@oracle-agent/oracle 0.35.34 → 0.35.36

package/dist/router/prepare-bridge.mjs

@@ -1,2 +1,2 @@
 var $t=Object.defineProperty;var D=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var Me=(e,t)=>{for(var r in t)$t(e,r,{get:t[r],enumerable:!0})};import Z from"node:net";import Lt from"node:dns";function ie(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let u=c.split(":"),p=u.at(-1);if(p?.includes(".")){let f=p.split(".").map(Number);if(f.length!==4||f.some(h=>!Number.isInteger(h)||h<0||h>255))return null;u.splice(u.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return u.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:u.map(f=>Number.parseInt(f,16))},[n,s]=t.split("::"),o=r(n),i=r(s);if(!o||!i)return null;let a=t.includes("::"),l=8-o.length-i.length;if(!a&&l!==0||a&&l<1)return null;let d=[...o,...Array(Math.max(0,l)).fill(0),...i];return d.length!==8?null:Uint8Array.from(d.flatMap(c=>[c>>8,c&255]))}function ye(e,t,r){let n=Math.floor(r/8),s=r%8;for(let i=0;i<n;i+=1)if(e[i]!==t[i])return!1;if(!s)return!0;let o=255<<8-s;return(e[n]&o)===(t[n]&o)}function Ee(e){if(Z.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(Z.isIPv6(e)){let t=ie(e);if(!t)return!1;let r=ie("::ffff:0:0");return ye(t,r,96)?Ee([...t.slice(12)].join(".")):ye(t,ie("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([s,o])=>ye(t,ie(s),o)):!1}return!1}function Ft(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Ut.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=Z.isIP(r);return n!==0&&!Ee(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function xe(e,{lookupFn:t=Lt.promises.lookup}={}){let r=Ft(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:Z.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(s=>!Ee(s.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function Ae({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let u=await t();r=u.Agent,n=u.fetch}catch(u){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${u?.message||u}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let s=u=>String(u).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),o=new Map,i=u=>(Array.isArray(u)?u:[u]).map(p=>typeof p=="string"?{address:p}:p).filter(p=>p&&p.address).map(p=>({address:p.address,family:p.family||(Z.isIPv6(p.address)?6:4)})),a=(u,p,f)=>{o.set(s(u),i(typeof p=="string"?[{address:p,family:f}]:p))},l=u=>{let p=s(u);if(Z.isIP(p))return[{address:p,family:Z.isIPv6(p)?6:4}];let f=o.get(p);if(!f||!f.length)throw new Error(`refused: unpinned host ${u} during pinned fetch`);return f},d=new r({connect:{lookup(u,p,f){let h;try{h=l(u)}catch(y){return f(y)}return p?.all?f(null,h):f(null,h[0].address,h[0].family)}}}),c=Dt((u,p={})=>n(u,{...p,dispatcher:d}),a);return{dispatcher:d,fetch:c,pin:a,resolve:l,async close(){try{await d.destroy()}catch{}}}}function Dt(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Se]=Object.freeze({pin:t}),e}function Ie(e){return typeof e=="function"&&typeof e[Se]?.pin=="function"}function Ve(e,t,r){if(!Ie(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Se].pin(t,r)}var Ut,Se,Ge=D(()=>{Ut=new Set(["localhost","metadata.google.internal","metadata.goog"]);Se=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as Mt}from"node:crypto";import{types as z}from"node:util";function C(e){return K(`HTTP JSON body refused: ${e}`)}function Yt(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof z[t]=="function"&&z[t](e))}function Wt(e){let t=[],r=0,n=0,s=0,o=0,i=new WeakSet,a=c=>{if(r+=Buffer.byteLength(c,"utf8"),r>H.bytes)throw C("serialized byte limit exceeded");t.push(c)},l=c=>{if(Buffer.byteLength(c,"utf8")>H.bytes)throw C("serialized byte limit exceeded");return JSON.stringify(c)},d=(c,u)=>{if(n+=1,n>H.nodes)throw C("node limit exceeded");if(u>H.depth)throw C("depth limit exceeded");if(c===null){a("null");return}if(typeof c=="string"){a(l(c));return}if(typeof c=="boolean"){a(c?"true":"false");return}if(typeof c=="number"){if(!Number.isFinite(c))throw C("non-finite number");a(Object.is(c,-0)?"0":String(c));return}if(typeof c!="object")throw C("unsupported non-JSON value");if(z.isProxy(c))throw C("proxy value");if(Yt(c))throw C("unsupported exotic object");if(i.has(c))throw C("cyclic value");i.add(c);try{if(Object.getOwnPropertySymbols(c).length>0)throw C("symbol-keyed fields are unsupported");if(Array.isArray(c)){let h=Object.getPrototypeOf(c),y=0;for(;h!==null;){if(z.isProxy(h))throw C("proxy array prototype");if(y+=1,y>H.depth)throw C("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(c.length>H.arrayLength)throw C("array length limit exceeded");for(let E=0;E<c.length;E+=1){let T=Object.getOwnPropertyDescriptor(c,String(E));if(!T||!Object.hasOwn(T,"value")||T.enumerable!==!0)throw C("array entries must be dense enumerable own data")}let m=0;for(let E in c){if(o+=1,o>H.fields)throw C("enumeration limit exceeded");if(Object.hasOwn(c,E)&&(m+=1,m>c.length))throw C("named array fields are unsupported")}if(m!==c.length)throw C("array entries must be dense enumerable own data");a("[");for(let E=0;E<c.length;E+=1)E&&a(","),d(Object.getOwnPropertyDescriptor(c,String(E)).value,u+1);a("]");return}let p=Object.getPrototypeOf(c);if(p!==Object.prototype&&p!==null)throw C("non-plain object");let f=[];for(let h in c){if(o+=1,o>H.fields)throw C("enumeration limit exceeded");if(!Object.hasOwn(c,h))continue;if(s+=1,s>H.fields)throw C("field limit exceeded");let y=Object.getOwnPropertyDescriptor(c,h);if(!y||!Object.hasOwn(y,"value")||y.enumerable!==!0)throw C("object fields must be enumerable own data");f.push([h,y.value])}a("{");for(let h=0;h<f.length;h+=1)h&&a(","),a(l(f[h][0])),a(":"),d(f[h][1],u+1);a("}")}finally{i.delete(c)}};return d(e,0),t.join("")}function Qt(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(z.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let s=n.toLowerCase();if(r.has(s))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(s);let o=Object.getOwnPropertyDescriptor(e,n);if(!o||!Object.hasOwn(o,"value"))throw new TypeError("HTTP headers must contain own data properties");let i=o.value;if(i==null||["object","function","symbol"].includes(typeof i))throw new TypeError("HTTP header values must be scalar");t[n]=String(i)}return t}function Jt(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Zt(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function er(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function se(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=We.get(e);return t||(t=Qe,Qe+=1,We.set(e,t)),`reference:${t}`}function Je(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?tr.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function Ze(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Je);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Je(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&rr.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function nr(e,t,r,n={},s=null){let o=Mt("sha256"),i=(l,d)=>{let c=String(d);o.update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l),o.update("=").update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c).update(`
-`)};i("method",e),i("url",t),Object.keys(r||{}).map((l,d)=>({name:l.toLowerCase(),order:d,value:String(r[l])})).sort((l,d)=>l.name.localeCompare(d.name)||l.order-d.order).forEach((l,d)=>{i(`header-name-${d}`,l.name),i(`header-value-${d}`,l.value)}),i("body",s??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])i(`context-${l}`,n[l]??"-");return o.digest("hex")}function or(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Xe):Math.min(250*2**e,Xe)+Math.floor(Math.random()*100)}function K(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function ke(e,t,r){return K(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function ee(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function sr(e){return e?e.byteLength??e.length??0:0}async function ar(e,t,{url:r,truncate:n=!1,onOversize:s}={}){if(t==null)return await e.text();let o=Number(e.headers?.get?.("content-length"));if(Number.isFinite(o)&&o>t&&(ee(e),!n))throw ke(r,`content-length ${o}`,t);let i=e.body?.getReader?.();if(!i){let u=await e.text(),p=Buffer.byteLength(u,"utf8");if(p>t){if(!n)throw ke(r,`body ${p} bytes`,t);return Buffer.from(u,"utf8").subarray(0,t).toString("utf8")}return u}let a=[],l=0,d=!1;try{for(;;){let{value:u,done:p}=await i.read();if(p)break;if(u&&(a.push(Buffer.from(u)),l+=sr(u),l>t)){d=!0;break}}}finally{if(d)try{await i.cancel()}catch{}try{i.releaseLock?.()}catch{}}if(d&&(typeof s=="function"&&s(),!n))throw ke(r,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(d?c.subarray(0,t):c).toString("utf8")}function cr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function ur(e,{fetchImpl:t,method:r,headers:n,body:s,timeoutMs:o,lookupFn:i,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:c=!1,importUndici:u,validateResponse:p,signal:f,redirectPolicy:h="follow",maxRedirects:y=ae}){let m=new AbortController,E=setTimeout(()=>m.abort(),o),T=f?Ye?Ye([f,m.signal]):f:m.signal,S=null,k=t,R=i?{lookupFn:i}:{};if(l&&!a&&!Ie(k))throw K(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let U=async(A,{status:w=null}={})=>{let b=await xe(A,R);if(!b.ok)throw K(w==null?`HTTP refused ${A}: ${b.error}`:`HTTP redirect to ${A} ${b.error}`,w==null?{}:{status:w});let P=new URL(A).hostname;if(a){if(S&&(await S.close(),S=null),!S)try{S=await Ae({requireUndici:!0,...u?{importUndici:u}:{}})}catch(g){throw K(w==null?`HTTP refused ${A}: ${g?.message||g}`:`HTTP redirect to ${A} refused: ${g?.message||g}`,w==null?{}:{status:w})}S.pin(P,b.addresses),k=S.fetch}else Ve(k,P,b.addresses);return b};try{let A=String(e),w=Object.assign(Object.create(null),n||{});l&&await U(A);for(let b=0;b<=y;b+=1){let P=Object.assign(Object.create(null),{method:r,headers:w,body:s,signal:T,redirect:"manual",dispatcher:void 0}),g=await k(A,P);if((h==="error"||y===0)&&g.status>=300&&g.status<400)throw ee(g),K(`HTTP ${g.status} ${r} redirect refused`,{status:g.status,redirectRefused:!0});if(Xt.has(g.status)){let _=c===!0&&r==="POST"&&[307,308].includes(g.status)&&Ze(r,s);if(r!=="GET"&&r!=="HEAD"&&!_){ee(g);let O=new Error(`HTTP ${g.status} ${r} ${A} redirected non-idempotent request`);throw O.status=g.status,O}if(b===y)throw ee(g),K(`HTTP ${g.status} ${r} redirect budget exhausted`,{status:g.status,redirectRefused:!0});let ne=g.headers?.get?.("location"),B;try{B=Zt(ne,A)}catch(O){throw ee(g),O}let $=!er(B,A);if(ee(g),$&&r==="POST"){let O=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw O.status=g.status,O}if($&&c){let O=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw O.status=g.status,O.retryable=!1,O}if($&&(w=Jt(w)),l)await U(B,{status:g.status});else if($){let O=await xe(B,R);if(!O.ok){let I=new Error(`HTTP redirect from ${A} ${O.error}`);throw I.status=g.status,I.retryable=!1,I}a&&O.addresses?.length&&(S||(S=await Ae(u?{importUndici:u}:{})),S&&(S.pin(new URL(B).hostname,O.addresses),k=S.fetch))}A=B;continue}if(typeof p=="function")try{await p(g,{url:A})}catch(_){throw ee(g),K(_?.message||String(_))}let v=await ar(g,d,{url:A,onOversize:()=>m.abort()}),F=cr(v);if(!g.ok){let _=new Error(`HTTP ${g.status} ${r} ${A}`);throw _.status=g.status,_.retryAfter=g.headers?.get?.("retry-after")??null,_.body=F??v.slice(0,300),_}return F??v}throw new Error(`HTTP redirect loop for ${e}`)}catch(A){if(m.signal.aborted&&!Ce(f)){let w=A&&(typeof A=="object"||typeof A=="function")&&!z.isProxy(A)?A:null,b=w?Object.getOwnPropertyDescriptor(w,"oversize"):null;if(!(b&&Object.hasOwn(b,"value")&&b.value===!0))try{if(!w)throw new TypeError("unsafe rejection");Object.defineProperties(w,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let g=new Error("HTTP request timed out");throw Object.defineProperties(g,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),g}}throw A}finally{clearTimeout(E),S&&await S.close()}}async function N(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&z.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let I of Object.getOwnPropertyNames(t)){let x=Object.getOwnPropertyDescriptor(t,I);if(!(I==="toJSON"&&x&&Object.hasOwn(x,"value")&&x.value===void 0)){if(!r.has(I))throw new TypeError("HTTP options contain unknown fields");if(!x||!x.enumerable||!Object.hasOwn(x,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=I=>{if(t==null||!Object.hasOwn(t,I))return;let x=Object.getOwnPropertyDescriptor(t,I);if(!x||!Object.hasOwn(x,"value"))throw new TypeError("HTTP options must contain own data properties");return x.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let s=n("method");if(s!==void 0&&(typeof s!="string"||!/^[A-Za-z]+$/u.test(s)))throw new TypeError("HTTP method must be a string token");let o=n("timeoutMs");if(o!==void 0&&(!Number.isInteger(o)||o<1||o>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let i=n("retries");if(i!==void 0&&(!Number.isInteger(i)||i<0||i>10))throw new TypeError("HTTP retries must be a bounded integer");let a=n("redirectPolicy");if(a!==void 0&&a!=="follow"&&a!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=n("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>ae))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ae}`);if(a==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=a??"follow",c=d==="error"?0:l??ae;for(let I of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let x=n(I);if(x!==void 0&&typeof x!="boolean")throw new TypeError(`HTTP ${I} must be boolean`)}let u=n("maxResponseBytes");if(u!==void 0&&(!Number.isInteger(u)||u<1||u>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=n("signal");if(p!==void 0){if(z.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Ce(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let I of["importUndici","lookupFn","validateResponse"]){let x=n(I);if(x!==void 0&&typeof x!="function")throw new TypeError(`HTTP ${I} must be a function`)}let f=n("fetchImpl"),h=f||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let y=o??12e3,m=(s||"GET").toUpperCase(),E=n("headers"),T=Qt(E),S=Object.assign(Object.create(null),T);Object.keys(S).some(I=>I.toLowerCase()==="accept")||(S.Accept="application/json");let k=n("body");k!=null&&typeof k!="string"&&(Object.keys(S).find(x=>x.toLowerCase()==="content-type")||(S["Content-Type"]="application/json"),k=Wt(k));let R=i??jt,U=n("lookupFn"),A=!f,w=n("untrustedUrl")===!0,b=n("sameOriginRedirectsOnly")===!0,P=n("importUndici"),g=n("validateResponse"),v=p,F=u??null,_=async()=>{let I;for(let x=0;x<=R;x++){v&&Vt.call(v);try{return await ur(e,{fetchImpl:h,method:m,headers:S,body:k,timeoutMs:y,lookupFn:U,realFetch:A,untrustedUrl:w,maxResponseBytes:F,sameOriginRedirectsOnly:b,importUndici:P,validateResponse:g,signal:v,redirectPolicy:d,maxRedirects:c})}catch(J){I=J;let te=be=>{if(!J||typeof J!="object"&&typeof J!="function"||z.isProxy(J))return;let oe=Object.getOwnPropertyDescriptor(J,be);return oe&&Object.hasOwn(oe,"value")?oe.value:void 0},ge=te("status"),Pt=te("oracleTimeout")===!0||te("name")==="AbortError"||te("name")==="TimeoutError"||Ce(v),_t=new Set([408,425,429]),Rt=te("retryable")===!1?!1:ge!=null?_t.has(ge)||qt.has(ge)&&Ke.has(m):!Pt&&Ke.has(m);if(x===R||!Rt)throw J;let De=or(x,te("retryAfter"));v?await new Promise((be,oe)=>{let Bt=setTimeout(be,De);Gt.call(v,"abort",()=>{clearTimeout(Bt),oe(Kt(v)||new DOMException("Aborted","AbortError"))},{once:!0})}):await ir(De)}}throw I};if(!(n("dedupe")!==!1&&!v&&Ze(m,k)))return _();let B=nr(m,e,S,{untrustedUrl:w,maxResponseBytes:F,sameOriginRedirectsOnly:b,redirectPolicy:d,maxRedirects:c,timeoutMs:y,retries:R,fetchImpl:se(h),realFetch:A,lookupFn:se(U),importUndici:se(P),validateResponse:se(g)},k),$=Oe.get(B);if($)return $;let O=_().finally(()=>Oe.delete(B));return Oe.set(B,O),O}var qt,Ke,jt,Xe,Ht,zt,Vt,Gt,Ye,Ce,Kt,Xt,ae,qn,H,Oe,We,Qe,tr,rr,ir,q=D(()=>{Ge();qt=new Set([408,425,429,500,502,503,504]),Ke=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),jt=2,Xe=4e3,Ht=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,zt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Vt=AbortSignal.prototype.throwIfAborted,Gt=EventTarget.prototype.addEventListener,Ye=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Ce=e=>e?Ht.call(e):!1,Kt=e=>e?zt.call(e):void 0,Xt=new Set([301,302,303,307,308]),ae=3,qn=64*1024,H=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});Oe=new Map,We=new WeakMap,Qe=1;tr=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),rr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);ir=e=>new Promise(t=>setTimeout(t,e))});import{readFileSync as lr}from"node:fs";import{homedir as dr}from"node:os";import{join as ce}from"node:path";function pr(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let r=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return r?[r]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),t=dr();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let r=(process.env.ORACLE_CONFIG_DIR||ce(t,".config","oracle")).trim();return[e,ce(r,"exec.env")].filter(Boolean)}return[e,ce(t,".config","oracle","exec.env"),ce(t,".config","mad-desk","exec.env")].filter(Boolean)}function et(e,t,r){let n=e??process.env[t]??process.env[r];if(!String(n||"").trim())for(let s of pr())try{let o=lr(s,"utf8"),i=o.match(new RegExp(`^${t}=(.*)$`,"m"))||o.match(new RegExp(`^${r}=(.*)$`,"m"));if(i&&(n=i[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${t} required for attestation. Set it in the environment, or place ${t}=<value> in ~/.config/oracle/exec.env`);return n}var tt=D(()=>{});var rt=D(()=>{});import{createHash as fr,createHmac as ot,timingSafeEqual as mr}from"node:crypto";function le(e){return Array.isArray(e)?`[${e.map(le).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${le(e[t])}`).join(",")}}`:JSON.stringify(e??null)}function it(e,{required:t=!1}={}){try{return et(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(r){if(t)throw r;return null}}function Te(e){let{signature:t,...r}=e;return r}function st(e,{secret:t}={}){let r=it(t);return r?{...e,signature:ot("sha256",r).update(le(Te(e))).digest("hex")}:e}function hr(e){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<10||t.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return fr("sha256").update(Buffer.from(t.slice(2),"hex")).digest("hex")}function X(e,{chainId:t,venue:r,data:n,secret:s}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");if(Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(String(e.venue).toLowerCase()!==String(r||"").toLowerCase())throw new Error("auto-slippage guard venue mismatch");let o=it(s);if(o){let f=ot("sha256",o).update(le(Te(e))).digest("hex");if(!wr(e.signature,f))throw new Error("auto-slippage guard signature mismatch \u2014 refusing to bind a guard this Oracle did not issue")}let i=Number(e.selectedBps),a=Number(e.capBps);if(!Number.isInteger(i)||i<0||i>ue||!Number.isInteger(a)||a<0||a>ue||i>a)throw new Error("auto-slippage guard bounds are invalid");let l=BigInt(e.quoteAmountOut??0),d=BigInt(e.minAmountOut??0);if(l<=0n||d<=0n)throw new Error("auto-slippage guard amounts must be positive");let c=l*BigInt(1e4-i),u=c/10000n;if(c%10000n!==0n&&(u+=1n),d<u)throw new Error("auto-slippage guard is under-protected relative to its quote");let p=yr(n);if(p!=null&&p!==d)throw new Error(`auto-slippage: calldata encodes floor ${p}, not the guard floor ${d} \u2014 refusing to bind`);return st({...Te(e),calldataHash:hr(n)},{secret:s})}function wr(e,t){let r=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(t??""),"utf8");return r.length!==n.length||r.length===0?!1:mr(r,n)}function ve(e,t=0){let r=Number(e);return Number.isFinite(r)?r:t}function gr(e){let t=e==null?ue:Number(e);if(!Number.isInteger(t)||t<0)throw new Error("auto-slippage cap must be a non-negative integer bps value");return Math.min(t,ue)}function Y({liquidityUsd:e,priceChange5m:t=0,quoteAgeMs:r=0,crossChain:n=!1,requestedCapBps:s}={}){let o=ve(e,0),i=o>0?o>=25e4?5:o>=1e5?10:o>=5e4?20:o>=1e4?40:70:n?30:10,a=Math.min(60,Math.abs(ve(t,0))*2),l=Math.min(40,Math.floor(Math.max(0,ve(r,0))/5e3)*5),d=Math.max(25,Math.ceil(20+i+a+l)),c=gr(s);return{mode:"auto",requiredBps:d,selectedBps:Math.min(d,c),capBps:c,executable:d<=c}}function br({chainId:e,venue:t,quoteAmountOut:r,liquidityUsd:n,priceChange5m:s=0,quoteAgeMs:o=0,crossChain:i=!1,requestedCapBps:a,quotedAtMs:l=Date.now(),ttlMs:d=nt,secret:c}={}){let u=BigInt(r??0);if(u<=0n)throw new Error("auto-slippage guard requires positive quoteAmountOut");let p=Y({liquidityUsd:n,priceChange5m:s,quoteAgeMs:o,crossChain:i,requestedCapBps:a});if(!p.executable)throw new Error(`auto-slippage requires ${p.requiredBps} bps above hard/requested cap ${p.capBps}; route blocked`);let f=Number(l);if(!Number.isFinite(f))throw new Error("auto-slippage: quotedAtMs must be a finite number");let h=Math.min(3e4,Math.max(1e3,Number(d)||nt)),y=u*BigInt(1e4-p.selectedBps),m=y/10000n;if(y%10000n!==0n&&(m+=1n),m>u&&(m=u),u>0n&&m<=0n)throw new Error(`auto-slippage: quote ${u} is too small to express a ${p.selectedBps} bps floor without rounding to zero`);let E=Number((u-m)*10000n/(u===0n?1n:u));if(E>p.capBps)throw new Error(`auto-slippage: realised floor implies ${E} bps, above cap ${p.capBps} \u2014 refusing to issue a guard weaker than advertised`);return st({mode:"auto",chainId:Number(e),venue:String(t||"unknown"),quoteAmountOut:u.toString(),minAmountOut:m.toString(),requiredBps:p.requiredBps,selectedBps:p.selectedBps,capBps:p.capBps,quotedAtMs:f,expiresAtMs:f+h},{secret:c})}function yr(e){let t=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(t)||t.length<10||t.length%2!==0)return null;let r=t.slice(0,10).toLowerCase(),n=[];for(let o=10;o+64<=t.length;o+=64)n.push(t.slice(o,o+64));let s=o=>n[o]==null?null:BigInt("0x"+n[o]);switch(r){case"0x414bf389":return s(6);case"0x04e45aaf":return s(5);case"0xc04b8d59":{let o=s(0);if(o==null)return null;let i=Number(o)/32;return!Number.isInteger(i)||i<0?null:s(i+4)}case"0xb858183f":{let o=s(0);if(o==null)return null;let i=Number(o)/32;return!Number.isInteger(i)||i<0?null:s(i+3)}case"0xa026383e":return s(6);case"0x38ed1739":case"0x5c11d795":return s(1);case"0x7ff36ab5":case"0xb6f9de95":return s(0);case"0x18cbafe5":case"0x791ac947":return s(1);default:return null}}function M(e,{chainId:t,venue:r,amountOut:n,liquidityUsd:s,priceChange5m:o,crossChain:i,requestedCapBps:a,quotedAtMs:l=Date.now(),ttlMs:d}={}){let c=br({chainId:t,venue:r,quoteAmountOut:n,liquidityUsd:s,priceChange5m:o,crossChain:i,requestedCapBps:a,quotedAtMs:l,ttlMs:d});return{...e,autoSlippage:c,amountOutMinimum:c.minAmountOut}}var ue,nt,V=D(()=>{tt();rt();ue=100,nt=2e4});var re,de=D(()=>{re="0x000000000000000000000000000000000000dEaD"});import{createHash as Er,createHmac as xr,timingSafeEqual as to}from"node:crypto";function Ne(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(Ne).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${Ne(e[r])}`).join(",")}}`}function at(e){let t=String(e?.ORACLE_STAMP_HMAC_SECRET||"").trim();return t.length>=16?t:""}function ct(e=process.env){return at(process.env)||at(e)}function Or(e){let{prepareHash:t,prepareMac:r,note:n,...s}=e||{};return s}function kr(e){let t=Or(e);return Er("sha256").update(Ne(t)).digest("hex")}function Cr(e,t=ct()){return t?xr("sha256",t).update(String(e)).digest("hex"):""}function L(e,{provider:t,kind:r,env:n=process.env,nowMs:s=Date.now(),expiresAtMs:o}={}){if(!e||typeof e!="object")throw new Error("stampPrepared: payload object required");let i=Object.prototype.hasOwnProperty.call(e,"oraclePrepared");if(i&&typeof e.oraclePrepared!="boolean")throw new Error("stampPrepared: oraclePrepared must be boolean");let a={...e,provider:e.provider||t,kind:e.kind||r,requiresUserSignature:e.requiresUserSignature!==!1,signingReady:!1,broadcastReady:!1,executionReady:!1,oraclePrepared:i?e.oraclePrepared:!0};if(!a.provider)throw new Error("stampPrepared: provider required");if(!a.kind)throw new Error("stampPrepared: kind required");let l=Number(s),d=o==null?l+Sr:Number(o),c=d-l;if(!Number.isSafeInteger(l)||!Number.isSafeInteger(d)||c<=0||c>Ir)throw new Error("stampPrepared: bounded preparedAt/expiresAt required");let p={...a,preparedAt:l,expiresAt:d,prepareVersion:Ar},f=kr(p),h=ct(n),y=h?Cr(f,h):void 0,m={...p,prepareHash:f};return y&&(m.prepareMac=y),m}var Ar,Sr,Ir,j=D(()=>{Ar=2,Sr=300*1e3,Ir=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});import{Contract as vr,JsonRpcProvider as Tr}from"ethers";function $r(e){return Br.test(String(e||""))}async function ut(e,{contract:t=Nr,rpc:r=_r,chainId:n=Pr,balanceOf:s}={}){if(!$r(e))throw new Error("invalid-address");if(s)return BigInt(await s(e));let o=new Tr(r,n,{staticNetwork:!0}),i=new vr(t,Rr,o);return BigInt(await i.balanceOf(e))}var Nr,Pr,_r,Rr,Br,lt=D(()=>{Nr="0x62FCFAf7573AD8B41a0FBF347AfEb85e06599A75",Pr=999,_r="https://rpc.hyperliquid.xyz/evm",Rr=["function balanceOf(address owner) view returns (uint256)"],Br=/^0x[a-fA-F0-9]{40}$/});import{existsSync as Lr,readFileSync as Ur,lstatSync as Fr}from"node:fs";import{homedir as dt}from"node:os";import{join as Pe}from"node:path";function qr(e){let t=String(e||"swap").toLowerCase();return Object.prototype.hasOwnProperty.call(pt,t)?pt[t]:Mr}function Gr(e=process.env){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){if(e[ft])return String(e[ft]);let t=e.ORACLE_CONFIG_DIR||Pe(dt(),".config","oracle");return Pe(t,"fee-recipient")}return Pe(dt(),".config","oracle","fee-recipient")}function Kr(e=process.env){try{let t=Gr(e);if(!Lr(t)||Fr(t).isSymbolicLink())return"";let r=Ur(t,"utf8").trim().toLowerCase();return/^0x[a-f0-9]{40}$/.test(r)?r:""}catch{return""}}function Xr(e,{fallback:t=0}={}){if(e==null)return t;if(String(e).trim()==="")return 0;let r=Number(e);return!Number.isFinite(r)||r<=0?0:Math.min(Math.floor(r),Dr)}function Yr({env:e=process.env,action:t="swap",admin:r=!1}={}){let n=String(e[Hr]||"").trim(),s=String(e[zr]||Vr).trim();if(r===!0)return{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"admin-oracle"};let o=qr(t),i=Xr(e[jr],{fallback:n?o:0}),a=Math.min(i,o);if(!a)return{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"not-configured"};if(!/^0x[a-fA-F0-9]{40}$/.test(n))return{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"no-recipient"};let l=Kr(e);return!l||l!==n.toLowerCase()?{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"recipient-not-pinned"}:{bps:a,recipient:n,integrator:s,action:t,applies:!0,reason:"configured"}}async function _e({wallet:e,env:t=process.env,action:r="swap",holderCheck:n={},admin:s=!1}={}){let o=Yr({env:t,action:r,admin:s});if(s===!0)return{...o,holderVerificationStatus:"admin-oracle"};let i=String(e||"").trim().toLowerCase();if(!/^0x[a-f0-9]{40}$/.test(i))return{...o,holderVerificationStatus:"wallet-required"};try{return BigInt(await ut(i,n))>0n?{...o,bps:0,applies:!1,reason:"locals-only-holder",holderVerificationStatus:"holder"}:{...o,holderVerificationStatus:"non-holder"}}catch{return{...o,holderVerificationStatus:"unavailable"}}}function mt(e){return e?.applies?`Oracle routing fee ${e.bps} bps (${(e.bps/100).toFixed(2)}%) to ${e.recipient}.`:e?.reason==="admin-oracle"?"No Oracle fee (admin Oracle).":e?.reason==="locals-only-holder"?"No Oracle fee (Locals Only holder).":"No Oracle fee."}function ht(e){return e?.applies?{integrator:e.integrator,fee:String(e.bps/1e4)}:{}}var Dr,Mr,pt,jr,Hr,zr,ft,Vr,pe=D(()=>{lt();Dr=100,Mr=5,pt=Object.freeze({swap:5,bridge:5,perps:0,nft:0});jr="ORACLE_INTEGRATOR_FEE_BPS",Hr="ORACLE_INTEGRATOR_FEE_RECIPIENT",zr="ORACLE_INTEGRATOR_ID",ft="ORACLE_INTEGRATOR_FEE_RECIPIENT_PIN",Vr="oracle"});var bt={};Me(bt,{LIFI_API:()=>gt,lifiChains:()=>en,lifiHealth:()=>Jr,lifiPrepare:()=>Zr,lifiQuote:()=>fe});function Be(e={}){return(e.baseUrl||process.env.LIFI_API_URL||gt).replace(/\/$/,"")}function Qr(e){let t=String(e||Re).toLowerCase();return t===Re.toLowerCase()||t===Wr}function wt(e,t){let r=String(e||"").trim();if(!/^0x[0-9a-fA-F]{40}$/.test(r))throw new Error(`lifi: ${t} must be a 20-byte address`);return r.toLowerCase()}async function Jr(e={}){let t=await N(`${Be(e)}/chains`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??12e3}),r=Array.isArray(t)?t.length:t?.chains?.length||0;return{ok:r>0,chainCount:r}}async function fe(e={},t={}){let{fromChain:r,toChain:n=r,fromToken:s=Re,toToken:o,fromAmount:i,fromAddress:a=re}=e;if(r==null||!o||!i)throw new Error("lifiQuote requires fromChain, toToken, fromAmount");let l=new URLSearchParams({fromChain:String(r),toChain:String(n),fromToken:s,toToken:o,fromAmount:String(i),fromAddress:a}),d=Y({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!d.executable)throw new Error(`lifi: route requires ${d.requiredBps} bps above cap ${d.capBps}`);l.set("slippage",String(d.selectedBps/1e4));let c=await _e({wallet:e.fromAddress,env:t.env,action:e.feeAction||"swap",holderCheck:t.holderCheck});for(let[m,E]of Object.entries(ht(c)))l.set(m,E);let u=await N(`${Be(t)}/quote?${l}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),p=u?.estimate?.toAmount||u?.toAmount;if(!p)return{...u,autoSlippagePolicy:d,oracleFee:c};let f=u?.transactionRequest?.to||u?.estimate?.approvalAddress||"lifi",h=M(u,{chainId:Number(r),venue:f,amountOut:p,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps}),y=u?.estimate?.toAmountMin||u?.toAmountMin;if(y!=null&&BigInt(y)<BigInt(h.amountOutMinimum))throw new Error("lifi: provider transaction is under-protected versus bounded auto-slippage floor");return{...h,oracleFee:c}}async function Zr(e={},t={}){let r=await fe(e,t),n=r?.transactionRequest;if(!n?.to||!n?.data)throw new Error("lifi: quote did not return an executable transactionRequest");let s=Number(e.fromChain);if(n.chainId!=null&&Number(n.chainId)!==s)throw new Error("lifi: transaction chain mismatch");if(e.fromAddress&&n.from&&String(n.from).toLowerCase()!==String(e.fromAddress).toLowerCase())throw new Error("lifi: transaction sender mismatch");let o=null;if(!Qr(e.fromToken)){let i=r?.estimate?.approvalAddress||r?.approvalAddress;if(!i)throw new Error("lifi: ERC20 route missing approvalAddress");let a=r?.action?.fromToken?.address||r?.estimate?.fromToken?.address||e.fromToken;o={token:wt(a,"approval token"),spender:wt(i,"approval spender"),amount:String(e.fromAmount)}}return L({provider:"lifi",calldataReady:!0,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,chainId:s,quote:r,autoSlippage:r.autoSlippage,requiresApproval:o,transaction:{chainId:s,from:n.from||e.fromAddress,to:n.to,data:n.data,value:n.value??"0x0",...n.gasLimit!=null?{gasLimit:n.gasLimit}:{},slippageGuard:X(r.autoSlippage,{chainId:s,venue:n.to,data:n.data})}},{provider:"lifi",kind:"lifi-tx"})}async function en(e={}){return N(`${Be(e)}/chains`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??12e3})}var gt,Re,Wr,$e=D(()=>{q();V();de();j();pe();gt="https://li.quest/v1";Re="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE",Wr="0x0000000000000000000000000000000000000000"});var me={};Me(me,{ACROSS_API:()=>At,HOP_API:()=>St,RELAY_API:()=>It,acrossHealth:()=>fn,acrossSuggestedFees:()=>Ot,hopHealth:()=>mn,hopQuote:()=>kt,relayHealth:()=>hn,relayPrepare:()=>wn,relayQuote:()=>Fe});async function fn(e={}){try{return{ok:!0,estimatedFillTimeSec:(await Ot({token:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",destinationToken:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",originChainId:1,destinationChainId:42161,amount:"1000000000000000"},e)).estimatedFillTimeSec}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function Ot(e={},t={}){let{token:r,destinationToken:n=r,originChainId:s,destinationChainId:o,amount:i}=e;if(!r||s==null||o==null||!i)throw new Error("acrossSuggestedFees requires token, originChainId, destinationChainId, amount");let a=new URLSearchParams({token:r,destinationToken:n,originChainId:String(s),destinationChainId:String(o),amount:String(i)}),l=(t.baseUrl||process.env.ACROSS_API_URL||At).replace(/\/$/,"");return N(`${l}/suggested-fees?${a}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3})}async function mn(e={}){try{let t=await kt({amount:"1000000000000000",token:"ETH",fromChain:"ethereum",toChain:"arbitrum",slippage:.5},e);return{ok:!0,estimatedRecieved:t.estimatedRecieved||t.estimatedReceived}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function kt(e={},t={}){let{amount:r,token:n="ETH",fromChain:s="ethereum",toChain:o="arbitrum"}=e;if(!r)throw new Error("hopQuote requires amount");let i=e.slippage==null?void 0:Math.round(Number(e.slippage)*100),a=Y({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:s!==o,requestedCapBps:e.maxSlippageBps??e.slippageBps??i});if(!a.executable)throw new Error(`hop: route requires ${a.requiredBps} bps above cap ${a.capBps}`);let l=new URLSearchParams({amount:String(r),token:n,fromChain:s,toChain:o,slippage:String(a.selectedBps/100)}),d=(t.baseUrl||process.env.HOP_API_URL||St).replace(/\/$/,""),c=await N(`${d}/quote?${l}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),u=c?.estimatedRecieved||c?.estimatedReceived;return u?M(c,{chainId:Number(e.originChainId||e.chainId||pn[s]||0),venue:c?.tx?.to||"hop",amountOut:u,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:s!==o,requestedCapBps:e.maxSlippageBps??e.slippageBps??i}):{...c,autoSlippagePolicy:a}}async function hn(e={}){try{let t=await Fe({user:re,originChainId:1,destinationChainId:8453,originCurrency:"0x0000000000000000000000000000000000000000",destinationCurrency:"0x0000000000000000000000000000000000000000",amount:"1000000000000000",tradeType:"EXACT_INPUT"},e);return{ok:!0,hasSteps:Array.isArray(t.steps),stepCount:t.steps?.length||0}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function Fe(e={},t={}){let{user:r=re,originChainId:n,destinationChainId:s,originCurrency:o="0x0000000000000000000000000000000000000000",destinationCurrency:i="0x0000000000000000000000000000000000000000",amount:a,tradeType:l="EXACT_INPUT"}=e;if(n==null||s==null||!a)throw new Error("relayQuote requires originChainId, destinationChainId, amount");let d=Y({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(s),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!d.executable)throw new Error(`relay: route requires ${d.requiredBps} bps above cap ${d.capBps}`);let c=(t.baseUrl||process.env.RELAY_API_URL||It).replace(/\/$/,""),u=await N(`${c}/quote`,{method:"POST",body:{user:r,originChainId:Number(n),destinationChainId:Number(s),originCurrency:o,destinationCurrency:i,amount:String(a),tradeType:l,slippageTolerance:String(d.selectedBps)},fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),p=u?.details?.currencyOut?.amount;return!p||!/^\d+$/.test(String(p))?{...u,autoSlippagePolicy:d}:M(u,{chainId:Number(n),venue:u?.steps?.[0]?.items?.[0]?.data?.to||"relay",amountOut:p,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(s),requestedCapBps:e.maxSlippageBps??e.slippageBps})}async function wn(e={},t={}){let r=await Fe(e,t),n=Number(e.originChainId),s=(r.steps||[]).flatMap(a=>(a.items||[]).filter(l=>l?.data?.to&&l?.data?.data).map(l=>({stepId:a.id,...l.data})));if(!s.length)throw new Error("relay: quote returned no executable transaction items");let o=String(r?.autoSlippage?.venue||"").toLowerCase();if(s.some(a=>String(a.to).toLowerCase()!==o))throw new Error("relay: route includes a separate approval/transaction that is not yet safely bound");let i=s.map(a=>({chainId:n,from:a.from||e.user,to:a.to,data:a.data,value:a.value??"0x0",...a.gasLimit!=null||a.gas!=null?{gasLimit:a.gasLimit??a.gas}:{},slippageGuard:X(r.autoSlippage,{chainId:n,venue:a.to,data:a.data})}));return L({provider:"relay",calldataReady:!0,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,chainId:n,quote:r,autoSlippage:r.autoSlippage,transactions:i},{provider:"relay",kind:"relay-tx"})}var At,St,It,pn,he=D(()=>{q();V();de();j();At="https://across.to/api",St="https://api.hop.exchange/v1",It="https://api.relay.link",pn={ethereum:1,optimism:10,bsc:56,polygon:137,arbitrum:42161,avalanche:43114,base:8453}});var vn=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),Tn=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),Nn=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var G=Object.freeze({FULL:"FULL",NO_GAS:"NO_GAS",FAILED:"FAILED"});var qe=e=>{try{return e==null||e===""?null:BigInt(String(e).split(".")[0])}catch{return null}};function je(e){let{source:t,amountOut:r,minOut:n=null,gasUsd:s=null,feeUsd:o=null,oracleFeeBps:i=0,estimatedGas:a=null,liquidityUsd:l=null,error:d=null,executionReady:c=!1,meta:u={}}=e||{};if(d||r==null)return{source:t,quality:G.FAILED,amountOut:null,error:d||"no amountOut returned"};let p=qe(r);if(p==null||p<=0n)return{source:t,quality:G.FAILED,amountOut:null,error:"non-positive amountOut"};let f=Number(i);return{source:t,quality:s==null?G.NO_GAS:G.FULL,amountOut:p.toString(),minOut:qe(n)?.toString()??null,gasUsd:s,feeUsd:o,oracleFeeBps:Number.isFinite(f)&&f>0?Math.floor(f):0,estimatedGas:a==null?null:String(a),liquidityUsd:l==null?null:Number(l),executionReady:c,meta:u}}function He(e,{destPriceUsd:t=null,destDecimals:r=null,liquidityFirst:n=!0,liquidityBandBps:s=50,gasPriceWei:o=null,nativePriceUsd:i=null}={}){let a=e.filter(w=>w.quality!==G.FAILED),l=e.filter(w=>w.quality===G.FAILED),d=t!=null&&t>0&&r!=null&&r>=0,c=Number(o),u=Number(i),p=Number.isFinite(c)&&c>0&&Number.isFinite(u)&&u>0,f=a.map(w=>{let b=BigInt(w.amountOut),P=0n,g=!1,v=!1,F=BigInt(w.oracleFeeBps??0),_=F>0n?b*F/10000n:0n;if(d){let $=w.gasUsd,O=Number(w.meta?.gasUnits??w.estimatedGas);if($==null&&p&&Number.isFinite(O)&&O>0){let x=O*c/1e18*u;Number.isFinite(x)&&x>=0&&($=x,v=!0)}let I=($??0)+(w.feeUsd??0);if(I>0){let x=I/t*10**r;Number.isFinite(x)&&x>=0&&(P=BigInt(Math.floor(x)),g=!0)}else $===0&&(g=!0)}let ne=P+_,B=b>ne?b-ne:0n;return{...w,grossOut:b.toString(),netOut:B.toString(),costInDest:P.toString(),oracleFeeInDest:_.toString(),costAccounted:g,gasEstimated:v}}),h=Number(s)>0?Number(s):0,y=f.reduce((w,b)=>BigInt(b.netOut)>w?BigInt(b.netOut):w,0n),m=w=>y>0n?Number((y-BigInt(w))*10000n/y):0,E=[],T=f.slice().sort((w,b)=>BigInt(b.netOut)>BigInt(w.netOut)?1:-1)[0]??null;f.sort((w,b)=>{let P=m(w.netOut)<=h?0:1,g=m(b.netOut)<=h?0:1;if(n&&h>0&&P!==g)return P-g;if(n&&h>0){let v=w.liquidityUsd??-1,F=b.liquidityUsd??-1;if(v!==F)return F-v}return BigInt(b.netOut)>BigInt(w.netOut)?1:-1}),n&&h>0&&T&&f[0]&&f[0].source!==T.source&&E.push(`liquidity-first: chose ${f[0].source} (liquidity $${f[0].liquidityUsd??"unknown"}) over best-price ${T.source} within ${h} bps`);let S=f.filter(w=>!w.costAccounted).map(w=>w.source);d?S.length&&E.push(`gas not reported by: ${S.join(", ")}. These are ranked on gross output and may be overstated relative to gas-measured routes.`):E.push("destination price/decimals unavailable: ranked on GROSS output. Gas is not included, so a cheap-looking route may cost more to execute.");let k=f[0];if(d&&k&&k.costAccounted===!1){let w=f.find(b=>b.costAccounted&&m(b.netOut)<=h);w&&E.push(`winner ${k.source} has UNMEASURED gas; gas-measured ${w.source} is within ${h} bps and may net more once ${k.source}'s real gas is paid \u2014 prefer it if unsure.`)}let R=f.filter(w=>w.gasEstimated).map(w=>w.source);R.length&&E.push(`gas ESTIMATED (from gas units x current gas price, not measured) for: ${R.join(", ")}. Net includes this estimate so the ranking is gas-inclusive, but the on-chain gas may differ.`);let U=null,A=null;if(f.length>=2&&f[0].costAccounted&&f[1].costAccounted){let w=BigInt(f[0].netOut),b=BigInt(f[1].netOut);b>0n&&(U=Number((w-b)*10000n/b),A=`${f[0].source} vs ${f[1].source}`)}return{best:f[0]??null,routes:f,failed:l,improvementBps:U,spreadBasis:A,rankedOn:d?"net-of-cost":"gross",warnings:E}}async function ze(e,{timeoutMs:t=12e3}={}){let r=(s,o)=>Promise.race([s,new Promise((i,a)=>setTimeout(()=>a(new Error(`${o}: timeout`)),t))]);return(await Promise.allSettled(e.map(s=>r(Promise.resolve().then(s.run),s.source)))).map((s,o)=>{let i=e[o].source;return s.status==="rejected"?je({source:i,error:String(s.reason?.message||s.reason)}):je({source:i,...s.value})})}$e();q();V();j();pe();q();V();j();q();V();j();q();V();import{TypedDataEncoder as Do,getAddress as Mo,isAddress as qo}from"ethers";var Bo=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});de();j();var Xo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Yo=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var Wo=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Qo=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});import{Interface as Et,getAddress as gi,isAddress as bi}from"ethers";q();var yt={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Zo=new Map(Object.values(yt).map(e=>[e.chainId,e]));import{Interface as nn,getAddress as ai}from"ethers";var ci=new nn(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);q();var mi=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});V();j();var Si=new Et(["function quoteExactInputSingle((address tokenIn, address tokenOut, uint256 amountIn, uint24 fee, uint160 sqrtPriceLimitX96) params) returns (uint256 amountOut, uint160 sqrtPriceX96After, uint32 initializedTicksCrossed, uint256 gasEstimate)","function quoteExactInput(bytes path, uint256 amountIn) returns (uint256 amountOut, uint160[] sqrtPriceX96AfterList, uint32[] initializedTicksCrossedList, uint256 gasEstimate)"]),Ii=new Et(["function exactInputSingle((address tokenIn,address tokenOut,uint24 fee,address recipient,uint256 amountIn,uint256 amountOutMinimum,uint160 sqrtPriceLimitX96) params) payable returns (uint256 amountOut)","function multicall(uint256 deadline,bytes[] data) payable returns (bytes[] results)"]);import{AbiCoder as an,Interface as Le,getAddress as vi,isAddress as Ti,keccak256 as Ni}from"ethers";V();j();var $i=an.defaultAbiCoder();var Li=new Le(["function quoteExactInputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountOut, uint256 gasEstimate)","function quoteExactOutputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountIn, uint256 gasEstimate)"]),Ui=new Le(["function execute(bytes commands,bytes[] inputs,uint256 deadline) payable"]),Fi=new Le(["function getSlot0(bytes32 poolId) view returns (uint160 sqrtPriceX96,int24 tick,uint24 protocolFee,uint24 lpFee)","function getLiquidity(bytes32 poolId) view returns (uint128 liquidity)"]),Di=Object.freeze([[13,"beforeInitialize"],[12,"afterInitialize"],[11,"beforeAddLiquidity"],[10,"afterAddLiquidity"],[9,"beforeRemoveLiquidity"],[8,"afterRemoveLiquidity"],[7,"beforeSwap"],[6,"afterSwap"],[5,"beforeDonate"],[4,"afterDonate"],[3,"beforeSwapReturnsDelta"],[2,"afterSwapReturnsDelta"],[1,"afterAddLiquidityReturnsDelta"],[0,"afterRemoveLiquidityReturnsDelta"]]),Mi=(1n<<14n)-1n;q();var cn="https://coins.llama.fi",un="https://api.llama.fi";function ln(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||cn).replace(/\/$/,"")}function dn(e={}){return(e.baseUrl||process.env.DEFILLAMA_API_URL||un).replace(/\/$/,"")}async function Ue(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return N(`${ln(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function xt(e={}){return N(`${dn(e)}/protocols`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??2e4})}var Q=e=>{let t=Number(e);return Number.isFinite(t)?t:null};function Ct(e){if(!Array.isArray(e))return null;let t=0,r=!1;for(let n of e){let s=Q(n?.amountUSD);s!=null&&(t+=s,r=!0)}return r?t:null}var W=e=>String(e??"").toLowerCase().replace(/[^a-z0-9]/g,""),vt=Object.freeze({across:["across"],relay:["relaychain","relay"],lifi:["jumper-(li.fi-powered)","lifi"],stargate:["stargate-v2","stargate-v1","stargate"],hop:["hop-protocol","hop"],debridge:["debridge"],synapse:["synapse"],connext:["connext"],cbridge:["celer-bridge","celer-cbridge","cbridge"],celer:["celer-bridge","celer-cbridge","cbridge"],squid:["squid"],symbiosis:["symbiosis"],wormhole:["wormhole"],mayan:["mayan"],allbridge:["allbridge"],thorchain:["thorchain"]});async function gn(e={}){try{let t=await xt({...e,baseUrl:e.defillamaApiBaseUrl,timeoutMs:e.defillamaTimeoutMs??Math.min(Number(e.timeoutMs??5e3),5e3)});return Array.isArray(t)?t:[]}catch{return[]}}function bn(e,t={}){let r=W(t.tool||t.provider||t.bridge||t.protocol),n=[];return e==="lifi"&&r&&r!=="lifi"&&n.push(...vt[r]||[r]),n.push(...vt[W(e)]||[e]),n}function yn(e,t,r={}){let n=Array.isArray(e)?e:[],s=bn(t,r).map(W).filter(Boolean);for(let o of s){let i=n.find(l=>W(l?.slug)===o||W(l?.name)===o),a=Q(i?.tvl);if(a!=null)return{liquidityUsd:a,protocol:i?.name??i?.slug??o}}for(let o of s){let i=n.find(l=>{let d=W(l?.category);return!d.includes("bridge")&&!d.includes("crosschain")?!1:W(l?.slug).includes(o)||W(l?.name).includes(o)}),a=Q(i?.tvl);if(a!=null)return{liquidityUsd:a,protocol:i?.name??i?.slug??o}}return null}function Tt({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:s,taker:o,opts:i={}}){let a=[],l=null,d=async(c,u={})=>(l||=gn(i),yn(await l,c,u));return a.push({source:"lifi",run:async()=>{let c=await fe({fromChain:e,toChain:t,fromToken:r,toToken:n,fromAmount:s},i),u=c?.estimate??c?.[0]?.estimate,p={tool:c?.tool??c?.toolDetails?.name,durationSeconds:Q(u?.executionDuration)},f=await d("lifi",p);return{amountOut:u?.toAmount,minOut:u?.toAmountMin,gasUsd:Ct(u?.gasCosts),feeUsd:Ct(u?.feeCosts),oracleFeeBps:c?.oracleFee?.applies?c.oracleFee.bps:0,liquidityUsd:f?.liquidityUsd??null,meta:{...p,liquidityProtocol:f?.protocol,oracleFee:c?.oracleFee??null}}}}),a.push({source:"relay",run:async()=>{let{relayQuote:c}=await Promise.resolve().then(()=>(he(),me)),p=(await c({user:o,originChainId:e,destinationChainId:t,originCurrency:r,destinationCurrency:n,amount:String(s)},i))?.details,f={durationSeconds:Q(p?.timeEstimate),rate:p?.rate},h=await d("relay",f);return{amountOut:p?.currencyOut?.amount,minOut:p?.currencyOut?.minimumAmount,gasUsd:Q(p?.totalImpact?.usd)!=null?Math.abs(Q(p.totalImpact.usd)):null,liquidityUsd:h?.liquidityUsd??null,meta:{...f,liquidityProtocol:h?.protocol}}}}),a.push({source:"across",run:async()=>{let{acrossSuggestedFees:c}=await Promise.resolve().then(()=>(he(),me)),u=await c({token:r,destinationToken:n,originChainId:e,destinationChainId:t,amount:String(s)},i),p=u?.totalRelayFee?.total,f=null;if(p!=null)try{let y=BigInt(String(s))-BigInt(String(p));y>0n&&(f=y.toString())}catch{}let h=await d("across");return{amountOut:f,gasUsd:null,liquidityUsd:h?.liquidityUsd??null,meta:{derivedFromFees:!0,durationSeconds:Q(u?.estimatedFillTimeSec),limits:u?.limits?{min:u.limits.minDeposit,max:u.limits.maxDeposit}:void 0,liquidityProtocol:h?.protocol}}}}),a}pe();var En={1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax"};async function xn(e,t,r){let n=En[Number(e)];if(!n)return{priceUsd:null,decimals:null};let s=`${n}:${t}`;try{let i=(await Ue([s],r))?.coins?.[s],a=Number(i?.price),l=Number(i?.decimals);return{priceUsd:Number.isFinite(a)?a:null,decimals:Number.isFinite(l)?l:null}}catch{return{priceUsd:null,decimals:null}}}async function Nt(e,t={}){let{fromChainId:r,toChainId:n,tokenIn:s,tokenOut:o,amountIn:i}=e;if(r==null||n==null||!s||!o||i==null)throw new Error("bestBridgeRoute requires fromChainId, toChainId, tokenIn, tokenOut, amountIn");if(Number(r)===Number(n))throw new Error("bestBridgeRoute is for cross-chain; use bestSwapRoute for same-chain");let a=xn(n,o,t),l=Tt({...e,opts:t}),[d,c]=await Promise.all([ze(l,{timeoutMs:t.timeoutMs??15e3}),a]),u=He(d,{destPriceUsd:c.priceUsd,destDecimals:e.decimalsOut??c.decimals,liquidityBandBps:t.liquidityBandBps??50}),p=u.routes.map(f=>({source:f.source,seconds:f.meta?.durationSeconds??null})).filter(f=>f.seconds!=null);return{kind:"bridge",fromChainId:r,toChainId:n,tokenIn:s,tokenOut:o,amountIn:String(i),...u,durations:p,sourcesTried:l.length,sourcesAnswered:d.filter(f=>f.quality!==G.FAILED).length,note:Sn(u,l.length)}}function An(e){let t=e?.meta?.oracleFee;return t?.applies?` \xB7 ${mt(t)}`:""}function Sn(e,t){if(!e.best)return"no source returned a usable route";let r=e.routes.length,n=An(e.best);if(r===1)return`only 1 of ${t} sources answered, so this is the ONLY route, not a proven best one. Treat it as unbenchmarked.`+n;if(e.improvementBps!=null){let s=e.improvementBps,o=s/100;if(s<.01)return`best of ${r} routes, ranked on ${e.rankedOn}: effectively tied with the runner-up (${e.spreadBasis}), inside quote noise. Re-quote before you size up.`+n;let i=o>=.01?`${o.toFixed(2)}%`:`${s.toFixed(2)}bps`;return`best of ${r} routes, ranked on ${e.rankedOn}: ${i} better than the runner-up (${e.spreadBasis})`+n}return`best of ${r} routes, ranked on ${e.rankedOn}. No spread quoted: the top routes report cost differently, so the margin is not comparable.`+n}j();var In=/^0x[0-9a-fA-F]{40}$/,On=new Set(["0x0000000000000000000000000000000000000000","0x000000000000000000000000000000000000dead","0x0000000000000000000000000000000000000001","0x00000000000000000000000000000000000a1ce5"].map(e=>e.toLowerCase())),kn=100,we={relay:async({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:s,taker:o},i)=>{let{relayPrepare:a}=await Promise.resolve().then(()=>(he(),me)),l=await a({user:o,originChainId:e,destinationChainId:t,originCurrency:r,destinationCurrency:n,amount:String(s)},i);return{transactions:l.transactions||[],amountOut:l.quote?.details?.currencyOut?.amount??null,minOut:l.quote?.details?.currencyOut?.minimumAmount??null,durationSeconds:l.quote?.details?.timeEstimate??null}},lifi:async({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:s,taker:o,isHolder:i},a)=>{let{lifiPrepare:l}=await Promise.resolve().then(()=>($e(),bt)),d=await l({fromChain:e,toChain:t,fromToken:r,toToken:n,fromAmount:s,fromAddress:o,isHolder:i,feeAction:"bridge"},a);return{transactions:d.transaction?[d.transaction]:[],requiresApproval:d.requiresApproval??null,amountOut:d.quote?.estimate?.toAmount??null,minOut:d.quote?.estimate?.toAmountMin??null,durationSeconds:d.quote?.estimate?.executionDuration??null}}};function Cs(){return Object.keys(we)}async function vs(e,t={}){let{taker:r,fromChainId:n,toChainId:s}=e;if(!r)throw new Error("prepareBestBridgeRoute requires taker: bridge transactions are built FOR an address, and the quote-only placeholder must never end up in one");if(!In.test(r))throw new Error(`taker must be a valid 20-byte address, got "${r}"`);if(On.has(r.toLowerCase()))throw new Error(`taker "${r}" is a placeholder/burn address. Bridging to it would send funds to an address nobody controls, on a chain where you cannot undo it.`);let o=await Nt(e,t);if(!o.best)return{ok:!1,reason:"no source returned a usable bridge route",comparison:o};let i=e.source||o.best.source,a=o.routes.find(m=>m.source===i);if(!a)return{ok:!1,reason:`source "${i}" returned no usable route`,comparison:o};let l=we[i];if(!l){let m=o.routes.find(E=>we[E.source]&&E.source!==i);return{ok:!1,reason:`${i} won the comparison but has no bridge prepare path in this build. `+(m?`Next preparable route is ${m.source}; pass source:"${m.source}".`:"No route in this comparison can be prepared."),failureKind:"no-prepare-path",...m?{alternative:m.source}:{},winner:i,comparison:o}}let d;try{d=await l(e,t)}catch(m){let E=typeof m?.body=="string"?m.body:m?.body?JSON.stringify(m.body):"",T=[String(m?.message||m),E].filter(Boolean).join(" :: "),S=/allowance/i.test(T),k=!S&&/not enough|insufficient|balance/i.test(T),R=o.routes.find(U=>we[U.source]&&U.source!==i);return{ok:!1,reason:S?`${i} will not build calldata until the token approval exists on-chain. Approve first, then prepare again. Underlying: ${T}`:k?`${i} refused to build: ${T}. Quoting works for any address; preparing needs the real funded wallet on chain ${n}.`:`${i} bridge prepare failed: ${T}`,failureKind:S?"approval-required-first":k?"taker-not-funded":"provider-error",...R?{alternative:R.source}:{},comparison:o}}let c=d.transactions||[];if(!c.length)return{ok:!1,reason:`${i} returned no executable transaction for this route`,failureKind:"provider-error",comparison:o};let u=c.filter(m=>m.chainId!=null&&Number(m.chainId)!==Number(n));if(u.length)return{ok:!1,reason:`${i} returned a transaction for chain ${u[0].chainId} but the origin chain is ${n}. Refusing to hand over a mismatched artifact.`,failureKind:"chain-mismatch",comparison:o};let p=e.driftToleranceBps??kn,f=null,h=null;if(d.amountOut!=null&&a.grossOut!=null)try{let m=BigInt(a.grossOut),E=BigInt(d.amountOut);m>0n&&(f=Number((E-m)*10000n/m),f<-p&&(h=`route moved ${(f/100).toFixed(2)}% against you since the comparison (tolerance ${(p/100).toFixed(2)}%). Re-compare before signing.`))}catch{}let y=[...h?[h]:[],...o.warnings||[],`Bridging is NOT atomic: the origin transaction succeeding does not mean funds arrived on chain ${s}. Expect ~${d.durationSeconds!=null?`${d.durationSeconds}s`:"minutes"} before the destination credits, and do not re-send if it is pending.`];return c.length>1&&y.push(`This route needs ${c.length} transactions signed IN ORDER. Signing only the first leaves funds approved but not bridged.`),L({ok:!0,chosen:{source:i,wasWinner:i===o.best.source,netOut:a.netOut,grossOut:a.grossOut,gasUsd:a.gasUsd},artifactKind:"unsigned-transaction-sequence",fromChainId:Number(n),toChainId:Number(s),transactionCount:c.length,transactions:c,requiresApproval:d.requiresApproval??null,minOut:d.minOut??null,durationSeconds:d.durationSeconds??null,destination:c[0]?.to??null,unsigned:!0,signedBy:"user-wallet",driftBps:f,warnings:y,runnersUp:o.routes.filter(m=>m.source!==i).map(m=>({source:m.source,netOut:m.netOut,gasUsd:m.gasUsd})),comparison:{rankedOn:o.rankedOn,sourcesAnswered:o.sourcesAnswered,sourcesTried:o.sourcesTried,improvementBps:o.improvementBps},note:`UNSIGNED. ${c.length} transaction(s) on chain ${n}, crediting chain ${s}. Verify every destination address before signing.`},{provider:"router",kind:"best-bridge"})}export{vs as prepareBestBridgeRoute,Cs as supportedBridgePreparers};
+`)};i("method",e),i("url",t),Object.keys(r||{}).map((l,d)=>({name:l.toLowerCase(),order:d,value:String(r[l])})).sort((l,d)=>l.name.localeCompare(d.name)||l.order-d.order).forEach((l,d)=>{i(`header-name-${d}`,l.name),i(`header-value-${d}`,l.value)}),i("body",s??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])i(`context-${l}`,n[l]??"-");return o.digest("hex")}function or(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Xe):Math.min(250*2**e,Xe)+Math.floor(Math.random()*100)}function K(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Oe(e,t,r){return K(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function ee(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function sr(e){return e?e.byteLength??e.length??0:0}async function ar(e,t,{url:r,truncate:n=!1,onOversize:s}={}){if(t==null)return await e.text();let o=Number(e.headers?.get?.("content-length"));if(Number.isFinite(o)&&o>t&&(ee(e),!n))throw Oe(r,`content-length ${o}`,t);let i=e.body?.getReader?.();if(!i){let u=await e.text(),p=Buffer.byteLength(u,"utf8");if(p>t){if(!n)throw Oe(r,`body ${p} bytes`,t);return Buffer.from(u,"utf8").subarray(0,t).toString("utf8")}return u}let a=[],l=0,d=!1;try{for(;;){let{value:u,done:p}=await i.read();if(p)break;if(u&&(a.push(Buffer.from(u)),l+=sr(u),l>t)){d=!0;break}}}finally{if(d)try{await i.cancel()}catch{}try{i.releaseLock?.()}catch{}}if(d&&(typeof s=="function"&&s(),!n))throw Oe(r,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(d?c.subarray(0,t):c).toString("utf8")}function cr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function ur(e,{fetchImpl:t,method:r,headers:n,body:s,timeoutMs:o,lookupFn:i,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:c=!1,importUndici:u,validateResponse:p,signal:f,redirectPolicy:h="follow",maxRedirects:y=ae}){let m=new AbortController,E=setTimeout(()=>m.abort(),o),T=f?Ye?Ye([f,m.signal]):f:m.signal,S=null,O=t,R=i?{lookupFn:i}:{};if(l&&!a&&!Ie(O))throw K(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let U=async(A,{status:w=null}={})=>{let b=await xe(A,R);if(!b.ok)throw K(w==null?`HTTP refused ${A}: ${b.error}`:`HTTP redirect to ${A} ${b.error}`,w==null?{}:{status:w});let P=new URL(A).hostname;if(a){if(S&&(await S.close(),S=null),!S)try{S=await Ae({requireUndici:!0,...u?{importUndici:u}:{}})}catch(g){throw K(w==null?`HTTP refused ${A}: ${g?.message||g}`:`HTTP redirect to ${A} refused: ${g?.message||g}`,w==null?{}:{status:w})}S.pin(P,b.addresses),O=S.fetch}else Ve(O,P,b.addresses);return b};try{let A=String(e),w=Object.assign(Object.create(null),n||{});l&&await U(A);for(let b=0;b<=y;b+=1){let P=Object.assign(Object.create(null),{method:r,headers:w,body:s,signal:T,redirect:"manual",dispatcher:void 0}),g=await O(A,P);if((h==="error"||y===0)&&g.status>=300&&g.status<400)throw ee(g),K(`HTTP ${g.status} ${r} redirect refused`,{status:g.status,redirectRefused:!0});if(Xt.has(g.status)){let _=c===!0&&r==="POST"&&[307,308].includes(g.status)&&Ze(r,s);if(r!=="GET"&&r!=="HEAD"&&!_){ee(g);let k=new Error(`HTTP ${g.status} ${r} ${A} redirected non-idempotent request`);throw k.status=g.status,k}if(b===y)throw ee(g),K(`HTTP ${g.status} ${r} redirect budget exhausted`,{status:g.status,redirectRefused:!0});let ne=g.headers?.get?.("location"),B;try{B=Zt(ne,A)}catch(k){throw ee(g),k}let $=!er(B,A);if(ee(g),$&&r==="POST"){let k=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw k.status=g.status,k}if($&&c){let k=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw k.status=g.status,k.retryable=!1,k}if($&&(w=Jt(w)),l)await U(B,{status:g.status});else if($){let k=await xe(B,R);if(!k.ok){let I=new Error(`HTTP redirect from ${A} ${k.error}`);throw I.status=g.status,I.retryable=!1,I}a&&k.addresses?.length&&(S||(S=await Ae(u?{importUndici:u}:{})),S&&(S.pin(new URL(B).hostname,k.addresses),O=S.fetch))}A=B;continue}if(typeof p=="function")try{await p(g,{url:A})}catch(_){throw ee(g),K(_?.message||String(_))}let v=await ar(g,d,{url:A,onOversize:()=>m.abort()}),F=cr(v);if(!g.ok){let _=new Error(`HTTP ${g.status} ${r} ${A}`);throw _.status=g.status,_.retryAfter=g.headers?.get?.("retry-after")??null,_.body=F??v.slice(0,300),_}return F??v}throw new Error(`HTTP redirect loop for ${e}`)}catch(A){if(m.signal.aborted&&!Ce(f)){let w=A&&(typeof A=="object"||typeof A=="function")&&!z.isProxy(A)?A:null,b=w?Object.getOwnPropertyDescriptor(w,"oversize"):null;if(!(b&&Object.hasOwn(b,"value")&&b.value===!0))try{if(!w)throw new TypeError("unsafe rejection");Object.defineProperties(w,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let g=new Error("HTTP request timed out");throw Object.defineProperties(g,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),g}}throw A}finally{clearTimeout(E),S&&await S.close()}}async function N(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&z.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let I of Object.getOwnPropertyNames(t)){let x=Object.getOwnPropertyDescriptor(t,I);if(!(I==="toJSON"&&x&&Object.hasOwn(x,"value")&&x.value===void 0)){if(!r.has(I))throw new TypeError("HTTP options contain unknown fields");if(!x||!x.enumerable||!Object.hasOwn(x,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=I=>{if(t==null||!Object.hasOwn(t,I))return;let x=Object.getOwnPropertyDescriptor(t,I);if(!x||!Object.hasOwn(x,"value"))throw new TypeError("HTTP options must contain own data properties");return x.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let s=n("method");if(s!==void 0&&(typeof s!="string"||!/^[A-Za-z]+$/u.test(s)))throw new TypeError("HTTP method must be a string token");let o=n("timeoutMs");if(o!==void 0&&(!Number.isInteger(o)||o<1||o>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let i=n("retries");if(i!==void 0&&(!Number.isInteger(i)||i<0||i>10))throw new TypeError("HTTP retries must be a bounded integer");let a=n("redirectPolicy");if(a!==void 0&&a!=="follow"&&a!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=n("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>ae))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ae}`);if(a==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=a??"follow",c=d==="error"?0:l??ae;for(let I of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let x=n(I);if(x!==void 0&&typeof x!="boolean")throw new TypeError(`HTTP ${I} must be boolean`)}let u=n("maxResponseBytes");if(u!==void 0&&(!Number.isInteger(u)||u<1||u>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=n("signal");if(p!==void 0){if(z.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Ce(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let I of["importUndici","lookupFn","validateResponse"]){let x=n(I);if(x!==void 0&&typeof x!="function")throw new TypeError(`HTTP ${I} must be a function`)}let f=n("fetchImpl"),h=f||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let y=o??12e3,m=(s||"GET").toUpperCase(),E=n("headers"),T=Qt(E),S=Object.assign(Object.create(null),T);Object.keys(S).some(I=>I.toLowerCase()==="accept")||(S.Accept="application/json");let O=n("body");O!=null&&typeof O!="string"&&(Object.keys(S).find(x=>x.toLowerCase()==="content-type")||(S["Content-Type"]="application/json"),O=Wt(O));let R=i??jt,U=n("lookupFn"),A=!f,w=n("untrustedUrl")===!0,b=n("sameOriginRedirectsOnly")===!0,P=n("importUndici"),g=n("validateResponse"),v=p,F=u??null,_=async()=>{let I;for(let x=0;x<=R;x++){v&&Vt.call(v);try{return await ur(e,{fetchImpl:h,method:m,headers:S,body:O,timeoutMs:y,lookupFn:U,realFetch:A,untrustedUrl:w,maxResponseBytes:F,sameOriginRedirectsOnly:b,importUndici:P,validateResponse:g,signal:v,redirectPolicy:d,maxRedirects:c})}catch(J){I=J;let te=be=>{if(!J||typeof J!="object"&&typeof J!="function"||z.isProxy(J))return;let oe=Object.getOwnPropertyDescriptor(J,be);return oe&&Object.hasOwn(oe,"value")?oe.value:void 0},ge=te("status"),Pt=te("oracleTimeout")===!0||te("name")==="AbortError"||te("name")==="TimeoutError"||Ce(v),_t=new Set([408,425,429]),Rt=te("retryable")===!1?!1:ge!=null?_t.has(ge)||qt.has(ge)&&Ke.has(m):!Pt&&Ke.has(m);if(x===R||!Rt)throw J;let De=or(x,te("retryAfter"));v?await new Promise((be,oe)=>{let Bt=setTimeout(be,De);Gt.call(v,"abort",()=>{clearTimeout(Bt),oe(Kt(v)||new DOMException("Aborted","AbortError"))},{once:!0})}):await ir(De)}}throw I};if(!(n("dedupe")!==!1&&!v&&Ze(m,O)))return _();let B=nr(m,e,S,{untrustedUrl:w,maxResponseBytes:F,sameOriginRedirectsOnly:b,redirectPolicy:d,maxRedirects:c,timeoutMs:y,retries:R,fetchImpl:se(h),realFetch:A,lookupFn:se(U),importUndici:se(P),validateResponse:se(g)},O),$=ke.get(B);if($)return $;let k=_().finally(()=>ke.delete(B));return ke.set(B,k),k}var qt,Ke,jt,Xe,Ht,zt,Vt,Gt,Ye,Ce,Kt,Xt,ae,qn,H,ke,We,Qe,tr,rr,ir,q=D(()=>{Ge();qt=new Set([408,425,429,500,502,503,504]),Ke=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),jt=2,Xe=4e3,Ht=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,zt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Vt=AbortSignal.prototype.throwIfAborted,Gt=EventTarget.prototype.addEventListener,Ye=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Ce=e=>e?Ht.call(e):!1,Kt=e=>e?zt.call(e):void 0,Xt=new Set([301,302,303,307,308]),ae=3,qn=64*1024,H=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});ke=new Map,We=new WeakMap,Qe=1;tr=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),rr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);ir=e=>new Promise(t=>setTimeout(t,e))});import{readFileSync as lr}from"node:fs";import{homedir as dr}from"node:os";import{join as ce}from"node:path";function pr(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let r=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return r?[r]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),t=dr();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let r=(process.env.ORACLE_CONFIG_DIR||ce(t,".config","oracle")).trim();return[e,ce(r,"exec.env")].filter(Boolean)}return[e,ce(t,".config","oracle","exec.env"),ce(t,".config","mad-desk","exec.env")].filter(Boolean)}function et(e,t,r){let n=e??process.env[t]??process.env[r];if(!String(n||"").trim())for(let s of pr())try{let o=lr(s,"utf8"),i=o.match(new RegExp(`^${t}=(.*)$`,"m"))||o.match(new RegExp(`^${r}=(.*)$`,"m"));if(i&&(n=i[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${t} required for attestation. Set it in the environment, or place ${t}=<value> in ~/.config/oracle/exec.env`);return n}var tt=D(()=>{});var rt=D(()=>{});import{createHash as fr,createHmac as ot,timingSafeEqual as mr}from"node:crypto";function le(e){return Array.isArray(e)?`[${e.map(le).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${le(e[t])}`).join(",")}}`:JSON.stringify(e??null)}function it(e,{required:t=!1}={}){try{return et(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(r){if(t)throw r;return null}}function Te(e){let{signature:t,...r}=e;return r}function st(e,{secret:t}={}){let r=it(t);return r?{...e,signature:ot("sha256",r).update(le(Te(e))).digest("hex")}:e}function hr(e){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<10||t.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return fr("sha256").update(Buffer.from(t.slice(2),"hex")).digest("hex")}function X(e,{chainId:t,venue:r,data:n,secret:s}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");if(Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(String(e.venue).toLowerCase()!==String(r||"").toLowerCase())throw new Error("auto-slippage guard venue mismatch");let o=it(s);if(o){let f=ot("sha256",o).update(le(Te(e))).digest("hex");if(!wr(e.signature,f))throw new Error("auto-slippage guard signature mismatch \u2014 refusing to bind a guard this Oracle did not issue")}let i=Number(e.selectedBps),a=Number(e.capBps);if(!Number.isInteger(i)||i<0||i>ue||!Number.isInteger(a)||a<0||a>ue||i>a)throw new Error("auto-slippage guard bounds are invalid");let l=BigInt(e.quoteAmountOut??0),d=BigInt(e.minAmountOut??0);if(l<=0n||d<=0n)throw new Error("auto-slippage guard amounts must be positive");let c=l*BigInt(1e4-i),u=c/10000n;if(c%10000n!==0n&&(u+=1n),d<u)throw new Error("auto-slippage guard is under-protected relative to its quote");let p=yr(n);if(p!=null&&p!==d)throw new Error(`auto-slippage: calldata encodes floor ${p}, not the guard floor ${d} \u2014 refusing to bind`);return st({...Te(e),calldataHash:hr(n)},{secret:s})}function wr(e,t){let r=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(t??""),"utf8");return r.length!==n.length||r.length===0?!1:mr(r,n)}function ve(e,t=0){let r=Number(e);return Number.isFinite(r)?r:t}function gr(e){let t=e==null?ue:Number(e);if(!Number.isInteger(t)||t<0)throw new Error("auto-slippage cap must be a non-negative integer bps value");return Math.min(t,ue)}function Y({liquidityUsd:e,priceChange5m:t=0,quoteAgeMs:r=0,crossChain:n=!1,requestedCapBps:s}={}){let o=ve(e,0),i=o>0?o>=25e4?5:o>=1e5?10:o>=5e4?20:o>=1e4?40:70:n?30:10,a=Math.min(60,Math.abs(ve(t,0))*2),l=Math.min(40,Math.floor(Math.max(0,ve(r,0))/5e3)*5),d=Math.max(25,Math.ceil(20+i+a+l)),c=gr(s);return{mode:"auto",requiredBps:d,selectedBps:Math.min(d,c),capBps:c,executable:d<=c}}function br({chainId:e,venue:t,quoteAmountOut:r,liquidityUsd:n,priceChange5m:s=0,quoteAgeMs:o=0,crossChain:i=!1,requestedCapBps:a,quotedAtMs:l=Date.now(),ttlMs:d=nt,secret:c}={}){let u=BigInt(r??0);if(u<=0n)throw new Error("auto-slippage guard requires positive quoteAmountOut");let p=Y({liquidityUsd:n,priceChange5m:s,quoteAgeMs:o,crossChain:i,requestedCapBps:a});if(!p.executable)throw new Error(`auto-slippage requires ${p.requiredBps} bps above hard/requested cap ${p.capBps}; route blocked`);let f=Number(l);if(!Number.isFinite(f))throw new Error("auto-slippage: quotedAtMs must be a finite number");let h=Math.min(3e4,Math.max(1e3,Number(d)||nt)),y=u*BigInt(1e4-p.selectedBps),m=y/10000n;if(y%10000n!==0n&&(m+=1n),m>u&&(m=u),u>0n&&m<=0n)throw new Error(`auto-slippage: quote ${u} is too small to express a ${p.selectedBps} bps floor without rounding to zero`);let E=Number((u-m)*10000n/(u===0n?1n:u));if(E>p.capBps)throw new Error(`auto-slippage: realised floor implies ${E} bps, above cap ${p.capBps} \u2014 refusing to issue a guard weaker than advertised`);return st({mode:"auto",chainId:Number(e),venue:String(t||"unknown"),quoteAmountOut:u.toString(),minAmountOut:m.toString(),requiredBps:p.requiredBps,selectedBps:p.selectedBps,capBps:p.capBps,quotedAtMs:f,expiresAtMs:f+h},{secret:c})}function yr(e){let t=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(t)||t.length<10||t.length%2!==0)return null;let r=t.slice(0,10).toLowerCase(),n=[];for(let o=10;o+64<=t.length;o+=64)n.push(t.slice(o,o+64));let s=o=>n[o]==null?null:BigInt("0x"+n[o]);switch(r){case"0x414bf389":return s(6);case"0x04e45aaf":return s(5);case"0xc04b8d59":{let o=s(0);if(o==null)return null;let i=Number(o)/32;return!Number.isInteger(i)||i<0?null:s(i+4)}case"0xb858183f":{let o=s(0);if(o==null)return null;let i=Number(o)/32;return!Number.isInteger(i)||i<0?null:s(i+3)}case"0xa026383e":return s(6);case"0x38ed1739":case"0x5c11d795":return s(1);case"0x7ff36ab5":case"0xb6f9de95":return s(0);case"0x18cbafe5":case"0x791ac947":return s(1);default:return null}}function M(e,{chainId:t,venue:r,amountOut:n,liquidityUsd:s,priceChange5m:o,crossChain:i,requestedCapBps:a,quotedAtMs:l=Date.now(),ttlMs:d}={}){let c=br({chainId:t,venue:r,quoteAmountOut:n,liquidityUsd:s,priceChange5m:o,crossChain:i,requestedCapBps:a,quotedAtMs:l,ttlMs:d});return{...e,autoSlippage:c,amountOutMinimum:c.minAmountOut}}var ue,nt,V=D(()=>{tt();rt();ue=100,nt=2e4});var re,de=D(()=>{re="0x000000000000000000000000000000000000dEaD"});import{createHash as Er,createHmac as xr,timingSafeEqual as to}from"node:crypto";function Ne(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(Ne).join(",")}]`:`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${Ne(e[r])}`).join(",")}}`}function at(e){let t=String(e?.ORACLE_STAMP_HMAC_SECRET||"").trim();return t.length>=16?t:""}function ct(e=process.env){return at(process.env)||at(e)}function kr(e){let{prepareHash:t,prepareMac:r,note:n,...s}=e||{};return s}function Or(e){let t=kr(e);return Er("sha256").update(Ne(t)).digest("hex")}function Cr(e,t=ct()){return t?xr("sha256",t).update(String(e)).digest("hex"):""}function L(e,{provider:t,kind:r,env:n=process.env,nowMs:s=Date.now(),expiresAtMs:o}={}){if(!e||typeof e!="object")throw new Error("stampPrepared: payload object required");let i=Object.prototype.hasOwnProperty.call(e,"oraclePrepared");if(i&&typeof e.oraclePrepared!="boolean")throw new Error("stampPrepared: oraclePrepared must be boolean");let a={...e,provider:e.provider||t,kind:e.kind||r,requiresUserSignature:e.requiresUserSignature!==!1,signingReady:!1,broadcastReady:!1,executionReady:!1,oraclePrepared:i?e.oraclePrepared:!0};if(!a.provider)throw new Error("stampPrepared: provider required");if(!a.kind)throw new Error("stampPrepared: kind required");let l=Number(s),d=o==null?l+Sr:Number(o),c=d-l;if(!Number.isSafeInteger(l)||!Number.isSafeInteger(d)||c<=0||c>Ir)throw new Error("stampPrepared: bounded preparedAt/expiresAt required");let p={...a,preparedAt:l,expiresAt:d,prepareVersion:Ar},f=Or(p),h=ct(n),y=h?Cr(f,h):void 0,m={...p,prepareHash:f};return y&&(m.prepareMac=y),m}var Ar,Sr,Ir,j=D(()=>{Ar=2,Sr=300*1e3,Ir=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});import{Contract as vr,JsonRpcProvider as Tr}from"ethers";function $r(e){return Br.test(String(e||""))}async function ut(e,{contract:t=Nr,rpc:r=_r,chainId:n=Pr,balanceOf:s}={}){if(!$r(e))throw new Error("invalid-address");if(s)return BigInt(await s(e));let o=new Tr(r,n,{staticNetwork:!0}),i=new vr(t,Rr,o);return BigInt(await i.balanceOf(e))}var Nr,Pr,_r,Rr,Br,lt=D(()=>{Nr="0x62FCFAf7573AD8B41a0FBF347AfEb85e06599A75",Pr=999,_r="https://rpc.hyperliquid.xyz/evm",Rr=["function balanceOf(address owner) view returns (uint256)"],Br=/^0x[a-fA-F0-9]{40}$/});import{existsSync as Lr,readFileSync as Ur,lstatSync as Fr}from"node:fs";import{homedir as dt}from"node:os";import{join as Pe}from"node:path";function qr(e){let t=String(e||"swap").toLowerCase();return Object.prototype.hasOwnProperty.call(pt,t)?pt[t]:Mr}function Gr(e=process.env){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){if(e[ft])return String(e[ft]);let t=e.ORACLE_CONFIG_DIR||Pe(dt(),".config","oracle");return Pe(t,"fee-recipient")}return Pe(dt(),".config","oracle","fee-recipient")}function Kr(e=process.env){try{let t=Gr(e);if(!Lr(t)||Fr(t).isSymbolicLink())return"";let r=Ur(t,"utf8").trim().toLowerCase();return/^0x[a-f0-9]{40}$/.test(r)?r:""}catch{return""}}function Xr(e,{fallback:t=0}={}){if(e==null)return t;if(String(e).trim()==="")return 0;let r=Number(e);return!Number.isFinite(r)||r<=0?0:Math.min(Math.floor(r),Dr)}function Yr({env:e=process.env,action:t="swap",admin:r=!1}={}){let n=String(e[Hr]||"").trim(),s=String(e[zr]||Vr).trim();if(r===!0)return{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"admin-oracle"};let o=qr(t),i=Xr(e[jr],{fallback:n?o:0}),a=Math.min(i,o);if(!a)return{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"not-configured"};if(!/^0x[a-fA-F0-9]{40}$/.test(n))return{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"no-recipient"};let l=Kr(e);return!l||l!==n.toLowerCase()?{bps:0,recipient:"",integrator:s,action:t,applies:!1,reason:"recipient-not-pinned"}:{bps:a,recipient:n,integrator:s,action:t,applies:!0,reason:"configured"}}async function _e({wallet:e,env:t=process.env,action:r="swap",holderCheck:n={},admin:s=!1}={}){let o=Yr({env:t,action:r,admin:s});if(s===!0)return{...o,holderVerificationStatus:"admin-oracle"};let i=String(e||"").trim().toLowerCase();if(!/^0x[a-f0-9]{40}$/.test(i))return{...o,holderVerificationStatus:"wallet-required"};try{return BigInt(await ut(i,n))>0n?{...o,bps:0,applies:!1,reason:"locals-only-holder",holderVerificationStatus:"holder"}:{...o,holderVerificationStatus:"non-holder"}}catch{return{...o,holderVerificationStatus:"unavailable"}}}function mt(e){return e?.applies?`Oracle routing fee ${e.bps} bps (${(e.bps/100).toFixed(2)}%) to ${e.recipient}.`:e?.reason==="admin-oracle"?"No Oracle fee (admin Oracle).":e?.reason==="locals-only-holder"?"No Oracle fee (Locals Only holder).":"No Oracle fee."}function ht(e){return e?.applies?{integrator:e.integrator,fee:String(e.bps/1e4)}:{}}var Dr,Mr,pt,jr,Hr,zr,ft,Vr,pe=D(()=>{lt();Dr=100,Mr=5,pt=Object.freeze({swap:5,bridge:5,perps:0,nft:0});jr="ORACLE_INTEGRATOR_FEE_BPS",Hr="ORACLE_INTEGRATOR_FEE_RECIPIENT",zr="ORACLE_INTEGRATOR_ID",ft="ORACLE_INTEGRATOR_FEE_RECIPIENT_PIN",Vr="oracle"});var bt={};Me(bt,{LIFI_API:()=>gt,lifiChains:()=>en,lifiHealth:()=>Jr,lifiPrepare:()=>Zr,lifiQuote:()=>fe});function Be(e={}){return(e.baseUrl||process.env.LIFI_API_URL||gt).replace(/\/$/,"")}function Qr(e){let t=String(e||Re).toLowerCase();return t===Re.toLowerCase()||t===Wr}function wt(e,t){let r=String(e||"").trim();if(!/^0x[0-9a-fA-F]{40}$/.test(r))throw new Error(`lifi: ${t} must be a 20-byte address`);return r.toLowerCase()}async function Jr(e={}){let t=await N(`${Be(e)}/chains`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??12e3}),r=Array.isArray(t)?t.length:t?.chains?.length||0;return{ok:r>0,chainCount:r}}async function fe(e={},t={}){let{fromChain:r,toChain:n=r,fromToken:s=Re,toToken:o,fromAmount:i,fromAddress:a=re}=e;if(r==null||!o||!i)throw new Error("lifiQuote requires fromChain, toToken, fromAmount");let l=new URLSearchParams({fromChain:String(r),toChain:String(n),fromToken:s,toToken:o,fromAmount:String(i),fromAddress:a}),d=Y({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!d.executable)throw new Error(`lifi: route requires ${d.requiredBps} bps above cap ${d.capBps}`);l.set("slippage",String(d.selectedBps/1e4));let c=await _e({wallet:e.fromAddress,env:t.env,action:e.feeAction||"swap",holderCheck:t.holderCheck});for(let[m,E]of Object.entries(ht(c)))l.set(m,E);let u=await N(`${Be(t)}/quote?${l}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),p=u?.estimate?.toAmount||u?.toAmount;if(!p)return{...u,autoSlippagePolicy:d,oracleFee:c};let f=u?.transactionRequest?.to||u?.estimate?.approvalAddress||"lifi",h=M(u,{chainId:Number(r),venue:f,amountOut:p,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(r),requestedCapBps:e.maxSlippageBps??e.slippageBps}),y=u?.estimate?.toAmountMin||u?.toAmountMin;if(y!=null&&BigInt(y)<BigInt(h.amountOutMinimum))throw new Error("lifi: provider transaction is under-protected versus bounded auto-slippage floor");return{...h,oracleFee:c}}async function Zr(e={},t={}){let r=await fe(e,t),n=r?.transactionRequest;if(!n?.to||!n?.data)throw new Error("lifi: quote did not return an executable transactionRequest");let s=Number(e.fromChain);if(n.chainId!=null&&Number(n.chainId)!==s)throw new Error("lifi: transaction chain mismatch");if(e.fromAddress&&n.from&&String(n.from).toLowerCase()!==String(e.fromAddress).toLowerCase())throw new Error("lifi: transaction sender mismatch");let o=null;if(!Qr(e.fromToken)){let i=r?.estimate?.approvalAddress||r?.approvalAddress;if(!i)throw new Error("lifi: ERC20 route missing approvalAddress");let a=r?.action?.fromToken?.address||r?.estimate?.fromToken?.address||e.fromToken;o={token:wt(a,"approval token"),spender:wt(i,"approval spender"),amount:String(e.fromAmount)}}return L({provider:"lifi",calldataReady:!0,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,chainId:s,quote:r,autoSlippage:r.autoSlippage,requiresApproval:o,transaction:{chainId:s,from:n.from||e.fromAddress,to:n.to,data:n.data,value:n.value??"0x0",...n.gasLimit!=null?{gasLimit:n.gasLimit}:{},slippageGuard:X(r.autoSlippage,{chainId:s,venue:n.to,data:n.data})}},{provider:"lifi",kind:"lifi-tx"})}async function en(e={}){return N(`${Be(e)}/chains`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??12e3})}var gt,Re,Wr,$e=D(()=>{q();V();de();j();pe();gt="https://li.quest/v1";Re="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE",Wr="0x0000000000000000000000000000000000000000"});var me={};Me(me,{ACROSS_API:()=>At,HOP_API:()=>St,RELAY_API:()=>It,acrossHealth:()=>fn,acrossSuggestedFees:()=>kt,hopHealth:()=>mn,hopQuote:()=>Ot,relayHealth:()=>hn,relayPrepare:()=>wn,relayQuote:()=>Fe});async function fn(e={}){try{return{ok:!0,estimatedFillTimeSec:(await kt({token:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",destinationToken:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",originChainId:1,destinationChainId:42161,amount:"1000000000000000"},e)).estimatedFillTimeSec}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function kt(e={},t={}){let{token:r,destinationToken:n=r,originChainId:s,destinationChainId:o,amount:i}=e;if(!r||s==null||o==null||!i)throw new Error("acrossSuggestedFees requires token, originChainId, destinationChainId, amount");let a=new URLSearchParams({token:r,destinationToken:n,originChainId:String(s),destinationChainId:String(o),amount:String(i)}),l=(t.baseUrl||process.env.ACROSS_API_URL||At).replace(/\/$/,"");return N(`${l}/suggested-fees?${a}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3})}async function mn(e={}){try{let t=await Ot({amount:"1000000000000000",token:"ETH",fromChain:"ethereum",toChain:"arbitrum",slippage:.5},e);return{ok:!0,estimatedRecieved:t.estimatedRecieved||t.estimatedReceived}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function Ot(e={},t={}){let{amount:r,token:n="ETH",fromChain:s="ethereum",toChain:o="arbitrum"}=e;if(!r)throw new Error("hopQuote requires amount");let i=e.slippage==null?void 0:Math.round(Number(e.slippage)*100),a=Y({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:s!==o,requestedCapBps:e.maxSlippageBps??e.slippageBps??i});if(!a.executable)throw new Error(`hop: route requires ${a.requiredBps} bps above cap ${a.capBps}`);let l=new URLSearchParams({amount:String(r),token:n,fromChain:s,toChain:o,slippage:String(a.selectedBps/100)}),d=(t.baseUrl||process.env.HOP_API_URL||St).replace(/\/$/,""),c=await N(`${d}/quote?${l}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??15e3}),u=c?.estimatedRecieved||c?.estimatedReceived;return u?M(c,{chainId:Number(e.originChainId||e.chainId||pn[s]||0),venue:c?.tx?.to||"hop",amountOut:u,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:s!==o,requestedCapBps:e.maxSlippageBps??e.slippageBps??i}):{...c,autoSlippagePolicy:a}}async function hn(e={}){try{let t=await Fe({user:re,originChainId:1,destinationChainId:8453,originCurrency:"0x0000000000000000000000000000000000000000",destinationCurrency:"0x0000000000000000000000000000000000000000",amount:"1000000000000000",tradeType:"EXACT_INPUT"},e);return{ok:!0,hasSteps:Array.isArray(t.steps),stepCount:t.steps?.length||0}}catch(t){return{ok:!1,error:String(t.message||t).slice(0,160)}}}async function Fe(e={},t={}){let{user:r=re,originChainId:n,destinationChainId:s,originCurrency:o="0x0000000000000000000000000000000000000000",destinationCurrency:i="0x0000000000000000000000000000000000000000",amount:a,tradeType:l="EXACT_INPUT"}=e;if(n==null||s==null||!a)throw new Error("relayQuote requires originChainId, destinationChainId, amount");let d=Y({liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(s),requestedCapBps:e.maxSlippageBps??e.slippageBps});if(!d.executable)throw new Error(`relay: route requires ${d.requiredBps} bps above cap ${d.capBps}`);let c=(t.baseUrl||process.env.RELAY_API_URL||It).replace(/\/$/,""),u=await N(`${c}/quote`,{method:"POST",body:{user:r,originChainId:Number(n),destinationChainId:Number(s),originCurrency:o,destinationCurrency:i,amount:String(a),tradeType:l,slippageTolerance:String(d.selectedBps)},fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4}),p=u?.details?.currencyOut?.amount;return!p||!/^\d+$/.test(String(p))?{...u,autoSlippagePolicy:d}:M(u,{chainId:Number(n),venue:u?.steps?.[0]?.items?.[0]?.data?.to||"relay",amountOut:p,liquidityUsd:e.liquidityUsd,priceChange5m:e.priceChange5m,crossChain:Number(n)!==Number(s),requestedCapBps:e.maxSlippageBps??e.slippageBps})}async function wn(e={},t={}){let r=await Fe(e,t),n=Number(e.originChainId),s=(r.steps||[]).flatMap(a=>(a.items||[]).filter(l=>l?.data?.to&&l?.data?.data).map(l=>({stepId:a.id,...l.data})));if(!s.length)throw new Error("relay: quote returned no executable transaction items");let o=String(r?.autoSlippage?.venue||"").toLowerCase();if(s.some(a=>String(a.to).toLowerCase()!==o))throw new Error("relay: route includes a separate approval/transaction that is not yet safely bound");let i=s.map(a=>({chainId:n,from:a.from||e.user,to:a.to,data:a.data,value:a.value??"0x0",...a.gasLimit!=null||a.gas!=null?{gasLimit:a.gasLimit??a.gas}:{},slippageGuard:X(r.autoSlippage,{chainId:n,venue:a.to,data:a.data})}));return L({provider:"relay",calldataReady:!0,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,chainId:n,quote:r,autoSlippage:r.autoSlippage,transactions:i},{provider:"relay",kind:"relay-tx"})}var At,St,It,pn,he=D(()=>{q();V();de();j();At="https://across.to/api",St="https://api.hop.exchange/v1",It="https://api.relay.link",pn={ethereum:1,optimism:10,bsc:56,polygon:137,arbitrum:42161,avalanche:43114,base:8453}});var vn=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),Tn=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),Nn=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var G=Object.freeze({FULL:"FULL",NO_GAS:"NO_GAS",FAILED:"FAILED"});var qe=e=>{try{return e==null||e===""?null:BigInt(String(e).split(".")[0])}catch{return null}};function je(e){let{source:t,amountOut:r,minOut:n=null,gasUsd:s=null,feeUsd:o=null,oracleFeeBps:i=0,estimatedGas:a=null,liquidityUsd:l=null,error:d=null,executionReady:c=!1,meta:u={}}=e||{};if(d||r==null)return{source:t,quality:G.FAILED,amountOut:null,error:d||"no amountOut returned"};let p=qe(r);if(p==null||p<=0n)return{source:t,quality:G.FAILED,amountOut:null,error:"non-positive amountOut"};let f=Number(i);return{source:t,quality:s==null?G.NO_GAS:G.FULL,amountOut:p.toString(),minOut:qe(n)?.toString()??null,gasUsd:s,feeUsd:o,oracleFeeBps:Number.isFinite(f)&&f>0?Math.floor(f):0,estimatedGas:a==null?null:String(a),liquidityUsd:l==null?null:Number(l),executionReady:c,meta:u}}function He(e,{destPriceUsd:t=null,destDecimals:r=null,liquidityFirst:n=!0,liquidityBandBps:s=50,gasPriceWei:o=null,nativePriceUsd:i=null}={}){let a=e.filter(w=>w.quality!==G.FAILED),l=e.filter(w=>w.quality===G.FAILED),d=t!=null&&t>0&&r!=null&&r>=0,c=Number(o),u=Number(i),p=Number.isFinite(c)&&c>0&&Number.isFinite(u)&&u>0,f=a.map(w=>{let b=BigInt(w.amountOut),P=0n,g=!1,v=!1,F=BigInt(w.oracleFeeBps??0),_=F>0n?b*F/10000n:0n;if(d){let $=w.gasUsd,k=Number(w.meta?.gasUnits??w.estimatedGas);if($==null&&p&&Number.isFinite(k)&&k>0){let x=k*c/1e18*u;Number.isFinite(x)&&x>=0&&($=x,v=!0)}let I=($??0)+(w.feeUsd??0);if(I>0){let x=I/t*10**r;Number.isFinite(x)&&x>=0&&(P=BigInt(Math.floor(x)),g=!0)}else $===0&&(g=!0)}let ne=P+_,B=b>ne?b-ne:0n;return{...w,grossOut:b.toString(),netOut:B.toString(),costInDest:P.toString(),oracleFeeInDest:_.toString(),costAccounted:g,gasEstimated:v}}),h=Number(s)>0?Number(s):0,y=f.reduce((w,b)=>BigInt(b.netOut)>w?BigInt(b.netOut):w,0n),m=w=>y>0n?Number((y-BigInt(w))*10000n/y):0,E=[],T=f.slice().sort((w,b)=>BigInt(b.netOut)>BigInt(w.netOut)?1:-1)[0]??null;f.sort((w,b)=>{let P=m(w.netOut)<=h?0:1,g=m(b.netOut)<=h?0:1;if(n&&h>0&&P!==g)return P-g;if(n&&h>0){let v=w.liquidityUsd??-1,F=b.liquidityUsd??-1;if(v!==F)return F-v}return BigInt(b.netOut)>BigInt(w.netOut)?1:-1}),n&&h>0&&T&&f[0]&&f[0].source!==T.source&&E.push(`liquidity-first: chose ${f[0].source} (liquidity $${f[0].liquidityUsd??"unknown"}) over best-price ${T.source} within ${h} bps`);let S=f.filter(w=>!w.costAccounted).map(w=>w.source);d?S.length&&E.push(`gas not reported by: ${S.join(", ")}. These are ranked on gross output and may be overstated relative to gas-measured routes.`):E.push("destination price/decimals unavailable: ranked on GROSS output. Gas is not included, so a cheap-looking route may cost more to execute.");let O=f[0];if(d&&O&&O.costAccounted===!1){let w=f.find(b=>b.costAccounted&&m(b.netOut)<=h);w&&E.push(`winner ${O.source} has UNMEASURED gas; gas-measured ${w.source} is within ${h} bps and may net more once ${O.source}'s real gas is paid \u2014 prefer it if unsure.`)}let R=f.filter(w=>w.gasEstimated).map(w=>w.source);R.length&&E.push(`gas ESTIMATED (from gas units x current gas price, not measured) for: ${R.join(", ")}. Net includes this estimate so the ranking is gas-inclusive, but the on-chain gas may differ.`);let U=null,A=null;if(f.length>=2&&f[0].costAccounted&&f[1].costAccounted){let w=BigInt(f[0].netOut),b=BigInt(f[1].netOut);b>0n&&(U=Number((w-b)*10000n/b),A=`${f[0].source} vs ${f[1].source}`)}return{best:f[0]??null,routes:f,failed:l,improvementBps:U,spreadBasis:A,rankedOn:d?"net-of-cost":"gross",warnings:E}}async function ze(e,{timeoutMs:t=12e3}={}){let r=(s,o)=>Promise.race([s,new Promise((i,a)=>setTimeout(()=>a(new Error(`${o}: timeout`)),t))]);return(await Promise.allSettled(e.map(s=>r(Promise.resolve().then(s.run),s.source)))).map((s,o)=>{let i=e[o].source;return s.status==="rejected"?je({source:i,error:String(s.reason?.message||s.reason)}):je({source:i,...s.value})})}$e();q();V();j();pe();q();V();j();q();V();j();q();V();import{TypedDataEncoder as Do,getAddress as Mo,isAddress as qo}from"ethers";var Bo=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});de();j();var Xo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Yo=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var Wo=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Qo=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});import{Interface as Et,getAddress as gi,isAddress as bi}from"ethers";q();var yt={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Zo=new Map(Object.values(yt).map(e=>[e.chainId,e]));import{Interface as nn,getAddress as ai}from"ethers";var ci=new nn(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);q();var mi=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});V();j();var Si=new Et(["function quoteExactInputSingle((address tokenIn, address tokenOut, uint256 amountIn, uint24 fee, uint160 sqrtPriceLimitX96) params) returns (uint256 amountOut, uint160 sqrtPriceX96After, uint32 initializedTicksCrossed, uint256 gasEstimate)","function quoteExactInput(bytes path, uint256 amountIn) returns (uint256 amountOut, uint160[] sqrtPriceX96AfterList, uint32[] initializedTicksCrossedList, uint256 gasEstimate)"]),Ii=new Et(["function exactInputSingle((address tokenIn,address tokenOut,uint24 fee,address recipient,uint256 amountIn,uint256 amountOutMinimum,uint160 sqrtPriceLimitX96) params) payable returns (uint256 amountOut)","function multicall(uint256 deadline,bytes[] data) payable returns (bytes[] results)"]);import{AbiCoder as an,Interface as Le,getAddress as vi,isAddress as Ti,keccak256 as Ni}from"ethers";V();j();var $i=an.defaultAbiCoder();var Li=new Le(["function quoteExactInputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountOut, uint256 gasEstimate)","function quoteExactOutputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountIn, uint256 gasEstimate)"]),Ui=new Le(["function execute(bytes commands,bytes[] inputs,uint256 deadline) payable"]),Fi=new Le(["function getSlot0(bytes32 poolId) view returns (uint160 sqrtPriceX96,int24 tick,uint24 protocolFee,uint24 lpFee)","function getLiquidity(bytes32 poolId) view returns (uint128 liquidity)"]),Di=Object.freeze([[13,"beforeInitialize"],[12,"afterInitialize"],[11,"beforeAddLiquidity"],[10,"afterAddLiquidity"],[9,"beforeRemoveLiquidity"],[8,"afterRemoveLiquidity"],[7,"beforeSwap"],[6,"afterSwap"],[5,"beforeDonate"],[4,"afterDonate"],[3,"beforeSwapReturnsDelta"],[2,"afterSwapReturnsDelta"],[1,"afterAddLiquidityReturnsDelta"],[0,"afterRemoveLiquidityReturnsDelta"]]),Mi=(1n<<14n)-1n;q();var cn="https://coins.llama.fi",un="https://api.llama.fi";function ln(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||cn).replace(/\/$/,"")}function dn(e={}){return(e.baseUrl||process.env.DEFILLAMA_API_URL||un).replace(/\/$/,"")}async function Ue(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return N(`${ln(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function xt(e={}){return N(`${dn(e)}/protocols`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??2e4})}var Q=e=>{let t=Number(e);return Number.isFinite(t)?t:null};function Ct(e){if(!Array.isArray(e))return null;let t=0,r=!1;for(let n of e){let s=Q(n?.amountUSD);s!=null&&(t+=s,r=!0)}return r?t:null}var W=e=>String(e??"").toLowerCase().replace(/[^a-z0-9]/g,""),vt=Object.freeze({across:["across"],relay:["relaychain","relay"],lifi:["jumper-(li.fi-powered)","lifi"],stargate:["stargate-v2","stargate-v1","stargate"],hop:["hop-protocol","hop"],debridge:["debridge"],synapse:["synapse"],connext:["connext"],cbridge:["celer-bridge","celer-cbridge","cbridge"],celer:["celer-bridge","celer-cbridge","cbridge"],squid:["squid"],symbiosis:["symbiosis"],wormhole:["wormhole"],mayan:["mayan"],allbridge:["allbridge"],thorchain:["thorchain"]});async function gn(e={}){try{let t=await xt({...e,baseUrl:e.defillamaApiBaseUrl,timeoutMs:e.defillamaTimeoutMs??Math.min(Number(e.timeoutMs??5e3),5e3)});return Array.isArray(t)?t:[]}catch{return[]}}function bn(e,t={}){let r=W(t.tool||t.provider||t.bridge||t.protocol),n=[];return e==="lifi"&&r&&r!=="lifi"&&n.push(...vt[r]||[r]),n.push(...vt[W(e)]||[e]),n}function yn(e,t,r={}){let n=Array.isArray(e)?e:[],s=bn(t,r).map(W).filter(Boolean);for(let o of s){let i=n.find(l=>W(l?.slug)===o||W(l?.name)===o),a=Q(i?.tvl);if(a!=null)return{liquidityUsd:a,protocol:i?.name??i?.slug??o}}for(let o of s){let i=n.find(l=>{let d=W(l?.category);return!d.includes("bridge")&&!d.includes("crosschain")?!1:W(l?.slug).includes(o)||W(l?.name).includes(o)}),a=Q(i?.tvl);if(a!=null)return{liquidityUsd:a,protocol:i?.name??i?.slug??o}}return null}function Tt({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:s,taker:o,opts:i={}}){let a=[],l=null,d=async(c,u={})=>(l||=gn(i),yn(await l,c,u));return a.push({source:"lifi",run:async()=>{let c=await fe({fromChain:e,toChain:t,fromToken:r,toToken:n,fromAmount:s},i),u=c?.estimate??c?.[0]?.estimate,p={tool:c?.tool??c?.toolDetails?.name,durationSeconds:Q(u?.executionDuration)},f=await d("lifi",p);return{amountOut:u?.toAmount,minOut:u?.toAmountMin,gasUsd:Ct(u?.gasCosts),feeUsd:Ct(u?.feeCosts),oracleFeeBps:c?.oracleFee?.applies?c.oracleFee.bps:0,liquidityUsd:f?.liquidityUsd??null,meta:{...p,liquidityProtocol:f?.protocol,oracleFee:c?.oracleFee??null}}}}),a.push({source:"relay",run:async()=>{let{relayQuote:c}=await Promise.resolve().then(()=>(he(),me)),p=(await c({user:o,originChainId:e,destinationChainId:t,originCurrency:r,destinationCurrency:n,amount:String(s)},i))?.details,f={durationSeconds:Q(p?.timeEstimate),rate:p?.rate},h=await d("relay",f);return{amountOut:p?.currencyOut?.amount,minOut:p?.currencyOut?.minimumAmount,gasUsd:Q(p?.totalImpact?.usd)!=null?Math.abs(Q(p.totalImpact.usd)):null,liquidityUsd:h?.liquidityUsd??null,meta:{...f,liquidityProtocol:h?.protocol}}}}),a.push({source:"across",run:async()=>{let{acrossSuggestedFees:c}=await Promise.resolve().then(()=>(he(),me)),u=await c({token:r,destinationToken:n,originChainId:e,destinationChainId:t,amount:String(s)},i),p=u?.totalRelayFee?.total,f=null;if(p!=null)try{let y=BigInt(String(s))-BigInt(String(p));y>0n&&(f=y.toString())}catch{}let h=await d("across");return{amountOut:f,gasUsd:null,liquidityUsd:h?.liquidityUsd??null,meta:{derivedFromFees:!0,durationSeconds:Q(u?.estimatedFillTimeSec),limits:u?.limits?{min:u.limits.minDeposit,max:u.limits.maxDeposit}:void 0,liquidityProtocol:h?.protocol}}}}),a}pe();var En={1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax"};async function xn(e,t,r){let n=En[Number(e)];if(!n)return{priceUsd:null,decimals:null};let s=`${n}:${t}`;try{let i=(await Ue([s],r))?.coins?.[s],a=Number(i?.price),l=Number(i?.decimals);return{priceUsd:Number.isFinite(a)?a:null,decimals:Number.isFinite(l)?l:null}}catch{return{priceUsd:null,decimals:null}}}async function Nt(e,t={}){let{fromChainId:r,toChainId:n,tokenIn:s,tokenOut:o,amountIn:i}=e;if(r==null||n==null||!s||!o||i==null)throw new Error("bestBridgeRoute requires fromChainId, toChainId, tokenIn, tokenOut, amountIn");if(Number(r)===Number(n))throw new Error("bestBridgeRoute is for cross-chain; use bestSwapRoute for same-chain");let a=xn(n,o,t),l=Tt({...e,opts:t}),[d,c]=await Promise.all([ze(l,{timeoutMs:t.timeoutMs??15e3}),a]),u=He(d,{destPriceUsd:c.priceUsd,destDecimals:e.decimalsOut??c.decimals,liquidityBandBps:t.liquidityBandBps??50}),p=u.routes.map(f=>({source:f.source,seconds:f.meta?.durationSeconds??null})).filter(f=>f.seconds!=null);return{kind:"bridge",fromChainId:r,toChainId:n,tokenIn:s,tokenOut:o,amountIn:String(i),...u,durations:p,sourcesTried:l.length,sourcesAnswered:d.filter(f=>f.quality!==G.FAILED).length,note:Sn(u,l.length)}}function An(e){let t=e?.meta?.oracleFee;return t?.applies?` \xB7 ${mt(t)}`:""}function Sn(e,t){if(!e.best)return"no source returned a usable route";let r=e.routes.length,n=An(e.best);if(r===1)return`only 1 of ${t} sources answered, so this is the ONLY route, not a proven best one. Treat it as unbenchmarked.`+n;if(e.improvementBps!=null){let s=e.improvementBps,o=s/100;if(s<.01)return`best of ${r} routes, ranked on ${e.rankedOn}: effectively tied with the runner-up (${e.spreadBasis}), inside quote noise. Re-quote before you size up.`+n;let i=o>=.01?`${o.toFixed(2)}%`:`${s.toFixed(2)}bps`;return`best of ${r} routes, ranked on ${e.rankedOn}: ${i} better than the runner-up (${e.spreadBasis})`+n}return`best of ${r} routes, ranked on ${e.rankedOn}. No spread quoted: the top routes report cost differently, so the margin is not comparable.`+n}j();var In=/^0x[0-9a-fA-F]{40}$/,kn=new Set(["0x0000000000000000000000000000000000000000","0x000000000000000000000000000000000000dead","0x0000000000000000000000000000000000000001","0x00000000000000000000000000000000000a1ce5"].map(e=>e.toLowerCase())),On=100,we={relay:async({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:s,taker:o},i)=>{let{relayPrepare:a}=await Promise.resolve().then(()=>(he(),me)),l=await a({user:o,originChainId:e,destinationChainId:t,originCurrency:r,destinationCurrency:n,amount:String(s)},i);return{transactions:l.transactions||[],amountOut:l.quote?.details?.currencyOut?.amount??null,minOut:l.quote?.details?.currencyOut?.minimumAmount??null,durationSeconds:l.quote?.details?.timeEstimate??null}},lifi:async({fromChainId:e,toChainId:t,tokenIn:r,tokenOut:n,amountIn:s,taker:o,isHolder:i},a)=>{let{lifiPrepare:l}=await Promise.resolve().then(()=>($e(),bt)),d=await l({fromChain:e,toChain:t,fromToken:r,toToken:n,fromAmount:s,fromAddress:o,isHolder:i,feeAction:"bridge"},a);return{transactions:d.transaction?[d.transaction]:[],requiresApproval:d.requiresApproval??null,amountOut:d.quote?.estimate?.toAmount??null,minOut:d.quote?.estimate?.toAmountMin??null,durationSeconds:d.quote?.estimate?.executionDuration??null}}};function Cs(){return Object.keys(we)}async function vs(e,t={}){let{taker:r,fromChainId:n,toChainId:s}=e;if(!r)throw new Error("prepareBestBridgeRoute requires taker: bridge transactions are built FOR an address, and the quote-only placeholder must never end up in one");if(!In.test(r))throw new Error(`taker must be a valid 20-byte address, got "${r}"`);if(kn.has(r.toLowerCase()))throw new Error(`taker "${r}" is a placeholder/burn address. Bridging to it would send funds to an address nobody controls, on a chain where you cannot undo it.`);let o=await Nt(e,t);if(!o.best)return{ok:!1,reason:"no source returned a usable bridge route",comparison:o};let i=e.source||o.best.source,a=o.routes.find(m=>m.source===i);if(!a)return{ok:!1,reason:`source "${i}" returned no usable route`,comparison:o};let l=we[i];if(!l){let m=o.routes.find(E=>we[E.source]&&E.source!==i);return{ok:!1,reason:`${i} won the comparison but has no bridge prepare path in this build. `+(m?`Next preparable route is ${m.source}; pass source:"${m.source}".`:"No route in this comparison can be prepared."),failureKind:"no-prepare-path",...m?{alternative:m.source}:{},winner:i,comparison:o}}let d;try{d=await l(e,t)}catch(m){let E=typeof m?.body=="string"?m.body:m?.body?JSON.stringify(m.body):"",T=[String(m?.message||m),E].filter(Boolean).join(" :: "),S=/allowance/i.test(T),O=!S&&/not enough|insufficient|balance/i.test(T),R=o.routes.find(U=>we[U.source]&&U.source!==i);return{ok:!1,reason:S?`${i} will not build calldata until the token approval exists on-chain. Approve first, then prepare again. Underlying: ${T}`:O?`${i} refused to build: ${T}. Quoting works for any address; preparing needs the real funded wallet on chain ${n}.`:`${i} bridge prepare failed: ${T}`,failureKind:S?"approval-required-first":O?"taker-not-funded":"provider-error",...R?{alternative:R.source}:{},comparison:o}}let c=d.transactions||[];if(!c.length)return{ok:!1,reason:`${i} returned no executable transaction for this route`,failureKind:"provider-error",comparison:o};let u=c.filter(m=>m.chainId!=null&&Number(m.chainId)!==Number(n));if(u.length)return{ok:!1,reason:`${i} returned a transaction for chain ${u[0].chainId} but the origin chain is ${n}. Refusing to hand over a mismatched artifact.`,failureKind:"chain-mismatch",comparison:o};let p=e.driftToleranceBps??On,f=null,h=null;if(d.amountOut!=null&&a.grossOut!=null)try{let m=BigInt(a.grossOut),E=BigInt(d.amountOut);m>0n&&(f=Number((E-m)*10000n/m),f<-p&&(h=`route moved ${(f/100).toFixed(2)}% against you since the comparison (tolerance ${(p/100).toFixed(2)}%). Re-compare before signing.`))}catch{}let y=[...h?[h]:[],...o.warnings||[],`Bridging is NOT atomic: the origin transaction succeeding does not mean funds arrived on chain ${s}. Expect ~${d.durationSeconds!=null?`${d.durationSeconds}s`:"minutes"} before the destination credits, and do not re-send if it is pending.`];return c.length>1&&y.push(`This route needs ${c.length} transactions signed IN ORDER. Signing only the first leaves funds approved but not bridged.`),L({ok:!0,chosen:{source:i,wasWinner:i===o.best.source,netOut:a.netOut,grossOut:a.grossOut,gasUsd:a.gasUsd},artifactKind:"unsigned-transaction-sequence",fromChainId:Number(n),toChainId:Number(s),transactionCount:c.length,transactions:c,requiresApproval:d.requiresApproval??null,minOut:d.minOut??null,durationSeconds:d.durationSeconds??null,destination:c[0]?.to??null,unsigned:!0,signedBy:"user-wallet",driftBps:f,warnings:y,runnersUp:o.routes.filter(m=>m.source!==i).map(m=>({source:m.source,netOut:m.netOut,gasUsd:m.gasUsd})),comparison:{rankedOn:o.rankedOn,sourcesAnswered:o.sourcesAnswered,sourcesTried:o.sourcesTried,improvementBps:o.improvementBps},note:`UNSIGNED. ${c.length} transaction(s) on chain ${n}, crediting chain ${s}. Verify every destination address before signing.`},{provider:"router",kind:"best-bridge"})}export{vs as prepareBestBridgeRoute,Cs as supportedBridgePreparers};