload");let d=on(t,l,"route plan length"),u=t.subarray(c,s),w=an(u,d,r);return Object.freeze({instruction:o.name,routeId:a,routePlanSteps:d,routePlan:w,routePlanHash:be(u),inAmount:ot(t,s,"in_amount"),quotedOutAmount:ot(t,s+8,"quoted_out_amount"),slippageBps:nn(t,s+16,"slippage_bps"),platformFeeBps:t[s+18],instructionHash:be(t)})}function cn(e,r,t){let n=en(e,r),o=(i,a)=>{let l=n[i];if(!l)throw new Error(`envelope: Jupiter ${a} account missing`);return l};if(t.instruction==="route"){if(n.length<9)throw new Error("envelope: Jupiter route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),userTransferAuthority:o(1,"userTransferAuthority"),userSourceTokenAccount:o(2,"userSourceTokenAccount"),userDestinationTokenAccount:o(3,"userDestinationTokenAccount"),destinationTokenAccount:o(4,"destinationTokenAccount"),destinationMint:o(5,"destinationMint"),platformFeeAccount:o(6,"platformFeeAccount"),eventAuthority:o(7,"eventAuthority"),program:o(8,"program")}}if(t.instruction==="shared_accounts_route"){if(n.length<13)throw new Error("envelope: Jupiter shared route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),programAuthority:o(1,"programAuthority"),userTransferAuthority:o(2,"userTransferAuthority"),userSourceTokenAccount:o(3,"sourceTokenAccount"),programSourceTokenAccount:o(4,"programSourceTokenAccount"),programDestinationTokenAccount:o(5,"programDestinationTokenAccount"),userDestinationTokenAccount:o(6,"destinationTokenAccount"),sourceMint:o(7,"sourceMint"),destinationMint:o(8,"destinationMint"),platformFeeAccount:o(9,"platformFeeAccount"),token2022Program:o(10,"token2022Program"),eventAuthority:o(11,"eventAuthority"),program:o(12,"program")}}throw new Error("envelope: unsupported Jupiter account layout")}function it(e,r){return e&&e!==r?e:null}function M(e,r,t){let n=R(e.staticAccounts[r]);if(!n)throw new Error(`envelope: Jupiter ${t} missing`);return n}function un(e,r){let t=se(e);if(t.length===5&&t[0]===2){let n=t.readUInt32LE(1),o=r.maxComputeUnits===void 0?14e5:Number(r.maxComputeUnits);if(!Number.isSafeInteger(o)||o<=0)throw new Error("policy: maxComputeUnits must be positive");if(n>o)throw new Error("policy: Jupiter compute unit limit exceeds cap");return 0n}throw t.length===9&&t[0]===3?new Error("policy: Jupiter priority fee not allowed"):new Error("envelope: unsupported Jupiter compute-budget helper")}function dn(e,r,t,n,o,i){let a=se(r);if(a.length!==1||a[0]!==1)throw new Error("envelope: unsupported Jupiter ATA helper");let l=ce(r);if(l.length!==6)throw new Error("envelope: malformed Jupiter ATA helper");let c=M(e,l[0],"ATA payer"),s=M(e,l[1],"ATA account"),d=M(e,l[2],"ATA owner"),u=M(e,l[3],"ATA mint"),w=M(e,l[4],"ATA system program"),f=M(e,l[5],"ATA token program");if(c!==t.owner)throw new Error("envelope: Jupiter ATA payer must equal owner");if(d!==t.owner)throw new Error("envelope: Jupiter ATA owner must equal owner");if(w!==Ce)throw new Error("envelope: Jupiter ATA system program mismatch");if(f!==o)throw new Error("envelope: Jupiter ATA token program mismatch");if(u!==n.inputMint&&u!==n.outputMint)throw new Error("envelope: Jupiter ATA mint mismatch");if(s!==Le(t.owner,u,o))throw new Error("envelope: Jupiter ATA account mismatch");return{ata:s,debit:i}}function ln(e,r,t,n,o){let i=ce(r),a=se(r);if(i.length!==2||a.length!==12||a.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Jupiter system helper");let l=M(e,i[0],"wrap payer"),c=M(e,i[1],"wrap target"),s=a.readBigUInt64LE(4);if(l!==t.owner||c!==n)throw new Error("envelope: unsupported Jupiter wrap transfer");if(s!==o)throw new Error("envelope: Jupiter wrap transfer amount mismatch");return s}function fn(e,r,t,n){let o=ce(r),i=se(r);if(i.length!==1)throw new Error("envelope: unsupported Jupiter token helper");if(i[0]===17){if(o.length!==1||M(e,o[0],"syncNative account")!==n)throw new Error("envelope: Jupiter syncNative account mismatch");return{kind:"syncNative"}}if(i[0]===9){if(o.length!==3)throw new Error("envelope: malformed Jupiter closeAccount helper");let a=M(e,o[0],"closeAccount source"),l=M(e,o[1],"closeAccount destination"),c=M(e,o[2],"closeAccount authority");if(a!==n||l!==t.owner||c!==t.owner)throw new Error("envelope: Jupiter closeAccount must return to owner");return{kind:"closeAccount"}}throw new Error("envelope: unsupported Jupiter token helper")}function pn(e,r,t,n,o,i,a){let l=Le(r.owner,r.artifact.inputMint,a);if(o.userSourceTokenAccount!==l)throw new Error("envelope: Jupiter source token account is not owner ATA");let c=$(t.jupiterAtaRentLamports,"jupiterAtaRentLamports");if(c<zr)throw new Error("policy: Jupiter ATA rent below the token-account rent-exempt minimum");let s=new Map,d=0n,u=!1,w=!1;for(let f of e.instructions){if(f===n)continue;let p=tn(e,f);if(p===Ur)un(f,t);else if(p===ct){let{ata:m,debit:h}=dn(e,f,r,r.artifact,a,c);s.set(m,h)}else if(p===Ce)d+=ln(e,f,r,l,i);else if(p===a){let m=fn(e,f,r,l);m.kind==="syncNative"&&(u=!0),m.kind==="closeAccount"&&(w=!0)}else throw new Error("envelope: unsupported Jupiter helper instruction")}if(d>0n&&(!u||!w))throw new Error("envelope: Jupiter native wrap helpers incomplete");if(d!==0n&&d!==i)throw new Error("envelope: Jupiter native wrap amount mismatch");return[...s.values()].reduce((f,p)=>f+p,0n)}function mn(e){let r;try{r=jr().decode(Vr(e.messageBase64,"Solana message"))}catch(t){throw new Error(`envelope: invalid Solana message: ${t?.message||t}`)}if(r.version!=="legacy"&&Array.isArray(r.addressTableLookups)&&r.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");return r}function wn(e,r,t){if(e.header.numSignerAccounts!==1||R(e.staticAccounts[0])!==r.owner||!H(r.owner,t.owners))throw new Error("envelope: Solana owner mismatch");if(!Array.isArray(e.instructions)||e.instructions.length===0)throw new Error("envelope: Solana instructions required");let n=[];for(let o of e.instructions){let i=R(e.staticAccounts[o.programAddressIndex]);if(!i||!H(i,t.programs))throw new Error("policy: Solana program not allowed");n.push(i)}return n}function hn(e,r,t){let n=$(t.lamportsPerSignature,"lamportsPerSignature");if(n<Hr)throw new Error("policy: Solana per-signature fee is below the network minimum");let o=t.maxLamportsPerSignature===void 0?n:$(t.maxLamportsPerSignature,"maxLamportsPerSignature");if(n>o)throw new Error("policy: Solana per-signature fee exceeds cap");let i=BigInt(e.header.numSignerAccounts),a=i*n,l=i*o;if(r.exactFeeLamports!==void 0){let s=$(r.exactFeeLamports,"exactFeeLamports");if(s<a)throw new Error("policy: Solana exact fee below the base signature fee");if(s>l)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let c=l;if(c>$(t.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return c}function gn(e,r,t,n){let o=0n,i=!1;for(let a of e.instructions){if(R(e.staticAccounts[a.programAddressIndex])!==Ce)throw new Error("envelope: unsupported Solana program decoder");let c=a.accountIndices||[];if(c.length!==2||R(e.staticAccounts[c[0]])!==r.owner)throw new Error("envelope: Solana transfer owner mismatch");let s=R(e.staticAccounts[c[1]]);if(s!==r.destination||!H(s,t.destinations))throw new Error("envelope: Solana destination mismatch");let d=Buffer.from(a.data||[]);if(d.length!==12||d.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");o+=d.readBigUInt64LE(4),i=!0}if(!i)throw new Error("envelope: Solana destination mismatch");if(o>$(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:o,programs:n}}function yn(e,r,t,n){let o=r.artifact;if(o.provider!=="jupiter")throw new Error("envelope: Solana swap provider must be jupiter");if(o.inputMint!==Wr)throw new Error("envelope: Jupiter local signer requires native SOL input");if(o.outputMint!==r.destination||!H(o.outputMint,t.destinations))throw new Error("envelope: Jupiter output mint destination mismatch");let i=Yr(t);if(!H(o.inputMint,i)||!H(o.outputMint,i))throw new Error("policy: Solana token not allowed");let a=$(o.inAmount,"inAmount"),l=$(o.outAmount,"outAmount"),c=$(o.otherAmountThreshold,"otherAmountThreshold");if(a<=0n||a>$(t.maxPerTradeLamports,"maxPerTradeLamports"))throw new Error("policy: Solana swap amount exceeds per-trade cap");if(a>$(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");if(l<=0n||c<=0n||c>l)throw new Error("envelope: Jupiter quote floor invalid");if(Number(o.slippageBps)!==Number(r.slippageBps))throw new Error("policy: Solana slippage mismatch");let s=R(o.jupiterProgram);if(!s||!H(s,t.programs)||!n.includes(s))throw new Error("policy: Jupiter program not allowed or absent");let d=e.instructions.filter(A=>R(e.staticAccounts[A.programAddressIndex])===s);if(d.length!==1)throw new Error("envelope: exactly one Jupiter swap instruction required");let u=d[0],w=sn(u.data,t);if(w.instruction==="shared_accounts_route"){let A=Array.isArray(t.jupiterSharedRouteIds)?t.jupiterSharedRouteIds.map(Number):[];if(!A.length)throw new Error("policy: Jupiter shared route id allowlist required");if(!A.includes(Number(w.routeId)))throw new Error("policy: Jupiter shared route id not allowed")}else if(w.routeId!=null)throw new Error("envelope: unexpected Jupiter shared route id");if(!Ne(t.jupiterRoutePlanHashes,"Jupiter route-plan hash").includes(w.routePlanHash))throw new Error("policy: Jupiter route-plan hash not allowed");if(w.inAmount!==a)throw new Error("envelope: Jupiter route in_amount mismatch");if(w.quotedOutAmount!==l)throw new Error("envelope: Jupiter route quoted_out_amount mismatch");if(w.slippageBps!==Number(o.slippageBps))throw new Error("envelope: Jupiter route slippage mismatch");let f=w.quotedOutAmount-w.quotedOutAmount*BigInt(w.slippageBps)/10000n;if(c!==f)throw new Error("envelope: Jupiter otherAmountThreshold does not match serialized min-out");if(w.platformFeeBps!==0)throw new Error("policy: Jupiter platform fee not allowed");let p=cn(e,u,w),m=ce(u),h=w.instruction==="shared_accounts_route"?2:1;if(!ut(e,m[h]))throw new Error("envelope: Jupiter transfer authority must be signer");if(p.program!==s)throw new Error("envelope: Jupiter program account mismatch");if(p.userTransferAuthority!==r.owner)throw new Error("envelope: Jupiter transfer authority must equal owner");if(p.destinationMint!==o.outputMint)throw new Error("envelope: Jupiter destination mint mismatch");if(p.sourceMint!==void 0&&p.sourceMint!==o.inputMint)throw new Error("envelope: Jupiter source mint mismatch");let g=Array.isArray(t.tokenPrograms)&&t.tokenPrograms.length?t.tokenPrograms:[st];if(!H(p.tokenProgram,g))throw new Error("policy: Solana token program not allowed");let E=Le(r.owner,o.outputMint,p.tokenProgram);if(p.userDestinationTokenAccount!==E)throw new Error("envelope: Jupiter destination token account is not owner ATA");let x=it(p.destinationTokenAccount,s);if(x&&x!==E)throw new Error("envelope: Jupiter optional destination account redirects proceeds");if(it(p.platformFeeAccount,s))throw new Error("policy: Jupiter platform fee account not allowed");if(!Ne(t.jupiterRouteAccountHashes,"Jupiter route account hash").includes(nt(e,u)))throw new Error("policy: Jupiter route account hash not allowed");let v=be(Buffer.from([w.instruction,w.routeId??"",w.routePlanHash,nt(e,u)].join(`
-`)));if(!Ne(t.jupiterRouteReviewHashes,"Jupiter route review hash").includes(v))throw new Error("policy: Jupiter route review hash not allowed");let k=pn(e,r,t,u,p,a,p.tokenProgram),N=a+k;if(N>$(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:N,programs:n}}function bn(e,r){if(e.action!=="transfer"&&e.action!=="swap")throw new Error("envelope: Solana decoder requires transfer or swap action");let t=e?.artifact,n=e.action==="transfer"?["cluster","messageBase64","exactFeeLamports"]:["cluster","provider","messageBase64","exactFeeLamports","inputMint","outputMint","inAmount","outAmount","otherAmountThreshold","slippageBps","jupiterProgram"];if(Object.keys(t||{}).some(c=>!n.includes(c)))throw new Error("envelope: unexpected Solana artifact field");if(!H(t.cluster,r.chains))throw new Error("policy: chain not allowed");let o=mn(t),i=wn(o,e,r),a=e.action==="transfer"?gn(o,e,r,i):yn(o,e,r,i),l=hn(o,t,r);return Object.freeze({unit:"lamports",value:a.value.toString(),notional:(a.value+l).toString(),fee:l.toString(),programs:Object.freeze(a.programs)})}function dt(e,r){let{unit:t,value:n,notional:o,fee:i}=bn(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}var ra=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,na=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,oa=AbortSignal.prototype.throwIfAborted,ia=EventTarget.prototype.addEventListener,aa=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null;var sa=64*1024,ca=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});var En=1e8;function _e(e){if(typeof e!="string"||!/^#(?:0|[1-9]\d*)$/.test(e))return null;let r=Number(e.slice(1));if(!Number.isSafeInteger(r)||r<0)return null;let t=r%10;if(t!==0&&t!==1)return null;let n=Math.floor(r/10),o=En+r;return Number.isSafeInteger(o)?{encoding:r,outcome:n,side:t,coin:`#${r}`,assetId:o}:null}var An=new Set(["https://api.hyperliquid.xyz/exchange","https://api.hyperliquid-testnet.xyz/exchange"]),Sn=new Set(["perp-order","hip3-order","hip4-order","perp-bracket"]),vn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Tn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"}),G=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`hl: bounded ${r} required`);return e};function In(e,r){let t=e.toString().padStart(r+1,"0");if(r===0)return t;let n=t.slice(0,-r),o=t.slice(-r).replace(/0+$/,"");return o?`${n}.${o}`:n}function lt(e,r){let t=T(e,`hl: ${r}`);if(!/^\d+(?:\.\d+)?$/.test(t))throw new Error(`hl: ${r} must be a positive decimal`);let[n,o=""]=t.split("."),i=BigInt(n+o);if(i<=0n)throw new Error(`hl: ${r} must be positive`);return{raw:i,decimals:o.length}}function U(e,r){if(e===null||typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`hl: ${r} must be finite JSON`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map(n=>U(n,r)).join(",")}]`;if(!e||typeof e!="object")throw new Error(`hl: ${r} must be structured JSON`);return`{${Object.keys(e).sort().map(n=>`${JSON.stringify(n)}:${U(e[n],r)}`).join(",")}}`}function On(e){if(typeof e.orderType!="string"||!e.orderType)throw new Error("hl: order type must be a string");let r=e.orderType,t=e.orderWire;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: declared order wire required");if(r==="limit"){let i=t.limit?.tif;if(!["Gtc","Ioc","Alo"].includes(i)||U(t,"declared order type")!==U({limit:{tif:i}},"expected order type"))throw new Error("hl: limit order type must match its wire shape");return}if(r==="market"){if(U(t,"declared order type")!==U({limit:{tif:"Ioc"}},"expected order type"))throw new Error("hl: market order type must match its IOC wire shape");return}let n={stopMarket:{isMarket:!0,tpsl:"sl"},stopLimit:{isMarket:!1,tpsl:"sl"},takeProfitMarket:{isMarket:!0,tpsl:"tp"},takeProfitLimit:{isMarket:!1,tpsl:"tp"}}[r];if(!n)throw new Error("hl: unsupported declared order type");let o=t.trigger?.triggerPx;if(o==null||U(t,"declared order type")!==U({trigger:{isMarket:n.isMarket,triggerPx:o,tpsl:n.tpsl}},"expected order type"))throw new Error("hl: trigger order type must match its wire shape")}function kn(e,r,t){let n=lt(e.s,"signed size"),o=lt(e.p,"signed price"),i=n.decimals+o.decimals,a=n.raw*o.raw,l=I(r.notionalUsd,i,"hl: notionalUsd");if(l<=0n||a!==l)throw new Error("hl: signed notional must match");let c=I(t.maxNotionalUsd,i,"hl: maxNotionalUsd");if(a>c)throw new Error("hl: notional exceeds cap")}function Nn(e,r){let t=e.action.builder;if(t==null){if(e.builder!=null)throw new Error("hl: declared builder requires a signed builder");return}if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: signed order builder must be structured");let n=G(t.b,"order builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(n))throw new Error("hl: order builder address required");if(L(e.builder||"","hl: builder").toLowerCase()!==n)throw new Error("hl: signed order builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(l=>String(l).toLowerCase()):[]).includes(n))throw new Error("hl: order builder not allowed");let i=W(t.f,"hl: signed order builder fee");if(i<0n)throw new Error("hl: signed order builder fee must be non-negative");let a=I(r.maxBuilderFeeBps??0,1,"hl: maxBuilderFeeBps");if(i>a)throw new Error("hl: order builder fee exceeds cap")}function ft(e,r,t){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: signed asset must match assetId");if(typeof e.b!="boolean"||e.b!==(r.side==="buy"))throw new Error("hl: signed side must match exactly");if(T(e.s,"hl: signed size")!==T(r.size,"hl: size"))throw new Error("hl: signed size must match");if(T(e.p,"hl: signed price")!==T(r.price,"hl: price"))throw new Error("hl: signed price must match");if(typeof r.reduceOnly!="boolean"||typeof e.r!="boolean"||e.r!==r.reduceOnly)throw new Error("hl: signed reduceOnly must match exactly");if(U(e.t,"signed order type")!==U(r.orderWire,"declared order type"))throw new Error("hl: signed order type must match declared order type");let n=Object.prototype.hasOwnProperty.call(e,"c");if(r.clientOrderId==null){if(n)throw new Error("hl: undeclared signed client order id")}else if(!n||typeof e.c!="string"||e.c!==r.clientOrderId)throw new Error("hl: signed client order id must match")}function pt(e,r,t,n,o){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: bracket protection asset must match");if(typeof e.b!="boolean"||e.b===(r.side==="buy"))throw new Error("hl: bracket protection side must oppose entry");if(T(e.s,"hl: bracket protection size")!==T(r.size,"hl: size"))throw new Error("hl: bracket protection size must match");if(T(e.p,"hl: bracket protection price")!==T(n,"hl: protection price"))throw new Error("hl: bracket protection price must match");if(e.r!==!0)throw new Error("hl: bracket protection must be reduce-only");let i=e.t?.trigger;if(!i||i.isMarket!==!0||i.tpsl!==o)throw new Error("hl: bracket protection trigger must match");if(T(i.triggerPx,"hl: triggerPx")!==T(n,"hl: protection price"))throw new Error("hl: bracket protection trigger must match")}function Pn(e){let r=String(e||"").replace(/\/$/,"");if(!An.has(r))throw new Error("hl: submitTo must be the official Hyperliquid exchange");return r}function Be(e){return _e(e)!=null}function Cn(e,r){let t=String(e||""),n=Array.isArray(r.coins)?r.coins.map(String):[];if(Be(t)){if(r.hip4!==!0)throw new Error("hl: HIP-4 outcome orders are disabled without explicit policy enablement");if(n.includes(t)||n.includes("#*")||n.includes("*")||n.length===0)return!0;throw new Error("hl: outcome coin not allowed")}if(n.length&&!n.includes(t)&&!n.includes("*"))throw new Error("hl: coin not allowed");return!0}function Ln(e,r,t){let n=Array.isArray(t.hlMarkets)?t.hlMarkets:[];if(n.length){if(!n.some(a=>{if(typeof a=="string"){let[l,c]=String(a).split(":");return l===e&&Number(c)===r}return String(a?.coin)===e&&Number(a?.assetId)===r}))throw new Error("hl: coin/assetId pair not allowed");return!0}if(Be(e)){let i=Array.isArray(t.coins)?t.coins.map(String):[];if(i.includes("#*")||i.includes("*")||i.length===0)return!0;throw new Error("hl: restricted coin policy requires hlMarkets pairs")}let o=Array.isArray(t.coins)?t.coins.map(String):[];if(o.length&&!o.includes("*"))throw new Error("hl: restricted coin policy requires hlMarkets pairs");return!0}function mt(e,r){if(e?.surface!=="hl")throw new Error("hl: surface hl required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: structured artifact required");let n=G(t.kind,"kind",48),o=vn[n];if(!o)throw new Error("hl: unsupported Hyperliquid kind");if(e.action!==o)throw new Error("hl: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="hyperliquid")throw new Error("hl: destination must be hyperliquid");if(!/^0x[0-9a-fA-F]{40}$/.test(String(e.owner||"")))throw new Error("hl: owner required");let i=Pn(t.submitTo);if(Object.prototype.hasOwnProperty.call(t,"vaultAddress"))throw new Error("hl: vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t,"expiresAfter"))throw new Error("hl: expiresAfter is not public");let a=Number(t.nonce);if(!Number.isSafeInteger(a)||a<=0)throw new Error("hl: nonce must be a positive integer");if(!t.action||typeof t.action!="object")throw new Error("hl: signed action required");if(Object.prototype.hasOwnProperty.call(t.action,"vaultAddress"))throw new Error("hl: action vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t.action,"expiresAfter"))throw new Error("hl: action expiresAfter is not public");if(t.action.type!==Tn[n])throw new Error("hl: action type must match kind");let l=t.notionalUsd??0;if(Sn.has(n)||n==="perp-cancel"||n==="perp-leverage"||n==="perp-isolated-margin"){let c=G(t.coin,"coin",64),s=t.assetId??t.assetIndex;if(!Number.isSafeInteger(s)||s<0)throw new Error("hl: assetId required");if(n==="hip4-order"||s>=1e8){let d=_e(c);if(!d||d.coin!==c)throw new Error("hl: HIP-4 actions must use a canonical outcome coin");if(d.assetId!==s)throw new Error("hl: HIP-4 coin must bind to its canonical assetId")}if(Cn(c,r),Ln(c,s,r),n==="hip4-order"&&!Be(c))throw new Error("hl: HIP-4 orders must use an outcome coin");if(n==="perp-order"||n==="hip3-order"||n==="hip4-order"||n==="perp-bracket"){if(t.side!=="buy"&&t.side!=="sell")throw new Error("hl: side must be buy or sell");if(t.action.type!=="order"||!Array.isArray(t.action.orders))throw new Error("hl: signed orders are required");On(t);let d=t.action.orders;if(n==="perp-bracket"){let u=t.takeProfitPx,w=t.stopLossPx,f=1+(u==null?0:1)+(w==null?0:1);if(f<2||d.length!==f||t.grouping!=="normalTpsl"||t.action.grouping!==t.grouping)throw new Error("hl: bracket must contain exactly the declared entry and protection legs");ft(d[0],t,s);let p=1;u!=null&&pt(d[p++],t,s,u,"tp"),w!=null&&pt(d[p],t,s,w,"sl")}else{if(d.length!==1)throw new Error("hl: exactly one signed order is required");if(t.grouping!=="na"||t.action.grouping!==t.grouping)throw new Error("hl: signed grouping must match declared grouping");ft(d[0],t,s)}kn(d[0],t,r),Nn(t,r),l=T(t.notionalUsd,"hl: notionalUsd")}if(n==="perp-leverage"){let d=t.leverage;if(!Number.isSafeInteger(d)||d<1)throw new Error("hl: leverage must be a positive integer");let u=r.maxLeverage==null?50:r.maxLeverage;if(typeof u!="number"||!Number.isSafeInteger(u)||u<1)throw new Error("hl: maxLeverage must be a positive integer");if(d>u)throw new Error("hl: leverage exceeds cap")}if(n==="perp-cancel"){let d=t.action.cancels;if(!Array.isArray(d)||d.length!==1)throw new Error("hl: exactly one cancel is required");if(!Number.isSafeInteger(d[0].a)||d[0].a!==s)throw new Error("hl: signed cancel asset must match assetId");if(!Number.isSafeInteger(t.orderId)||t.orderId<0)throw new Error("hl: declared order id required");if(!Number.isSafeInteger(d[0].o)||d[0].o!==t.orderId)throw new Error("hl: signed cancel order id must match")}if(n==="perp-leverage"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==s)throw new Error("hl: signed leverage asset must match assetId");if(!Number.isSafeInteger(t.action.leverage)||t.action.leverage!==t.leverage)throw new Error("hl: signed leverage must match");if(!["cross","isolated"].includes(t.marginMode))throw new Error("hl: declared margin mode required");let d=t.marginMode==="cross";if(typeof t.action.isCross!="boolean"||t.action.isCross!==d)throw new Error("hl: signed isCross must match declared margin mode")}if(n==="perp-isolated-margin"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==s)throw new Error("hl: signed margin asset must match assetId");let d=G(t.usd,"margin usd",64),u=I(d,6,"hl: margin usd");if(W(t.action.ntli,"hl: signed margin ntli")!==u)throw new Error("hl: signed margin amount must match usd");if(typeof t.isBuy!="boolean"||t.action.isBuy!==t.isBuy)throw new Error("hl: signed margin isBuy must match");let f=I(r.maxNotionalUsd,6,"hl: maxNotionalUsd"),p=u<0n?-u:u;if(p>f)throw new Error("hl: margin notional exceeds cap");l=In(p,6)}}if(n==="builder-fee-approval"){let c=G(t.builder,"builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(c))throw new Error("hl: builder address required");if(G(t.action.builder,"signed builder",42).toLowerCase()!==c)throw new Error("hl: signed builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(p=>String(p).toLowerCase()):[]).includes(c))throw new Error("hl: builder not allowed");let d=G(t.maxFeeRate,"maxFeeRate",32);if(G(t.action.maxFeeRate,"signed maxFeeRate",32)!==d)throw new Error("hl: signed builder fee must match");if(!/^\d+(?:\.\d+)?%$/.test(d))throw new Error("hl: builder fee rate must be a percent");let u=I(d.slice(0,-1),12,"hl: builder fee percent"),w=I(r.maxBuilderFeeBps,12,"hl: maxBuilderFeeBps");if(w<0n||u*100n>w)throw new Error("hl: builder fee exceeds cap");if(Number(t.action.nonce)!==a)throw new Error("hl: signed builder nonce must match");let f=i.includes("testnet")?"Testnet":"Mainnet";if(t.hyperliquidChain!==f||t.action.hyperliquidChain!==t.hyperliquidChain)throw new Error("hl: signed Hyperliquid chain must match destination");if(t.signatureChainId!=="0x66eee"||t.action.signatureChainId!==t.signatureChainId)throw new Error("hl: signed signature chain id must match")}if(n.startsWith("hype-stake")||n==="hype-delegate"||n==="hype-undelegate"){if(n==="hype-delegate"||n==="hype-undelegate"){let c=n==="hype-undelegate";if(typeof t.action.isUndelegate!="boolean"||t.action.isUndelegate!==c)throw new Error("hl: signed isUndelegate must match delegate kind exactly")}if(r.maxHypeWei!=null&&BigInt(String(t.action.wei??t.caps?.amountHype??"0"))>BigInt(r.maxHypeWei))throw new Error("hl: stake amount exceeds cap")}return Object.freeze({unit:"usd",value:String(l??t.action.wei??0),notional:String(l??0),fee:"0",kind:n,actionType:t.action.type,amount:String(t.action.wei??l??0),coin:t.coin||null,submitTo:i})}var Sa="0x"+"00".repeat(32);function _n(e){let r=typeof e=="bigint"?e:_(e,"poly: atomicUsdc");if(r<=0n)throw new Error("poly: order amounts must be positive integer micro-units");let t=r/1000000n,n=(r%1000000n).toString().padStart(6,"0").replace(/0+$/,"");return n?`${t.toString()}.${n}`:t.toString()}function wt(e,r){let t=_(e.makerAmount,"poly: makerAmount"),n=_(e.takerAmount,"poly: takerAmount");return _n(r==="BUY"?t:n)}var Bn=new Set(["https://clob.polymarket.com/order"]),ue=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Oa=Object.freeze(ue.map(e=>e[0])),Fn=new Set(["0xe111180000d2663c0091e4f400237545b87b996b","0xe2222d279d744050d28e00520010520000310f59"]),$n="0xe111180000d2663c0091e4f400237545b87b996b",Mn="0xe2222d279d744050d28e00520010520000310f59",ht=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`poly: bounded ${r} required`);return e};function gt(e){let r=String(e||"").replace(/\/$/,"");if(!Bn.has(r))throw new Error("poly: submitTo must be the official Polymarket CLOB");return r}function yt(e){let r=L(e,"poly: exchange").toLowerCase();if(!Fn.has(r))throw new Error("poly: verifyingContract must be an official CTF Exchange");return r}function bt(e,r){if(e?.surface!=="poly")throw new Error("poly: surface poly required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("poly: structured artifact required");let n=ht(t.kind,"kind",48);if(n!=="poly-order")throw new Error("poly: unsupported Polymarket kind");if(e.action!=="order")throw new Error("poly: surface/action/kind mismatch");if(L(e.destination,"poly: destination").toLowerCase()!=="polymarket")throw new Error("poly: destination must be polymarket");if(gt(t.submitTo),t.chainId!==137)throw new Error("poly: chainId must be Polygon 137");let o=t.domain;if(!o||typeof o!="object")throw new Error("poly: EIP-712 domain required");if(o.name!=="Polymarket CTF Exchange"||o.version!=="2"||o.chainId!==137)throw new Error("poly: EIP-712 domain must be official CTF Exchange v2 on Polygon");if(yt(o.verifyingContract),yt(t.exchange),L(o.verifyingContract,"poly: verifyingContract").toLowerCase()!==L(t.exchange,"poly: exchange").toLowerCase())throw new Error("poly: exchange/domain mismatch");if(typeof t.negRisk!="boolean")throw new Error("poly: negRisk must be a boolean");let i=t.negRisk?Mn:$n;if(L(t.exchange,"poly: exchange").toLowerCase()!==i)throw new Error("poly: negRisk/exchange mismatch");let a=t.message||t.value;if(!a||typeof a!="object")throw new Error("poly: signed order message required");let l=t.types?.Order;if(!Array.isArray(l)||l.length!==ue.length)throw new Error("poly: EIP-712 Order type must be official CLOB v2");for(let A=0;A<ue.length;A+=1)if(l[A]?.name!==ue[A][0]||l[A]?.type!==ue[A][1])throw new Error("poly: EIP-712 Order type must be official CLOB v2");if((t.orderType||"GTC")!=="GTC")throw new Error("poly: only GTC is public");let c=String(e.owner||"").toLowerCase();if(L(a.maker,"poly: maker").toLowerCase()!==c)throw new Error("poly: maker must equal owner");if(L(a.signer,"poly: signer").toLowerCase()!==c)throw new Error("poly: signer must equal owner");if(a.signatureType!==0)throw new Error("poly: only EOA signatureType 0 is public");if(typeof a.builder!="string"||a.builder.toLowerCase()!==`0x${"00".repeat(32)}`)throw new Error("poly: builder must be zero");if(a.side!==0&&a.side!==1)throw new Error("poly: side must be BUY or SELL");let s=ht(t.tokenId,"tokenId",80);if(L(a.tokenId,"poly: tokenId")!==s)throw new Error("poly: tokenId mismatch");let d=Array.isArray(r.polyTokens)?r.polyTokens.map(String):[];if(d.length&&!d.includes(s)&&!d.includes("*"))throw new Error("poly: tokenId not allowed");let u=Number(a.side)===0?"BUY":"SELL";if(t.side&&t.side!==u)throw new Error("poly: side mismatch");let w=_(a.makerAmount,"poly: makerAmount"),f=_(a.takerAmount,"poly: takerAmount"),p=_(t.makerAmount,"poly: prepared makerAmount"),m=_(t.takerAmount,"poly: prepared takerAmount");if(w!==p)throw new Error("poly: signed makerAmount differs from prepared envelope");if(f!==m)throw new Error("poly: signed takerAmount differs from prepared envelope");let h=u==="BUY"?w:f,g=u==="BUY"?f:w,E=I(t.quantity,6,"poly: quantity");if(E<=0n||E!==g)throw new Error("poly: quantity must match CLOB v2 amounts");let x=I(t.price,6,"poly: price");if(x<=0n||x>=1000000n)throw new Error("poly: price must be within (0,1)");if(g*x!==h*1000000n)throw new Error("poly: price must match CLOB v2 amounts");if(I(t.notionalUsdc,6,"poly: notionalUsdc")!==h)throw new Error("poly: notionalUsdc must match CLOB v2 amounts");let k=wt(a,u);if(I(k,6,"poly: displayed notionalUsdc")!==h)throw new Error("poly: displayed notionalUsdc must match CLOB v2 amounts");let N=r.maxNotionalUsd??r.maxNotionalUsdc;if(N!=null){let A=I(N,6,"poly: maxNotionalUsd");if(h>A)throw new Error("poly: notional exceeds cap")}return Object.freeze({unit:"usdc",value:h.toString(),notional:h.toString(),fee:"0",kind:n,tokenId:s,side:u,makerAmount:w.toString(),takerAmount:f.toString(),price:String(t.price),quantity:String(t.quantity),notionalUsdc:k,submitTo:gt(t.submitTo)})}var Rn=new Set(["https://mainnet.zklighter.elliot.ai/api/v1/sendTx","https://testnet.zklighter.elliot.ai/api/v1/sendTx"]),Et=14,xt=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`lighter: bounded ${r} required`);return e};function te(e,r,t){if(!Number.isSafeInteger(e)||e!==r)throw new Error(`lighter: ${t} must be exact numeric ${r}`)}function At(e){let r=String(e||"").replace(/\/$/,"");if(!Rn.has(r))throw new Error("lighter: submitTo must be the official Lighter sendTx");return r}function St(e,r={}){if(e?.surface!=="lighter")throw new Error("lighter: surface lighter required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("lighter: structured artifact required");let n=xt(t.kind,"kind",48);if(n!=="lighter-order")throw new Error("lighter: unsupported Lighter kind");if(e.action!=="order")throw new Error("lighter: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="lighter")throw new Error("lighter: destination must be lighter");let o=At(t.submitTo),i=t.marketIndex;if(typeof i!="number"||!Number.isSafeInteger(i)||i<0)throw new Error("lighter: marketIndex required");let a=Number(W(t.accountIndex,"lighter: accountIndex"));if(!Number.isSafeInteger(a)||a<0)throw new Error("lighter: accountIndex required");let l=Number(W(t.clientOrderIndex,"lighter: clientOrderIndex"));if(!Number.isSafeInteger(l)||l<0)throw new Error("lighter: clientOrderIndex required");te(t.orderType,0,"orderType"),te(t.timeInForce,1,"timeInForce"),te(t.reduceOnly,0,"reduceOnly"),te(t.triggerPrice,0,"triggerPrice"),te(t.orderExpiry,-1,"orderExpiry");let c=xt(t.symbol||t.coin,"symbol",32),s=Array.isArray(r.lighterMarkets)?r.lighterMarkets.map(String):[];if(s.length&&!s.includes(c)&&!s.includes(String(i))&&!s.includes("*"))throw new Error("lighter: market not allowed");if(t.side!=="buy"&&t.side!=="sell")throw new Error("lighter: side must be buy or sell");let d=_(t.baseAmount,"lighter: baseAmount"),u=_(t.price,"lighter: price");if(d>BigInt(Number.MAX_SAFE_INTEGER)||u>BigInt(Number.MAX_SAFE_INTEGER))throw new Error("lighter: baseAmount and price must be safe integers");let w=Number(d),f=Number(u),p=Number(t.sizeDecimals??0),m=Number(t.priceDecimals??0);if(!Number.isInteger(p)||p<0||p>12)throw new Error("lighter: sizeDecimals required");if(!Number.isInteger(m)||m<0||m>12)throw new Error("lighter: priceDecimals required");let h=p+m,g=d*u,E=I(t.notionalUsd,h,"lighter: notionalUsd");if(E<=0n)throw new Error("lighter: notionalUsd required");if(g!==E)throw new Error("lighter: notionalUsd must match size and price");let x=I(r.maxNotionalUsd??Number.MAX_SAFE_INTEGER,h,"lighter: maxNotionalUsd");if(g>x)throw new Error("lighter: notional exceeds cap");let v=T(t.notionalUsd,"lighter: notionalUsd");return te(t.txType,Et,"txType"),Object.freeze({unit:"usd",value:String(v),notional:String(v),fee:"0",kind:n,symbol:c,marketIndex:i,side:t.side,baseAmount:w,price:f,submitTo:o,actionType:"create-order",amount:String(v)})}import{TypedDataEncoder as It,getAddress as D}from"ethers";import{TypedDataEncoder as La,getAddress as _a,isAddress as Ba}from"ethers";var vt=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Fe=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as za,getAddress as Ja,isAddress as Ga}from"ethers";var Ma=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var Tt=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),es=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var $e=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),ts=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var qn=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]),jn="0x0000000000000000000000000000000000000000";function Me(e,r,t=256){if(typeof e!="string"||!e||e.length>t)throw new Error(`evm-order: bounded ${r} required`);return e}function Ot(e,r){let t=String(e||"").replace(/\/$/,"");if(!qn.some(o=>t===`${o}/v4.0/${r}`||t===`${o}/v4.1/${r}`))throw new Error("evm-order: submitTo must be the official 1inch orderbook");return t}function kt(e,r){let t={1:"https://api.cow.fi/mainnet/api/v1/orders",100:"https://api.cow.fi/xdai/api/v1/orders",42161:"https://api.cow.fi/arbitrum_one/api/v1/orders",8453:"https://api.cow.fi/base/api/v1/orders"}[Number(r)],n=String(e||"").replace(/\/$/,"");if(!t||n!==t)throw new Error("evm-order: cow submitTo must be official api.cow.fi");return n}function Nt(e,r){let t=e?.Order,n=r.Order;return!Array.isArray(t)||t.length!==n.length?!1:t.every((o,i)=>o?.name===n[i].name&&o?.type===n[i].type)}function Pt(e,...r){let t=Array.isArray(e.tokens)?e.tokens.map(n=>String(n).toLowerCase()):[];if(!t.length)throw new Error("evm-order: tokens allowlist is empty");if(!t.includes("*")){for(let n of r)if(!t.includes(String(n).toLowerCase()))throw new Error("evm-order: token not allowed")}}function Ct(e,r,{allowZero:t=!1}={}){let n=String(r||"").toLowerCase();if(!n)throw new Error("evm-order: receiver required");if(n===jn){if(!t)throw new Error("evm-order: receiver must equal owner");return}if(n!==e)throw new Error("evm-order: receiver must equal owner")}function Lt(e,r){if(e?.surface!=="evm-order")throw new Error("evm-order: surface evm-order required");if(e.action!=="order")throw new Error("evm-order: action must be order");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("evm-order: structured artifact required");let n=Me(t.kind,"kind",32);if(n==="option")throw new Error("evm-order: option kind refused until official Derive/Lyra domain is pinned");if(n==="cow"){let u=Number(t.chainId??e.chainId);if(kt(t.submitTo,u),Me(e.destination,"destination",32)!=="cowswap")throw new Error("evm-order: cow destination must be cowswap");let w=Tt[u];if(!w)throw new Error(`evm-order: unsupported cow chainId ${u}`);let f=t.domain||t.typedData?.domain,p=t.types||t.typedData?.types,m=t.message||t.typedData?.message;if(!f||!p?.Order||!m)throw new Error("evm-order: CoW EIP-712 Order required");if(!Nt(p,$e))throw new Error("evm-order: cow types must be official GPv2 Order");if(Number(f.chainId)!==u)throw new Error("evm-order: cow domain chain mismatch");if(String(f.name)!=="Gnosis Protocol"||String(f.version)!=="v2")throw new Error("evm-order: cow domain must be official GPv2");if(D(f.verifyingContract)!==D(w))throw new Error("evm-order: cow verifyingContract must be official GPv2 settlement");let h=String(e.owner||"").toLowerCase();Ct(h,m.receiver),Pt(r,m.sellToken,m.buyToken);let g=D(m.sellToken),E=String(m.feeAmount||"0"),x=(BigInt(m.sellAmount)+BigInt(E)).toString();return Object.freeze({unit:`erc20:${g.toLowerCase()}`,value:x,notional:x,fee:E,submitTo:kt(t.submitTo,u),digest:It.hash(f,{Order:$e.Order},m),chainId:u,kind:"cow",receiver:D(m.receiver),sellAmount:String(m.sellAmount),buyAmount:String(m.buyAmount)})}if(n!=="1inch-limit")throw new Error("evm-order: unsupported kind");if(Me(e.destination,"destination",32)!=="1inch-lop")throw new Error("evm-order: destination must be 1inch-lop");let o=Number(t.chainId??e.chainId),i=vt[o];if(!i)throw new Error(`evm-order: unsupported chainId ${o}`);Ot(t.submitTo,o);let a=t.domain||t.typedData?.domain,l=t.types||t.typedData?.types,c=t.message||t.typedData?.message;if(!a||!l?.Order||!c)throw new Error("evm-order: EIP-712 Order required");if(!Nt(l,Fe))throw new Error("evm-order: types must be official LOP v4 Order");if(Number(a.chainId)!==o)throw new Error("evm-order: domain chain mismatch");if(D(a.verifyingContract)!==D(i))throw new Error("evm-order: verifyingContract must be official LOP v4");if(a.name!=="1inch Limit Order Protocol"||String(a.version)!=="4")throw new Error("evm-order: EIP-712 domain must be official LOP v4");let s=String(e.owner||"").toLowerCase();if(D(c.maker).toLowerCase()!==s)throw new Error("evm-order: maker must equal owner");Ct(s,c.receiver,{allowZero:!0}),Pt(r,c.makerAsset,c.takerAsset);let d=It.hash(a,{Order:Fe.Order},c);return Object.freeze({unit:`erc20:${D(c.makerAsset).toLowerCase()}`,value:String(c.makingAmount),notional:String(c.makingAmount),fee:"0",submitTo:Ot(t.submitTo,o),digest:d,chainId:o,kind:"1inch-limit",receiver:D(c.receiver),makerAsset:D(c.makerAsset),takerAsset:D(c.takerAsset),makingAmount:String(c.makingAmount),takingAmount:String(c.takingAmount)})}var Rt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var Re=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),Un=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),Dt=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Wn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),xe=new Mt(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),_t=new Mt(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Hn=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var le=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},b=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},Bt=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},zn=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},O=(e,r,t)=>{if(!zn(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},de=(e,r,t)=>{Array.isArray(r)&&r.length&&O(e,r,t)},S=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},X=e=>String(e||"0x").slice(0,10).toLowerCase(),qt=e=>b(e.gasLimit,"gasLimit")*b(e.maxFeePerGas??e.gasPrice,"feePerGas")+b(e.l1FeeWei??0,"l1FeeWei")+b(e.operatorFeeWei??0,"operatorFeeWei");function re(e,r,t,{dynamicTail:n=!1}={}){let o=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(o)||o.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&o.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:o,word:i=>o.slice(10+i*64,10+(i+1)*64)}}function C(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function q(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function Jn(e){if(X(e)!=="0x095ea7b3")return null;let r=re(e,2,"approval");return{kind:"approval",spender:C(r.word(0),"approval spender"),amount:q(r.word(1),"approval amount")}}function jt(e,r){let t=r==="router02-exact-input-single"?7:8,n=re(e,t,"Uniswap v3 exactInputSingle"),o=t===7?4:5;return{kind:"action",action:"swap",inputToken:C(n.word(0),"input token"),outputToken:C(n.word(1),"output token"),recipient:C(n.word(3),"recipient"),amountIn:q(n.word(o),"amountIn"),minimumOut:q(n.word(o+1),"amountOutMinimum")}}function Gn(e){let r=re(e,12,"Across depositV3",{dynamicTail:!0}),t=q(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let o=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(o))throw new Error("envelope: malformed Across depositV3 message length");let i=Math.ceil(o/32)*64;if(r.hex.length!==n+64+i)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:C(r.word(0),"depositor"),recipient:C(r.word(1),"recipient"),inputToken:C(r.word(2),"input token"),outputToken:C(r.word(3),"output token"),amountIn:q(r.word(4),"inputAmount"),minimumOut:q(r.word(5),"outputAmount"),destinationChainId:q(r.word(6),"destinationChainId")}}function Vn(e){let r=String(e||"").replace(/^0x/i,"").toLowerCase();if(r.length<86||r.length%2!==0)throw new Error("envelope: malformed Uniswap path");let t=`0x${r.slice(0,40)}`,n=`0x${r.slice(r.length-40)}`;if(!/^0x[0-9a-f]{40}$/.test(t)||!/^0x[0-9a-f]{40}$/.test(n))throw new Error("envelope: malformed Uniswap path tokens");return{inputToken:t,outputToken:n}}function Ft(e,{hasDeadline:r}){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<74)throw new Error("envelope: malformed exactInput calldata");let n=[];for(let h=10;h+64<=t.length;h+=64)n.push(t.slice(h,h+64));let o=(h,g)=>{if(!n[h])throw new Error(`envelope: malformed ${g}`);return BigInt(`0x${n[h]}`)},i=Number(o(0,"exactInput struct offset"));if(i%32!==0)throw new Error("envelope: malformed exactInput struct offset");let a=i/32,l=Number(o(a,"path offset")),c=n[a+1],s=o(a+(r?3:2),"amountIn"),d=o(a+(r?4:3),"amountOutMinimum"),u=a+l/32;if(!Number.isInteger(u)||!n[u])throw new Error("envelope: malformed exactInput path");let w=Number(o(u,"path length")),f=t.slice(10+(u+1)*64,10+(u+1)*64+w*2),{inputToken:p,outputToken:m}=Vn(`0x${f}`);return{kind:"action",action:"swap",inputToken:p,outputToken:m,recipient:C(c,"recipient"),amountIn:s,minimumOut:d}}function Yn(e){let r=re(e,8,"Aerodrome exactInputSingle");return{kind:"action",action:"swap",inputToken:C(r.word(0),"input token"),outputToken:C(r.word(1),"output token"),recipient:C(r.word(3),"recipient"),amountIn:q(r.word(5),"amountIn"),minimumOut:q(r.word(6),"amountOutMinimum")}}function Kn(e){let r=String(e||"").toLowerCase();if(!r.startsWith("0x5ae401dc"))throw new Error("envelope: malformed Uniswap multicall");let t=[];for(let w=10;w+64<=r.length;w+=64)t.push(r.slice(w,w+64));let n=Number(BigInt(`0x${t[1]}`));if(n%32!==0)throw new Error("envelope: malformed multicall data offset");let o=n/32;if(Number(BigInt(`0x${t[o]}`))!==1)throw new Error("envelope: multicall must wrap exactly one swap");let a=Number(BigInt(`0x${t[o+1]}`)),l=o+1+a/32,c=Number(BigInt(`0x${t[l]}`)),d=`0x${r.slice(10+(l+1)*64,10+(l+1)*64+c*2)}`,u=X(d);if(u!=="0x04e45aaf"&&u!=="0x414bf389")throw new Error("envelope: multicall inner call must be exactInputSingle");return jt(d,u==="0x04e45aaf"?"router02-exact-input-single":"swap-router-exact-input-single")}function Xn(e,r){let t=X(e),n=Dt[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.layout==="router02-exact-input-single"||n.layout==="swap-router-exact-input-single")return{...jt(e,n.layout),selector:t,provider:n.provider};if(n.layout==="exact-input-deadline")return{...Ft(e,{hasDeadline:!0}),selector:t,provider:n.provider};if(n.layout==="exact-input")return{...Ft(e,{hasDeadline:!1}),selector:t,provider:n.provider};if(n.layout==="multicall-deadline")return{...Kn(e),selector:t,provider:n.provider};if(n.layout==="aerodrome-exact-input-single")return{...Yn(e),selector:t,provider:n.provider};if(n.action==="bridge")return{...Gn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function Qn(e){let r=re(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",mintType:"public",contract:C(r.word(0),"mint NFT contract"),feeRecipient:C(r.word(1),"mint fee recipient"),recipient:C(r.word(2),"mint recipient"),quantity:q(r.word(3),"mint quantity")}}function Zn(e){let r;try{r=_t.decodeFunctionData("mintAllowList",e)}catch{throw new Error("envelope: malformed SeaDrop mintAllowList calldata")}let t=r[4],n=[...r[5]].map(String);if(n.length<1||n.length>64||n.some(c=>!/^0x[0-9a-fA-F]{64}$/.test(c)))throw new Error("envelope: bounded canonical SeaDrop allowlist proof required");if(_t.encodeFunctionData("mintAllowList",[r[0],r[1],r[2],r[3],t,n]).toLowerCase()!==String(e).toLowerCase())throw new Error("envelope: SeaDrop allowlist calldata must be canonical");let i=BigInt(t.startTime),a=BigInt(t.endTime);if(a<=i)throw new Error("envelope: SeaDrop allowlist stage time range is invalid");let l=BigInt(r[3]);if(BigInt(t.maxTotalMintableByWallet)<l)throw new Error("envelope: SeaDrop allowlist wallet cap is below quantity");return{kind:"mint",action:"mint",mintType:"allowlist",contract:S(r[0],"mint NFT contract"),feeRecipient:S(r[1],"mint fee recipient"),recipient:S(r[2],"mint recipient"),quantity:l,mintPrice:BigInt(t.mintPrice),startTime:i,endTime:a,dropStageIndex:BigInt(t.dropStageIndex),proof:n}}function eo(e,r){let t=X(e);if(String(r).toLowerCase()==="nft-mint")return to(e);let n=Wn[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...Qn(e),selector:t,provider:n.provider};if(n.layout==="seadrop-mint-allowlist")return{...Zn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function to(e){let r=X(e);if(r==="0x40c10f19")throw new Error("envelope: ambiguous mint(address,uint256) calldata is not a built-in signer surface");let t=Hn[r];if(!t)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(t.layout==="mint-no-args")return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:1n};if(t.layout==="mint-quantity"){let n=re(e,1,"generic NFT mint");return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:q(n.word(0),"mint quantity")}}throw new Error("envelope: unsupported generic NFT mint calldata")}function fe(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function Ut(e,r,t,{nowMs:n=Date.now(),networkFees:o,requireNetworkFees:i=!1}={}){let a=S(e.owner,"owner"),l=e.artifact,c=Number(l?.chainId??fe(e)[0]?.chainId);if(!Number.isSafeInteger(c)||c<=0)throw new Error("envelope: explicit batch chainId required");if(O(c,r.chains,"chain"),l?.owner!==void 0&&S(l.owner,"batch owner")!==a)throw new Error("envelope: explicit batch owner mismatch");let s=fe(e);if(!s.length||s.length>8)throw new Error("envelope: bounded EVM transaction batch required");let d=0n,u=0n,w=0n;for(let f of s){if(!f||typeof f!="object"||Array.isArray(f))throw new Error("envelope: structured EVM transaction required");if(Number(f.chainId)!==c)throw new Error("envelope: every batch leg must use the same chain");if(S(f.from,"transaction owner")!==a)throw new Error("envelope: every batch leg must use the same owner");if(O(X(f.data),r.selectors,"selector"),d+=b(f.value??0,"value"),u+=b(f.gasLimit,"gasLimit"),w+=qt(f),J(c)&&(f.l1FeeWei===void 0||f.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(d>b(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(u>b(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(w>b(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:s,chainId:c,owner:a,totalValue:d,totalGas:u,totalFee:w}}function Wt(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let o=String(e?.surface||"");if(o!=="evm-swap"&&o!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let i=le(e.provider,"provider",64).toLowerCase();O(i,r.providers,"provider");let a=Ut(e,r,o,{nowMs:t}),l=[],c=-1;for(let p=0;p<a.transactions.length;p++){let m=a.transactions[p],h=Jn(m.data),g;if(h){if(c!==-1)throw new Error("envelope: approval must be before action");if(b(m.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let v=S(m.to,"approval token");if(O(v,r.tokens,"token"),O(h.spender,r.spenders,"spender"),h.amount>b(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");g={...h,token:v,index:p}}else{if(c!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");O(m.to,r.destinations,"destination"),g={...Xn(m.data,i),target:S(m.to,"action target"),index:p},c=p}let E=b(m.value??0,"value"),x=b(m.gasLimit,"gasLimit");l.push({...g,value:E,gas:x,fee:qt(m)})}if(c<0)throw new Error("envelope: reviewed swap/bridge action required");let s=l[c],d=o==="evm-swap"?"swap":"bridge";if(s.action!==d||e.action!==d)throw new Error("envelope: surface/action/calldata mismatch");if(S(e.destination,"destination")!==s.target)throw new Error("envelope: destination must equal decoded action target");if(s.recipient!==a.owner)throw new Error("envelope: decoded recipient must equal owner");if(s.depositor&&s.depositor!==a.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(O(s.inputToken,r.tokens,"input token"),O(s.outputToken,r.tokens,"output token"),s.amountIn<=0n||s.amountIn>b(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(s.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(Te(e.autoSlippage,{nowMs:t,chainId:a.chainId,venue:i,tx:a.transactions[c],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(s.minimumOut!==b(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(s.action==="bridge"&&b(e.toChainId,"toChainId")!==s.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let u=l.filter(p=>p.kind==="approval");if(!new Set([...Un,...Array.isArray(r.nativeInputTokens)?r.nativeInputTokens.map(p=>String(p).toLowerCase()):[]]).has(s.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(u.length)throw new Error("envelope: native-value action must not include token approval");if(s.value!==s.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let f=Object.freeze({quoteAmountOut:b(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:b(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...a,decoded:l,action:s,provider:i,authenticatedQuote:f}}function ro(e,r,{nowMs:t}){let n=e.anvilAttestation,o=e.artifact?.anvilAttestation;if(!n||typeof n!="object"||Array.isArray(n))throw new Error("envelope: Anvil attestation is required");if(!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: Anvil attestation artifact mismatch");if(Number(n.version)!==1||n.source!=="anvil-snapshot-rpc-reviewed-runtime")throw new Error("envelope: unsupported Anvil attestation");if(Number(n.chainId)!==4663)throw new Error("envelope: Anvil attestation chain mismatch");let i=S(e.destination,"Anvil market"),a=S(e.contract,"NFT contract"),l=S(e.paymentToken,"payment token");if(S(n.market,"attested Anvil market")!==i)throw new Error("envelope: Anvil attestation market mismatch");if(S(n.collection,"attested NFT collection")!==a)throw new Error("envelope: Anvil attestation collection mismatch");if(S(n.paymentToken,"attested payment token")!==l)throw new Error("envelope: Anvil attestation payment token mismatch");let c=Number(e.paymentTokenDecimals??e.artifact?.paymentTokenDecimals);if(!Number.isSafeInteger(c)||c<0||c>255||Number(n.paymentTokenDecimals)!==c)throw new Error("envelope: Anvil payment token decimals mismatch");let s=b(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei").toString();if(b(n.nativeSwapFeeWei,"attested nativeSwapFeeWei").toString()!==s)throw new Error("envelope: Anvil attestation native swap fee mismatch");let d=Number(n.snapshotFetchedAtMs),u=Number(n.snapshotExpiresAtMs);if(!Number.isFinite(d)||!Number.isFinite(u)||d>t||u<=t||u<=d)throw new Error("envelope: Anvil snapshot attestation is stale");let w=b(n.blockNumber,"attested blockNumber");if(w<=0n||!/^0x[0-9a-f]{64}$/.test(String(n.blockHash||"").toLowerCase()))throw new Error("envelope: Anvil block attestation is invalid");let f=String(n.runtimeCodeHash||"").toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(f))throw new Error("envelope: Anvil runtime code hash is invalid");let p=Object.entries(r.anvilRuntimeCodeHashes||{}).find(([h])=>h.toLowerCase()===i)?.[1];if(!p||String(p).toLowerCase()!==f)throw new Error("policy: Anvil runtime code hash is not reviewed");let m=Object.entries(r.nftPaymentTokenCaps||{}).find(([h])=>h.toLowerCase()===l)?.[1];if(!m||Number(m.decimals)!==c)throw new Error("policy: Anvil payment token decimals are not reviewed");return Object.freeze({...n,market:i,collection:a,paymentToken:l,paymentTokenDecimals:c,runtimeCodeHash:f,blockNumber:w})}function $t(e,r){let t=e.artifact,n=e.anvilQuote,o=t?.anvilQuote;if(!n||typeof n!="object"||Array.isArray(n)||!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: exact Anvil quote artifact mismatch");if(e.preconditions?.exactQuoteConfirmed!==!0)throw new Error("envelope: exact Anvil quote confirmation required");let i=r==="buy"?[[n.totalCostRaw,"anvilQuote.totalCostRaw"],[e.maxPaymentTokenAmountRaw,"maxPaymentTokenAmountRaw"],[t?.maxPaymentTokenAmountRaw,"artifact maxPaymentTokenAmountRaw"],[e.exactQuoteTotalCostRaw,"exactQuoteTotalCostRaw"],[t?.exactQuoteTotalCostRaw,"artifact exactQuoteTotalCostRaw"],[e.preconditions?.confirmedTotalCostRaw,"confirmedTotalCostRaw"]]:[[n.netPayoutRaw,"anvilQuote.netPayoutRaw"],[e.minPayoutRaw,"minPayoutRaw"],[t?.minPayoutRaw,"artifact minPayoutRaw"],[e.exactQuoteNetPayoutRaw,"exactQuoteNetPayoutRaw"],[t?.exactQuoteNetPayoutRaw,"artifact exactQuoteNetPayoutRaw"],[e.preconditions?.confirmedNetPayoutRaw,"confirmedNetPayoutRaw"]],a=b(i[0][0],i[0][1]);for(let[l,c]of i.slice(1))if(b(l,c)!==a)throw new Error(`envelope: Anvil ${r} exact settlement limit mismatch`);return a}function Ht(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint or NFT action");let n=le(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();de(n,r.providers,"provider");let o=Ut(e,r,"evm-nft",{nowMs:t});if(n==="anvil-nft"){if(e.action!=="nft")throw new Error("envelope: Anvil requires NFT action");if(o.chainId!==4663)throw new Error("envelope: Anvil requires chain 4663");if(r.confirmationMode!=="exact-human")throw new Error("policy: Anvil requires exact-human confirmation");if(o.transactions.length!==1)throw new Error("envelope: Anvil requires one atomic action with pre-existing approval");if(Number(e.slippageBps)!==0)throw new Error("envelope: Anvil exact limit requires zero slippageBps");let[f]=o.transactions,p=S(e.destination,"Anvil market");if(S(f.to,"Anvil action target")!==p)throw new Error("envelope: Anvil action target mismatch");O(p,r.destinations,"destination");let m=S(e.contract??e.artifact?.contract,"NFT contract");if(de(m,r.nftContracts,"NFT contract"),S(e.marketCollection??e.artifact?.marketCollection,"Anvil market collection")!==m)throw new Error("envelope: Anvil market collection mismatch");let g=S(e.paymentToken??e.artifact?.paymentToken,"payment token");de(g,r.erc20Tokens,"ERC20 token");let E=ro(e,r,{nowMs:t}),x=b(e.tokenId??e.artifact?.tokenId,"tokenId"),v=b(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei");if(o.totalValue!==v||b(f.value??0,"Anvil action value")!==v)throw new Error("envelope: Anvil native swap fee mismatch");if(v>b(r.maxNativeSwapFeeWei,"maxNativeSwapFeeWei"))throw new Error("policy: Anvil native swap fee exceeds cap");let k=le(e.nftAction,"nftAction",8).toLowerCase(),N;if(k==="buy"){let A=$t(e,k),Q=Object.entries(r.nftPaymentTokenCaps||{}).find(([Ue])=>Ue.toLowerCase()===g)?.[1];if(!Q)throw new Error("policy: Anvil payment-token cap required");if(A>b(Q.maxPerTradeRaw,"maxPerTradeRaw"))throw new Error("policy: Anvil payment amount exceeds cap");if(e.preconditions?.allowanceVerified!==!0||b(e.preconditions?.allowanceRaw,"allowanceRaw")<A)throw new Error("envelope: Anvil pre-existing allowance proof required");let V=xe.decodeFunctionData("buySpecificNFT",f.data);if(xe.encodeFunctionData("buySpecificNFT",[V[0],V[1]]).toLowerCase()!==String(f.data).toLowerCase())throw new Error("envelope: non-canonical Anvil buy calldata");if(BigInt(V[0])!==x)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(V[1])!==A)throw new Error("envelope: Anvil maxCost mismatch");N={kind:"nft",action:"buy",tokenId:x,maxPaymentTokenAmountRaw:A,target:p}}else if(k==="sell"){let A=e.preconditions||{},Q=S(A.approvedAddress,"NFT approval address");if(A.nftApprovalVerified!==!0||Q!==p&&A.approvedForAll!==!0)throw new Error("envelope: Anvil pre-existing NFT approval proof required");let V=$t(e,k),oe=xe.decodeFunctionData("sellNFT",f.data);if(xe.encodeFunctionData("sellNFT",[oe[0],oe[1]]).toLowerCase()!==String(f.data).toLowerCase())throw new Error("envelope: non-canonical Anvil sell calldata");if(BigInt(oe[0])!==x)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(oe[1])!==V)throw new Error("envelope: Anvil minPayout mismatch");N={kind:"nft",action:"sell",tokenId:x,minPayoutRaw:V,target:p}}else throw new Error("envelope: unsupported Anvil NFT action");return{...o,provider:n,nftAction:k,tokenId:x,paymentToken:g,paymentTokenDecimals:E.paymentTokenDecimals,anvilAttestation:E,decoded:[N]}}let i=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;if(i?.oraclePrepared===!0&&Ve(i,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"}),o.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let a=o.transactions[0],l=X(a.data);O(l,r.selectors,"selector"),O(a.to,r.destinations,"destination");let c=eo(a.data,n),s=S(e.contract??e.artifact?.contract,"NFT contract");if(de(s,r.nftContracts,"NFT contract"),(c.contract||S(a.to,"NFT contract"))!==s)throw new Error("envelope: mint calldata NFT contract mismatch");if(c.recipient&&c.recipient!==o.owner)throw new Error("envelope: mint calldata recipient mismatch");c.feeRecipient&&de(c.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let u=b(e.quantity??e.artifact?.quantity,"quantity");if(u<=0n||u>b(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(c.quantity!==u)throw new Error("envelope: mint calldata quantity mismatch");let w=b(e.totalWei??e.artifact?.totalWei,"totalWei");if(o.totalValue!==w)throw new Error("envelope: mint value does not match declared totalWei");if(c.mintType==="allowlist"){let f=BigInt(Math.floor(t/1e3));if(c.startTime>f||c.endTime<=f)throw new Error("policy: SeaDrop allowlist stage is not open");if(c.mintPrice*u!==w)throw new Error("envelope: SeaDrop allowlist price does not match declared totalWei")}if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&b(e.priceWei??e.artifact.priceWei,"priceWei")*u!==w)throw new Error("envelope: mint price does not match declared totalWei");if(w>b(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...o,provider:n,decoded:[{...c,target:S(a.to,"mint target"),value:o.totalValue,gas:o.totalGas,fee:o.totalFee}]}}function zt(e,{localsWaiver:r=!1}={}){if(!(e in Re))throw new Error("fee: unknown action");return r?0:Re[e]}function ne(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:o,networkFees:i,requireNetworkFees:a=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let l=le(e.surface,"surface",16);if(!Rt.has(l))throw new Error("envelope: unsupported public surface");let c=le(e.action,"action",32);O(l,r.surfaces,"surface"),O(c,r.actions,"action"),O(e.owner,r.owners,"owner"),O(e.destination,r.destinations,"destination");let s=Bt(r.maxTtlMs,"maxTtlMs"),d=Bt(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>s)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>d)throw new Error("policy: slippage exceeds cap");let u=e.artifact;if(!u||typeof u!="object"||Array.isArray(u))throw new Error("envelope: structured artifact required");if(l==="evm-swap"||l==="evm-bridge")Wt(e,r,{nowMs:t,routeAttestationSecret:o});else if(l==="evm-nft")Ht(e,r,{nowMs:t});else if(l==="evm"){if(!["transfer","approve","delegate","identity"].includes(c))throw new Error(c==="mint"?"envelope: generic evm requires transfer or approve; use strict evm-nft for mint action":"envelope: generic evm requires transfer, approve, delegate, or identity");if(c==="swap"||c==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(Number(u.type)===4&&c!=="delegate")throw new Error("envelope: type-4 requires delegate");if(String(u.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(u.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");ge({...u,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:i,requireNetworkFees:a});let p=String(u.data||"0x").toLowerCase(),m=b(u.value,"EVM value");if(c==="delegate"){if(Number(u.type)!==4)throw new Error("envelope: delegate requires type-4");if(p!=="0x")throw new Error("envelope: 7702 delegate calldata must be empty");if(m!==0n)throw new Error("envelope: 7702 delegate cannot transfer native value")}else if(c==="identity"){if(m!==0n)throw new Error("envelope: ERC-8004 identity cannot transfer native value");let h=p.slice(0,10);if(h!=="0xf2c298be"&&h!=="0x0af28bd3")throw new Error("envelope: ERC-8004 selector not allowed")}else if(p==="0x"){if(m===0n)throw new Error("envelope: native EVM transfer value required")}else if(Y(p)){if(m!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else l==="btc"?et(e,r):l==="sol"?dt(e,r):l==="hl"?mt(e,r):l==="poly"?bt(e,r):l==="lighter"?St(e,r):l==="evm-order"&&Lt(e,r);let w=Number(e.fee?.oracleFeeBps)===0&&Re[c]!==0;if(e.fee?.waiver||w&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(w&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let f=zt(c,{localsWaiver:w});if(Number(e.fee?.oracleFeeBps)!==f)throw new Error("fee: final artifact fee mismatch");return!0}var Ee=Object.freeze([...Rt]),no=Object.freeze({...Dt});function oo(e={}){let r={};for(let t of Ee){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(o,i)=>n.simulate(structuredClone(o),structuredClone(i)),sign:(o,i)=>n.sign(structuredClone(o),structuredClone(i)),broadcast:(o,i,a)=>n.broadcast(o,structuredClone(i),structuredClone(a))})}}return Object.freeze(r)}function io(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as Ls}from"@noble/curves/ed25519.js";import{base58 as ao}from"@scure/base";import{RawTx as Fs,SigHash as $s,Transaction as so}from"@scure/btc-signer";import{Transaction as co,keccak256 as De,verifyTypedData as Rs}from"ethers";import{encode as xs}from"@msgpack/msgpack";import{keccak256 as As,verifyTypedData as Ss}from"ethers";var vs=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Ts=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Jt=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function uo(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let o=e[n++];if(r|=(o&127)<<t,(o&128)===0)return{value:r,offset:n};t+=7}return null}function Gt(e,r){try{if(e==="evm-order")return De(r);if(String(e).startsWith("evm"))return co.from(r).hash;if(e==="btc"){let t=Jt(r);if(!t)return null;let n=so.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=Jt(r);if(!t)return null;let n=uo(t);if(!n||n.value!==1)return null;let o=t.subarray(n.offset,n.offset+64);return o.length===64?ao.encode(o):null}if(e==="hl"&&typeof r=="string"&&r.startsWith("0x"))return De(r);if(e==="poly"&&typeof r=="string"&&r.startsWith("0x"))return De(r)}catch{}return null}var mo=e=>String(e||"").toLowerCase();function z(e){return lo("sha256").update(JSON.stringify(e)).digest("hex")}function me(e,r,t={}){return ge(e,r,t)}async function wo(e,r={}){if(!J(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function Yt(e,r,t=!1){if(!J(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),o=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<o)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function ho(e,r={}){return renderConfirmationArtifact(e,z(e),r)}var pe=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let o=fo(32).toString("hex");return this.#e.set(o,{digest:z(r),owner:mo(t),expiresAtMs:this.now()+n}),o}consume(r,t){let n=this.#e.get(String(r));if(!n)throw new Error("confirmation: used or unknown nonce");if(n.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let o=Buffer.from(n.digest,"hex"),i=Buffer.from(z(t),"hex");if(!po(o,i))throw new Error("confirmation: artifact mismatch");return this.#e.delete(String(r)),n}clear(){this.#e.clear()}};function go(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if(Y(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function yo(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function bo(e){return e==="evm"||e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Ae(e,r){let t=String(r||"");if(e==="evm-order"||String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=Vt.decode(t);return n.length===64&&Vt.encode(n)===t}catch{return!1}return e==="hl"?/^0x[0-9a-fA-F]{64}$/.test(t):e==="poly"?/^0x[0-9a-fA-F]{64}$/.test(t):!1}function Kt(e,r,t){return!Ae(e,r)||!Ae(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function xo(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function qe({artifact:e,envelope:r,nonce:t,deps:n,policy:o,confirmation:i,consumeNonce:a,nowMs:l}){let c=xo(o);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(c!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,l())!==!0)throw new Error("signer: autonomous trigger attestation required");return i}if(c!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(a)return n.confirmations.consume(t,e);if(!i||!Number.isFinite(i.expiresAtMs)||i.expiresAtMs<=l())throw new Error("confirmation: expired nonce");return i}function Eo(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Ao(e,r){return e&&Eo(e.surface)?fe(e):[r]}function So(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!Kt(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function vo(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:yo(t,n)}}async function Se(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=e?.version===1&&e?.surface?e:null,o=n?n.artifact:(()=>{let{tradeId:h,...g}=e||{};return g})(),i=Ao(n,o),a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,l=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),c=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:null,consumeNonce:!0,nowMs:l}),s=z(e),d=(h={})=>{n?ne(n,a,h):(me(o,a,{nowMs:h.nowMs,networkFees:h.networkFees,requireNetworkFees:h.requireNetworkFees}),go(o))},u=async h=>{let g=!n||bo(n.surface),E=g?await wo(h,t):void 0;return{nowMs:l(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:E,requireNetworkFees:g&&J(h?.chainId)}};d({nowMs:l(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let h of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[h]!="function")throw new Error(`signer: ${h} is required`);let w=t.reserveLedger(n||e,a);if(!w)throw new Error("signer: ledger reservation required");let f=!1,p=[];try{for(let h of i){if(typeof t.simulate!="function"||await t.simulate(h,n)!==!0)throw new Error("signer: strict affirmative simulation required");let g=await u(h);if((g.requireNetworkFees||g.networkFees!=null)&&Yt(h,g.networkFees,g.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,c=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:c,consumeNonce:!1,nowMs:l}),d(g),t.validateReservation(w,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0),f=!0;let E=await t.sign(h,n);if(typeof t.verifySigned!="function"||await t.verifySigned(E,h,n)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");if(!t.isArmed())throw new Error("signer: disarmed before broadcast");if(z(e)!==s)throw new Error("signer: artifact mutated after signing");a=typeof t.readPolicy=="function"?t.readPolicy():t.policy,c=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:a,confirmation:c,consumeNonce:!1,nowMs:l});let x=await u(h);(x.requireNetworkFees||x.networkFees!=null)&&Yt(h,x.networkFees,x.requireNetworkFees),d(x),t.validateReservation(w,a,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,a):void 0);let v=await t.broadcast(E,h,n),k=v?.status,N=n?.surface||"evm",A=So(v,N),Q=Gt(N,E);if(!Kt(N,A,Q))throw new Error("signer: receipt transaction hash does not match signed bytes");if(k===0||k==="0x0")throw Ae(N,A)?(t.settleFailedLedger(w),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(k!==1&&k!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!Ae(N,A))throw new Error("signer: successful broadcast requires a valid transaction hash");p.push(vo(v,A))}}catch(h){throw f||t.releaseLedger(w),h}if(t.commitLedger(w),p.length===1){let h={receipt:p[0]};return n?.surface==="evm-bridge"&&(h.originStatus="success",h.destinationStatus="unverified",h.destinationSuccess=!1,h.note="Origin-chain receipts do not prove destination-chain settlement."),h}let m={receipts:p,status:"success"};return n?.surface==="evm-bridge"&&(m.originStatus="success",m.destinationStatus="unverified",m.destinationSuccess=!1,m.note="Origin-chain receipts do not prove destination-chain settlement."),m}import To from"node:http";import{timingSafeEqual as Io}from"node:crypto";var Xt=new Set(["127.0.0.1","::1","localhost"]),Oo=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&Io(t,n)},y=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function ko(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var we=e=>new Promise((r,t)=>{let n=0,o=[],i=!1;e.on("data",a=>{n+=a.length,n>64*1024&&!i?(i=!0,t(new Error("request refused")),e.resume()):i||o.push(a)}),e.on("end",()=>{if(!i)try{r(JSON.parse(Buffer.concat(o).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)});function No(e={}){let r=e.host||"127.0.0.1";if(!Xt.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let s of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[s]!="function")throw new Error(`signer: ${s} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new pe,n=e.pending||new Map,o=(s,d)=>{try{e.ledgerObserver?.[s]?.(d)}catch{}};function i(s){let d=s.artifact?.version===1&&s.artifact?.surface?s.artifact:null,u=d?.artifact||s.artifact||{};return{id:s.digest.slice(0,8),digest:s.digest,surface:d?.surface||"evm",action:d?.action||"evm",chain:u.chainId??u.network??null,to:u.to||d?.destination||null,value:u.value??u.message?.sellAmount??u.message?.makingAmount??null,receiver:u.message?.receiver||u.typedData?.message?.receiver||null,maker:u.message?.maker||u.typedData?.message?.maker||null,makingAmount:u.message?.makingAmount||u.typedData?.message?.makingAmount||null,takingAmount:u.message?.takingAmount||u.typedData?.message?.takingAmount||null,sellAmount:u.message?.sellAmount||u.typedData?.message?.sellAmount||null,buyAmount:u.message?.buyAmount||u.typedData?.message?.buyAmount||null,kind:u.kind||null,type:u.type??null,authorizationList:u.authorizationList||null,feeAmount:u.message?.feeAmount||u.typedData?.message?.feeAmount||null,createdAtMs:s.createdAtMs}}function a(s){let d=String(s||"").trim().toLowerCase().replace(/^0x/,"");return d?[...n.values()].filter(u=>u.digest.toLowerCase().startsWith(d)||u.digest.slice(0,8)===d):[...n.values()]}let l=e.origin||`http://${r}`;return To.createServer(async(s,d)=>{try{let u=String(s.headers.authorization||"").replace(/^Bearer /i,"");if(!Oo(u,e.token))return y(d,401,{error:"unauthorized"});let w=ko(s.headers.host);if(!Xt.has(w))return y(d,403,{error:"host refused"});if(s.headers.origin&&s.headers.origin!==l)return y(d,403,{error:"origin refused"});if(s.method==="GET"&&s.url==="/status"){let f=typeof e.readPolicy=="function"?e.readPolicy():e.policy,p=new Set(Ee),m=Array.isArray(f?.surfaces)?f.surfaces.filter(h=>typeof h=="string"&&p.has(h)):[];return y(d,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:m,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(s.method==="POST"&&s.url==="/disarm")return e.disarm(),t.clear(),n.clear(),y(d,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(s.method))return y(d,405,{error:"request refused"});if(s.method==="POST"&&String(s.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return y(d,415,{error:"request refused"});if(s.method==="GET"&&s.url==="/pending"){let f=[...n.values()].map(i);return y(d,200,{ok:!0,armed:e.isArmed?.()===!0,count:f.length,items:f})}if(s.method==="POST"&&s.url==="/pending"){if(e.autonomous===!0)return y(d,403,{error:"autonomous signer does not queue human approvals"});let p=(await we(s)).artifact;if(!p||typeof p!="object")return y(d,400,{error:"artifact required"});let m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return y(d,403,{error:"exact-human policy required"});let h=typeof e.nowMs=="function"?e.nowMs():Date.now();if(p?.surface==="cex"){if(typeof e.inspectCex!="function")return y(d,403,{error:"cex execution unavailable"});e.inspectCex(p,m,h)}else if(p?.version===1&&p?.surface)ne(p,m,{nowMs:h,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:x,...v}=p||{};me(v,m,{nowMs:h})}let g=z(p),E=p?.surface==="cex"?Object.freeze(structuredClone(p)):p;return n.set(g,{artifact:E,digest:g,createdAtMs:h}),o("queued",{digest:g,createdAtMs:h}),y(d,200,{ok:!0,...i(n.get(g))})}if(s.method==="POST"&&s.url==="/ack"){if(e.autonomous===!0)return y(d,403,{error:"autonomous signer does not accept messaging acks"});let f=await we(s),p=a(f.digest||f.id);if(p.length===0)return y(d,404,{error:"no pending artifact"});if(p.length>1)return y(d,409,{error:"ambiguous digest; pass more hex"});let m=p[0];if((typeof e.readPolicy=="function"?e.readPolicy():e.policy)?.confirmationMode!=="exact-human")return y(d,403,{error:"exact-human policy required"});if(e.isArmed?.()!==!0)return y(d,403,{error:"signer is disarmed"});if(m.artifact?.surface==="cex"){if(typeof e.verifyCexOwnerProof!="function"||e.verifyCexOwnerProof(f.ownerProof,{digest:m.digest})!==!0)return y(d,403,{error:"exact owner Allow proof required"});if(typeof e.cexExecute!="function")return y(d,403,{error:"cex execution unavailable"});n.delete(m.digest),o("approved",{digest:m.digest});let x;try{x=await e.cexExecute(m.artifact)}catch(v){throw o("failed",{digest:m.digest,reason:String(v?.message||v)}),v}return o("executed",{digest:m.digest,owner:m.artifact?.owner??m.artifact?.from,result:x}),y(d,200,{ok:!0,executed:!0,digest:m.digest,id:m.digest.slice(0,8),result:x})}n.delete(m.digest);let g=t.issue({artifact:m.artifact,owner:m.artifact?.owner??m.artifact?.from,ttlMs:f.ttlMs});o("approved",{digest:m.digest});let E;try{E=await Se(m.artifact,g,{...e,confirmations:t})}catch(x){throw o("failed",{digest:m.digest,reason:String(x?.message||x)}),x}return o("executed",{digest:m.digest,owner:m.artifact?.owner??m.artifact?.from,result:E}),y(d,200,{ok:!0,executed:!0,confirmationNonce:g,digest:m.digest,id:m.digest.slice(0,8),result:E})}if(s.method==="POST"&&s.url==="/deny"){let f=await we(s),p=a(f.digest||f.id);return p.length===0?y(d,404,{error:"no pending artifact"}):p.length>1?y(d,409,{error:"ambiguous digest; pass more hex"}):(n.delete(p[0].digest),o("denied",{digest:p[0].digest}),y(d,200,{ok:!0,denied:!0,id:p[0].digest.slice(0,8)}))}if(s.method==="POST"&&s.url==="/confirm"){if(e.autonomous===!0)return y(d,403,{error:"autonomous signer does not issue human confirmation nonces"});let f=await we(s);if(f.artifact?.surface==="cex")return y(d,403,{error:"cex requires pending owner ack"});let p=z(f.artifact),m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return y(d,403,{error:"exact-human policy required"});let h=typeof e.nowMs=="function"?e.nowMs():Date.now();if(f.artifact?.version===1&&f.artifact?.surface)ne(f.artifact,m,{nowMs:h,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:g,...E}=f.artifact||{};me(E,m,{nowMs:h})}return typeof e.confirmArtifact!="function"?y(d,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(f.artifact,p,m)!==!0?y(d,400,{error:"exact human confirmation refused"}):y(d,200,{confirmationNonce:t.issue({artifact:f.artifact,owner:f.artifact?.owner??f.artifact?.from,ttlMs:f.ttlMs})})}if(s.method==="POST"&&s.url==="/execute"){let f=await we(s);if(f.artifact?.surface==="cex")return y(d,403,{error:"cex requires pending owner ack"});let p=await Se(f.artifact,f.confirmationNonce,{...e,confirmations:t});return y(d,200,p)}return y(d,404,{error:"not found"})}catch(u){e.onError?.(String(u?.message||u));let w=String(s.url||"");return w==="/pending"||w==="/ack"||w==="/deny"?y(d,400,{error:String(u?.message||"request refused").slice(0,300)}):y(d,400,{error:"request refused"})}})}import{createHmac as Co}from"node:crypto";import{HDNodeWallet as Lo,Mnemonic as _o,Wallet as tr}from"ethers";function Po(e){return BigInt(e).toString(16).padStart(64,"0")}function Qt(e){return e.slice(2).padStart(64,"0")}function Zt(e,r,t){return`0x42842e0e${Qt(e)}${Qt(r)}${Po(t)}`}var Bo=/^(?:[a-z]+ ){11}[a-z]+$|^(?:[a-z]+ ){23}[a-z]+$/,Fo=/^(?:0x)?[0-9a-fA-F]{64}$/;function $o(e){let r=String(e||"").trim().toLowerCase().replace(/\s+/g," ");if(!Bo.test(r))return null;try{if(!_o.isValidMnemonic(r))return null}catch{return null}return r}function Mo(e){let r=String(e||"").trim();return Fo.test(r)?r.startsWith("0x")?r:`0x${r}`:null}function Ro(e,r){let t=Buffer.from(e.replace(/^0x/i,""),"hex");return`0x${Co("sha256",t).update(`oracle-mint-fanout:v1:${r}`).digest("hex")}`}function je(e,r,t,n){return{index:e,address:String(r).toLowerCase(),path:t,kind:n}}function Do(e,{childCount:r}={}){let t=Number(r);if(!Number.isInteger(t)||t<1)throw new Error("hd-fanout: childCount must be a positive integer");if(t>32)throw new Error(`hd-fanout: childCount exceeds hard max ${32}`);let n=$o(e);if(n){let i=[];for(let a=0;a<=t;a++){let l=`m/44'/60'/0'/0/${a}`,c=Lo.fromPhrase(n,"",l);i.push(je(a,c.address,l,"bip44"))}return{kind:"bip44",main:i[0],children:i.slice(1)}}let o=Mo(e);if(o){let i=new tr(o),a=[];for(let l=1;l<=t;l++){let c=new tr(Ro(o,l));a.push(je(l,c.address,`hmac:v1:${l}`,"hmac"))}return{kind:"hmac",main:je(0,i.address,"vault-key","hmac"),children:a}}throw new Error("hd-fanout: secret must be a BIP-39 mnemonic or a 32-byte hex key")}function qo(e,r){let t=String(r||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error("hd-fanout: vault address required");if(e.main.address!==t)throw new Error(`hd-fanout: derived main ${e.main.address} does not match vault ${t} (BIP-44 index 0 must be the vault wallet, or use the raw-key HMAC path)`)}function jo(e,{nonce:r,value:t}){let n={type:2,chainId:e.chainId,to:e.to,data:e.data&&e.data!=="0x"?e.data:"0x",value:BigInt(t??e.value??0),gasLimit:BigInt(e.gasLimit),maxFeePerGas:BigInt(e.maxFeePerGas),maxPriorityFeePerGas:BigInt(e.maxPriorityFeePerGas||0)};return r!=null&&(n.nonce=Number(r)),n}async function Uo(e,r){if(e.valueMode!=="remainder")return e.value;if(typeof r!="function")throw new Error("mint-fanout: getBalance required for remainder sweep");let t=BigInt(await r(e.from)),n=BigInt(e.gasLimit)*BigInt(e.maxFeePerGas);return(t>n?t-n:0n).toString()}function Wo(e,r){if(e.kind!=="sweep-nft"||!e.needsTokenId)return e;if(r==null||String(r).length===0)throw new Error(`mint-fanout: hop ${e.step} needs tokenId after mint`);return{...e,needsTokenId:!1,tokenId:String(r),data:Zt(e.from,e.nftTo,BigInt(r))}}async function Ho(e,{byAddress:r,getNonce:t,getBalance:n,tokenIdsByChildIndex:o={}}={}){if(!e||e.signed)throw new Error("mint-fanout: unsigned plan required");if(!(r instanceof Map))throw new Error("mint-fanout: wallet map required");let i=[],a=new Map;for(let l of e.hops){let c=Wo(l,o[l.walletIndex]),s=String(c.from).toLowerCase(),d=r.get(s);if(!d)throw new Error(`mint-fanout: no local key for ${s}`);let u=await Uo(c,n),w=c.nonce;if(w==null){if(typeof t!="function")throw new Error("mint-fanout: getNonce required when hops omit nonce");a.has(s)||a.set(s,Number(await t(s))),w=a.get(s),a.set(s,w+1)}let f=jo(c,{nonce:w,value:u}),p=await d.signTransaction(f);i.push({step:c.step,kind:c.kind,walletIndex:c.walletIndex,from:c.from,to:c.to,chainId:c.chainId,value:String(u),nonce:w,delayMsAfter:c.delayMsAfter||0,signedRaw:p})}return{execution:"signed-local",signed:!0,main:e.main,chainId:e.chainId,contract:e.contract,hopCount:i.length,hops:i}}async function zo(e,{broadcastFn:r,sleepFn:t=n=>new Promise(o=>setTimeout(o,n))}={}){if(!e?.signed)throw new Error("mint-fanout: signed plan required");if(typeof r!="function")throw new Error("mint-fanout: broadcastFn required");let n=[];for(let o of e.hops){let i=await r(o.signedRaw,o);if(!i?.hash)throw new Error(`mint-fanout: hop ${o.step} broadcast returned no hash`);n.push({step:o.step,kind:o.kind,from:o.from,hash:i.hash}),o.delayMsAfter>0&&await t(o.delayMsAfter)}return{ok:!0,receipts:n}}export{pe as ConfirmationStore,Ee as PUBLIC_SIGNER_SURFACES,no as REVIEWED_EVM_SELECTORS,z as artifactDigest,me as assertExactPolicy,qo as assertMainMatchesVault,zo as broadcastMintFanout,No as createSignerServer,oo as createSurfaceAdapters,Do as deriveFanoutAccounts,fe as evmTransactions,Se as executeConfirmedArtifact,ho as inspectArtifactForConfirmation,Wt as inspectEvmBatch,Ht as inspectEvmNft,zt as publicFeeBps,Ho as signMintFanoutPlan,io as surfaceAdapterFor,ne as validateSurfaceEnvelope};
+import{createHash as ho,randomBytes as go,timingSafeEqual as yo}from"node:crypto";import{base58 as Xt}from"@scure/base";import{Interface as qt}from"ethers";import{Interface as Ar,MaxUint256 as Sr,isAddress as vr,keccak256 as Fi,toUtf8Bytes as $i}from"ethers";import{Interface as xr,isAddress as hi}from"ethers";import{isAddress as di}from"ethers";import{createHash as lr,createHmac as fr,timingSafeEqual as pr}from"node:crypto";import{readFileSync as sr}from"node:fs";import{homedir as cr}from"node:os";import{join as be}from"node:path";function ur(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=cr();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||be(r,".config","oracle")).trim();return[e,be(t,"exec.env")].filter(Boolean)}return[e,be(r,".config","oracle","exec.env"),be(r,".config","mad-desk","exec.env")].filter(Boolean)}function se(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let o of ur())try{let i=sr(o,"utf8"),a=i.match(new RegExp(`^${r}=(.*)$`,"m"))||i.match(new RegExp(`^${t}=(.*)$`,"m"));if(a&&(n=a[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function te(e,r,t="guard"){if(typeof r!="number"||!Number.isFinite(r))throw new Error(`${t}: current time must be a finite number (got ${dr(r)})`);let n=r,o=Number(e?.issuedAtMs),i=Number(e?.expiresAtMs);if(!Number.isFinite(i))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>i)throw new Error(`${t} expired at ${i}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(o))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(i<=o)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:o,expiresAtMs:i}}function dr(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var ze=100;function ke(e){return Array.isArray(e)?`[${e.map(ke).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${ke(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function mr(e,{required:r=!1}={}){try{return se(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function wr(e){let{signature:r,...t}=e;return t}function hr(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return lr("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function gr(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:pr(t,n)}function yr(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let i=10;i+64<=r.length;i+=64)n.push(r.slice(i,i+64));let o=i=>n[i]==null?null:BigInt("0x"+n[i]);switch(t){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+4)}case"0xb858183f":{let i=o(0);if(i==null)return null;let a=Number(i)/32;return!Number.isInteger(a)||a<0?null:o(a+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}function Ne(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:o,tx:i,requireSigned:a=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let f=mr(o,{required:a});if(a&&!f)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(f){let p=fr("sha256",f).update(ke(wr(e))).digest("hex");if(!gr(e.signature,p))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let c=Number(e.selectedBps),s=Number(e.capBps);if(!Number.isInteger(c)||c<0||c>ze)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(s)||s<0||s>ze||c>s)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{te({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(p){throw new Error(`${p.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let u=BigInt(e.quoteAmountOut??0),d=BigInt(e.minAmountOut??0);if(u<=0n||d<=0n)throw new Error("auto-slippage guard amounts must be positive");let w=u*BigInt(1e4-c),l=w/10000n;if(w%10000n!==0n&&(l+=1n),d<l)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(i?.data&&e.minAmountOut!=null){let p=yr(i.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==hr(i.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(p!=null&&p!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${p}, not the guard floor ${e.minAmountOut}`)}else{if(p==null){let m=String(i.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${m}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(p!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${p}`)}}return!0}var xi=new xr(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Er,isAddress as Si}from"ethers";var Oi=new Er(["function approve(address spender,uint256 amount) returns (bool)"]),ki=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function O(e,r="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${r} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${r} must be a number or decimal string`);return e}throw new Error(`${r} must be a number or decimal string`)}function F(e,r="value"){if(typeof e!="string"||e==="")throw new Error(`${r} must be a string`);return e}function z(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=O(e,r);if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}function $(e,r="amount"){let t=z(e,r);if(t<=0n)throw new Error(`${r} must be positive`);return t}function k(e,r,t="amount"){let n=O(e,t);if(!/^-?\d*(\.\d+)?$/.test(n)||n===""||n==="."||n==="-")throw new Error(`${t} must be a decimal number, got ${JSON.stringify(n)}`);let o=n.startsWith("-"),i=o?n.slice(1):n,[a="0",f=""]=i.split(".");if(f.length>r)throw new Error(`${t} has more than ${r} decimal places, which would lose precision`);let c=BigInt((a||"0")+f.padEnd(r,"0"));return o?-c:c}var Ui=new Ar(["function approve(address spender,uint256 amount) returns (bool)"]);function Je(e,r){let t=String(e||"").trim();if(!vr(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function Tr(e,r="approval amount",{allowZero:t=!1}={}){let n=z(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=Sr)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var Ge=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),Ir=new Set(["0x39509351","0xf9255c1f"]);function Q(e){let r=String(e||"").toLowerCase();return r.length<10?!1:Ge.has(r.slice(0,10))}function Ve(e){if(!Q(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],o=s=>n[s]?"0x"+n[s].slice(24):null,i=s=>n[s]?BigInt("0x"+n[s]):null,a=null,f=null,c=null;switch(t){case"0x095ea7b3":case"0x39509351":a=o(0),f=i(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":c=o(0),a=o(1),f=i(2);break;case"0xd505accf":a=o(1),f=i(2);break;case"0x8fcbaf0c":{a=o(1),f=i(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":c=o(0),a=o(1),f=i(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(a==null||f==null)throw new Error("invalid approve calldata");return{spender:Je(a,"approval spender"),token:c==null?null:Je(c,"approval token"),amount:Tr(f,"approval amount",{allowZero:!0}),selector:t,additive:Ir.has(t)}}import{createHash as Or,createHmac as zi,timingSafeEqual as Ji}from"node:crypto";var kr=2,Pe=300*1e3,Ke=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function Nr(e){let r=e==null||e===""?Pe:Number(e);return!Number.isFinite(r)||r<0?Pe:Math.min(r,Ke)}function Le(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(Le).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${Le(e[t])}`).join(",")}}`}function Pr(e){let{prepareHash:r,prepareMac:t,note:n,...o}=e||{};return o}function Lr(e){let r=Pr(e);return Or("sha256").update(Le(r)).digest("hex")}function Ye(e,{maxAgeMs:r=Pe,nowMs:t=Date.now(),providers:n=null,kinds:o=null,label:i="operator"}={}){if(!e||typeof e!="object")throw new Error(`${i}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${i}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==kr)throw new Error(`${i}: unsupported prepareVersion ${e.prepareVersion}`);let a=Lr(e);if(String(e.prepareHash||"")!==a)throw new Error(`${i}: prepareHash mismatch \u2014 payload was altered after prepare`);let f=Number(e.preparedAt),c=Number(e.expiresAt),s=Nr(r),u=t-f,d=c-f;if(!Number.isFinite(u)||!Number.isFinite(c)||!Number.isFinite(d)||u<0||d<=0||d>Ke||u>s||t>=c)throw new Error(`${i}: prepare envelope expired or clock-skewed (ageMs=${u}, max=${s})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${i}: provider ${e.provider} not allowed here`);if(o&&!new Set(o).has(e.kind))throw new Error(`${i}: kind ${e.kind} not allowed here`);return!0}var ce=e=>String(e||"").toLowerCase(),Cr=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","authorizationList","slippageBps","expiresAtMs"]),Br=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function K(e){try{return Br.has(BigInt(e))}catch{return!1}}var M=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Xe=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},re=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function xe(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:o=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(l=>!Cr.has(l)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2,4].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");if(Number(e.type)===4){if(!Array.isArray(e.authorizationList)||e.authorizationList.length===0||e.authorizationList.length>8)throw new Error("policy: type-4 requires 1-8 authorizationList entries");for(let[l,p]of e.authorizationList.entries()){if(!p||typeof p!="object")throw new Error(`policy: authorizationList[${l}] required`);re(p.address,r.destinations,"destination",ce);try{if(BigInt(p.chainId)!==BigInt(e.chainId))throw new Error("policy: type-4 authorization chainId must match transaction")}catch(m){throw String(m?.message||"").includes("authorization chainId")?m:new Error("policy: type-4 authorization chainId must match transaction")}}if(String(e.data||"0x").toLowerCase()!=="0x")throw new Error("policy: type-4 calldata must be empty");if(M(e.value,"value")!==0n)throw new Error("policy: type-4 cannot transfer native value")}else if(e.authorizationList!=null)throw new Error("policy: authorizationList is only valid on type-4");let i=(l,p)=>{try{return BigInt(l)===BigInt(p)}catch{return String(l)===String(p)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(l=>i(l,e.chainId)))throw new Error("policy: chain not allowed");if(re(e.to,r.destinations,"destination",ce),re(String(e.data||"0x").slice(0,10),r.selectors,"selector",l=>String(l).toLowerCase()),re(e.from,r.owners,"owner",ce),Q(e.data)){let l;try{l=Ve(e.data)}catch(m){throw new Error(`policy: malformed approval calldata: ${m?.message||m}`)}re(l.spender,r.spenders,"spender",ce),re(l.token||e.to,r.erc20Tokens,"ERC-20 token",ce);let p=M(r.maxApproval,"maxApproval");if(BigInt(l.amount)>p)throw new Error("policy: approval exceeds cap");if(l.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if(M(e.value,"value")>M(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let a=M(e.gasLimit,"gasLimit");if(a>M(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let f=e.maxFeePerGas??e.gasPrice,c=M(f,"feePerGas")*a,s=0n;try{if(K(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(s+=M(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(s+=M(e.operatorFeeWei,"operatorFeeWei")),K(e.chainId)&&(o||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let l=M(n.l1FeeWei,"estimated l1FeeWei")+M(n.operatorFeeWei,"estimated operatorFeeWei");if(s<l)throw new Error("policy: rollup fee attestation understates estimate")}if(c+s>M(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let d=Xe(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>d)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let w=Xe(r.maxTtlMs??12e4,"maxTtlMs");if(w<=0||e.expiresAtMs-t>w)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as Qe}from"node:crypto";import{Address as _r,NETWORK as Fr,OutScript as Ze,RawTx as $r,SigHash as et,TEST_NETWORK as Mr,Transaction as Rr}from"@scure/btc-signer";var tt=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Dr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},qr=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,jr=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),Z=e=>jr(e)?String(e).toLowerCase():String(e),Ce=(e,r)=>Array.isArray(r)&&r.some(t=>Z(t)===Z(e)),Ur=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function Hr(e){let r=Buffer.from($r.encode(e)),t=Qe("sha256").update(r).digest();return Buffer.from(Qe("sha256").update(t).digest()).reverse().toString("hex")}function Wr(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(Hr(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!Ur(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function zr(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(d=>!["network","psbt"].includes(d)))throw new Error("envelope: unexpected BTC artifact field");if(!Ce(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?Fr:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?Mr:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let o;try{o=Rr.fromPSBT(Dr(t.psbt,"PSBT"))}catch(d){throw new Error(`envelope: invalid PSBT: ${d?.message||d}`)}if(o.inputsLength===0||o.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let i=_r(n);for(let d=0;d<o.inputsLength;d++){let w=o.getInput(d);for(let m of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(qr(w[m]))throw new Error("envelope: signed or finalized PSBT refused");if(w.sighashType!==void 0&&w.sighashType!==et.DEFAULT&&w.sighashType!==et.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let l=Wr(w),p;try{let m=Ze.decode(l.script);if(!["wpkh"].includes(m.type))throw new Error("unsupported input");p=i.encode(m)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!Ce(p,r.owners)||Z(p)!==Z(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let a=new Set([e.owner,...r.changeAddresses||[]].map(d=>Z(d))),f=0n,c=!1,s=[];for(let d=0;d<o.outputsLength;d++){let w=o.getOutput(d),l;try{l=i.encode(Ze.decode(w.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let p=Z(l);if(s.push(`${l}:${w.amount}`),p===Z(e.destination)){c=!0,f+=w.amount;continue}if(Ce(l,r.destinations)){f+=w.amount;continue}if(!a.has(p))throw new Error("policy: Bitcoin output destination not allowed")}if(!c)throw new Error("envelope: Bitcoin destination mismatch");let u;try{u=o.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(u<0n||u>tt(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(f>tt(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:f.toString(),notional:(f+u).toString(),fee:u.toString(),outputs:Object.freeze(s)})}function rt(e,r){let{unit:t,value:n,notional:o,fee:i}=zr(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}import{createHash as _e}from"node:crypto";import{base58 as ct}from"@scure/base";import{getCompiledTransactionMessageDecoder as Jr}from"@solana/transaction-messages";var Se="11111111111111111111111111111111",ut="ComputeBudget111111111111111111111111111111",Gr="So11111111111111111111111111111111111111112",dt="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";var lt="ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",Vr=5000n,Kr=2039280n,Yr=37095705934669439343138083508754565189542113879843219016388785533085940283555n,L=57896044618658097711785492504343953926634992332820282019728792003956564819949n,nt=19681161376707505956807079304988542015446066515923890162744021073123829784752n,ot=e=>_e("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Xr=new Map([[ot("route"),{name:"route",prefixBytes:0}],[ot("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]),B=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Qr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},q=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e)),I=e=>String(e||""),Zr=e=>Array.isArray(e.solMints)&&e.solMints.length?e.solMints:e.tokens,Ae=e=>_e("sha256").update(e).digest("hex");function Ee(e,r){try{let t=Buffer.from(ct.decode(String(e||"")));if(t.length!==32)throw new Error("wrong length");return t}catch{throw new Error(`envelope: invalid Solana ${r}`)}}function R(e){let r=e%L;return r>=0n?r:L+r}function H(e,r){let t=e;for(;r-- >0n;)t=t*t%L;return t}function en(e){let t=e*e%L*e%L,n=H(t,2n)*t%L,o=H(n,1n)*e%L,i=H(o,5n)*o%L,a=H(i,10n)*i%L,f=H(a,20n)*a%L,c=H(f,40n)*f%L,s=H(c,80n)*c%L,u=H(s,80n)*c%L,d=H(u,10n)*i%L;return H(d,2n)*e%L}function tn(e,r){let t=R(r*r*r),n=R(t*t*r),o=en(e*n),i=R(e*t*o),a=R(r*i*i),f=i,c=R(i*nt),s=a===e,u=a===R(-e),d=a===R(-e*nt);return s&&(i=f),(u||d)&&(i=c),(R(i)&1n)===1n&&(i=R(-i)),!s&&!u?null:i}function rn(e){if(!e||e.length!==32)return!1;let r=0n;for(let o=31;o>=0;o--)r=(r<<8n)+BigInt(o===31?e[o]&127:e[o]);let t=R(r*r),n=tn(R(t-1n),R(Yr*t+1n));return n===null?!1:!(n===0n&&(e[31]&128)!==0)}function nn(e,r){let t=Buffer.concat([...e,Ee(r,"program id"),Buffer.from("ProgramDerivedAddress")]),n=_e("sha256").update(t).digest();if(rn(n))throw new Error("envelope: derived Solana program address is on curve");return ct.encode(n)}function Fe(e,r,t=dt){let n=[Ee(e,"owner"),Ee(t,"token program"),Ee(r,"mint")];for(let o=255;o>=0;o--)try{return nn([...n,Buffer.from([o])],lt)}catch(i){if(!/on curve/.test(String(i?.message||i)))throw i}throw new Error("envelope: unable to derive associated token account")}function on(e,r){return(r.accountIndices||[]).map(t=>I(e.staticAccounts[t]))}function ue(e){return Buffer.from(e.data||[])}function an(e,r){return I(e.staticAccounts[r.programAddressIndex])}function ft(e,r){return Number(r)<e.header.numSignerAccounts}function sn(e,r){let t=e.header.numSignerAccounts,n=e.header.numReadonlySignerAccounts,o=e.header.numReadonlyNonSignerAccounts,i=e.staticAccounts.length;return Number(r)<t?Number(r)<t-n:Number(r)<i-o}function de(e){return e.accountIndices||[]}function Be(e,r){if(!Array.isArray(e)||!e.length)throw new Error(`policy: ${r} allowlist required`);return e.map(String)}function it(e,r){let t=de(r).map(n=>{let o=ft(e,n)?"s":"n",i=sn(e,n)?"w":"r";return`${n}:${I(e.staticAccounts[n])}:${o}:${i}`});return Ae(Buffer.from(t.join(`
+`)))}function at(e,r,t){if(r+8>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readBigUInt64LE(r)}function cn(e,r,t){if(r+2>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt16LE(r)}function un(e,r,t){if(r+4>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt32LE(r)}function dn(e,r,t){let n=t.maxJupiterRoutePlanSteps===void 0?1:Number(t.maxJupiterRoutePlanSteps);if(!Number.isSafeInteger(n)||n<1)throw new Error("policy: maxJupiterRoutePlanSteps must be a positive integer");if(r<1||r>n)throw new Error("policy: Jupiter route-plan step count exceeds reviewed cap");let o=Array.isArray(t.jupiterRouteVariants)?t.jupiterRouteVariants.map(Number):[];if(!o.length)throw new Error("policy: Jupiter route variant allowlist required");let i=t.jupiterRouteVariantPayloadBytes||{},a=0,f=0,c=[];for(let s=0;s<r;s++){if(a>=e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let u=e[a++];if(!o.includes(u))throw new Error("policy: Jupiter route variant not allowed");if(!Object.hasOwn(i,String(u)))throw new Error("policy: Jupiter route variant payload size required");let d=Number(i[String(u)]);if(!Number.isSafeInteger(d)||d<0||d>16)throw new Error("policy: Jupiter route variant payload size invalid");if(a+d+3>e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let w=e.subarray(a,a+d);a+=d;let l=w.toString("hex"),p=t.jupiterRouteVariantPayloads?.[String(u)];if(!Array.isArray(p)||!p.map(String).includes(l))throw new Error("policy: Jupiter route variant payload not allowed");let m=e[a++],h=e[a++],b=e[a++];if(m<1||m>100)throw new Error("envelope: Jupiter route-plan percent invalid");if(h!==s||b!==s+1)throw new Error("envelope: unsupported Jupiter route-plan token index");f+=m,c.push(Object.freeze({swapVariant:u,variantPayloadHex:l,percent:m,inputIndex:h,outputIndex:b}))}if(a!==e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");if(f!==100*r)throw new Error("envelope: Jupiter route-plan percent total mismatch");return Object.freeze(c)}function ln(e,r){let t=ue({data:e}),n=t.subarray(0,8).toString("hex"),o=Xr.get(n);if(!o)throw new Error("envelope: unsupported Jupiter instruction discriminator");let i=19,a=o.prefixBytes===1?t[8]:null;if(o.prefixBytes===1&&t.length<9)throw new Error("envelope: malformed Jupiter shared route payload");let f=8+o.prefixBytes,c=f+4,s=t.length-i;if(s<=c)throw new Error("envelope: malformed Jupiter route payload");let u=un(t,f,"route plan length"),d=t.subarray(c,s),w=dn(d,u,r);return Object.freeze({instruction:o.name,routeId:a,routePlanSteps:u,routePlan:w,routePlanHash:Ae(d),inAmount:at(t,s,"in_amount"),quotedOutAmount:at(t,s+8,"quoted_out_amount"),slippageBps:cn(t,s+16,"slippage_bps"),platformFeeBps:t[s+18],instructionHash:Ae(t)})}function fn(e,r,t){let n=on(e,r),o=(i,a)=>{let f=n[i];if(!f)throw new Error(`envelope: Jupiter ${a} account missing`);return f};if(t.instruction==="route"){if(n.length<9)throw new Error("envelope: Jupiter route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),userTransferAuthority:o(1,"userTransferAuthority"),userSourceTokenAccount:o(2,"userSourceTokenAccount"),userDestinationTokenAccount:o(3,"userDestinationTokenAccount"),destinationTokenAccount:o(4,"destinationTokenAccount"),destinationMint:o(5,"destinationMint"),platformFeeAccount:o(6,"platformFeeAccount"),eventAuthority:o(7,"eventAuthority"),program:o(8,"program")}}if(t.instruction==="shared_accounts_route"){if(n.length<13)throw new Error("envelope: Jupiter shared route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),programAuthority:o(1,"programAuthority"),userTransferAuthority:o(2,"userTransferAuthority"),userSourceTokenAccount:o(3,"sourceTokenAccount"),programSourceTokenAccount:o(4,"programSourceTokenAccount"),programDestinationTokenAccount:o(5,"programDestinationTokenAccount"),userDestinationTokenAccount:o(6,"destinationTokenAccount"),sourceMint:o(7,"sourceMint"),destinationMint:o(8,"destinationMint"),platformFeeAccount:o(9,"platformFeeAccount"),token2022Program:o(10,"token2022Program"),eventAuthority:o(11,"eventAuthority"),program:o(12,"program")}}throw new Error("envelope: unsupported Jupiter account layout")}function st(e,r){return e&&e!==r?e:null}function D(e,r,t){let n=I(e.staticAccounts[r]);if(!n)throw new Error(`envelope: Jupiter ${t} missing`);return n}function pn(e,r){let t=ue(e);if(t.length===5&&t[0]===2){let n=t.readUInt32LE(1),o=r.maxComputeUnits===void 0?14e5:Number(r.maxComputeUnits);if(!Number.isSafeInteger(o)||o<=0)throw new Error("policy: maxComputeUnits must be positive");if(n>o)throw new Error("policy: Jupiter compute unit limit exceeds cap");return 0n}throw t.length===9&&t[0]===3?new Error("policy: Jupiter priority fee not allowed"):new Error("envelope: unsupported Jupiter compute-budget helper")}function mn(e,r,t,n,o,i){let a=ue(r);if(a.length!==1||a[0]!==1)throw new Error("envelope: unsupported Jupiter ATA helper");let f=de(r);if(f.length!==6)throw new Error("envelope: malformed Jupiter ATA helper");let c=D(e,f[0],"ATA payer"),s=D(e,f[1],"ATA account"),u=D(e,f[2],"ATA owner"),d=D(e,f[3],"ATA mint"),w=D(e,f[4],"ATA system program"),l=D(e,f[5],"ATA token program");if(c!==t.owner)throw new Error("envelope: Jupiter ATA payer must equal owner");if(u!==t.owner)throw new Error("envelope: Jupiter ATA owner must equal owner");if(w!==Se)throw new Error("envelope: Jupiter ATA system program mismatch");if(l!==o)throw new Error("envelope: Jupiter ATA token program mismatch");if(d!==n.inputMint&&d!==n.outputMint)throw new Error("envelope: Jupiter ATA mint mismatch");if(s!==Fe(t.owner,d,o))throw new Error("envelope: Jupiter ATA account mismatch");return{ata:s,debit:i}}function wn(e,r,t,n,o){let i=de(r),a=ue(r);if(i.length!==2||a.length!==12||a.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Jupiter system helper");let f=D(e,i[0],"wrap payer"),c=D(e,i[1],"wrap target"),s=a.readBigUInt64LE(4);if(f!==t.owner||c!==n)throw new Error("envelope: unsupported Jupiter wrap transfer");if(s!==o)throw new Error("envelope: Jupiter wrap transfer amount mismatch");return s}function hn(e,r,t,n){let o=de(r),i=ue(r);if(i.length!==1)throw new Error("envelope: unsupported Jupiter token helper");if(i[0]===17){if(o.length!==1||D(e,o[0],"syncNative account")!==n)throw new Error("envelope: Jupiter syncNative account mismatch");return{kind:"syncNative"}}if(i[0]===9){if(o.length!==3)throw new Error("envelope: malformed Jupiter closeAccount helper");let a=D(e,o[0],"closeAccount source"),f=D(e,o[1],"closeAccount destination"),c=D(e,o[2],"closeAccount authority");if(a!==n||f!==t.owner||c!==t.owner)throw new Error("envelope: Jupiter closeAccount must return to owner");return{kind:"closeAccount"}}throw new Error("envelope: unsupported Jupiter token helper")}function gn(e,r,t,n,o,i,a){let f=Fe(r.owner,r.artifact.inputMint,a);if(o.userSourceTokenAccount!==f)throw new Error("envelope: Jupiter source token account is not owner ATA");let c=B(t.jupiterAtaRentLamports,"jupiterAtaRentLamports");if(c<Kr)throw new Error("policy: Jupiter ATA rent below the token-account rent-exempt minimum");let s=new Map,u=0n,d=!1,w=!1;for(let l of e.instructions){if(l===n)continue;let p=an(e,l);if(p===ut)pn(l,t);else if(p===lt){let{ata:m,debit:h}=mn(e,l,r,r.artifact,a,c);s.set(m,h)}else if(p===Se)u+=wn(e,l,r,f,i);else if(p===a){let m=hn(e,l,r,f);m.kind==="syncNative"&&(d=!0),m.kind==="closeAccount"&&(w=!0)}else throw new Error("envelope: unsupported Jupiter helper instruction")}if(u>0n&&(!d||!w))throw new Error("envelope: Jupiter native wrap helpers incomplete");if(u!==0n&&u!==i)throw new Error("envelope: Jupiter native wrap amount mismatch");return[...s.values()].reduce((l,p)=>l+p,0n)}function yn(e){let r;try{r=Jr().decode(Qr(e.messageBase64,"Solana message"))}catch(t){throw new Error(`envelope: invalid Solana message: ${t?.message||t}`)}if(r.version!=="legacy"&&Array.isArray(r.addressTableLookups)&&r.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");return r}function bn(e,r,t,n=1){if(e.header.numSignerAccounts!==n||I(e.staticAccounts[0])!==r.owner||!q(r.owner,t.owners))throw new Error("envelope: Solana owner mismatch");if(!Array.isArray(e.instructions)||e.instructions.length===0)throw new Error("envelope: Solana instructions required");let o=[];for(let i of e.instructions){let a=I(e.staticAccounts[i.programAddressIndex]);if(!a||!q(a,t.programs))throw new Error("policy: Solana program not allowed");o.push(a)}return o}function xn(e,r,t){let n=B(t.lamportsPerSignature,"lamportsPerSignature");if(n<Vr)throw new Error("policy: Solana per-signature fee is below the network minimum");let o=t.maxLamportsPerSignature===void 0?n:B(t.maxLamportsPerSignature,"maxLamportsPerSignature");if(n>o)throw new Error("policy: Solana per-signature fee exceeds cap");let i=BigInt(e.header.numSignerAccounts),a=i*n,f=i*o;if(r.exactFeeLamports!==void 0){let s=B(r.exactFeeLamports,"exactFeeLamports");if(s<a)throw new Error("policy: Solana exact fee below the base signature fee");if(s>f)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let c=f;if(c>B(t.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return c}function En(e,r,t,n){let o=0n,i=!1;for(let a of e.instructions){if(I(e.staticAccounts[a.programAddressIndex])!==Se)throw new Error("envelope: unsupported Solana program decoder");let c=a.accountIndices||[];if(c.length!==2||I(e.staticAccounts[c[0]])!==r.owner)throw new Error("envelope: Solana transfer owner mismatch");let s=I(e.staticAccounts[c[1]]);if(s!==r.destination||!q(s,t.destinations))throw new Error("envelope: Solana destination mismatch");let u=Buffer.from(a.data||[]);if(u.length!==12||u.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");o+=u.readBigUInt64LE(4),i=!0}if(!i)throw new Error("envelope: Solana destination mismatch");if(o>B(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:o,programs:n}}function An(e,r,t,n){let o=r.artifact,i=I(o.mintProgram);if(!q(i,t.solMintPrograms))throw new Error("policy: Solana mint program not allowed");let a=e.header.numSignerAccounts;if(a!==2&&a!==3)throw new Error("envelope: Solana mint requires the payer, asset, and at most one distinct minter");let f=I(e.staticAccounts[a-1]);if(f!==I(o.assetSigner))throw new Error("envelope: Solana mint asset signer mismatch");if(a===3){let d=I(e.staticAccounts[1]);if(!o.minter||d!==I(o.minter))throw new Error("envelope: Solana mint minter mismatch");if(d===f)throw new Error("envelope: Solana mint minter must not be the asset signer")}else if(o.minter&&I(o.minter)!==r.owner)throw new Error("envelope: Solana mint declares a minter the message does not sign");if(q(f,t.owners))throw new Error("envelope: Solana mint asset signer must not be a policy owner");let c=B(o.maxSpendLamports,"maxSpendLamports");if(c>B(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana mint spend exceeds cap");let s=0n,u=!1;for(let d of e.instructions){let w=I(e.staticAccounts[d.programAddressIndex]);if(w!==ut){if(w===Se){let l=d.accountIndices||[];if(l.length!==2||I(e.staticAccounts[l[0]])!==r.owner)throw new Error("envelope: Solana mint transfer owner mismatch");let p=I(e.staticAccounts[l[1]]);if(!q(p,t.destinations))throw new Error("envelope: Solana mint destination mismatch");let m=Buffer.from(d.data||[]);if(m.length!==12||m.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");s+=m.readBigUInt64LE(4);continue}if(w!==i)throw new Error("envelope: unsupported Solana program decoder");u=!0}}if(!u)throw new Error("envelope: Solana mint instruction required");if(s>c)throw new Error("policy: Solana mint visible spend exceeds the declared maximum");return{value:c,programs:n,unverifiableProgramSpend:!0,visibleSpendLamports:s.toString()}}function Sn(e,r,t,n){let o=r.artifact;if(o.provider!=="jupiter")throw new Error("envelope: Solana swap provider must be jupiter");if(o.inputMint!==Gr)throw new Error("envelope: Jupiter local signer requires native SOL input");if(o.outputMint!==r.destination||!q(o.outputMint,t.destinations))throw new Error("envelope: Jupiter output mint destination mismatch");let i=Zr(t);if(!q(o.inputMint,i)||!q(o.outputMint,i))throw new Error("policy: Solana token not allowed");let a=B(o.inAmount,"inAmount"),f=B(o.outAmount,"outAmount"),c=B(o.otherAmountThreshold,"otherAmountThreshold");if(a<=0n||a>B(t.maxPerTradeLamports,"maxPerTradeLamports"))throw new Error("policy: Solana swap amount exceeds per-trade cap");if(a>B(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");if(f<=0n||c<=0n||c>f)throw new Error("envelope: Jupiter quote floor invalid");if(Number(o.slippageBps)!==Number(r.slippageBps))throw new Error("policy: Solana slippage mismatch");let s=I(o.jupiterProgram);if(!s||!q(s,t.programs)||!n.includes(s))throw new Error("policy: Jupiter program not allowed or absent");let u=e.instructions.filter(S=>I(e.staticAccounts[S.programAddressIndex])===s);if(u.length!==1)throw new Error("envelope: exactly one Jupiter swap instruction required");let d=u[0],w=ln(d.data,t);if(w.instruction==="shared_accounts_route"){let S=Array.isArray(t.jupiterSharedRouteIds)?t.jupiterSharedRouteIds.map(Number):[];if(!S.length)throw new Error("policy: Jupiter shared route id allowlist required");if(!S.includes(Number(w.routeId)))throw new Error("policy: Jupiter shared route id not allowed")}else if(w.routeId!=null)throw new Error("envelope: unexpected Jupiter shared route id");if(!Be(t.jupiterRoutePlanHashes,"Jupiter route-plan hash").includes(w.routePlanHash))throw new Error("policy: Jupiter route-plan hash not allowed");if(w.inAmount!==a)throw new Error("envelope: Jupiter route in_amount mismatch");if(w.quotedOutAmount!==f)throw new Error("envelope: Jupiter route quoted_out_amount mismatch");if(w.slippageBps!==Number(o.slippageBps))throw new Error("envelope: Jupiter route slippage mismatch");let l=w.quotedOutAmount-w.quotedOutAmount*BigInt(w.slippageBps)/10000n;if(c!==l)throw new Error("envelope: Jupiter otherAmountThreshold does not match serialized min-out");if(w.platformFeeBps!==0)throw new Error("policy: Jupiter platform fee not allowed");let p=fn(e,d,w),m=de(d),h=w.instruction==="shared_accounts_route"?2:1;if(!ft(e,m[h]))throw new Error("envelope: Jupiter transfer authority must be signer");if(p.program!==s)throw new Error("envelope: Jupiter program account mismatch");if(p.userTransferAuthority!==r.owner)throw new Error("envelope: Jupiter transfer authority must equal owner");if(p.destinationMint!==o.outputMint)throw new Error("envelope: Jupiter destination mint mismatch");if(p.sourceMint!==void 0&&p.sourceMint!==o.inputMint)throw new Error("envelope: Jupiter source mint mismatch");let b=Array.isArray(t.tokenPrograms)&&t.tokenPrograms.length?t.tokenPrograms:[dt];if(!q(p.tokenProgram,b))throw new Error("policy: Solana token program not allowed");let A=Fe(r.owner,o.outputMint,p.tokenProgram);if(p.userDestinationTokenAccount!==A)throw new Error("envelope: Jupiter destination token account is not owner ATA");let g=st(p.destinationTokenAccount,s);if(g&&g!==A)throw new Error("envelope: Jupiter optional destination account redirects proceeds");if(st(p.platformFeeAccount,s))throw new Error("policy: Jupiter platform fee account not allowed");if(!Be(t.jupiterRouteAccountHashes,"Jupiter route account hash").includes(it(e,d)))throw new Error("policy: Jupiter route account hash not allowed");let x=Ae(Buffer.from([w.instruction,w.routeId??"",w.routePlanHash,it(e,d)].join(`
+`)));if(!Be(t.jupiterRouteReviewHashes,"Jupiter route review hash").includes(x))throw new Error("policy: Jupiter route review hash not allowed");let v=gn(e,r,t,d,p,a,p.tokenProgram),P=a+v;if(P>B(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:P,programs:n}}function vn(e,r){if(e.action!=="transfer"&&e.action!=="swap"&&e.action!=="mint")throw new Error("envelope: Solana decoder requires transfer, swap, or mint action");let t=e?.artifact,n=e.action==="transfer"?["cluster","messageBase64","exactFeeLamports"]:e.action==="mint"?["cluster","messageBase64","exactFeeLamports","mintProgram","assetSigner","maxSpendLamports","minter","cosignatures"]:["cluster","provider","messageBase64","exactFeeLamports","inputMint","outputMint","inAmount","outAmount","otherAmountThreshold","slippageBps","jupiterProgram"];if(Object.keys(t||{}).some(c=>!n.includes(c)))throw new Error("envelope: unexpected Solana artifact field");if(!q(t.cluster,r.chains))throw new Error("policy: chain not allowed");let o=yn(t),i=bn(o,e,r,e.action==="mint"?o.header.numSignerAccounts:1),a=e.action==="transfer"?En(o,e,r,i):e.action==="mint"?An(o,e,r,i):Sn(o,e,r,i),f=xn(o,t,r);return Object.freeze({unit:"lamports",value:a.value.toString(),notional:(a.value+f).toString(),fee:f.toString(),programs:Object.freeze(a.programs),...a.unverifiableProgramSpend?{unverifiableProgramSpend:!0,visibleSpendLamports:a.visibleSpendLamports}:{}})}function pt(e,r){let{unit:t,value:n,notional:o,fee:i,unverifiableProgramSpend:a,visibleSpendLamports:f}=vn(e,r);return Object.freeze(a?{unit:t,value:n,notional:o,fee:i,unverifiableProgramSpend:a,visibleSpendLamports:f}:{unit:t,value:n,notional:o,fee:i})}var ua=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,da=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,la=AbortSignal.prototype.throwIfAborted,fa=EventTarget.prototype.addEventListener,pa=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null;var ma=64*1024,wa=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});var In=1e8;var Ta=Object.freeze({tradexyz:"xyz",ventuals:"vntl",hypernova:"hyna",paradex:"para"});function $e(e){if(typeof e!="string"||!/^#(?:0|[1-9]\d*)$/.test(e))return null;let r=Number(e.slice(1));if(!Number.isSafeInteger(r)||r<0)return null;let t=r%10;if(t!==0&&t!==1)return null;let n=Math.floor(r/10),o=In+r;return Number.isSafeInteger(o)?{encoding:r,outcome:n,side:t,coin:`#${r}`,assetId:o}:null}var On=new Set(["https://api.hyperliquid.xyz/exchange","https://api.hyperliquid-testnet.xyz/exchange"]),kn=new Set(["perp-order","hip3-order","hip4-order","perp-bracket"]),Nn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Pn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"}),Y=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`hl: bounded ${r} required`);return e};function Ln(e,r){let t=e.toString().padStart(r+1,"0");if(r===0)return t;let n=t.slice(0,-r),o=t.slice(-r).replace(/0+$/,"");return o?`${n}.${o}`:n}function mt(e,r){let t=O(e,`hl: ${r}`);if(!/^\d+(?:\.\d+)?$/.test(t))throw new Error(`hl: ${r} must be a positive decimal`);let[n,o=""]=t.split("."),i=BigInt(n+o);if(i<=0n)throw new Error(`hl: ${r} must be positive`);return{raw:i,decimals:o.length}}function W(e,r){if(e===null||typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`hl: ${r} must be finite JSON`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map(n=>W(n,r)).join(",")}]`;if(!e||typeof e!="object")throw new Error(`hl: ${r} must be structured JSON`);return`{${Object.keys(e).sort().map(n=>`${JSON.stringify(n)}:${W(e[n],r)}`).join(",")}}`}function Cn(e){if(typeof e.orderType!="string"||!e.orderType)throw new Error("hl: order type must be a string");let r=e.orderType,t=e.orderWire;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: declared order wire required");if(r==="limit"){let i=t.limit?.tif;if(!["Gtc","Ioc","Alo"].includes(i)||W(t,"declared order type")!==W({limit:{tif:i}},"expected order type"))throw new Error("hl: limit order type must match its wire shape");return}if(r==="market"){if(W(t,"declared order type")!==W({limit:{tif:"Ioc"}},"expected order type"))throw new Error("hl: market order type must match its IOC wire shape");return}let n={stopMarket:{isMarket:!0,tpsl:"sl"},stopLimit:{isMarket:!1,tpsl:"sl"},takeProfitMarket:{isMarket:!0,tpsl:"tp"},takeProfitLimit:{isMarket:!1,tpsl:"tp"}}[r];if(!n)throw new Error("hl: unsupported declared order type");let o=t.trigger?.triggerPx;if(o==null||W(t,"declared order type")!==W({trigger:{isMarket:n.isMarket,triggerPx:o,tpsl:n.tpsl}},"expected order type"))throw new Error("hl: trigger order type must match its wire shape")}function Bn(e,r,t){let n=mt(e.s,"signed size"),o=mt(e.p,"signed price"),i=n.decimals+o.decimals,a=n.raw*o.raw,f=k(r.notionalUsd,i,"hl: notionalUsd");if(f<=0n||a!==f)throw new Error("hl: signed notional must match");let c=k(t.maxNotionalUsd,i,"hl: maxNotionalUsd");if(a>c)throw new Error("hl: notional exceeds cap")}function _n(e,r){let t=e.action.builder;if(t==null){if(e.builder!=null)throw new Error("hl: declared builder requires a signed builder");return}if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: signed order builder must be structured");let n=Y(t.b,"order builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(n))throw new Error("hl: order builder address required");if(F(e.builder||"","hl: builder").toLowerCase()!==n)throw new Error("hl: signed order builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(f=>String(f).toLowerCase()):[]).includes(n))throw new Error("hl: order builder not allowed");let i=z(t.f,"hl: signed order builder fee");if(i<0n)throw new Error("hl: signed order builder fee must be non-negative");let a=k(r.maxBuilderFeeBps??0,1,"hl: maxBuilderFeeBps");if(i>a)throw new Error("hl: order builder fee exceeds cap")}function wt(e,r,t){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: signed asset must match assetId");if(typeof e.b!="boolean"||e.b!==(r.side==="buy"))throw new Error("hl: signed side must match exactly");if(O(e.s,"hl: signed size")!==O(r.size,"hl: size"))throw new Error("hl: signed size must match");if(O(e.p,"hl: signed price")!==O(r.price,"hl: price"))throw new Error("hl: signed price must match");if(typeof r.reduceOnly!="boolean"||typeof e.r!="boolean"||e.r!==r.reduceOnly)throw new Error("hl: signed reduceOnly must match exactly");if(W(e.t,"signed order type")!==W(r.orderWire,"declared order type"))throw new Error("hl: signed order type must match declared order type");let n=Object.prototype.hasOwnProperty.call(e,"c");if(r.clientOrderId==null){if(n)throw new Error("hl: undeclared signed client order id")}else if(!n||typeof e.c!="string"||e.c!==r.clientOrderId)throw new Error("hl: signed client order id must match")}function ht(e,r,t,n,o){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: bracket protection asset must match");if(typeof e.b!="boolean"||e.b===(r.side==="buy"))throw new Error("hl: bracket protection side must oppose entry");if(O(e.s,"hl: bracket protection size")!==O(r.size,"hl: size"))throw new Error("hl: bracket protection size must match");if(O(e.p,"hl: bracket protection price")!==O(n,"hl: protection price"))throw new Error("hl: bracket protection price must match");if(e.r!==!0)throw new Error("hl: bracket protection must be reduce-only");let i=e.t?.trigger;if(!i||i.isMarket!==!0||i.tpsl!==o)throw new Error("hl: bracket protection trigger must match");if(O(i.triggerPx,"hl: triggerPx")!==O(n,"hl: protection price"))throw new Error("hl: bracket protection trigger must match")}function Fn(e){let r=String(e||"").replace(/\/$/,"");if(!On.has(r))throw new Error("hl: submitTo must be the official Hyperliquid exchange");return r}function Me(e){return $e(e)!=null}function $n(e,r){let t=String(e||""),n=Array.isArray(r.coins)?r.coins.map(String):[];if(Me(t)){if(r.hip4!==!0)throw new Error("hl: HIP-4 outcome orders are disabled without explicit policy enablement");if(n.includes(t)||n.includes("#*")||n.includes("*")||n.length===0)return!0;throw new Error("hl: outcome coin not allowed")}if(n.length&&!n.includes(t)&&!n.includes("*"))throw new Error("hl: coin not allowed");return!0}function Mn(e,r,t){let n=Array.isArray(t.hlMarkets)?t.hlMarkets:[];if(n.length){if(!n.some(a=>{if(typeof a=="string"){let[f,c]=String(a).split(":");return f===e&&Number(c)===r}return String(a?.coin)===e&&Number(a?.assetId)===r}))throw new Error("hl: coin/assetId pair not allowed");return!0}if(Me(e)){let i=Array.isArray(t.coins)?t.coins.map(String):[];if(i.includes("#*")||i.includes("*")||i.length===0)return!0;throw new Error("hl: restricted coin policy requires hlMarkets pairs")}let o=Array.isArray(t.coins)?t.coins.map(String):[];if(o.length&&!o.includes("*"))throw new Error("hl: restricted coin policy requires hlMarkets pairs");return!0}function gt(e,r){if(e?.surface!=="hl")throw new Error("hl: surface hl required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: structured artifact required");let n=Y(t.kind,"kind",48),o=Nn[n];if(!o)throw new Error("hl: unsupported Hyperliquid kind");if(e.action!==o)throw new Error("hl: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="hyperliquid")throw new Error("hl: destination must be hyperliquid");if(!/^0x[0-9a-fA-F]{40}$/.test(String(e.owner||"")))throw new Error("hl: owner required");let i=Fn(t.submitTo);if(Object.prototype.hasOwnProperty.call(t,"vaultAddress"))throw new Error("hl: vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t,"expiresAfter"))throw new Error("hl: expiresAfter is not public");let a=Number(t.nonce);if(!Number.isSafeInteger(a)||a<=0)throw new Error("hl: nonce must be a positive integer");if(!t.action||typeof t.action!="object")throw new Error("hl: signed action required");if(Object.prototype.hasOwnProperty.call(t.action,"vaultAddress"))throw new Error("hl: action vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t.action,"expiresAfter"))throw new Error("hl: action expiresAfter is not public");if(t.action.type!==Pn[n])throw new Error("hl: action type must match kind");let f=t.notionalUsd??0;if(kn.has(n)||n==="perp-cancel"||n==="perp-leverage"||n==="perp-isolated-margin"){let c=Y(t.coin,"coin",64),s=t.assetId??t.assetIndex;if(!Number.isSafeInteger(s)||s<0)throw new Error("hl: assetId required");if(n==="hip4-order"||s>=1e8){let u=$e(c);if(!u||u.coin!==c)throw new Error("hl: HIP-4 actions must use a canonical outcome coin");if(u.assetId!==s)throw new Error("hl: HIP-4 coin must bind to its canonical assetId")}if($n(c,r),Mn(c,s,r),n==="hip4-order"&&!Me(c))throw new Error("hl: HIP-4 orders must use an outcome coin");if(n==="perp-order"||n==="hip3-order"||n==="hip4-order"||n==="perp-bracket"){if(t.side!=="buy"&&t.side!=="sell")throw new Error("hl: side must be buy or sell");if(t.action.type!=="order"||!Array.isArray(t.action.orders))throw new Error("hl: signed orders are required");Cn(t);let u=t.action.orders;if(n==="perp-bracket"){let d=t.takeProfitPx,w=t.stopLossPx,l=1+(d==null?0:1)+(w==null?0:1);if(l<2||u.length!==l||t.grouping!=="normalTpsl"||t.action.grouping!==t.grouping)throw new Error("hl: bracket must contain exactly the declared entry and protection legs");wt(u[0],t,s);let p=1;d!=null&&ht(u[p++],t,s,d,"tp"),w!=null&&ht(u[p],t,s,w,"sl")}else{if(u.length!==1)throw new Error("hl: exactly one signed order is required");if(t.grouping!=="na"||t.action.grouping!==t.grouping)throw new Error("hl: signed grouping must match declared grouping");wt(u[0],t,s)}Bn(u[0],t,r),_n(t,r),f=O(t.notionalUsd,"hl: notionalUsd")}if(n==="perp-leverage"){let u=t.leverage;if(!Number.isSafeInteger(u)||u<1)throw new Error("hl: leverage must be a positive integer");let d=r.maxLeverage==null?50:r.maxLeverage;if(typeof d!="number"||!Number.isSafeInteger(d)||d<1)throw new Error("hl: maxLeverage must be a positive integer");if(u>d)throw new Error("hl: leverage exceeds cap")}if(n==="perp-cancel"){let u=t.action.cancels;if(!Array.isArray(u)||u.length!==1)throw new Error("hl: exactly one cancel is required");if(!Number.isSafeInteger(u[0].a)||u[0].a!==s)throw new Error("hl: signed cancel asset must match assetId");if(!Number.isSafeInteger(t.orderId)||t.orderId<0)throw new Error("hl: declared order id required");if(!Number.isSafeInteger(u[0].o)||u[0].o!==t.orderId)throw new Error("hl: signed cancel order id must match")}if(n==="perp-leverage"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==s)throw new Error("hl: signed leverage asset must match assetId");if(!Number.isSafeInteger(t.action.leverage)||t.action.leverage!==t.leverage)throw new Error("hl: signed leverage must match");if(!["cross","isolated"].includes(t.marginMode))throw new Error("hl: declared margin mode required");let u=t.marginMode==="cross";if(typeof t.action.isCross!="boolean"||t.action.isCross!==u)throw new Error("hl: signed isCross must match declared margin mode")}if(n==="perp-isolated-margin"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==s)throw new Error("hl: signed margin asset must match assetId");let u=Y(t.usd,"margin usd",64),d=k(u,6,"hl: margin usd");if(z(t.action.ntli,"hl: signed margin ntli")!==d)throw new Error("hl: signed margin amount must match usd");if(typeof t.isBuy!="boolean"||t.action.isBuy!==t.isBuy)throw new Error("hl: signed margin isBuy must match");let l=k(r.maxNotionalUsd,6,"hl: maxNotionalUsd"),p=d<0n?-d:d;if(p>l)throw new Error("hl: margin notional exceeds cap");f=Ln(p,6)}}if(n==="builder-fee-approval"){let c=Y(t.builder,"builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(c))throw new Error("hl: builder address required");if(Y(t.action.builder,"signed builder",42).toLowerCase()!==c)throw new Error("hl: signed builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(p=>String(p).toLowerCase()):[]).includes(c))throw new Error("hl: builder not allowed");let u=Y(t.maxFeeRate,"maxFeeRate",32);if(Y(t.action.maxFeeRate,"signed maxFeeRate",32)!==u)throw new Error("hl: signed builder fee must match");if(!/^\d+(?:\.\d+)?%$/.test(u))throw new Error("hl: builder fee rate must be a percent");let d=k(u.slice(0,-1),12,"hl: builder fee percent"),w=k(r.maxBuilderFeeBps,12,"hl: maxBuilderFeeBps");if(w<0n||d*100n>w)throw new Error("hl: builder fee exceeds cap");if(Number(t.action.nonce)!==a)throw new Error("hl: signed builder nonce must match");let l=i.includes("testnet")?"Testnet":"Mainnet";if(t.hyperliquidChain!==l||t.action.hyperliquidChain!==t.hyperliquidChain)throw new Error("hl: signed Hyperliquid chain must match destination");if(t.signatureChainId!=="0x66eee"||t.action.signatureChainId!==t.signatureChainId)throw new Error("hl: signed signature chain id must match")}if(n.startsWith("hype-stake")||n==="hype-delegate"||n==="hype-undelegate"){if(n==="hype-delegate"||n==="hype-undelegate"){let c=n==="hype-undelegate";if(typeof t.action.isUndelegate!="boolean"||t.action.isUndelegate!==c)throw new Error("hl: signed isUndelegate must match delegate kind exactly")}if(r.maxHypeWei!=null&&BigInt(String(t.action.wei??t.caps?.amountHype??"0"))>BigInt(r.maxHypeWei))throw new Error("hl: stake amount exceeds cap")}return Object.freeze({unit:"usd",value:String(f??t.action.wei??0),notional:String(f??0),fee:"0",kind:n,actionType:t.action.type,amount:String(t.action.wei??f??0),coin:t.coin||null,submitTo:i})}var La="0x"+"00".repeat(32);function Rn(e){let r=typeof e=="bigint"?e:$(e,"poly: atomicUsdc");if(r<=0n)throw new Error("poly: order amounts must be positive integer micro-units");let t=r/1000000n,n=(r%1000000n).toString().padStart(6,"0").replace(/0+$/,"");return n?`${t.toString()}.${n}`:t.toString()}function yt(e,r){let t=$(e.makerAmount,"poly: makerAmount"),n=$(e.takerAmount,"poly: takerAmount");return Rn(r==="BUY"?t:n)}var Dn=new Set(["https://clob.polymarket.com/order"]),le=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Fa=Object.freeze(le.map(e=>e[0])),qn=new Set(["0xe111180000d2663c0091e4f400237545b87b996b","0xe2222d279d744050d28e00520010520000310f59"]),jn="0xe111180000d2663c0091e4f400237545b87b996b",Un="0xe2222d279d744050d28e00520010520000310f59",bt=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`poly: bounded ${r} required`);return e};function xt(e){let r=String(e||"").replace(/\/$/,"");if(!Dn.has(r))throw new Error("poly: submitTo must be the official Polymarket CLOB");return r}function Et(e){let r=F(e,"poly: exchange").toLowerCase();if(!qn.has(r))throw new Error("poly: verifyingContract must be an official CTF Exchange");return r}function At(e,r){if(e?.surface!=="poly")throw new Error("poly: surface poly required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("poly: structured artifact required");let n=bt(t.kind,"kind",48);if(n!=="poly-order")throw new Error("poly: unsupported Polymarket kind");if(e.action!=="order")throw new Error("poly: surface/action/kind mismatch");if(F(e.destination,"poly: destination").toLowerCase()!=="polymarket")throw new Error("poly: destination must be polymarket");if(xt(t.submitTo),t.chainId!==137)throw new Error("poly: chainId must be Polygon 137");let o=t.domain;if(!o||typeof o!="object")throw new Error("poly: EIP-712 domain required");if(o.name!=="Polymarket CTF Exchange"||o.version!=="2"||o.chainId!==137)throw new Error("poly: EIP-712 domain must be official CTF Exchange v2 on Polygon");if(Et(o.verifyingContract),Et(t.exchange),F(o.verifyingContract,"poly: verifyingContract").toLowerCase()!==F(t.exchange,"poly: exchange").toLowerCase())throw new Error("poly: exchange/domain mismatch");if(typeof t.negRisk!="boolean")throw new Error("poly: negRisk must be a boolean");let i=t.negRisk?Un:jn;if(F(t.exchange,"poly: exchange").toLowerCase()!==i)throw new Error("poly: negRisk/exchange mismatch");let a=t.message||t.value;if(!a||typeof a!="object")throw new Error("poly: signed order message required");let f=t.types?.Order;if(!Array.isArray(f)||f.length!==le.length)throw new Error("poly: EIP-712 Order type must be official CLOB v2");for(let S=0;S<le.length;S+=1)if(f[S]?.name!==le[S][0]||f[S]?.type!==le[S][1])throw new Error("poly: EIP-712 Order type must be official CLOB v2");if((t.orderType||"GTC")!=="GTC")throw new Error("poly: only GTC is public");let c=String(e.owner||"").toLowerCase();if(F(a.maker,"poly: maker").toLowerCase()!==c)throw new Error("poly: maker must equal owner");if(F(a.signer,"poly: signer").toLowerCase()!==c)throw new Error("poly: signer must equal owner");if(a.signatureType!==0)throw new Error("poly: only EOA signatureType 0 is public");if(typeof a.builder!="string"||a.builder.toLowerCase()!==`0x${"00".repeat(32)}`)throw new Error("poly: builder must be zero");if(a.side!==0&&a.side!==1)throw new Error("poly: side must be BUY or SELL");let s=bt(t.tokenId,"tokenId",80);if(F(a.tokenId,"poly: tokenId")!==s)throw new Error("poly: tokenId mismatch");let u=Array.isArray(r.polyTokens)?r.polyTokens.map(String):[];if(u.length&&!u.includes(s)&&!u.includes("*"))throw new Error("poly: tokenId not allowed");let d=Number(a.side)===0?"BUY":"SELL";if(t.side&&t.side!==d)throw new Error("poly: side mismatch");let w=$(a.makerAmount,"poly: makerAmount"),l=$(a.takerAmount,"poly: takerAmount"),p=$(t.makerAmount,"poly: prepared makerAmount"),m=$(t.takerAmount,"poly: prepared takerAmount");if(w!==p)throw new Error("poly: signed makerAmount differs from prepared envelope");if(l!==m)throw new Error("poly: signed takerAmount differs from prepared envelope");let h=d==="BUY"?w:l,b=d==="BUY"?l:w,A=k(t.quantity,6,"poly: quantity");if(A<=0n||A!==b)throw new Error("poly: quantity must match CLOB v2 amounts");let g=k(t.price,6,"poly: price");if(g<=0n||g>=1000000n)throw new Error("poly: price must be within (0,1)");if(b*g!==h*1000000n)throw new Error("poly: price must match CLOB v2 amounts");if(k(t.notionalUsdc,6,"poly: notionalUsdc")!==h)throw new Error("poly: notionalUsdc must match CLOB v2 amounts");let v=yt(a,d);if(k(v,6,"poly: displayed notionalUsdc")!==h)throw new Error("poly: displayed notionalUsdc must match CLOB v2 amounts");let P=r.maxNotionalUsd??r.maxNotionalUsdc;if(P!=null){let S=k(P,6,"poly: maxNotionalUsd");if(h>S)throw new Error("poly: notional exceeds cap")}return Object.freeze({unit:"usdc",value:h.toString(),notional:h.toString(),fee:"0",kind:n,tokenId:s,side:d,makerAmount:w.toString(),takerAmount:l.toString(),price:String(t.price),quantity:String(t.quantity),notionalUsdc:v,submitTo:xt(t.submitTo)})}var Hn=new Set(["https://mainnet.zklighter.elliot.ai/api/v1/sendTx","https://testnet.zklighter.elliot.ai/api/v1/sendTx"]),vt=14,St=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`lighter: bounded ${r} required`);return e};function ne(e,r,t){if(!Number.isSafeInteger(e)||e!==r)throw new Error(`lighter: ${t} must be exact numeric ${r}`)}function Tt(e){let r=String(e||"").replace(/\/$/,"");if(!Hn.has(r))throw new Error("lighter: submitTo must be the official Lighter sendTx");return r}function It(e,r={}){if(e?.surface!=="lighter")throw new Error("lighter: surface lighter required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("lighter: structured artifact required");let n=St(t.kind,"kind",48);if(n!=="lighter-order")throw new Error("lighter: unsupported Lighter kind");if(e.action!=="order")throw new Error("lighter: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="lighter")throw new Error("lighter: destination must be lighter");let o=Tt(t.submitTo),i=t.marketIndex;if(typeof i!="number"||!Number.isSafeInteger(i)||i<0)throw new Error("lighter: marketIndex required");let a=Number(z(t.accountIndex,"lighter: accountIndex"));if(!Number.isSafeInteger(a)||a<0)throw new Error("lighter: accountIndex required");let f=Number(z(t.clientOrderIndex,"lighter: clientOrderIndex"));if(!Number.isSafeInteger(f)||f<0)throw new Error("lighter: clientOrderIndex required");ne(t.orderType,0,"orderType"),ne(t.timeInForce,1,"timeInForce"),ne(t.reduceOnly,0,"reduceOnly"),ne(t.triggerPrice,0,"triggerPrice"),ne(t.orderExpiry,-1,"orderExpiry");let c=St(t.symbol||t.coin,"symbol",32),s=Array.isArray(r.lighterMarkets)?r.lighterMarkets.map(String):[];if(s.length&&!s.includes(c)&&!s.includes(String(i))&&!s.includes("*"))throw new Error("lighter: market not allowed");if(t.side!=="buy"&&t.side!=="sell")throw new Error("lighter: side must be buy or sell");let u=$(t.baseAmount,"lighter: baseAmount"),d=$(t.price,"lighter: price");if(u>BigInt(Number.MAX_SAFE_INTEGER)||d>BigInt(Number.MAX_SAFE_INTEGER))throw new Error("lighter: baseAmount and price must be safe integers");let w=Number(u),l=Number(d),p=Number(t.sizeDecimals??0),m=Number(t.priceDecimals??0);if(!Number.isInteger(p)||p<0||p>12)throw new Error("lighter: sizeDecimals required");if(!Number.isInteger(m)||m<0||m>12)throw new Error("lighter: priceDecimals required");let h=p+m,b=u*d,A=k(t.notionalUsd,h,"lighter: notionalUsd");if(A<=0n)throw new Error("lighter: notionalUsd required");if(b!==A)throw new Error("lighter: notionalUsd must match size and price");let g=k(r.maxNotionalUsd??Number.MAX_SAFE_INTEGER,h,"lighter: maxNotionalUsd");if(b>g)throw new Error("lighter: notional exceeds cap");let x=O(t.notionalUsd,"lighter: notionalUsd");return ne(t.txType,vt,"txType"),Object.freeze({unit:"usd",value:String(x),notional:String(x),fee:"0",kind:n,symbol:c,marketIndex:i,side:t.side,baseAmount:w,price:l,submitTo:o,actionType:"create-order",amount:String(x)})}import{TypedDataEncoder as Nt,getAddress as j}from"ethers";import{TypedDataEncoder as qa,getAddress as ja,isAddress as Ua}from"ethers";var Ot=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Re=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as Za,getAddress as es,isAddress as ts}from"ethers";var za=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var kt=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),cs=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var De=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),us=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var zn=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]),Jn="0x0000000000000000000000000000000000000000";function qe(e,r,t=256){if(typeof e!="string"||!e||e.length>t)throw new Error(`evm-order: bounded ${r} required`);return e}function Pt(e,r){let t=String(e||"").replace(/\/$/,"");if(!zn.some(o=>t===`${o}/v4.0/${r}`||t===`${o}/v4.1/${r}`))throw new Error("evm-order: submitTo must be the official 1inch orderbook");return t}function Lt(e,r){let t={1:"https://api.cow.fi/mainnet/api/v1/orders",100:"https://api.cow.fi/xdai/api/v1/orders",42161:"https://api.cow.fi/arbitrum_one/api/v1/orders",8453:"https://api.cow.fi/base/api/v1/orders"}[Number(r)],n=String(e||"").replace(/\/$/,"");if(!t||n!==t)throw new Error("evm-order: cow submitTo must be official api.cow.fi");return n}function Ct(e,r){let t=e?.Order,n=r.Order;return!Array.isArray(t)||t.length!==n.length?!1:t.every((o,i)=>o?.name===n[i].name&&o?.type===n[i].type)}function Bt(e,...r){let t=Array.isArray(e.tokens)?e.tokens.map(n=>String(n).toLowerCase()):[];if(!t.length)throw new Error("evm-order: tokens allowlist is empty");if(!t.includes("*")){for(let n of r)if(!t.includes(String(n).toLowerCase()))throw new Error("evm-order: token not allowed")}}function _t(e,r,{allowZero:t=!1}={}){let n=String(r||"").toLowerCase();if(!n)throw new Error("evm-order: receiver required");if(n===Jn){if(!t)throw new Error("evm-order: receiver must equal owner");return}if(n!==e)throw new Error("evm-order: receiver must equal owner")}function Ft(e,r){if(e?.surface!=="evm-order")throw new Error("evm-order: surface evm-order required");if(e.action!=="order")throw new Error("evm-order: action must be order");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("evm-order: structured artifact required");let n=qe(t.kind,"kind",32);if(n==="option")throw new Error("evm-order: option kind refused until official Derive/Lyra domain is pinned");if(n==="cow"){let d=Number(t.chainId??e.chainId);if(Lt(t.submitTo,d),qe(e.destination,"destination",32)!=="cowswap")throw new Error("evm-order: cow destination must be cowswap");let w=kt[d];if(!w)throw new Error(`evm-order: unsupported cow chainId ${d}`);let l=t.domain||t.typedData?.domain,p=t.types||t.typedData?.types,m=t.message||t.typedData?.message;if(!l||!p?.Order||!m)throw new Error("evm-order: CoW EIP-712 Order required");if(!Ct(p,De))throw new Error("evm-order: cow types must be official GPv2 Order");if(Number(l.chainId)!==d)throw new Error("evm-order: cow domain chain mismatch");if(String(l.name)!=="Gnosis Protocol"||String(l.version)!=="v2")throw new Error("evm-order: cow domain must be official GPv2");if(j(l.verifyingContract)!==j(w))throw new Error("evm-order: cow verifyingContract must be official GPv2 settlement");let h=String(e.owner||"").toLowerCase();_t(h,m.receiver),Bt(r,m.sellToken,m.buyToken);let b=j(m.sellToken),A=String(m.feeAmount||"0"),g=(BigInt(m.sellAmount)+BigInt(A)).toString();return Object.freeze({unit:`erc20:${b.toLowerCase()}`,value:g,notional:g,fee:A,submitTo:Lt(t.submitTo,d),digest:Nt.hash(l,{Order:De.Order},m),chainId:d,kind:"cow",receiver:j(m.receiver),sellAmount:String(m.sellAmount),buyAmount:String(m.buyAmount)})}if(n!=="1inch-limit")throw new Error("evm-order: unsupported kind");if(qe(e.destination,"destination",32)!=="1inch-lop")throw new Error("evm-order: destination must be 1inch-lop");let o=Number(t.chainId??e.chainId),i=Ot[o];if(!i)throw new Error(`evm-order: unsupported chainId ${o}`);Pt(t.submitTo,o);let a=t.domain||t.typedData?.domain,f=t.types||t.typedData?.types,c=t.message||t.typedData?.message;if(!a||!f?.Order||!c)throw new Error("evm-order: EIP-712 Order required");if(!Ct(f,Re))throw new Error("evm-order: types must be official LOP v4 Order");if(Number(a.chainId)!==o)throw new Error("evm-order: domain chain mismatch");if(j(a.verifyingContract)!==j(i))throw new Error("evm-order: verifyingContract must be official LOP v4");if(a.name!=="1inch Limit Order Protocol"||String(a.version)!=="4")throw new Error("evm-order: EIP-712 domain must be official LOP v4");let s=String(e.owner||"").toLowerCase();if(j(c.maker).toLowerCase()!==s)throw new Error("evm-order: maker must equal owner");_t(s,c.receiver,{allowZero:!0}),Bt(r,c.makerAsset,c.takerAsset);let u=Nt.hash(a,{Order:Re.Order},c);return Object.freeze({unit:`erc20:${j(c.makerAsset).toLowerCase()}`,value:String(c.makingAmount),notional:String(c.makingAmount),fee:"0",submitTo:Pt(t.submitTo,o),digest:u,chainId:o,kind:"1inch-limit",receiver:j(c.receiver),makerAsset:j(c.makerAsset),takerAsset:j(c.takerAsset),makingAmount:String(c.makingAmount),takingAmount:String(c.takingAmount)})}var jt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var je=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),Gn=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),Ut=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Vn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),ve=new qt(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),$t=new qt(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Kn=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var pe=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},E=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},Mt=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},Yn=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},N=(e,r,t)=>{if(!Yn(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},fe=(e,r,t)=>{Array.isArray(r)&&r.length&&N(e,r,t)},T=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},ee=e=>String(e||"0x").slice(0,10).toLowerCase(),Ht=e=>E(e.gasLimit,"gasLimit")*E(e.maxFeePerGas??e.gasPrice,"feePerGas")+E(e.l1FeeWei??0,"l1FeeWei")+E(e.operatorFeeWei??0,"operatorFeeWei");function oe(e,r,t,{dynamicTail:n=!1}={}){let o=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(o)||o.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&o.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:o,word:i=>o.slice(10+i*64,10+(i+1)*64)}}function C(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function U(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function Xn(e){if(ee(e)!=="0x095ea7b3")return null;let r=oe(e,2,"approval");return{kind:"approval",spender:C(r.word(0),"approval spender"),amount:U(r.word(1),"approval amount")}}function Wt(e,r){let t=r==="router02-exact-input-single"?7:8,n=oe(e,t,"Uniswap v3 exactInputSingle"),o=t===7?4:5;return{kind:"action",action:"swap",inputToken:C(n.word(0),"input token"),outputToken:C(n.word(1),"output token"),recipient:C(n.word(3),"recipient"),amountIn:U(n.word(o),"amountIn"),minimumOut:U(n.word(o+1),"amountOutMinimum")}}function Qn(e){let r=oe(e,12,"Across depositV3",{dynamicTail:!0}),t=U(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let o=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(o))throw new Error("envelope: malformed Across depositV3 message length");let i=Math.ceil(o/32)*64;if(r.hex.length!==n+64+i)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:C(r.word(0),"depositor"),recipient:C(r.word(1),"recipient"),inputToken:C(r.word(2),"input token"),outputToken:C(r.word(3),"output token"),amountIn:U(r.word(4),"inputAmount"),minimumOut:U(r.word(5),"outputAmount"),destinationChainId:U(r.word(6),"destinationChainId")}}function Zn(e){let r=String(e||"").replace(/^0x/i,"").toLowerCase();if(r.length<86||r.length%2!==0)throw new Error("envelope: malformed Uniswap path");let t=`0x${r.slice(0,40)}`,n=`0x${r.slice(r.length-40)}`;if(!/^0x[0-9a-f]{40}$/.test(t)||!/^0x[0-9a-f]{40}$/.test(n))throw new Error("envelope: malformed Uniswap path tokens");return{inputToken:t,outputToken:n}}function Rt(e,{hasDeadline:r}){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<74)throw new Error("envelope: malformed exactInput calldata");let n=[];for(let h=10;h+64<=t.length;h+=64)n.push(t.slice(h,h+64));let o=(h,b)=>{if(!n[h])throw new Error(`envelope: malformed ${b}`);return BigInt(`0x${n[h]}`)},i=Number(o(0,"exactInput struct offset"));if(i%32!==0)throw new Error("envelope: malformed exactInput struct offset");let a=i/32,f=Number(o(a,"path offset")),c=n[a+1],s=o(a+(r?3:2),"amountIn"),u=o(a+(r?4:3),"amountOutMinimum"),d=a+f/32;if(!Number.isInteger(d)||!n[d])throw new Error("envelope: malformed exactInput path");let w=Number(o(d,"path length")),l=t.slice(10+(d+1)*64,10+(d+1)*64+w*2),{inputToken:p,outputToken:m}=Zn(`0x${l}`);return{kind:"action",action:"swap",inputToken:p,outputToken:m,recipient:C(c,"recipient"),amountIn:s,minimumOut:u}}function eo(e){let r=oe(e,8,"Aerodrome exactInputSingle");return{kind:"action",action:"swap",inputToken:C(r.word(0),"input token"),outputToken:C(r.word(1),"output token"),recipient:C(r.word(3),"recipient"),amountIn:U(r.word(5),"amountIn"),minimumOut:U(r.word(6),"amountOutMinimum")}}function to(e){let r=String(e||"").toLowerCase();if(!r.startsWith("0x5ae401dc"))throw new Error("envelope: malformed Uniswap multicall");let t=[];for(let w=10;w+64<=r.length;w+=64)t.push(r.slice(w,w+64));let n=Number(BigInt(`0x${t[1]}`));if(n%32!==0)throw new Error("envelope: malformed multicall data offset");let o=n/32;if(Number(BigInt(`0x${t[o]}`))!==1)throw new Error("envelope: multicall must wrap exactly one swap");let a=Number(BigInt(`0x${t[o+1]}`)),f=o+1+a/32,c=Number(BigInt(`0x${t[f]}`)),u=`0x${r.slice(10+(f+1)*64,10+(f+1)*64+c*2)}`,d=ee(u);if(d!=="0x04e45aaf"&&d!=="0x414bf389")throw new Error("envelope: multicall inner call must be exactInputSingle");return Wt(u,d==="0x04e45aaf"?"router02-exact-input-single":"swap-router-exact-input-single")}function ro(e,r){let t=ee(e),n=Ut[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.layout==="router02-exact-input-single"||n.layout==="swap-router-exact-input-single")return{...Wt(e,n.layout),selector:t,provider:n.provider};if(n.layout==="exact-input-deadline")return{...Rt(e,{hasDeadline:!0}),selector:t,provider:n.provider};if(n.layout==="exact-input")return{...Rt(e,{hasDeadline:!1}),selector:t,provider:n.provider};if(n.layout==="multicall-deadline")return{...to(e),selector:t,provider:n.provider};if(n.layout==="aerodrome-exact-input-single")return{...eo(e),selector:t,provider:n.provider};if(n.action==="bridge")return{...Qn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function no(e){let r=oe(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",mintType:"public",contract:C(r.word(0),"mint NFT contract"),feeRecipient:C(r.word(1),"mint fee recipient"),recipient:C(r.word(2),"mint recipient"),quantity:U(r.word(3),"mint quantity")}}function oo(e){let r;try{r=$t.decodeFunctionData("mintAllowList",e)}catch{throw new Error("envelope: malformed SeaDrop mintAllowList calldata")}let t=r[4],n=[...r[5]].map(String);if(n.length<1||n.length>64||n.some(c=>!/^0x[0-9a-fA-F]{64}$/.test(c)))throw new Error("envelope: bounded canonical SeaDrop allowlist proof required");if($t.encodeFunctionData("mintAllowList",[r[0],r[1],r[2],r[3],t,n]).toLowerCase()!==String(e).toLowerCase())throw new Error("envelope: SeaDrop allowlist calldata must be canonical");let i=BigInt(t.startTime),a=BigInt(t.endTime);if(a<=i)throw new Error("envelope: SeaDrop allowlist stage time range is invalid");let f=BigInt(r[3]);if(BigInt(t.maxTotalMintableByWallet)<f)throw new Error("envelope: SeaDrop allowlist wallet cap is below quantity");return{kind:"mint",action:"mint",mintType:"allowlist",contract:T(r[0],"mint NFT contract"),feeRecipient:T(r[1],"mint fee recipient"),recipient:T(r[2],"mint recipient"),quantity:f,mintPrice:BigInt(t.mintPrice),startTime:i,endTime:a,dropStageIndex:BigInt(t.dropStageIndex),proof:n}}function io(e,r){let t=ee(e);if(String(r).toLowerCase()==="nft-mint")return ao(e);let n=Vn[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...no(e),selector:t,provider:n.provider};if(n.layout==="seadrop-mint-allowlist")return{...oo(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function ao(e){let r=ee(e);if(r==="0x40c10f19")throw new Error("envelope: ambiguous mint(address,uint256) calldata is not a built-in signer surface");let t=Kn[r];if(!t)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(t.layout==="mint-no-args")return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:1n};if(t.layout==="mint-quantity"){let n=oe(e,1,"generic NFT mint");return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:U(n.word(0),"mint quantity")}}throw new Error("envelope: unsupported generic NFT mint calldata")}function me(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function zt(e,r,t,{nowMs:n=Date.now(),networkFees:o,requireNetworkFees:i=!1}={}){let a=T(e.owner,"owner"),f=e.artifact,c=Number(f?.chainId??me(e)[0]?.chainId);if(!Number.isSafeInteger(c)||c<=0)throw new Error("envelope: explicit batch chainId required");if(N(c,r.chains,"chain"),f?.owner!==void 0&&T(f.owner,"batch owner")!==a)throw new Error("envelope: explicit batch owner mismatch");let s=me(e);if(!s.length||s.length>8)throw new Error("envelope: bounded EVM transaction batch required");let u=0n,d=0n,w=0n;for(let l of s){if(!l||typeof l!="object"||Array.isArray(l))throw new Error("envelope: structured EVM transaction required");if(Number(l.chainId)!==c)throw new Error("envelope: every batch leg must use the same chain");if(T(l.from,"transaction owner")!==a)throw new Error("envelope: every batch leg must use the same owner");if(N(ee(l.data),r.selectors,"selector"),u+=E(l.value??0,"value"),d+=E(l.gasLimit,"gasLimit"),w+=Ht(l),K(c)&&(l.l1FeeWei===void 0||l.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(u>E(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(d>E(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(w>E(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:s,chainId:c,owner:a,totalValue:u,totalGas:d,totalFee:w}}function Jt(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let o=String(e?.surface||"");if(o!=="evm-swap"&&o!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let i=pe(e.provider,"provider",64).toLowerCase();N(i,r.providers,"provider");let a=zt(e,r,o,{nowMs:t}),f=[],c=-1;for(let p=0;p<a.transactions.length;p++){let m=a.transactions[p],h=Xn(m.data),b;if(h){if(c!==-1)throw new Error("envelope: approval must be before action");if(E(m.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let x=T(m.to,"approval token");if(N(x,r.tokens,"token"),N(h.spender,r.spenders,"spender"),h.amount>E(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");b={...h,token:x,index:p}}else{if(c!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");N(m.to,r.destinations,"destination"),b={...ro(m.data,i),target:T(m.to,"action target"),index:p},c=p}let A=E(m.value??0,"value"),g=E(m.gasLimit,"gasLimit");f.push({...b,value:A,gas:g,fee:Ht(m)})}if(c<0)throw new Error("envelope: reviewed swap/bridge action required");let s=f[c],u=o==="evm-swap"?"swap":"bridge";if(s.action!==u||e.action!==u)throw new Error("envelope: surface/action/calldata mismatch");if(T(e.destination,"destination")!==s.target)throw new Error("envelope: destination must equal decoded action target");if(s.recipient!==a.owner)throw new Error("envelope: decoded recipient must equal owner");if(s.depositor&&s.depositor!==a.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(N(s.inputToken,r.tokens,"input token"),N(s.outputToken,r.tokens,"output token"),s.amountIn<=0n||s.amountIn>E(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(s.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(Ne(e.autoSlippage,{nowMs:t,chainId:a.chainId,venue:i,tx:a.transactions[c],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(s.minimumOut!==E(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(s.action==="bridge"&&E(e.toChainId,"toChainId")!==s.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let d=f.filter(p=>p.kind==="approval");if(!new Set([...Gn,...Array.isArray(r.nativeInputTokens)?r.nativeInputTokens.map(p=>String(p).toLowerCase()):[]]).has(s.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(d.length)throw new Error("envelope: native-value action must not include token approval");if(s.value!==s.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let l=Object.freeze({quoteAmountOut:E(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:E(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...a,decoded:f,action:s,provider:i,authenticatedQuote:l}}function so(e,r,{nowMs:t}){let n=e.anvilAttestation,o=e.artifact?.anvilAttestation;if(!n||typeof n!="object"||Array.isArray(n))throw new Error("envelope: Anvil attestation is required");if(!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: Anvil attestation artifact mismatch");if(Number(n.version)!==1||n.source!=="anvil-snapshot-rpc-reviewed-runtime")throw new Error("envelope: unsupported Anvil attestation");if(Number(n.chainId)!==4663)throw new Error("envelope: Anvil attestation chain mismatch");let i=T(e.destination,"Anvil market"),a=T(e.contract,"NFT contract"),f=T(e.paymentToken,"payment token");if(T(n.market,"attested Anvil market")!==i)throw new Error("envelope: Anvil attestation market mismatch");if(T(n.collection,"attested NFT collection")!==a)throw new Error("envelope: Anvil attestation collection mismatch");if(T(n.paymentToken,"attested payment token")!==f)throw new Error("envelope: Anvil attestation payment token mismatch");let c=Number(e.paymentTokenDecimals??e.artifact?.paymentTokenDecimals);if(!Number.isSafeInteger(c)||c<0||c>255||Number(n.paymentTokenDecimals)!==c)throw new Error("envelope: Anvil payment token decimals mismatch");let s=E(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei").toString();if(E(n.nativeSwapFeeWei,"attested nativeSwapFeeWei").toString()!==s)throw new Error("envelope: Anvil attestation native swap fee mismatch");let u=Number(n.snapshotFetchedAtMs),d=Number(n.snapshotExpiresAtMs);if(!Number.isFinite(u)||!Number.isFinite(d)||u>t||d<=t||d<=u)throw new Error("envelope: Anvil snapshot attestation is stale");let w=E(n.blockNumber,"attested blockNumber");if(w<=0n||!/^0x[0-9a-f]{64}$/.test(String(n.blockHash||"").toLowerCase()))throw new Error("envelope: Anvil block attestation is invalid");let l=String(n.runtimeCodeHash||"").toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(l))throw new Error("envelope: Anvil runtime code hash is invalid");let p=Object.entries(r.anvilRuntimeCodeHashes||{}).find(([h])=>h.toLowerCase()===i)?.[1];if(!p||String(p).toLowerCase()!==l)throw new Error("policy: Anvil runtime code hash is not reviewed");let m=Object.entries(r.nftPaymentTokenCaps||{}).find(([h])=>h.toLowerCase()===f)?.[1];if(!m||Number(m.decimals)!==c)throw new Error("policy: Anvil payment token decimals are not reviewed");return Object.freeze({...n,market:i,collection:a,paymentToken:f,paymentTokenDecimals:c,runtimeCodeHash:l,blockNumber:w})}function Dt(e,r){let t=e.artifact,n=e.anvilQuote,o=t?.anvilQuote;if(!n||typeof n!="object"||Array.isArray(n)||!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: exact Anvil quote artifact mismatch");if(e.preconditions?.exactQuoteConfirmed!==!0)throw new Error("envelope: exact Anvil quote confirmation required");let i=r==="buy"?[[n.totalCostRaw,"anvilQuote.totalCostRaw"],[e.maxPaymentTokenAmountRaw,"maxPaymentTokenAmountRaw"],[t?.maxPaymentTokenAmountRaw,"artifact maxPaymentTokenAmountRaw"],[e.exactQuoteTotalCostRaw,"exactQuoteTotalCostRaw"],[t?.exactQuoteTotalCostRaw,"artifact exactQuoteTotalCostRaw"],[e.preconditions?.confirmedTotalCostRaw,"confirmedTotalCostRaw"]]:[[n.netPayoutRaw,"anvilQuote.netPayoutRaw"],[e.minPayoutRaw,"minPayoutRaw"],[t?.minPayoutRaw,"artifact minPayoutRaw"],[e.exactQuoteNetPayoutRaw,"exactQuoteNetPayoutRaw"],[t?.exactQuoteNetPayoutRaw,"artifact exactQuoteNetPayoutRaw"],[e.preconditions?.confirmedNetPayoutRaw,"confirmedNetPayoutRaw"]],a=E(i[0][0],i[0][1]);for(let[f,c]of i.slice(1))if(E(f,c)!==a)throw new Error(`envelope: Anvil ${r} exact settlement limit mismatch`);return a}function Gt(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint or NFT action");let n=pe(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();fe(n,r.providers,"provider");let o=zt(e,r,"evm-nft",{nowMs:t});if(n==="anvil-nft"){if(e.action!=="nft")throw new Error("envelope: Anvil requires NFT action");if(o.chainId!==4663)throw new Error("envelope: Anvil requires chain 4663");if(r.confirmationMode!=="exact-human")throw new Error("policy: Anvil requires exact-human confirmation");if(o.transactions.length!==1)throw new Error("envelope: Anvil requires one atomic action with pre-existing approval");if(Number(e.slippageBps)!==0)throw new Error("envelope: Anvil exact limit requires zero slippageBps");let[l]=o.transactions,p=T(e.destination,"Anvil market");if(T(l.to,"Anvil action target")!==p)throw new Error("envelope: Anvil action target mismatch");N(p,r.destinations,"destination");let m=T(e.contract??e.artifact?.contract,"NFT contract");if(fe(m,r.nftContracts,"NFT contract"),T(e.marketCollection??e.artifact?.marketCollection,"Anvil market collection")!==m)throw new Error("envelope: Anvil market collection mismatch");let b=T(e.paymentToken??e.artifact?.paymentToken,"payment token");fe(b,r.erc20Tokens,"ERC20 token");let A=so(e,r,{nowMs:t}),g=E(e.tokenId??e.artifact?.tokenId,"tokenId"),x=E(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei");if(o.totalValue!==x||E(l.value??0,"Anvil action value")!==x)throw new Error("envelope: Anvil native swap fee mismatch");if(x>E(r.maxNativeSwapFeeWei,"maxNativeSwapFeeWei"))throw new Error("policy: Anvil native swap fee exceeds cap");let v=pe(e.nftAction,"nftAction",8).toLowerCase(),P;if(v==="buy"){let S=Dt(e,v),X=Object.entries(r.nftPaymentTokenCaps||{}).find(([V])=>V.toLowerCase()===b)?.[1];if(!X)throw new Error("policy: Anvil payment-token cap required");if(S>E(X.maxPerTradeRaw,"maxPerTradeRaw"))throw new Error("policy: Anvil payment amount exceeds cap");if(e.preconditions?.allowanceVerified!==!0||E(e.preconditions?.allowanceRaw,"allowanceRaw")<S)throw new Error("envelope: Anvil pre-existing allowance proof required");let _=ve.decodeFunctionData("buySpecificNFT",l.data);if(ve.encodeFunctionData("buySpecificNFT",[_[0],_[1]]).toLowerCase()!==String(l.data).toLowerCase())throw new Error("envelope: non-canonical Anvil buy calldata");if(BigInt(_[0])!==g)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(_[1])!==S)throw new Error("envelope: Anvil maxCost mismatch");P={kind:"nft",action:"buy",tokenId:g,maxPaymentTokenAmountRaw:S,target:p}}else if(v==="sell"){let S=e.preconditions||{},X=T(S.approvedAddress,"NFT approval address");if(S.nftApprovalVerified!==!0||X!==p&&S.approvedForAll!==!0)throw new Error("envelope: Anvil pre-existing NFT approval proof required");let _=Dt(e,v),G=ve.decodeFunctionData("sellNFT",l.data);if(ve.encodeFunctionData("sellNFT",[G[0],G[1]]).toLowerCase()!==String(l.data).toLowerCase())throw new Error("envelope: non-canonical Anvil sell calldata");if(BigInt(G[0])!==g)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(G[1])!==_)throw new Error("envelope: Anvil minPayout mismatch");P={kind:"nft",action:"sell",tokenId:g,minPayoutRaw:_,target:p}}else throw new Error("envelope: unsupported Anvil NFT action");return{...o,provider:n,nftAction:v,tokenId:g,paymentToken:b,paymentTokenDecimals:A.paymentTokenDecimals,anvilAttestation:A,decoded:[P]}}let i=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;if(i?.oraclePrepared===!0&&Ye(i,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"}),o.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let a=o.transactions[0],f=ee(a.data);N(f,r.selectors,"selector"),N(a.to,r.destinations,"destination");let c=io(a.data,n),s=T(e.contract??e.artifact?.contract,"NFT contract");if(fe(s,r.nftContracts,"NFT contract"),(c.contract||T(a.to,"NFT contract"))!==s)throw new Error("envelope: mint calldata NFT contract mismatch");if(c.recipient&&c.recipient!==o.owner)throw new Error("envelope: mint calldata recipient mismatch");c.feeRecipient&&fe(c.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let d=E(e.quantity??e.artifact?.quantity,"quantity");if(d<=0n||d>E(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(c.quantity!==d)throw new Error("envelope: mint calldata quantity mismatch");let w=E(e.totalWei??e.artifact?.totalWei,"totalWei");if(o.totalValue!==w)throw new Error("envelope: mint value does not match declared totalWei");if(c.mintType==="allowlist"){let l=BigInt(Math.floor(t/1e3));if(c.startTime>l||c.endTime<=l)throw new Error("policy: SeaDrop allowlist stage is not open");if(c.mintPrice*d!==w)throw new Error("envelope: SeaDrop allowlist price does not match declared totalWei")}if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&E(e.priceWei??e.artifact.priceWei,"priceWei")*d!==w)throw new Error("envelope: mint price does not match declared totalWei");if(w>E(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...o,provider:n,decoded:[{...c,target:T(a.to,"mint target"),value:o.totalValue,gas:o.totalGas,fee:o.totalFee}]}}function Vt(e,{localsWaiver:r=!1}={}){if(!(e in je))throw new Error("fee: unknown action");return r?0:je[e]}function ie(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:o,networkFees:i,requireNetworkFees:a=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let f=pe(e.surface,"surface",16);if(!jt.has(f))throw new Error("envelope: unsupported public surface");let c=pe(e.action,"action",32);N(f,r.surfaces,"surface"),N(c,r.actions,"action"),N(e.owner,r.owners,"owner"),N(e.destination,r.destinations,"destination");let s=Mt(r.maxTtlMs,"maxTtlMs"),u=Mt(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>s)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>u)throw new Error("policy: slippage exceeds cap");let d=e.artifact;if(!d||typeof d!="object"||Array.isArray(d))throw new Error("envelope: structured artifact required");if(f==="evm-swap"||f==="evm-bridge")Jt(e,r,{nowMs:t,routeAttestationSecret:o});else if(f==="evm-nft")Gt(e,r,{nowMs:t});else if(f==="evm"){if(!["transfer","approve","delegate","identity"].includes(c))throw new Error(c==="mint"?"envelope: generic evm requires transfer or approve; use strict evm-nft for mint action":"envelope: generic evm requires transfer, approve, delegate, or identity");if(c==="swap"||c==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(Number(d.type)===4&&c!=="delegate")throw new Error("envelope: type-4 requires delegate");if(String(d.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(d.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");xe({...d,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:i,requireNetworkFees:a});let p=String(d.data||"0x").toLowerCase(),m=E(d.value,"EVM value");if(c==="delegate"){if(Number(d.type)!==4)throw new Error("envelope: delegate requires type-4");if(p!=="0x")throw new Error("envelope: 7702 delegate calldata must be empty");if(m!==0n)throw new Error("envelope: 7702 delegate cannot transfer native value")}else if(c==="identity"){if(m!==0n)throw new Error("envelope: ERC-8004 identity cannot transfer native value");let h=p.slice(0,10);if(h!=="0xf2c298be"&&h!=="0x0af28bd3")throw new Error("envelope: ERC-8004 selector not allowed")}else if(p==="0x"){if(m===0n)throw new Error("envelope: native EVM transfer value required")}else if(Q(p)){if(m!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else f==="btc"?rt(e,r):f==="sol"?pt(e,r):f==="hl"?gt(e,r):f==="poly"?At(e,r):f==="lighter"?It(e,r):f==="evm-order"&&Ft(e,r);let w=Number(e.fee?.oracleFeeBps)===0&&je[c]!==0;if(e.fee?.waiver||w&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(w&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let l=Vt(c,{localsWaiver:w});if(Number(e.fee?.oracleFeeBps)!==l)throw new Error("fee: final artifact fee mismatch");return!0}var Te=Object.freeze([...jt]),co=Object.freeze({...Ut});function uo(e={}){let r={};for(let t of Te){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(o,i)=>n.simulate(structuredClone(o),structuredClone(i)),sign:(o,i)=>n.sign(structuredClone(o),structuredClone(i)),broadcast:(o,i,a)=>n.broadcast(o,structuredClone(i),structuredClone(a))})}}return Object.freeze(r)}function lo(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as qs}from"@noble/curves/ed25519.js";import{base58 as fo}from"@scure/base";import{RawTx as Hs,SigHash as Ws,Transaction as po}from"@scure/btc-signer";import{Transaction as mo,keccak256 as Ue,verifyTypedData as Js}from"ethers";import{encode as ks}from"@msgpack/msgpack";import{keccak256 as Ps,verifyTypedData as Ls}from"ethers";var Cs=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Bs=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Kt=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function wo(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let o=e[n++];if(r|=(o&127)<<t,(o&128)===0)return{value:r,offset:n};t+=7}return null}function Yt(e,r){try{if(e==="evm-order")return Ue(r);if(String(e).startsWith("evm"))return mo.from(r).hash;if(e==="btc"){let t=Kt(r);if(!t)return null;let n=po.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=Kt(r);if(!t)return null;let n=wo(t);if(!n||n.value!==1)return null;let o=t.subarray(n.offset,n.offset+64);return o.length===64?fo.encode(o):null}if(e==="hl"&&typeof r=="string"&&r.startsWith("0x"))return Ue(r);if(e==="poly"&&typeof r=="string"&&r.startsWith("0x"))return Ue(r)}catch{}return null}var bo=e=>String(e||"").toLowerCase();function J(e){return ho("sha256").update(JSON.stringify(e)).digest("hex")}function he(e,r,t={}){return xe(e,r,t)}async function xo(e,r={}){if(!K(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function Qt(e,r,t=!1){if(!K(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),o=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<o)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function Eo(e,r={}){return renderConfirmationArtifact(e,J(e),r)}function Zt(e){if(e==null)return null;let r={tenantId:String(e.tenantId||"").trim(),runId:String(e.runId||"").trim(),handoffHash:String(e.handoffHash||""),idempotencyKey:String(e.idempotencyKey||""),legIndex:e.legIndex,legCount:e.legCount};if(!r.tenantId||!r.runId||!/^[0-9a-f]{64}$/.test(r.handoffHash)||!/^sha256:[0-9a-f]{64}$/.test(r.idempotencyKey)||!Number.isSafeInteger(r.legIndex)||r.legIndex<0||!Number.isSafeInteger(r.legCount)||r.legCount<1||r.legIndex>=r.legCount)throw new Error("confirmation: binding is invalid");return r}var we=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4,binding:o}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let i=go(32).toString("hex");return this.#e.set(i,{digest:J(r),owner:bo(t),expiresAtMs:this.now()+n,binding:Zt(o)}),i}consume(r,t,n){let o=this.#e.get(String(r));if(!o)throw new Error("confirmation: used or unknown nonce");if(o.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let i=Buffer.from(o.digest,"hex"),a=Buffer.from(J(t),"hex");if(!yo(i,a))throw new Error("confirmation: artifact mismatch");if(JSON.stringify(o.binding)!==JSON.stringify(Zt(n)))throw new Error("confirmation: execution binding mismatch");return this.#e.delete(String(r)),o}clear(){this.#e.clear()}};function Ao(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if(Q(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function So(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function vo(e){return e==="evm"||e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Ie(e,r){let t=String(r||"");if(e==="evm-order"||String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=Xt.decode(t);return n.length===64&&Xt.encode(n)===t}catch{return!1}return e==="hl"?/^0x[0-9a-fA-F]{64}$/.test(t):e==="poly"?/^0x[0-9a-fA-F]{64}$/.test(t):!1}function er(e,r,t){return!Ie(e,r)||!Ie(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function To(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function He({artifact:e,envelope:r,nonce:t,deps:n,policy:o,confirmation:i,consumeNonce:a,nowMs:f}){let c=To(o);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(c!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,f())!==!0)throw new Error("signer: autonomous trigger attestation required");return i}if(c!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(a)return n.confirmations.consume(t,e,n.confirmationBinding);if(!i||!Number.isFinite(i.expiresAtMs)||i.expiresAtMs<=f())throw new Error("confirmation: expired nonce");return i}function Io(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Oo(e,r){return e&&Io(e.surface)?me(e):[r]}function ko(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!er(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function No(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:So(t,n)}}function Po(e){return Number.isSafeInteger(e)&&e>0?"commit":"settle-failed"}async function Oe(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=typeof t.armGeneration=="function",o=typeof t.broadcastWithArmFence=="function";if(n!==o)throw new Error("signer: arm generation and broadcast fence must be configured together");let i=n?t.armGeneration():null,a=e?.version===1&&e?.surface?e:null,f=a?a.artifact:(()=>{let{tradeId:g,...x}=e||{};return x})(),c=Oo(a,f),s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,u=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),d=await He({artifact:e,envelope:a,nonce:r,deps:t,policy:s,confirmation:null,consumeNonce:!0,nowMs:u}),w=J(e),l=(g={})=>{a?ie(a,s,g):(he(f,s,{nowMs:g.nowMs,networkFees:g.networkFees,requireNetworkFees:g.requireNetworkFees}),Ao(f))},p=async g=>{let x=!a||vo(a.surface),v=x?await xo(g,t):void 0;return{nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:v,requireNetworkFees:x&&K(g?.chainId)}};l({nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let g of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[g]!="function")throw new Error(`signer: ${g} is required`);let m=t.reserveLedger(a||e,s);if(!m)throw new Error("signer: ledger reservation required");let h=!1,b=[];try{for(let[g,x]of c.entries()){if(typeof t.simulate!="function"||await t.simulate(x,a)!==!0)throw new Error("signer: strict affirmative simulation required");let v=await p(x);if((v.requireNetworkFees||v.networkFees!=null)&&Qt(x,v.networkFees,v.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,d=await He({artifact:e,envelope:a,nonce:r,deps:t,policy:s,confirmation:d,consumeNonce:!1,nowMs:u}),l(v),t.validateReservation(m,s,a&&typeof t.decodeEconomics=="function"?t.decodeEconomics(a,s):void 0),h=!0;let P=await t.sign(x,a);if(typeof t.verifySigned!="function"||await t.verifySigned(P,x,a)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");let S=a?.surface||"evm",X=Yt(S,P);if(t.executionAttempt&&await t.executionAttempt.recordSigned({txIndex:g,txCount:c.length,surface:S,signedTransactionId:X}),!t.isArmed())throw new Error("signer: disarmed before broadcast");if(J(e)!==w)throw new Error("signer: artifact mutated after signing");s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,d=await He({artifact:e,envelope:a,nonce:r,deps:t,policy:s,confirmation:d,consumeNonce:!1,nowMs:u});let _=await p(x);(_.requireNetworkFees||_.networkFees!=null)&&Qt(x,_.networkFees,_.requireNetworkFees),l(_),t.validateReservation(m,s,a&&typeof t.decodeEconomics=="function"?t.decodeEconomics(a,s):void 0),t.executionAttempt&&await t.executionAttempt.recordBroadcastAuthorized({txIndex:g});let G=()=>t.broadcast(P,x,a),V=o?await t.broadcastWithArmFence(i,G):await G(),ge=V?.status,ye=ko(V,S);if(!er(S,ye,X))throw new Error("signer: receipt transaction hash does not match signed bytes");if(ge===0||ge==="0x0")throw Ie(S,ye)?(t.executionAttempt&&await t.executionAttempt.recordCanonicalReceipt({txIndex:g,receipt:V}),Po(b.length)==="commit"?t.commitLedger(m):t.settleFailedLedger(m),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(ge!==1&&ge!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!Ie(S,ye))throw new Error("signer: successful broadcast requires a valid transaction hash");t.executionAttempt&&await t.executionAttempt.recordCanonicalReceipt({txIndex:g,receipt:V}),b.push(No(V,ye))}}catch(g){throw h||t.releaseLedger(m),g}if(t.commitLedger(m),b.length===1){let g={receipt:b[0]};return a?.surface==="evm-bridge"&&(g.originStatus="success",g.destinationStatus="unverified",g.destinationSuccess=!1,g.note="Origin-chain receipts do not prove destination-chain settlement."),g}let A={receipts:b,status:"success"};return a?.surface==="evm-bridge"&&(A.originStatus="success",A.destinationStatus="unverified",A.destinationSuccess=!1,A.note="Origin-chain receipts do not prove destination-chain settlement."),A}import Lo from"node:http";import{timingSafeEqual as Co}from"node:crypto";var tr=new Set(["127.0.0.1","::1","localhost"]),Bo=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&Co(t,n)},y=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function _o(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var ae=e=>new Promise((r,t)=>{let n=0,o=[],i=!1;e.on("data",a=>{n+=a.length,n>64*1024&&!i?(i=!0,t(new Error("request refused")),e.resume()):i||o.push(a)}),e.on("end",()=>{if(!i)try{r(JSON.parse(Buffer.concat(o).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)}),rr=e=>e?.idempotencyKey===void 0?void 0:{tenantId:e.tenantId,runId:e.runId,handoffHash:e.handoffHash,idempotencyKey:e.idempotencyKey,legIndex:e.legIndex,legCount:e.legCount},Fo=e=>e==="btc"||e==="sol"||["evm","evm-swap","evm-bridge","evm-nft"].includes(e);function $o(e={}){let r=e.host||"127.0.0.1";if(!tr.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let s of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[s]!="function")throw new Error(`signer: ${s} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new we,n=e.pending||new Map,o=(s,u)=>{try{e.ledgerObserver?.[s]?.(u)}catch{}};function i(s){let u=s.artifact?.version===1&&s.artifact?.surface?s.artifact:null,d=u?.artifact||s.artifact||{};return{id:s.digest.slice(0,8),digest:s.digest,surface:u?.surface||"evm",action:u?.action||"evm",chain:d.chainId??d.network??null,to:d.to||u?.destination||null,value:d.value??d.message?.sellAmount??d.message?.makingAmount??null,receiver:d.message?.receiver||d.typedData?.message?.receiver||null,maker:d.message?.maker||d.typedData?.message?.maker||null,makingAmount:d.message?.makingAmount||d.typedData?.message?.makingAmount||null,takingAmount:d.message?.takingAmount||d.typedData?.message?.takingAmount||null,sellAmount:d.message?.sellAmount||d.typedData?.message?.sellAmount||null,buyAmount:d.message?.buyAmount||d.typedData?.message?.buyAmount||null,kind:d.kind||null,type:d.type??null,authorizationList:d.authorizationList||null,feeAmount:d.message?.feeAmount||d.typedData?.message?.feeAmount||null,createdAtMs:s.createdAtMs}}function a(s){let u=String(s||"").trim().toLowerCase().replace(/^0x/,"");return u?[...n.values()].filter(d=>d.digest.toLowerCase().startsWith(u)||d.digest.slice(0,8)===u):[...n.values()]}let f=e.origin||`http://${r}`;return Lo.createServer(async(s,u)=>{try{let d=String(s.headers.authorization||"").replace(/^Bearer /i,"");if(!Bo(d,e.token))return y(u,401,{error:"unauthorized"});let w=_o(s.headers.host);if(!tr.has(w))return y(u,403,{error:"host refused"});if(s.headers.origin&&s.headers.origin!==f)return y(u,403,{error:"origin refused"});if(s.method==="GET"&&s.url==="/status"){let l=typeof e.readPolicy=="function"?e.readPolicy():e.policy,p=new Set(Te),m=Array.isArray(l?.surfaces)?l.surfaces.filter(h=>typeof h=="string"&&p.has(h)):[];return y(u,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:m,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(s.method==="POST"&&s.url==="/disarm")return await e.disarm(),t.clear(),n.clear(),y(u,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(s.method))return y(u,405,{error:"request refused"});if(s.method==="POST"&&String(s.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return y(u,415,{error:"request refused"});if(s.method==="GET"&&s.url==="/pending"){let l=[...n.values()].map(i);return y(u,200,{ok:!0,armed:e.isArmed?.()===!0,count:l.length,items:l})}if(s.method==="GET"&&String(s.url||"").startsWith("/execute/status?")){if(!e.executionOutbox)return y(u,503,{error:"execution outbox unavailable"});let l=new URL(String(s.url),f).searchParams.get("attemptKey"),p=await e.executionOutbox.inspect(l);return p?y(u,200,{ok:!0,attempt:p}):y(u,404,{error:"execution attempt not found"})}if(s.method==="POST"&&s.url==="/pending"){if(e.autonomous===!0)return y(u,403,{error:"autonomous signer does not queue human approvals"});let p=(await ae(s)).artifact;if(!p||typeof p!="object")return y(u,400,{error:"artifact required"});let m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return y(u,403,{error:"exact-human policy required"});let h=typeof e.nowMs=="function"?e.nowMs():Date.now();if(p?.surface==="cex"){if(typeof e.inspectCex!="function")return y(u,403,{error:"cex execution unavailable"});e.inspectCex(p,m,h)}else if(p?.version===1&&p?.surface)ie(p,m,{nowMs:h,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:g,...x}=p||{};he(x,m,{nowMs:h})}let b=J(p),A=p?.surface==="cex"?Object.freeze(structuredClone(p)):p;return n.set(b,{artifact:A,digest:b,createdAtMs:h}),o("queued",{digest:b,createdAtMs:h}),y(u,200,{ok:!0,...i(n.get(b))})}if(s.method==="POST"&&s.url==="/ack"){if(e.autonomous===!0)return y(u,403,{error:"autonomous signer does not accept messaging acks"});let l=await ae(s),p=a(l.digest||l.id);if(p.length===0)return y(u,404,{error:"no pending artifact"});if(p.length>1)return y(u,409,{error:"ambiguous digest; pass more hex"});let m=p[0];if((typeof e.readPolicy=="function"?e.readPolicy():e.policy)?.confirmationMode!=="exact-human")return y(u,403,{error:"exact-human policy required"});if(e.isArmed?.()!==!0)return y(u,403,{error:"signer is disarmed"});let b=e.verifyOwnerProof||e.verifyCexOwnerProof;if(typeof b!="function"||b(l.ownerProof,{digest:m.digest})!==!0)return y(u,403,{error:"exact owner Allow proof required"});if(m.artifact?.surface==="cex"){if(typeof e.cexExecute!="function")return y(u,403,{error:"cex execution unavailable"});n.delete(m.digest),o("approved",{digest:m.digest});let x;try{x=await e.cexExecute(m.artifact)}catch(v){throw o("failed",{digest:m.digest,reason:String(v?.message||v)}),v}return o("executed",{digest:m.digest,owner:m.artifact?.owner??m.artifact?.from,result:x}),y(u,200,{ok:!0,executed:!0,digest:m.digest,id:m.digest.slice(0,8),result:x})}n.delete(m.digest);let A=t.issue({artifact:m.artifact,owner:m.artifact?.owner??m.artifact?.from,ttlMs:l.ttlMs});o("approved",{digest:m.digest});let g;try{g=await Oe(m.artifact,A,{...e,confirmations:t})}catch(x){throw o("failed",{digest:m.digest,reason:String(x?.message||x)}),x}return o("executed",{digest:m.digest,owner:m.artifact?.owner??m.artifact?.from,result:g}),y(u,200,{ok:!0,executed:!0,confirmationNonce:A,digest:m.digest,id:m.digest.slice(0,8),result:g})}if(s.method==="POST"&&s.url==="/deny"){let l=await ae(s),p=a(l.digest||l.id);return p.length===0?y(u,404,{error:"no pending artifact"}):p.length>1?y(u,409,{error:"ambiguous digest; pass more hex"}):(n.delete(p[0].digest),o("denied",{digest:p[0].digest}),y(u,200,{ok:!0,denied:!0,id:p[0].digest.slice(0,8)}))}if(s.method==="POST"&&s.url==="/confirm"){if(e.autonomous===!0)return y(u,403,{error:"autonomous signer does not issue human confirmation nonces"});let l=await ae(s);if(l.artifact?.surface==="cex")return y(u,403,{error:"cex requires pending owner ack"});let p=J(l.artifact),m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return y(u,403,{error:"exact-human policy required"});let h=typeof e.nowMs=="function"?e.nowMs():Date.now();if(l.artifact?.version===1&&l.artifact?.surface)ie(l.artifact,m,{nowMs:h,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:b,...A}=l.artifact||{};he(A,m,{nowMs:h})}return typeof e.confirmArtifact!="function"?y(u,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(l.artifact,p,m)!==!0?y(u,400,{error:"exact human confirmation refused"}):y(u,200,{confirmationNonce:t.issue({artifact:l.artifact,owner:l.artifact?.owner??l.artifact?.from,ttlMs:l.ttlMs,binding:rr(l)})})}if(s.method==="POST"&&s.url==="/execute/reconcile"){let l=await ae(s);if(!e.executionOutbox||typeof e.observeExecutionTransaction!="function")return y(u,503,{error:"execution reconciliation unavailable"});let p=await e.executionOutbox.reconcile({attemptKey:l.attemptKey,observeTransaction:e.observeExecutionTransaction,commitLedger:e.commitLedger,settleFailedLedger:e.settleFailedLedger});return y(u,200,{ok:!0,attempt:p})}if(s.method==="POST"&&s.url==="/execute"){let l=await ae(s);if(l.artifact?.surface==="cex")return y(u,403,{error:"cex requires pending owner ack"});let p=typeof e.executeArtifact=="function"?e.executeArtifact:Oe;if(l.idempotencyKey!==void 0){if(!Fo(l.artifact?.surface))return y(u,422,{error:"surface does not support durable Team execution reconciliation"});if(!e.executionOutbox)return y(u,503,{error:"execution outbox required for idempotent execution"});let h=await e.executionOutbox.begin({attemptKey:l.idempotencyKey,artifact:l.artifact,tenantId:l.tenantId,runId:l.runId,handoffHash:l.handoffHash,legIndex:l.legIndex,legCount:l.legCount});if(h.state==="recovery-required")return y(u,409,{error:"execution recovery-required; automatic replay refused",transactions:h.transactions||[]});if(h.state==="failed")return y(u,409,{error:"execution has a canonical failed receipt",receipts:h.receipts||[]});if(h.state==="completed")return y(u,200,h.result);let b=await e.executionOutbox.acquireExecutor({attemptKey:l.idempotencyKey}),A={recordSigned:g=>e.executionOutbox.recordSigned({attemptKey:l.idempotencyKey,leaseId:b,...g}),recordBroadcastAuthorized:g=>e.executionOutbox.recordBroadcastAuthorized({attemptKey:l.idempotencyKey,leaseId:b,...g}),recordCanonicalReceipt:g=>e.executionOutbox.recordCanonicalReceipt({attemptKey:l.idempotencyKey,leaseId:b,...g})};try{let g={...e,confirmations:t,confirmationBinding:rr(l),executionAttempt:A,reserveLedger:(v,P)=>e.reserveLedger(v,P,{retryReleasedTradeId:h.retryReleasedTradeId})},x=await p(l.artifact,l.confirmationNonce,g);return await e.executionOutbox.complete({attemptKey:l.idempotencyKey,leaseId:b,result:x}),y(u,200,x)}catch(g){throw await e.executionOutbox.failPreSubmission({attemptKey:l.idempotencyKey,leaseId:b,error:g}),g}finally{await e.executionOutbox.releaseExecutor({attemptKey:l.idempotencyKey,leaseId:b})}}let m=await p(l.artifact,l.confirmationNonce,{...e,confirmations:t});return y(u,200,m)}return y(u,404,{error:"not found"})}catch(d){e.onError?.(String(d?.message||d));let w=String(s.url||"");return w==="/pending"||w==="/ack"||w==="/deny"?y(u,400,{error:String(d?.message||"request refused").slice(0,300)}):y(u,400,{error:"request refused"})}})}import{createHmac as Ro}from"node:crypto";import{HDNodeWallet as Do,Mnemonic as qo,Wallet as ar}from"ethers";function Mo(e){return BigInt(e).toString(16).padStart(64,"0")}function nr(e){return e.slice(2).padStart(64,"0")}function or(e,r,t){return`0x42842e0e${nr(e)}${nr(r)}${Mo(t)}`}var jo=/^(?:[a-z]+ ){11}[a-z]+$|^(?:[a-z]+ ){23}[a-z]+$/,Uo=/^(?:0x)?[0-9a-fA-F]{64}$/;function Ho(e){let r=String(e||"").trim().toLowerCase().replace(/\s+/g," ");if(!jo.test(r))return null;try{if(!qo.isValidMnemonic(r))return null}catch{return null}return r}function Wo(e){let r=String(e||"").trim();return Uo.test(r)?r.startsWith("0x")?r:`0x${r}`:null}function zo(e,r){let t=Buffer.from(e.replace(/^0x/i,""),"hex");return`0x${Ro("sha256",t).update(`oracle-mint-fanout:v1:${r}`).digest("hex")}`}function We(e,r,t,n){return{index:e,address:String(r).toLowerCase(),path:t,kind:n}}function Jo(e,{childCount:r}={}){let t=Number(r);if(!Number.isInteger(t)||t<1)throw new Error("hd-fanout: childCount must be a positive integer");if(t>32)throw new Error(`hd-fanout: childCount exceeds hard max ${32}`);let n=Ho(e);if(n){let i=[];for(let a=0;a<=t;a++){let f=`m/44'/60'/0'/0/${a}`,c=Do.fromPhrase(n,"",f);i.push(We(a,c.address,f,"bip44"))}return{kind:"bip44",main:i[0],children:i.slice(1)}}let o=Wo(e);if(o){let i=new ar(o),a=[];for(let f=1;f<=t;f++){let c=new ar(zo(o,f));a.push(We(f,c.address,`hmac:v1:${f}`,"hmac"))}return{kind:"hmac",main:We(0,i.address,"vault-key","hmac"),children:a}}throw new Error("hd-fanout: secret must be a BIP-39 mnemonic or a 32-byte hex key")}function Go(e,r){let t=String(r||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error("hd-fanout: vault address required");if(e.main.address!==t)throw new Error(`hd-fanout: derived main ${e.main.address} does not match vault ${t} (BIP-44 index 0 must be the vault wallet, or use the raw-key HMAC path)`)}function Vo(e,{nonce:r,value:t}){let n={type:2,chainId:e.chainId,to:e.to,data:e.data&&e.data!=="0x"?e.data:"0x",value:BigInt(t??e.value??0),gasLimit:BigInt(e.gasLimit),maxFeePerGas:BigInt(e.maxFeePerGas),maxPriorityFeePerGas:BigInt(e.maxPriorityFeePerGas||0)};return r!=null&&(n.nonce=Number(r)),n}async function Ko(e,r){if(e.valueMode!=="remainder")return e.value;if(typeof r!="function")throw new Error("mint-fanout: getBalance required for remainder sweep");let t=BigInt(await r(e.from)),n=BigInt(e.gasLimit)*BigInt(e.maxFeePerGas);return(t>n?t-n:0n).toString()}function Yo(e,r){if(e.kind!=="sweep-nft"||!e.needsTokenId)return e;if(r==null||String(r).length===0)throw new Error(`mint-fanout: hop ${e.step} needs tokenId after mint`);return{...e,needsTokenId:!1,tokenId:String(r),data:or(e.from,e.nftTo,BigInt(r))}}async function Xo(e,{byAddress:r,getNonce:t,getBalance:n,tokenIdsByChildIndex:o={}}={}){if(!e||e.signed)throw new Error("mint-fanout: unsigned plan required");if(!(r instanceof Map))throw new Error("mint-fanout: wallet map required");let i=[],a=new Map;for(let f of e.hops){let c=Yo(f,o[f.walletIndex]),s=String(c.from).toLowerCase(),u=r.get(s);if(!u)throw new Error(`mint-fanout: no local key for ${s}`);let d=await Ko(c,n),w=c.nonce;if(w==null){if(typeof t!="function")throw new Error("mint-fanout: getNonce required when hops omit nonce");a.has(s)||a.set(s,Number(await t(s))),w=a.get(s),a.set(s,w+1)}let l=Vo(c,{nonce:w,value:d}),p=await u.signTransaction(l);i.push({step:c.step,kind:c.kind,walletIndex:c.walletIndex,from:c.from,to:c.to,chainId:c.chainId,value:String(d),nonce:w,delayMsAfter:c.delayMsAfter||0,signedRaw:p})}return{execution:"signed-local",signed:!0,main:e.main,chainId:e.chainId,contract:e.contract,hopCount:i.length,hops:i}}async function Qo(e,{broadcastFn:r,sleepFn:t=n=>new Promise(o=>setTimeout(o,n))}={}){if(!e?.signed)throw new Error("mint-fanout: signed plan required");if(typeof r!="function")throw new Error("mint-fanout: broadcastFn required");let n=[];for(let o of e.hops){let i=await r(o.signedRaw,o);if(!i?.hash)throw new Error(`mint-fanout: hop ${o.step} broadcast returned no hash`);n.push({step:o.step,kind:o.kind,from:o.from,hash:i.hash}),o.delayMsAfter>0&&await t(o.delayMsAfter)}return{ok:!0,receipts:n}}export{we as ConfirmationStore,Te as PUBLIC_SIGNER_SURFACES,co as REVIEWED_EVM_SELECTORS,J as artifactDigest,he as assertExactPolicy,Go as assertMainMatchesVault,Qo as broadcastMintFanout,$o as createSignerServer,uo as createSurfaceAdapters,Jo as deriveFanoutAccounts,me as evmTransactions,Oe as executeConfirmedArtifact,Eo as inspectArtifactForConfirmation,Jt as inspectEvmBatch,Gt as inspectEvmNft,Vt as publicFeeBps,Xo as signMintFanoutPlan,lo as surfaceAdapterFor,ie as validateSurfaceEnvelope};