@oracle-agent/oracle 0.35.35 → 0.35.37

package/dist/cli/commands/airdrop.mjs

@@ -0,0 +1,16 @@
+import{createHash as it}from"node:crypto";import{Interface as Se,encodeBytes32String as at,formatUnits as ct,isAddress as lt}from"ethers";import{createHash as Le}from"node:crypto";import{types as _}from"node:util";import U from"node:net";import Ie from"node:dns";var He=new Set(["localhost","metadata.google.internal","metadata.goog"]);function W(t){let e=String(t).toLowerCase().split("%")[0];if((e.match(/::/g)||[]).length>1)return null;let r=o=>{if(!o)return[];let c=o.split(":"),d=c.at(-1);if(d?.includes(".")){let h=d.split(".").map(Number);if(h.length!==4||h.some(m=>!Number.isInteger(m)||m<0||m>255))return null;c.splice(c.length-1,1,(h[0]<<8|h[1]).toString(16),(h[2]<<8|h[3]).toString(16))}return c.some(h=>!/^[0-9a-f]{1,4}$/.test(h))?null:c.map(h=>Number.parseInt(h,16))},[n,i]=e.split("::"),f=r(n),s=r(i);if(!f||!s)return null;let l=e.includes("::"),a=8-f.length-s.length;if(!l&&a!==0||l&&a<1)return null;let u=[...f,...Array(Math.max(0,a)).fill(0),...s];return u.length!==8?null:Uint8Array.from(u.flatMap(o=>[o>>8,o&255]))}function Q(t,e,r){let n=Math.floor(r/8),i=r%8;for(let s=0;s<n;s+=1)if(t[s]!==e[s])return!1;if(!i)return!0;let f=255<<8-i;return(t[n]&f)===(e[n]&f)}function ee(t){if(U.isIPv4(t)){let e=t.split(".").map(Number);return!(e[0]===0||e[0]===10||e[0]===127||e[0]>=224||e[0]===100&&e[1]>=64&&e[1]<=127||e[0]===169&&e[1]===254||e[0]===172&&e[1]>=16&&e[1]<=31||e[0]===192&&(e[1]===0||e[1]===2||e[1]===168)||e[0]===192&&e[1]===88&&e[2]===99||e[0]===198&&(e[1]===18||e[1]===19||e[1]===51)||e[0]===203&&e[1]===0&&e[2]===113)}if(U.isIPv6(t)){let e=W(t);if(!e)return!1;let r=W("::ffff:0:0");return Q(e,r,96)?ee([...e.slice(12)].join(".")):Q(e,W("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([i,f])=>Q(e,W(i),f)):!1}return!1}function _e(t){let e;try{e=new URL(String(t))}catch{return{ok:!1,error:`not a valid URL: ${String(t).slice(0,120)}`}}if(e.protocol!=="http:"&&e.protocol!=="https:")return{ok:!1,error:`refused protocol ${e.protocol} (only http/https)`};let r=e.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(He.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=U.isIP(r);return n!==0&&!ee(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:e,host:r,isLiteralIp:n!==0}}async function te(t,{lookupFn:e=Ie.promises.lookup}={}){let r=_e(t);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:U.isIPv6(r.host)?6:4}]};let n;try{n=await e(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(i=>!ee(i.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function re({requireUndici:t=!1,importUndici:e=()=>import("undici")}={}){let r,n;try{let c=await e();r=c.Agent,n=c.fetch}catch(c){if(t)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${c?.message||c}`);return null}if(typeof r!="function"||typeof n!="function"){if(t)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let i=c=>String(c).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),f=new Map,s=c=>(Array.isArray(c)?c:[c]).map(d=>typeof d=="string"?{address:d}:d).filter(d=>d&&d.address).map(d=>({address:d.address,family:d.family||(U.isIPv6(d.address)?6:4)})),l=(c,d,h)=>{f.set(i(c),s(typeof d=="string"?[{address:d,family:h}]:d))},a=c=>{let d=i(c);if(U.isIP(d))return[{address:d,family:U.isIPv6(d)?6:4}];let h=f.get(d);if(!h||!h.length)throw new Error(`refused: unpinned host ${c} during pinned fetch`);return h},u=new r({connect:{lookup(c,d,h){let m;try{m=a(c)}catch(O){return h(O)}return d?.all?h(null,m):h(null,m[0].address,m[0].family)}}}),o=Ce((c,d={})=>n(c,{...d,dispatcher:u}),l);return{dispatcher:u,fetch:o,pin:l,resolve:a,async close(){try{await u.destroy()}catch{}}}}var ne=Symbol.for("oracle.egressGuard.pinCapableFetch");function Ce(t,e){if(typeof t!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof e!="function")throw new Error("markPinCapableFetch: pin must be a function");return t[ne]=Object.freeze({pin:e}),t}function oe(t){return typeof t=="function"&&typeof t[ne]?.pin=="function"}function pe(t,e,r){if(!oe(t))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");t[ne].pin(e,r)}var Fe=new Set([408,425,429,500,502,503,504]),he=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Ne=2,me=4e3,Me=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Ue=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,De=AbortSignal.prototype.throwIfAborted,Be=EventTarget.prototype.addEventListener,ye=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,ae=t=>t?Me.call(t):!1,ze=t=>t?Ue.call(t):void 0,Je=new Set([301,302,303,307,308]),K=3,Rt=64*1024,H=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function T(t){return L(`HTTP JSON body refused: ${t}`)}function Ge(t){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(e=>typeof _[e]=="function"&&_[e](t))}function Ve(t){let e=[],r=0,n=0,i=0,f=0,s=new WeakSet,l=o=>{if(r+=Buffer.byteLength(o,"utf8"),r>H.bytes)throw T("serialized byte limit exceeded");e.push(o)},a=o=>{if(Buffer.byteLength(o,"utf8")>H.bytes)throw T("serialized byte limit exceeded");return JSON.stringify(o)},u=(o,c)=>{if(n+=1,n>H.nodes)throw T("node limit exceeded");if(c>H.depth)throw T("depth limit exceeded");if(o===null){l("null");return}if(typeof o=="string"){l(a(o));return}if(typeof o=="boolean"){l(o?"true":"false");return}if(typeof o=="number"){if(!Number.isFinite(o))throw T("non-finite number");l(Object.is(o,-0)?"0":String(o));return}if(typeof o!="object")throw T("unsupported non-JSON value");if(_.isProxy(o))throw T("proxy value");if(Ge(o))throw T("unsupported exotic object");if(s.has(o))throw T("cyclic value");s.add(o);try{if(Object.getOwnPropertySymbols(o).length>0)throw T("symbol-keyed fields are unsupported");if(Array.isArray(o)){let m=Object.getPrototypeOf(o),O=0;for(;m!==null;){if(_.isProxy(m))throw T("proxy array prototype");if(O+=1,O>H.depth)throw T("array prototype depth limit exceeded");m=Object.getPrototypeOf(m)}if(o.length>H.arrayLength)throw T("array length limit exceeded");for(let j=0;j<o.length;j+=1){let v=Object.getOwnPropertyDescriptor(o,String(j));if(!v||!Object.hasOwn(v,"value")||v.enumerable!==!0)throw T("array entries must be dense enumerable own data")}let P=0;for(let j in o){if(f+=1,f>H.fields)throw T("enumeration limit exceeded");if(Object.hasOwn(o,j)&&(P+=1,P>o.length))throw T("named array fields are unsupported")}if(P!==o.length)throw T("array entries must be dense enumerable own data");l("[");for(let j=0;j<o.length;j+=1)j&&l(","),u(Object.getOwnPropertyDescriptor(o,String(j)).value,c+1);l("]");return}let d=Object.getPrototypeOf(o);if(d!==Object.prototype&&d!==null)throw T("non-plain object");let h=[];for(let m in o){if(f+=1,f>H.fields)throw T("enumeration limit exceeded");if(!Object.hasOwn(o,m))continue;if(i+=1,i>H.fields)throw T("field limit exceeded");let O=Object.getOwnPropertyDescriptor(o,m);if(!O||!Object.hasOwn(O,"value")||O.enumerable!==!0)throw T("object fields must be enumerable own data");h.push([m,O.value])}l("{");for(let m=0;m<h.length;m+=1)m&&l(","),l(a(h[m][0])),l(":"),u(h[m][1],c+1);l("}")}finally{s.delete(o)}};return u(t,0),e.join("")}function We(t){let e=Object.create(null);if(t==null)return e;if(typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP headers must be an object");if(_.isProxy(t))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(t)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let i=n.toLowerCase();if(r.has(i))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(i);let f=Object.getOwnPropertyDescriptor(t,n);if(!f||!Object.hasOwn(f,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=f.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");e[n]=String(s)}return e}function Ze(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Ke(t,e){if(!t)throw new Error(`HTTP redirect from ${e} missing Location`);let r=new URL(String(t),String(e));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${e} used unsupported protocol ${r.protocol}`);return r.toString()}function Ye(t,e){return new URL(String(t)).origin===new URL(String(e)).origin}var se=new Map,we=new WeakMap,be=1;function Z(t){if((typeof t!="object"||t===null)&&typeof t!="function")return`${typeof t}:${String(t)}`;let e=we.get(t);return e||(e=be,be+=1,we.set(t,e)),`reference:${e}`}var qe=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Xe=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function ge(t){if(!t||typeof t!="object"||Array.isArray(t)||!Object.hasOwn(t,"jsonrpc")||!Object.hasOwn(t,"method")||t.jsonrpc!=="2.0")return!1;let e=typeof t.method=="string"?t.method:"";return e?qe.has(e)||/^get[A-Z0-9_]/u.test(e)||/^is[A-Z0-9_]/u.test(e)||/^eth_get[A-Z0-9_]/u.test(e):!1}function Te(t,e){if(t==="GET"&&e==null)return!0;if(t!=="POST"||e==null)return!1;let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(ge);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return ge(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&Xe.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function Qe(t,e,r,n={},i=null){let f=Le("sha256"),s=(a,u)=>{let o=String(u);f.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),f.update("=").update(String(Buffer.byteLength(o,"utf8"))).update(":").update(o).update(`
+`)};s("method",t),s("url",e),Object.keys(r||{}).map((a,u)=>({name:a.toLowerCase(),order:u,value:String(r[a])})).sort((a,u)=>a.name.localeCompare(u.name)||a.order-u.order).forEach((a,u)=>{s(`header-name-${u}`,a.name),s(`header-value-${u}`,a.value)}),s("body",i??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${a}`,n[a]??"-");return f.digest("hex")}function et(t,e){let r=Number(e);return Number.isFinite(r)&&r>0?Math.min(r*1e3,me):Math.min(250*2**t,me)+Math.floor(Math.random()*100)}var tt=t=>new Promise(e=>setTimeout(e,t));function L(t,e={}){let r=new Error(t);return r.retryable=!1,Object.assign(r,e),r}function ie(t,e,r){return L(`HTTP response from ${t} exceeded maxResponseBytes ${r} (${e})`,{oversize:!0})}function D(t){try{let e=t?.body?.cancel?.();e&&typeof e.then=="function"&&e.catch(()=>{})}catch{}}function rt(t){return t?t.byteLength??t.length??0:0}async function nt(t,e,{url:r,truncate:n=!1,onOversize:i}={}){if(e==null)return await t.text();let f=Number(t.headers?.get?.("content-length"));if(Number.isFinite(f)&&f>e&&(D(t),!n))throw ie(r,`content-length ${f}`,e);let s=t.body?.getReader?.();if(!s){let c=await t.text(),d=Buffer.byteLength(c,"utf8");if(d>e){if(!n)throw ie(r,`body ${d} bytes`,e);return Buffer.from(c,"utf8").subarray(0,e).toString("utf8")}return c}let l=[],a=0,u=!1;try{for(;;){let{value:c,done:d}=await s.read();if(d)break;if(c&&(l.push(Buffer.from(c)),a+=rt(c),a>e)){u=!0;break}}}finally{if(u)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(u&&(typeof i=="function"&&i(),!n))throw ie(r,`streamed ${a} bytes`,e);let o=Buffer.concat(l);return(u?o.subarray(0,e):o).toString("utf8")}function ot(t){if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function st(t,{fetchImpl:e,method:r,headers:n,body:i,timeoutMs:f,lookupFn:s,realFetch:l,untrustedUrl:a=!1,maxResponseBytes:u=null,sameOriginRedirectsOnly:o=!1,importUndici:c,validateResponse:d,signal:h,redirectPolicy:m="follow",maxRedirects:O=K}){let P=new AbortController,j=setTimeout(()=>P.abort(),f),v=h?ye?ye([h,P.signal]):h:P.signal,g=null,R=e,B=s?{lookupFn:s}:{};if(a&&!l&&!oe(R))throw L(`HTTP refused ${t}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let J=async(y,{status:A=null}={})=>{let E=await te(y,B);if(!E.ok)throw L(A==null?`HTTP refused ${y}: ${E.error}`:`HTTP redirect to ${y} ${E.error}`,A==null?{}:{status:A});let C=new URL(y).hostname;if(l){if(g&&(await g.close(),g=null),!g)try{g=await re({requireUndici:!0,...c?{importUndici:c}:{}})}catch(p){throw L(A==null?`HTTP refused ${y}: ${p?.message||p}`:`HTTP redirect to ${y} refused: ${p?.message||p}`,A==null?{}:{status:A})}g.pin(C,E.addresses),R=g.fetch}else pe(R,C,E.addresses);return E};try{let y=String(t),A=Object.assign(Object.create(null),n||{});a&&await J(y);for(let E=0;E<=O;E+=1){let C=Object.assign(Object.create(null),{method:r,headers:A,body:i,signal:v,redirect:"manual",dispatcher:void 0}),p=await R(y,C);if((m==="error"||O===0)&&p.status>=300&&p.status<400)throw D(p),L(`HTTP ${p.status} ${r} redirect refused`,{status:p.status,redirectRefused:!0});if(Je.has(p.status)){let x=o===!0&&r==="POST"&&[307,308].includes(p.status)&&Te(r,i);if(r!=="GET"&&r!=="HEAD"&&!x){D(p);let S=new Error(`HTTP ${p.status} ${r} ${y} redirected non-idempotent request`);throw S.status=p.status,S}if(E===O)throw D(p),L(`HTTP ${p.status} ${r} redirect budget exhausted`,{status:p.status,redirectRefused:!0});let fe=p.headers?.get?.("location"),k;try{k=Ke(fe,y)}catch(S){throw D(p),S}let N=!Ye(k,y);if(D(p),N&&r==="POST"){let S=new Error(`HTTP ${p.status} ${r} cross-origin redirect refused`);throw S.status=p.status,S}if(N&&o){let S=new Error(`HTTP ${p.status} ${r} cross-origin redirect refused`);throw S.status=p.status,S.retryable=!1,S}if(N&&(A=Ze(A)),a)await J(k,{status:p.status});else if(N){let S=await te(k,B);if(!S.ok){let b=new Error(`HTTP redirect from ${y} ${S.error}`);throw b.status=p.status,b.retryable=!1,b}l&&S.addresses?.length&&(g||(g=await re(c?{importUndici:c}:{})),g&&(g.pin(new URL(k).hostname,S.addresses),R=g.fetch))}y=k;continue}if(typeof d=="function")try{await d(p,{url:y})}catch(x){throw D(p),L(x?.message||String(x))}let $=await nt(p,u,{url:y,onOversize:()=>P.abort()}),G=ot($);if(!p.ok){let x=new Error(`HTTP ${p.status} ${r} ${y}`);throw x.status=p.status,x.retryAfter=p.headers?.get?.("retry-after")??null,x.body=G??$.slice(0,300),x}return G??$}throw new Error(`HTTP redirect loop for ${t}`)}catch(y){if(P.signal.aborted&&!ae(h)){let A=y&&(typeof y=="object"||typeof y=="function")&&!_.isProxy(y)?y:null,E=A?Object.getOwnPropertyDescriptor(A,"oversize"):null;if(!(E&&Object.hasOwn(E,"value")&&E.value===!0))try{if(!A)throw new TypeError("unsafe rejection");Object.defineProperties(A,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let p=new Error("HTTP request timed out");throw Object.defineProperties(p,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),p}}throw y}finally{clearTimeout(j),g&&await g.close()}}async function ce(t,e={}){if(e!=null&&typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP options must be an object");if(e!=null&&_.isProxy(e))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(e!=null){if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP options contain unknown fields");for(let b of Object.getOwnPropertyNames(e)){let w=Object.getOwnPropertyDescriptor(e,b);if(!(b==="toJSON"&&w&&Object.hasOwn(w,"value")&&w.value===void 0)){if(!r.has(b))throw new TypeError("HTTP options contain unknown fields");if(!w||!w.enumerable||!Object.hasOwn(w,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=b=>{if(e==null||!Object.hasOwn(e,b))return;let w=Object.getOwnPropertyDescriptor(e,b);if(!w||!Object.hasOwn(w,"value"))throw new TypeError("HTTP options must contain own data properties");return w.value};if(typeof t!="string"||t.length===0||t.length>8192)throw new TypeError("HTTP URL must be a bounded string");let i=n("method");if(i!==void 0&&(typeof i!="string"||!/^[A-Za-z]+$/u.test(i)))throw new TypeError("HTTP method must be a string token");let f=n("timeoutMs");if(f!==void 0&&(!Number.isInteger(f)||f<1||f>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=n("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let l=n("redirectPolicy");if(l!==void 0&&l!=="follow"&&l!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>K))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${K}`);if(l==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let u=l??"follow",o=u==="error"?0:a??K;for(let b of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let w=n(b);if(w!==void 0&&typeof w!="boolean")throw new TypeError(`HTTP ${b} must be boolean`)}let c=n("maxResponseBytes");if(c!==void 0&&(!Number.isInteger(c)||c<1||c>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let d=n("signal");if(d!==void 0){if(_.isProxy(d)||!(d instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{ae(d)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let b of["importUndici","lookupFn","validateResponse"]){let w=n(b);if(w!==void 0&&typeof w!="function")throw new TypeError(`HTTP ${b} must be a function`)}let h=n("fetchImpl"),m=h||globalThis.fetch;if(typeof m!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let O=f??12e3,P=(i||"GET").toUpperCase(),j=n("headers"),v=We(j),g=Object.assign(Object.create(null),v);Object.keys(g).some(b=>b.toLowerCase()==="accept")||(g.Accept="application/json");let R=n("body");R!=null&&typeof R!="string"&&(Object.keys(g).find(w=>w.toLowerCase()==="content-type")||(g["Content-Type"]="application/json"),R=Ve(R));let B=s??Ne,J=n("lookupFn"),y=!h,A=n("untrustedUrl")===!0,E=n("sameOriginRedirectsOnly")===!0,C=n("importUndici"),p=n("validateResponse"),$=d,G=c??null,x=async()=>{let b;for(let w=0;w<=B;w++){$&&De.call($);try{return await st(t,{fetchImpl:m,method:P,headers:g,body:R,timeoutMs:O,lookupFn:J,realFetch:y,untrustedUrl:A,maxResponseBytes:G,sameOriginRedirectsOnly:E,importUndici:C,validateResponse:p,signal:$,redirectPolicy:u,maxRedirects:o})}catch(M){b=M;let z=X=>{if(!M||typeof M!="object"&&typeof M!="function"||_.isProxy(M))return;let V=Object.getOwnPropertyDescriptor(M,X);return V&&Object.hasOwn(V,"value")?V.value:void 0},q=z("status"),Re=z("oracleTimeout")===!0||z("name")==="AbortError"||z("name")==="TimeoutError"||ae($),$e=new Set([408,425,429]),xe=z("retryable")===!1?!1:q!=null?$e.has(q)||Fe.has(q)&&he.has(P):!Re&&he.has(P);if(w===B||!xe)throw M;let de=et(w,z("retryAfter"));$?await new Promise((X,V)=>{let ke=setTimeout(X,de);Be.call($,"abort",()=>{clearTimeout(ke),V(ze($)||new DOMException("Aborted","AbortError"))},{once:!0})}):await tt(de)}}throw b};if(!(n("dedupe")!==!1&&!$&&Te(P,R)))return x();let k=Qe(P,t,g,{untrustedUrl:A,maxResponseBytes:G,sameOriginRedirectsOnly:E,redirectPolicy:u,maxRedirects:o,timeoutMs:O,retries:B,fetchImpl:Z(m),realFetch:y,lookupFn:Z(J),importUndici:Z(C),validateResponse:Z(p)},R),N=se.get(k);if(N)return N;let S=x().finally(()=>se.delete(k));return se.set(k,S),S}var ut=`0x${"00".repeat(32)}`,ft=Object.freeze(["now","30days","60days","90days","stake"]),Pe=Object.freeze([Object.freeze({id:"pharos-pros-genesis",project:"Pharos Genesis",addressFamily:"evm",chain:"pharos",chainId:1672,rpcUrl:"https://rpc.pharos.xyz",claimUrl:"https://claim.pharos.xyz/",evidenceUrl:"https://claim.pharos.xyz/user-guide",contract:"0xe5bfde2310fa2a315f814dcc0c8b97c159c8062d",tokenSymbol:"PROS",decimals:18,adapter:"pharos-static-v1",tiers:ft,readOnly:!0}),Object.freeze({id:"plume-pp-season-2",project:"Plume PP Season 2",addressFamily:"evm",chain:"plume",chainId:98866,rpcUrl:"https://rpc.plume.org",claimUrl:"https://claim-pp.plume.org/",evidenceUrl:"https://claim-pp.plume.org/",contract:"0x8a2725a6f04816a5274ddd9feadd3bd0c253c1a6",tokenSymbol:"PLUME",decimals:18,adapter:"hedgey-v4",campaignUuid:"8f5ea864-3707-492f-8766-93f0da811a98",proofUrl:"https://api.hedgey.finance/token-claims/proof",restriction:"Official portal excludes US and OFAC-sanctioned jurisdictions.",readOnly:!0})]),dt=new Se(["function campaigns(bytes16 campaignId) view returns (address manager,address token,uint256 amount,uint256 start,uint256 end,uint8 tokenLockup,bytes32 root,bool delegating)","function claimed(bytes16 campaignId,address claimer) view returns (bool)","function verify(bytes32 root,bytes32[] proof,address claimer,uint256 amount) pure returns (bool)"]),pt=new Se(["function hasClaimed(address claimer) view returns (bool)","function claimTiers(bytes32 tier) view returns (bytes32 root,address token,uint256 start,uint256 end)","function check_proof(bytes32 tier,address claimer,uint256 amount,bytes32 root,bytes32[] proof) pure returns (bool)"]);function ht(t){let e=String(t||"").trim();return/^0x[0-9a-fA-F]{40}$/u.test(e)?"evm":/^0x[0-9a-fA-F]{64}$/u.test(e)?"starknet-or-move":/^(bc1|tb1)[ac-hj-np-z02-9]{11,87}$/iu.test(e)?"bitcoin":/^[a-z][a-z0-9]{1,30}1[02-9ac-hj-np-z]{20,90}$/u.test(e)?"cosmos":e==="11111111111111111111111111111111"?"solana":/^[13][1-9A-HJ-NP-Za-km-z]{25,34}$/u.test(e)?"bitcoin":/^[1-9A-HJ-NP-Za-km-z]{32,44}$/u.test(e)?"solana":null}function mt(t,e){let r=String(t||"").trim(),i=String(e||"").trim().toLowerCase().slice(2,5),f=it("md5").update(`pharosairdrop${r}${i}`.toLowerCase()).digest("hex");return`https://static.claim.pharos.xyz/resources/airdrops/PROD/PHAROSAIRDROP/${r}/proof_${f}_${r}.json`}function yt(t,e=Pe[1]){return`${e.proofUrl}/${e.campaignUuid}/${String(t||"").trim().toLowerCase()}`}function wt(t){return`0x${String(t).replaceAll("-","")}`}function Y(t){if(typeof t=="bigint")return t.toString();if(Array.isArray(t))return t.map(Y);if(t&&typeof t=="object"){let e={};for(let[r,n]of Object.entries(t))/^\d+$/u.test(r)||(e[r]=Y(n));return e}return t}function le(t){return String(t?.message||t||"unknown source failure").slice(0,200)}function I(t){let e=Number(t);return Number.isFinite(e)&&e>0?e*1e3:null}function Ae(t,e,r){let n=I(t),i=I(e);return n&&r<n?"not-open":i&&r>i?"expired":"claimable"}function ue(t,e){return ct(BigInt(String(t)),e).replace(/\.0+$/u,"").replace(/(\.\d*?[1-9])0+$/u,"$1")}function Oe(t){let e={claimable:0,claimed:0,ineligible:0,expired:0,notOpen:0,unavailable:0};for(let r of t)r.status==="claimable"?e.claimable+=1:r.status==="claimed"?e.claimed+=1:r.status==="ineligible"?e.ineligible+=1:r.status==="expired"?e.expired+=1:r.status==="not-open"?e.notOpen+=1:r.status==="unavailable"&&(e.unavailable+=1);return e}function F(t,e={}){return{campaignId:t.id,project:t.project,chain:t.chain,chainId:t.chainId,tokenSymbol:t.tokenSymbol,contract:t.contract,claimUrl:t.claimUrl,evidenceUrl:t.evidenceUrl,restriction:t.restriction||null,readOnly:!0,...e}}async function bt(t,e){return await ce(t,{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs??12e3,retries:e.retries??1,maxResponseBytes:e.maxResponseBytes??8*1024*1024})}async function gt({campaign:t,functionName:e,args:r},n){let i=t.adapter==="hedgey-v4"?dt:pt,f=r;t.adapter==="hedgey-v4"&&["campaigns","claimed"].includes(e)&&(f=[wt(t.campaignUuid),...r.slice(1)]),t.adapter==="pharos-static-v1"&&["claimTiers","check_proof"].includes(e)&&(f=[at(r[0]),...r.slice(1)]);let s=i.encodeFunctionData(e,f),l=await ce(t.rpcUrl,{method:"POST",body:{jsonrpc:"2.0",id:1,method:"eth_call",params:[{to:t.contract,data:s},"latest"]},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,retries:n.retries??1,maxResponseBytes:1024*1024});if(!l||l.error||typeof l.result!="string")throw new Error(l?.error?.message||`invalid ${t.chain} RPC response`);let a=i.decodeFunctionResult(e,l.result);if(a.length===1)return Y(a[0]);let u=i.getFunction(e);return Object.fromEntries(u.outputs.map((o,c)=>[o.name||String(c),Y(a[c])]))}async function Tt(t,e,r,n){try{let i=await r.rpcRead({campaign:t,functionName:"campaigns",args:[t.campaignUuid]});if(await r.rpcRead({campaign:t,functionName:"claimed",args:[t.campaignUuid,e]})===!0)return F(t,{status:"claimed",proofVerified:!1});let s=await r.fetchJson(yt(e,t)),l=s?.amount,a=s?.proof;if(s?.canClaim!==!0||!l||!Array.isArray(a)||a.length===0)return F(t,{status:"ineligible",proofVerified:!1});if(await r.rpcRead({campaign:t,functionName:"verify",args:[i.root,a,e,l]})!==!0)throw new Error("official proof did not verify against the claim contract");return F(t,{status:Ae(i.start,i.end,n),amountRaw:String(l),amountFormatted:ue(l,t.decimals),proofVerified:!0,claimStart:I(i.start)?new Date(I(i.start)).toISOString():null,claimEnd:I(i.end)?new Date(I(i.end)).toISOString():null})}catch(i){return F(t,{status:"unavailable",proofVerified:!1,error:le(i)})}}async function Ot(t,e,r,n){try{if(await r.rpcRead({campaign:t,functionName:"hasClaimed",args:[e]})===!0)return F(t,{status:"claimed",proofVerified:!1});let f=[];for(let o of t.tiers){let c=await r.rpcRead({campaign:t,functionName:"claimTiers",args:[o]});String(c.root||"").toLowerCase()!==ut&&f.push({tier:o,state:c})}let s=[],l=[];for(let{tier:o,state:c}of f){let d;try{d=await r.fetchJson(mt(o,e))}catch(v){if(v?.status===404)continue;l.push(le(v));continue}if(!Array.isArray(d)){l.push(`${o} proof shard returned invalid data`);continue}let h=d.find(v=>Array.isArray(v)&&String(v[0]).toLowerCase()===e.toLowerCase());if(!h)continue;let[,m,O,P]=h;if(!m||String(O).toLowerCase()!==String(c.root).toLowerCase()||!Array.isArray(P)){l.push(`${o} proof row did not match onchain state`);continue}if(await r.rpcRead({campaign:t,functionName:"check_proof",args:[o,e,m,O,P]})!==!0){l.push(`${o} proof did not verify against the claim contract`);continue}s.push({tier:o,amount:String(m),state:c})}if(s.length===0){if(l.length>0)throw new Error(l.join("; "));return F(t,{status:"ineligible",proofVerified:!1})}s.sort((o,c)=>BigInt(c.amount)>BigInt(o.amount)?1:BigInt(c.amount)<BigInt(o.amount)?-1:0);let a=s[0],u=l.length===0;return F(t,{status:Ae(a.state.start,a.state.end,n),amountRaw:a.amount,amountFormatted:ue(a.amount,t.decimals),proofVerified:!0,sourceComplete:u,error:u?void 0:l.join("; ").slice(0,200),selectedTier:a.tier,allocationOptions:s.map(o=>({tier:o.tier,amountFormatted:ue(o.amount,t.decimals)})),claimStart:I(a.state.start)?new Date(I(a.state.start)).toISOString():null,claimEnd:I(a.state.end)?new Date(I(a.state.end)).toISOString():null})}catch(i){return F(t,{status:"unavailable",proofVerified:!1,error:le(i)})}}async function Ee(t,e={}){let r=String(t||"").trim(),n=ht(r);if(!n)throw new Error("unsupported or invalid wallet address");if(n==="evm"&&!lt(r))throw new Error("invalid EVM address");let i=Pe.filter(u=>u.addressFamily===n),f="Oracle checks packaged official machine-readable campaigns; this is not a universal airdrop index.";if(i.length===0)return{address:r,addressFamily:n,generatedAt:new Date(e.nowMs??Date.now()).toISOString(),complete:!1,coverage:{universal:!1,campaignsChecked:0,chainsChecked:[],reason:`Oracle has no packaged official campaigns for ${n}; this is not a universal airdrop index.`},summary:Oe([]),results:[]};let s={fetchJson:e.fetchJson||(u=>bt(u,e)),rpcRead:e.rpcRead||(u=>gt(u,e))},l=e.nowMs??Date.now(),a=await Promise.all(i.map(u=>u.adapter==="hedgey-v4"?Tt(u,r,s,l):Ot(u,r,s,l)));return{address:r,addressFamily:n,generatedAt:new Date(l).toISOString(),complete:a.every(u=>u.status!=="unavailable"&&u.sourceComplete!==!1),coverage:{universal:!1,campaignsChecked:i.length,chainsChecked:[...new Set(i.map(u=>u.chain))].sort(),reason:f},summary:Oe(a),results:a}}function je(t){let e=[],r=t.summary?.claimable||0;e.push(`Airdrop scan: ${r} verified claimable${r===1?"":"s"}`),e.push(`Address: ${t.address} (${t.addressFamily})`);for(let n of t.results||[]){let i=n.amountFormatted?`${n.amountFormatted} ${n.tokenSymbol}`:n.tokenSymbol;e.push(`${String(n.status).toUpperCase()}  ${i}  ${n.project} on ${n.chain}`),n.status==="claimable"&&e.push(`Claim: ${n.claimUrl}`),n.error&&e.push(`Source error: ${n.error}`),n.restriction&&e.push(`Restriction: ${n.restriction}`)}return(t.results||[]).length===0&&e.push("No packaged official campaigns support this address family yet."),e.push(`Coverage: ${t.coverage.reason}`),e.join(`
+`)}var ve=`oracle airdrop <address> [--json]
+
+Checks packaged official machine-readable airdrop sources, then verifies proofs
+and claimed state against each project claim contract.
+
+Read-only. Requires an explicit wallet address. It never connects a wallet,
+signs, approves, broadcasts, or claims. Coverage is not a universal airdrop
+index, and unavailable sources are never reported as ineligible.`,Ct={name:"airdrop",summary:"verify official airdrop eligibility and claimed state",group:"read",usage:ve,async run(t={}){let e=Array.isArray(t.argv)?t.argv:[],r=new Set(["--json","--help","-h"]),n=e.filter(s=>s.startsWith("-")&&!r.has(s)),i=e.filter(s=>!s.startsWith("-"));if(n.length||i.length>1)return process.stderr.write(`oracle airdrop only accepts one explicit address and optional --json
+`),1;if(e.includes("--help")||e.includes("-h"))return process.stdout.write(`${ve}
+`),0;let f=String(i[0]||"").trim();if(!f)return process.stderr.write(`oracle airdrop requires an explicit wallet address
+`),1;try{let l=await(t.airdropScan||Ee)(f,t.fetchImpl?{fetchImpl:t.fetchImpl}:{});return e.includes("--json")?process.stdout.write(`${JSON.stringify(l,null,2)}
+`):process.stdout.write(`${(t.airdropRender||je)(l)}
+`),0}catch(s){return process.stderr.write(`oracle airdrop failed: ${s?.message||s}
+`),1}}};export{Ct as default};