@oracle-agent/oracle 0.35.39 → 0.35.41

package/dist/cli/commands/receipt.mjs

@@ -1,15 +1,15 @@
-import{wordlists as ut}from"ethers";var lt=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),ft=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],dt=new Set([12,15,18,21,24]);function pt(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return dt.has(t.length)&&t.every(r=>ut.en.getWordIndex(r)>=0)}var ht=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,mt=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,yt=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function bt(e){let t=Ce(e);return yt.has(t)||mt.test(t)}var X=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function Ce(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function wt(e){let t=Ce(e);return[...lt].some(r=>t.includes(r))}function gt(e,t,r){if(typeof t=="string"){if(ft.some(o=>o.test(t))||pt(t))throw new X(r);if(ht.test(t)&&!bt(e))throw new X(r)}}function le(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return gt(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((n,s)=>le(n,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let n of Object.keys(e).sort()){let s=`${t}.${n}`;if(wt(n))throw new X(s);e[n]!==void 0&&(o[n]=le(e[n],s,n))}return o}function ke(e){return le(e)}var Tr=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Or=Object.freeze(["read","simulate"]);var Ir=1440*60;var j=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},Et=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,At=Object.freeze(["privkey","wif","xprv","seed"]);function fe(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return Et.test(t)||At.includes(r)}var je=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Le=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function St(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Le.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function He(e){let t;try{t=JSON.stringify(e)}catch(n){throw new j("$",`unserializable-payload: ${String(n?.message||n)}`)}if(t===void 0)return"null";let r=St(t);for(let{rule:n,re:s}of je)if(s.test(r))throw new j("$<serialized>",n);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new j("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(n,s)=>{if(n&&fe(n))throw new j(`$<serialized>.${n}`,"forbidden-key-name");return s}),t}function B(e,t="$",r=new Set,o=""){if(e==null)return e;if(typeof e=="string"){let n=Le.includes(String(o).toLowerCase().replace(/[_-]/g,""));for(let{rule:s,re:a}of je)if(!(n&&s.startsWith("raw-32-byte-hex"))&&a.test(e))throw new j(t,s);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[n,s]of e.entries()){if(typeof n=="string"&&fe(n))throw new j(`${t}[${JSON.stringify(n)}]`,"forbidden-key-name");B(n,`${t}[key]`,r),B(s,`${t}[${String(n)}]`,r)}return e}if(e instanceof Set){let n=0;for(let s of e.values())B(s,`${t}[${n++}]`,r);return e}if(Array.isArray(e))return e.forEach((n,s)=>B(n,`${t}[${s}]`,r)),e;for(let[n,s]of Object.entries(e)){if(fe(n))throw new j(`${t}.${n}`,"forbidden-key-name");B(s,`${t}.${n}`,r,n)}return e}var xt=/[\u0000-\u001f\u007f]/;function de(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function pe(e,t="control input"){try{B(e,t),He(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function Z(e,{required:t=[],optional:r=[]}={},o="object"){de(e,o);let n=new Set([...t,...r]),s=Object.keys(e).filter(a=>!n.has(a));if(s.length)throw new TypeError(`${o} has unknown field ${s[0]}`);for(let a of t)if(!Object.hasOwn(e,a))throw new TypeError(`${o}.${a} is required`);return e}function he(e,t,r=200,{lower:o=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||xt.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let n=e.trim();return o?n.toLowerCase():n}function Q(e,t,r=80){let o=he(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(o))throw new TypeError(`${t} must be a lowercase identifier`);return o}function ne(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function C(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))C(t);Object.freeze(e)}return e}var Tt=Object.freeze(["confirmations","finalizedTag","checkpoint"]),M=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Ot=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"]);function Ue({family:e,chainId:t},r="chain"){let o=Q(e,`${r}.family`,40),n;if(o==="evm"){if(typeof t=="number")n=String(ne(t,`${r}.chainId`,{positive:!0}));else if(n=he(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(n))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else n=Q(t,`${r}.chainId`,80);return{family:o,chainId:n}}function It(e,t="chain"){return Z(e,{required:["family","chainId"]},t),C(Ue(e,t))}function Fe(e,t="finality rule"){pe(e,t),de(e,t);let r=e.rule;if(!Tt.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let o=r==="confirmations"?"confirmations":r;Z(e,{required:["family","chainId","rule",o]},t);let n=Ue(e,t);return r==="confirmations"?{...n,rule:r,confirmations:ne(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...n,rule:r,[o]:Q(e[o],`${t}.${o}`,80)}}function me(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((o,n)=>Fe(o,`finality policy rule ${n}`)),r=new Set;for(let o of t){let n=`${o.family}\0${o.chainId}`;if(r.has(n))throw new TypeError(`duplicate finality rule for ${o.family}:${o.chainId}`);r.add(n)}return C({policyVersion:1,rules:t})}function Nt(e){if(Z(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return me(e.rules)}function ve(e,t){let r=It(t,"finality query"),n=Nt(e).rules.find(s=>s.family===r.family&&s.chainId===r.chainId);return n?C({status:"KNOWN",...r,rule:n}):C({status:M.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function Rt(e,t){if(e==null)return null;pe(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(Z(e,{required:["status"],optional:[r]},"finality evidence"),!Ot.includes(e.status))throw new TypeError("finality evidence.status is unknown");let o={status:e.status};return e[r]!=null&&(o[r]=t.rule==="confirmations"?ne(e.confirmations,"finality evidence.confirmations",{positive:!0}):Q(e[r],`finality evidence.${r}`,80)),o}function ze(e,t){if(!e||e.status===M.UNKNOWN||e.rule==null)return C({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=Fe(e.rule??e,"resolved finality rule"),o=Rt(t,r);if(o==null)return C({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(o.status!=="LIVE")return C({status:M.UNKNOWN,final:!1,reason:`${o.status}_EVIDENCE`});let n=!1;return r.rule==="confirmations"?n=o.confirmations!=null&&o.confirmations>=r.confirmations:r.rule==="finalizedTag"?n=o.finalizedTag===r.finalizedTag:n=o.checkpoint===r.checkpoint,C({status:n?M.FINAL:M.INCLUDED,final:n,reason:n?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var $t=1,Kr=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),E=(...e)=>e.find(t=>t!=null),ee=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype;function _t(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function De(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function be(e){return e==null?e:Array.isArray(e)?e.map(be):ee(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,be(e[t])])):String(e)}function Pt(e,t,r,o){let n=E(e.finalityEvidence,o?.finality,e.evidence),s=E(e.finalityPolicy,e.policy);try{return s==null&&ee(e.finalityRule)&&(s=me([{family:t,chainId:r,...e.finalityRule}])),s==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:ze(ve(s,{family:t,chainId:r}),n)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function R(e,t,r){r!=null&&(e[t]=r)}function Ct(e){return e==null?null:String(e).trim().toLowerCase()}function ye(...e){let t=e.map(Ct).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function oe(e={}){if(!ee(e))throw new TypeError("verified receipt: input object required");let t=ke(e),r=E(t.actionReceipt,t.receipt),o=ee(r)?r:t,n=E(t.observation,t.chainObservation,t.observedReceipt),s=ee(n),a=E(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash),d=E(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family),u=E(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),l=!ye(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash)||!ye(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family)||!ye(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),i=Pt(t,d,u,s&&!l?n:null),c=_t(E(n?.receiptStatus,n?.executionStatus,n?.status)),f=E(t.reconciliationStatus,t.reconciliation?.status,n?.reconciliationStatus),p=E(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,n?.finalityState),y="UNKNOWN";De(f)||!l&&(s&&c==="FAIL"||De(p))?y="FAIL":!l&&a&&s&&c==="SUCCESS"&&["INCLUDED","FINAL"].includes(i.status)&&(y="SUCCESS");let h={verifiedReceiptVersion:$t,status:y};l&&(h.reason="REFERENCE_MISMATCH"),R(h,"txHash",a),R(h,"chain",E(t.chain,o.chain,n?.chain)),R(h,"family",d),R(h,"chainId",u),R(h,"block",E(n?.block,t.block)),R(h,"blockState",E(n?.blockState,n?.inclusionState)),h.finalityState=i.status,R(h,"confirmations",E(n?.confirmations,n?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),R(h,"observedAt",E(n?.observedAt,t.observedAt)),R(h,"route",E(t.route,o.route)),R(h,"prepareHash",E(t.prepareHash,o.prepareHash)),R(h,"policyOutcome",E(t.policyOutcome,o.policyOutcome,o.policyChecks));let w=E(t.balanceChanges,n?.balanceChanges,n?.balances,o.balanceChanges,o.balances);return w!=null&&(h.balanceChanges=be(w)),R(h,"createdAt",E(t.createdAt,o.createdAt)),R(h,"submittedAt",E(t.submittedAt,o.submittedAt)),R(h,"finalizedAt",E(t.finalizedAt,n?.finalizedAt)),R(h,"timestamps",E(t.timestamps,o.timestamps,n?.timestamps)),C(h)}import{createHash as Ut}from"node:crypto";import{types as H}from"node:util";import V from"node:net";import kt from"node:dns";var jt=new Set(["localhost","metadata.google.internal","metadata.goog"]);function se(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=i=>{if(!i)return[];let c=i.split(":"),f=c.at(-1);if(f?.includes(".")){let p=f.split(".").map(Number);if(p.length!==4||p.some(y=>!Number.isInteger(y)||y<0||y>255))return null;c.splice(c.length-1,1,(p[0]<<8|p[1]).toString(16),(p[2]<<8|p[3]).toString(16))}return c.some(p=>!/^[0-9a-f]{1,4}$/.test(p))?null:c.map(p=>Number.parseInt(p,16))},[o,n]=t.split("::"),s=r(o),a=r(n);if(!s||!a)return null;let d=t.includes("::"),u=8-s.length-a.length;if(!d&&u!==0||d&&u<1)return null;let l=[...s,...Array(Math.max(0,u)).fill(0),...a];return l.length!==8?null:Uint8Array.from(l.flatMap(i=>[i>>8,i&255]))}function we(e,t,r){let o=Math.floor(r/8),n=r%8;for(let a=0;a<o;a+=1)if(e[a]!==t[a])return!1;if(!n)return!0;let s=255<<8-n;return(e[o]&s)===(t[o]&s)}function ge(e){if(V.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(V.isIPv6(e)){let t=se(e);if(!t)return!1;let r=se("::ffff:0:0");return we(t,r,96)?ge([...t.slice(12)].join(".")):we(t,se("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([n,s])=>we(t,se(n),s)):!1}return!1}function Lt(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(jt.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let o=V.isIP(r);return o!==0&&!ge(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:o!==0}}async function Ee(e,{lookupFn:t=kt.promises.lookup}={}){let r=Lt(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:V.isIPv6(r.host)?6:4}]};let o;try{o=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(o)||o.length===0||o.some(n=>!ge(n.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:o}}async function Ae({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,o;try{let c=await t();r=c.Agent,o=c.fetch}catch(c){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${c?.message||c}`);return null}if(typeof r!="function"||typeof o!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let n=c=>String(c).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),s=new Map,a=c=>(Array.isArray(c)?c:[c]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(V.isIPv6(f.address)?6:4)})),d=(c,f,p)=>{s.set(n(c),a(typeof f=="string"?[{address:f,family:p}]:f))},u=c=>{let f=n(c);if(V.isIP(f))return[{address:f,family:V.isIPv6(f)?6:4}];let p=s.get(f);if(!p||!p.length)throw new Error(`refused: unpinned host ${c} during pinned fetch`);return p},l=new r({connect:{lookup(c,f,p){let y;try{y=u(c)}catch(h){return p(h)}return f?.all?p(null,y):p(null,y[0].address,y[0].family)}}}),i=Ht((c,f={})=>o(c,{...f,dispatcher:l}),d);return{dispatcher:l,fetch:i,pin:d,resolve:u,async close(){try{await l.destroy()}catch{}}}}var Se=Symbol.for("oracle.egressGuard.pinCapableFetch");function Ht(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Se]=Object.freeze({pin:t}),e}function xe(e){return typeof e=="function"&&typeof e[Se]?.pin=="function"}function Be(e,t,r){if(!xe(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Se].pin(t,r)}var Ft=new Set([408,425,429,500,502,503,504]),Me=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),vt=2,Ve=4e3,zt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Dt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Bt=AbortSignal.prototype.throwIfAborted,Mt=EventTarget.prototype.addEventListener,Ke=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Ie=e=>e?zt.call(e):!1,Vt=e=>e?Dt.call(e):void 0,Kt=new Set([301,302,303,307,308]),ae=3,Qr=64*1024,L=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function x(e){return F(`HTTP JSON body refused: ${e}`)}function Gt(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof H[t]=="function"&&H[t](e))}function Wt(e){let t=[],r=0,o=0,n=0,s=0,a=new WeakSet,d=i=>{if(r+=Buffer.byteLength(i,"utf8"),r>L.bytes)throw x("serialized byte limit exceeded");t.push(i)},u=i=>{if(Buffer.byteLength(i,"utf8")>L.bytes)throw x("serialized byte limit exceeded");return JSON.stringify(i)},l=(i,c)=>{if(o+=1,o>L.nodes)throw x("node limit exceeded");if(c>L.depth)throw x("depth limit exceeded");if(i===null){d("null");return}if(typeof i=="string"){d(u(i));return}if(typeof i=="boolean"){d(i?"true":"false");return}if(typeof i=="number"){if(!Number.isFinite(i))throw x("non-finite number");d(Object.is(i,-0)?"0":String(i));return}if(typeof i!="object")throw x("unsupported non-JSON value");if(H.isProxy(i))throw x("proxy value");if(Gt(i))throw x("unsupported exotic object");if(a.has(i))throw x("cyclic value");a.add(i);try{if(Object.getOwnPropertySymbols(i).length>0)throw x("symbol-keyed fields are unsupported");if(Array.isArray(i)){let y=Object.getPrototypeOf(i),h=0;for(;y!==null;){if(H.isProxy(y))throw x("proxy array prototype");if(h+=1,h>L.depth)throw x("array prototype depth limit exceeded");y=Object.getPrototypeOf(y)}if(i.length>L.arrayLength)throw x("array length limit exceeded");for(let O=0;O<i.length;O+=1){let v=Object.getOwnPropertyDescriptor(i,String(O));if(!v||!Object.hasOwn(v,"value")||v.enumerable!==!0)throw x("array entries must be dense enumerable own data")}let w=0;for(let O in i){if(s+=1,s>L.fields)throw x("enumeration limit exceeded");if(Object.hasOwn(i,O)&&(w+=1,w>i.length))throw x("named array fields are unsupported")}if(w!==i.length)throw x("array entries must be dense enumerable own data");d("[");for(let O=0;O<i.length;O+=1)O&&d(","),l(Object.getOwnPropertyDescriptor(i,String(O)).value,c+1);d("]");return}let f=Object.getPrototypeOf(i);if(f!==Object.prototype&&f!==null)throw x("non-plain object");let p=[];for(let y in i){if(s+=1,s>L.fields)throw x("enumeration limit exceeded");if(!Object.hasOwn(i,y))continue;if(n+=1,n>L.fields)throw x("field limit exceeded");let h=Object.getOwnPropertyDescriptor(i,y);if(!h||!Object.hasOwn(h,"value")||h.enumerable!==!0)throw x("object fields must be enumerable own data");p.push([y,h.value])}d("{");for(let y=0;y<p.length;y+=1)y&&d(","),d(u(p[y][0])),d(":"),l(p[y][1],c+1);d("}")}finally{a.delete(i)}};return l(e,0),t.join("")}function Jt(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(H.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let o of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(o))throw new TypeError("HTTP header names must be valid tokens");let n=o.toLowerCase();if(r.has(n))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(n);let s=Object.getOwnPropertyDescriptor(e,o);if(!s||!Object.hasOwn(s,"value"))throw new TypeError("HTTP headers must contain own data properties");let a=s.value;if(a==null||["object","function","symbol"].includes(typeof a))throw new TypeError("HTTP header values must be scalar");t[o]=String(a)}return t}function qt(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Yt(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Xt(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Te=new Map,Ge=new WeakMap,We=1;function ie(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=Ge.get(e);return t||(t=We,We+=1,Ge.set(e,t)),`reference:${t}`}var Zt=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Qt=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Je(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Zt.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function qe(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Je);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Je(r);let o=Object.hasOwn(r,"type")?r.type:null;return typeof o=="string"&&Qt.has(o)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function er(e,t,r,o={},n=null){let s=Ut("sha256"),a=(u,l)=>{let i=String(l);s.update(String(Buffer.byteLength(u,"utf8"))).update(":").update(u),s.update("=").update(String(Buffer.byteLength(i,"utf8"))).update(":").update(i).update(`
-`)};a("method",e),a("url",t),Object.keys(r||{}).map((u,l)=>({name:u.toLowerCase(),order:l,value:String(r[u])})).sort((u,l)=>u.name.localeCompare(l.name)||u.order-l.order).forEach((u,l)=>{a(`header-name-${l}`,u.name),a(`header-value-${l}`,u.value)}),a("body",n??"-");for(let u of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])a(`context-${u}`,o[u]??"-");return s.digest("hex")}function tr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Ve):Math.min(250*2**e,Ve)+Math.floor(Math.random()*100)}var rr=e=>new Promise(t=>setTimeout(t,e));function F(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Oe(e,t,r){return F(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function K(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function nr(e){return e?e.byteLength??e.length??0:0}async function or(e,t,{url:r,truncate:o=!1,onOversize:n}={}){if(t==null)return await e.text();let s=Number(e.headers?.get?.("content-length"));if(Number.isFinite(s)&&s>t&&(K(e),!o))throw Oe(r,`content-length ${s}`,t);let a=e.body?.getReader?.();if(!a){let c=await e.text(),f=Buffer.byteLength(c,"utf8");if(f>t){if(!o)throw Oe(r,`body ${f} bytes`,t);return Buffer.from(c,"utf8").subarray(0,t).toString("utf8")}return c}let d=[],u=0,l=!1;try{for(;;){let{value:c,done:f}=await a.read();if(f)break;if(c&&(d.push(Buffer.from(c)),u+=nr(c),u>t)){l=!0;break}}}finally{if(l)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(l&&(typeof n=="function"&&n(),!o))throw Oe(r,`streamed ${u} bytes`,t);let i=Buffer.concat(d);return(l?i.subarray(0,t):i).toString("utf8")}function sr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function ir(e,{fetchImpl:t,method:r,headers:o,body:n,timeoutMs:s,lookupFn:a,realFetch:d,untrustedUrl:u=!1,maxResponseBytes:l=null,sameOriginRedirectsOnly:i=!1,importUndici:c,validateResponse:f,signal:p,redirectPolicy:y="follow",maxRedirects:h=ae}){let w=new AbortController,O=setTimeout(()=>w.abort(),s),v=p?Ke?Ke([p,w.signal]):p:w.signal,S=null,$=t,G=a?{lookupFn:a}:{};if(u&&!d&&!xe($))throw F(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let J=async(b,{status:I=null}={})=>{let N=await Ee(b,G);if(!N.ok)throw F(I==null?`HTTP refused ${b}: ${N.error}`:`HTTP redirect to ${b} ${N.error}`,I==null?{}:{status:I});let U=new URL(b).hostname;if(d){if(S&&(await S.close(),S=null),!S)try{S=await Ae({requireUndici:!0,...c?{importUndici:c}:{}})}catch(m){throw F(I==null?`HTTP refused ${b}: ${m?.message||m}`:`HTTP redirect to ${b} refused: ${m?.message||m}`,I==null?{}:{status:I})}S.pin(U,N.addresses),$=S.fetch}else Be($,U,N.addresses);return N};try{let b=String(e),I=Object.assign(Object.create(null),o||{});u&&await J(b);for(let N=0;N<=h;N+=1){let U=Object.assign(Object.create(null),{method:r,headers:I,body:n,signal:v,redirect:"manual",dispatcher:void 0}),m=await $(b,U);if((y==="error"||h===0)&&m.status>=300&&m.status<400)throw K(m),F(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(Kt.has(m.status)){let P=i===!0&&r==="POST"&&[307,308].includes(m.status)&&qe(r,n);if(r!=="GET"&&r!=="HEAD"&&!P){K(m);let T=new Error(`HTTP ${m.status} ${r} ${b} redirected non-idempotent request`);throw T.status=m.status,T}if(N===h)throw K(m),F(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let _e=m.headers?.get?.("location"),k;try{k=Yt(_e,b)}catch(T){throw K(m),T}let z=!Xt(k,b);if(K(m),z&&r==="POST"){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T}if(z&&i){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T.retryable=!1,T}if(z&&(I=qt(I)),u)await J(k,{status:m.status});else if(z){let T=await Ee(k,G);if(!T.ok){let A=new Error(`HTTP redirect from ${b} ${T.error}`);throw A.status=m.status,A.retryable=!1,A}d&&T.addresses?.length&&(S||(S=await Ae(c?{importUndici:c}:{})),S&&(S.pin(new URL(k).hostname,T.addresses),$=S.fetch))}b=k;continue}if(typeof f=="function")try{await f(m,{url:b})}catch(P){throw K(m),F(P?.message||String(P))}let _=await or(m,l,{url:b,onOversize:()=>w.abort()}),q=sr(_);if(!m.ok){let P=new Error(`HTTP ${m.status} ${r} ${b}`);throw P.status=m.status,P.retryAfter=m.headers?.get?.("retry-after")??null,P.body=q??_.slice(0,300),P}return q??_}throw new Error(`HTTP redirect loop for ${e}`)}catch(b){if(w.signal.aborted&&!Ie(p)){let I=b&&(typeof b=="object"||typeof b=="function")&&!H.isProxy(b)?b:null,N=I?Object.getOwnPropertyDescriptor(I,"oversize"):null;if(!(N&&Object.hasOwn(N,"value")&&N.value===!0))try{if(!I)throw new TypeError("unsafe rejection");Object.defineProperties(I,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw b}finally{clearTimeout(O),S&&await S.close()}}async function Ye(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&H.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let A of Object.getOwnPropertyNames(t)){let g=Object.getOwnPropertyDescriptor(t,A);if(!(A==="toJSON"&&g&&Object.hasOwn(g,"value")&&g.value===void 0)){if(!r.has(A))throw new TypeError("HTTP options contain unknown fields");if(!g||!g.enumerable||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let o=A=>{if(t==null||!Object.hasOwn(t,A))return;let g=Object.getOwnPropertyDescriptor(t,A);if(!g||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain own data properties");return g.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let n=o("method");if(n!==void 0&&(typeof n!="string"||!/^[A-Za-z]+$/u.test(n)))throw new TypeError("HTTP method must be a string token");let s=o("timeoutMs");if(s!==void 0&&(!Number.isInteger(s)||s<1||s>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let a=o("retries");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>10))throw new TypeError("HTTP retries must be a bounded integer");let d=o("redirectPolicy");if(d!==void 0&&d!=="follow"&&d!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let u=o("maxRedirects");if(u!==void 0&&(!Number.isInteger(u)||u<0||u>ae))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ae}`);if(d==="error"&&u!==void 0&&u!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let l=d??"follow",i=l==="error"?0:u??ae;for(let A of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let g=o(A);if(g!==void 0&&typeof g!="boolean")throw new TypeError(`HTTP ${A} must be boolean`)}let c=o("maxResponseBytes");if(c!==void 0&&(!Number.isInteger(c)||c<1||c>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let f=o("signal");if(f!==void 0){if(H.isProxy(f)||!(f instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Ie(f)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let A of["importUndici","lookupFn","validateResponse"]){let g=o(A);if(g!==void 0&&typeof g!="function")throw new TypeError(`HTTP ${A} must be a function`)}let p=o("fetchImpl"),y=p||globalThis.fetch;if(typeof y!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let h=s??12e3,w=(n||"GET").toUpperCase(),O=o("headers"),v=Jt(O),S=Object.assign(Object.create(null),v);Object.keys(S).some(A=>A.toLowerCase()==="accept")||(S.Accept="application/json");let $=o("body");$!=null&&typeof $!="string"&&(Object.keys(S).find(g=>g.toLowerCase()==="content-type")||(S["Content-Type"]="application/json"),$=Wt($));let G=a??vt,J=o("lookupFn"),b=!p,I=o("untrustedUrl")===!0,N=o("sameOriginRedirectsOnly")===!0,U=o("importUndici"),m=o("validateResponse"),_=f,q=c??null,P=async()=>{let A;for(let g=0;g<=G;g++){_&&Bt.call(_);try{return await ir(e,{fetchImpl:y,method:w,headers:S,body:$,timeoutMs:h,lookupFn:J,realFetch:b,untrustedUrl:I,maxResponseBytes:q,sameOriginRedirectsOnly:N,importUndici:U,validateResponse:m,signal:_,redirectPolicy:l,maxRedirects:i})}catch(D){A=D;let W=ue=>{if(!D||typeof D!="object"&&typeof D!="function"||H.isProxy(D))return;let Y=Object.getOwnPropertyDescriptor(D,ue);return Y&&Object.hasOwn(Y,"value")?Y.value:void 0},ce=W("status"),st=W("oracleTimeout")===!0||W("name")==="AbortError"||W("name")==="TimeoutError"||Ie(_),it=new Set([408,425,429]),at=W("retryable")===!1?!1:ce!=null?it.has(ce)||Ft.has(ce)&&Me.has(w):!st&&Me.has(w);if(g===G||!at)throw D;let Pe=tr(g,W("retryAfter"));_?await new Promise((ue,Y)=>{let ct=setTimeout(ue,Pe);Mt.call(_,"abort",()=>{clearTimeout(ct),Y(Vt(_)||new DOMException("Aborted","AbortError"))},{once:!0})}):await rr(Pe)}}throw A};if(!(o("dedupe")!==!1&&!_&&qe(w,$)))return P();let k=er(w,e,S,{untrustedUrl:I,maxResponseBytes:q,sameOriginRedirectsOnly:N,redirectPolicy:l,maxRedirects:i,timeoutMs:h,retries:G,fetchImpl:ie(y),realFetch:b,lookupFn:ie(J),importUndici:ie(U),validateResponse:ie(m)},$),z=Te.get(k);if(z)return z;let T=P().finally(()=>Te.delete(k));return Te.set(k,T),T}var Xe={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},ar=new Map(Object.values(Xe).map(e=>[e.chainId,e]));function Ze(e){return ar.get(Number(e))||null}function Qe(e,t=process.env){let r=Ze(e);if(!r)return null;for(let o of r.rpcEnv){let n=(t[o]||"").trim();if(n)return n}return null}import{Interface as cr,getAddress as ur}from"ethers";var an=new cr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function Ne(e,t){try{return ur(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function lr(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function Re(e){return e==null?null:Number.parseInt(String(e),16)}var fr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function dr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let o=Qe(e,r);return o||fr[Number(e)]||null}var pr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function hr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!pr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var te=new Map,et=new Map;function mr(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function yr(e){if(e?.error)throw mr(e.error);return e?.result}function br(e,t,r){return`${e}
+import{wordlists as ft}from"ethers";var dt=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),pt=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],ht=new Set([12,15,18,21,24]);function mt(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return ht.has(t.length)&&t.every(r=>ft.en.getWordIndex(r)>=0)}var yt=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,bt=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,wt=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function gt(e){let t=je(e);return wt.has(t)||bt.test(t)}var Z=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function je(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function Et(e){let t=je(e);return[...dt].some(r=>t.includes(r))}function At(e,t,r){if(typeof t=="string"){if(pt.some(o=>o.test(t))||mt(t))throw new Z(r);if(yt.test(t)&&!gt(e))throw new Z(r)}}function de(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return At(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((n,s)=>de(n,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let n of Object.keys(e).sort()){let s=`${t}.${n}`;if(Et(n))throw new Z(s);e[n]!==void 0&&(o[n]=de(e[n],s,n))}return o}function Le(e){return de(e)}var Ir=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Nr=Object.freeze(["read","simulate"]);var Rr=1440*60;var j=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},St=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,xt=Object.freeze(["privkey","wif","xprv","seed"]);function pe(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return St.test(t)||xt.includes(r)}var He=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Ue=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Tt(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Ue.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Fe(e){let t;try{t=JSON.stringify(e)}catch(n){throw new j("$",`unserializable-payload: ${String(n?.message||n)}`)}if(t===void 0)return"null";let r=Tt(t);for(let{rule:n,re:s}of He)if(s.test(r))throw new j("$<serialized>",n);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new j("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(n,s)=>{if(n&&pe(n))throw new j(`$<serialized>.${n}`,"forbidden-key-name");return s}),t}function B(e,t="$",r=new Set,o=""){if(e==null)return e;if(typeof e=="string"){let n=Ue.includes(String(o).toLowerCase().replace(/[_-]/g,""));for(let{rule:s,re:a}of He)if(!(n&&s.startsWith("raw-32-byte-hex"))&&a.test(e))throw new j(t,s);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[n,s]of e.entries()){if(typeof n=="string"&&pe(n))throw new j(`${t}[${JSON.stringify(n)}]`,"forbidden-key-name");B(n,`${t}[key]`,r),B(s,`${t}[${String(n)}]`,r)}return e}if(e instanceof Set){let n=0;for(let s of e.values())B(s,`${t}[${n++}]`,r);return e}if(Array.isArray(e))return e.forEach((n,s)=>B(n,`${t}[${s}]`,r)),e;for(let[n,s]of Object.entries(e)){if(pe(n))throw new j(`${t}.${n}`,"forbidden-key-name");B(s,`${t}.${n}`,r,n)}return e}var Ot=/[\u0000-\u001f\u007f]/;function he(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function me(e,t="control input"){try{B(e,t),Fe(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function Q(e,{required:t=[],optional:r=[]}={},o="object"){he(e,o);let n=new Set([...t,...r]),s=Object.keys(e).filter(a=>!n.has(a));if(s.length)throw new TypeError(`${o} has unknown field ${s[0]}`);for(let a of t)if(!Object.hasOwn(e,a))throw new TypeError(`${o}.${a} is required`);return e}function ye(e,t,r=200,{lower:o=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||Ot.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let n=e.trim();return o?n.toLowerCase():n}function ee(e,t,r=80){let o=ye(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(o))throw new TypeError(`${t} must be a lowercase identifier`);return o}function se(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function P(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))P(t);Object.freeze(e)}return e}var It=Object.freeze(["confirmations","finalizedTag","checkpoint"]),M=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Nt=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"]);function ve({family:e,chainId:t},r="chain"){let o=ee(e,`${r}.family`,40),n;if(o==="evm"){if(typeof t=="number")n=String(se(t,`${r}.chainId`,{positive:!0}));else if(n=ye(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(n))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else n=ee(t,`${r}.chainId`,80);return{family:o,chainId:n}}function Rt(e,t="chain"){return Q(e,{required:["family","chainId"]},t),P(ve(e,t))}function ze(e,t="finality rule"){me(e,t),he(e,t);let r=e.rule;if(!It.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let o=r==="confirmations"?"confirmations":r;Q(e,{required:["family","chainId","rule",o]},t);let n=ve(e,t);return r==="confirmations"?{...n,rule:r,confirmations:se(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...n,rule:r,[o]:ee(e[o],`${t}.${o}`,80)}}function be(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((o,n)=>ze(o,`finality policy rule ${n}`)),r=new Set;for(let o of t){let n=`${o.family}\0${o.chainId}`;if(r.has(n))throw new TypeError(`duplicate finality rule for ${o.family}:${o.chainId}`);r.add(n)}return P({policyVersion:1,rules:t})}function $t(e){if(Q(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return be(e.rules)}function De(e,t){let r=Rt(t,"finality query"),n=$t(e).rules.find(s=>s.family===r.family&&s.chainId===r.chainId);return n?P({status:"KNOWN",...r,rule:n}):P({status:M.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function _t(e,t){if(e==null)return null;me(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(Q(e,{required:["status"],optional:[r]},"finality evidence"),!Nt.includes(e.status))throw new TypeError("finality evidence.status is unknown");let o={status:e.status};return e[r]!=null&&(o[r]=t.rule==="confirmations"?se(e.confirmations,"finality evidence.confirmations",{positive:!0}):ee(e[r],`finality evidence.${r}`,80)),o}function Be(e,t){if(!e||e.status===M.UNKNOWN||e.rule==null)return P({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=ze(e.rule??e,"resolved finality rule"),o=_t(t,r);if(o==null)return P({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(o.status!=="LIVE")return P({status:M.UNKNOWN,final:!1,reason:`${o.status}_EVIDENCE`});let n=!1;return r.rule==="confirmations"?n=o.confirmations!=null&&o.confirmations>=r.confirmations:r.rule==="finalizedTag"?n=o.finalizedTag===r.finalizedTag:n=o.checkpoint===r.checkpoint,P({status:n?M.FINAL:M.INCLUDED,final:n,reason:n?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var Pt=1,Wr=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),E=(...e)=>e.find(t=>t!=null),te=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype;function Ct(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function Me(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function ge(e){return e==null?e:Array.isArray(e)?e.map(ge):te(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,ge(e[t])])):String(e)}function kt(e,t,r,o){let n=E(e.finalityEvidence,o?.finality,e.evidence),s=E(e.finalityPolicy,e.policy);try{return s==null&&te(e.finalityRule)&&(s=be([{family:t,chainId:r,...e.finalityRule}])),s==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:Be(De(s,{family:t,chainId:r}),n)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function R(e,t,r){r!=null&&(e[t]=r)}function jt(e){return e==null?null:String(e).trim().toLowerCase()}function we(...e){let t=e.map(jt).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function ie(e={}){if(!te(e))throw new TypeError("verified receipt: input object required");let t=Le(e),r=E(t.actionReceipt,t.receipt),o=te(r)?r:t,n=E(t.observation,t.chainObservation,t.observedReceipt),s=te(n),a=E(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash),d=E(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family),l=E(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),u=!we(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash)||!we(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family)||!we(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),i=kt(t,d,l,s&&!u?n:null),c=Ct(E(n?.receiptStatus,n?.executionStatus,n?.status)),f=E(t.reconciliationStatus,t.reconciliation?.status,n?.reconciliationStatus),p=E(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,n?.finalityState),y="UNKNOWN";Me(f)||!u&&(s&&c==="FAIL"||Me(p))?y="FAIL":!u&&a&&s&&c==="SUCCESS"&&["INCLUDED","FINAL"].includes(i.status)&&(y="SUCCESS");let h={verifiedReceiptVersion:Pt,status:y};u&&(h.reason="REFERENCE_MISMATCH"),R(h,"txHash",a),R(h,"chain",E(t.chain,o.chain,n?.chain)),R(h,"family",d),R(h,"chainId",l),R(h,"block",E(n?.block,t.block)),R(h,"blockState",E(n?.blockState,n?.inclusionState)),h.finalityState=i.status,R(h,"confirmations",E(n?.confirmations,n?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),R(h,"observedAt",E(n?.observedAt,t.observedAt)),R(h,"route",E(t.route,o.route)),R(h,"prepareHash",E(t.prepareHash,o.prepareHash)),R(h,"policyOutcome",E(t.policyOutcome,o.policyOutcome,o.policyChecks));let b=E(t.balanceChanges,n?.balanceChanges,n?.balances,o.balanceChanges,o.balances);return b!=null&&(h.balanceChanges=ge(b)),R(h,"createdAt",E(t.createdAt,o.createdAt)),R(h,"submittedAt",E(t.submittedAt,o.submittedAt)),R(h,"finalizedAt",E(t.finalizedAt,n?.finalizedAt)),R(h,"timestamps",E(t.timestamps,o.timestamps,n?.timestamps)),P(h)}import{createHash as vt}from"node:crypto";import{types as H}from"node:util";import V from"node:net";import Lt from"node:dns";var Ht=new Set(["localhost","metadata.google.internal","metadata.goog"]);function ae(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=i=>{if(!i)return[];let c=i.split(":"),f=c.at(-1);if(f?.includes(".")){let p=f.split(".").map(Number);if(p.length!==4||p.some(y=>!Number.isInteger(y)||y<0||y>255))return null;c.splice(c.length-1,1,(p[0]<<8|p[1]).toString(16),(p[2]<<8|p[3]).toString(16))}return c.some(p=>!/^[0-9a-f]{1,4}$/.test(p))?null:c.map(p=>Number.parseInt(p,16))},[o,n]=t.split("::"),s=r(o),a=r(n);if(!s||!a)return null;let d=t.includes("::"),l=8-s.length-a.length;if(!d&&l!==0||d&&l<1)return null;let u=[...s,...Array(Math.max(0,l)).fill(0),...a];return u.length!==8?null:Uint8Array.from(u.flatMap(i=>[i>>8,i&255]))}function Ee(e,t,r){let o=Math.floor(r/8),n=r%8;for(let a=0;a<o;a+=1)if(e[a]!==t[a])return!1;if(!n)return!0;let s=255<<8-n;return(e[o]&s)===(t[o]&s)}function Ae(e){if(V.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(V.isIPv6(e)){let t=ae(e);if(!t)return!1;let r=ae("::ffff:0:0");return Ee(t,r,96)?Ae([...t.slice(12)].join(".")):Ee(t,ae("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([n,s])=>Ee(t,ae(n),s)):!1}return!1}function Ut(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Ht.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let o=V.isIP(r);return o!==0&&!Ae(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:o!==0}}async function Se(e,{lookupFn:t=Lt.promises.lookup}={}){let r=Ut(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:V.isIPv6(r.host)?6:4}]};let o;try{o=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(o)||o.length===0||o.some(n=>!Ae(n.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:o}}async function xe({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,o;try{let c=await t();r=c.Agent,o=c.fetch}catch(c){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${c?.message||c}`);return null}if(typeof r!="function"||typeof o!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let n=c=>String(c).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),s=new Map,a=c=>(Array.isArray(c)?c:[c]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(V.isIPv6(f.address)?6:4)})),d=(c,f,p)=>{s.set(n(c),a(typeof f=="string"?[{address:f,family:p}]:f))},l=c=>{let f=n(c);if(V.isIP(f))return[{address:f,family:V.isIPv6(f)?6:4}];let p=s.get(f);if(!p||!p.length)throw new Error(`refused: unpinned host ${c} during pinned fetch`);return p},u=new r({connect:{lookup(c,f,p){let y;try{y=l(c)}catch(h){return p(h)}return f?.all?p(null,y):p(null,y[0].address,y[0].family)}}}),i=Ft((c,f={})=>o(c,{...f,dispatcher:u}),d);return{dispatcher:u,fetch:i,pin:d,resolve:l,async close(){try{await u.destroy()}catch{}}}}var Te=Symbol.for("oracle.egressGuard.pinCapableFetch");function Ft(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Te]=Object.freeze({pin:t}),e}function Oe(e){return typeof e=="function"&&typeof e[Te]?.pin=="function"}function Ve(e,t,r){if(!Oe(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Te].pin(t,r)}var zt=new Set([408,425,429,500,502,503,504]),Ke=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Dt=2,Ge=4e3,Bt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Mt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Vt=AbortSignal.prototype.throwIfAborted,Kt=EventTarget.prototype.addEventListener,We=EventTarget.prototype.removeEventListener,Je=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,re=e=>e?Bt.call(e):!1,Gt=e=>e?Mt.call(e):void 0,Wt=new Set([301,302,303,307,308]),le=3,tn=64*1024,L=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function x(e){return v(`HTTP JSON body refused: ${e}`)}function Jt(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof H[t]=="function"&&H[t](e))}function qt(e){let t=[],r=0,o=0,n=0,s=0,a=new WeakSet,d=i=>{if(r+=Buffer.byteLength(i,"utf8"),r>L.bytes)throw x("serialized byte limit exceeded");t.push(i)},l=i=>{if(Buffer.byteLength(i,"utf8")>L.bytes)throw x("serialized byte limit exceeded");return JSON.stringify(i)},u=(i,c)=>{if(o+=1,o>L.nodes)throw x("node limit exceeded");if(c>L.depth)throw x("depth limit exceeded");if(i===null){d("null");return}if(typeof i=="string"){d(l(i));return}if(typeof i=="boolean"){d(i?"true":"false");return}if(typeof i=="number"){if(!Number.isFinite(i))throw x("non-finite number");d(Object.is(i,-0)?"0":String(i));return}if(typeof i!="object")throw x("unsupported non-JSON value");if(H.isProxy(i))throw x("proxy value");if(Jt(i))throw x("unsupported exotic object");if(a.has(i))throw x("cyclic value");a.add(i);try{if(Object.getOwnPropertySymbols(i).length>0)throw x("symbol-keyed fields are unsupported");if(Array.isArray(i)){let y=Object.getPrototypeOf(i),h=0;for(;y!==null;){if(H.isProxy(y))throw x("proxy array prototype");if(h+=1,h>L.depth)throw x("array prototype depth limit exceeded");y=Object.getPrototypeOf(y)}if(i.length>L.arrayLength)throw x("array length limit exceeded");for(let A=0;A<i.length;A+=1){let U=Object.getOwnPropertyDescriptor(i,String(A));if(!U||!Object.hasOwn(U,"value")||U.enumerable!==!0)throw x("array entries must be dense enumerable own data")}let b=0;for(let A in i){if(s+=1,s>L.fields)throw x("enumeration limit exceeded");if(Object.hasOwn(i,A)&&(b+=1,b>i.length))throw x("named array fields are unsupported")}if(b!==i.length)throw x("array entries must be dense enumerable own data");d("[");for(let A=0;A<i.length;A+=1)A&&d(","),u(Object.getOwnPropertyDescriptor(i,String(A)).value,c+1);d("]");return}let f=Object.getPrototypeOf(i);if(f!==Object.prototype&&f!==null)throw x("non-plain object");let p=[];for(let y in i){if(s+=1,s>L.fields)throw x("enumeration limit exceeded");if(!Object.hasOwn(i,y))continue;if(n+=1,n>L.fields)throw x("field limit exceeded");let h=Object.getOwnPropertyDescriptor(i,y);if(!h||!Object.hasOwn(h,"value")||h.enumerable!==!0)throw x("object fields must be enumerable own data");p.push([y,h.value])}d("{");for(let y=0;y<p.length;y+=1)y&&d(","),d(l(p[y][0])),d(":"),u(p[y][1],c+1);d("}")}finally{a.delete(i)}};return u(e,0),t.join("")}function Yt(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(H.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let o of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(o))throw new TypeError("HTTP header names must be valid tokens");let n=o.toLowerCase();if(r.has(n))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(n);let s=Object.getOwnPropertyDescriptor(e,o);if(!s||!Object.hasOwn(s,"value"))throw new TypeError("HTTP headers must contain own data properties");let a=s.value;if(a==null||["object","function","symbol"].includes(typeof a))throw new TypeError("HTTP header values must be scalar");t[o]=String(a)}return t}function Xt(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Zt(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Qt(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Ie=new Map,qe=new WeakMap,Ye=1;function ce(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=qe.get(e);return t||(t=Ye,Ye+=1,qe.set(e,t)),`reference:${t}`}var er=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),tr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Xe(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?er.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function Ze(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Xe);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Xe(r);let o=Object.hasOwn(r,"type")?r.type:null;return typeof o=="string"&&tr.has(o)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function rr(e,t,r,o={},n=null){let s=vt("sha256"),a=(l,u)=>{let i=String(u);s.update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l),s.update("=").update(String(Buffer.byteLength(i,"utf8"))).update(":").update(i).update(`
+`)};a("method",e),a("url",t),Object.keys(r||{}).map((l,u)=>({name:l.toLowerCase(),order:u,value:String(r[l])})).sort((l,u)=>l.name.localeCompare(u.name)||l.order-u.order).forEach((l,u)=>{a(`header-name-${u}`,l.name),a(`header-value-${u}`,l.value)}),a("body",n??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])a(`context-${l}`,o[l]??"-");return s.digest("hex")}function nr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Ge):Math.min(250*2**e,Ge)+Math.floor(Math.random()*100)}var or=e=>new Promise(t=>setTimeout(t,e));function v(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Ne(e,t,r){return v(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function K(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function sr(e){return e?e.byteLength??e.length??0:0}async function ir(e,t,{url:r,truncate:o=!1,onOversize:n}={}){if(t==null)return await e.text();let s=Number(e.headers?.get?.("content-length"));if(Number.isFinite(s)&&s>t&&(K(e),!o))throw Ne(r,`content-length ${s}`,t);let a=e.body?.getReader?.();if(!a){let c=await e.text(),f=Buffer.byteLength(c,"utf8");if(f>t){if(!o)throw Ne(r,`body ${f} bytes`,t);return Buffer.from(c,"utf8").subarray(0,t).toString("utf8")}return c}let d=[],l=0,u=!1;try{for(;;){let{value:c,done:f}=await a.read();if(f)break;if(c&&(d.push(Buffer.from(c)),l+=sr(c),l>t)){u=!0;break}}}finally{if(u)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(u&&(typeof n=="function"&&n(),!o))throw Ne(r,`streamed ${l} bytes`,t);let i=Buffer.concat(d);return(u?i.subarray(0,t):i).toString("utf8")}function ar(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function cr(e,{fetchImpl:t,method:r,headers:o,body:n,timeoutMs:s,lookupFn:a,realFetch:d,untrustedUrl:l=!1,maxResponseBytes:u=null,sameOriginRedirectsOnly:i=!1,importUndici:c,validateResponse:f,signal:p,redirectPolicy:y="follow",maxRedirects:h=le}){let b=null,A=t,U=a?{lookupFn:a}:{};if(l&&!d&&!Oe(A))throw v(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let $=new AbortController,k=setTimeout(()=>$.abort(),s),W=p?Je?Je([p,$.signal]):p:$.signal,J=async(w,{status:O=null}={})=>{let I=await Se(w,U);if(!I.ok)throw v(O==null?`HTTP refused ${w}: ${I.error}`:`HTTP redirect to ${w} ${I.error}`,O==null?{}:{status:O});let F=new URL(w).hostname;if(d){if(b&&(await b.close(),b=null),!b)try{b=await xe({requireUndici:!0,...c?{importUndici:c}:{}})}catch(m){throw v(O==null?`HTTP refused ${w}: ${m?.message||m}`:`HTTP redirect to ${w} refused: ${m?.message||m}`,O==null?{}:{status:O})}b.pin(F,I.addresses),A=b.fetch}else Ve(A,F,I.addresses);return I};try{let w=String(e),O=Object.assign(Object.create(null),o||{});l&&await J(w);for(let I=0;I<=h;I+=1){let F=Object.assign(Object.create(null),{method:r,headers:O,body:n,signal:W,redirect:"manual",dispatcher:void 0}),m=await A(w,F);if((y==="error"||h===0)&&m.status>=300&&m.status<400)throw K(m),v(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(Wt.has(m.status)){let _=i===!0&&r==="POST"&&[307,308].includes(m.status)&&Ze(r,n);if(r!=="GET"&&r!=="HEAD"&&!_){K(m);let T=new Error(`HTTP ${m.status} ${r} ${w} redirected non-idempotent request`);throw T.status=m.status,T}if(I===h)throw K(m),v(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let Pe=m.headers?.get?.("location"),C;try{C=Zt(Pe,w)}catch(T){throw K(m),T}let z=!Qt(C,w);if(K(m),z&&r==="POST"){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T}if(z&&i){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T.retryable=!1,T}if(z&&(O=Xt(O)),l)await J(C,{status:m.status});else if(z){let T=await Se(C,U);if(!T.ok){let S=new Error(`HTTP redirect from ${w} ${T.error}`);throw S.status=m.status,S.retryable=!1,S}d&&T.addresses?.length&&(b||(b=await xe(c?{importUndici:c}:{})),b&&(b.pin(new URL(C).hostname,T.addresses),A=b.fetch))}w=C;continue}if(typeof f=="function")try{await f(m,{url:w})}catch(_){throw K(m),v(_?.message||String(_))}let N=await ir(m,u,{url:w,onOversize:()=>$.abort()}),q=ar(N);if(!m.ok){let _=new Error(`HTTP ${m.status} ${r} ${w}`);throw _.status=m.status,_.retryAfter=m.headers?.get?.("retry-after")??null,_.body=q??N.slice(0,300),_}return q??N}throw new Error(`HTTP redirect loop for ${e}`)}catch(w){if($.signal.aborted&&!re(p)){let O=w&&(typeof w=="object"||typeof w=="function")&&!H.isProxy(w)?w:null,I=O?Object.getOwnPropertyDescriptor(O,"oversize"):null;if(!(I&&Object.hasOwn(I,"value")&&I.value===!0))try{if(!O)throw new TypeError("unsafe rejection");Object.defineProperties(O,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw w}finally{clearTimeout(k),b&&await b.close()}}async function Qe(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&H.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let S of Object.getOwnPropertyNames(t)){let g=Object.getOwnPropertyDescriptor(t,S);if(!(S==="toJSON"&&g&&Object.hasOwn(g,"value")&&g.value===void 0)){if(!r.has(S))throw new TypeError("HTTP options contain unknown fields");if(!g||!g.enumerable||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let o=S=>{if(t==null||!Object.hasOwn(t,S))return;let g=Object.getOwnPropertyDescriptor(t,S);if(!g||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain own data properties");return g.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let n=o("method");if(n!==void 0&&(typeof n!="string"||!/^[A-Za-z]+$/u.test(n)))throw new TypeError("HTTP method must be a string token");let s=o("timeoutMs");if(s!==void 0&&(!Number.isInteger(s)||s<1||s>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let a=o("retries");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>10))throw new TypeError("HTTP retries must be a bounded integer");let d=o("redirectPolicy");if(d!==void 0&&d!=="follow"&&d!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=o("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>le))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${le}`);if(d==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let u=d??"follow",i=u==="error"?0:l??le;for(let S of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let g=o(S);if(g!==void 0&&typeof g!="boolean")throw new TypeError(`HTTP ${S} must be boolean`)}let c=o("maxResponseBytes");if(c!==void 0&&(!Number.isInteger(c)||c<1||c>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let f=o("signal");if(f!==void 0){if(H.isProxy(f)||!(f instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{re(f)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let S of["importUndici","lookupFn","validateResponse"]){let g=o(S);if(g!==void 0&&typeof g!="function")throw new TypeError(`HTTP ${S} must be a function`)}let p=o("fetchImpl"),y=p||globalThis.fetch;if(typeof y!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let h=s??12e3,b=(n||"GET").toUpperCase(),A=o("headers"),U=Yt(A),$=Object.assign(Object.create(null),U);Object.keys($).some(S=>S.toLowerCase()==="accept")||($.Accept="application/json");let k=o("body");k!=null&&typeof k!="string"&&(Object.keys($).find(g=>g.toLowerCase()==="content-type")||($["Content-Type"]="application/json"),k=qt(k));let W=a??Dt,J=o("lookupFn"),w=!p,O=o("untrustedUrl")===!0,I=o("sameOriginRedirectsOnly")===!0,F=o("importUndici"),m=o("validateResponse"),N=f,q=c??null,_=async()=>{let S;for(let g=0;g<=W;g++){N&&Vt.call(N);try{return await cr(e,{fetchImpl:y,method:b,headers:$,body:k,timeoutMs:h,lookupFn:J,realFetch:w,untrustedUrl:O,maxResponseBytes:q,sameOriginRedirectsOnly:I,importUndici:F,validateResponse:m,signal:N,redirectPolicy:u,maxRedirects:i})}catch(D){S=D;let G=fe=>{if(!D||typeof D!="object"&&typeof D!="function"||H.isProxy(D))return;let Y=Object.getOwnPropertyDescriptor(D,fe);return Y&&Object.hasOwn(Y,"value")?Y.value:void 0},ue=G("status"),ct=G("oracleTimeout")===!0||G("name")==="AbortError"||G("name")==="TimeoutError"||re(N),lt=new Set([408,425,429]),ut=G("retryable")===!1?!1:ue!=null?lt.has(ue)||zt.has(ue)&&Ke.has(b):!ct&&Ke.has(b);if(g===W||!ut)throw D;let Ce=nr(g,G("retryAfter"));N?await new Promise((fe,Y)=>{let ke,X=()=>{clearTimeout(ke),We.call(N,"abort",X),Y(Gt(N)||new DOMException("Aborted","AbortError"))};if(re(N)){X();return}ke=setTimeout(()=>{We.call(N,"abort",X),fe()},Ce),Kt.call(N,"abort",X,{once:!0}),re(N)&&X()}):await or(Ce)}}throw S};if(!(o("dedupe")!==!1&&!N&&Ze(b,k)))return _();let C=rr(b,e,$,{untrustedUrl:O,maxResponseBytes:q,sameOriginRedirectsOnly:I,redirectPolicy:u,maxRedirects:i,timeoutMs:h,retries:W,fetchImpl:ce(y),realFetch:w,lookupFn:ce(J),importUndici:ce(F),validateResponse:ce(m)},k),z=Ie.get(C);if(z)return z;let T=_().finally(()=>Ie.delete(C));return Ie.set(C,T),T}var et={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},lr=new Map(Object.values(et).map(e=>[e.chainId,e]));function tt(e){return lr.get(Number(e))||null}function rt(e,t=process.env){let r=tt(e);if(!r)return null;for(let o of r.rpcEnv){let n=(t[o]||"").trim();if(n)return n}return null}import{Interface as ur,getAddress as fr}from"ethers";var ln=new ur(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function Re(e,t){try{return fr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function dr(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function $e(e){return e==null?null:Number.parseInt(String(e),16)}var pr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function hr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let o=rt(e,r);return o||pr[Number(e)]||null}var mr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function yr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!mr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var ne=new Map,nt=new Map;function br(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function wr(e){if(e?.error)throw br(e.error);return e?.result}function gr(e,t,r){return`${e}
 ${t}
-${JSON.stringify(r??[])}`}async function wr(e,t,r){return Ye(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function $e(e,t,r=[],o={}){let n=String(t||""),s=hr(n),a=dr(e,o);if(!a)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(s==="eth_chainid"&&o.cacheChainId!==!1){let i=et.get(a);if(i!=null)return i}let u=o.dedupe!==!1&&!o.signal?br(a,n,r):null;if(u&&te.has(u))return te.get(u);let l=(async()=>{let i=await wr(a,{jsonrpc:"2.0",id:1,method:t,params:r},o),c=yr(i);return s==="eth_chainid"&&typeof c=="string"&&et.set(a,c),c})();return u&&(te.set(u,l),l.finally(()=>{te.get(u)===l&&te.delete(u)}).catch(()=>{})),l}async function tt(e={},t={}){let r=Number(e.chainId??t.chainId??1),o=lr(e.txHash||e.hash||e.transactionHash),n=await $e(r,"eth_getTransactionReceipt",[o],t);if(!n)return{ok:!1,chainId:r,txHash:o,status:"pending",receipt:null,reason:"receipt pending"};let s=Re(n.status),a=s===1,d=s===1?"success":s===0?"reverted":"unknown",u=a?null:d==="reverted"?"transaction reverted":"unknown receipt status",l=e.expectedTo?Ne(e.expectedTo,"expectedTo"):null,i=n.to?Ne(n.to,"receipt.to"):null;return l&&i!==l&&(a=!1,u=`to mismatch: expected ${l}, got ${i||"null"}`),{ok:a,chainId:r,txHash:o,status:d,reason:u,statusCode:s,to:i,from:n.from?Ne(n.from,"receipt.from"):null,blockNumber:Re(n.blockNumber),transactionIndex:Re(n.transactionIndex),logs:Array.isArray(n.logs)?n.logs:[],receipt:n}}var gr=/^0x[0-9a-f]{64}$/;function Er(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function Ar({txHash:e,chainId:t,rpcUrl:r},o={}){let n=String(e||"").trim().toLowerCase();if(!gr.test(n))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let s=Number(t);if(!Number.isSafeInteger(s)||s<=0)throw new TypeError("observe receipt: chainId required");let a=o.transactionReceipt||tt,d=o.rpcCall||$e,u={...o.rpcOptions||{},...r?{rpcUrl:r}:{}},l;try{l=await a({txHash:n,chainId:s},u)}catch(p){return{observation:null,reason:`RPC_UNAVAILABLE: ${p.message}`}}if(!l||l.receipt==null)return{observation:null,reason:l?.reason||"receipt pending"};let i=null,c=l.blockNumber;if(Number.isSafeInteger(c))try{let p=Er(await d(s,"eth_blockNumber",[],u));p!=null&&p>=c&&(i=p-c+1)}catch{}let f={txHash:n,family:"evm",chainId:String(s),receiptStatus:l.status==="success"?"SUCCESS":l.status==="reverted"?"FAIL":"UNKNOWN",block:c==null?void 0:String(c),observedAt:new Date().toISOString(),finality:{status:"LIVE",...i==null?{}:{confirmations:i}}};return i!=null&&(f.confirmations=i),{observation:f,reason:null}}async function rt({txHash:e,chainId:t,confirmations:r=1,rpcUrl:o},n={}){let{observation:s,reason:a}=await Ar({txHash:e,chainId:t,rpcUrl:o},n),d=oe({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...s?{observation:s}:{}});return{receipt:d,observed:!!s,final:d.finalityState==="FINAL",requiredConfirmations:r,reason:a}}var nt={SUCCESS:0,FAIL:2,UNKNOWN:3};function re(e,t){let r=e.find(n=>n.startsWith(`--${t}=`));if(r)return r.split("=").slice(1).join("=");let o=e.indexOf(`--${t}`);return o>=0?e[o+1]:void 0}function ot(e,{observed:t,reason:r,final:o,requiredConfirmations:n}){let s=[`${e.status}  ${e.txHash||"no hash"}`];return e.reason&&s.push(`  reason        ${e.reason}`),s.push(`  finality      ${e.finalityState}${o?"":` (below pinned depth ${n})`}`),e.confirmations!=null&&s.push(`  confirmations ${e.confirmations}`),e.block!=null&&s.push(`  block         ${e.block}`),e.chainId!=null&&s.push(`  chain         ${e.family||"evm"}:${e.chainId}`),!t&&r&&s.push(`  not observed  ${r}`),e.status==="UNKNOWN"&&s.push("  UNKNOWN is not success. No observed chain state means the action is unproven."),`${s.join(`
+${JSON.stringify(r??[])}`}async function Er(e,t,r){return Qe(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function _e(e,t,r=[],o={}){let n=String(t||""),s=yr(n),a=hr(e,o);if(!a)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(s==="eth_chainid"&&o.cacheChainId!==!1){let i=nt.get(a);if(i!=null)return i}let l=o.dedupe!==!1&&!o.signal?gr(a,n,r):null;if(l&&ne.has(l))return ne.get(l);let u=(async()=>{let i=await Er(a,{jsonrpc:"2.0",id:1,method:t,params:r},o),c=wr(i);return s==="eth_chainid"&&typeof c=="string"&&nt.set(a,c),c})();return l&&(ne.set(l,u),u.finally(()=>{ne.get(l)===u&&ne.delete(l)}).catch(()=>{})),u}async function ot(e={},t={}){let r=Number(e.chainId??t.chainId??1),o=dr(e.txHash||e.hash||e.transactionHash),n=await _e(r,"eth_getTransactionReceipt",[o],t);if(!n)return{ok:!1,chainId:r,txHash:o,status:"pending",receipt:null,reason:"receipt pending"};let s=$e(n.status),a=s===1,d=s===1?"success":s===0?"reverted":"unknown",l=a?null:d==="reverted"?"transaction reverted":"unknown receipt status",u=e.expectedTo?Re(e.expectedTo,"expectedTo"):null,i=n.to?Re(n.to,"receipt.to"):null;return u&&i!==u&&(a=!1,l=`to mismatch: expected ${u}, got ${i||"null"}`),{ok:a,chainId:r,txHash:o,status:d,reason:l,statusCode:s,to:i,from:n.from?Re(n.from,"receipt.from"):null,blockNumber:$e(n.blockNumber),transactionIndex:$e(n.transactionIndex),logs:Array.isArray(n.logs)?n.logs:[],receipt:n}}var Ar=/^0x[0-9a-f]{64}$/;function Sr(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function xr({txHash:e,chainId:t,rpcUrl:r},o={}){let n=String(e||"").trim().toLowerCase();if(!Ar.test(n))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let s=Number(t);if(!Number.isSafeInteger(s)||s<=0)throw new TypeError("observe receipt: chainId required");let a=o.transactionReceipt||ot,d=o.rpcCall||_e,l={...o.rpcOptions||{},...r?{rpcUrl:r}:{}},u;try{u=await a({txHash:n,chainId:s},l)}catch(p){return{observation:null,reason:`RPC_UNAVAILABLE: ${p.message}`}}if(!u||u.receipt==null)return{observation:null,reason:u?.reason||"receipt pending"};let i=null,c=u.blockNumber;if(Number.isSafeInteger(c))try{let p=Sr(await d(s,"eth_blockNumber",[],l));p!=null&&p>=c&&(i=p-c+1)}catch{}let f={txHash:n,family:"evm",chainId:String(s),receiptStatus:u.status==="success"?"SUCCESS":u.status==="reverted"?"FAIL":"UNKNOWN",block:c==null?void 0:String(c),observedAt:new Date().toISOString(),finality:{status:"LIVE",...i==null?{}:{confirmations:i}}};return i!=null&&(f.confirmations=i),{observation:f,reason:null}}async function st({txHash:e,chainId:t,confirmations:r=1,rpcUrl:o},n={}){let{observation:s,reason:a}=await xr({txHash:e,chainId:t,rpcUrl:o},n),d=ie({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...s?{observation:s}:{}});return{receipt:d,observed:!!s,final:d.finalityState==="FINAL",requiredConfirmations:r,reason:a}}var it={SUCCESS:0,FAIL:2,UNKNOWN:3};function oe(e,t){let r=e.find(n=>n.startsWith(`--${t}=`));if(r)return r.split("=").slice(1).join("=");let o=e.indexOf(`--${t}`);return o>=0?e[o+1]:void 0}function at(e,{observed:t,reason:r,final:o,requiredConfirmations:n}){let s=[`${e.status}  ${e.txHash||"no hash"}`];return e.reason&&s.push(`  reason        ${e.reason}`),s.push(`  finality      ${e.finalityState}${o?"":` (below pinned depth ${n})`}`),e.confirmations!=null&&s.push(`  confirmations ${e.confirmations}`),e.block!=null&&s.push(`  block         ${e.block}`),e.chainId!=null&&s.push(`  chain         ${e.family||"evm"}:${e.chainId}`),!t&&r&&s.push(`  not observed  ${r}`),e.status==="UNKNOWN"&&s.push("  UNKNOWN is not success. No observed chain state means the action is unproven."),`${s.join(`
 `)}
-`}var hn={name:"receipt",summary:"verify an on-chain action against observed chain state (never trust a bare hash)",group:"read",usage:"oracle receipt --hash <txid> --chain <chainId> [--confirmations N] [--rpc-url URL] [--json] [--quiet]",async run(e){let t=e.argv||[],r=t.includes("--quiet"),o=t.indexOf("--json"),n=o>=0?t[o+1]:void 0;if(n&&!n.startsWith("--")){let h;try{h=JSON.parse(n)}catch(O){return process.stderr.write(`receipt: bad json: ${O.message}
-`),1}let w;try{w=oe(h)}catch(O){return process.stderr.write(`receipt: ${O.message}
-`),1}return process.stdout.write(r?`${JSON.stringify(w)}
-`:ot(w,{observed:!0,reason:null})),nt[w.status]}let s=re(t,"hash");if(!s)return process.stderr.write(`receipt: --hash required
+`}var yn={name:"receipt",summary:"verify an on-chain action against observed chain state (never trust a bare hash)",group:"read",usage:"oracle receipt --hash <txid> --chain <chainId> [--confirmations N] [--rpc-url URL] [--json] [--quiet]",async run(e){let t=e.argv||[],r=t.includes("--quiet"),o=t.indexOf("--json"),n=o>=0?t[o+1]:void 0;if(n&&!n.startsWith("--")){let h;try{h=JSON.parse(n)}catch(A){return process.stderr.write(`receipt: bad json: ${A.message}
+`),1}let b;try{b=ie(h)}catch(A){return process.stderr.write(`receipt: ${A.message}
+`),1}return process.stdout.write(r?`${JSON.stringify(b)}
+`:at(b,{observed:!0,reason:null})),it[b.status]}let s=oe(t,"hash");if(!s)return process.stderr.write(`receipt: --hash required
 usage: ${this.usage}
-`),1;let a=re(t,"chain")??re(t,"chainId");if(!a)return process.stderr.write(`receipt: --chain <chainId> required to observe chain state
-`),1;let d=re(t,"confirmations"),u=d==null?1:Number(d);if(!Number.isSafeInteger(u)||u<=0)return process.stderr.write(`receipt: --confirmations must be a positive integer
-`),1;let l;try{l=await rt({txHash:s,chainId:a,confirmations:u,rpcUrl:re(t,"rpc-url")})}catch(h){return process.stderr.write(`receipt: ${h.message}
-`),1}let{receipt:i,observed:c,reason:f,final:p,requiredConfirmations:y}=l;return process.stdout.write(r?`${JSON.stringify({...i,observed:c,final:p,requiredConfirmations:y,...f?{notObserved:f}:{}})}
-`:ot(i,{observed:c,reason:f,final:p,requiredConfirmations:y})),nt[i.status]}};export{hn as default};
+`),1;let a=oe(t,"chain")??oe(t,"chainId");if(!a)return process.stderr.write(`receipt: --chain <chainId> required to observe chain state
+`),1;let d=oe(t,"confirmations"),l=d==null?1:Number(d);if(!Number.isSafeInteger(l)||l<=0)return process.stderr.write(`receipt: --confirmations must be a positive integer
+`),1;let u;try{u=await st({txHash:s,chainId:a,confirmations:l,rpcUrl:oe(t,"rpc-url")})}catch(h){return process.stderr.write(`receipt: ${h.message}
+`),1}let{receipt:i,observed:c,reason:f,final:p,requiredConfirmations:y}=u;return process.stdout.write(r?`${JSON.stringify({...i,observed:c,final:p,requiredConfirmations:y,...f?{notObserved:f}:{}})}
+`:at(i,{observed:c,reason:f,final:p,requiredConfirmations:y})),it[i.status]}};export{yn as default};

package/dist/cli/commands/resolve.mjs

@@ -1,7 +1,7 @@
-import{keccak_256 as ue}from"@noble/hashes/sha3.js";import{createHash as qe}from"node:crypto";import{types as k}from"node:util";import B from"node:net";import Je from"node:dns";var Ve=new Set(["localhost","metadata.google.internal","metadata.goog"]);function Y(t){let e=String(t).toLowerCase().split("%")[0];if((e.match(/::/g)||[]).length>1)return null;let r=o=>{if(!o)return[];let a=o.split(":"),l=a.at(-1);if(l?.includes(".")){let h=l.split(".").map(Number);if(h.length!==4||h.some(m=>!Number.isInteger(m)||m<0||m>255))return null;a.splice(a.length-1,1,(h[0]<<8|h[1]).toString(16),(h[2]<<8|h[3]).toString(16))}return a.some(h=>!/^[0-9a-f]{1,4}$/.test(h))?null:a.map(h=>Number.parseInt(h,16))},[n,s]=e.split("::"),i=r(n),c=r(s);if(!i||!c)return null;let d=e.includes("::"),u=8-i.length-c.length;if(!d&&u!==0||d&&u<1)return null;let p=[...i,...Array(Math.max(0,u)).fill(0),...c];return p.length!==8?null:Uint8Array.from(p.flatMap(o=>[o>>8,o&255]))}function ee(t,e,r){let n=Math.floor(r/8),s=r%8;for(let c=0;c<n;c+=1)if(t[c]!==e[c])return!1;if(!s)return!0;let i=255<<8-s;return(t[n]&i)===(e[n]&i)}function te(t){if(B.isIPv4(t)){let e=t.split(".").map(Number);return!(e[0]===0||e[0]===10||e[0]===127||e[0]>=224||e[0]===100&&e[1]>=64&&e[1]<=127||e[0]===169&&e[1]===254||e[0]===172&&e[1]>=16&&e[1]<=31||e[0]===192&&(e[1]===0||e[1]===2||e[1]===168)||e[0]===192&&e[1]===88&&e[2]===99||e[0]===198&&(e[1]===18||e[1]===19||e[1]===51)||e[0]===203&&e[1]===0&&e[2]===113)}if(B.isIPv6(t)){let e=Y(t);if(!e)return!1;let r=Y("::ffff:0:0");return ee(e,r,96)?te([...e.slice(12)].join(".")):ee(e,Y("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([s,i])=>ee(e,Y(s),i)):!1}return!1}function We(t){let e;try{e=new URL(String(t))}catch{return{ok:!1,error:`not a valid URL: ${String(t).slice(0,120)}`}}if(e.protocol!=="http:"&&e.protocol!=="https:")return{ok:!1,error:`refused protocol ${e.protocol} (only http/https)`};let r=e.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Ve.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=B.isIP(r);return n!==0&&!te(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:e,host:r,isLiteralIp:n!==0}}async function re(t,{lookupFn:e=Je.promises.lookup}={}){let r=We(t);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:B.isIPv6(r.host)?6:4}]};let n;try{n=await e(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(s=>!te(s.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function ne({requireUndici:t=!1,importUndici:e=()=>import("undici")}={}){let r,n;try{let a=await e();r=a.Agent,n=a.fetch}catch(a){if(t)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${a?.message||a}`);return null}if(typeof r!="function"||typeof n!="function"){if(t)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let s=a=>String(a).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,c=a=>(Array.isArray(a)?a:[a]).map(l=>typeof l=="string"?{address:l}:l).filter(l=>l&&l.address).map(l=>({address:l.address,family:l.family||(B.isIPv6(l.address)?6:4)})),d=(a,l,h)=>{i.set(s(a),c(typeof l=="string"?[{address:l,family:h}]:l))},u=a=>{let l=s(a);if(B.isIP(l))return[{address:l,family:B.isIPv6(l)?6:4}];let h=i.get(l);if(!h||!h.length)throw new Error(`refused: unpinned host ${a} during pinned fetch`);return h},p=new r({connect:{lookup(a,l,h){let m;try{m=u(a)}catch(P){return h(P)}return l?.all?h(null,m):h(null,m[0].address,m[0].family)}}}),o=Ye((a,l={})=>n(a,{...l,dispatcher:p}),d);return{dispatcher:p,fetch:o,pin:d,resolve:u,async close(){try{await p.destroy()}catch{}}}}var oe=Symbol.for("oracle.egressGuard.pinCapableFetch");function Ye(t,e){if(typeof t!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof e!="function")throw new Error("markPinCapableFetch: pin must be a function");return t[oe]=Object.freeze({pin:e}),t}function se(t){return typeof t=="function"&&typeof t[oe]?.pin=="function"}function ye(t,e,r){if(!se(t))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");t[oe].pin(e,r)}var Ke=new Set([408,425,429,500,502,503,504]),we=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Ze=2,be=4e3,Xe=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Qe=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,et=AbortSignal.prototype.throwIfAborted,tt=EventTarget.prototype.addEventListener,ge=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,ce=t=>t?Xe.call(t):!1,rt=t=>t?Qe.call(t):void 0,nt=new Set([301,302,303,307,308]),K=3,Vt=64*1024,N=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function T(t){return j(`HTTP JSON body refused: ${t}`)}function ot(t){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(e=>typeof k[e]=="function"&&k[e](t))}function st(t){let e=[],r=0,n=0,s=0,i=0,c=new WeakSet,d=o=>{if(r+=Buffer.byteLength(o,"utf8"),r>N.bytes)throw T("serialized byte limit exceeded");e.push(o)},u=o=>{if(Buffer.byteLength(o,"utf8")>N.bytes)throw T("serialized byte limit exceeded");return JSON.stringify(o)},p=(o,a)=>{if(n+=1,n>N.nodes)throw T("node limit exceeded");if(a>N.depth)throw T("depth limit exceeded");if(o===null){d("null");return}if(typeof o=="string"){d(u(o));return}if(typeof o=="boolean"){d(o?"true":"false");return}if(typeof o=="number"){if(!Number.isFinite(o))throw T("non-finite number");d(Object.is(o,-0)?"0":String(o));return}if(typeof o!="object")throw T("unsupported non-JSON value");if(k.isProxy(o))throw T("proxy value");if(ot(o))throw T("unsupported exotic object");if(c.has(o))throw T("cyclic value");c.add(o);try{if(Object.getOwnPropertySymbols(o).length>0)throw T("symbol-keyed fields are unsupported");if(Array.isArray(o)){let m=Object.getPrototypeOf(o),P=0;for(;m!==null;){if(k.isProxy(m))throw T("proxy array prototype");if(P+=1,P>N.depth)throw T("array prototype depth limit exceeded");m=Object.getPrototypeOf(m)}if(o.length>N.arrayLength)throw T("array length limit exceeded");for(let A=0;A<o.length;A+=1){let $=Object.getOwnPropertyDescriptor(o,String(A));if(!$||!Object.hasOwn($,"value")||$.enumerable!==!0)throw T("array entries must be dense enumerable own data")}let R=0;for(let A in o){if(i+=1,i>N.fields)throw T("enumeration limit exceeded");if(Object.hasOwn(o,A)&&(R+=1,R>o.length))throw T("named array fields are unsupported")}if(R!==o.length)throw T("array entries must be dense enumerable own data");d("[");for(let A=0;A<o.length;A+=1)A&&d(","),p(Object.getOwnPropertyDescriptor(o,String(A)).value,a+1);d("]");return}let l=Object.getPrototypeOf(o);if(l!==Object.prototype&&l!==null)throw T("non-plain object");let h=[];for(let m in o){if(i+=1,i>N.fields)throw T("enumeration limit exceeded");if(!Object.hasOwn(o,m))continue;if(s+=1,s>N.fields)throw T("field limit exceeded");let P=Object.getOwnPropertyDescriptor(o,m);if(!P||!Object.hasOwn(P,"value")||P.enumerable!==!0)throw T("object fields must be enumerable own data");h.push([m,P.value])}d("{");for(let m=0;m<h.length;m+=1)m&&d(","),d(u(h[m][0])),d(":"),p(h[m][1],a+1);d("}")}finally{c.delete(o)}};return p(t,0),e.join("")}function at(t){let e=Object.create(null);if(t==null)return e;if(typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP headers must be an object");if(k.isProxy(t))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(t)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let s=n.toLowerCase();if(r.has(s))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(s);let i=Object.getOwnPropertyDescriptor(t,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let c=i.value;if(c==null||["object","function","symbol"].includes(typeof c))throw new TypeError("HTTP header values must be scalar");e[n]=String(c)}return e}function it(){return Object.assign(Object.create(null),{Accept:"application/json"})}function ct(t,e){if(!t)throw new Error(`HTTP redirect from ${e} missing Location`);let r=new URL(String(t),String(e));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${e} used unsupported protocol ${r.protocol}`);return r.toString()}function ut(t,e){return new URL(String(t)).origin===new URL(String(e)).origin}var ae=new Map,Te=new WeakMap,Ee=1;function q(t){if((typeof t!="object"||t===null)&&typeof t!="function")return`${typeof t}:${String(t)}`;let e=Te.get(t);return e||(e=Ee,Ee+=1,Te.set(t,e)),`reference:${e}`}var lt=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),ft=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Oe(t){if(!t||typeof t!="object"||Array.isArray(t)||!Object.hasOwn(t,"jsonrpc")||!Object.hasOwn(t,"method")||t.jsonrpc!=="2.0")return!1;let e=typeof t.method=="string"?t.method:"";return e?lt.has(e)||/^get[A-Z0-9_]/u.test(e)||/^is[A-Z0-9_]/u.test(e)||/^eth_get[A-Z0-9_]/u.test(e):!1}function Se(t,e){if(t==="GET"&&e==null)return!0;if(t!=="POST"||e==null)return!1;let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Oe);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Oe(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&ft.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function dt(t,e,r,n={},s=null){let i=qe("sha256"),c=(u,p)=>{let o=String(p);i.update(String(Buffer.byteLength(u,"utf8"))).update(":").update(u),i.update("=").update(String(Buffer.byteLength(o,"utf8"))).update(":").update(o).update(`
-`)};c("method",t),c("url",e),Object.keys(r||{}).map((u,p)=>({name:u.toLowerCase(),order:p,value:String(r[u])})).sort((u,p)=>u.name.localeCompare(p.name)||u.order-p.order).forEach((u,p)=>{c(`header-name-${p}`,u.name),c(`header-value-${p}`,u.value)}),c("body",s??"-");for(let u of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])c(`context-${u}`,n[u]??"-");return i.digest("hex")}function pt(t,e){let r=Number(e);return Number.isFinite(r)&&r>0?Math.min(r*1e3,be):Math.min(250*2**t,be)+Math.floor(Math.random()*100)}var ht=t=>new Promise(e=>setTimeout(e,t));function j(t,e={}){let r=new Error(t);return r.retryable=!1,Object.assign(r,e),r}function ie(t,e,r){return j(`HTTP response from ${t} exceeded maxResponseBytes ${r} (${e})`,{oversize:!0})}function M(t){try{let e=t?.body?.cancel?.();e&&typeof e.then=="function"&&e.catch(()=>{})}catch{}}function mt(t){return t?t.byteLength??t.length??0:0}async function yt(t,e,{url:r,truncate:n=!1,onOversize:s}={}){if(e==null)return await t.text();let i=Number(t.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>e&&(M(t),!n))throw ie(r,`content-length ${i}`,e);let c=t.body?.getReader?.();if(!c){let a=await t.text(),l=Buffer.byteLength(a,"utf8");if(l>e){if(!n)throw ie(r,`body ${l} bytes`,e);return Buffer.from(a,"utf8").subarray(0,e).toString("utf8")}return a}let d=[],u=0,p=!1;try{for(;;){let{value:a,done:l}=await c.read();if(l)break;if(a&&(d.push(Buffer.from(a)),u+=mt(a),u>e)){p=!0;break}}}finally{if(p)try{await c.cancel()}catch{}try{c.releaseLock?.()}catch{}}if(p&&(typeof s=="function"&&s(),!n))throw ie(r,`streamed ${u} bytes`,e);let o=Buffer.concat(d);return(p?o.subarray(0,e):o).toString("utf8")}function wt(t){if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function bt(t,{fetchImpl:e,method:r,headers:n,body:s,timeoutMs:i,lookupFn:c,realFetch:d,untrustedUrl:u=!1,maxResponseBytes:p=null,sameOriginRedirectsOnly:o=!1,importUndici:a,validateResponse:l,signal:h,redirectPolicy:m="follow",maxRedirects:P=K}){let R=new AbortController,A=setTimeout(()=>R.abort(),i),$=h?ge?ge([h,R.signal]):h:R.signal,g=null,x=e,F=c?{lookupFn:c}:{};if(u&&!d&&!se(x))throw j(`HTTP refused ${t}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let G=async(y,{status:O=null}={})=>{let S=await re(y,F);if(!S.ok)throw j(O==null?`HTTP refused ${y}: ${S.error}`:`HTTP redirect to ${y} ${S.error}`,O==null?{}:{status:O});let C=new URL(y).hostname;if(d){if(g&&(await g.close(),g=null),!g)try{g=await ne({requireUndici:!0,...a?{importUndici:a}:{}})}catch(f){throw j(O==null?`HTTP refused ${y}: ${f?.message||f}`:`HTTP redirect to ${y} refused: ${f?.message||f}`,O==null?{}:{status:O})}g.pin(C,S.addresses),x=g.fetch}else ye(x,C,S.addresses);return S};try{let y=String(t),O=Object.assign(Object.create(null),n||{});u&&await G(y);for(let S=0;S<=P;S+=1){let C=Object.assign(Object.create(null),{method:r,headers:O,body:s,signal:$,redirect:"manual",dispatcher:void 0}),f=await x(y,C);if((m==="error"||P===0)&&f.status>=300&&f.status<400)throw M(f),j(`HTTP ${f.status} ${r} redirect refused`,{status:f.status,redirectRefused:!0});if(nt.has(f.status)){let _=o===!0&&r==="POST"&&[307,308].includes(f.status)&&Se(r,s);if(r!=="GET"&&r!=="HEAD"&&!_){M(f);let E=new Error(`HTTP ${f.status} ${r} ${y} redirected non-idempotent request`);throw E.status=f.status,E}if(S===P)throw M(f),j(`HTTP ${f.status} ${r} redirect budget exhausted`,{status:f.status,redirectRefused:!0});let he=f.headers?.get?.("location"),I;try{I=ct(he,y)}catch(E){throw M(f),E}let H=!ut(I,y);if(M(f),H&&r==="POST"){let E=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw E.status=f.status,E}if(H&&o){let E=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw E.status=f.status,E.retryable=!1,E}if(H&&(O=it(O)),u)await G(I,{status:f.status});else if(H){let E=await re(I,F);if(!E.ok){let b=new Error(`HTTP redirect from ${y} ${E.error}`);throw b.status=f.status,b.retryable=!1,b}d&&E.addresses?.length&&(g||(g=await ne(a?{importUndici:a}:{})),g&&(g.pin(new URL(I).hostname,E.addresses),x=g.fetch))}y=I;continue}if(typeof l=="function")try{await l(f,{url:y})}catch(_){throw M(f),j(_?.message||String(_))}let v=await yt(f,p,{url:y,onOversize:()=>R.abort()}),J=wt(v);if(!f.ok){let _=new Error(`HTTP ${f.status} ${r} ${y}`);throw _.status=f.status,_.retryAfter=f.headers?.get?.("retry-after")??null,_.body=J??v.slice(0,300),_}return J??v}throw new Error(`HTTP redirect loop for ${t}`)}catch(y){if(R.signal.aborted&&!ce(h)){let O=y&&(typeof y=="object"||typeof y=="function")&&!k.isProxy(y)?y:null,S=O?Object.getOwnPropertyDescriptor(O,"oversize"):null;if(!(S&&Object.hasOwn(S,"value")&&S.value===!0))try{if(!O)throw new TypeError("unsafe rejection");Object.defineProperties(O,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let f=new Error("HTTP request timed out");throw Object.defineProperties(f,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),f}}throw y}finally{clearTimeout(A),g&&await g.close()}}async function Pe(t,e={}){if(e!=null&&typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP options must be an object");if(e!=null&&k.isProxy(e))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(e!=null){if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP options contain unknown fields");for(let b of Object.getOwnPropertyNames(e)){let w=Object.getOwnPropertyDescriptor(e,b);if(!(b==="toJSON"&&w&&Object.hasOwn(w,"value")&&w.value===void 0)){if(!r.has(b))throw new TypeError("HTTP options contain unknown fields");if(!w||!w.enumerable||!Object.hasOwn(w,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=b=>{if(e==null||!Object.hasOwn(e,b))return;let w=Object.getOwnPropertyDescriptor(e,b);if(!w||!Object.hasOwn(w,"value"))throw new TypeError("HTTP options must contain own data properties");return w.value};if(typeof t!="string"||t.length===0||t.length>8192)throw new TypeError("HTTP URL must be a bounded string");let s=n("method");if(s!==void 0&&(typeof s!="string"||!/^[A-Za-z]+$/u.test(s)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let c=n("retries");if(c!==void 0&&(!Number.isInteger(c)||c<0||c>10))throw new TypeError("HTTP retries must be a bounded integer");let d=n("redirectPolicy");if(d!==void 0&&d!=="follow"&&d!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let u=n("maxRedirects");if(u!==void 0&&(!Number.isInteger(u)||u<0||u>K))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${K}`);if(d==="error"&&u!==void 0&&u!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let p=d??"follow",o=p==="error"?0:u??K;for(let b of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let w=n(b);if(w!==void 0&&typeof w!="boolean")throw new TypeError(`HTTP ${b} must be boolean`)}let a=n("maxResponseBytes");if(a!==void 0&&(!Number.isInteger(a)||a<1||a>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let l=n("signal");if(l!==void 0){if(k.isProxy(l)||!(l instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{ce(l)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let b of["importUndici","lookupFn","validateResponse"]){let w=n(b);if(w!==void 0&&typeof w!="function")throw new TypeError(`HTTP ${b} must be a function`)}let h=n("fetchImpl"),m=h||globalThis.fetch;if(typeof m!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let P=i??12e3,R=(s||"GET").toUpperCase(),A=n("headers"),$=at(A),g=Object.assign(Object.create(null),$);Object.keys(g).some(b=>b.toLowerCase()==="accept")||(g.Accept="application/json");let x=n("body");x!=null&&typeof x!="string"&&(Object.keys(g).find(w=>w.toLowerCase()==="content-type")||(g["Content-Type"]="application/json"),x=st(x));let F=c??Ze,G=n("lookupFn"),y=!h,O=n("untrustedUrl")===!0,S=n("sameOriginRedirectsOnly")===!0,C=n("importUndici"),f=n("validateResponse"),v=l,J=a??null,_=async()=>{let b;for(let w=0;w<=F;w++){v&&et.call(v);try{return await bt(t,{fetchImpl:m,method:R,headers:g,body:x,timeoutMs:P,lookupFn:G,realFetch:y,untrustedUrl:O,maxResponseBytes:J,sameOriginRedirectsOnly:S,importUndici:C,validateResponse:f,signal:v,redirectPolicy:p,maxRedirects:o})}catch(L){b=L;let z=Q=>{if(!L||typeof L!="object"&&typeof L!="function"||k.isProxy(L))return;let V=Object.getOwnPropertyDescriptor(L,Q);return V&&Object.hasOwn(V,"value")?V.value:void 0},X=z("status"),De=z("oracleTimeout")===!0||z("name")==="AbortError"||z("name")==="TimeoutError"||ce(v),Fe=new Set([408,425,429]),ze=z("retryable")===!1?!1:X!=null?Fe.has(X)||Ke.has(X)&&we.has(R):!De&&we.has(R);if(w===F||!ze)throw L;let me=pt(w,z("retryAfter"));v?await new Promise((Q,V)=>{let Ge=setTimeout(Q,me);tt.call(v,"abort",()=>{clearTimeout(Ge),V(rt(v)||new DOMException("Aborted","AbortError"))},{once:!0})}):await ht(me)}}throw b};if(!(n("dedupe")!==!1&&!v&&Se(R,x)))return _();let I=dt(R,t,g,{untrustedUrl:O,maxResponseBytes:J,sameOriginRedirectsOnly:S,redirectPolicy:p,maxRedirects:o,timeoutMs:P,retries:F,fetchImpl:q(m),realFetch:y,lookupFn:q(G),importUndici:q(C),validateResponse:q(f)},x),H=ae.get(I);if(H)return H;let E=_().finally(()=>ae.delete(I));return ae.set(I,E),E}var Re={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},gt=new Map(Object.values(Re).map(t=>[t.chainId,t]));function Ae(t){return gt.get(Number(t))||null}function xe(t,e=process.env){let r=Ae(t);if(!r)return null;for(let n of r.rpcEnv){let s=(e[n]||"").trim();if(s)return s}return null}import{Interface as Tt,getAddress as Qt}from"ethers";var er=new Tt(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var Et={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Ot(t,{rpcUrl:e,env:r=process.env}={}){if(e)return e;let n=xe(t,r);return n||Et[Number(t)]||null}var St=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Pt(t){let e=String(t||""),r=e.toLowerCase();if(e!==e.trim()||!/^[a-zA-Z0-9_]+$/.test(e)||!St.test(r))throw new Error(`evm-rpc: ${e} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var W=new Map,ve=new Map;function Rt(t){let e=new Error(t?.message||JSON.stringify(t));return e.code=t?.code,e}function At(t){if(t?.error)throw Rt(t.error);return t?.result}function xt(t,e,r){return`${t}
+import{keccak_256 as le}from"@noble/hashes/sha3.js";import{createHash as Ze}from"node:crypto";import{types as k}from"node:util";import B from"node:net";import We from"node:dns";var Ye=new Set(["localhost","metadata.google.internal","metadata.goog"]);function K(t){let e=String(t).toLowerCase().split("%")[0];if((e.match(/::/g)||[]).length>1)return null;let r=o=>{if(!o)return[];let a=o.split(":"),l=a.at(-1);if(l?.includes(".")){let h=l.split(".").map(Number);if(h.length!==4||h.some(m=>!Number.isInteger(m)||m<0||m>255))return null;a.splice(a.length-1,1,(h[0]<<8|h[1]).toString(16),(h[2]<<8|h[3]).toString(16))}return a.some(h=>!/^[0-9a-f]{1,4}$/.test(h))?null:a.map(h=>Number.parseInt(h,16))},[n,s]=e.split("::"),i=r(n),c=r(s);if(!i||!c)return null;let d=e.includes("::"),u=8-i.length-c.length;if(!d&&u!==0||d&&u<1)return null;let p=[...i,...Array(Math.max(0,u)).fill(0),...c];return p.length!==8?null:Uint8Array.from(p.flatMap(o=>[o>>8,o&255]))}function re(t,e,r){let n=Math.floor(r/8),s=r%8;for(let c=0;c<n;c+=1)if(t[c]!==e[c])return!1;if(!s)return!0;let i=255<<8-s;return(t[n]&i)===(e[n]&i)}function ne(t){if(B.isIPv4(t)){let e=t.split(".").map(Number);return!(e[0]===0||e[0]===10||e[0]===127||e[0]>=224||e[0]===100&&e[1]>=64&&e[1]<=127||e[0]===169&&e[1]===254||e[0]===172&&e[1]>=16&&e[1]<=31||e[0]===192&&(e[1]===0||e[1]===2||e[1]===168)||e[0]===192&&e[1]===88&&e[2]===99||e[0]===198&&(e[1]===18||e[1]===19||e[1]===51)||e[0]===203&&e[1]===0&&e[2]===113)}if(B.isIPv6(t)){let e=K(t);if(!e)return!1;let r=K("::ffff:0:0");return re(e,r,96)?ne([...e.slice(12)].join(".")):re(e,K("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([s,i])=>re(e,K(s),i)):!1}return!1}function qe(t){let e;try{e=new URL(String(t))}catch{return{ok:!1,error:`not a valid URL: ${String(t).slice(0,120)}`}}if(e.protocol!=="http:"&&e.protocol!=="https:")return{ok:!1,error:`refused protocol ${e.protocol} (only http/https)`};let r=e.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Ye.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=B.isIP(r);return n!==0&&!ne(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:e,host:r,isLiteralIp:n!==0}}async function oe(t,{lookupFn:e=We.promises.lookup}={}){let r=qe(t);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:B.isIPv6(r.host)?6:4}]};let n;try{n=await e(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(s=>!ne(s.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function se({requireUndici:t=!1,importUndici:e=()=>import("undici")}={}){let r,n;try{let a=await e();r=a.Agent,n=a.fetch}catch(a){if(t)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${a?.message||a}`);return null}if(typeof r!="function"||typeof n!="function"){if(t)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let s=a=>String(a).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,c=a=>(Array.isArray(a)?a:[a]).map(l=>typeof l=="string"?{address:l}:l).filter(l=>l&&l.address).map(l=>({address:l.address,family:l.family||(B.isIPv6(l.address)?6:4)})),d=(a,l,h)=>{i.set(s(a),c(typeof l=="string"?[{address:l,family:h}]:l))},u=a=>{let l=s(a);if(B.isIP(l))return[{address:l,family:B.isIPv6(l)?6:4}];let h=i.get(l);if(!h||!h.length)throw new Error(`refused: unpinned host ${a} during pinned fetch`);return h},p=new r({connect:{lookup(a,l,h){let m;try{m=u(a)}catch(R){return h(R)}return l?.all?h(null,m):h(null,m[0].address,m[0].family)}}}),o=Ke((a,l={})=>n(a,{...l,dispatcher:p}),d);return{dispatcher:p,fetch:o,pin:d,resolve:u,async close(){try{await p.destroy()}catch{}}}}var ae=Symbol.for("oracle.egressGuard.pinCapableFetch");function Ke(t,e){if(typeof t!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof e!="function")throw new Error("markPinCapableFetch: pin must be a function");return t[ae]=Object.freeze({pin:e}),t}function ie(t){return typeof t=="function"&&typeof t[ae]?.pin=="function"}function be(t,e,r){if(!ie(t))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");t[ae].pin(e,r)}var Xe=new Set([408,425,429,500,502,503,504]),ge=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Qe=2,Te=4e3,et=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,tt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,rt=AbortSignal.prototype.throwIfAborted,nt=EventTarget.prototype.addEventListener,Ee=EventTarget.prototype.removeEventListener,Oe=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Y=t=>t?et.call(t):!1,ot=t=>t?tt.call(t):void 0,st=new Set([301,302,303,307,308]),X=3,Yt=64*1024,N=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function T(t){return $(`HTTP JSON body refused: ${t}`)}function at(t){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(e=>typeof k[e]=="function"&&k[e](t))}function it(t){let e=[],r=0,n=0,s=0,i=0,c=new WeakSet,d=o=>{if(r+=Buffer.byteLength(o,"utf8"),r>N.bytes)throw T("serialized byte limit exceeded");e.push(o)},u=o=>{if(Buffer.byteLength(o,"utf8")>N.bytes)throw T("serialized byte limit exceeded");return JSON.stringify(o)},p=(o,a)=>{if(n+=1,n>N.nodes)throw T("node limit exceeded");if(a>N.depth)throw T("depth limit exceeded");if(o===null){d("null");return}if(typeof o=="string"){d(u(o));return}if(typeof o=="boolean"){d(o?"true":"false");return}if(typeof o=="number"){if(!Number.isFinite(o))throw T("non-finite number");d(Object.is(o,-0)?"0":String(o));return}if(typeof o!="object")throw T("unsupported non-JSON value");if(k.isProxy(o))throw T("proxy value");if(at(o))throw T("unsupported exotic object");if(c.has(o))throw T("cyclic value");c.add(o);try{if(Object.getOwnPropertySymbols(o).length>0)throw T("symbol-keyed fields are unsupported");if(Array.isArray(o)){let m=Object.getPrototypeOf(o),R=0;for(;m!==null;){if(k.isProxy(m))throw T("proxy array prototype");if(R+=1,R>N.depth)throw T("array prototype depth limit exceeded");m=Object.getPrototypeOf(m)}if(o.length>N.arrayLength)throw T("array length limit exceeded");for(let O=0;O<o.length;O+=1){let C=Object.getOwnPropertyDescriptor(o,String(O));if(!C||!Object.hasOwn(C,"value")||C.enumerable!==!0)throw T("array entries must be dense enumerable own data")}let w=0;for(let O in o){if(i+=1,i>N.fields)throw T("enumeration limit exceeded");if(Object.hasOwn(o,O)&&(w+=1,w>o.length))throw T("named array fields are unsupported")}if(w!==o.length)throw T("array entries must be dense enumerable own data");d("[");for(let O=0;O<o.length;O+=1)O&&d(","),p(Object.getOwnPropertyDescriptor(o,String(O)).value,a+1);d("]");return}let l=Object.getPrototypeOf(o);if(l!==Object.prototype&&l!==null)throw T("non-plain object");let h=[];for(let m in o){if(i+=1,i>N.fields)throw T("enumeration limit exceeded");if(!Object.hasOwn(o,m))continue;if(s+=1,s>N.fields)throw T("field limit exceeded");let R=Object.getOwnPropertyDescriptor(o,m);if(!R||!Object.hasOwn(R,"value")||R.enumerable!==!0)throw T("object fields must be enumerable own data");h.push([m,R.value])}d("{");for(let m=0;m<h.length;m+=1)m&&d(","),d(u(h[m][0])),d(":"),p(h[m][1],a+1);d("}")}finally{c.delete(o)}};return p(t,0),e.join("")}function ct(t){let e=Object.create(null);if(t==null)return e;if(typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP headers must be an object");if(k.isProxy(t))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(t)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let s=n.toLowerCase();if(r.has(s))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(s);let i=Object.getOwnPropertyDescriptor(t,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let c=i.value;if(c==null||["object","function","symbol"].includes(typeof c))throw new TypeError("HTTP header values must be scalar");e[n]=String(c)}return e}function ut(){return Object.assign(Object.create(null),{Accept:"application/json"})}function lt(t,e){if(!t)throw new Error(`HTTP redirect from ${e} missing Location`);let r=new URL(String(t),String(e));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${e} used unsupported protocol ${r.protocol}`);return r.toString()}function ft(t,e){return new URL(String(t)).origin===new URL(String(e)).origin}var ce=new Map,Se=new WeakMap,Pe=1;function Z(t){if((typeof t!="object"||t===null)&&typeof t!="function")return`${typeof t}:${String(t)}`;let e=Se.get(t);return e||(e=Pe,Pe+=1,Se.set(t,e)),`reference:${e}`}var dt=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),pt=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Re(t){if(!t||typeof t!="object"||Array.isArray(t)||!Object.hasOwn(t,"jsonrpc")||!Object.hasOwn(t,"method")||t.jsonrpc!=="2.0")return!1;let e=typeof t.method=="string"?t.method:"";return e?dt.has(e)||/^get[A-Z0-9_]/u.test(e)||/^is[A-Z0-9_]/u.test(e)||/^eth_get[A-Z0-9_]/u.test(e):!1}function Ae(t,e){if(t==="GET"&&e==null)return!0;if(t!=="POST"||e==null)return!1;let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Re);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Re(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&pt.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function ht(t,e,r,n={},s=null){let i=Ze("sha256"),c=(u,p)=>{let o=String(p);i.update(String(Buffer.byteLength(u,"utf8"))).update(":").update(u),i.update("=").update(String(Buffer.byteLength(o,"utf8"))).update(":").update(o).update(`
+`)};c("method",t),c("url",e),Object.keys(r||{}).map((u,p)=>({name:u.toLowerCase(),order:p,value:String(r[u])})).sort((u,p)=>u.name.localeCompare(p.name)||u.order-p.order).forEach((u,p)=>{c(`header-name-${p}`,u.name),c(`header-value-${p}`,u.value)}),c("body",s??"-");for(let u of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])c(`context-${u}`,n[u]??"-");return i.digest("hex")}function mt(t,e){let r=Number(e);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Te):Math.min(250*2**t,Te)+Math.floor(Math.random()*100)}var yt=t=>new Promise(e=>setTimeout(e,t));function $(t,e={}){let r=new Error(t);return r.retryable=!1,Object.assign(r,e),r}function ue(t,e,r){return $(`HTTP response from ${t} exceeded maxResponseBytes ${r} (${e})`,{oversize:!0})}function M(t){try{let e=t?.body?.cancel?.();e&&typeof e.then=="function"&&e.catch(()=>{})}catch{}}function wt(t){return t?t.byteLength??t.length??0:0}async function bt(t,e,{url:r,truncate:n=!1,onOversize:s}={}){if(e==null)return await t.text();let i=Number(t.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>e&&(M(t),!n))throw ue(r,`content-length ${i}`,e);let c=t.body?.getReader?.();if(!c){let a=await t.text(),l=Buffer.byteLength(a,"utf8");if(l>e){if(!n)throw ue(r,`body ${l} bytes`,e);return Buffer.from(a,"utf8").subarray(0,e).toString("utf8")}return a}let d=[],u=0,p=!1;try{for(;;){let{value:a,done:l}=await c.read();if(l)break;if(a&&(d.push(Buffer.from(a)),u+=wt(a),u>e)){p=!0;break}}}finally{if(p)try{await c.cancel()}catch{}try{c.releaseLock?.()}catch{}}if(p&&(typeof s=="function"&&s(),!n))throw ue(r,`streamed ${u} bytes`,e);let o=Buffer.concat(d);return(p?o.subarray(0,e):o).toString("utf8")}function gt(t){if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Tt(t,{fetchImpl:e,method:r,headers:n,body:s,timeoutMs:i,lookupFn:c,realFetch:d,untrustedUrl:u=!1,maxResponseBytes:p=null,sameOriginRedirectsOnly:o=!1,importUndici:a,validateResponse:l,signal:h,redirectPolicy:m="follow",maxRedirects:R=X}){let w=null,O=e,C=c?{lookupFn:c}:{};if(u&&!d&&!ie(O))throw $(`HTTP refused ${t}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let x=new AbortController,I=setTimeout(()=>x.abort(),i),z=h?Oe?Oe([h,x.signal]):h:x.signal,G=async(y,{status:S=null}={})=>{let P=await oe(y,C);if(!P.ok)throw $(S==null?`HTTP refused ${y}: ${P.error}`:`HTTP redirect to ${y} ${P.error}`,S==null?{}:{status:S});let j=new URL(y).hostname;if(d){if(w&&(await w.close(),w=null),!w)try{w=await se({requireUndici:!0,...a?{importUndici:a}:{}})}catch(f){throw $(S==null?`HTTP refused ${y}: ${f?.message||f}`:`HTTP redirect to ${y} refused: ${f?.message||f}`,S==null?{}:{status:S})}w.pin(j,P.addresses),O=w.fetch}else be(O,j,P.addresses);return P};try{let y=String(t),S=Object.assign(Object.create(null),n||{});u&&await G(y);for(let P=0;P<=R;P+=1){let j=Object.assign(Object.create(null),{method:r,headers:S,body:s,signal:z,redirect:"manual",dispatcher:void 0}),f=await O(y,j);if((m==="error"||R===0)&&f.status>=300&&f.status<400)throw M(f),$(`HTTP ${f.status} ${r} redirect refused`,{status:f.status,redirectRefused:!0});if(st.has(f.status)){let v=o===!0&&r==="POST"&&[307,308].includes(f.status)&&Ae(r,s);if(r!=="GET"&&r!=="HEAD"&&!v){M(f);let E=new Error(`HTTP ${f.status} ${r} ${y} redirected non-idempotent request`);throw E.status=f.status,E}if(P===R)throw M(f),$(`HTTP ${f.status} ${r} redirect budget exhausted`,{status:f.status,redirectRefused:!0});let me=f.headers?.get?.("location"),_;try{_=lt(me,y)}catch(E){throw M(f),E}let H=!ft(_,y);if(M(f),H&&r==="POST"){let E=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw E.status=f.status,E}if(H&&o){let E=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw E.status=f.status,E.retryable=!1,E}if(H&&(S=ut(S)),u)await G(_,{status:f.status});else if(H){let E=await oe(_,C);if(!E.ok){let g=new Error(`HTTP redirect from ${y} ${E.error}`);throw g.status=f.status,g.retryable=!1,g}d&&E.addresses?.length&&(w||(w=await se(a?{importUndici:a}:{})),w&&(w.pin(new URL(_).hostname,E.addresses),O=w.fetch))}y=_;continue}if(typeof l=="function")try{await l(f,{url:y})}catch(v){throw M(f),$(v?.message||String(v))}let A=await bt(f,p,{url:y,onOversize:()=>x.abort()}),J=gt(A);if(!f.ok){let v=new Error(`HTTP ${f.status} ${r} ${y}`);throw v.status=f.status,v.retryAfter=f.headers?.get?.("retry-after")??null,v.body=J??A.slice(0,300),v}return J??A}throw new Error(`HTTP redirect loop for ${t}`)}catch(y){if(x.signal.aborted&&!Y(h)){let S=y&&(typeof y=="object"||typeof y=="function")&&!k.isProxy(y)?y:null,P=S?Object.getOwnPropertyDescriptor(S,"oversize"):null;if(!(P&&Object.hasOwn(P,"value")&&P.value===!0))try{if(!S)throw new TypeError("unsafe rejection");Object.defineProperties(S,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let f=new Error("HTTP request timed out");throw Object.defineProperties(f,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),f}}throw y}finally{clearTimeout(I),w&&await w.close()}}async function xe(t,e={}){if(e!=null&&typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP options must be an object");if(e!=null&&k.isProxy(e))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(e!=null){if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP options contain unknown fields");for(let g of Object.getOwnPropertyNames(e)){let b=Object.getOwnPropertyDescriptor(e,g);if(!(g==="toJSON"&&b&&Object.hasOwn(b,"value")&&b.value===void 0)){if(!r.has(g))throw new TypeError("HTTP options contain unknown fields");if(!b||!b.enumerable||!Object.hasOwn(b,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=g=>{if(e==null||!Object.hasOwn(e,g))return;let b=Object.getOwnPropertyDescriptor(e,g);if(!b||!Object.hasOwn(b,"value"))throw new TypeError("HTTP options must contain own data properties");return b.value};if(typeof t!="string"||t.length===0||t.length>8192)throw new TypeError("HTTP URL must be a bounded string");let s=n("method");if(s!==void 0&&(typeof s!="string"||!/^[A-Za-z]+$/u.test(s)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let c=n("retries");if(c!==void 0&&(!Number.isInteger(c)||c<0||c>10))throw new TypeError("HTTP retries must be a bounded integer");let d=n("redirectPolicy");if(d!==void 0&&d!=="follow"&&d!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let u=n("maxRedirects");if(u!==void 0&&(!Number.isInteger(u)||u<0||u>X))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${X}`);if(d==="error"&&u!==void 0&&u!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let p=d??"follow",o=p==="error"?0:u??X;for(let g of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let b=n(g);if(b!==void 0&&typeof b!="boolean")throw new TypeError(`HTTP ${g} must be boolean`)}let a=n("maxResponseBytes");if(a!==void 0&&(!Number.isInteger(a)||a<1||a>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let l=n("signal");if(l!==void 0){if(k.isProxy(l)||!(l instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Y(l)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let g of["importUndici","lookupFn","validateResponse"]){let b=n(g);if(b!==void 0&&typeof b!="function")throw new TypeError(`HTTP ${g} must be a function`)}let h=n("fetchImpl"),m=h||globalThis.fetch;if(typeof m!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let R=i??12e3,w=(s||"GET").toUpperCase(),O=n("headers"),C=ct(O),x=Object.assign(Object.create(null),C);Object.keys(x).some(g=>g.toLowerCase()==="accept")||(x.Accept="application/json");let I=n("body");I!=null&&typeof I!="string"&&(Object.keys(x).find(b=>b.toLowerCase()==="content-type")||(x["Content-Type"]="application/json"),I=it(I));let z=c??Qe,G=n("lookupFn"),y=!h,S=n("untrustedUrl")===!0,P=n("sameOriginRedirectsOnly")===!0,j=n("importUndici"),f=n("validateResponse"),A=l,J=a??null,v=async()=>{let g;for(let b=0;b<=z;b++){A&&rt.call(A);try{return await Tt(t,{fetchImpl:m,method:w,headers:x,body:I,timeoutMs:R,lookupFn:G,realFetch:y,untrustedUrl:S,maxResponseBytes:J,sameOriginRedirectsOnly:P,importUndici:j,validateResponse:f,signal:A,redirectPolicy:p,maxRedirects:o})}catch(L){g=L;let F=te=>{if(!L||typeof L!="object"&&typeof L!="function"||k.isProxy(L))return;let V=Object.getOwnPropertyDescriptor(L,te);return V&&Object.hasOwn(V,"value")?V.value:void 0},ee=F("status"),Ge=F("oracleTimeout")===!0||F("name")==="AbortError"||F("name")==="TimeoutError"||Y(A),Je=new Set([408,425,429]),Ve=F("retryable")===!1?!1:ee!=null?Je.has(ee)||Xe.has(ee)&&ge.has(w):!Ge&&ge.has(w);if(b===z||!Ve)throw L;let ye=mt(b,F("retryAfter"));A?await new Promise((te,V)=>{let we,W=()=>{clearTimeout(we),Ee.call(A,"abort",W),V(ot(A)||new DOMException("Aborted","AbortError"))};if(Y(A)){W();return}we=setTimeout(()=>{Ee.call(A,"abort",W),te()},ye),nt.call(A,"abort",W,{once:!0}),Y(A)&&W()}):await yt(ye)}}throw g};if(!(n("dedupe")!==!1&&!A&&Ae(w,I)))return v();let _=ht(w,t,x,{untrustedUrl:S,maxResponseBytes:J,sameOriginRedirectsOnly:P,redirectPolicy:p,maxRedirects:o,timeoutMs:R,retries:z,fetchImpl:Z(m),realFetch:y,lookupFn:Z(G),importUndici:Z(j),validateResponse:Z(f)},I),H=ce.get(_);if(H)return H;let E=v().finally(()=>ce.delete(_));return ce.set(_,E),E}var ve={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Et=new Map(Object.values(ve).map(t=>[t.chainId,t]));function _e(t){return Et.get(Number(t))||null}function Ie(t,e=process.env){let r=_e(t);if(!r)return null;for(let n of r.rpcEnv){let s=(e[n]||"").trim();if(s)return s}return null}import{Interface as Ot,getAddress as tr}from"ethers";var rr=new Ot(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var St={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Pt(t,{rpcUrl:e,env:r=process.env}={}){if(e)return e;let n=Ie(t,r);return n||St[Number(t)]||null}var Rt=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function At(t){let e=String(t||""),r=e.toLowerCase();if(e!==e.trim()||!/^[a-zA-Z0-9_]+$/.test(e)||!Rt.test(r))throw new Error(`evm-rpc: ${e} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var q=new Map,Ne=new Map;function xt(t){let e=new Error(t?.message||JSON.stringify(t));return e.code=t?.code,e}function vt(t){if(t?.error)throw xt(t.error);return t?.result}function _t(t,e,r){return`${t}
 ${e}
-${JSON.stringify(r??[])}`}async function vt(t,e,r){return Pe(t,{method:"POST",body:e,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function _e(t,e,r=[],n={}){let s=String(e||""),i=Pt(s),c=Ot(t,n);if(!c)throw new Error(`No RPC URL for chainId ${t} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let o=ve.get(c);if(o!=null)return o}let u=n.dedupe!==!1&&!n.signal?xt(c,s,r):null;if(u&&W.has(u))return W.get(u);let p=(async()=>{let o=await vt(c,{jsonrpc:"2.0",id:1,method:e,params:r},n),a=At(o);return i==="eth_chainid"&&typeof a=="string"&&ve.set(c,a),a})();return u&&(W.set(u,p),p.finally(()=>{W.get(u)===p&&W.delete(u)}).catch(()=>{})),p}var fe=999,le=1,_t=8453,Ie="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",It="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",Ne="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",Nt="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",kt=".80002105.reverse",de=/^0x[a-fA-F0-9]{40}$/,ke=new TextEncoder,Ce=t=>"0x"+Buffer.from(t).toString("hex"),U=t=>Ce(ue(ke.encode(t))).slice(0,10),je=t=>t.toLowerCase().replace(/^0x/,"").padStart(64,"0");function Z(t){let e=new Uint8Array(32);if(t)for(let r of String(t).split(".").reverse()){let n=ue(ke.encode(r)),s=new Uint8Array(64);s.set(e,0),s.set(n,32),e=ue(s)}return Ce(e)}function pe(t){if(!t||t==="0x"||/^0x0*$/.test(t))return"";try{let e=t.slice(2),r=parseInt(e.slice(0,64),16)*2,n=parseInt(e.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let s=e.slice(r+64,r+64+n*2);return Buffer.from(s,"hex").toString("utf8")}catch{return""}}async function D(t,e,r){try{return await _e(t,"eth_call",[{to:e,data:r},"latest"])}catch{return null}}async function Ct(t){let e=await D(fe,Ie,U("primaryName(address)")+je(t)),r=pe(e);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function jt(t){let e=await D(fe,It,U("getName(address)")+je(t)),r=pe(e);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function $e(t,e,r){let n=await D(t,r,U("name(bytes32)")+e.slice(2));return pe(n)||null}async function $t(t){let e=Z(`${t.slice(2).toLowerCase()}.addr.reverse`),r=await D(le,Ne,U("resolver(bytes32)")+e.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:$e(le,e,n)}async function Ht(t){let e=Z(t.slice(2).toLowerCase()+kt);return $e(_t,e,Nt)}var He=[{source:"hl",fn:Ct},{source:"hype",fn:jt},{source:"ens",fn:$t},{source:"basename",fn:Ht}];async function Le(t){if(!de.test(String(t||"").trim()))return null;let e=String(t).trim();return(await Promise.all(He.map(async({source:n,fn:s})=>{try{let i=await s(e);return i?{name:i,source:n,address:e}:null}catch{return null}}))).find(Boolean)||null}async function Lt(t){let e=Z(t),r=await D(fe,Ie,U("ownerOf(uint256)")+e.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function Bt(t,e,r){let n=Z(e),s=await D(t,r,U("resolver(bytes32)")+n.slice(2));if(!s)return null;let i="0x"+s.slice(-40);if(/^0x0+$/.test(i))return null;let c=await D(t,i,U("addr(bytes32)")+n.slice(2));if(!c)return null;let d="0x"+c.slice(-40);return/^0x0+$/.test(d)?null:d}async function Be(t){let e=String(t||"").trim().toLowerCase();if(!e||!e.includes("."))return null;if(e.endsWith(".hl")){let r=await Lt(e);return r?{address:r,source:"hl",name:e}:null}if(e.endsWith(".eth")){let r=await Bt(le,e,Ne);return r?{address:r,source:e.endsWith(".base.eth")?"basename":"ens",name:e}:null}return null}var Me=He.map(t=>t.source);var Ue=`oracle resolve <name-or-address> [--json]
+${JSON.stringify(r??[])}`}async function It(t,e,r){return xe(t,{method:"POST",body:e,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function ke(t,e,r=[],n={}){let s=String(e||""),i=At(s),c=Pt(t,n);if(!c)throw new Error(`No RPC URL for chainId ${t} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let o=Ne.get(c);if(o!=null)return o}let u=n.dedupe!==!1&&!n.signal?_t(c,s,r):null;if(u&&q.has(u))return q.get(u);let p=(async()=>{let o=await It(c,{jsonrpc:"2.0",id:1,method:e,params:r},n),a=vt(o);return i==="eth_chainid"&&typeof a=="string"&&Ne.set(c,a),a})();return u&&(q.set(u,p),p.finally(()=>{q.get(u)===p&&q.delete(u)}).catch(()=>{})),p}var de=999,fe=1,Nt=8453,Ce="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",kt="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",je="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",Ct="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",jt=".80002105.reverse",pe=/^0x[a-fA-F0-9]{40}$/,$e=new TextEncoder,He=t=>"0x"+Buffer.from(t).toString("hex"),U=t=>He(le($e.encode(t))).slice(0,10),Le=t=>t.toLowerCase().replace(/^0x/,"").padStart(64,"0");function Q(t){let e=new Uint8Array(32);if(t)for(let r of String(t).split(".").reverse()){let n=le($e.encode(r)),s=new Uint8Array(64);s.set(e,0),s.set(n,32),e=le(s)}return He(e)}function he(t){if(!t||t==="0x"||/^0x0*$/.test(t))return"";try{let e=t.slice(2),r=parseInt(e.slice(0,64),16)*2,n=parseInt(e.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let s=e.slice(r+64,r+64+n*2);return Buffer.from(s,"hex").toString("utf8")}catch{return""}}async function D(t,e,r){try{return await ke(t,"eth_call",[{to:e,data:r},"latest"])}catch{return null}}async function $t(t){let e=await D(de,Ce,U("primaryName(address)")+Le(t)),r=he(e);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function Ht(t){let e=await D(de,kt,U("getName(address)")+Le(t)),r=he(e);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function Be(t,e,r){let n=await D(t,r,U("name(bytes32)")+e.slice(2));return he(n)||null}async function Lt(t){let e=Q(`${t.slice(2).toLowerCase()}.addr.reverse`),r=await D(fe,je,U("resolver(bytes32)")+e.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:Be(fe,e,n)}async function Bt(t){let e=Q(t.slice(2).toLowerCase()+jt);return Be(Nt,e,Ct)}var Me=[{source:"hl",fn:$t},{source:"hype",fn:Ht},{source:"ens",fn:Lt},{source:"basename",fn:Bt}];async function Ue(t){if(!pe.test(String(t||"").trim()))return null;let e=String(t).trim();return(await Promise.all(Me.map(async({source:n,fn:s})=>{try{let i=await s(e);return i?{name:i,source:n,address:e}:null}catch{return null}}))).find(Boolean)||null}async function Mt(t){let e=Q(t),r=await D(de,Ce,U("ownerOf(uint256)")+e.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function Ut(t,e,r){let n=Q(e),s=await D(t,r,U("resolver(bytes32)")+n.slice(2));if(!s)return null;let i="0x"+s.slice(-40);if(/^0x0+$/.test(i))return null;let c=await D(t,i,U("addr(bytes32)")+n.slice(2));if(!c)return null;let d="0x"+c.slice(-40);return/^0x0+$/.test(d)?null:d}async function De(t){let e=String(t||"").trim().toLowerCase();if(!e||!e.includes("."))return null;if(e.endsWith(".hl")){let r=await Mt(e);return r?{address:r,source:"hl",name:e}:null}if(e.endsWith(".eth")){let r=await Ut(fe,e,je);return r?{address:r,source:e.endsWith(".base.eth")?"basename":"ens",name:e}:null}return null}var Fe=Me.map(t=>t.source);var ze=`oracle resolve <name-or-address> [--json]
 
   oracle resolve demi.hl
   oracle resolve vitalik.eth
@@ -10,16 +10,16 @@ ${JSON.stringify(r??[])}`}async function vt(t,e,r){return Pe(t,{method:"POST",bo
 Reads on-chain name records. No API key: HL Names publishes a paid REST API,
 but the contract answers primaryName(address) for free.
 
-Sources, in priority order: ${Me.join(", ")}.`;async function Mt(t=[]){let e=t.filter(s=>s!=="--json"),r=t.includes("--json"),n=(e[0]||"").trim();if(!n||n==="--help"||n==="-h")return process.stdout.write(Ue+`
-`),n?0:1;try{if(de.test(n)){let i=await Le(n);return r?(process.stdout.write(JSON.stringify({address:n,name:i?.name??null,source:i?.source??null})+`
+Sources, in priority order: ${Fe.join(", ")}.`;async function Dt(t=[]){let e=t.filter(s=>s!=="--json"),r=t.includes("--json"),n=(e[0]||"").trim();if(!n||n==="--help"||n==="-h")return process.stdout.write(ze+`
+`),n?0:1;try{if(pe.test(n)){let i=await Ue(n);return r?(process.stdout.write(JSON.stringify({address:n,name:i?.name??null,source:i?.source??null})+`
 `),0):i?(process.stdout.write(`${n}
   ${i.name}  [${i.source}]
 `),0):(process.stdout.write(`${n}
   no name record found
-`),0)}let s=await Be(n);return r?(process.stdout.write(JSON.stringify({name:n,address:s?.address??null,source:s?.source??null})+`
+`),0)}let s=await De(n);return r?(process.stdout.write(JSON.stringify({name:n,address:s?.address??null,source:s?.source??null})+`
 `),0):s?(process.stdout.write(`${n}
   ${s.address}  [${s.source}]
 `),0):(process.stdout.write(`${n}
   unresolved (no owner record)
 `),0)}catch(s){return process.stderr.write(`resolve failed: ${s?.message||s}
-`),1}}var ar={name:"resolve",summary:"resolve .hl/.hype/.eth names to addresses and back",usage:Ue,async run(t){return Mt(t.argv||[])}};export{ar as default};
+`),1}}var cr={name:"resolve",summary:"resolve .hl/.hype/.eth names to addresses and back",usage:ze,async run(t){return Dt(t.argv||[])}};export{cr as default};