@oracle-agent/oracle 0.35.34 → 0.35.36

package/dist/scanner/index.mjs

@@ -1,6 +1,6 @@
-var J=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),g=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),y=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"}),st=/^0x[0-9a-fA-F]{40}$/;function at(t={}){let e=[],r=[];if(!t||typeof t!="object")return{ok:!1,errors:["definition must be an object"],warnings:r};if((!Number.isInteger(t.chainId)||t.chainId<=0)&&e.push("chainId must be a positive integer"),(typeof t.key!="string"||!/^[a-z][a-z0-9-]*$/.test(t.key||""))&&e.push('key must be a lowercase slug (e.g. "base")'),(typeof t.name!="string"||!t.name.trim())&&e.push("name is required"),!Array.isArray(t.rpcEnv)||t.rpcEnv.length===0)e.push("rpcEnv must list at least one environment variable name");else for(let a of t.rpcEnv)(typeof a!="string"||!/^[A-Z][A-Z0-9_]*$/.test(a))&&e.push(`rpcEnv entry "${a}" should be an UPPER_SNAKE env var name`);if(t.nativeCurrency){let a=t.nativeCurrency;(typeof a.symbol!="string"||!a.symbol)&&e.push("nativeCurrency.symbol is required when nativeCurrency is set"),Number.isInteger(a.decimals)||e.push("nativeCurrency.decimals must be an integer")}for(let[a,o]of(t.venues||[]).entries()){let i=`venues[${a}]`;if(!o||typeof o!="object"){e.push(`${i} must be an object`);continue}st.test(o.address||"")||e.push(`${i}.address is not a valid 20-byte address`),/^0x0{40}$/.test(o.address||"")&&e.push(`${i}.address is the zero address -- placeholder left in place?`),o.kind||e.push(`${i}.kind is required (router|quoter|factory|...)`),o.verified?(o.verified.method||e.push(`${i}.verified.method is required`),o.verified.source||e.push(`${i}.verified.source is required`),o.verified.date||r.push(`${i}.verified.date missing -- add one so staleness is visible`)):e.push(`${i} must record verification: { verified: { method, source, date } }. An unverified venue stays blocked.`)}let n=t.capabilities||{};for(let a of Object.keys(n))J.includes(a)?typeof n[a]!="function"&&e.push(`capability "${a}" must be a function`):e.push(`unknown capability "${a}"`);return Object.keys(n).length===0&&r.push("scanner implements no capabilities -- it can only be registered, not used"),n.prepareUnsignedTx&&!n.quote&&r.push("prepareUnsignedTx without quote: no priced expectation to validate the built tx against"),n.prepareUnsignedTx&&!n.sellSimulation&&r.push("prepareUnsignedTx without sellSimulation: cannot prove an asset is exitable before buying"),{ok:e.length===0,errors:e,warnings:r}}function it(t){let{ok:e,errors:r,warnings:n}=at(t);if(!e)throw new Error(`invalid scanner for ${t?.key??"<unknown>"}:
+var J=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),g=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),y=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"}),st=/^0x[0-9a-fA-F]{40}$/;function it(t={}){let e=[],r=[];if(!t||typeof t!="object")return{ok:!1,errors:["definition must be an object"],warnings:r};if((!Number.isInteger(t.chainId)||t.chainId<=0)&&e.push("chainId must be a positive integer"),(typeof t.key!="string"||!/^[a-z][a-z0-9-]*$/.test(t.key||""))&&e.push('key must be a lowercase slug (e.g. "base")'),(typeof t.name!="string"||!t.name.trim())&&e.push("name is required"),!Array.isArray(t.rpcEnv)||t.rpcEnv.length===0)e.push("rpcEnv must list at least one environment variable name");else for(let i of t.rpcEnv)(typeof i!="string"||!/^[A-Z][A-Z0-9_]*$/.test(i))&&e.push(`rpcEnv entry "${i}" should be an UPPER_SNAKE env var name`);if(t.nativeCurrency){let i=t.nativeCurrency;(typeof i.symbol!="string"||!i.symbol)&&e.push("nativeCurrency.symbol is required when nativeCurrency is set"),Number.isInteger(i.decimals)||e.push("nativeCurrency.decimals must be an integer")}for(let[i,o]of(t.venues||[]).entries()){let a=`venues[${i}]`;if(!o||typeof o!="object"){e.push(`${a} must be an object`);continue}st.test(o.address||"")||e.push(`${a}.address is not a valid 20-byte address`),/^0x0{40}$/.test(o.address||"")&&e.push(`${a}.address is the zero address -- placeholder left in place?`),o.kind||e.push(`${a}.kind is required (router|quoter|factory|...)`),o.verified?(o.verified.method||e.push(`${a}.verified.method is required`),o.verified.source||e.push(`${a}.verified.source is required`),o.verified.date||r.push(`${a}.verified.date missing -- add one so staleness is visible`)):e.push(`${a} must record verification: { verified: { method, source, date } }. An unverified venue stays blocked.`)}let n=t.capabilities||{};for(let i of Object.keys(n))J.includes(i)?typeof n[i]!="function"&&e.push(`capability "${i}" must be a function`):e.push(`unknown capability "${i}"`);return Object.keys(n).length===0&&r.push("scanner implements no capabilities -- it can only be registered, not used"),n.prepareUnsignedTx&&!n.quote&&r.push("prepareUnsignedTx without quote: no priced expectation to validate the built tx against"),n.prepareUnsignedTx&&!n.sellSimulation&&r.push("prepareUnsignedTx without sellSimulation: cannot prove an asset is exitable before buying"),{ok:e.length===0,errors:e,warnings:r}}function at(t){let{ok:e,errors:r,warnings:n}=it(t);if(!e)throw new Error(`invalid scanner for ${t?.key??"<unknown>"}:
   - ${r.join(`
-  - `)}`);let a=t.capabilities||{},o=J.filter(l=>typeof a[l]=="function"),i={key:t.key,chainId:t.chainId,name:t.name,rpcEnv:[...t.rpcEnv],nativeCurrency:t.nativeCurrency?{...t.nativeCurrency}:null,wrappedNative:t.wrappedNative||null,explorer:t.explorer||null,venues:(t.venues||[]).map(l=>({...l})),warnings:n,capabilities(){return{chainId:t.chainId,key:t.key,supported:[...o],unsupported:J.filter(l=>!o.includes(l))}},supports(l){return o.includes(l)}};for(let l of J)o.includes(l)?i[l]=async(...c)=>a[l](...c,{scanner:i}):i[l]=async()=>{throw new Error(`${t.key} (chain ${t.chainId}) does not implement "${l}". Supported: ${o.join(", ")||"none"}. An unimplemented capability is absent, not assumed -- implement it or treat this chain as fail-closed for that operation.`)};return Object.freeze(i)}var G=new Map;function ce(t){let e=it(t);return G.set(e.chainId,e),e}function or(t){return G.get(Number(t))||null}function sr(){return[...G.values()]}function ar(){G.clear()}function ir(){let t={};for(let e of G.values())t[e.chainId]={key:e.key,name:e.name,...e.capabilities(),venueCount:e.venues.length,failClosed:e.venues.length===0};return{generatedAt:new Date().toISOString(),chainCount:G.size,capabilities:[...J],chains:t}}import{createHash as pt}from"node:crypto";import{types as D}from"node:util";import M from"node:net";import ct from"node:dns";var ut=new Set(["localhost","metadata.google.internal","metadata.goog"]);function te(t){let e=String(t).toLowerCase().split("%")[0];if((e.match(/::/g)||[]).length>1)return null;let r=s=>{if(!s)return[];let u=s.split(":"),p=u.at(-1);if(p?.includes(".")){let f=p.split(".").map(Number);if(f.length!==4||f.some(h=>!Number.isInteger(h)||h<0||h>255))return null;u.splice(u.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return u.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:u.map(f=>Number.parseInt(f,16))},[n,a]=e.split("::"),o=r(n),i=r(a);if(!o||!i)return null;let l=e.includes("::"),c=8-o.length-i.length;if(!l&&c!==0||l&&c<1)return null;let d=[...o,...Array(Math.max(0,c)).fill(0),...i];return d.length!==8?null:Uint8Array.from(d.flatMap(s=>[s>>8,s&255]))}function ue(t,e,r){let n=Math.floor(r/8),a=r%8;for(let i=0;i<n;i+=1)if(t[i]!==e[i])return!1;if(!a)return!0;let o=255<<8-a;return(t[n]&o)===(e[n]&o)}function le(t){if(M.isIPv4(t)){let e=t.split(".").map(Number);return!(e[0]===0||e[0]===10||e[0]===127||e[0]>=224||e[0]===100&&e[1]>=64&&e[1]<=127||e[0]===169&&e[1]===254||e[0]===172&&e[1]>=16&&e[1]<=31||e[0]===192&&(e[1]===0||e[1]===2||e[1]===168)||e[0]===192&&e[1]===88&&e[2]===99||e[0]===198&&(e[1]===18||e[1]===19||e[1]===51)||e[0]===203&&e[1]===0&&e[2]===113)}if(M.isIPv6(t)){let e=te(t);if(!e)return!1;let r=te("::ffff:0:0");return ue(e,r,96)?le([...e.slice(12)].join(".")):ue(e,te("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([a,o])=>ue(e,te(a),o)):!1}return!1}function lt(t){let e;try{e=new URL(String(t))}catch{return{ok:!1,error:`not a valid URL: ${String(t).slice(0,120)}`}}if(e.protocol!=="http:"&&e.protocol!=="https:")return{ok:!1,error:`refused protocol ${e.protocol} (only http/https)`};let r=e.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(ut.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=M.isIP(r);return n!==0&&!le(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:e,host:r,isLiteralIp:n!==0}}async function de(t,{lookupFn:e=ct.promises.lookup}={}){let r=lt(t);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:M.isIPv6(r.host)?6:4}]};let n;try{n=await e(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(a=>!le(a.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function pe({requireUndici:t=!1,importUndici:e=()=>import("undici")}={}){let r,n;try{let u=await e();r=u.Agent,n=u.fetch}catch(u){if(t)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${u?.message||u}`);return null}if(typeof r!="function"||typeof n!="function"){if(t)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let a=u=>String(u).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),o=new Map,i=u=>(Array.isArray(u)?u:[u]).map(p=>typeof p=="string"?{address:p}:p).filter(p=>p&&p.address).map(p=>({address:p.address,family:p.family||(M.isIPv6(p.address)?6:4)})),l=(u,p,f)=>{o.set(a(u),i(typeof p=="string"?[{address:p,family:f}]:p))},c=u=>{let p=a(u);if(M.isIP(p))return[{address:p,family:M.isIPv6(p)?6:4}];let f=o.get(p);if(!f||!f.length)throw new Error(`refused: unpinned host ${u} during pinned fetch`);return f},d=new r({connect:{lookup(u,p,f){let h;try{h=c(u)}catch(b){return f(b)}return p?.all?f(null,h):f(null,h[0].address,h[0].family)}}}),s=dt((u,p={})=>n(u,{...p,dispatcher:d}),l);return{dispatcher:d,fetch:s,pin:l,resolve:c,async close(){try{await d.destroy()}catch{}}}}var fe=Symbol.for("oracle.egressGuard.pinCapableFetch");function dt(t,e){if(typeof t!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof e!="function")throw new Error("markPinCapableFetch: pin must be a function");return t[fe]=Object.freeze({pin:e}),t}function he(t){return typeof t=="function"&&typeof t[fe]?.pin=="function"}function Ie(t,e,r){if(!he(t))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");t[fe].pin(e,r)}var ft=new Set([408,425,429,500,502,503,504]),Ne=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),ht=2,Oe=4e3,mt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,bt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,yt=AbortSignal.prototype.throwIfAborted,wt=EventTarget.prototype.addEventListener,ke=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,ye=t=>t?mt.call(t):!1,gt=t=>t?bt.call(t):void 0,vt=new Set([301,302,303,307,308]),ne=3,mr=64*1024,$=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function N(t){return j(`HTTP JSON body refused: ${t}`)}function Et(t){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(e=>typeof D[e]=="function"&&D[e](t))}function St(t){let e=[],r=0,n=0,a=0,o=0,i=new WeakSet,l=s=>{if(r+=Buffer.byteLength(s,"utf8"),r>$.bytes)throw N("serialized byte limit exceeded");e.push(s)},c=s=>{if(Buffer.byteLength(s,"utf8")>$.bytes)throw N("serialized byte limit exceeded");return JSON.stringify(s)},d=(s,u)=>{if(n+=1,n>$.nodes)throw N("node limit exceeded");if(u>$.depth)throw N("depth limit exceeded");if(s===null){l("null");return}if(typeof s=="string"){l(c(s));return}if(typeof s=="boolean"){l(s?"true":"false");return}if(typeof s=="number"){if(!Number.isFinite(s))throw N("non-finite number");l(Object.is(s,-0)?"0":String(s));return}if(typeof s!="object")throw N("unsupported non-JSON value");if(D.isProxy(s))throw N("proxy value");if(Et(s))throw N("unsupported exotic object");if(i.has(s))throw N("cyclic value");i.add(s);try{if(Object.getOwnPropertySymbols(s).length>0)throw N("symbol-keyed fields are unsupported");if(Array.isArray(s)){let h=Object.getPrototypeOf(s),b=0;for(;h!==null;){if(D.isProxy(h))throw N("proxy array prototype");if(b+=1,b>$.depth)throw N("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(s.length>$.arrayLength)throw N("array length limit exceeded");for(let C=0;C<s.length;C+=1){let P=Object.getOwnPropertyDescriptor(s,String(C));if(!P||!Object.hasOwn(P,"value")||P.enumerable!==!0)throw N("array entries must be dense enumerable own data")}let w=0;for(let C in s){if(o+=1,o>$.fields)throw N("enumeration limit exceeded");if(Object.hasOwn(s,C)&&(w+=1,w>s.length))throw N("named array fields are unsupported")}if(w!==s.length)throw N("array entries must be dense enumerable own data");l("[");for(let C=0;C<s.length;C+=1)C&&l(","),d(Object.getOwnPropertyDescriptor(s,String(C)).value,u+1);l("]");return}let p=Object.getPrototypeOf(s);if(p!==Object.prototype&&p!==null)throw N("non-plain object");let f=[];for(let h in s){if(o+=1,o>$.fields)throw N("enumeration limit exceeded");if(!Object.hasOwn(s,h))continue;if(a+=1,a>$.fields)throw N("field limit exceeded");let b=Object.getOwnPropertyDescriptor(s,h);if(!b||!Object.hasOwn(b,"value")||b.enumerable!==!0)throw N("object fields must be enumerable own data");f.push([h,b.value])}l("{");for(let h=0;h<f.length;h+=1)h&&l(","),l(c(f[h][0])),l(":"),d(f[h][1],u+1);l("}")}finally{i.delete(s)}};return d(t,0),e.join("")}function At(t){let e=Object.create(null);if(t==null)return e;if(typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP headers must be an object");if(D.isProxy(t))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(t)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let a=n.toLowerCase();if(r.has(a))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(a);let o=Object.getOwnPropertyDescriptor(t,n);if(!o||!Object.hasOwn(o,"value"))throw new TypeError("HTTP headers must contain own data properties");let i=o.value;if(i==null||["object","function","symbol"].includes(typeof i))throw new TypeError("HTTP header values must be scalar");e[n]=String(i)}return e}function xt(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Ct(t,e){if(!t)throw new Error(`HTTP redirect from ${e} missing Location`);let r=new URL(String(t),String(e));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${e} used unsupported protocol ${r.protocol}`);return r.toString()}function Tt(t,e){return new URL(String(t)).origin===new URL(String(e)).origin}var me=new Map,Pe=new WeakMap,Re=1;function re(t){if((typeof t!="object"||t===null)&&typeof t!="function")return`${typeof t}:${String(t)}`;let e=Pe.get(t);return e||(e=Re,Re+=1,Pe.set(t,e)),`reference:${e}`}var It=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Nt=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Le(t){if(!t||typeof t!="object"||Array.isArray(t)||!Object.hasOwn(t,"jsonrpc")||!Object.hasOwn(t,"method")||t.jsonrpc!=="2.0")return!1;let e=typeof t.method=="string"?t.method:"";return e?It.has(e)||/^get[A-Z0-9_]/u.test(e)||/^is[A-Z0-9_]/u.test(e)||/^eth_get[A-Z0-9_]/u.test(e):!1}function _e(t,e){if(t==="GET"&&e==null)return!0;if(t!=="POST"||e==null)return!1;let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Le);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Le(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&Nt.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function Ot(t,e,r,n={},a=null){let o=pt("sha256"),i=(c,d)=>{let s=String(d);o.update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c),o.update("=").update(String(Buffer.byteLength(s,"utf8"))).update(":").update(s).update(`
-`)};i("method",t),i("url",e),Object.keys(r||{}).map((c,d)=>({name:c.toLowerCase(),order:d,value:String(r[c])})).sort((c,d)=>c.name.localeCompare(d.name)||c.order-d.order).forEach((c,d)=>{i(`header-name-${d}`,c.name),i(`header-value-${d}`,c.value)}),i("body",a??"-");for(let c of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])i(`context-${c}`,n[c]??"-");return o.digest("hex")}function kt(t,e){let r=Number(e);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Oe):Math.min(250*2**t,Oe)+Math.floor(Math.random()*100)}var Pt=t=>new Promise(e=>setTimeout(e,t));function j(t,e={}){let r=new Error(t);return r.retryable=!1,Object.assign(r,e),r}function be(t,e,r){return j(`HTTP response from ${t} exceeded maxResponseBytes ${r} (${e})`,{oversize:!0})}function z(t){try{let e=t?.body?.cancel?.();e&&typeof e.then=="function"&&e.catch(()=>{})}catch{}}function Rt(t){return t?t.byteLength??t.length??0:0}async function Lt(t,e,{url:r,truncate:n=!1,onOversize:a}={}){if(e==null)return await t.text();let o=Number(t.headers?.get?.("content-length"));if(Number.isFinite(o)&&o>e&&(z(t),!n))throw be(r,`content-length ${o}`,e);let i=t.body?.getReader?.();if(!i){let u=await t.text(),p=Buffer.byteLength(u,"utf8");if(p>e){if(!n)throw be(r,`body ${p} bytes`,e);return Buffer.from(u,"utf8").subarray(0,e).toString("utf8")}return u}let l=[],c=0,d=!1;try{for(;;){let{value:u,done:p}=await i.read();if(p)break;if(u&&(l.push(Buffer.from(u)),c+=Rt(u),c>e)){d=!0;break}}}finally{if(d)try{await i.cancel()}catch{}try{i.releaseLock?.()}catch{}}if(d&&(typeof a=="function"&&a(),!n))throw be(r,`streamed ${c} bytes`,e);let s=Buffer.concat(l);return(d?s.subarray(0,e):s).toString("utf8")}function _t(t){if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Ut(t,{fetchImpl:e,method:r,headers:n,body:a,timeoutMs:o,lookupFn:i,realFetch:l,untrustedUrl:c=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:s=!1,importUndici:u,validateResponse:p,signal:f,redirectPolicy:h="follow",maxRedirects:b=ne}){let w=new AbortController,C=setTimeout(()=>w.abort(),o),P=f?ke?ke([f,w.signal]):f:w.signal,S=null,R=e,O=i?{lookupFn:i}:{};if(c&&!l&&!he(R))throw j(`HTTP refused ${t}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let A=async(v,{status:x=null}={})=>{let E=await de(v,O);if(!E.ok)throw j(x==null?`HTTP refused ${v}: ${E.error}`:`HTTP redirect to ${v} ${E.error}`,x==null?{}:{status:x});let L=new URL(v).hostname;if(l){if(S&&(await S.close(),S=null),!S)try{S=await pe({requireUndici:!0,...u?{importUndici:u}:{}})}catch(m){throw j(x==null?`HTTP refused ${v}: ${m?.message||m}`:`HTTP redirect to ${v} refused: ${m?.message||m}`,x==null?{}:{status:x})}S.pin(L,E.addresses),R=S.fetch}else Ie(R,L,E.addresses);return E};try{let v=String(t),x=Object.assign(Object.create(null),n||{});c&&await A(v);for(let E=0;E<=b;E+=1){let L=Object.assign(Object.create(null),{method:r,headers:x,body:a,signal:P,redirect:"manual",dispatcher:void 0}),m=await R(v,L);if((h==="error"||b===0)&&m.status>=300&&m.status<400)throw z(m),j(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(vt.has(m.status)){let U=s===!0&&r==="POST"&&[307,308].includes(m.status)&&_e(r,a);if(r!=="GET"&&r!=="HEAD"&&!U){z(m);let k=new Error(`HTTP ${m.status} ${r} ${v} redirected non-idempotent request`);throw k.status=m.status,k}if(E===b)throw z(m),j(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let Ce=m.headers?.get?.("location"),B;try{B=Ct(Ce,v)}catch(k){throw z(m),k}let H=!Tt(B,v);if(z(m),H&&r==="POST"){let k=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw k.status=m.status,k}if(H&&s){let k=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw k.status=m.status,k.retryable=!1,k}if(H&&(x=xt(x)),c)await A(B,{status:m.status});else if(H){let k=await de(B,O);if(!k.ok){let I=new Error(`HTTP redirect from ${v} ${k.error}`);throw I.status=m.status,I.retryable=!1,I}l&&k.addresses?.length&&(S||(S=await pe(u?{importUndici:u}:{})),S&&(S.pin(new URL(B).hostname,k.addresses),R=S.fetch))}v=B;continue}if(typeof p=="function")try{await p(m,{url:v})}catch(U){throw z(m),j(U?.message||String(U))}let _=await Lt(m,d,{url:v,onOversize:()=>w.abort()}),Q=_t(_);if(!m.ok){let U=new Error(`HTTP ${m.status} ${r} ${v}`);throw U.status=m.status,U.retryAfter=m.headers?.get?.("retry-after")??null,U.body=Q??_.slice(0,300),U}return Q??_}throw new Error(`HTTP redirect loop for ${t}`)}catch(v){if(w.signal.aborted&&!ye(f)){let x=v&&(typeof v=="object"||typeof v=="function")&&!D.isProxy(v)?v:null,E=x?Object.getOwnPropertyDescriptor(x,"oversize"):null;if(!(E&&Object.hasOwn(E,"value")&&E.value===!0))try{if(!x)throw new TypeError("unsafe rejection");Object.defineProperties(x,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw v}finally{clearTimeout(C),S&&await S.close()}}async function oe(t,e={}){if(e!=null&&typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP options must be an object");if(e!=null&&D.isProxy(e))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(e!=null){if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP options contain unknown fields");for(let I of Object.getOwnPropertyNames(e)){let T=Object.getOwnPropertyDescriptor(e,I);if(!(I==="toJSON"&&T&&Object.hasOwn(T,"value")&&T.value===void 0)){if(!r.has(I))throw new TypeError("HTTP options contain unknown fields");if(!T||!T.enumerable||!Object.hasOwn(T,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=I=>{if(e==null||!Object.hasOwn(e,I))return;let T=Object.getOwnPropertyDescriptor(e,I);if(!T||!Object.hasOwn(T,"value"))throw new TypeError("HTTP options must contain own data properties");return T.value};if(typeof t!="string"||t.length===0||t.length>8192)throw new TypeError("HTTP URL must be a bounded string");let a=n("method");if(a!==void 0&&(typeof a!="string"||!/^[A-Za-z]+$/u.test(a)))throw new TypeError("HTTP method must be a string token");let o=n("timeoutMs");if(o!==void 0&&(!Number.isInteger(o)||o<1||o>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let i=n("retries");if(i!==void 0&&(!Number.isInteger(i)||i<0||i>10))throw new TypeError("HTTP retries must be a bounded integer");let l=n("redirectPolicy");if(l!==void 0&&l!=="follow"&&l!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let c=n("maxRedirects");if(c!==void 0&&(!Number.isInteger(c)||c<0||c>ne))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ne}`);if(l==="error"&&c!==void 0&&c!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=l??"follow",s=d==="error"?0:c??ne;for(let I of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let T=n(I);if(T!==void 0&&typeof T!="boolean")throw new TypeError(`HTTP ${I} must be boolean`)}let u=n("maxResponseBytes");if(u!==void 0&&(!Number.isInteger(u)||u<1||u>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=n("signal");if(p!==void 0){if(D.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{ye(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let I of["importUndici","lookupFn","validateResponse"]){let T=n(I);if(T!==void 0&&typeof T!="function")throw new TypeError(`HTTP ${I} must be a function`)}let f=n("fetchImpl"),h=f||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let b=o??12e3,w=(a||"GET").toUpperCase(),C=n("headers"),P=At(C),S=Object.assign(Object.create(null),P);Object.keys(S).some(I=>I.toLowerCase()==="accept")||(S.Accept="application/json");let R=n("body");R!=null&&typeof R!="string"&&(Object.keys(S).find(T=>T.toLowerCase()==="content-type")||(S["Content-Type"]="application/json"),R=St(R));let O=i??ht,A=n("lookupFn"),v=!f,x=n("untrustedUrl")===!0,E=n("sameOriginRedirectsOnly")===!0,L=n("importUndici"),m=n("validateResponse"),_=p,Q=u??null,U=async()=>{let I;for(let T=0;T<=O;T++){_&&yt.call(_);try{return await Ut(t,{fetchImpl:h,method:w,headers:S,body:R,timeoutMs:b,lookupFn:A,realFetch:v,untrustedUrl:x,maxResponseBytes:Q,sameOriginRedirectsOnly:E,importUndici:L,validateResponse:m,signal:_,redirectPolicy:d,maxRedirects:s})}catch(V){I=V;let K=ie=>{if(!V||typeof V!="object"&&typeof V!="function"||D.isProxy(V))return;let Y=Object.getOwnPropertyDescriptor(V,ie);return Y&&Object.hasOwn(Y,"value")?Y.value:void 0},ae=K("status"),tt=K("oracleTimeout")===!0||K("name")==="AbortError"||K("name")==="TimeoutError"||ye(_),rt=new Set([408,425,429]),nt=K("retryable")===!1?!1:ae!=null?rt.has(ae)||ft.has(ae)&&Ne.has(w):!tt&&Ne.has(w);if(T===O||!nt)throw V;let Te=kt(T,K("retryAfter"));_?await new Promise((ie,Y)=>{let ot=setTimeout(ie,Te);wt.call(_,"abort",()=>{clearTimeout(ot),Y(gt(_)||new DOMException("Aborted","AbortError"))},{once:!0})}):await Pt(Te)}}throw I};if(!(n("dedupe")!==!1&&!_&&_e(w,R)))return U();let B=Ot(w,t,S,{untrustedUrl:x,maxResponseBytes:Q,sameOriginRedirectsOnly:E,redirectPolicy:d,maxRedirects:s,timeoutMs:b,retries:O,fetchImpl:re(h),realFetch:v,lookupFn:re(A),importUndici:re(L),validateResponse:re(m)},R),H=me.get(B);if(H)return H;let k=U().finally(()=>me.delete(B));return me.set(B,k),k}async function Ue(t,e,r){let n=Array.from(t),a=Math.max(1,Math.min(Number(e)||1,n.length||1)),o=new Array(n.length),i=0;return await Promise.all(Array.from({length:a},async()=>{for(;i<n.length;){let l=i++;o[l]=await r(n[l],l)}})),o}var qe={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},qt=new Map(Object.values(qe).map(t=>[t.chainId,t]));function Be(t){return qt.get(Number(t))||null}function Fe(t,e=process.env){let r=Be(t);if(!r)return null;for(let n of r.rpcEnv){let a=(e[n]||"").trim();if(a)return a}return null}import{Interface as Bt,getAddress as Ft}from"ethers";var $e=new Bt(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function De(t,e){try{return Ft(t).toLowerCase()}catch{throw new Error(`${e} must be a valid EVM address`)}}var $t={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Dt(t,{rpcUrl:e,env:r=process.env}={}){if(e)return e;let n=Fe(t,r);return n||$t[Number(t)]||null}var jt=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Ht(t){let e=String(t||""),r=e.toLowerCase();if(e!==e.trim()||!/^[a-zA-Z0-9_]+$/.test(e)||!jt.test(r))throw new Error(`evm-rpc: ${e} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var X=new Map,je=new Map;function Vt(t){let e=new Error(t?.message||JSON.stringify(t));return e.code=t?.code,e}function Mt(t){if(t?.error)throw Vt(t.error);return t?.result}function zt(t,e,r){return`${t}
+  - `)}`);let i=t.capabilities||{},o=J.filter(l=>typeof i[l]=="function"),a={key:t.key,chainId:t.chainId,name:t.name,rpcEnv:[...t.rpcEnv],nativeCurrency:t.nativeCurrency?{...t.nativeCurrency}:null,wrappedNative:t.wrappedNative||null,explorer:t.explorer||null,venues:(t.venues||[]).map(l=>({...l})),warnings:n,capabilities(){return{chainId:t.chainId,key:t.key,supported:[...o],unsupported:J.filter(l=>!o.includes(l))}},supports(l){return o.includes(l)}};for(let l of J)o.includes(l)?a[l]=async(...c)=>i[l](...c,{scanner:a}):a[l]=async()=>{throw new Error(`${t.key} (chain ${t.chainId}) does not implement "${l}". Supported: ${o.join(", ")||"none"}. An unimplemented capability is absent, not assumed -- implement it or treat this chain as fail-closed for that operation.`)};return Object.freeze(a)}var G=new Map;function ce(t){let e=at(t);return G.set(e.chainId,e),e}function ir(t){return G.get(Number(t))||null}function ar(){return[...G.values()]}function cr(){G.clear()}function ur(){let t={};for(let e of G.values())t[e.chainId]={key:e.key,name:e.name,...e.capabilities(),venueCount:e.venues.length,failClosed:e.venues.length===0};return{generatedAt:new Date().toISOString(),chainCount:G.size,capabilities:[...J],chains:t}}import{createHash as pt}from"node:crypto";import{types as D}from"node:util";import M from"node:net";import ct from"node:dns";var ut=new Set(["localhost","metadata.google.internal","metadata.goog"]);function te(t){let e=String(t).toLowerCase().split("%")[0];if((e.match(/::/g)||[]).length>1)return null;let r=s=>{if(!s)return[];let u=s.split(":"),p=u.at(-1);if(p?.includes(".")){let f=p.split(".").map(Number);if(f.length!==4||f.some(h=>!Number.isInteger(h)||h<0||h>255))return null;u.splice(u.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return u.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:u.map(f=>Number.parseInt(f,16))},[n,i]=e.split("::"),o=r(n),a=r(i);if(!o||!a)return null;let l=e.includes("::"),c=8-o.length-a.length;if(!l&&c!==0||l&&c<1)return null;let d=[...o,...Array(Math.max(0,c)).fill(0),...a];return d.length!==8?null:Uint8Array.from(d.flatMap(s=>[s>>8,s&255]))}function ue(t,e,r){let n=Math.floor(r/8),i=r%8;for(let a=0;a<n;a+=1)if(t[a]!==e[a])return!1;if(!i)return!0;let o=255<<8-i;return(t[n]&o)===(e[n]&o)}function le(t){if(M.isIPv4(t)){let e=t.split(".").map(Number);return!(e[0]===0||e[0]===10||e[0]===127||e[0]>=224||e[0]===100&&e[1]>=64&&e[1]<=127||e[0]===169&&e[1]===254||e[0]===172&&e[1]>=16&&e[1]<=31||e[0]===192&&(e[1]===0||e[1]===2||e[1]===168)||e[0]===192&&e[1]===88&&e[2]===99||e[0]===198&&(e[1]===18||e[1]===19||e[1]===51)||e[0]===203&&e[1]===0&&e[2]===113)}if(M.isIPv6(t)){let e=te(t);if(!e)return!1;let r=te("::ffff:0:0");return ue(e,r,96)?le([...e.slice(12)].join(".")):ue(e,te("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([i,o])=>ue(e,te(i),o)):!1}return!1}function lt(t){let e;try{e=new URL(String(t))}catch{return{ok:!1,error:`not a valid URL: ${String(t).slice(0,120)}`}}if(e.protocol!=="http:"&&e.protocol!=="https:")return{ok:!1,error:`refused protocol ${e.protocol} (only http/https)`};let r=e.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(ut.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=M.isIP(r);return n!==0&&!le(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:e,host:r,isLiteralIp:n!==0}}async function de(t,{lookupFn:e=ct.promises.lookup}={}){let r=lt(t);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:M.isIPv6(r.host)?6:4}]};let n;try{n=await e(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(i=>!le(i.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function pe({requireUndici:t=!1,importUndici:e=()=>import("undici")}={}){let r,n;try{let u=await e();r=u.Agent,n=u.fetch}catch(u){if(t)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${u?.message||u}`);return null}if(typeof r!="function"||typeof n!="function"){if(t)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let i=u=>String(u).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),o=new Map,a=u=>(Array.isArray(u)?u:[u]).map(p=>typeof p=="string"?{address:p}:p).filter(p=>p&&p.address).map(p=>({address:p.address,family:p.family||(M.isIPv6(p.address)?6:4)})),l=(u,p,f)=>{o.set(i(u),a(typeof p=="string"?[{address:p,family:f}]:p))},c=u=>{let p=i(u);if(M.isIP(p))return[{address:p,family:M.isIPv6(p)?6:4}];let f=o.get(p);if(!f||!f.length)throw new Error(`refused: unpinned host ${u} during pinned fetch`);return f},d=new r({connect:{lookup(u,p,f){let h;try{h=c(u)}catch(b){return f(b)}return p?.all?f(null,h):f(null,h[0].address,h[0].family)}}}),s=dt((u,p={})=>n(u,{...p,dispatcher:d}),l);return{dispatcher:d,fetch:s,pin:l,resolve:c,async close(){try{await d.destroy()}catch{}}}}var fe=Symbol.for("oracle.egressGuard.pinCapableFetch");function dt(t,e){if(typeof t!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof e!="function")throw new Error("markPinCapableFetch: pin must be a function");return t[fe]=Object.freeze({pin:e}),t}function he(t){return typeof t=="function"&&typeof t[fe]?.pin=="function"}function Ie(t,e,r){if(!he(t))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");t[fe].pin(e,r)}var ft=new Set([408,425,429,500,502,503,504]),Ne=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),ht=2,Oe=4e3,mt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,bt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,yt=AbortSignal.prototype.throwIfAborted,wt=EventTarget.prototype.addEventListener,ke=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,ye=t=>t?mt.call(t):!1,gt=t=>t?bt.call(t):void 0,vt=new Set([301,302,303,307,308]),ne=3,yr=64*1024,$=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function N(t){return j(`HTTP JSON body refused: ${t}`)}function Et(t){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(e=>typeof D[e]=="function"&&D[e](t))}function St(t){let e=[],r=0,n=0,i=0,o=0,a=new WeakSet,l=s=>{if(r+=Buffer.byteLength(s,"utf8"),r>$.bytes)throw N("serialized byte limit exceeded");e.push(s)},c=s=>{if(Buffer.byteLength(s,"utf8")>$.bytes)throw N("serialized byte limit exceeded");return JSON.stringify(s)},d=(s,u)=>{if(n+=1,n>$.nodes)throw N("node limit exceeded");if(u>$.depth)throw N("depth limit exceeded");if(s===null){l("null");return}if(typeof s=="string"){l(c(s));return}if(typeof s=="boolean"){l(s?"true":"false");return}if(typeof s=="number"){if(!Number.isFinite(s))throw N("non-finite number");l(Object.is(s,-0)?"0":String(s));return}if(typeof s!="object")throw N("unsupported non-JSON value");if(D.isProxy(s))throw N("proxy value");if(Et(s))throw N("unsupported exotic object");if(a.has(s))throw N("cyclic value");a.add(s);try{if(Object.getOwnPropertySymbols(s).length>0)throw N("symbol-keyed fields are unsupported");if(Array.isArray(s)){let h=Object.getPrototypeOf(s),b=0;for(;h!==null;){if(D.isProxy(h))throw N("proxy array prototype");if(b+=1,b>$.depth)throw N("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(s.length>$.arrayLength)throw N("array length limit exceeded");for(let C=0;C<s.length;C+=1){let P=Object.getOwnPropertyDescriptor(s,String(C));if(!P||!Object.hasOwn(P,"value")||P.enumerable!==!0)throw N("array entries must be dense enumerable own data")}let w=0;for(let C in s){if(o+=1,o>$.fields)throw N("enumeration limit exceeded");if(Object.hasOwn(s,C)&&(w+=1,w>s.length))throw N("named array fields are unsupported")}if(w!==s.length)throw N("array entries must be dense enumerable own data");l("[");for(let C=0;C<s.length;C+=1)C&&l(","),d(Object.getOwnPropertyDescriptor(s,String(C)).value,u+1);l("]");return}let p=Object.getPrototypeOf(s);if(p!==Object.prototype&&p!==null)throw N("non-plain object");let f=[];for(let h in s){if(o+=1,o>$.fields)throw N("enumeration limit exceeded");if(!Object.hasOwn(s,h))continue;if(i+=1,i>$.fields)throw N("field limit exceeded");let b=Object.getOwnPropertyDescriptor(s,h);if(!b||!Object.hasOwn(b,"value")||b.enumerable!==!0)throw N("object fields must be enumerable own data");f.push([h,b.value])}l("{");for(let h=0;h<f.length;h+=1)h&&l(","),l(c(f[h][0])),l(":"),d(f[h][1],u+1);l("}")}finally{a.delete(s)}};return d(t,0),e.join("")}function At(t){let e=Object.create(null);if(t==null)return e;if(typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP headers must be an object");if(D.isProxy(t))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(t)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let i=n.toLowerCase();if(r.has(i))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(i);let o=Object.getOwnPropertyDescriptor(t,n);if(!o||!Object.hasOwn(o,"value"))throw new TypeError("HTTP headers must contain own data properties");let a=o.value;if(a==null||["object","function","symbol"].includes(typeof a))throw new TypeError("HTTP header values must be scalar");e[n]=String(a)}return e}function xt(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Ct(t,e){if(!t)throw new Error(`HTTP redirect from ${e} missing Location`);let r=new URL(String(t),String(e));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${e} used unsupported protocol ${r.protocol}`);return r.toString()}function Tt(t,e){return new URL(String(t)).origin===new URL(String(e)).origin}var me=new Map,Pe=new WeakMap,Re=1;function re(t){if((typeof t!="object"||t===null)&&typeof t!="function")return`${typeof t}:${String(t)}`;let e=Pe.get(t);return e||(e=Re,Re+=1,Pe.set(t,e)),`reference:${e}`}var It=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Nt=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Le(t){if(!t||typeof t!="object"||Array.isArray(t)||!Object.hasOwn(t,"jsonrpc")||!Object.hasOwn(t,"method")||t.jsonrpc!=="2.0")return!1;let e=typeof t.method=="string"?t.method:"";return e?It.has(e)||/^get[A-Z0-9_]/u.test(e)||/^is[A-Z0-9_]/u.test(e)||/^eth_get[A-Z0-9_]/u.test(e):!1}function _e(t,e){if(t==="GET"&&e==null)return!0;if(t!=="POST"||e==null)return!1;let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Le);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Le(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&Nt.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function Ot(t,e,r,n={},i=null){let o=pt("sha256"),a=(c,d)=>{let s=String(d);o.update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c),o.update("=").update(String(Buffer.byteLength(s,"utf8"))).update(":").update(s).update(`
+`)};a("method",t),a("url",e),Object.keys(r||{}).map((c,d)=>({name:c.toLowerCase(),order:d,value:String(r[c])})).sort((c,d)=>c.name.localeCompare(d.name)||c.order-d.order).forEach((c,d)=>{a(`header-name-${d}`,c.name),a(`header-value-${d}`,c.value)}),a("body",i??"-");for(let c of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])a(`context-${c}`,n[c]??"-");return o.digest("hex")}function kt(t,e){let r=Number(e);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Oe):Math.min(250*2**t,Oe)+Math.floor(Math.random()*100)}var Pt=t=>new Promise(e=>setTimeout(e,t));function j(t,e={}){let r=new Error(t);return r.retryable=!1,Object.assign(r,e),r}function be(t,e,r){return j(`HTTP response from ${t} exceeded maxResponseBytes ${r} (${e})`,{oversize:!0})}function z(t){try{let e=t?.body?.cancel?.();e&&typeof e.then=="function"&&e.catch(()=>{})}catch{}}function Rt(t){return t?t.byteLength??t.length??0:0}async function Lt(t,e,{url:r,truncate:n=!1,onOversize:i}={}){if(e==null)return await t.text();let o=Number(t.headers?.get?.("content-length"));if(Number.isFinite(o)&&o>e&&(z(t),!n))throw be(r,`content-length ${o}`,e);let a=t.body?.getReader?.();if(!a){let u=await t.text(),p=Buffer.byteLength(u,"utf8");if(p>e){if(!n)throw be(r,`body ${p} bytes`,e);return Buffer.from(u,"utf8").subarray(0,e).toString("utf8")}return u}let l=[],c=0,d=!1;try{for(;;){let{value:u,done:p}=await a.read();if(p)break;if(u&&(l.push(Buffer.from(u)),c+=Rt(u),c>e)){d=!0;break}}}finally{if(d)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(d&&(typeof i=="function"&&i(),!n))throw be(r,`streamed ${c} bytes`,e);let s=Buffer.concat(l);return(d?s.subarray(0,e):s).toString("utf8")}function _t(t){if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Ut(t,{fetchImpl:e,method:r,headers:n,body:i,timeoutMs:o,lookupFn:a,realFetch:l,untrustedUrl:c=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:s=!1,importUndici:u,validateResponse:p,signal:f,redirectPolicy:h="follow",maxRedirects:b=ne}){let w=new AbortController,C=setTimeout(()=>w.abort(),o),P=f?ke?ke([f,w.signal]):f:w.signal,S=null,R=e,O=a?{lookupFn:a}:{};if(c&&!l&&!he(R))throw j(`HTTP refused ${t}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let A=async(v,{status:x=null}={})=>{let E=await de(v,O);if(!E.ok)throw j(x==null?`HTTP refused ${v}: ${E.error}`:`HTTP redirect to ${v} ${E.error}`,x==null?{}:{status:x});let L=new URL(v).hostname;if(l){if(S&&(await S.close(),S=null),!S)try{S=await pe({requireUndici:!0,...u?{importUndici:u}:{}})}catch(m){throw j(x==null?`HTTP refused ${v}: ${m?.message||m}`:`HTTP redirect to ${v} refused: ${m?.message||m}`,x==null?{}:{status:x})}S.pin(L,E.addresses),R=S.fetch}else Ie(R,L,E.addresses);return E};try{let v=String(t),x=Object.assign(Object.create(null),n||{});c&&await A(v);for(let E=0;E<=b;E+=1){let L=Object.assign(Object.create(null),{method:r,headers:x,body:i,signal:P,redirect:"manual",dispatcher:void 0}),m=await R(v,L);if((h==="error"||b===0)&&m.status>=300&&m.status<400)throw z(m),j(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(vt.has(m.status)){let U=s===!0&&r==="POST"&&[307,308].includes(m.status)&&_e(r,i);if(r!=="GET"&&r!=="HEAD"&&!U){z(m);let k=new Error(`HTTP ${m.status} ${r} ${v} redirected non-idempotent request`);throw k.status=m.status,k}if(E===b)throw z(m),j(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let Ce=m.headers?.get?.("location"),B;try{B=Ct(Ce,v)}catch(k){throw z(m),k}let H=!Tt(B,v);if(z(m),H&&r==="POST"){let k=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw k.status=m.status,k}if(H&&s){let k=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw k.status=m.status,k.retryable=!1,k}if(H&&(x=xt(x)),c)await A(B,{status:m.status});else if(H){let k=await de(B,O);if(!k.ok){let I=new Error(`HTTP redirect from ${v} ${k.error}`);throw I.status=m.status,I.retryable=!1,I}l&&k.addresses?.length&&(S||(S=await pe(u?{importUndici:u}:{})),S&&(S.pin(new URL(B).hostname,k.addresses),R=S.fetch))}v=B;continue}if(typeof p=="function")try{await p(m,{url:v})}catch(U){throw z(m),j(U?.message||String(U))}let _=await Lt(m,d,{url:v,onOversize:()=>w.abort()}),Q=_t(_);if(!m.ok){let U=new Error(`HTTP ${m.status} ${r} ${v}`);throw U.status=m.status,U.retryAfter=m.headers?.get?.("retry-after")??null,U.body=Q??_.slice(0,300),U}return Q??_}throw new Error(`HTTP redirect loop for ${t}`)}catch(v){if(w.signal.aborted&&!ye(f)){let x=v&&(typeof v=="object"||typeof v=="function")&&!D.isProxy(v)?v:null,E=x?Object.getOwnPropertyDescriptor(x,"oversize"):null;if(!(E&&Object.hasOwn(E,"value")&&E.value===!0))try{if(!x)throw new TypeError("unsafe rejection");Object.defineProperties(x,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw v}finally{clearTimeout(C),S&&await S.close()}}async function oe(t,e={}){if(e!=null&&typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP options must be an object");if(e!=null&&D.isProxy(e))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(e!=null){if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP options contain unknown fields");for(let I of Object.getOwnPropertyNames(e)){let T=Object.getOwnPropertyDescriptor(e,I);if(!(I==="toJSON"&&T&&Object.hasOwn(T,"value")&&T.value===void 0)){if(!r.has(I))throw new TypeError("HTTP options contain unknown fields");if(!T||!T.enumerable||!Object.hasOwn(T,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=I=>{if(e==null||!Object.hasOwn(e,I))return;let T=Object.getOwnPropertyDescriptor(e,I);if(!T||!Object.hasOwn(T,"value"))throw new TypeError("HTTP options must contain own data properties");return T.value};if(typeof t!="string"||t.length===0||t.length>8192)throw new TypeError("HTTP URL must be a bounded string");let i=n("method");if(i!==void 0&&(typeof i!="string"||!/^[A-Za-z]+$/u.test(i)))throw new TypeError("HTTP method must be a string token");let o=n("timeoutMs");if(o!==void 0&&(!Number.isInteger(o)||o<1||o>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let a=n("retries");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>10))throw new TypeError("HTTP retries must be a bounded integer");let l=n("redirectPolicy");if(l!==void 0&&l!=="follow"&&l!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let c=n("maxRedirects");if(c!==void 0&&(!Number.isInteger(c)||c<0||c>ne))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ne}`);if(l==="error"&&c!==void 0&&c!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=l??"follow",s=d==="error"?0:c??ne;for(let I of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let T=n(I);if(T!==void 0&&typeof T!="boolean")throw new TypeError(`HTTP ${I} must be boolean`)}let u=n("maxResponseBytes");if(u!==void 0&&(!Number.isInteger(u)||u<1||u>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=n("signal");if(p!==void 0){if(D.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{ye(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let I of["importUndici","lookupFn","validateResponse"]){let T=n(I);if(T!==void 0&&typeof T!="function")throw new TypeError(`HTTP ${I} must be a function`)}let f=n("fetchImpl"),h=f||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let b=o??12e3,w=(i||"GET").toUpperCase(),C=n("headers"),P=At(C),S=Object.assign(Object.create(null),P);Object.keys(S).some(I=>I.toLowerCase()==="accept")||(S.Accept="application/json");let R=n("body");R!=null&&typeof R!="string"&&(Object.keys(S).find(T=>T.toLowerCase()==="content-type")||(S["Content-Type"]="application/json"),R=St(R));let O=a??ht,A=n("lookupFn"),v=!f,x=n("untrustedUrl")===!0,E=n("sameOriginRedirectsOnly")===!0,L=n("importUndici"),m=n("validateResponse"),_=p,Q=u??null,U=async()=>{let I;for(let T=0;T<=O;T++){_&&yt.call(_);try{return await Ut(t,{fetchImpl:h,method:w,headers:S,body:R,timeoutMs:b,lookupFn:A,realFetch:v,untrustedUrl:x,maxResponseBytes:Q,sameOriginRedirectsOnly:E,importUndici:L,validateResponse:m,signal:_,redirectPolicy:d,maxRedirects:s})}catch(V){I=V;let K=ae=>{if(!V||typeof V!="object"&&typeof V!="function"||D.isProxy(V))return;let Y=Object.getOwnPropertyDescriptor(V,ae);return Y&&Object.hasOwn(Y,"value")?Y.value:void 0},ie=K("status"),tt=K("oracleTimeout")===!0||K("name")==="AbortError"||K("name")==="TimeoutError"||ye(_),rt=new Set([408,425,429]),nt=K("retryable")===!1?!1:ie!=null?rt.has(ie)||ft.has(ie)&&Ne.has(w):!tt&&Ne.has(w);if(T===O||!nt)throw V;let Te=kt(T,K("retryAfter"));_?await new Promise((ae,Y)=>{let ot=setTimeout(ae,Te);wt.call(_,"abort",()=>{clearTimeout(ot),Y(gt(_)||new DOMException("Aborted","AbortError"))},{once:!0})}):await Pt(Te)}}throw I};if(!(n("dedupe")!==!1&&!_&&_e(w,R)))return U();let B=Ot(w,t,S,{untrustedUrl:x,maxResponseBytes:Q,sameOriginRedirectsOnly:E,redirectPolicy:d,maxRedirects:s,timeoutMs:b,retries:O,fetchImpl:re(h),realFetch:v,lookupFn:re(A),importUndici:re(L),validateResponse:re(m)},R),H=me.get(B);if(H)return H;let k=U().finally(()=>me.delete(B));return me.set(B,k),k}async function Ue(t,e,r){let n=Array.from(t),i=Math.max(1,Math.min(Number(e)||1,n.length||1)),o=new Array(n.length),a=0;return await Promise.all(Array.from({length:i},async()=>{for(;a<n.length;){let l=a++;o[l]=await r(n[l],l)}})),o}var qe={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},qt=new Map(Object.values(qe).map(t=>[t.chainId,t]));function Be(t){return qt.get(Number(t))||null}function Fe(t,e=process.env){let r=Be(t);if(!r)return null;for(let n of r.rpcEnv){let i=(e[n]||"").trim();if(i)return i}return null}import{Interface as Bt,getAddress as Ft}from"ethers";var $e=new Bt(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function De(t,e){try{return Ft(t).toLowerCase()}catch{throw new Error(`${e} must be a valid EVM address`)}}var $t={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Dt(t,{rpcUrl:e,env:r=process.env}={}){if(e)return e;let n=Fe(t,r);return n||$t[Number(t)]||null}var jt=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Ht(t){let e=String(t||""),r=e.toLowerCase();if(e!==e.trim()||!/^[a-zA-Z0-9_]+$/.test(e)||!jt.test(r))throw new Error(`evm-rpc: ${e} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var X=new Map,je=new Map;function Vt(t){let e=new Error(t?.message||JSON.stringify(t));return e.code=t?.code,e}function Mt(t){if(t?.error)throw Vt(t.error);return t?.result}function zt(t,e,r){return`${t}
 ${e}
-${JSON.stringify(r??[])}`}async function Wt(t,e,r){return oe(t,{method:"POST",body:e,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function F(t,e,r=[],n={}){let a=String(e||""),o=Ht(a),i=Dt(t,n);if(!i)throw new Error(`No RPC URL for chainId ${t} (set env from chain registry rpcEnv or pass rpcUrl)`);if(o==="eth_chainid"&&n.cacheChainId!==!1){let s=je.get(i);if(s!=null)return s}let c=n.dedupe!==!1&&!n.signal?zt(i,a,r):null;if(c&&X.has(c))return X.get(c);let d=(async()=>{let s=await Wt(i,{jsonrpc:"2.0",id:1,method:e,params:r},n),u=Mt(s);return o==="eth_chainid"&&typeof u=="string"&&je.set(i,u),u})();return c&&(X.set(c,d),d.finally(()=>{X.get(c)===d&&X.delete(c)}).catch(()=>{})),d}async function He(t,e={}){let r=await F(t,"eth_blockNumber",[],e);return parseInt(r,16)}async function Ve(t,e,r={}){if(!e)throw new Error("rpcGetBalance requires address");let n=await F(t,"eth_getBalance",[e,"latest"],r);return{chainId:Number(t),address:e,balanceWei:BigInt(n).toString(),balanceHex:n}}async function Me(t={},e={}){let r=Number(t.chainId??e.chainId??1),n=De(t.token||t.tokenAddress,"token"),a=De(t.account||t.owner||t.address,"account"),o=$e.encodeFunctionData("balanceOf",[a]),i=await F(r,"eth_call",[{to:n,data:o},t.blockTag||"latest"],e),l=$e.decodeFunctionResult("balanceOf",i),c=BigInt(l[0]);return{chainId:r,token:n,account:a,balance:c.toString(),balanceHex:`0x${c.toString(16)}`,blockTag:t.blockTag||"latest"}}var Kt=new Set(["usdc","usdt","usdg","dai","usd1","usde","pyusd"]);function ze(t,e){let r=String(t||"").toLowerCase(),n=String(e?.quote||e?.quoteToken?.address||"").toLowerCase(),a=String(e?.base||e?.baseToken?.address||"").toLowerCase();return n===r?{address:e.base||e.baseToken?.address,symbol:e.baseToken?.symbol}:a===r?{address:e.quote||e.quoteToken?.address,symbol:e.quoteToken?.symbol}:{address:e.quote||e.quoteToken?.address,symbol:e.quoteToken?.symbol}}function we(t,e=[],{stables:r=[],wrappedNative:n=null}={}){let a=String(t||"").toLowerCase(),o=new Set((r||[]).map(c=>String(c).toLowerCase())),i=String(n||"").toLowerCase(),l=(e||[]).map((c,d)=>{let s=ze(a,c),u=String(s.address||"").toLowerCase(),p=String(s.symbol||"").toLowerCase(),f=Number(c.liquidityUsd??c.liquidity?.usd),h=Number.isFinite(f)?f:0,b=String(c.dex||c.dexId||"").toLowerCase(),w=0;return o.has(u)||Kt.has(p)?w=300:i&&u===i&&(w=100),b.includes("v4")?w+=20:b.includes("v3")?w+=10:(b.includes("v2")||b.includes("raydium")||b.includes("orca")||b.includes("meteora"))&&(w+=8),{pool:c,score:w*1e12+h,index:d,otherAddr:u,liquidityUsd:h}});return l.sort((c,d)=>d.score-c.score||c.index-d.index),l.map(c=>c.pool)}function We(t,e=[]){let r=Array.isArray(e)?e:[];return r.length&&ze(t,r[0]).address||null}var Gt="https://api.dexscreener.com",Tr=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});function Qt(t={}){return(t.baseUrl||process.env.DEXSCREENER_API_URL||Gt).replace(/\/$/,"")}async function Ke(t,e={}){if(!t)throw new Error("tokenAddress required");return oe(`${Qt(e)}/latest/dex/tokens/${t}`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??12e3})}var ve={getAmountsOut:"d06ca61f",swapExactTokensForTokens:"38ed1739",swapExactETHForTokens:"7ff36ab5"},q=t=>BigInt(t).toString(16).padStart(64,"0"),Z=t=>t.slice(2).toLowerCase().padStart(64,"0");function Yt(t,e){return`0x${ve.getAmountsOut}`+q(t)+q(64)+q(e.length)+e.map(Z).join("")}function Jt(t){if(!t||t==="0x")return null;let e=t.slice(2);if(e.length<128)return null;let r=Number(BigInt(`0x${e.slice(64,128)}`));if(!Number.isFinite(r)||r<1||r>16)return null;let n=[];for(let a=0;a<r;a++){let o=128+a*64;if(e.length<o+64)return null;n.push(BigInt(`0x${e.slice(o,o+64)}`))}return n}function ge(t,e="router"){return(t?.venues||[]).find(n=>n.kind===e)?.address??null}var Ee=100;function Xt(t,e){let r=Number(e);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>Ee)throw new Error(`slippageBps ${r} exceeds the ${Ee} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(t)*BigInt(1e4-Math.floor(r))/10000n}function Ge(t){let{chainId:e,wrappedNative:r}=t;async function n(a,o,i,l){let c=await F(e,"eth_call",[{to:a,data:Yt(o,i)},"latest"],l);return Jt(c?.result??c)}return{async quote({tokenIn:a,tokenOut:o,amountIn:i,path:l},c={}){let d=ge(c.scanner);if(!d)return{chainId:e,evidence:g.UNAVAILABLE,reason:"no verified router configured for this chain; quoting stays fail-closed rather than guessing a venue address"};let s=l||[a,o];if(s.some(p=>!/^0x[0-9a-fA-F]{40}$/.test(p||"")))throw new Error("quote requires valid 20-byte addresses");let u=await n(d,i,s,c);return u?{chainId:e,router:d,path:s,amountIn:String(i),amountOut:u[u.length-1].toString(),hops:s.length-1,evidence:g.LIVE,note:"exact-input quote at current reserves; not a guaranteed fill"}:{chainId:e,router:d,path:s,evidence:g.UNKNOWN,reason:"router returned no amounts -- no pool for this path, or the call reverted"}},async sellSimulation({token:a,amountIn:o,base:i},l={}){let c=ge(l.scanner),d=i||r;if(d&&String(a).toLowerCase()===String(d).toLowerCase())return{chainId:e,token:a,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!c||!d)return{chainId:e,token:a,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:c?"no wrappedNative configured for this chain, so no base asset to round-trip against":"no verified router configured for this chain"};let s=await n(c,o,[d,a],l);if(!s)return{chainId:e,token:a,verdict:y.FAIL,evidence:g.LIVE,leg:"buy",reason:"buy leg returned no amounts -- no route in"};let u=s[s.length-1];if(u===0n)return{chainId:e,token:a,verdict:y.FAIL,evidence:g.LIVE,leg:"buy",reason:"buy leg quotes zero output"};let p=await n(c,u,[a,d],l);if(!p)return{chainId:e,token:a,verdict:y.FAIL,evidence:g.LIVE,leg:"sell",bought:u.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let f=p[p.length-1],h=Number(f*10000n/BigInt(o)),b=y.PASS,w="round trip completes with expected fee/impact loss";return h<5e3?(b=y.FAIL,w=`round trip returns only ${(h/100).toFixed(2)}% -- punitive tax or no real liquidity`):h<9e3&&(b=y.CAUTION,w=`round trip returns ${(h/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:e,token:a,base:d,router:c,verdict:b,reason:w,amountIn:String(o),bought:u.toString(),returned:f.toString(),retentionBps:h,evidence:g.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:a,tokenOut:o,amountIn:i,recipient:l,slippageBps:c=50,deadlineSeconds:d=900,path:s},u={}){let p=u.scanner,f=ge(p);if(!f)throw new Error(`chain ${e} has no verified router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!/^0x[0-9a-fA-F]{40}$/.test(l||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let h=s||[a,o],b=await this.quote({tokenIn:a,tokenOut:o,amountIn:i,path:h},u);if(b.evidence!==g.LIVE)throw new Error(`cannot prepare without a live quote (${b.evidence}: ${b.reason??"no reason given"})`);let w=Xt(b.amountOut,c);if(w<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let C=BigInt(Math.floor(Date.now()/1e3)+Number(d)),P=r&&h[0].toLowerCase()===r.toLowerCase()&&u.useNative,S=P?`0x${ve.swapExactETHForTokens}`+q(w)+q(128)+Z(l)+q(C)+q(h.length)+h.map(Z).join(""):`0x${ve.swapExactTokensForTokens}`+q(i)+q(w)+q(160)+Z(l)+q(C)+q(h.length)+h.map(Z).join("");return{unsigned:!0,signedBy:"user-wallet",chainId:e,tx:{to:f,data:S,value:P?`0x${BigInt(i).toString(16)}`:"0x0"},guard:{quotedOut:b.amountOut,minOut:w.toString(),slippageBps:c,maxSlippageBps:Ee,deadline:C.toString()},requires:P?[]:[{step:"approve",token:h[0],spender:f,amount:String(i)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var Zt=[100,500,3e3,1e4],Qe={quoteExactInputSingle:"c6a5026a",exactInputSingle:"04e45aaf"},W=t=>BigInt(t).toString(16).padStart(64,"0"),ee=t=>t.slice(2).toLowerCase().padStart(64,"0"),Ye=/^0x[0-9a-fA-F]{40}$/,Ae=100;function er(t,e){let r=Number(e);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>Ae)throw new Error(`slippageBps ${r} exceeds the ${Ae} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(t)*BigInt(1e4-Math.floor(r))/10000n}function Se(t,e){return(t?.venues||[]).find(r=>r.kind===e)?.address??null}function Je(t){let{chainId:e,wrappedNative:r}=t;async function n({quoter:o,tokenIn:i,tokenOut:l,amountIn:c,fee:d},s){let u=`0x${Qe.quoteExactInputSingle}`+ee(i)+ee(l)+W(c)+W(d)+W(0),p=await F(e,"eth_call",[{to:o,data:u},"latest"],s).catch(()=>null),f=p?.result??p;if(!f||f==="0x"||f.length<66)return null;let h=BigInt(`0x${f.slice(2,66)}`);return h>0n?h:null}async function a({quoter:o,tokenIn:i,tokenOut:l,amountIn:c},d){let s=await Promise.all(Zt.map(async p=>{let f=await n({quoter:o,tokenIn:i,tokenOut:l,amountIn:c,fee:p},d);return{fee:p,amountOut:f?f.toString():null,out:f}})),u=null;for(let p of s)p.out&&(!u||p.out>u.amountOut)&&(u={fee:p.fee,amountOut:p.out});return{best:u,tried:s.map(({fee:p,amountOut:f})=>({fee:p,amountOut:f}))}}return{async quote({tokenIn:o,tokenOut:i,amountIn:l},c={}){let d=Se(c.scanner,"quoter");if(!d)return{chainId:e,evidence:g.UNAVAILABLE,reason:"no verified quoter configured for this chain; quoting stays fail-closed rather than guessing a venue address"};for(let p of[o,i])if(!Ye.test(p||""))throw new Error("quote requires valid 20-byte addresses");let{best:s,tried:u}=await a({quoter:d,tokenIn:o,tokenOut:i,amountIn:l},c);return s?{chainId:e,venue:"uniswap-v3",quoter:d,tokenIn:o,tokenOut:i,amountIn:String(l),amountOut:s.amountOut.toString(),fee:s.fee,useNative:!!r&&String(o).toLowerCase()===String(r).toLowerCase(),triedFeeTiers:u,evidence:g.LIVE,note:"exact-input single-hop quote at current tick; not a guaranteed fill"}:{chainId:e,quoter:d,tokenIn:o,tokenOut:i,triedFeeTiers:u,evidence:g.UNKNOWN,reason:"no fee tier returned a quote -- no V3 pool for this pair, or no liquidity"}},async sellSimulation({token:o,amountIn:i,base:l},c={}){let d=Se(c.scanner,"quoter"),s=(t.stableQuoteAssets||[]).map(O=>String(O).toLowerCase()),u=null;!l&&typeof t.resolveQuoteAsset=="function"&&(u=await t.resolveQuoteAsset(o,c).catch(()=>null));let p=String(o).toLowerCase(),f=String(r||"").toLowerCase();if(f&&p===f)return{chainId:e,token:o,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};let h=l||u||(s[0]&&p!==s[0]?s[0]:null)||r;if(h&&p===String(h).toLowerCase())return{chainId:e,token:o,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!d||!h)return{chainId:e,token:o,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:d?"no wrappedNative configured, so there is no base asset to round-trip against":"no verified quoter configured for this chain"};let b=await a({quoter:d,tokenIn:h,tokenOut:o,amountIn:i},c);if(!b.best){let O=s.find(A=>A&&A!==String(h).toLowerCase()&&A!==String(o).toLowerCase());if(O){let A=await a({quoter:d,tokenIn:O,tokenOut:o,amountIn:i},c);if(A.best){let v=await a({quoter:d,tokenIn:o,tokenOut:O,amountIn:A.best.amountOut},c);if(v.best){let x=v.best.amountOut,E=Number(x*10000n/BigInt(i)),L=y.PASS,m="round trip vs dollar book completes with expected fee/impact loss";return E<5e3?(L=y.FAIL,m=`round trip vs dollar book returns only ${(E/100).toFixed(2)}% -- punitive tax or no real liquidity`):E<9e3&&(L=y.CAUTION,m=`round trip vs dollar book returns ${(E/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:e,venue:"uniswap-v3",token:o,base:O,quoteAsset:O,verdict:L,reason:m,amountIn:String(i),bought:A.best.amountOut.toString(),returned:x.toString(),retentionBps:E,buyFee:A.best.fee,sellFee:v.best.fee,evidence:g.LIVE,note:"Quoted against the dollar book, not wrapped native. A missing WETH pool is not a honeypot."}}}}return{chainId:e,token:o,verdict:y.FAIL,evidence:g.LIVE,leg:"buy",reason:"no V3 pool priced the buy leg on any fee tier against wrapped native or the dollar book"}}let w=await a({quoter:d,tokenIn:o,tokenOut:h,amountIn:b.best.amountOut},c);if(!w.best){let O=s.find(A=>A&&A!==String(h).toLowerCase()&&A!==String(o).toLowerCase());if(O){let A=await a({quoter:d,tokenIn:O,tokenOut:o,amountIn:i},c),v=A.best?await a({quoter:d,tokenIn:o,tokenOut:O,amountIn:A.best.amountOut},c):{best:null};if(A.best&&v.best){let x=v.best.amountOut,E=Number(x*10000n/BigInt(i)),L=y.PASS,m="round trip vs dollar book completes; missing WETH sell pool is not a honeypot";return E<5e3?(L=y.FAIL,m=`dollar-book round trip returns only ${(E/100).toFixed(2)}%`):E<9e3&&(L=y.CAUTION,m=`dollar-book round trip returns ${(E/100).toFixed(2)}%`),{chainId:e,venue:"uniswap-v3",token:o,base:O,quoteAsset:O,verdict:L,reason:m,amountIn:String(i),bought:A.best.amountOut.toString(),returned:x.toString(),retentionBps:E,buyFee:A.best.fee,sellFee:v.best.fee,evidence:g.LIVE,note:"Sell vs wrapped native failed; dollar book succeeded. Not labelled honeypot."}}}return{chainId:e,token:o,verdict:y.FAIL,evidence:g.LIVE,leg:"sell",bought:b.best.amountOut.toString(),reason:"SELL LEG FAILED against wrapped native and the dollar book. This is the honeypot signature: do not trade."}}let C=w.best.amountOut,P=Number(C*10000n/BigInt(i)),S=y.PASS,R="round trip completes with expected fee/impact loss";return P<5e3?(S=y.FAIL,R=`round trip returns only ${(P/100).toFixed(2)}% -- punitive tax or no real liquidity`):P<9e3&&(S=y.CAUTION,R=`round trip returns ${(P/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:e,venue:"uniswap-v3",token:o,base:h,verdict:S,reason:R,amountIn:String(i),bought:b.best.amountOut.toString(),returned:C.toString(),retentionBps:P,buyFee:b.best.fee,sellFee:w.best.fee,evidence:g.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:o,tokenOut:i,amountIn:l,recipient:c,slippageBps:d=50,fee:s},u={}){let p=Se(u.scanner,"router");if(!p)throw new Error(`chain ${e} has no verified V3 router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!Ye.test(c||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let f=await this.quote({tokenIn:o,tokenOut:i,amountIn:l},u);if(f.evidence!==g.LIVE)throw new Error(`cannot prepare without a live quote (${f.evidence}: ${f.reason??"no reason given"})`);let h=s??f.fee,b=er(f.amountOut,d);if(b<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let w=!!(u.useNative||f.useNative)&&r&&String(o).toLowerCase()===String(r).toLowerCase(),C=`0x${Qe.exactInputSingle}`+ee(o)+ee(i)+W(h)+ee(c)+W(l)+W(b)+W(0);return{unsigned:!0,signedBy:"user-wallet",chainId:e,venue:"uniswap-v3",tx:{to:p,data:C,value:w?String(l):"0x0"},guard:{quotedOut:f.amountOut,minOut:b.toString(),slippageBps:d,maxSlippageBps:Ae,fee:h},requires:w?[]:[{step:"approve",token:o,spender:p,amount:String(l)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var se={decimals:"0x313ce567",symbol:"0x95d89b41",name:"0x06fdde03",totalSupply:"0x18160ddd",owner:"0x8da5cb5b"};function Xe(t){if(!t||t==="0x")return null;try{return BigInt(t)}catch{return null}}function Ze(t){if(!t||t==="0x")return null;let e=t.slice(2);if(e.length>=128){let n=Number(BigInt(`0x${e.slice(64,128)}`));if(n>0&&n<=256&&e.length>=128+n*2){let a=e.slice(128,128+n*2),o=Buffer.from(a,"hex").toString("utf8").replace(/\0+$/,"");if(o)return o}}return Buffer.from(e.slice(0,64),"hex").toString("utf8").replace(/\0+$/,"")||null}function tr(t){let{chainId:e}=t;async function r(n,a,o){return F(e,"eth_call",[{to:n,data:a},"latest"],o)}return{async blockNumber(n={}){let a=await He(e,n);return{chainId:e,blockNumber:a?.blockNumber??a,evidence:g.LIVE}},async nativeBalance(n,a={}){let o=await Ve(e,n,a);return{chainId:e,address:n,wei:o?.wei??o?.balance??null,symbol:t.nativeCurrency?.symbol??null,decimals:t.nativeCurrency?.decimals??18,evidence:g.LIVE}},async tokenBalance({token:n,owner:a},o={}){let i=await Me({chainId:e,token:n,owner:a},o);return{chainId:e,token:n,owner:a,raw:i?.balance??i,evidence:g.LIVE}},async resolveToken(n,a={}){if(!/^0x[0-9a-fA-F]{40}$/.test(n||""))return{chainId:e,token:n,evidence:g.UNKNOWN,error:"resolveToken needs a 20-byte address; symbol lookup is a market-data concern"};let[o,i,l,c]=await Promise.all([r(n,se.decimals,a).catch(()=>null),r(n,se.symbol,a).catch(()=>null),r(n,se.name,a).catch(()=>null),r(n,se.totalSupply,a).catch(()=>null)]),d=Xe(o?.result??o),s=d!==null||i?.result||l?.result,u={chainId:e,address:n,decimals:d===null?null:Number(d),symbol:Ze(i?.result??i),name:Ze(l?.result??l),totalSupply:(Xe(c?.result??c)??null)?.toString()??null,evidence:s?g.LIVE:g.UNKNOWN};return s||(u.warning="no ERC-20 metadata returned -- may not be a token contract"),u},async resolvePools(n,a={}){let o=t.dexscreenerSlug;if(!o)return{chainId:e,token:n,pools:[],evidence:g.UNAVAILABLE,reason:"no dexscreenerSlug configured for this chain; pool discovery is unavailable rather than guessed"};let i=await Ke(n,a).catch(()=>null),c=(i?.pairs||i?.data?.pairs||[]).filter(s=>String(s.chainId).toLowerCase()===String(o).toLowerCase()).map(s=>({pair:s.pairAddress,dex:s.dexId,base:s.baseToken?.address,quote:s.quoteToken?.address,liquidityUsd:s.liquidity?.usd??null,priceUsd:s.priceUsd??null,volume24hUsd:s.volume?.h24??null,createdAt:s.pairCreatedAt??null})).sort((s,u)=>(u.liquidityUsd??0)-(s.liquidityUsd??0)),d=we(n,c,{stables:t.stableQuoteAssets||[],wrappedNative:t.wrappedNative});return{chainId:e,token:n,pools:d,topPool:d[0]||null,quoteAsset:We(n,d),evidence:d.length?g.LIVE:g.UNKNOWN}},async scanBlocks({fromBlock:n,toBlock:a,address:o,topics:i,chunkSize:l=2e3}={},c={}){if(!Number.isInteger(n)||!Number.isInteger(a))throw new Error("scanBlocks requires integer fromBlock and toBlock");if(a<n)throw new Error("toBlock must be >= fromBlock");let d=[],s=[];for(let p=n;p<=a;p+=l){let f=Math.min(p+l-1,a);s.push([p,f])}let u=await Ue(s,4,async([p,f])=>{let h={fromBlock:`0x${p.toString(16)}`,toBlock:`0x${f.toString(16)}`};o&&(h.address=o),i&&(h.topics=i);let b=await F(e,"eth_getLogs",[h],c).catch(w=>({error:String(w?.message||w)}));return{start:p,end:f,res:b}});for(let{start:p,end:f,res:h}of u){if(h?.error)return{chainId:e,fromBlock:n,toBlock:a,logs:d,complete:!1,failedAt:[p,f],error:h.error,evidence:g.UNKNOWN};for(let b of h?.result??h??[])d.push(b)}return{chainId:e,fromBlock:n,toBlock:a,logs:d,complete:!0,chunks:s.length,evidence:g.LIVE}},async scoreRisk(n,a={}){let o=[],i=y.PASS,l=s=>{let u={[y.PASS]:0,[y.CAUTION]:1,[y.UNKNOWN]:2,[y.FAIL]:3};u[s]>u[i]&&(i=s)},[c,d]=await Promise.all([this.resolveToken(n,a),this.resolvePools(n,a)]);if(c.evidence!==g.LIVE?(o.push({check:"erc20-metadata",result:y.UNKNOWN,detail:c.warning}),l(y.UNKNOWN)):o.push({check:"erc20-metadata",result:y.PASS,detail:`${c.symbol} / ${c.decimals}d`}),d.evidence===g.UNAVAILABLE)o.push({check:"liquidity",result:y.UNKNOWN,detail:d.reason}),l(y.UNKNOWN);else if(!d.pools.length)o.push({check:"liquidity",result:y.FAIL,detail:"no pool with liquidity found"}),l(y.FAIL);else{let s=d.pools[0],u=s.liquidityUsd??0;u<5e3?(o.push({check:"liquidity",result:y.CAUTION,detail:`top pool only $${u}`}),l(y.CAUTION)):o.push({check:"liquidity",result:y.PASS,detail:`$${u} on ${s.dex}`}),s.createdAt&&Date.now()-s.createdAt<24*3600*1e3&&(o.push({check:"age",result:y.CAUTION,detail:"pool under 24h old"}),l(y.CAUTION))}if(typeof this.sellSimulation=="function"){let s=await this.sellSimulation({token:n,amountIn:(10n**16n).toString()},a).catch(u=>({verdict:y.UNKNOWN,reason:String(u?.message||u)}));o.push({check:"sellability",result:s.verdict,detail:s.retentionBps!=null?`round trip returns ${(s.retentionBps/100).toFixed(2)}% -- ${s.reason}`:s.reason}),l(s.verdict)}else o.push({check:"sellability",result:y.UNKNOWN,detail:"no verified router on this chain, so a round-trip sell simulation cannot run. Treat as unproven -- a buy path is not an exit path."}),l(y.UNKNOWN);return{chainId:e,token:n,verdict:i,checks:o,note:"Structural checks only. UNKNOWN is not PASS. A token is not tradeable until a sell simulation succeeds."}}}}function xe(t){let r={...tr(t)},n=new Set((t.venues||[]).map(o=>o.kind));t.venueKind==="uniswap-v3"&&n.has("quoter")&&n.has("router")?Object.assign(r,Je({chainId:t.chainId,wrappedNative:t.wrappedNative,stableQuoteAssets:t.stableQuoteAssets||[],resolveQuoteAsset:async(o,i)=>(await r.resolvePools(o,i)).quoteAsset||null})):t.venueKind==="uniswap-v2"&&n.has("router")&&Object.assign(r,Ge({chainId:t.chainId,wrappedNative:t.wrappedNative}));let a={};for(let[o,i]of Object.entries(r))a[o]=i.bind(r);return{key:t.key,chainId:t.chainId,name:t.name,rpcEnv:t.rpcEnv,nativeCurrency:t.nativeCurrency,explorer:t.explorer,venues:t.venues||[],capabilities:a}}var et=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);function rr(){return et.map(t=>ce(xe(t)))}function nr(t){return ce(xe(t))}export{et as CHAIN_CONFIGS,g as EVIDENCE,y as RISK,J as SCANNER_CAPABILITIES,ar as __clearScanners,it as createScanner,or as getScanner,sr as listScanners,rr as registerBuiltinScanners,nr as registerCustomChain,ce as registerScanner,ir as scannerCoverage,at as validateScanner};
+${JSON.stringify(r??[])}`}async function Wt(t,e,r){return oe(t,{method:"POST",body:e,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function F(t,e,r=[],n={}){let i=String(e||""),o=Ht(i),a=Dt(t,n);if(!a)throw new Error(`No RPC URL for chainId ${t} (set env from chain registry rpcEnv or pass rpcUrl)`);if(o==="eth_chainid"&&n.cacheChainId!==!1){let s=je.get(a);if(s!=null)return s}let c=n.dedupe!==!1&&!n.signal?zt(a,i,r):null;if(c&&X.has(c))return X.get(c);let d=(async()=>{let s=await Wt(a,{jsonrpc:"2.0",id:1,method:e,params:r},n),u=Mt(s);return o==="eth_chainid"&&typeof u=="string"&&je.set(a,u),u})();return c&&(X.set(c,d),d.finally(()=>{X.get(c)===d&&X.delete(c)}).catch(()=>{})),d}async function He(t,e={}){let r=await F(t,"eth_blockNumber",[],e);return parseInt(r,16)}async function Ve(t,e,r={}){if(!e)throw new Error("rpcGetBalance requires address");let n=await F(t,"eth_getBalance",[e,"latest"],r);return{chainId:Number(t),address:e,balanceWei:BigInt(n).toString(),balanceHex:n}}async function Me(t={},e={}){let r=Number(t.chainId??e.chainId??1),n=De(t.token||t.tokenAddress,"token"),i=De(t.account||t.owner||t.address,"account"),o=$e.encodeFunctionData("balanceOf",[i]),a=await F(r,"eth_call",[{to:n,data:o},t.blockTag||"latest"],e),l=$e.decodeFunctionResult("balanceOf",a),c=BigInt(l[0]);return{chainId:r,token:n,account:i,balance:c.toString(),balanceHex:`0x${c.toString(16)}`,blockTag:t.blockTag||"latest"}}var Kt=new Set(["usdc","usdt","usdg","dai","usd1","usde","pyusd"]);function ze(t,e){let r=String(t||"").toLowerCase(),n=String(e?.quote||e?.quoteToken?.address||"").toLowerCase(),i=String(e?.base||e?.baseToken?.address||"").toLowerCase();return n===r?{address:e.base||e.baseToken?.address,symbol:e.baseToken?.symbol}:i===r?{address:e.quote||e.quoteToken?.address,symbol:e.quoteToken?.symbol}:{address:e.quote||e.quoteToken?.address,symbol:e.quoteToken?.symbol}}function we(t,e=[],{stables:r=[],wrappedNative:n=null}={}){let i=String(t||"").toLowerCase(),o=new Set((r||[]).map(c=>String(c).toLowerCase())),a=String(n||"").toLowerCase(),l=(e||[]).map((c,d)=>{let s=ze(i,c),u=String(s.address||"").toLowerCase(),p=String(s.symbol||"").toLowerCase(),f=Number(c.liquidityUsd??c.liquidity?.usd),h=Number.isFinite(f)?f:0,b=String(c.dex||c.dexId||"").toLowerCase(),w=0;return o.has(u)||Kt.has(p)?w=300:a&&u===a&&(w=100),b.includes("v4")?w+=20:b.includes("v3")?w+=10:(b.includes("v2")||b.includes("raydium")||b.includes("orca")||b.includes("meteora"))&&(w+=8),{pool:c,score:w*1e12+h,index:d,otherAddr:u,liquidityUsd:h}});return l.sort((c,d)=>d.score-c.score||c.index-d.index),l.map(c=>c.pool)}function We(t,e=[]){let r=Array.isArray(e)?e:[];return r.length&&ze(t,r[0]).address||null}var Gt="https://api.dexscreener.com",Nr=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});function Qt(t={}){return(t.baseUrl||process.env.DEXSCREENER_API_URL||Gt).replace(/\/$/,"")}function Yt(t,e){if(typeof t!="string"&&typeof t!="number")throw new Error(`${e} required`);let r=String(t).trim();if(!r||r.length>128||!/^[A-Za-z0-9][A-Za-z0-9._:+~-]*$/u.test(r))throw new Error(`${e} must be a valid path component of at most 128 characters`);return encodeURIComponent(r)}function Jt(t,e){return oe(`${Qt(e)}${t}`,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??12e3})}async function Ke(t,e={}){return Jt(`/latest/dex/tokens/${Yt(t,"tokenAddress")}`,e)}var ve={getAmountsOut:"d06ca61f",swapExactTokensForTokens:"38ed1739",swapExactETHForTokens:"7ff36ab5"},q=t=>BigInt(t).toString(16).padStart(64,"0"),Z=t=>t.slice(2).toLowerCase().padStart(64,"0");function Xt(t,e){return`0x${ve.getAmountsOut}`+q(t)+q(64)+q(e.length)+e.map(Z).join("")}function Zt(t){if(!t||t==="0x")return null;let e=t.slice(2);if(e.length<128)return null;let r=Number(BigInt(`0x${e.slice(64,128)}`));if(!Number.isFinite(r)||r<1||r>16)return null;let n=[];for(let i=0;i<r;i++){let o=128+i*64;if(e.length<o+64)return null;n.push(BigInt(`0x${e.slice(o,o+64)}`))}return n}function ge(t,e="router"){return(t?.venues||[]).find(n=>n.kind===e)?.address??null}var Ee=100;function er(t,e){let r=Number(e);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>Ee)throw new Error(`slippageBps ${r} exceeds the ${Ee} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(t)*BigInt(1e4-Math.floor(r))/10000n}function Ge(t){let{chainId:e,wrappedNative:r}=t;async function n(i,o,a,l){let c=await F(e,"eth_call",[{to:i,data:Xt(o,a)},"latest"],l);return Zt(c?.result??c)}return{async quote({tokenIn:i,tokenOut:o,amountIn:a,path:l},c={}){let d=ge(c.scanner);if(!d)return{chainId:e,evidence:g.UNAVAILABLE,reason:"no verified router configured for this chain; quoting stays fail-closed rather than guessing a venue address"};let s=l||[i,o];if(s.some(p=>!/^0x[0-9a-fA-F]{40}$/.test(p||"")))throw new Error("quote requires valid 20-byte addresses");let u=await n(d,a,s,c);return u?{chainId:e,router:d,path:s,amountIn:String(a),amountOut:u[u.length-1].toString(),hops:s.length-1,evidence:g.LIVE,note:"exact-input quote at current reserves; not a guaranteed fill"}:{chainId:e,router:d,path:s,evidence:g.UNKNOWN,reason:"router returned no amounts -- no pool for this path, or the call reverted"}},async sellSimulation({token:i,amountIn:o,base:a},l={}){let c=ge(l.scanner),d=a||r;if(d&&String(i).toLowerCase()===String(d).toLowerCase())return{chainId:e,token:i,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!c||!d)return{chainId:e,token:i,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:c?"no wrappedNative configured for this chain, so no base asset to round-trip against":"no verified router configured for this chain"};let s=await n(c,o,[d,i],l);if(!s)return{chainId:e,token:i,verdict:y.FAIL,evidence:g.LIVE,leg:"buy",reason:"buy leg returned no amounts -- no route in"};let u=s[s.length-1];if(u===0n)return{chainId:e,token:i,verdict:y.FAIL,evidence:g.LIVE,leg:"buy",reason:"buy leg quotes zero output"};let p=await n(c,u,[i,d],l);if(!p)return{chainId:e,token:i,verdict:y.FAIL,evidence:g.LIVE,leg:"sell",bought:u.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let f=p[p.length-1],h=Number(f*10000n/BigInt(o)),b=y.PASS,w="round trip completes with expected fee/impact loss";return h<5e3?(b=y.FAIL,w=`round trip returns only ${(h/100).toFixed(2)}% -- punitive tax or no real liquidity`):h<9e3&&(b=y.CAUTION,w=`round trip returns ${(h/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:e,token:i,base:d,router:c,verdict:b,reason:w,amountIn:String(o),bought:u.toString(),returned:f.toString(),retentionBps:h,evidence:g.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:i,tokenOut:o,amountIn:a,recipient:l,slippageBps:c=50,deadlineSeconds:d=900,path:s},u={}){let p=u.scanner,f=ge(p);if(!f)throw new Error(`chain ${e} has no verified router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!/^0x[0-9a-fA-F]{40}$/.test(l||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let h=s||[i,o],b=await this.quote({tokenIn:i,tokenOut:o,amountIn:a,path:h},u);if(b.evidence!==g.LIVE)throw new Error(`cannot prepare without a live quote (${b.evidence}: ${b.reason??"no reason given"})`);let w=er(b.amountOut,c);if(w<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let C=BigInt(Math.floor(Date.now()/1e3)+Number(d)),P=r&&h[0].toLowerCase()===r.toLowerCase()&&u.useNative,S=P?`0x${ve.swapExactETHForTokens}`+q(w)+q(128)+Z(l)+q(C)+q(h.length)+h.map(Z).join(""):`0x${ve.swapExactTokensForTokens}`+q(a)+q(w)+q(160)+Z(l)+q(C)+q(h.length)+h.map(Z).join("");return{unsigned:!0,signedBy:"user-wallet",chainId:e,tx:{to:f,data:S,value:P?`0x${BigInt(a).toString(16)}`:"0x0"},guard:{quotedOut:b.amountOut,minOut:w.toString(),slippageBps:c,maxSlippageBps:Ee,deadline:C.toString()},requires:P?[]:[{step:"approve",token:h[0],spender:f,amount:String(a)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var tr=[100,500,3e3,1e4],Qe={quoteExactInputSingle:"c6a5026a",exactInputSingle:"04e45aaf"},W=t=>BigInt(t).toString(16).padStart(64,"0"),ee=t=>t.slice(2).toLowerCase().padStart(64,"0"),Ye=/^0x[0-9a-fA-F]{40}$/,Ae=100;function rr(t,e){let r=Number(e);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>Ae)throw new Error(`slippageBps ${r} exceeds the ${Ae} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(t)*BigInt(1e4-Math.floor(r))/10000n}function Se(t,e){return(t?.venues||[]).find(r=>r.kind===e)?.address??null}function Je(t){let{chainId:e,wrappedNative:r}=t;async function n({quoter:o,tokenIn:a,tokenOut:l,amountIn:c,fee:d},s){let u=`0x${Qe.quoteExactInputSingle}`+ee(a)+ee(l)+W(c)+W(d)+W(0),p=await F(e,"eth_call",[{to:o,data:u},"latest"],s).catch(()=>null),f=p?.result??p;if(!f||f==="0x"||f.length<66)return null;let h=BigInt(`0x${f.slice(2,66)}`);return h>0n?h:null}async function i({quoter:o,tokenIn:a,tokenOut:l,amountIn:c},d){let s=await Promise.all(tr.map(async p=>{let f=await n({quoter:o,tokenIn:a,tokenOut:l,amountIn:c,fee:p},d);return{fee:p,amountOut:f?f.toString():null,out:f}})),u=null;for(let p of s)p.out&&(!u||p.out>u.amountOut)&&(u={fee:p.fee,amountOut:p.out});return{best:u,tried:s.map(({fee:p,amountOut:f})=>({fee:p,amountOut:f}))}}return{async quote({tokenIn:o,tokenOut:a,amountIn:l},c={}){let d=Se(c.scanner,"quoter");if(!d)return{chainId:e,evidence:g.UNAVAILABLE,reason:"no verified quoter configured for this chain; quoting stays fail-closed rather than guessing a venue address"};for(let p of[o,a])if(!Ye.test(p||""))throw new Error("quote requires valid 20-byte addresses");let{best:s,tried:u}=await i({quoter:d,tokenIn:o,tokenOut:a,amountIn:l},c);return s?{chainId:e,venue:"uniswap-v3",quoter:d,tokenIn:o,tokenOut:a,amountIn:String(l),amountOut:s.amountOut.toString(),fee:s.fee,useNative:!!r&&String(o).toLowerCase()===String(r).toLowerCase(),triedFeeTiers:u,evidence:g.LIVE,note:"exact-input single-hop quote at current tick; not a guaranteed fill"}:{chainId:e,quoter:d,tokenIn:o,tokenOut:a,triedFeeTiers:u,evidence:g.UNKNOWN,reason:"no fee tier returned a quote -- no V3 pool for this pair, or no liquidity"}},async sellSimulation({token:o,amountIn:a,base:l},c={}){let d=Se(c.scanner,"quoter"),s=(t.stableQuoteAssets||[]).map(O=>String(O).toLowerCase()),u=null;!l&&typeof t.resolveQuoteAsset=="function"&&(u=await t.resolveQuoteAsset(o,c).catch(()=>null));let p=String(o).toLowerCase(),f=String(r||"").toLowerCase();if(f&&p===f)return{chainId:e,token:o,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};let h=l||u||(s[0]&&p!==s[0]?s[0]:null)||r;if(h&&p===String(h).toLowerCase())return{chainId:e,token:o,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!d||!h)return{chainId:e,token:o,verdict:y.UNKNOWN,evidence:g.UNAVAILABLE,reason:d?"no wrappedNative configured, so there is no base asset to round-trip against":"no verified quoter configured for this chain"};let b=await i({quoter:d,tokenIn:h,tokenOut:o,amountIn:a},c);if(!b.best){let O=s.find(A=>A&&A!==String(h).toLowerCase()&&A!==String(o).toLowerCase());if(O){let A=await i({quoter:d,tokenIn:O,tokenOut:o,amountIn:a},c);if(A.best){let v=await i({quoter:d,tokenIn:o,tokenOut:O,amountIn:A.best.amountOut},c);if(v.best){let x=v.best.amountOut,E=Number(x*10000n/BigInt(a)),L=y.PASS,m="round trip vs dollar book completes with expected fee/impact loss";return E<5e3?(L=y.FAIL,m=`round trip vs dollar book returns only ${(E/100).toFixed(2)}% -- punitive tax or no real liquidity`):E<9e3&&(L=y.CAUTION,m=`round trip vs dollar book returns ${(E/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:e,venue:"uniswap-v3",token:o,base:O,quoteAsset:O,verdict:L,reason:m,amountIn:String(a),bought:A.best.amountOut.toString(),returned:x.toString(),retentionBps:E,buyFee:A.best.fee,sellFee:v.best.fee,evidence:g.LIVE,note:"Quoted against the dollar book, not wrapped native. A missing WETH pool is not a honeypot."}}}}return{chainId:e,token:o,verdict:y.FAIL,evidence:g.LIVE,leg:"buy",reason:"no V3 pool priced the buy leg on any fee tier against wrapped native or the dollar book"}}let w=await i({quoter:d,tokenIn:o,tokenOut:h,amountIn:b.best.amountOut},c);if(!w.best){let O=s.find(A=>A&&A!==String(h).toLowerCase()&&A!==String(o).toLowerCase());if(O){let A=await i({quoter:d,tokenIn:O,tokenOut:o,amountIn:a},c),v=A.best?await i({quoter:d,tokenIn:o,tokenOut:O,amountIn:A.best.amountOut},c):{best:null};if(A.best&&v.best){let x=v.best.amountOut,E=Number(x*10000n/BigInt(a)),L=y.PASS,m="round trip vs dollar book completes; missing WETH sell pool is not a honeypot";return E<5e3?(L=y.FAIL,m=`dollar-book round trip returns only ${(E/100).toFixed(2)}%`):E<9e3&&(L=y.CAUTION,m=`dollar-book round trip returns ${(E/100).toFixed(2)}%`),{chainId:e,venue:"uniswap-v3",token:o,base:O,quoteAsset:O,verdict:L,reason:m,amountIn:String(a),bought:A.best.amountOut.toString(),returned:x.toString(),retentionBps:E,buyFee:A.best.fee,sellFee:v.best.fee,evidence:g.LIVE,note:"Sell vs wrapped native failed; dollar book succeeded. Not labelled honeypot."}}}return{chainId:e,token:o,verdict:y.FAIL,evidence:g.LIVE,leg:"sell",bought:b.best.amountOut.toString(),reason:"SELL LEG FAILED against wrapped native and the dollar book. This is the honeypot signature: do not trade."}}let C=w.best.amountOut,P=Number(C*10000n/BigInt(a)),S=y.PASS,R="round trip completes with expected fee/impact loss";return P<5e3?(S=y.FAIL,R=`round trip returns only ${(P/100).toFixed(2)}% -- punitive tax or no real liquidity`):P<9e3&&(S=y.CAUTION,R=`round trip returns ${(P/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:e,venue:"uniswap-v3",token:o,base:h,verdict:S,reason:R,amountIn:String(a),bought:b.best.amountOut.toString(),returned:C.toString(),retentionBps:P,buyFee:b.best.fee,sellFee:w.best.fee,evidence:g.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:o,tokenOut:a,amountIn:l,recipient:c,slippageBps:d=50,fee:s},u={}){let p=Se(u.scanner,"router");if(!p)throw new Error(`chain ${e} has no verified V3 router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!Ye.test(c||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let f=await this.quote({tokenIn:o,tokenOut:a,amountIn:l},u);if(f.evidence!==g.LIVE)throw new Error(`cannot prepare without a live quote (${f.evidence}: ${f.reason??"no reason given"})`);let h=s??f.fee,b=rr(f.amountOut,d);if(b<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let w=!!(u.useNative||f.useNative)&&r&&String(o).toLowerCase()===String(r).toLowerCase(),C=`0x${Qe.exactInputSingle}`+ee(o)+ee(a)+W(h)+ee(c)+W(l)+W(b)+W(0);return{unsigned:!0,signedBy:"user-wallet",chainId:e,venue:"uniswap-v3",tx:{to:p,data:C,value:w?String(l):"0x0"},guard:{quotedOut:f.amountOut,minOut:b.toString(),slippageBps:d,maxSlippageBps:Ae,fee:h},requires:w?[]:[{step:"approve",token:o,spender:p,amount:String(l)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var se={decimals:"0x313ce567",symbol:"0x95d89b41",name:"0x06fdde03",totalSupply:"0x18160ddd",owner:"0x8da5cb5b"};function Xe(t){if(!t||t==="0x")return null;try{return BigInt(t)}catch{return null}}function Ze(t){if(!t||t==="0x")return null;let e=t.slice(2);if(e.length>=128){let n=Number(BigInt(`0x${e.slice(64,128)}`));if(n>0&&n<=256&&e.length>=128+n*2){let i=e.slice(128,128+n*2),o=Buffer.from(i,"hex").toString("utf8").replace(/\0+$/,"");if(o)return o}}return Buffer.from(e.slice(0,64),"hex").toString("utf8").replace(/\0+$/,"")||null}function nr(t){let{chainId:e}=t;async function r(n,i,o){return F(e,"eth_call",[{to:n,data:i},"latest"],o)}return{async blockNumber(n={}){let i=await He(e,n);return{chainId:e,blockNumber:i?.blockNumber??i,evidence:g.LIVE}},async nativeBalance(n,i={}){let o=await Ve(e,n,i);return{chainId:e,address:n,wei:o?.wei??o?.balance??null,symbol:t.nativeCurrency?.symbol??null,decimals:t.nativeCurrency?.decimals??18,evidence:g.LIVE}},async tokenBalance({token:n,owner:i},o={}){let a=await Me({chainId:e,token:n,owner:i},o);return{chainId:e,token:n,owner:i,raw:a?.balance??a,evidence:g.LIVE}},async resolveToken(n,i={}){if(!/^0x[0-9a-fA-F]{40}$/.test(n||""))return{chainId:e,token:n,evidence:g.UNKNOWN,error:"resolveToken needs a 20-byte address; symbol lookup is a market-data concern"};let[o,a,l,c]=await Promise.all([r(n,se.decimals,i).catch(()=>null),r(n,se.symbol,i).catch(()=>null),r(n,se.name,i).catch(()=>null),r(n,se.totalSupply,i).catch(()=>null)]),d=Xe(o?.result??o),s=d!==null||a?.result||l?.result,u={chainId:e,address:n,decimals:d===null?null:Number(d),symbol:Ze(a?.result??a),name:Ze(l?.result??l),totalSupply:(Xe(c?.result??c)??null)?.toString()??null,evidence:s?g.LIVE:g.UNKNOWN};return s||(u.warning="no ERC-20 metadata returned -- may not be a token contract"),u},async resolvePools(n,i={}){let o=t.dexscreenerSlug;if(!o)return{chainId:e,token:n,pools:[],evidence:g.UNAVAILABLE,reason:"no dexscreenerSlug configured for this chain; pool discovery is unavailable rather than guessed"};let a=await Ke(n,i).catch(()=>null),c=(a?.pairs||a?.data?.pairs||[]).filter(s=>String(s.chainId).toLowerCase()===String(o).toLowerCase()).map(s=>({pair:s.pairAddress,dex:s.dexId,base:s.baseToken?.address,quote:s.quoteToken?.address,liquidityUsd:s.liquidity?.usd??null,priceUsd:s.priceUsd??null,volume24hUsd:s.volume?.h24??null,createdAt:s.pairCreatedAt??null})).sort((s,u)=>(u.liquidityUsd??0)-(s.liquidityUsd??0)),d=we(n,c,{stables:t.stableQuoteAssets||[],wrappedNative:t.wrappedNative});return{chainId:e,token:n,pools:d,topPool:d[0]||null,quoteAsset:We(n,d),evidence:d.length?g.LIVE:g.UNKNOWN}},async scanBlocks({fromBlock:n,toBlock:i,address:o,topics:a,chunkSize:l=2e3}={},c={}){if(!Number.isInteger(n)||!Number.isInteger(i))throw new Error("scanBlocks requires integer fromBlock and toBlock");if(i<n)throw new Error("toBlock must be >= fromBlock");let d=[],s=[];for(let p=n;p<=i;p+=l){let f=Math.min(p+l-1,i);s.push([p,f])}let u=await Ue(s,4,async([p,f])=>{let h={fromBlock:`0x${p.toString(16)}`,toBlock:`0x${f.toString(16)}`};o&&(h.address=o),a&&(h.topics=a);let b=await F(e,"eth_getLogs",[h],c).catch(w=>({error:String(w?.message||w)}));return{start:p,end:f,res:b}});for(let{start:p,end:f,res:h}of u){if(h?.error)return{chainId:e,fromBlock:n,toBlock:i,logs:d,complete:!1,failedAt:[p,f],error:h.error,evidence:g.UNKNOWN};for(let b of h?.result??h??[])d.push(b)}return{chainId:e,fromBlock:n,toBlock:i,logs:d,complete:!0,chunks:s.length,evidence:g.LIVE}},async scoreRisk(n,i={}){let o=[],a=y.PASS,l=s=>{let u={[y.PASS]:0,[y.CAUTION]:1,[y.UNKNOWN]:2,[y.FAIL]:3};u[s]>u[a]&&(a=s)},[c,d]=await Promise.all([this.resolveToken(n,i),this.resolvePools(n,i)]);if(c.evidence!==g.LIVE?(o.push({check:"erc20-metadata",result:y.UNKNOWN,detail:c.warning}),l(y.UNKNOWN)):o.push({check:"erc20-metadata",result:y.PASS,detail:`${c.symbol} / ${c.decimals}d`}),d.evidence===g.UNAVAILABLE)o.push({check:"liquidity",result:y.UNKNOWN,detail:d.reason}),l(y.UNKNOWN);else if(!d.pools.length)o.push({check:"liquidity",result:y.FAIL,detail:"no pool with liquidity found"}),l(y.FAIL);else{let s=d.pools[0],u=s.liquidityUsd??0;u<5e3?(o.push({check:"liquidity",result:y.CAUTION,detail:`top pool only $${u}`}),l(y.CAUTION)):o.push({check:"liquidity",result:y.PASS,detail:`$${u} on ${s.dex}`}),s.createdAt&&Date.now()-s.createdAt<24*3600*1e3&&(o.push({check:"age",result:y.CAUTION,detail:"pool under 24h old"}),l(y.CAUTION))}if(typeof this.sellSimulation=="function"){let s=await this.sellSimulation({token:n,amountIn:(10n**16n).toString()},i).catch(u=>({verdict:y.UNKNOWN,reason:String(u?.message||u)}));o.push({check:"sellability",result:s.verdict,detail:s.retentionBps!=null?`round trip returns ${(s.retentionBps/100).toFixed(2)}% -- ${s.reason}`:s.reason}),l(s.verdict)}else o.push({check:"sellability",result:y.UNKNOWN,detail:"no verified router on this chain, so a round-trip sell simulation cannot run. Treat as unproven -- a buy path is not an exit path."}),l(y.UNKNOWN);return{chainId:e,token:n,verdict:a,checks:o,note:"Structural checks only. UNKNOWN is not PASS. A token is not tradeable until a sell simulation succeeds."}}}}function xe(t){let r={...nr(t)},n=new Set((t.venues||[]).map(o=>o.kind));t.venueKind==="uniswap-v3"&&n.has("quoter")&&n.has("router")?Object.assign(r,Je({chainId:t.chainId,wrappedNative:t.wrappedNative,stableQuoteAssets:t.stableQuoteAssets||[],resolveQuoteAsset:async(o,a)=>(await r.resolvePools(o,a)).quoteAsset||null})):t.venueKind==="uniswap-v2"&&n.has("router")&&Object.assign(r,Ge({chainId:t.chainId,wrappedNative:t.wrappedNative}));let i={};for(let[o,a]of Object.entries(r))i[o]=a.bind(r);return{key:t.key,chainId:t.chainId,name:t.name,rpcEnv:t.rpcEnv,nativeCurrency:t.nativeCurrency,explorer:t.explorer,venues:t.venues||[],capabilities:i}}var et=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);function or(){return et.map(t=>ce(xe(t)))}function sr(t){return ce(xe(t))}export{et as CHAIN_CONFIGS,g as EVIDENCE,y as RISK,J as SCANNER_CAPABILITIES,cr as __clearScanners,at as createScanner,ir as getScanner,ar as listScanners,or as registerBuiltinScanners,sr as registerCustomChain,ce as registerScanner,ur as scannerCoverage,it as validateScanner};

package/dist/task.mjs

@@ -1,2 +1,2 @@
-import{randomUUID as ct}from"node:crypto";import{validateMnemonic as ft}from"@scure/bip39";import{wordlist as ut}from"@scure/bip39/wordlists/english";var Ft=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Vt=Object.freeze(["read","simulate"]);var qt=1440*60;var m=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},De=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Me=Object.freeze(["privkey","wif","xprv","seed"]);function oe(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return De.test(t)||Me.includes(r)}var he=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),ge=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Be(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>ge.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function ae(e){let t;try{t=JSON.stringify(e)}catch(o){throw new m("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=Be(t);for(let{rule:o,re:a}of he)if(a.test(r))throw new m("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new m("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,a)=>{if(o&&oe(o))throw new m(`$<serialized>.${o}`,"forbidden-key-name");return a}),t}function b(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=ge.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:a,re:s}of he)if(!(o&&a.startsWith("raw-32-byte-hex"))&&s.test(e))throw new m(t,a);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,a]of e.entries()){if(typeof o=="string"&&oe(o))throw new m(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");b(o,`${t}[key]`,r),b(a,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let a of e.values())b(a,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,a)=>b(o,`${t}[${a}]`,r)),e;for(let[o,a]of Object.entries(e)){if(oe(o))throw new m(`${t}.${o}`,"forbidden-key-name");b(a,`${t}.${o}`,r,o)}return e}import{createHash as Pe}from"node:crypto";var se=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),ye=Object.freeze(Object.fromEntries(se.map((e,t)=>[e,Object.freeze(t+1<se.length?[se[t+1]]:[])]))),xe=new Set(["signed","broadcast"]);function ie(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(ie).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${ie(e[t])}`).join(",")}}`}function Fe(e){return e===void 0?null:JSON.parse(JSON.stringify(e))}function K(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))K(t)}return e}function ce(e,t="fact"){try{b(e,t)}catch{throw new Error(`${t} contains custody material and is forbidden`)}}function Ae(e){return Pe("sha256").update(ie(e)).digest("hex")}function Ee({tradeId:e,state:t,fact:r,asOf:n,previousHash:o,external:a}){let s={tradeId:e,state:t,asOf:n,previousHash:o??null,external:a===!0,fact:Fe(r)};return K({...s,hash:Ae(s)})}function we({tradeId:e,intent:t,asOf:r=0}={}){if(!e||typeof e!="string")throw new Error("tradeId is required");if(!t||typeof t!="object"||Array.isArray(t))throw new Error("intent fact is required");ce(t,"intent");let n=Ee({tradeId:e,state:"intent",fact:t,asOf:r,previousHash:null,external:!1});return K({tradeId:e,state:"intent",events:[n],headHash:n.hash,custody:"none",execution:"prepare-only"})}function Se(e,t,r,n={}){if(J(e),!(ye[e.state]||[]).includes(t))throw new Error(`invalid trade transition ${e.state} -> ${t}`);if(!r||typeof r!="object"||Array.isArray(r))throw new Error(`${t} fact is required`);ce(r,t);let a=n.external===!0||n.externallySupplied===!0;if(xe.has(t)&&!a)throw new Error(`${t} must be an externally supplied fact; this module never signs or broadcasts`);let s=e.events.at(-1),i=n.asOf??s.asOf;if(!Number.isFinite(Number(i))||Number(i)<Number(s.asOf))throw new Error("asOf must be finite and monotonic");let l=Ee({tradeId:e.tradeId,state:t,fact:r,asOf:i,previousHash:s.hash,external:a});return K({...e,state:t,events:[...e.events,l],headHash:l.hash})}function J(e){if(!e||!Array.isArray(e.events)||e.events.length===0)throw new Error("invalid trade lifecycle");if(e.custody!=="none")throw new Error("trade lifecycle custody must be none");if(e.execution!=="prepare-only")throw new Error("trade lifecycle execution must be prepare-only");let t=null;for(let r=0;r<e.events.length;r+=1){let n=e.events[r],{hash:o,...a}=n;if(Ae(a)!==o)throw new Error(`trade event ${r} hash mismatch`);if(ce(n.fact,`trade event ${r} fact`),!Number.isFinite(Number(n.asOf))||t&&Number(n.asOf)<Number(t.asOf))throw new Error(`trade event ${r} asOf must be finite and monotonic`);if(n.tradeId!==e.tradeId||n.previousHash!==t?.hash&&r>0)throw new Error(`trade event ${r} chain mismatch`);if(r===0&&(n.state!=="intent"||n.previousHash!==null))throw new Error("trade lifecycle must start with intent");if(t&&!ye[t.state]?.includes(n.state))throw new Error(`invalid recorded transition ${t.state} -> ${n.state}`);if(xe.has(n.state)&&n.external!==!0)throw new Error(`${n.state} is not externally supplied`);t=n}if(e.state!==t.state||e.headHash!==t.hash)throw new Error("trade lifecycle head mismatch");return!0}var Ve=["0x000000000022d473030f116ddee9f6b43ac78ba3"],qe={4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7","0x1f7d7550b1b028f7571e69a784071f0205fd2efa","0x0bd7d308f8e1639fab988df18a8011f41eacad73","0x5fc5360d0400a0fd4f2af552add042d716f1d168","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x3d4e44eb1374240ce5f1b871ab261cd16335b76a","0x33128a8fc17869897dce68ed026d694621f6fdfd","0x4200000000000000000000000000000000000006","0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5","0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0","0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x61ffe014ba17989e743c5f6cb21bf9697530b21e","0x82af49447d8a07e3bd95bd0d56f35241523fbab1","0xaf88d065e77c8cc2239327c5edb3a432268e5831","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110","0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41","0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6"],1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983","0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2","0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x817997ca8394e26cce3de3a076a4889b27dbf9de","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83","0x779ded0c9e1022225f8e0630b35a9b54be713736","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"]};function _e(e){let t=qe[Number(e)]||[];return new Set([...t,...Ve].map(r=>String(r).trim().toLowerCase()).filter(Boolean))}var j=100;var He=Object.freeze(["signature","signedTx","signedTransaction","rawTransaction","signedPayload","signedRaw"]),Ge=Object.freeze(["txid","txHash","transactionHash","broadcastHash"]),Ue=/^0x[a-fA-F0-9]{40}$/;function We(e,t=process.env){let r=t&&typeof t=="object"?t:process.env,n=String(r.ORACLE_DEST_ALLOWLIST||r.MAD_DEST_ALLOWLIST||"").split(",").map(s=>s.trim().toLowerCase()).filter(Boolean),o=Number(e),a=Number.isInteger(o)&&o>0?[..._e(o)]:[];return new Set([...n,...a])}function Ke(e){return!e||typeof e!="object"?!1:!!(e.slippageGuard||e.slippageBps!=null||e.slippage!=null||e.tokenIn||e.tokenOut||e.amountIn!=null||e.amountOut!=null)}function Je(e){return!e||typeof e!="object"?!1:!!(e.transaction||e.tx||e.to||e.destination||e.settlement||e.data||e.value!=null)}function Ze(e={}){let t=e.transaction&&typeof e.transaction=="object"?e.transaction:e.tx&&typeof e.tx=="object"?e.tx:e;return{to:t.to||e.to||e.destination||e.settlement||null,chainId:t.chainId??e.chainId??e.chain??null,data:t.data||e.data||null,value:t.value??e.value??null}}function Ye(e){let t=e.slippageGuard||e.madSlippage;return t&&t.selectedBps!=null?Number(t.selectedBps):t&&t.capBps!=null&&e.slippageBps==null?Number(t.capBps):e.slippageBps!=null?Number(e.slippageBps):e.slippage&&typeof e.slippage=="object"&&e.slippage.bps!=null?Number(e.slippage.bps):null}function fe(e,t={}){let r=[],n={unsigned:!1,destination:"n/a",slippage:"n/a"};if(!e||typeof e!="object"||Array.isArray(e))return{ok:!1,checks:n,errors:["prepared fact must be an object"]};e.signed===!0&&r.push("prepared fact is signed"),e.broadcast===!0&&r.push("prepared fact claims broadcast");for(let o of He)e[o]&&r.push(`prepared fact carries ${o}`);for(let o of Ge)e[o]&&r.push(`prepared fact claims executed ${o}`);if(n.unsigned=r.length===0,Je(e)){let o=Ze(e),a=o.to==null?"":String(o.to).trim();if(!a)r.push("prepared transaction is missing destination"),n.destination="missing";else{let s=Ue.test(a);if(a.startsWith("0x")&&!s)r.push("prepared destination is not a 20-byte address"),n.destination="malformed";else{let i=We(o.chainId,t.env),l=a.toLowerCase(),E=!!(e.routeAttestation||e.madRoute||e.vaultGuard||e.madVault);i.size>0&&s&&!i.has(l)&&!E?(r.push(`destination ${l} not allowlisted`),n.destination="blocked"):n.destination=i.size===0?"unset":"allowlisted"}}}if(Ke(e)){let o=Ye(e),a=e.slippageGuard?.capBps!=null?Number(e.slippageGuard.capBps):j;!Number.isInteger(o)||o<0?(r.push("swap prepare is missing integer slippage bps"),n.slippage="missing"):o>j||Number.isInteger(a)&&o>a||Number.isInteger(a)&&a>j?(r.push(`slippage ${o} exceeds cap ${Math.min(a,j)}`),n.slippage="blocked"):n.slippage="ok"}return{ok:r.length===0,checks:n,errors:r}}var Xe=(process.env.ORACLE_REDACT_SECRETS??"true").toLowerCase(),ke=["1","true","yes","on"].includes(Xe),Qe=[/sk-[A-Za-z0-9_-]{10,}/g,/sk_live_[A-Za-z0-9]{10,}/g,/sk_test_[A-Za-z0-9]{10,}/g,/ghp_[A-Za-z0-9]{10,}/g,/github_pat_[A-Za-z0-9_]{10,}/g,/gho_[A-Za-z0-9]{10,}/g,/ghs_[A-Za-z0-9]{10,}/g,/xox[baprs]-[A-Za-z0-9-]{10,}/g,/AIza[A-Za-z0-9_-]{30,}/g,/AKIA[A-Z0-9]{16}/g,/pplx-[A-Za-z0-9]{10,}/g,/hf_[A-Za-z0-9]{10,}/g,/xai-[A-Za-z0-9]{30,}/g,/gsk_[A-Za-z0-9]{10,}/g,/npm_[A-Za-z0-9]{10,}/g,/tvly-[A-Za-z0-9]{10,}/g,/Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi],et=/\b0x[a-fA-F0-9]{64}\b/g,tt=/-----BEGIN (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----/g,rt=/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,nt=/\b([A-Z][A-Z0-9_]{0,40}(?:API_?KEY|TOKEN|SECRET|PASSWORD|PASSWD|PRIVATE_?KEY|MNEMONIC|SEED|AUTH)[A-Z0-9_]{0,20})\s*=\s*(['"]?)(\S+)\2/g,ot=/^(?:export\s+)?((?:api[_-]?key|token|secret|password|private[_-]?key|mnemonic|seed[_-]?phrase|authorization))\s*[:=]\s*(['"]?)([^\s&]+)\2/gim,at=/("(?:api[_-]?key|apiKey|access[_-]?token|refresh[_-]?token|client[_-]?secret|private[_-]?key|privateKey|secret|password|authorization|bearer|mnemonic|seedPhrase)"\s*:\s*")([^"]{6,})(")/gi,st=new Set(["access_token","refresh_token","id_token","token","api_key","apikey","client_secret","password","auth","jwt","session","secret","key","code","signature","x-amz-signature","private_key","authorization"]),pr=new Set([...st].map(e=>e.replace(/[^a-z0-9]/gi,"").toLowerCase()));function it(e){let t=String(e??"");return t.length<18?"[REDACTED]":`${t.slice(0,6)}\u2026${t.slice(-4)}`}function Oe(e){return`\xABredacted:${String(e??"").slice(0,4)}\u2026\xBB`}function N(e,t={}){if(e==null)return e;let r=typeof e=="string"?e:String(e);if(!r||!(t.force||ke))return r;let n=t.fileRead?Oe:it;r=r.replace(tt,"[REDACTED_PRIVATE_KEY]"),r=r.replace(et,"[REDACTED_EVM_KEY]"),r=r.replace(rt,o=>n(o));for(let o of Qe)o.lastIndex=0,r=r.replace(o,a=>n(a));return r=r.replace(nt,(o,a,s,i)=>/^(?:os\.(?:getenv|environ)|process\.env|\$ENV\{)/.test(i)?`${a}=${s||""}${i}${s||""}`:`${a}=${s||""}${n(i)}${s||""}`),r=r.replace(ot,(o,a,s,i)=>o.replace(i,n(i))),r=r.replace(at,(o,a,s,i)=>`${a}${n(s)}${i}`),r}function z(e,t={}){if(!(t.force||ke)||e==null)return e;if(typeof e=="string")return N(e,t);if(typeof e=="number"||typeof e=="boolean")return e;if(Array.isArray(e))return e.map(r=>z(r,t));if(typeof e=="object"){let r={};for(let[n,o]of Object.entries(e)){let a=/private|secret|password|mnemonic|seed|api[_-]?key|token|authorization|bearer/i.test(n);typeof o=="string"&&a?r[n]=t.fileRead?Oe(o):"[REDACTED]":r[n]=z(o,t)}return r}try{return N(String(e),t)}catch{return"[REDACTED]"}}var A=1,wr=Object.freeze(["answered","prepared","refused","unavailable"]),lt=Object.freeze({mode:"prepare-only",requiresWalletSignature:!0,backendSigner:!1,signed:!1,broadcast:!1}),dt=Object.freeze({type:"object",properties:Object.freeze({schemaVersion:Object.freeze({const:A}),prompt:Object.freeze({type:"string",minLength:1,maxLength:8e3})}),required:Object.freeze(["schemaVersion","prompt"]),additionalProperties:!1}),pt=32*1024,X=64*1024,te=64*1024,$e=32*1024,bt=8,mt=12,ht=new Set(["sign","signed","signature","signer","signhash","action","actions","watch","receipt","broadcast","submit","execute","sendrawtransaction"]),gt=new Set(["list","show"]),yt=new Set(["call","catalog","health"]),xt=new Set(["swap","bridge","prepare","prepare-bridge"]),Ie=new Set(["quote_comparison","simulation","prepared","approval","settlement","balance_delta","position"]),Re=new Set(["signed","broadcast"]),At=Object.freeze({type:"string",minLength:1,maxLength:256}),ue=Object.freeze({type:"object",additionalProperties:!0});function Ne(e,t,r){return Object.freeze({type:"function",function:Object.freeze({name:e,description:t,strict:!0,parameters:Object.freeze(r)})})}var Te=Object.freeze([Ne("oracle_cli","Run one structurally allowlisted Oracle read or unsigned preparation command. It cannot sign, broadcast, watch, manage actions, or retrieve receipts.",{type:"object",properties:Object.freeze({argv:Object.freeze({type:"array",minItems:1,maxItems:24,items:Object.freeze({type:"string",maxLength:1e3}),description:"Allowed: chain list/show; data call/catalog/health; scan; route swap/bridge/prepare/prepare-bridge; prepare."})}),required:Object.freeze(["argv"]),additionalProperties:!1}),Ne("trade_lifecycle","Create, verify, or advance an ephemeral prepare-only trade lifecycle. Signed and broadcast states are refused. Only returned, hash-valid explicit events count as lifecycle evidence.",{type:"object",properties:Object.freeze({action:Object.freeze({type:"string",enum:Object.freeze(["create","verify","advance"])}),tradeId:At,intent:ue,lifecycle:ue,state:Object.freeze({type:"string",enum:Object.freeze([...Ie])}),fact:ue,asOf:Object.freeze({type:"number"})}),required:Object.freeze(["action"]),additionalProperties:!1})]),Et=["You are Oracle's prepare-only task adapter.","You have exactly two tools: oracle_cli and trade_lifecycle.","Never claim that you signed or broadcast. Never request or expose a key, token, mnemonic, signer, signature, watch, action, or receipt.","A request and your prose are not lifecycle evidence. Use tools for facts. PREPARED is established only by a verified unsigned artifact returned by oracle_cli.","The caller's wallet must review and sign every prepared artifact."].join(" ");function S(e){return Buffer.byteLength(String(e??""),"utf8")}function L(e,t,r=[]){if(!e||typeof e!="object"||Array.isArray(e))return"tool arguments must be an object";for(let o of t)if(!(o in e))return`${o} is required`;let n=new Set([...t,...r]);for(let o of Object.keys(e))if(!n.has(o))return`unexpected argument: ${o}`;return null}function de(e,t){try{return b(e,t),ae(e),null}catch{return`${t} contains forbidden secret or custody material`}}function wt(e){let t=String(e||"").toLowerCase().match(/[a-z]+/g)||[];for(let r of[12,15,18,21,24])for(let n=0;n+r<=t.length;n+=1)try{if(ft(t.slice(n,n+r).join(" "),ut))return!0}catch{}return!1}function St(e){let t=String(e||"");return N(t,{force:!0})!==t||/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{100,}\b/.test(t)||/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/.test(t)||wt(t)?"prompt contains forbidden secret material":null}function Q(e){return JSON.parse(JSON.stringify(e))}function D(e,t,r){let n;try{n=JSON.stringify(e)}catch{throw new TypeError(`${r} must be JSON-serializable`)}if(n===void 0&&(n="null"),Buffer.byteLength(n,"utf8")>t)throw new TypeError(`${r} exceeds size limit`);return n}function _t(e,t){let r=String(e??"");if(S(r)<=t)return r;let n=Math.min(r.length,t);for(;n>0&&S(r.slice(0,n))>t;)n-=Math.max(1,Math.ceil((S(r.slice(0,n))-t)/2));return`${r.slice(0,n)}
-[truncated]`}function g(e,t=$e){let r=N(String(e??""),{force:!0});return r=r.replace(/("(?:signature|signedTransaction|rawTransaction|wif|xprv)"\s*:\s*")[^"]*(")/gi,"$1[REDACTED]$2"),_t(r,t)}function je(e){let t=D(e,te,"task egress"),r=t.replace(/"requiresWalletSignature"\s*:/g,'"walletReviewRequired":').replace(/"lifecycleHeadHash"\s*:/g,'"hash":'),n=JSON.parse(r);return ae(n),t}function v(e){let t=e instanceof Error?e.message:String(e||"task adapter error");return g(t,1e3)}function ze(e,t,r){let n=[t,r].filter(o=>typeof o=="function");return(o,a={})=>{let s=Object.freeze({schemaVersion:A,taskId:e,type:o,...a});try{je(s)}catch{return o==="error"?void 0:ze(e,t,r)("error",{code:"unsafe_event",message:"task event was suppressed"})}for(let i of n)try{i(s)}catch{}}}function Ce(e){if(!e||typeof e!="object"||Array.isArray(e))return{ok:!1,error:"request must be an object"};let t=Object.keys(e);if(t.length!==2||!t.includes("schemaVersion")||!t.includes("prompt"))return{ok:!1,error:"request must contain exactly schemaVersion and prompt"};if(e.schemaVersion!==A)return{ok:!1,error:`schemaVersion must be ${A}`};if(typeof e.prompt!="string"||e.prompt.trim()==="")return{ok:!1,error:"prompt must be a non-empty string"};if(e.prompt.length>dt.properties.prompt.maxLength||S(e.prompt)>pt)return{ok:!1,error:"prompt exceeds size limit"};let r=St(e.prompt);return r?{ok:!1,error:r}:{ok:!0,value:{schemaVersion:A,prompt:e.prompt}}}function Sr(e){let t=Ce(e);if(!t.ok)throw new TypeError(t.error);return t.value}function C(e){return String(e||"").trim().toLowerCase().replace(/^--?/,"").split("=",1)[0]}function kt(e){if(!Array.isArray(e)||e.length<1||e.length>24)return{ok:!1,error:"argv must contain 1 to 24 arguments"};if(e.some(n=>typeof n!="string"||n.length===0||n.length>1e3))return{ok:!1,error:"every argv item must be a non-empty string no longer than 1000 characters"};let t=de(e,"oracle_cli arguments");if(t)return{ok:!1,error:t};for(let n of e){let o=C(n);if(ht.has(o))return{ok:!1,error:`command not allowed: ${o}`}}let r=C(e[0]);if(r==="chain"){let n=C(e[1]);return gt.has(n)?{ok:!0}:{ok:!1,error:`command not allowed: chain${n?` ${n}`:""}`}}if(r==="data"){let n=C(e[1]);return yt.has(n)?n==="call"&&(e.length<4||!e[2].trim()||!e[3].trim())?{ok:!1,error:"data call requires provider and operation"}:{ok:!0}:{ok:!1,error:`command not allowed: data${n?` ${n}`:""}`}}if(r==="route"){let n=C(e[1]);return xt.has(n)?{ok:!0}:{ok:!1,error:`command not allowed: route${n?` ${n}`:""}`}}return r==="scan"||r==="prepare"?{ok:!0}:{ok:!1,error:`command not allowed: ${g(r||"(empty)",100)}`}}function Ot(e){return e[0]==="prepare"||e[0]==="route"&&(e[1]==="prepare"||e[1]==="prepare-bridge")}function Nt(e){let t=e?.arguments??e?.args??e?.input??e?.function?.arguments??{};if(t&&typeof t=="object"&&!Array.isArray(t))return D(t,X,"tool arguments"),Q(t);if(typeof t!="string"||S(t)>X)throw new TypeError("tool arguments must be bounded JSON");let r=JSON.parse(t||"{}");if(!r||typeof r!="object"||Array.isArray(r))throw new TypeError("tool arguments must be an object");return r}function Tt(e){let t=e?.toolCalls??e?.tool_calls??e?.message?.tool_calls??[];return Array.isArray(t)?t.map((r,n)=>({id:String(r?.id||`task-tool-${n+1}`),name:String(r?.name??r?.function?.name??""),source:r})):[]}function $t(e,t){let r=e?.text??e?.content??e?.message?.content;return typeof r=="string"?r:t.join("")}async function It(e,t){let r=typeof e=="function"?e:typeof e?.complete=="function"?e.complete.bind(e):typeof e?.run=="function"?e.run.bind(e):null;if(!r)throw new TypeError("task provider is unavailable");return r(t)}function Rt(e){return e?.aborted===!0}function jt(){let e=new Error("task was stopped");return e.name="AbortError",e}function h(e){if(Rt(e))throw jt()}function ee(e){if(Array.isArray(e))return e.map(ee);if(!e||typeof e!="object")return e;let t={};for(let[r,n]of Object.entries(e))/(?:private[_-]?key|signature|signed(?:tx|transaction|payload|raw)|rawtransaction|mnemonic|seed|wif|xprv|password|bearer|api[_-]?key|access[_-]?token|auth[_-]?token|keystore)/i.test(r)?t[r]="[REDACTED]":t[r]=ee(n);return t}function zt(e){let t=ee(z(e,{force:!0})),r=D(t,te,"tool output");return{value:JSON.parse(r),json:r}}function Ct(e,t){if(e&&typeof e=="object"&&e.ok===!1)return null;let r=null;if(typeof e=="string"?r=e:typeof e?.stdout=="string"?r=e.stdout:typeof e?.output=="string"&&(r=e.output),r==null)return null;let n=N(r,{force:!0});if(S(n)>te)return null;let o;try{o=JSON.parse(n.trim())}catch{return null}if(!o||typeof o!="object"||Array.isArray(o))return null;let a=o.prepared&&typeof o.prepared=="object"?o.prepared:o.artifact&&typeof o.artifact=="object"?o.artifact:o;if(!a||typeof a!="object"||Array.isArray(a))return null;let{requiresWalletSignature:s,...i}=a;if(de(i,"prepared artifact")||a.execution!=null&&a.execution!=="prepare-only"||a.requiresWalletSignature!=null&&a.requiresWalletSignature!==!0||a.backendSigner!=null&&a.backendSigner!==!1)return null;let l=fe(a);return l.ok?Object.freeze({command:Object.freeze([...t]),artifact:Object.freeze(Q(a)),checks:Object.freeze(Q(l.checks))}):null}function pe(e){return e?.events?.some(t=>Re.has(t?.state))}function Lt(e,t){if(J(e),pe(e))throw new TypeError("signed and broadcast lifecycle states are not accepted");let r=e.events.at(-1);if(!r||r.hash!==e.headHash||r.state!==e.state)throw new TypeError("trade lifecycle has no explicit head event");let n={lifecycleState:String(r.state).toUpperCase(),lifecycleHeadHash:r.hash,prepareVerified:t===!0};return Object.freeze(n)}function Y(e=!1){return Object.freeze({lifecycleState:"NONE",lifecycleHeadHash:null,prepareVerified:e===!0})}function vt(e){let t=L(e,["action"],["tradeId","intent","lifecycle","state","fact","asOf"]);if(t)return t;let r=de(e,"trade_lifecycle arguments");if(r)return r;if(!new Set(["create","verify","advance"]).has(e.action))return"unknown trade lifecycle action";if(e.lifecycle&&pe(e.lifecycle))return"signed and broadcast lifecycle states are not accepted";if(e.state&&Re.has(e.state))return`${e.state} lifecycle state is not accepted`;if(e.action==="create")return L(e,["action","tradeId","intent"],["asOf"]);if(e.action==="verify")return L(e,["action","lifecycle"]);if(e.action==="advance"){let n=L(e,["action","lifecycle","state","fact"],["asOf"]);if(n)return n;if(!Ie.has(e.state))return`lifecycle state is not accepted: ${String(e.state)}`}return null}function Dt(e,t={}){let r=vt(e);if(r)return{ok:!1,refused:!0,error:r};let n=t.createTradeLifecycle||we,o=t.advanceTradeLifecycle||Se,a=t.assertTradeLifecycle||J;try{if(e.action==="create"){let i=n({tradeId:e.tradeId,intent:e.intent,asOf:e.asOf});return a(i),{ok:!0,lifecycle:i}}if(e.action==="verify"){if(a(e.lifecycle),pe(e.lifecycle))throw new TypeError("signed and broadcast lifecycle states are not accepted");return{ok:!0,valid:!0,lifecycle:e.lifecycle}}if(a(e.lifecycle),e.state==="prepared"){let i=fe(e.fact);if(!i.ok)return{ok:!1,refused:!0,error:`prepare verifier failed: ${i.errors[0]}`}}let s=o(e.lifecycle,e.state,e.fact,{asOf:e.asOf});return a(s),{ok:!0,lifecycle:s}}catch(s){return{ok:!1,refused:!0,error:v(s)}}}function Z(e,t,r,n,o){let a={schemaVersion:A,taskId:e,status:t,text:g(r||""),custody:lt,prepared:n||null,evidence:o||Y(!!n)};return je(a),Object.freeze(a)}function Mt(e,t){return{role:"assistant",content:g(e||""),tool_calls:t.map(r=>({id:r.id,type:"function",function:{name:r.name,arguments:typeof(r.source?.arguments??r.source?.function?.arguments)=="string"?g(r.source.arguments??r.source.function.arguments,X):D(ee(z(r.source?.arguments??r.source?.args??r.source?.input??{},{force:!0})),X,"tool arguments")}}))}}function Bt(e,t){let r=t.taskId??(typeof e.taskIdFactory=="function"?e.taskIdFactory():null),n=r==null?`task-${ct()}`:String(r);if(!/^[A-Za-z0-9._:-]{1,128}$/.test(n))throw new TypeError("taskId must be a bounded opaque identifier");return n}function le(e,t){return Object.freeze({lifecycleState:e?.lifecycleState||"NONE",lifecycleHeadHash:e?.lifecycleHeadHash||null,prepareVerified:t===!0})}function Le(e={}){let t=e.provider,r=e.onEvent,n=Number.isInteger(e.maxSteps)&&e.maxSteps>0?Math.min(e.maxSteps,mt):bt,o=new Set,a=!1;async function s(l,E={}){let _=Bt(e,E),u=ze(_,r,E.onEvent),M=Ce(l);if(!M.ok){let d=Z(_,"refused",M.error,null,Y());return u("error",{code:"invalid_request",message:M.error}),u("complete",{result:d}),d}if(a){let d=Z(_,"unavailable","task adapter is stopped",null,Y());return u("error",{code:"stopped",message:"task adapter is stopped"}),u("complete",{result:d}),d}let c=new AbortController;o.add(c);let w=E.signal||e.signal,be=()=>c.abort(w?.reason);w&&(w.aborted?c.abort(w.reason):w.addEventListener("abort",be,{once:!0}));let B="",P=null,T=Y(),y=!1,k=!1,me=!1,$=[{role:"system",content:Et},{role:"user",content:M.value.prompt}];u("accepted",{request:{schemaVersion:A}});try{h(c.signal);for(let re=0;re<n;re+=1){h(c.signal);let ne=[];u("stage",{stage:"provider",step:re+1});let V;try{V=await It(t,{schemaVersion:A,taskId:_,messages:Q($),tools:Te,signal:c.signal,onDelta:f=>{S(ne.join(""))<=$e*2&&ne.push(String(f??""))}})}catch(f){h(c.signal),k=!0,u("error",{code:"provider_unavailable",message:v(f)});break}h(c.signal),D(V,te,"provider response");let ve=$t(V,ne),q=g(ve);q&&(B+=q,B=g(B),u("delta",{text:q}));let H=Tt(V);if(H.length===0){me=!0;break}if(H.length>4){y=!0,u("stage",{stage:"tool",outcome:"refused",reason:"too_many_calls"});break}$.push(Mt(q,H));for(let f of H){h(c.signal);let x;try{x=Nt(f.source)}catch(G){y=!0;let U={ok:!1,error:`tool refused: ${v(G)}`};$.push({role:"tool",tool_call_id:f.id,name:f.name,content:JSON.stringify(U)}),u("stage",{stage:"tool",tool:g(f.name,100),outcome:"refused"});continue}let p;if(f.name==="oracle_cli"){let G=L(x,["argv"]),U=G?{ok:!1,error:G}:kt(x.argv);if(!U.ok)y=!0,p={ok:!1,error:`tool refused: ${U.error}`};else{h(c.signal);try{typeof e.runOracleCli=="function"?p=await e.runOracleCli(x.argv,{signal:c.signal}):typeof e.toolRunner=="function"?p=await e.toolRunner("oracle_cli",x,{signal:c.signal}):(k=!0,p={ok:!1,error:"oracle_cli runner is unavailable"})}catch(W){h(c.signal),k=!0,p={ok:!1,error:v(W)}}if(h(c.signal),Ot(x.argv)){let W=Ct(p,x.argv);W&&(P=W,T=le(T,!0))}}}else f.name==="trade_lifecycle"?p=Dt(x,e.lifecycle):(y=!0,p={ok:!1,error:`tool refused: unknown tool ${g(f.name,100)}`});h(c.signal);let O=zt(p);if((O.value?.refused===!0||/^tool refused:/i.test(String(O.value?.error||"")))&&(y=!0),O.value?.lifecycle)try{T=Lt(O.value.lifecycle,!!P)}catch{}$.push({role:"tool",tool_call_id:f.id,name:f.name,content:O.json}),u("stage",{stage:"tool",tool:f.name==="oracle_cli"||f.name==="trade_lifecycle"?f.name:"unknown",outcome:O.value?.ok===!1?"refused":"complete"})}}!me&&!y&&!k&&$.at(-1)?.role==="tool"&&(k=!0,u("error",{code:"step_limit",message:"task step limit reached"}));let d=y?"refused":P?"prepared":k?"unavailable":"answered",I=y?null:P,F=le(T,!!I),R=Z(_,d,B,I,F);return u("complete",{result:R}),R}catch(d){let I=d?.name==="AbortError"||c.signal.aborted,F=I?"task was stopped":v(d),R=Z(_,"unavailable",F,null,le(T,!1));return u("error",{code:I?"aborted":"adapter_error",message:F}),u("complete",{result:R}),R}finally{w&&w.removeEventListener("abort",be),o.delete(c)}}function i(l="task adapter stopped"){a=!0;for(let E of o)E.abort(l)}return Object.freeze({prepare:s,stop:i,tools:Te})}async function Pt(e,t={}){return Le(t).prepare(e,{signal:t.signal,onEvent:t.turnEvent})}var _r=Le,kr=Pt;export{lt as TASK_CUSTODY_MARKERS,dt as TASK_PREPARE_REQUEST_SCHEMA,wr as TASK_RESULT_STATUSES,A as TASK_SCHEMA_VERSION,Te as TASK_TOOLS,Sr as assertTaskPrepareRequest,_r as createOracleTaskAdapter,Le as createTaskAdapter,Pt as prepareOracleTask,kr as prepareTask,kt as validateTaskOracleCommand,Ce as validateTaskPrepareRequest};
+import{randomUUID as ct}from"node:crypto";import{validateMnemonic as ft}from"@scure/bip39";import{wordlist as ut}from"@scure/bip39/wordlists/english";var Ft=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Vt=Object.freeze(["read","simulate"]);var qt=1440*60;var m=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},De=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Me=Object.freeze(["privkey","wif","xprv","seed"]);function oe(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return De.test(t)||Me.includes(r)}var ge=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),he=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Be(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>he.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function ae(e){let t;try{t=JSON.stringify(e)}catch(o){throw new m("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=Be(t);for(let{rule:o,re:a}of ge)if(a.test(r))throw new m("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new m("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,a)=>{if(o&&oe(o))throw new m(`$<serialized>.${o}`,"forbidden-key-name");return a}),t}function b(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=he.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:a,re:s}of ge)if(!(o&&a.startsWith("raw-32-byte-hex"))&&s.test(e))throw new m(t,a);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,a]of e.entries()){if(typeof o=="string"&&oe(o))throw new m(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");b(o,`${t}[key]`,r),b(a,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let a of e.values())b(a,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,a)=>b(o,`${t}[${a}]`,r)),e;for(let[o,a]of Object.entries(e)){if(oe(o))throw new m(`${t}.${o}`,"forbidden-key-name");b(a,`${t}.${o}`,r,o)}return e}import{createHash as Pe}from"node:crypto";var se=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),ye=Object.freeze(Object.fromEntries(se.map((e,t)=>[e,Object.freeze(t+1<se.length?[se[t+1]]:[])]))),xe=new Set(["signed","broadcast"]);function ie(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(ie).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${ie(e[t])}`).join(",")}}`}function Fe(e){return e===void 0?null:JSON.parse(JSON.stringify(e))}function J(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))J(t)}return e}function ce(e,t="fact"){try{b(e,t)}catch{throw new Error(`${t} contains custody material and is forbidden`)}}function Ae(e){return Pe("sha256").update(ie(e)).digest("hex")}function Ee({tradeId:e,state:t,fact:r,asOf:n,previousHash:o,external:a}){let s={tradeId:e,state:t,asOf:n,previousHash:o??null,external:a===!0,fact:Fe(r)};return J({...s,hash:Ae(s)})}function we({tradeId:e,intent:t,asOf:r=0}={}){if(!e||typeof e!="string")throw new Error("tradeId is required");if(!t||typeof t!="object"||Array.isArray(t))throw new Error("intent fact is required");ce(t,"intent");let n=Ee({tradeId:e,state:"intent",fact:t,asOf:r,previousHash:null,external:!1});return J({tradeId:e,state:"intent",events:[n],headHash:n.hash,custody:"none",execution:"prepare-only"})}function Se(e,t,r,n={}){if(K(e),!(ye[e.state]||[]).includes(t))throw new Error(`invalid trade transition ${e.state} -> ${t}`);if(!r||typeof r!="object"||Array.isArray(r))throw new Error(`${t} fact is required`);ce(r,t);let a=n.external===!0||n.externallySupplied===!0;if(xe.has(t)&&!a)throw new Error(`${t} must be an externally supplied fact; this module never signs or broadcasts`);let s=e.events.at(-1),i=n.asOf??s.asOf;if(!Number.isFinite(Number(i))||Number(i)<Number(s.asOf))throw new Error("asOf must be finite and monotonic");let l=Ee({tradeId:e.tradeId,state:t,fact:r,asOf:i,previousHash:s.hash,external:a});return J({...e,state:t,events:[...e.events,l],headHash:l.hash})}function K(e){if(!e||!Array.isArray(e.events)||e.events.length===0)throw new Error("invalid trade lifecycle");if(e.custody!=="none")throw new Error("trade lifecycle custody must be none");if(e.execution!=="prepare-only")throw new Error("trade lifecycle execution must be prepare-only");let t=null;for(let r=0;r<e.events.length;r+=1){let n=e.events[r],{hash:o,...a}=n;if(Ae(a)!==o)throw new Error(`trade event ${r} hash mismatch`);if(ce(n.fact,`trade event ${r} fact`),!Number.isFinite(Number(n.asOf))||t&&Number(n.asOf)<Number(t.asOf))throw new Error(`trade event ${r} asOf must be finite and monotonic`);if(n.tradeId!==e.tradeId||n.previousHash!==t?.hash&&r>0)throw new Error(`trade event ${r} chain mismatch`);if(r===0&&(n.state!=="intent"||n.previousHash!==null))throw new Error("trade lifecycle must start with intent");if(t&&!ye[t.state]?.includes(n.state))throw new Error(`invalid recorded transition ${t.state} -> ${n.state}`);if(xe.has(n.state)&&n.external!==!0)throw new Error(`${n.state} is not externally supplied`);t=n}if(e.state!==t.state||e.headHash!==t.hash)throw new Error("trade lifecycle head mismatch");return!0}var Ve=["0x000000000022d473030f116ddee9f6b43ac78ba3"],qe={4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7","0x1f7d7550b1b028f7571e69a784071f0205fd2efa","0x0bd7d308f8e1639fab988df18a8011f41eacad73","0x5fc5360d0400a0fd4f2af552add042d716f1d168","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x3d4e44eb1374240ce5f1b871ab261cd16335b76a","0x33128a8fc17869897dce68ed026d694621f6fdfd","0x4200000000000000000000000000000000000006","0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5","0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0","0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x61ffe014ba17989e743c5f6cb21bf9697530b21e","0x82af49447d8a07e3bd95bd0d56f35241523fbab1","0xaf88d065e77c8cc2239327c5edb3a432268e5831","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110","0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41","0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6"],1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983","0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2","0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x817997ca8394e26cce3de3a076a4889b27dbf9de","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83","0x779ded0c9e1022225f8e0630b35a9b54be713736","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"]};function _e(e){let t=qe[Number(e)]||[];return new Set([...t,...Ve].map(r=>String(r).trim().toLowerCase()).filter(Boolean))}var R=100;var He=Object.freeze(["signature","signedTx","signedTransaction","rawTransaction","signedPayload","signedRaw"]),Ge=Object.freeze(["txid","txHash","transactionHash","broadcastHash"]),Ue=/^0x[a-fA-F0-9]{40}$/;function We(e,t=process.env){let r=t&&typeof t=="object"?t:process.env,n=String(r.ORACLE_DEST_ALLOWLIST||r.MAD_DEST_ALLOWLIST||"").split(",").map(s=>s.trim().toLowerCase()).filter(Boolean),o=Number(e),a=Number.isInteger(o)&&o>0?[..._e(o)]:[];return new Set([...n,...a])}function Je(e){return!e||typeof e!="object"?!1:!!(e.slippageGuard||e.slippageBps!=null||e.slippage!=null||e.tokenIn||e.tokenOut||e.amountIn!=null||e.amountOut!=null)}function Ke(e){return!e||typeof e!="object"?!1:!!(e.transaction||e.tx||e.to||e.destination||e.settlement||e.data||e.value!=null)}function Ze(e={}){let t=e.transaction&&typeof e.transaction=="object"?e.transaction:e.tx&&typeof e.tx=="object"?e.tx:e;return{to:t.to||e.to||e.destination||e.settlement||null,chainId:t.chainId??e.chainId??e.chain??null,data:t.data||e.data||null,value:t.value??e.value??null}}function Ye(e){let t=e.slippageGuard||e.madSlippage;return t&&t.selectedBps!=null?Number(t.selectedBps):t&&t.capBps!=null&&e.slippageBps==null?Number(t.capBps):e.slippageBps!=null?Number(e.slippageBps):e.slippage&&typeof e.slippage=="object"&&e.slippage.bps!=null?Number(e.slippage.bps):null}function fe(e,t={}){let r=[],n={unsigned:!1,destination:"n/a",slippage:"n/a"};if(!e||typeof e!="object"||Array.isArray(e))return{ok:!1,checks:n,errors:["prepared fact must be an object"]};e.signed===!0&&r.push("prepared fact is signed"),e.broadcast===!0&&r.push("prepared fact claims broadcast");for(let o of He)e[o]&&r.push(`prepared fact carries ${o}`);for(let o of Ge)e[o]&&r.push(`prepared fact claims executed ${o}`);if(n.unsigned=r.length===0,Ke(e)){let o=Ze(e),a=o.to==null?"":String(o.to).trim();if(!a)r.push("prepared transaction is missing destination"),n.destination="missing";else{let s=Ue.test(a);if(a.startsWith("0x")&&!s)r.push("prepared destination is not a 20-byte address"),n.destination="malformed";else{let i=We(o.chainId,t.env),l=a.toLowerCase(),E=!!(e.routeAttestation||e.madRoute||e.vaultGuard||e.madVault);i.size>0&&s&&!i.has(l)&&!E?(r.push(`destination ${l} not allowlisted`),n.destination="blocked"):n.destination=i.size===0?"unset":"allowlisted"}}}if(Je(e)){let o=Ye(e),a=e.slippageGuard?.capBps!=null?Number(e.slippageGuard.capBps):R;!Number.isInteger(o)||o<0?(r.push("swap prepare is missing integer slippage bps"),n.slippage="missing"):o>R||Number.isInteger(a)&&o>a||Number.isInteger(a)&&a>R?(r.push(`slippage ${o} exceeds cap ${Math.min(a,R)}`),n.slippage="blocked"):n.slippage="ok"}return{ok:r.length===0,checks:n,errors:r}}var Xe=(process.env.ORACLE_REDACT_SECRETS??"true").toLowerCase(),ke=["1","true","yes","on"].includes(Xe),Qe=[/sk-[A-Za-z0-9_-]{10,}/g,/sk_live_[A-Za-z0-9]{10,}/g,/sk_test_[A-Za-z0-9]{10,}/g,/ghp_[A-Za-z0-9]{10,}/g,/github_pat_[A-Za-z0-9_]{10,}/g,/gho_[A-Za-z0-9]{10,}/g,/ghs_[A-Za-z0-9]{10,}/g,/xox[baprs]-[A-Za-z0-9-]{10,}/g,/AIza[A-Za-z0-9_-]{30,}/g,/AKIA[A-Z0-9]{16}/g,/pplx-[A-Za-z0-9]{10,}/g,/hf_[A-Za-z0-9]{10,}/g,/xai-[A-Za-z0-9]{30,}/g,/gsk_[A-Za-z0-9]{10,}/g,/npm_[A-Za-z0-9]{10,}/g,/tvly-[A-Za-z0-9]{10,}/g,/Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi],et=/\b0x[a-fA-F0-9]{64}\b/g,tt=/-----BEGIN (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----/g,rt=/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,nt=/\b([A-Z][A-Z0-9_]{0,40}(?:API_?KEY|TOKEN|SECRET|PASSWORD|PASSWD|PRIVATE_?KEY|MNEMONIC|SEED|AUTH)[A-Z0-9_]{0,20})\s*=\s*(['"]?)(\S+)\2/g,ot=/^(?:export\s+)?((?:api[_-]?key|token|secret|password|private[_-]?key|mnemonic|seed[_-]?phrase|authorization))\s*[:=]\s*(['"]?)([^\s&]+)\2/gim,at=/("(?:api[_-]?key|apiKey|access[_-]?token|refresh[_-]?token|client[_-]?secret|private[_-]?key|privateKey|secret|password|authorization|bearer|mnemonic|seedPhrase)"\s*:\s*")([^"]{6,})(")/gi,st=new Set(["access_token","refresh_token","id_token","token","api_key","apikey","client_secret","password","auth","jwt","session","secret","key","code","signature","x-amz-signature","private_key","authorization"]),pr=new Set([...st].map(e=>e.replace(/[^a-z0-9]/gi,"").toLowerCase()));function it(e){let t=String(e??"");return t.length<18?"[REDACTED]":`${t.slice(0,6)}\u2026${t.slice(-4)}`}function Oe(e){return`\xABredacted:${String(e??"").slice(0,4)}\u2026\xBB`}function N(e,t={}){if(e==null)return e;let r=typeof e=="string"?e:String(e);if(!r||!(t.force||ke))return r;let n=t.fileRead?Oe:it;r=r.replace(tt,"[REDACTED_PRIVATE_KEY]"),r=r.replace(et,"[REDACTED_EVM_KEY]"),r=r.replace(rt,o=>n(o));for(let o of Qe)o.lastIndex=0,r=r.replace(o,a=>n(a));return r=r.replace(nt,(o,a,s,i)=>/^(?:os\.(?:getenv|environ)|process\.env|\$ENV\{)/.test(i)?`${a}=${s||""}${i}${s||""}`:`${a}=${s||""}${n(i)}${s||""}`),r=r.replace(ot,(o,a,s,i)=>o.replace(i,n(i))),r=r.replace(at,(o,a,s,i)=>`${a}${n(s)}${i}`),r}function z(e,t={}){if(!(t.force||ke)||e==null)return e;if(typeof e=="string")return N(e,t);if(typeof e=="number"||typeof e=="boolean")return e;if(Array.isArray(e))return e.map(r=>z(r,t));if(typeof e=="object"){let r={};for(let[n,o]of Object.entries(e)){let a=/private|secret|password|mnemonic|seed|api[_-]?key|token|authorization|bearer/i.test(n);typeof o=="string"&&a?r[n]=t.fileRead?Oe(o):"[REDACTED]":r[n]=z(o,t)}return r}try{return N(String(e),t)}catch{return"[REDACTED]"}}var A=1,wr=Object.freeze(["answered","prepared","refused","unavailable"]),lt=Object.freeze({mode:"prepare-only",requiresWalletSignature:!0,backendSigner:!1,signed:!1,broadcast:!1}),dt=Object.freeze({type:"object",properties:Object.freeze({schemaVersion:Object.freeze({const:A}),prompt:Object.freeze({type:"string",minLength:1,maxLength:8e3})}),required:Object.freeze(["schemaVersion","prompt"]),additionalProperties:!1}),pt=32*1024,X=64*1024,te=64*1024,$e=32*1024,bt=8,mt=12,gt=new Set(["sign","signed","signature","signer","signhash","action","actions","watch","receipt","broadcast","submit","execute","sendrawtransaction"]),ht=new Set(["list","show"]),yt=new Set(["call","catalog","health"]),xt=new Set(["swap","bridge","prepare","prepare-bridge"]),Ie=new Set(["quote_comparison","simulation","prepared","approval","settlement","balance_delta","position"]),je=new Set(["signed","broadcast"]),At=Object.freeze({type:"string",minLength:1,maxLength:256}),ue=Object.freeze({type:"object",additionalProperties:!0});function Ne(e,t,r){return Object.freeze({type:"function",function:Object.freeze({name:e,description:t,strict:!0,parameters:Object.freeze(r)})})}var Te=Object.freeze([Ne("oracle_cli","Run one structurally allowlisted Oracle read or unsigned preparation command. It cannot sign, broadcast, watch, manage actions, or retrieve receipts.",{type:"object",properties:Object.freeze({argv:Object.freeze({type:"array",minItems:1,maxItems:24,items:Object.freeze({type:"string",maxLength:1e3}),description:"Allowed: chain list/show; data call/catalog/health; scan; route swap/bridge/prepare/prepare-bridge; prepare."})}),required:Object.freeze(["argv"]),additionalProperties:!1}),Ne("trade_lifecycle","Create, verify, or advance an ephemeral prepare-only trade lifecycle. Signed and broadcast states are refused. Only returned, hash-valid explicit events count as lifecycle evidence.",{type:"object",properties:Object.freeze({action:Object.freeze({type:"string",enum:Object.freeze(["create","verify","advance"])}),tradeId:At,intent:ue,lifecycle:ue,state:Object.freeze({type:"string",enum:Object.freeze([...Ie])}),fact:ue,asOf:Object.freeze({type:"number"})}),required:Object.freeze(["action"]),additionalProperties:!1})]),Et=["You are Oracle's prepare-only task adapter.","You have exactly two tools: oracle_cli and trade_lifecycle.","Never claim that you signed or broadcast. Never request or expose a key, token, mnemonic, signer, signature, watch, action, or receipt.","A request and your prose are not lifecycle evidence. Use tools for facts. PREPARED is established only by a verified unsigned artifact returned by oracle_cli.","The caller's wallet must review and sign every prepared artifact."].join(" ");function S(e){return Buffer.byteLength(String(e??""),"utf8")}function L(e,t,r=[]){if(!e||typeof e!="object"||Array.isArray(e))return"tool arguments must be an object";for(let o of t)if(!(o in e))return`${o} is required`;let n=new Set([...t,...r]);for(let o of Object.keys(e))if(!n.has(o))return`unexpected argument: ${o}`;return null}function de(e,t){try{return b(e,t),ae(e),null}catch{return`${t} contains forbidden secret or custody material`}}function wt(e){let t=String(e||"").toLowerCase().match(/[a-z]+/g)||[];for(let r of[12,15,18,21,24])for(let n=0;n+r<=t.length;n+=1)try{if(ft(t.slice(n,n+r).join(" "),ut))return!0}catch{}return!1}function St(e){let t=String(e||"");return N(t,{force:!0})!==t||/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{100,}\b/.test(t)||/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/.test(t)||wt(t)?"prompt contains forbidden secret material":null}function Q(e){return JSON.parse(JSON.stringify(e))}function D(e,t,r){let n;try{n=JSON.stringify(e)}catch{throw new TypeError(`${r} must be JSON-serializable`)}if(n===void 0&&(n="null"),Buffer.byteLength(n,"utf8")>t)throw new TypeError(`${r} exceeds size limit`);return n}function _t(e,t){let r=String(e??"");if(S(r)<=t)return r;let n=Math.min(r.length,t);for(;n>0&&S(r.slice(0,n))>t;)n-=Math.max(1,Math.ceil((S(r.slice(0,n))-t)/2));return`${r.slice(0,n)}
+[truncated]`}function h(e,t=$e){let r=N(String(e??""),{force:!0});return r=r.replace(/("(?:signature|signedTransaction|rawTransaction|wif|xprv)"\s*:\s*")[^"]*(")/gi,"$1[REDACTED]$2"),_t(r,t)}function Re(e){let t=D(e,te,"task egress"),r=t.replace(/"requiresWalletSignature"\s*:/g,'"walletReviewRequired":').replace(/"lifecycleHeadHash"\s*:/g,'"hash":'),n=JSON.parse(r);return ae(n),t}function v(e){let t=e instanceof Error?e.message:String(e||"task adapter error");return h(t,1e3)}function ze(e,t,r){let n=[t,r].filter(o=>typeof o=="function");return(o,a={})=>{let s=Object.freeze({schemaVersion:A,taskId:e,type:o,...a});try{Re(s)}catch{return o==="error"?void 0:ze(e,t,r)("error",{code:"unsafe_event",message:"task event was suppressed"})}for(let i of n)try{i(s)}catch{}}}function Ce(e){if(!e||typeof e!="object"||Array.isArray(e))return{ok:!1,error:"request must be an object"};let t=Object.keys(e);if(t.length!==2||!t.includes("schemaVersion")||!t.includes("prompt"))return{ok:!1,error:"request must contain exactly schemaVersion and prompt"};if(e.schemaVersion!==A)return{ok:!1,error:`schemaVersion must be ${A}`};if(typeof e.prompt!="string"||e.prompt.trim()==="")return{ok:!1,error:"prompt must be a non-empty string"};if(e.prompt.length>dt.properties.prompt.maxLength||S(e.prompt)>pt)return{ok:!1,error:"prompt exceeds size limit"};let r=St(e.prompt);return r?{ok:!1,error:r}:{ok:!0,value:{schemaVersion:A,prompt:e.prompt}}}function Sr(e){let t=Ce(e);if(!t.ok)throw new TypeError(t.error);return t.value}function C(e){return String(e||"").trim().toLowerCase().replace(/^--?/,"").split("=",1)[0]}function kt(e){if(!Array.isArray(e)||e.length<1||e.length>24)return{ok:!1,error:"argv must contain 1 to 24 arguments"};if(e.some(n=>typeof n!="string"||n.length===0||n.length>1e3))return{ok:!1,error:"every argv item must be a non-empty string no longer than 1000 characters"};let t=de(e,"oracle_cli arguments");if(t)return{ok:!1,error:t};for(let n of e){let o=C(n);if(gt.has(o))return{ok:!1,error:`command not allowed: ${o}`}}let r=C(e[0]);if(r==="chain"){let n=C(e[1]);return ht.has(n)?{ok:!0}:{ok:!1,error:`command not allowed: chain${n?` ${n}`:""}`}}if(r==="data"){let n=C(e[1]);return yt.has(n)?n==="call"&&(e.length<4||!e[2].trim()||!e[3].trim())?{ok:!1,error:"data call requires provider and operation"}:{ok:!0}:{ok:!1,error:`command not allowed: data${n?` ${n}`:""}`}}if(r==="route"){let n=C(e[1]);return xt.has(n)?{ok:!0}:{ok:!1,error:`command not allowed: route${n?` ${n}`:""}`}}return r==="scan"||r==="prepare"?{ok:!0}:{ok:!1,error:`command not allowed: ${h(r||"(empty)",100)}`}}function Ot(e){return e[0]==="prepare"||e[0]==="route"&&(e[1]==="prepare"||e[1]==="prepare-bridge")}function Nt(e){let t=e?.arguments??e?.args??e?.input??e?.function?.arguments??{};if(t&&typeof t=="object"&&!Array.isArray(t))return D(t,X,"tool arguments"),Q(t);if(typeof t!="string"||S(t)>X)throw new TypeError("tool arguments must be bounded JSON");let r=JSON.parse(t||"{}");if(!r||typeof r!="object"||Array.isArray(r))throw new TypeError("tool arguments must be an object");return r}function Tt(e){let t=e?.toolCalls??e?.tool_calls??e?.message?.tool_calls??[];return Array.isArray(t)?t.map((r,n)=>({id:String(r?.id||`task-tool-${n+1}`),name:String(r?.name??r?.function?.name??""),source:r})):[]}function $t(e,t){let r=e?.text??e?.content??e?.message?.content;return typeof r=="string"?r:t.join("")}async function It(e,t){let r=typeof e=="function"?e:typeof e?.complete=="function"?e.complete.bind(e):typeof e?.run=="function"?e.run.bind(e):null;if(!r)throw new TypeError("task provider is unavailable");return r(t)}function jt(e){return e?.aborted===!0}function Rt(){let e=new Error("task was stopped");return e.name="AbortError",e}function g(e){if(jt(e))throw Rt()}function ee(e){if(Array.isArray(e))return e.map(ee);if(!e||typeof e!="object")return e;let t={};for(let[r,n]of Object.entries(e))/(?:private[_-]?key|signature|signed(?:tx|transaction|payload|raw)|rawtransaction|mnemonic|seed|wif|xprv|password|bearer|api[_-]?key|access[_-]?token|auth[_-]?token|keystore)/i.test(r)?t[r]="[REDACTED]":t[r]=ee(n);return t}function zt(e){let t=ee(z(e,{force:!0})),r=D(t,te,"tool output");return{value:JSON.parse(r),json:r}}function Ct(e,t){if(e&&typeof e=="object"&&e.ok===!1)return null;let r=null;if(typeof e=="string"?r=e:typeof e?.stdout=="string"?r=e.stdout:typeof e?.output=="string"&&(r=e.output),r==null)return null;let n=N(r,{force:!0});if(S(n)>te)return null;let o;try{o=JSON.parse(n.trim())}catch{return null}if(!o||typeof o!="object"||Array.isArray(o))return null;let a=o.prepared&&typeof o.prepared=="object"?o.prepared:o.artifact&&typeof o.artifact=="object"?o.artifact:o;if(!a||typeof a!="object"||Array.isArray(a))return null;let{requiresWalletSignature:s,...i}=a;if(de(i,"prepared artifact")||a.execution!=null&&a.execution!=="prepare-only"||a.requiresWalletSignature!=null&&a.requiresWalletSignature!==!0||a.backendSigner!=null&&a.backendSigner!==!1)return null;let l=fe(a);return l.ok?Object.freeze({command:Object.freeze([...t]),artifact:Object.freeze(Q(a)),checks:Object.freeze(Q(l.checks))}):null}function pe(e){return e?.events?.some(t=>je.has(t?.state))}function Lt(e,t){if(K(e),pe(e))throw new TypeError("signed and broadcast lifecycle states are not accepted");let r=e.events.at(-1);if(!r||r.hash!==e.headHash||r.state!==e.state)throw new TypeError("trade lifecycle has no explicit head event");let n={lifecycleState:String(r.state).toUpperCase(),lifecycleHeadHash:r.hash,prepareVerified:t===!0};return Object.freeze(n)}function Y(e=!1){return Object.freeze({lifecycleState:"NONE",lifecycleHeadHash:null,prepareVerified:e===!0})}function vt(e){let t=L(e,["action"],["tradeId","intent","lifecycle","state","fact","asOf"]);if(t)return t;let r=de(e,"trade_lifecycle arguments");if(r)return r;if(!new Set(["create","verify","advance"]).has(e.action))return"unknown trade lifecycle action";if(e.lifecycle&&pe(e.lifecycle))return"signed and broadcast lifecycle states are not accepted";if(e.state&&je.has(e.state))return`${e.state} lifecycle state is not accepted`;if(e.action==="create")return L(e,["action","tradeId","intent"],["asOf"]);if(e.action==="verify")return L(e,["action","lifecycle"]);if(e.action==="advance"){let n=L(e,["action","lifecycle","state","fact"],["asOf"]);if(n)return n;if(!Ie.has(e.state))return`lifecycle state is not accepted: ${String(e.state)}`}return null}function Dt(e,t={}){let r=vt(e);if(r)return{ok:!1,refused:!0,error:r};let n=t.createTradeLifecycle||we,o=t.advanceTradeLifecycle||Se,a=t.assertTradeLifecycle||K;try{if(e.action==="create"){let i=n({tradeId:e.tradeId,intent:e.intent,asOf:e.asOf});return a(i),{ok:!0,lifecycle:i}}if(e.action==="verify"){if(a(e.lifecycle),pe(e.lifecycle))throw new TypeError("signed and broadcast lifecycle states are not accepted");return{ok:!0,valid:!0,lifecycle:e.lifecycle}}if(a(e.lifecycle),e.state==="prepared"){let i=fe(e.fact);if(!i.ok)return{ok:!1,refused:!0,error:`prepare verifier failed: ${i.errors[0]}`}}let s=o(e.lifecycle,e.state,e.fact,{asOf:e.asOf});return a(s),{ok:!0,lifecycle:s}}catch(s){return{ok:!1,refused:!0,error:v(s)}}}function Z(e,t,r,n,o){let a={schemaVersion:A,taskId:e,status:t,text:h(r||""),custody:lt,prepared:n||null,evidence:o||Y(!!n)};return Re(a),Object.freeze(a)}function Mt(e,t){return{role:"assistant",content:h(e||""),tool_calls:t.map(r=>({id:r.id,type:"function",function:{name:r.name,arguments:typeof(r.source?.arguments??r.source?.function?.arguments)=="string"?h(r.source.arguments??r.source.function.arguments,X):D(ee(z(r.source?.arguments??r.source?.args??r.source?.input??{},{force:!0})),X,"tool arguments")}}))}}function Bt(e,t){let r=t.taskId??(typeof e.taskIdFactory=="function"?e.taskIdFactory():null),n=r==null?`task-${ct()}`:String(r);if(!/^[A-Za-z0-9._:-]{1,128}$/.test(n))throw new TypeError("taskId must be a bounded opaque identifier");return n}function le(e,t){return Object.freeze({lifecycleState:e?.lifecycleState||"NONE",lifecycleHeadHash:e?.lifecycleHeadHash||null,prepareVerified:t===!0})}function Le(e={}){let t=e.provider,r=e.onEvent,n=Number.isInteger(e.maxSteps)&&e.maxSteps>0?Math.min(e.maxSteps,mt):bt,o=new Set,a=!1;async function s(l,E={}){let _=Bt(e,E),u=ze(_,r,E.onEvent),M=Ce(l);if(!M.ok){let d=Z(_,"refused",M.error,null,Y());return u("error",{code:"invalid_request",message:M.error}),u("complete",{result:d}),d}if(a){let d=Z(_,"unavailable","task adapter is stopped",null,Y());return u("error",{code:"stopped",message:"task adapter is stopped"}),u("complete",{result:d}),d}let c=new AbortController;o.add(c);let w=E.signal||e.signal,be=()=>c.abort(w?.reason);w&&(w.aborted?c.abort(w.reason):w.addEventListener("abort",be,{once:!0}));let B="",P=null,T=Y(),y=!1,k=!1,me=!1,$=[{role:"system",content:Et},{role:"user",content:M.value.prompt}];u("accepted",{request:{schemaVersion:A}});try{g(c.signal);for(let re=0;re<n;re+=1){g(c.signal);let ne=[];u("stage",{stage:"provider",step:re+1});let V;try{V=await It(t,{schemaVersion:A,taskId:_,messages:Q($),tools:Te,signal:c.signal,onDelta:f=>{S(ne.join(""))<=$e*2&&ne.push(String(f??""))}})}catch(f){g(c.signal),k=!0,u("error",{code:"provider_unavailable",message:v(f)});break}g(c.signal),D(V,te,"provider response");let ve=$t(V,ne),q=h(ve);q&&(B+=q,B=h(B),u("delta",{text:q}));let H=Tt(V);if(H.length===0){me=!0;break}if(H.length>4){y=!0,u("stage",{stage:"tool",outcome:"refused",reason:"too_many_calls"});break}$.push(Mt(q,H));for(let f of H){g(c.signal);let x;try{x=Nt(f.source)}catch(G){y=!0;let U={ok:!1,error:`tool refused: ${v(G)}`};$.push({role:"tool",tool_call_id:f.id,name:f.name,content:JSON.stringify(U)}),u("stage",{stage:"tool",tool:h(f.name,100),outcome:"refused"});continue}let p;if(f.name==="oracle_cli"){let G=L(x,["argv"]),U=G?{ok:!1,error:G}:kt(x.argv);if(!U.ok)y=!0,p={ok:!1,error:`tool refused: ${U.error}`};else{g(c.signal);try{typeof e.runOracleCli=="function"?p=await e.runOracleCli(x.argv,{signal:c.signal}):typeof e.toolRunner=="function"?p=await e.toolRunner("oracle_cli",x,{signal:c.signal}):(k=!0,p={ok:!1,error:"oracle_cli runner is unavailable"})}catch(W){g(c.signal),k=!0,p={ok:!1,error:v(W)}}if(g(c.signal),Ot(x.argv)){let W=Ct(p,x.argv);W&&(P=W,T=le(T,!0))}}}else f.name==="trade_lifecycle"?p=Dt(x,e.lifecycle):(y=!0,p={ok:!1,error:`tool refused: unknown tool ${h(f.name,100)}`});g(c.signal);let O=zt(p);if((O.value?.refused===!0||/^tool refused:/i.test(String(O.value?.error||"")))&&(y=!0),O.value?.lifecycle)try{T=Lt(O.value.lifecycle,!!P)}catch{}$.push({role:"tool",tool_call_id:f.id,name:f.name,content:O.json}),u("stage",{stage:"tool",tool:f.name==="oracle_cli"||f.name==="trade_lifecycle"?f.name:"unknown",outcome:O.value?.ok===!1?"refused":"complete"})}}!me&&!y&&!k&&$.at(-1)?.role==="tool"&&(k=!0,u("error",{code:"step_limit",message:"task step limit reached"}));let d=y?"refused":P?"prepared":k?"unavailable":"answered",I=y?null:P,F=le(T,!!I),j=Z(_,d,B,I,F);return u("complete",{result:j}),j}catch(d){let I=d?.name==="AbortError"||c.signal.aborted,F=I?"task was stopped":v(d),j=Z(_,"unavailable",F,null,le(T,!1));return u("error",{code:I?"aborted":"adapter_error",message:F}),u("complete",{result:j}),j}finally{w&&w.removeEventListener("abort",be),o.delete(c)}}function i(l="task adapter stopped"){a=!0;for(let E of o)E.abort(l)}return Object.freeze({prepare:s,stop:i,tools:Te})}async function Pt(e,t={}){return Le(t).prepare(e,{signal:t.signal,onEvent:t.turnEvent})}var _r=Le,kr=Pt;export{lt as TASK_CUSTODY_MARKERS,dt as TASK_PREPARE_REQUEST_SCHEMA,wr as TASK_RESULT_STATUSES,A as TASK_SCHEMA_VERSION,Te as TASK_TOOLS,Sr as assertTaskPrepareRequest,_r as createOracleTaskAdapter,Le as createTaskAdapter,Pt as prepareOracleTask,kr as prepareTask,kt as validateTaskOracleCommand,Ce as validateTaskPrepareRequest};