@oracle-agent/oracle 0.35.4 → 0.35.6

package/dist/local-signer/index.mjs

@@ -1,3 +1,3 @@
-import{createHash as lo,randomBytes as fo,timingSafeEqual as po}from"node:crypto";import{base58 as Vt}from"@scure/base";import{Interface as $t}from"ethers";import{Interface as gr,MaxUint256 as xr,isAddress as yr,keccak256 as Ni,toUtf8Bytes as Oi}from"ethers";import{Interface as wr,isAddress as ui}from"ethers";import{isAddress as ni}from"ethers";import{createHash as ar,createHmac as sr,timingSafeEqual as cr}from"node:crypto";import{readFileSync as rr}from"node:fs";import{homedir as nr}from"node:os";import{join as he}from"node:path";function or(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=nr();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||he(r,".config","oracle")).trim();return[e,he(t,"exec.env")].filter(Boolean)}return[e,he(r,".config","oracle","exec.env"),he(r,".config","mad-desk","exec.env")].filter(Boolean)}function ie(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let o of or())try{let i=rr(o,"utf8"),s=i.match(new RegExp(`^${r}=(.*)$`,"m"))||i.match(new RegExp(`^${t}=(.*)$`,"m"));if(s&&(n=s[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function Z(e,r,t="guard"){if(typeof r!="number"||!Number.isFinite(r))throw new Error(`${t}: current time must be a finite number (got ${ir(r)})`);let n=r,o=Number(e?.issuedAtMs),i=Number(e?.expiresAtMs);if(!Number.isFinite(i))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>i)throw new Error(`${t} expired at ${i}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(o))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(i<=o)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:o,expiresAtMs:i}}function ir(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var He=100;function ve(e){return Array.isArray(e)?`[${e.map(ve).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${ve(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function ur(e,{required:r=!1}={}){try{return ie(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function dr(e){let{signature:r,...t}=e;return t}function lr(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return ar("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function fr(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:cr(t,n)}function pr(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let i=10;i+64<=r.length;i+=64)n.push(r.slice(i,i+64));let o=i=>n[i]==null?null:BigInt("0x"+n[i]);switch(t){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let i=o(0);if(i==null)return null;let s=Number(i)/32;return!Number.isInteger(s)||s<0?null:o(s+4)}case"0xb858183f":{let i=o(0);if(i==null)return null;let s=Number(i)/32;return!Number.isInteger(s)||s<0?null:o(s+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}function Te(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:o,tx:i,requireSigned:s=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let u=ur(o,{required:s});if(s&&!u)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(u){let m=sr("sha256",u).update(ve(dr(e))).digest("hex");if(!fr(e.signature,m))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let a=Number(e.selectedBps),c=Number(e.capBps);if(!Number.isInteger(a)||a<0||a>He)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(c)||c<0||c>He||a>c)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{Z({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(m){throw new Error(`${m.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let d=BigInt(e.quoteAmountOut??0),l=BigInt(e.minAmountOut??0);if(d<=0n||l<=0n)throw new Error("auto-slippage guard amounts must be positive");let p=d*BigInt(1e4-a),f=p/10000n;if(p%10000n!==0n&&(f+=1n),l<f)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(i?.data&&e.minAmountOut!=null){let m=pr(i.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==lr(i.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(m!=null&&m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${m}, not the guard floor ${e.minAmountOut}`)}else{if(m==null){let w=String(i.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${w}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${m}`)}}return!0}var pi=new wr(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as hr,isAddress as hi}from"ethers";var bi=new hr(["function approve(address spender,uint256 amount) returns (bool)"]),Ei=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function v(e,r="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${r} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${r} must be a number or decimal string`);return e}throw new Error(`${r} must be a number or decimal string`)}function P(e,r="value"){if(typeof e!="string"||e==="")throw new Error(`${r} must be a string`);return e}function H(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=v(e,r);if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}function B(e,r="amount"){let t=H(e,r);if(t<=0n)throw new Error(`${r} must be positive`);return t}function I(e,r,t="amount"){let n=v(e,t);if(!/^-?\d*(\.\d+)?$/.test(n)||n===""||n==="."||n==="-")throw new Error(`${t} must be a decimal number, got ${JSON.stringify(n)}`);let o=n.startsWith("-"),i=o?n.slice(1):n,[s="0",u=""]=i.split(".");if(u.length>r)throw new Error(`${t} has more than ${r} decimal places, which would lose precision`);let a=BigInt((s||"0")+u.padEnd(r,"0"));return o?-a:a}var Fi=new gr(["function approve(address spender,uint256 amount) returns (bool)"]);function je(e,r){let t=String(e||"").trim();if(!yr(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function br(e,r="approval amount",{allowZero:t=!1}={}){let n=H(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=xr)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var ze=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),Er=new Set(["0x39509351","0xf9255c1f"]);function Y(e){let r=String(e||"").toLowerCase();return r.length<10?!1:ze.has(r.slice(0,10))}function Ge(e){if(!Y(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],o=c=>n[c]?"0x"+n[c].slice(24):null,i=c=>n[c]?BigInt("0x"+n[c]):null,s=null,u=null,a=null;switch(t){case"0x095ea7b3":case"0x39509351":s=o(0),u=i(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":a=o(0),s=o(1),u=i(2);break;case"0xd505accf":s=o(1),u=i(2);break;case"0x8fcbaf0c":{s=o(1),u=i(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":a=o(0),s=o(1),u=i(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(s==null||u==null)throw new Error("invalid approve calldata");return{spender:je(s,"approval spender"),token:a==null?null:je(a,"approval token"),amount:br(u,"approval amount",{allowZero:!0}),selector:t,additive:Er.has(t)}}import{createHash as Ar,createHmac as Ri,timingSafeEqual as Di}from"node:crypto";var Sr=2,Ie=300*1e3,Je=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function vr(e){let r=e==null||e===""?Ie:Number(e);return!Number.isFinite(r)||r<0?Ie:Math.min(r,Je)}function ke(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(ke).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${ke(e[t])}`).join(",")}}`}function Tr(e){let{prepareHash:r,prepareMac:t,note:n,...o}=e||{};return o}function Ir(e){let r=Tr(e);return Ar("sha256").update(ke(r)).digest("hex")}function Ve(e,{maxAgeMs:r=Ie,nowMs:t=Date.now(),providers:n=null,kinds:o=null,label:i="operator"}={}){if(!e||typeof e!="object")throw new Error(`${i}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${i}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==Sr)throw new Error(`${i}: unsupported prepareVersion ${e.prepareVersion}`);let s=Ir(e);if(String(e.prepareHash||"")!==s)throw new Error(`${i}: prepareHash mismatch \u2014 payload was altered after prepare`);let u=Number(e.preparedAt),a=Number(e.expiresAt),c=vr(r),d=t-u,l=a-u;if(!Number.isFinite(d)||!Number.isFinite(a)||!Number.isFinite(l)||d<0||l<=0||l>Je||d>c||t>=a)throw new Error(`${i}: prepare envelope expired or clock-skewed (ageMs=${d}, max=${c})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${i}: provider ${e.provider} not allowed here`);if(o&&!new Set(o).has(e.kind))throw new Error(`${i}: kind ${e.kind} not allowed here`);return!0}var ae=e=>String(e||"").toLowerCase(),kr=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","authorizationList","slippageBps","expiresAtMs"]),Nr=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function G(e){try{return Nr.has(BigInt(e))}catch{return!1}}var _=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Ye=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},ee=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function ge(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:o=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(f=>!kr.has(f)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2,4].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");if(Number(e.type)===4){if(!Array.isArray(e.authorizationList)||e.authorizationList.length===0||e.authorizationList.length>8)throw new Error("policy: type-4 requires 1-8 authorizationList entries");for(let[f,m]of e.authorizationList.entries()){if(!m||typeof m!="object")throw new Error(`policy: authorizationList[${f}] required`);ee(m.address,r.destinations,"destination",ae);try{if(BigInt(m.chainId)!==BigInt(e.chainId))throw new Error("policy: type-4 authorization chainId must match transaction")}catch(w){throw String(w?.message||"").includes("authorization chainId")?w:new Error("policy: type-4 authorization chainId must match transaction")}}if(String(e.data||"0x").toLowerCase()!=="0x")throw new Error("policy: type-4 calldata must be empty");if(_(e.value,"value")!==0n)throw new Error("policy: type-4 cannot transfer native value")}else if(e.authorizationList!=null)throw new Error("policy: authorizationList is only valid on type-4");let i=(f,m)=>{try{return BigInt(f)===BigInt(m)}catch{return String(f)===String(m)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(f=>i(f,e.chainId)))throw new Error("policy: chain not allowed");if(ee(e.to,r.destinations,"destination",ae),ee(String(e.data||"0x").slice(0,10),r.selectors,"selector",f=>String(f).toLowerCase()),ee(e.from,r.owners,"owner",ae),Y(e.data)){let f;try{f=Ge(e.data)}catch(w){throw new Error(`policy: malformed approval calldata: ${w?.message||w}`)}ee(f.spender,r.spenders,"spender",ae),ee(f.token||e.to,r.erc20Tokens,"ERC-20 token",ae);let m=_(r.maxApproval,"maxApproval");if(BigInt(f.amount)>m)throw new Error("policy: approval exceeds cap");if(f.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if(_(e.value,"value")>_(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let s=_(e.gasLimit,"gasLimit");if(s>_(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let u=e.maxFeePerGas??e.gasPrice,a=_(u,"feePerGas")*s,c=0n;try{if(G(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(c+=_(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(c+=_(e.operatorFeeWei,"operatorFeeWei")),G(e.chainId)&&(o||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let f=_(n.l1FeeWei,"estimated l1FeeWei")+_(n.operatorFeeWei,"estimated operatorFeeWei");if(c<f)throw new Error("policy: rollup fee attestation understates estimate")}if(a+c>_(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let l=Ye(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>l)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let p=Ye(r.maxTtlMs??12e4,"maxTtlMs");if(p<=0||e.expiresAtMs-t>p)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as Ke}from"node:crypto";import{Address as Or,NETWORK as Cr,OutScript as Xe,RawTx as Lr,SigHash as Qe,TEST_NETWORK as Pr,Transaction as Br}from"@scure/btc-signer";var Ze=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},_r=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},Fr=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,Mr=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),K=e=>Mr(e)?String(e).toLowerCase():String(e),Ne=(e,r)=>Array.isArray(r)&&r.some(t=>K(t)===K(e)),$r=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function Rr(e){let r=Buffer.from(Lr.encode(e)),t=Ke("sha256").update(r).digest();return Buffer.from(Ke("sha256").update(t).digest()).reverse().toString("hex")}function Dr(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(Rr(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!$r(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function qr(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(l=>!["network","psbt"].includes(l)))throw new Error("envelope: unexpected BTC artifact field");if(!Ne(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?Cr:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?Pr:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let o;try{o=Br.fromPSBT(_r(t.psbt,"PSBT"))}catch(l){throw new Error(`envelope: invalid PSBT: ${l?.message||l}`)}if(o.inputsLength===0||o.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let i=Or(n);for(let l=0;l<o.inputsLength;l++){let p=o.getInput(l);for(let w of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(Fr(p[w]))throw new Error("envelope: signed or finalized PSBT refused");if(p.sighashType!==void 0&&p.sighashType!==Qe.DEFAULT&&p.sighashType!==Qe.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let f=Dr(p),m;try{let w=Xe.decode(f.script);if(!["wpkh"].includes(w.type))throw new Error("unsupported input");m=i.encode(w)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!Ne(m,r.owners)||K(m)!==K(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let s=new Set([e.owner,...r.changeAddresses||[]].map(l=>K(l))),u=0n,a=!1,c=[];for(let l=0;l<o.outputsLength;l++){let p=o.getOutput(l),f;try{f=i.encode(Xe.decode(p.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let m=K(f);if(c.push(`${f}:${p.amount}`),m===K(e.destination)){a=!0,u+=p.amount;continue}if(Ne(f,r.destinations)){u+=p.amount;continue}if(!s.has(m))throw new Error("policy: Bitcoin output destination not allowed")}if(!a)throw new Error("envelope: Bitcoin destination mismatch");let d;try{d=o.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(d<0n||d>Ze(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(u>Ze(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:u.toString(),notional:(u+d).toString(),fee:d.toString(),outputs:Object.freeze(c)})}function et(e,r){let{unit:t,value:n,notional:o,fee:i}=qr(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}import{createHash as Ce}from"node:crypto";import{base58 as at}from"@scure/base";import{getCompiledTransactionMessageDecoder as Ur}from"@solana/transaction-messages";var Le="11111111111111111111111111111111",Wr="ComputeBudget111111111111111111111111111111",Hr="So11111111111111111111111111111111111111112",st="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";var ct="ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",jr=5000n,zr=2039280n,Gr=37095705934669439343138083508754565189542113879843219016388785533085940283555n,C=57896044618658097711785492504343953926634992332820282019728792003956564819949n,tt=19681161376707505956807079304988542015446066515923890162744021073123829784752n,rt=e=>Ce("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Jr=new Map([[rt("route"),{name:"route",prefixBytes:0}],[rt("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]),M=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Vr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},j=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e)),R=e=>String(e||""),Yr=e=>Array.isArray(e.solMints)&&e.solMints.length?e.solMints:e.tokens,ye=e=>Ce("sha256").update(e).digest("hex");function xe(e,r){try{let t=Buffer.from(at.decode(String(e||"")));if(t.length!==32)throw new Error("wrong length");return t}catch{throw new Error(`envelope: invalid Solana ${r}`)}}function F(e){let r=e%C;return r>=0n?r:C+r}function U(e,r){let t=e;for(;r-- >0n;)t=t*t%C;return t}function Kr(e){let t=e*e%C*e%C,n=U(t,2n)*t%C,o=U(n,1n)*e%C,i=U(o,5n)*o%C,s=U(i,10n)*i%C,u=U(s,20n)*s%C,a=U(u,40n)*u%C,c=U(a,80n)*a%C,d=U(c,80n)*a%C,l=U(d,10n)*i%C;return U(l,2n)*e%C}function Xr(e,r){let t=F(r*r*r),n=F(t*t*r),o=Kr(e*n),i=F(e*t*o),s=F(r*i*i),u=i,a=F(i*tt),c=s===e,d=s===F(-e),l=s===F(-e*tt);return c&&(i=u),(d||l)&&(i=a),(F(i)&1n)===1n&&(i=F(-i)),!c&&!d?null:i}function Qr(e){if(!e||e.length!==32)return!1;let r=0n;for(let o=31;o>=0;o--)r=(r<<8n)+BigInt(o===31?e[o]&127:e[o]);let t=F(r*r),n=Xr(F(t-1n),F(Gr*t+1n));return n===null?!1:!(n===0n&&(e[31]&128)!==0)}function Zr(e,r){let t=Buffer.concat([...e,xe(r,"program id"),Buffer.from("ProgramDerivedAddress")]),n=Ce("sha256").update(t).digest();if(Qr(n))throw new Error("envelope: derived Solana program address is on curve");return at.encode(n)}function Pe(e,r,t=st){let n=[xe(e,"owner"),xe(t,"token program"),xe(r,"mint")];for(let o=255;o>=0;o--)try{return Zr([...n,Buffer.from([o])],ct)}catch(i){if(!/on curve/.test(String(i?.message||i)))throw i}throw new Error("envelope: unable to derive associated token account")}function en(e,r){return(r.accountIndices||[]).map(t=>R(e.staticAccounts[t]))}function se(e){return Buffer.from(e.data||[])}function tn(e,r){return R(e.staticAccounts[r.programAddressIndex])}function ut(e,r){return Number(r)<e.header.numSignerAccounts}function rn(e,r){let t=e.header.numSignerAccounts,n=e.header.numReadonlySignerAccounts,o=e.header.numReadonlyNonSignerAccounts,i=e.staticAccounts.length;return Number(r)<t?Number(r)<t-n:Number(r)<i-o}function ce(e){return e.accountIndices||[]}function Oe(e,r){if(!Array.isArray(e)||!e.length)throw new Error(`policy: ${r} allowlist required`);return e.map(String)}function nt(e,r){let t=ce(r).map(n=>{let o=ut(e,n)?"s":"n",i=rn(e,n)?"w":"r";return`${n}:${R(e.staticAccounts[n])}:${o}:${i}`});return ye(Buffer.from(t.join(`
-`)))}function ot(e,r,t){if(r+8>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readBigUInt64LE(r)}function nn(e,r,t){if(r+2>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt16LE(r)}function on(e,r,t){if(r+4>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt32LE(r)}function an(e,r,t){let n=t.maxJupiterRoutePlanSteps===void 0?1:Number(t.maxJupiterRoutePlanSteps);if(!Number.isSafeInteger(n)||n<1)throw new Error("policy: maxJupiterRoutePlanSteps must be a positive integer");if(r<1||r>n)throw new Error("policy: Jupiter route-plan step count exceeds reviewed cap");let o=Array.isArray(t.jupiterRouteVariants)?t.jupiterRouteVariants.map(Number):[];if(!o.length)throw new Error("policy: Jupiter route variant allowlist required");let i=t.jupiterRouteVariantPayloadBytes||{},s=0,u=0,a=[];for(let c=0;c<r;c++){if(s>=e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let d=e[s++];if(!o.includes(d))throw new Error("policy: Jupiter route variant not allowed");if(!Object.hasOwn(i,String(d)))throw new Error("policy: Jupiter route variant payload size required");let l=Number(i[String(d)]);if(!Number.isSafeInteger(l)||l<0||l>16)throw new Error("policy: Jupiter route variant payload size invalid");if(s+l+3>e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let p=e.subarray(s,s+l);s+=l;let f=p.toString("hex"),m=t.jupiterRouteVariantPayloads?.[String(d)];if(!Array.isArray(m)||!m.map(String).includes(f))throw new Error("policy: Jupiter route variant payload not allowed");let w=e[s++],h=e[s++],g=e[s++];if(w<1||w>100)throw new Error("envelope: Jupiter route-plan percent invalid");if(h!==c||g!==c+1)throw new Error("envelope: unsupported Jupiter route-plan token index");u+=w,a.push(Object.freeze({swapVariant:d,variantPayloadHex:f,percent:w,inputIndex:h,outputIndex:g}))}if(s!==e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");if(u!==100*r)throw new Error("envelope: Jupiter route-plan percent total mismatch");return Object.freeze(a)}function sn(e,r){let t=se({data:e}),n=t.subarray(0,8).toString("hex"),o=Jr.get(n);if(!o)throw new Error("envelope: unsupported Jupiter instruction discriminator");let i=19,s=o.prefixBytes===1?t[8]:null;if(o.prefixBytes===1&&t.length<9)throw new Error("envelope: malformed Jupiter shared route payload");let u=8+o.prefixBytes,a=u+4,c=t.length-i;if(c<=a)throw new Error("envelope: malformed Jupiter route payload");let d=on(t,u,"route plan length"),l=t.subarray(a,c),p=an(l,d,r);return Object.freeze({instruction:o.name,routeId:s,routePlanSteps:d,routePlan:p,routePlanHash:ye(l),inAmount:ot(t,c,"in_amount"),quotedOutAmount:ot(t,c+8,"quoted_out_amount"),slippageBps:nn(t,c+16,"slippage_bps"),platformFeeBps:t[c+18],instructionHash:ye(t)})}function cn(e,r,t){let n=en(e,r),o=(i,s)=>{let u=n[i];if(!u)throw new Error(`envelope: Jupiter ${s} account missing`);return u};if(t.instruction==="route"){if(n.length<9)throw new Error("envelope: Jupiter route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),userTransferAuthority:o(1,"userTransferAuthority"),userSourceTokenAccount:o(2,"userSourceTokenAccount"),userDestinationTokenAccount:o(3,"userDestinationTokenAccount"),destinationTokenAccount:o(4,"destinationTokenAccount"),destinationMint:o(5,"destinationMint"),platformFeeAccount:o(6,"platformFeeAccount"),eventAuthority:o(7,"eventAuthority"),program:o(8,"program")}}if(t.instruction==="shared_accounts_route"){if(n.length<13)throw new Error("envelope: Jupiter shared route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),programAuthority:o(1,"programAuthority"),userTransferAuthority:o(2,"userTransferAuthority"),userSourceTokenAccount:o(3,"sourceTokenAccount"),programSourceTokenAccount:o(4,"programSourceTokenAccount"),programDestinationTokenAccount:o(5,"programDestinationTokenAccount"),userDestinationTokenAccount:o(6,"destinationTokenAccount"),sourceMint:o(7,"sourceMint"),destinationMint:o(8,"destinationMint"),platformFeeAccount:o(9,"platformFeeAccount"),token2022Program:o(10,"token2022Program"),eventAuthority:o(11,"eventAuthority"),program:o(12,"program")}}throw new Error("envelope: unsupported Jupiter account layout")}function it(e,r){return e&&e!==r?e:null}function $(e,r,t){let n=R(e.staticAccounts[r]);if(!n)throw new Error(`envelope: Jupiter ${t} missing`);return n}function un(e,r){let t=se(e);if(t.length===5&&t[0]===2){let n=t.readUInt32LE(1),o=r.maxComputeUnits===void 0?14e5:Number(r.maxComputeUnits);if(!Number.isSafeInteger(o)||o<=0)throw new Error("policy: maxComputeUnits must be positive");if(n>o)throw new Error("policy: Jupiter compute unit limit exceeds cap");return 0n}throw t.length===9&&t[0]===3?new Error("policy: Jupiter priority fee not allowed"):new Error("envelope: unsupported Jupiter compute-budget helper")}function dn(e,r,t,n,o,i){let s=se(r);if(s.length!==1||s[0]!==1)throw new Error("envelope: unsupported Jupiter ATA helper");let u=ce(r);if(u.length!==6)throw new Error("envelope: malformed Jupiter ATA helper");let a=$(e,u[0],"ATA payer"),c=$(e,u[1],"ATA account"),d=$(e,u[2],"ATA owner"),l=$(e,u[3],"ATA mint"),p=$(e,u[4],"ATA system program"),f=$(e,u[5],"ATA token program");if(a!==t.owner)throw new Error("envelope: Jupiter ATA payer must equal owner");if(d!==t.owner)throw new Error("envelope: Jupiter ATA owner must equal owner");if(p!==Le)throw new Error("envelope: Jupiter ATA system program mismatch");if(f!==o)throw new Error("envelope: Jupiter ATA token program mismatch");if(l!==n.inputMint&&l!==n.outputMint)throw new Error("envelope: Jupiter ATA mint mismatch");if(c!==Pe(t.owner,l,o))throw new Error("envelope: Jupiter ATA account mismatch");return{ata:c,debit:i}}function ln(e,r,t,n,o){let i=ce(r),s=se(r);if(i.length!==2||s.length!==12||s.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Jupiter system helper");let u=$(e,i[0],"wrap payer"),a=$(e,i[1],"wrap target"),c=s.readBigUInt64LE(4);if(u!==t.owner||a!==n)throw new Error("envelope: unsupported Jupiter wrap transfer");if(c!==o)throw new Error("envelope: Jupiter wrap transfer amount mismatch");return c}function fn(e,r,t,n){let o=ce(r),i=se(r);if(i.length!==1)throw new Error("envelope: unsupported Jupiter token helper");if(i[0]===17){if(o.length!==1||$(e,o[0],"syncNative account")!==n)throw new Error("envelope: Jupiter syncNative account mismatch");return{kind:"syncNative"}}if(i[0]===9){if(o.length!==3)throw new Error("envelope: malformed Jupiter closeAccount helper");let s=$(e,o[0],"closeAccount source"),u=$(e,o[1],"closeAccount destination"),a=$(e,o[2],"closeAccount authority");if(s!==n||u!==t.owner||a!==t.owner)throw new Error("envelope: Jupiter closeAccount must return to owner");return{kind:"closeAccount"}}throw new Error("envelope: unsupported Jupiter token helper")}function pn(e,r,t,n,o,i,s){let u=Pe(r.owner,r.artifact.inputMint,s);if(o.userSourceTokenAccount!==u)throw new Error("envelope: Jupiter source token account is not owner ATA");let a=M(t.jupiterAtaRentLamports,"jupiterAtaRentLamports");if(a<zr)throw new Error("policy: Jupiter ATA rent below the token-account rent-exempt minimum");let c=new Map,d=0n,l=!1,p=!1;for(let f of e.instructions){if(f===n)continue;let m=tn(e,f);if(m===Wr)un(f,t);else if(m===ct){let{ata:w,debit:h}=dn(e,f,r,r.artifact,s,a);c.set(w,h)}else if(m===Le)d+=ln(e,f,r,u,i);else if(m===s){let w=fn(e,f,r,u);w.kind==="syncNative"&&(l=!0),w.kind==="closeAccount"&&(p=!0)}else throw new Error("envelope: unsupported Jupiter helper instruction")}if(d>0n&&(!l||!p))throw new Error("envelope: Jupiter native wrap helpers incomplete");if(d!==0n&&d!==i)throw new Error("envelope: Jupiter native wrap amount mismatch");return[...c.values()].reduce((f,m)=>f+m,0n)}function mn(e){let r;try{r=Ur().decode(Vr(e.messageBase64,"Solana message"))}catch(t){throw new Error(`envelope: invalid Solana message: ${t?.message||t}`)}if(r.version!=="legacy"&&Array.isArray(r.addressTableLookups)&&r.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");return r}function wn(e,r,t){if(e.header.numSignerAccounts!==1||R(e.staticAccounts[0])!==r.owner||!j(r.owner,t.owners))throw new Error("envelope: Solana owner mismatch");if(!Array.isArray(e.instructions)||e.instructions.length===0)throw new Error("envelope: Solana instructions required");let n=[];for(let o of e.instructions){let i=R(e.staticAccounts[o.programAddressIndex]);if(!i||!j(i,t.programs))throw new Error("policy: Solana program not allowed");n.push(i)}return n}function hn(e,r,t){let n=M(t.lamportsPerSignature,"lamportsPerSignature");if(n<jr)throw new Error("policy: Solana per-signature fee is below the network minimum");let o=t.maxLamportsPerSignature===void 0?n:M(t.maxLamportsPerSignature,"maxLamportsPerSignature");if(n>o)throw new Error("policy: Solana per-signature fee exceeds cap");let i=BigInt(e.header.numSignerAccounts),s=i*n,u=i*o;if(r.exactFeeLamports!==void 0){let c=M(r.exactFeeLamports,"exactFeeLamports");if(c<s)throw new Error("policy: Solana exact fee below the base signature fee");if(c>u)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let a=u;if(a>M(t.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return a}function gn(e,r,t,n){let o=0n,i=!1;for(let s of e.instructions){if(R(e.staticAccounts[s.programAddressIndex])!==Le)throw new Error("envelope: unsupported Solana program decoder");let a=s.accountIndices||[];if(a.length!==2||R(e.staticAccounts[a[0]])!==r.owner)throw new Error("envelope: Solana transfer owner mismatch");let c=R(e.staticAccounts[a[1]]);if(c!==r.destination||!j(c,t.destinations))throw new Error("envelope: Solana destination mismatch");let d=Buffer.from(s.data||[]);if(d.length!==12||d.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");o+=d.readBigUInt64LE(4),i=!0}if(!i)throw new Error("envelope: Solana destination mismatch");if(o>M(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:o,programs:n}}function xn(e,r,t,n){let o=r.artifact;if(o.provider!=="jupiter")throw new Error("envelope: Solana swap provider must be jupiter");if(o.inputMint!==Hr)throw new Error("envelope: Jupiter local signer requires native SOL input");if(o.outputMint!==r.destination||!j(o.outputMint,t.destinations))throw new Error("envelope: Jupiter output mint destination mismatch");let i=Yr(t);if(!j(o.inputMint,i)||!j(o.outputMint,i))throw new Error("policy: Solana token not allowed");let s=M(o.inAmount,"inAmount"),u=M(o.outAmount,"outAmount"),a=M(o.otherAmountThreshold,"otherAmountThreshold");if(s<=0n||s>M(t.maxPerTradeLamports,"maxPerTradeLamports"))throw new Error("policy: Solana swap amount exceeds per-trade cap");if(s>M(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");if(u<=0n||a<=0n||a>u)throw new Error("envelope: Jupiter quote floor invalid");if(Number(o.slippageBps)!==Number(r.slippageBps))throw new Error("policy: Solana slippage mismatch");let c=R(o.jupiterProgram);if(!c||!j(c,t.programs)||!n.includes(c))throw new Error("policy: Jupiter program not allowed or absent");let d=e.instructions.filter(E=>R(e.staticAccounts[E.programAddressIndex])===c);if(d.length!==1)throw new Error("envelope: exactly one Jupiter swap instruction required");let l=d[0],p=sn(l.data,t);if(p.instruction==="shared_accounts_route"){let E=Array.isArray(t.jupiterSharedRouteIds)?t.jupiterSharedRouteIds.map(Number):[];if(!E.length)throw new Error("policy: Jupiter shared route id allowlist required");if(!E.includes(Number(p.routeId)))throw new Error("policy: Jupiter shared route id not allowed")}else if(p.routeId!=null)throw new Error("envelope: unexpected Jupiter shared route id");if(!Oe(t.jupiterRoutePlanHashes,"Jupiter route-plan hash").includes(p.routePlanHash))throw new Error("policy: Jupiter route-plan hash not allowed");if(p.inAmount!==s)throw new Error("envelope: Jupiter route in_amount mismatch");if(p.quotedOutAmount!==u)throw new Error("envelope: Jupiter route quoted_out_amount mismatch");if(p.slippageBps!==Number(o.slippageBps))throw new Error("envelope: Jupiter route slippage mismatch");let f=p.quotedOutAmount-p.quotedOutAmount*BigInt(p.slippageBps)/10000n;if(a!==f)throw new Error("envelope: Jupiter otherAmountThreshold does not match serialized min-out");if(p.platformFeeBps!==0)throw new Error("policy: Jupiter platform fee not allowed");let m=cn(e,l,p),w=ce(l),h=p.instruction==="shared_accounts_route"?2:1;if(!ut(e,w[h]))throw new Error("envelope: Jupiter transfer authority must be signer");if(m.program!==c)throw new Error("envelope: Jupiter program account mismatch");if(m.userTransferAuthority!==r.owner)throw new Error("envelope: Jupiter transfer authority must equal owner");if(m.destinationMint!==o.outputMint)throw new Error("envelope: Jupiter destination mint mismatch");if(m.sourceMint!==void 0&&m.sourceMint!==o.inputMint)throw new Error("envelope: Jupiter source mint mismatch");let g=Array.isArray(t.tokenPrograms)&&t.tokenPrograms.length?t.tokenPrograms:[st];if(!j(m.tokenProgram,g))throw new Error("policy: Solana token program not allowed");let A=Pe(r.owner,o.outputMint,m.tokenProgram);if(m.userDestinationTokenAccount!==A)throw new Error("envelope: Jupiter destination token account is not owner ATA");let b=it(m.destinationTokenAccount,c);if(b&&b!==A)throw new Error("envelope: Jupiter optional destination account redirects proceeds");if(it(m.platformFeeAccount,c))throw new Error("policy: Jupiter platform fee account not allowed");if(!Oe(t.jupiterRouteAccountHashes,"Jupiter route account hash").includes(nt(e,l)))throw new Error("policy: Jupiter route account hash not allowed");let T=ye(Buffer.from([p.instruction,p.routeId??"",p.routePlanHash,nt(e,l)].join(`
-`)));if(!Oe(t.jupiterRouteReviewHashes,"Jupiter route review hash").includes(T))throw new Error("policy: Jupiter route review hash not allowed");let N=pn(e,r,t,l,m,s,m.tokenProgram),O=s+N;if(O>M(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:O,programs:n}}function yn(e,r){if(e.action!=="transfer"&&e.action!=="swap")throw new Error("envelope: Solana decoder requires transfer or swap action");let t=e?.artifact,n=e.action==="transfer"?["cluster","messageBase64","exactFeeLamports"]:["cluster","provider","messageBase64","exactFeeLamports","inputMint","outputMint","inAmount","outAmount","otherAmountThreshold","slippageBps","jupiterProgram"];if(Object.keys(t||{}).some(a=>!n.includes(a)))throw new Error("envelope: unexpected Solana artifact field");if(!j(t.cluster,r.chains))throw new Error("policy: chain not allowed");let o=mn(t),i=wn(o,e,r),s=e.action==="transfer"?gn(o,e,r,i):xn(o,e,r,i),u=hn(o,t,r);return Object.freeze({unit:"lamports",value:s.value.toString(),notional:(s.value+u).toString(),fee:u.toString(),programs:Object.freeze(s.programs)})}function dt(e,r){let{unit:t,value:n,notional:o,fee:i}=yn(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}var ra=64*1024;var En=1e8;function Be(e){if(typeof e!="string"||!/^#(?:0|[1-9]\d*)$/.test(e))return null;let r=Number(e.slice(1));if(!Number.isSafeInteger(r)||r<0)return null;let t=r%10;if(t!==0&&t!==1)return null;let n=Math.floor(r/10),o=En+r;return Number.isSafeInteger(o)?{encoding:r,outcome:n,side:t,coin:`#${r}`,assetId:o}:null}var An=new Set(["https://api.hyperliquid.xyz/exchange","https://api.hyperliquid-testnet.xyz/exchange"]),Sn=new Set(["perp-order","hip3-order","hip4-order","perp-bracket"]),vn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Tn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"}),J=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`hl: bounded ${r} required`);return e};function In(e,r){let t=e.toString().padStart(r+1,"0");if(r===0)return t;let n=t.slice(0,-r),o=t.slice(-r).replace(/0+$/,"");return o?`${n}.${o}`:n}function lt(e,r){let t=v(e,`hl: ${r}`);if(!/^\d+(?:\.\d+)?$/.test(t))throw new Error(`hl: ${r} must be a positive decimal`);let[n,o=""]=t.split("."),i=BigInt(n+o);if(i<=0n)throw new Error(`hl: ${r} must be positive`);return{raw:i,decimals:o.length}}function W(e,r){if(e===null||typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`hl: ${r} must be finite JSON`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map(n=>W(n,r)).join(",")}]`;if(!e||typeof e!="object")throw new Error(`hl: ${r} must be structured JSON`);return`{${Object.keys(e).sort().map(n=>`${JSON.stringify(n)}:${W(e[n],r)}`).join(",")}}`}function kn(e){if(typeof e.orderType!="string"||!e.orderType)throw new Error("hl: order type must be a string");let r=e.orderType,t=e.orderWire;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: declared order wire required");if(r==="limit"){let i=t.limit?.tif;if(!["Gtc","Ioc","Alo"].includes(i)||W(t,"declared order type")!==W({limit:{tif:i}},"expected order type"))throw new Error("hl: limit order type must match its wire shape");return}if(r==="market"){if(W(t,"declared order type")!==W({limit:{tif:"Ioc"}},"expected order type"))throw new Error("hl: market order type must match its IOC wire shape");return}let n={stopMarket:{isMarket:!0,tpsl:"sl"},stopLimit:{isMarket:!1,tpsl:"sl"},takeProfitMarket:{isMarket:!0,tpsl:"tp"},takeProfitLimit:{isMarket:!1,tpsl:"tp"}}[r];if(!n)throw new Error("hl: unsupported declared order type");let o=t.trigger?.triggerPx;if(o==null||W(t,"declared order type")!==W({trigger:{isMarket:n.isMarket,triggerPx:o,tpsl:n.tpsl}},"expected order type"))throw new Error("hl: trigger order type must match its wire shape")}function Nn(e,r,t){let n=lt(e.s,"signed size"),o=lt(e.p,"signed price"),i=n.decimals+o.decimals,s=n.raw*o.raw,u=I(r.notionalUsd,i,"hl: notionalUsd");if(u<=0n||s!==u)throw new Error("hl: signed notional must match");let a=I(t.maxNotionalUsd,i,"hl: maxNotionalUsd");if(s>a)throw new Error("hl: notional exceeds cap")}function On(e,r){let t=e.action.builder;if(t==null){if(e.builder!=null)throw new Error("hl: declared builder requires a signed builder");return}if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: signed order builder must be structured");let n=J(t.b,"order builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(n))throw new Error("hl: order builder address required");if(P(e.builder||"","hl: builder").toLowerCase()!==n)throw new Error("hl: signed order builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(u=>String(u).toLowerCase()):[]).includes(n))throw new Error("hl: order builder not allowed");let i=H(t.f,"hl: signed order builder fee");if(i<0n)throw new Error("hl: signed order builder fee must be non-negative");let s=I(r.maxBuilderFeeBps??0,1,"hl: maxBuilderFeeBps");if(i>s)throw new Error("hl: order builder fee exceeds cap")}function ft(e,r,t){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: signed asset must match assetId");if(typeof e.b!="boolean"||e.b!==(r.side==="buy"))throw new Error("hl: signed side must match exactly");if(v(e.s,"hl: signed size")!==v(r.size,"hl: size"))throw new Error("hl: signed size must match");if(v(e.p,"hl: signed price")!==v(r.price,"hl: price"))throw new Error("hl: signed price must match");if(typeof r.reduceOnly!="boolean"||typeof e.r!="boolean"||e.r!==r.reduceOnly)throw new Error("hl: signed reduceOnly must match exactly");if(W(e.t,"signed order type")!==W(r.orderWire,"declared order type"))throw new Error("hl: signed order type must match declared order type");let n=Object.prototype.hasOwnProperty.call(e,"c");if(r.clientOrderId==null){if(n)throw new Error("hl: undeclared signed client order id")}else if(!n||typeof e.c!="string"||e.c!==r.clientOrderId)throw new Error("hl: signed client order id must match")}function pt(e,r,t,n,o){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: bracket protection asset must match");if(typeof e.b!="boolean"||e.b===(r.side==="buy"))throw new Error("hl: bracket protection side must oppose entry");if(v(e.s,"hl: bracket protection size")!==v(r.size,"hl: size"))throw new Error("hl: bracket protection size must match");if(v(e.p,"hl: bracket protection price")!==v(n,"hl: protection price"))throw new Error("hl: bracket protection price must match");if(e.r!==!0)throw new Error("hl: bracket protection must be reduce-only");let i=e.t?.trigger;if(!i||i.isMarket!==!0||i.tpsl!==o)throw new Error("hl: bracket protection trigger must match");if(v(i.triggerPx,"hl: triggerPx")!==v(n,"hl: protection price"))throw new Error("hl: bracket protection trigger must match")}function Cn(e){let r=String(e||"").replace(/\/$/,"");if(!An.has(r))throw new Error("hl: submitTo must be the official Hyperliquid exchange");return r}function _e(e){return Be(e)!=null}function Ln(e,r){let t=String(e||""),n=Array.isArray(r.coins)?r.coins.map(String):[];if(_e(t)){if(r.hip4!==!0)throw new Error("hl: HIP-4 outcome orders are disabled without explicit policy enablement");if(n.includes(t)||n.includes("#*")||n.includes("*")||n.length===0)return!0;throw new Error("hl: outcome coin not allowed")}if(n.length&&!n.includes(t)&&!n.includes("*"))throw new Error("hl: coin not allowed");return!0}function Pn(e,r,t){let n=Array.isArray(t.hlMarkets)?t.hlMarkets:[];if(n.length){if(!n.some(s=>{if(typeof s=="string"){let[u,a]=String(s).split(":");return u===e&&Number(a)===r}return String(s?.coin)===e&&Number(s?.assetId)===r}))throw new Error("hl: coin/assetId pair not allowed");return!0}if(_e(e)){let i=Array.isArray(t.coins)?t.coins.map(String):[];if(i.includes("#*")||i.includes("*")||i.length===0)return!0;throw new Error("hl: restricted coin policy requires hlMarkets pairs")}let o=Array.isArray(t.coins)?t.coins.map(String):[];if(o.length&&!o.includes("*"))throw new Error("hl: restricted coin policy requires hlMarkets pairs");return!0}function mt(e,r){if(e?.surface!=="hl")throw new Error("hl: surface hl required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: structured artifact required");let n=J(t.kind,"kind",48),o=vn[n];if(!o)throw new Error("hl: unsupported Hyperliquid kind");if(e.action!==o)throw new Error("hl: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="hyperliquid")throw new Error("hl: destination must be hyperliquid");if(!/^0x[0-9a-fA-F]{40}$/.test(String(e.owner||"")))throw new Error("hl: owner required");let i=Cn(t.submitTo);if(Object.prototype.hasOwnProperty.call(t,"vaultAddress"))throw new Error("hl: vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t,"expiresAfter"))throw new Error("hl: expiresAfter is not public");let s=Number(t.nonce);if(!Number.isSafeInteger(s)||s<=0)throw new Error("hl: nonce must be a positive integer");if(!t.action||typeof t.action!="object")throw new Error("hl: signed action required");if(Object.prototype.hasOwnProperty.call(t.action,"vaultAddress"))throw new Error("hl: action vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t.action,"expiresAfter"))throw new Error("hl: action expiresAfter is not public");if(t.action.type!==Tn[n])throw new Error("hl: action type must match kind");let u=t.notionalUsd??0;if(Sn.has(n)||n==="perp-cancel"||n==="perp-leverage"||n==="perp-isolated-margin"){let a=J(t.coin,"coin",64),c=t.assetId??t.assetIndex;if(!Number.isSafeInteger(c)||c<0)throw new Error("hl: assetId required");if(n==="hip4-order"||c>=1e8){let d=Be(a);if(!d||d.coin!==a)throw new Error("hl: HIP-4 actions must use a canonical outcome coin");if(d.assetId!==c)throw new Error("hl: HIP-4 coin must bind to its canonical assetId")}if(Ln(a,r),Pn(a,c,r),n==="hip4-order"&&!_e(a))throw new Error("hl: HIP-4 orders must use an outcome coin");if(n==="perp-order"||n==="hip3-order"||n==="hip4-order"||n==="perp-bracket"){if(t.side!=="buy"&&t.side!=="sell")throw new Error("hl: side must be buy or sell");if(t.action.type!=="order"||!Array.isArray(t.action.orders))throw new Error("hl: signed orders are required");kn(t);let d=t.action.orders;if(n==="perp-bracket"){let l=t.takeProfitPx,p=t.stopLossPx,f=1+(l==null?0:1)+(p==null?0:1);if(f<2||d.length!==f||t.grouping!=="normalTpsl"||t.action.grouping!==t.grouping)throw new Error("hl: bracket must contain exactly the declared entry and protection legs");ft(d[0],t,c);let m=1;l!=null&&pt(d[m++],t,c,l,"tp"),p!=null&&pt(d[m],t,c,p,"sl")}else{if(d.length!==1)throw new Error("hl: exactly one signed order is required");if(t.grouping!=="na"||t.action.grouping!==t.grouping)throw new Error("hl: signed grouping must match declared grouping");ft(d[0],t,c)}Nn(d[0],t,r),On(t,r),u=v(t.notionalUsd,"hl: notionalUsd")}if(n==="perp-leverage"){let d=t.leverage;if(!Number.isSafeInteger(d)||d<1)throw new Error("hl: leverage must be a positive integer");let l=r.maxLeverage==null?50:r.maxLeverage;if(typeof l!="number"||!Number.isSafeInteger(l)||l<1)throw new Error("hl: maxLeverage must be a positive integer");if(d>l)throw new Error("hl: leverage exceeds cap")}if(n==="perp-cancel"){let d=t.action.cancels;if(!Array.isArray(d)||d.length!==1)throw new Error("hl: exactly one cancel is required");if(!Number.isSafeInteger(d[0].a)||d[0].a!==c)throw new Error("hl: signed cancel asset must match assetId");if(!Number.isSafeInteger(t.orderId)||t.orderId<0)throw new Error("hl: declared order id required");if(!Number.isSafeInteger(d[0].o)||d[0].o!==t.orderId)throw new Error("hl: signed cancel order id must match")}if(n==="perp-leverage"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==c)throw new Error("hl: signed leverage asset must match assetId");if(!Number.isSafeInteger(t.action.leverage)||t.action.leverage!==t.leverage)throw new Error("hl: signed leverage must match");if(!["cross","isolated"].includes(t.marginMode))throw new Error("hl: declared margin mode required");let d=t.marginMode==="cross";if(typeof t.action.isCross!="boolean"||t.action.isCross!==d)throw new Error("hl: signed isCross must match declared margin mode")}if(n==="perp-isolated-margin"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==c)throw new Error("hl: signed margin asset must match assetId");let d=J(t.usd,"margin usd",64),l=I(d,6,"hl: margin usd");if(H(t.action.ntli,"hl: signed margin ntli")!==l)throw new Error("hl: signed margin amount must match usd");if(typeof t.isBuy!="boolean"||t.action.isBuy!==t.isBuy)throw new Error("hl: signed margin isBuy must match");let f=I(r.maxNotionalUsd,6,"hl: maxNotionalUsd"),m=l<0n?-l:l;if(m>f)throw new Error("hl: margin notional exceeds cap");u=In(m,6)}}if(n==="builder-fee-approval"){let a=J(t.builder,"builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(a))throw new Error("hl: builder address required");if(J(t.action.builder,"signed builder",42).toLowerCase()!==a)throw new Error("hl: signed builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(m=>String(m).toLowerCase()):[]).includes(a))throw new Error("hl: builder not allowed");let d=J(t.maxFeeRate,"maxFeeRate",32);if(J(t.action.maxFeeRate,"signed maxFeeRate",32)!==d)throw new Error("hl: signed builder fee must match");if(!/^\d+(?:\.\d+)?%$/.test(d))throw new Error("hl: builder fee rate must be a percent");let l=I(d.slice(0,-1),12,"hl: builder fee percent"),p=I(r.maxBuilderFeeBps,12,"hl: maxBuilderFeeBps");if(p<0n||l*100n>p)throw new Error("hl: builder fee exceeds cap");if(Number(t.action.nonce)!==s)throw new Error("hl: signed builder nonce must match");let f=i.includes("testnet")?"Testnet":"Mainnet";if(t.hyperliquidChain!==f||t.action.hyperliquidChain!==t.hyperliquidChain)throw new Error("hl: signed Hyperliquid chain must match destination");if(t.signatureChainId!=="0x66eee"||t.action.signatureChainId!==t.signatureChainId)throw new Error("hl: signed signature chain id must match")}if(n.startsWith("hype-stake")||n==="hype-delegate"||n==="hype-undelegate"){if(n==="hype-delegate"||n==="hype-undelegate"){let a=n==="hype-undelegate";if(typeof t.action.isUndelegate!="boolean"||t.action.isUndelegate!==a)throw new Error("hl: signed isUndelegate must match delegate kind exactly")}if(r.maxHypeWei!=null&&BigInt(String(t.action.wei??t.caps?.amountHype??"0"))>BigInt(r.maxHypeWei))throw new Error("hl: stake amount exceeds cap")}return Object.freeze({unit:"usd",value:String(u??t.action.wei??0),notional:String(u??0),fee:"0",kind:n,actionType:t.action.type,amount:String(t.action.wei??u??0),coin:t.coin||null,submitTo:i})}var ma="0x"+"00".repeat(32);function Bn(e){let r=typeof e=="bigint"?e:B(e,"poly: atomicUsdc");if(r<=0n)throw new Error("poly: order amounts must be positive integer micro-units");let t=r/1000000n,n=(r%1000000n).toString().padStart(6,"0").replace(/0+$/,"");return n?`${t.toString()}.${n}`:t.toString()}function wt(e,r){let t=B(e.makerAmount,"poly: makerAmount"),n=B(e.takerAmount,"poly: takerAmount");return Bn(r==="BUY"?t:n)}var _n=new Set(["https://clob.polymarket.com/order"]),ue=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),xa=Object.freeze(ue.map(e=>e[0])),Fn=new Set(["0xe111180000d2663c0091e4f400237545b87b996b","0xe2222d279d744050d28e00520010520000310f59"]),Mn="0xe111180000d2663c0091e4f400237545b87b996b",$n="0xe2222d279d744050d28e00520010520000310f59",ht=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`poly: bounded ${r} required`);return e};function gt(e){let r=String(e||"").replace(/\/$/,"");if(!_n.has(r))throw new Error("poly: submitTo must be the official Polymarket CLOB");return r}function xt(e){let r=P(e,"poly: exchange").toLowerCase();if(!Fn.has(r))throw new Error("poly: verifyingContract must be an official CTF Exchange");return r}function yt(e,r){if(e?.surface!=="poly")throw new Error("poly: surface poly required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("poly: structured artifact required");let n=ht(t.kind,"kind",48);if(n!=="poly-order")throw new Error("poly: unsupported Polymarket kind");if(e.action!=="order")throw new Error("poly: surface/action/kind mismatch");if(P(e.destination,"poly: destination").toLowerCase()!=="polymarket")throw new Error("poly: destination must be polymarket");if(gt(t.submitTo),t.chainId!==137)throw new Error("poly: chainId must be Polygon 137");let o=t.domain;if(!o||typeof o!="object")throw new Error("poly: EIP-712 domain required");if(o.name!=="Polymarket CTF Exchange"||o.version!=="2"||o.chainId!==137)throw new Error("poly: EIP-712 domain must be official CTF Exchange v2 on Polygon");if(xt(o.verifyingContract),xt(t.exchange),P(o.verifyingContract,"poly: verifyingContract").toLowerCase()!==P(t.exchange,"poly: exchange").toLowerCase())throw new Error("poly: exchange/domain mismatch");if(typeof t.negRisk!="boolean")throw new Error("poly: negRisk must be a boolean");let i=t.negRisk?$n:Mn;if(P(t.exchange,"poly: exchange").toLowerCase()!==i)throw new Error("poly: negRisk/exchange mismatch");let s=t.message||t.value;if(!s||typeof s!="object")throw new Error("poly: signed order message required");let u=t.types?.Order;if(!Array.isArray(u)||u.length!==ue.length)throw new Error("poly: EIP-712 Order type must be official CLOB v2");for(let E=0;E<ue.length;E+=1)if(u[E]?.name!==ue[E][0]||u[E]?.type!==ue[E][1])throw new Error("poly: EIP-712 Order type must be official CLOB v2");if((t.orderType||"GTC")!=="GTC")throw new Error("poly: only GTC is public");let a=String(e.owner||"").toLowerCase();if(P(s.maker,"poly: maker").toLowerCase()!==a)throw new Error("poly: maker must equal owner");if(P(s.signer,"poly: signer").toLowerCase()!==a)throw new Error("poly: signer must equal owner");if(s.signatureType!==0)throw new Error("poly: only EOA signatureType 0 is public");if(typeof s.builder!="string"||s.builder.toLowerCase()!==`0x${"00".repeat(32)}`)throw new Error("poly: builder must be zero");if(s.side!==0&&s.side!==1)throw new Error("poly: side must be BUY or SELL");let c=ht(t.tokenId,"tokenId",80);if(P(s.tokenId,"poly: tokenId")!==c)throw new Error("poly: tokenId mismatch");let d=Array.isArray(r.polyTokens)?r.polyTokens.map(String):[];if(d.length&&!d.includes(c)&&!d.includes("*"))throw new Error("poly: tokenId not allowed");let l=Number(s.side)===0?"BUY":"SELL";if(t.side&&t.side!==l)throw new Error("poly: side mismatch");let p=B(s.makerAmount,"poly: makerAmount"),f=B(s.takerAmount,"poly: takerAmount"),m=B(t.makerAmount,"poly: prepared makerAmount"),w=B(t.takerAmount,"poly: prepared takerAmount");if(p!==m)throw new Error("poly: signed makerAmount differs from prepared envelope");if(f!==w)throw new Error("poly: signed takerAmount differs from prepared envelope");let h=l==="BUY"?p:f,g=l==="BUY"?f:p,A=I(t.quantity,6,"poly: quantity");if(A<=0n||A!==g)throw new Error("poly: quantity must match CLOB v2 amounts");let b=I(t.price,6,"poly: price");if(b<=0n||b>=1000000n)throw new Error("poly: price must be within (0,1)");if(g*b!==h*1000000n)throw new Error("poly: price must match CLOB v2 amounts");if(I(t.notionalUsdc,6,"poly: notionalUsdc")!==h)throw new Error("poly: notionalUsdc must match CLOB v2 amounts");let N=wt(s,l);if(I(N,6,"poly: displayed notionalUsdc")!==h)throw new Error("poly: displayed notionalUsdc must match CLOB v2 amounts");let O=r.maxNotionalUsd??r.maxNotionalUsdc;if(O!=null){let E=I(O,6,"poly: maxNotionalUsd");if(h>E)throw new Error("poly: notional exceeds cap")}return Object.freeze({unit:"usdc",value:h.toString(),notional:h.toString(),fee:"0",kind:n,tokenId:c,side:l,makerAmount:p.toString(),takerAmount:f.toString(),price:String(t.price),quantity:String(t.quantity),notionalUsdc:N,submitTo:gt(t.submitTo)})}var Rn=new Set(["https://mainnet.zklighter.elliot.ai/api/v1/sendTx","https://testnet.zklighter.elliot.ai/api/v1/sendTx"]),Et=14,bt=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`lighter: bounded ${r} required`);return e};function te(e,r,t){if(!Number.isSafeInteger(e)||e!==r)throw new Error(`lighter: ${t} must be exact numeric ${r}`)}function At(e){let r=String(e||"").replace(/\/$/,"");if(!Rn.has(r))throw new Error("lighter: submitTo must be the official Lighter sendTx");return r}function St(e,r={}){if(e?.surface!=="lighter")throw new Error("lighter: surface lighter required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("lighter: structured artifact required");let n=bt(t.kind,"kind",48);if(n!=="lighter-order")throw new Error("lighter: unsupported Lighter kind");if(e.action!=="order")throw new Error("lighter: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="lighter")throw new Error("lighter: destination must be lighter");let o=At(t.submitTo),i=t.marketIndex;if(typeof i!="number"||!Number.isSafeInteger(i)||i<0)throw new Error("lighter: marketIndex required");let s=Number(H(t.accountIndex,"lighter: accountIndex"));if(!Number.isSafeInteger(s)||s<0)throw new Error("lighter: accountIndex required");let u=Number(H(t.clientOrderIndex,"lighter: clientOrderIndex"));if(!Number.isSafeInteger(u)||u<0)throw new Error("lighter: clientOrderIndex required");te(t.orderType,0,"orderType"),te(t.timeInForce,1,"timeInForce"),te(t.reduceOnly,0,"reduceOnly"),te(t.triggerPrice,0,"triggerPrice"),te(t.orderExpiry,-1,"orderExpiry");let a=bt(t.symbol||t.coin,"symbol",32),c=Array.isArray(r.lighterMarkets)?r.lighterMarkets.map(String):[];if(c.length&&!c.includes(a)&&!c.includes(String(i))&&!c.includes("*"))throw new Error("lighter: market not allowed");if(t.side!=="buy"&&t.side!=="sell")throw new Error("lighter: side must be buy or sell");let d=B(t.baseAmount,"lighter: baseAmount"),l=B(t.price,"lighter: price");if(d>BigInt(Number.MAX_SAFE_INTEGER)||l>BigInt(Number.MAX_SAFE_INTEGER))throw new Error("lighter: baseAmount and price must be safe integers");let p=Number(d),f=Number(l),m=Number(t.sizeDecimals??0),w=Number(t.priceDecimals??0);if(!Number.isInteger(m)||m<0||m>12)throw new Error("lighter: sizeDecimals required");if(!Number.isInteger(w)||w<0||w>12)throw new Error("lighter: priceDecimals required");let h=m+w,g=d*l,A=I(t.notionalUsd,h,"lighter: notionalUsd");if(A<=0n)throw new Error("lighter: notionalUsd required");if(g!==A)throw new Error("lighter: notionalUsd must match size and price");let b=I(r.maxNotionalUsd??Number.MAX_SAFE_INTEGER,h,"lighter: maxNotionalUsd");if(g>b)throw new Error("lighter: notional exceeds cap");let T=v(t.notionalUsd,"lighter: notionalUsd");return te(t.txType,Et,"txType"),Object.freeze({unit:"usd",value:String(T),notional:String(T),fee:"0",kind:n,symbol:a,marketIndex:i,side:t.side,baseAmount:p,price:f,submitTo:o,actionType:"create-order",amount:String(T)})}import{TypedDataEncoder as It,getAddress as D}from"ethers";import{TypedDataEncoder as Sa,getAddress as va,isAddress as Ta}from"ethers";var vt=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Fe=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as Ma,getAddress as $a,isAddress as Ra}from"ethers";var Na=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var Tt=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),za=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var Me=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Ga=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var qn=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]),Un="0x0000000000000000000000000000000000000000";function $e(e,r,t=256){if(typeof e!="string"||!e||e.length>t)throw new Error(`evm-order: bounded ${r} required`);return e}function kt(e,r){let t=String(e||"").replace(/\/$/,"");if(!qn.some(o=>t===`${o}/v4.0/${r}`||t===`${o}/v4.1/${r}`))throw new Error("evm-order: submitTo must be the official 1inch orderbook");return t}function Nt(e,r){let t={1:"https://api.cow.fi/mainnet/api/v1/orders",100:"https://api.cow.fi/xdai/api/v1/orders",42161:"https://api.cow.fi/arbitrum_one/api/v1/orders",8453:"https://api.cow.fi/base/api/v1/orders"}[Number(r)],n=String(e||"").replace(/\/$/,"");if(!t||n!==t)throw new Error("evm-order: cow submitTo must be official api.cow.fi");return n}function Ot(e,r){let t=e?.Order,n=r.Order;return!Array.isArray(t)||t.length!==n.length?!1:t.every((o,i)=>o?.name===n[i].name&&o?.type===n[i].type)}function Ct(e,...r){let t=Array.isArray(e.tokens)?e.tokens.map(n=>String(n).toLowerCase()):[];if(!t.length)throw new Error("evm-order: tokens allowlist is empty");if(!t.includes("*")){for(let n of r)if(!t.includes(String(n).toLowerCase()))throw new Error("evm-order: token not allowed")}}function Lt(e,r,{allowZero:t=!1}={}){let n=String(r||"").toLowerCase();if(!n)throw new Error("evm-order: receiver required");if(n===Un){if(!t)throw new Error("evm-order: receiver must equal owner");return}if(n!==e)throw new Error("evm-order: receiver must equal owner")}function Pt(e,r){if(e?.surface!=="evm-order")throw new Error("evm-order: surface evm-order required");if(e.action!=="order")throw new Error("evm-order: action must be order");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("evm-order: structured artifact required");let n=$e(t.kind,"kind",32);if(n==="option")throw new Error("evm-order: option kind refused until official Derive/Lyra domain is pinned");if(n==="cow"){let l=Number(t.chainId??e.chainId);if(Nt(t.submitTo,l),$e(e.destination,"destination",32)!=="cowswap")throw new Error("evm-order: cow destination must be cowswap");let p=Tt[l];if(!p)throw new Error(`evm-order: unsupported cow chainId ${l}`);let f=t.domain||t.typedData?.domain,m=t.types||t.typedData?.types,w=t.message||t.typedData?.message;if(!f||!m?.Order||!w)throw new Error("evm-order: CoW EIP-712 Order required");if(!Ot(m,Me))throw new Error("evm-order: cow types must be official GPv2 Order");if(Number(f.chainId)!==l)throw new Error("evm-order: cow domain chain mismatch");if(String(f.name)!=="Gnosis Protocol"||String(f.version)!=="v2")throw new Error("evm-order: cow domain must be official GPv2");if(D(f.verifyingContract)!==D(p))throw new Error("evm-order: cow verifyingContract must be official GPv2 settlement");let h=String(e.owner||"").toLowerCase();Lt(h,w.receiver),Ct(r,w.sellToken,w.buyToken);let g=D(w.sellToken),A=String(w.feeAmount||"0"),b=(BigInt(w.sellAmount)+BigInt(A)).toString();return Object.freeze({unit:`erc20:${g.toLowerCase()}`,value:b,notional:b,fee:A,submitTo:Nt(t.submitTo,l),digest:It.hash(f,{Order:Me.Order},w),chainId:l,kind:"cow",receiver:D(w.receiver),sellAmount:String(w.sellAmount),buyAmount:String(w.buyAmount)})}if(n!=="1inch-limit")throw new Error("evm-order: unsupported kind");if($e(e.destination,"destination",32)!=="1inch-lop")throw new Error("evm-order: destination must be 1inch-lop");let o=Number(t.chainId??e.chainId),i=vt[o];if(!i)throw new Error(`evm-order: unsupported chainId ${o}`);kt(t.submitTo,o);let s=t.domain||t.typedData?.domain,u=t.types||t.typedData?.types,a=t.message||t.typedData?.message;if(!s||!u?.Order||!a)throw new Error("evm-order: EIP-712 Order required");if(!Ot(u,Fe))throw new Error("evm-order: types must be official LOP v4 Order");if(Number(s.chainId)!==o)throw new Error("evm-order: domain chain mismatch");if(D(s.verifyingContract)!==D(i))throw new Error("evm-order: verifyingContract must be official LOP v4");if(s.name!=="1inch Limit Order Protocol"||String(s.version)!=="4")throw new Error("evm-order: EIP-712 domain must be official LOP v4");let c=String(e.owner||"").toLowerCase();if(D(a.maker).toLowerCase()!==c)throw new Error("evm-order: maker must equal owner");Lt(c,a.receiver,{allowZero:!0}),Ct(r,a.makerAsset,a.takerAsset);let d=It.hash(s,{Order:Fe.Order},a);return Object.freeze({unit:`erc20:${D(a.makerAsset).toLowerCase()}`,value:String(a.makingAmount),notional:String(a.makingAmount),fee:"0",submitTo:kt(t.submitTo,o),digest:d,chainId:o,kind:"1inch-limit",receiver:D(a.receiver),makerAsset:D(a.makerAsset),takerAsset:D(a.takerAsset),makingAmount:String(a.makingAmount),takingAmount:String(a.takingAmount)})}var Rt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var Re=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),Wn=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),Dt=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Hn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),be=new $t(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Bt=new $t(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),jn=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var le=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},y=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},_t=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},zn=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},k=(e,r,t)=>{if(!zn(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},de=(e,r,t)=>{Array.isArray(r)&&r.length&&k(e,r,t)},S=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},X=e=>String(e||"0x").slice(0,10).toLowerCase(),qt=e=>y(e.gasLimit,"gasLimit")*y(e.maxFeePerGas??e.gasPrice,"feePerGas")+y(e.l1FeeWei??0,"l1FeeWei")+y(e.operatorFeeWei??0,"operatorFeeWei");function re(e,r,t,{dynamicTail:n=!1}={}){let o=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(o)||o.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&o.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:o,word:i=>o.slice(10+i*64,10+(i+1)*64)}}function L(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function q(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function Gn(e){if(X(e)!=="0x095ea7b3")return null;let r=re(e,2,"approval");return{kind:"approval",spender:L(r.word(0),"approval spender"),amount:q(r.word(1),"approval amount")}}function Ut(e,r){let t=r==="router02-exact-input-single"?7:8,n=re(e,t,"Uniswap v3 exactInputSingle"),o=t===7?4:5;return{kind:"action",action:"swap",inputToken:L(n.word(0),"input token"),outputToken:L(n.word(1),"output token"),recipient:L(n.word(3),"recipient"),amountIn:q(n.word(o),"amountIn"),minimumOut:q(n.word(o+1),"amountOutMinimum")}}function Jn(e){let r=re(e,12,"Across depositV3",{dynamicTail:!0}),t=q(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let o=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(o))throw new Error("envelope: malformed Across depositV3 message length");let i=Math.ceil(o/32)*64;if(r.hex.length!==n+64+i)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:L(r.word(0),"depositor"),recipient:L(r.word(1),"recipient"),inputToken:L(r.word(2),"input token"),outputToken:L(r.word(3),"output token"),amountIn:q(r.word(4),"inputAmount"),minimumOut:q(r.word(5),"outputAmount"),destinationChainId:q(r.word(6),"destinationChainId")}}function Vn(e){let r=String(e||"").replace(/^0x/i,"").toLowerCase();if(r.length<86||r.length%2!==0)throw new Error("envelope: malformed Uniswap path");let t=`0x${r.slice(0,40)}`,n=`0x${r.slice(r.length-40)}`;if(!/^0x[0-9a-f]{40}$/.test(t)||!/^0x[0-9a-f]{40}$/.test(n))throw new Error("envelope: malformed Uniswap path tokens");return{inputToken:t,outputToken:n}}function Ft(e,{hasDeadline:r}){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<74)throw new Error("envelope: malformed exactInput calldata");let n=[];for(let h=10;h+64<=t.length;h+=64)n.push(t.slice(h,h+64));let o=(h,g)=>{if(!n[h])throw new Error(`envelope: malformed ${g}`);return BigInt(`0x${n[h]}`)},i=Number(o(0,"exactInput struct offset"));if(i%32!==0)throw new Error("envelope: malformed exactInput struct offset");let s=i/32,u=Number(o(s,"path offset")),a=n[s+1],c=o(s+(r?3:2),"amountIn"),d=o(s+(r?4:3),"amountOutMinimum"),l=s+u/32;if(!Number.isInteger(l)||!n[l])throw new Error("envelope: malformed exactInput path");let p=Number(o(l,"path length")),f=t.slice(10+(l+1)*64,10+(l+1)*64+p*2),{inputToken:m,outputToken:w}=Vn(`0x${f}`);return{kind:"action",action:"swap",inputToken:m,outputToken:w,recipient:L(a,"recipient"),amountIn:c,minimumOut:d}}function Yn(e){let r=re(e,8,"Aerodrome exactInputSingle");return{kind:"action",action:"swap",inputToken:L(r.word(0),"input token"),outputToken:L(r.word(1),"output token"),recipient:L(r.word(3),"recipient"),amountIn:q(r.word(5),"amountIn"),minimumOut:q(r.word(6),"amountOutMinimum")}}function Kn(e){let r=String(e||"").toLowerCase();if(!r.startsWith("0x5ae401dc"))throw new Error("envelope: malformed Uniswap multicall");let t=[];for(let p=10;p+64<=r.length;p+=64)t.push(r.slice(p,p+64));let n=Number(BigInt(`0x${t[1]}`));if(n%32!==0)throw new Error("envelope: malformed multicall data offset");let o=n/32;if(Number(BigInt(`0x${t[o]}`))!==1)throw new Error("envelope: multicall must wrap exactly one swap");let s=Number(BigInt(`0x${t[o+1]}`)),u=o+1+s/32,a=Number(BigInt(`0x${t[u]}`)),d=`0x${r.slice(10+(u+1)*64,10+(u+1)*64+a*2)}`,l=X(d);if(l!=="0x04e45aaf"&&l!=="0x414bf389")throw new Error("envelope: multicall inner call must be exactInputSingle");return Ut(d,l==="0x04e45aaf"?"router02-exact-input-single":"swap-router-exact-input-single")}function Xn(e,r){let t=X(e),n=Dt[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.layout==="router02-exact-input-single"||n.layout==="swap-router-exact-input-single")return{...Ut(e,n.layout),selector:t,provider:n.provider};if(n.layout==="exact-input-deadline")return{...Ft(e,{hasDeadline:!0}),selector:t,provider:n.provider};if(n.layout==="exact-input")return{...Ft(e,{hasDeadline:!1}),selector:t,provider:n.provider};if(n.layout==="multicall-deadline")return{...Kn(e),selector:t,provider:n.provider};if(n.layout==="aerodrome-exact-input-single")return{...Yn(e),selector:t,provider:n.provider};if(n.action==="bridge")return{...Jn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function Qn(e){let r=re(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",mintType:"public",contract:L(r.word(0),"mint NFT contract"),feeRecipient:L(r.word(1),"mint fee recipient"),recipient:L(r.word(2),"mint recipient"),quantity:q(r.word(3),"mint quantity")}}function Zn(e){let r;try{r=Bt.decodeFunctionData("mintAllowList",e)}catch{throw new Error("envelope: malformed SeaDrop mintAllowList calldata")}let t=r[4],n=[...r[5]].map(String);if(n.length<1||n.length>64||n.some(a=>!/^0x[0-9a-fA-F]{64}$/.test(a)))throw new Error("envelope: bounded canonical SeaDrop allowlist proof required");if(Bt.encodeFunctionData("mintAllowList",[r[0],r[1],r[2],r[3],t,n]).toLowerCase()!==String(e).toLowerCase())throw new Error("envelope: SeaDrop allowlist calldata must be canonical");let i=BigInt(t.startTime),s=BigInt(t.endTime);if(s<=i)throw new Error("envelope: SeaDrop allowlist stage time range is invalid");let u=BigInt(r[3]);if(BigInt(t.maxTotalMintableByWallet)<u)throw new Error("envelope: SeaDrop allowlist wallet cap is below quantity");return{kind:"mint",action:"mint",mintType:"allowlist",contract:S(r[0],"mint NFT contract"),feeRecipient:S(r[1],"mint fee recipient"),recipient:S(r[2],"mint recipient"),quantity:u,mintPrice:BigInt(t.mintPrice),startTime:i,endTime:s,dropStageIndex:BigInt(t.dropStageIndex),proof:n}}function eo(e,r){let t=X(e);if(String(r).toLowerCase()==="nft-mint")return to(e);let n=Hn[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...Qn(e),selector:t,provider:n.provider};if(n.layout==="seadrop-mint-allowlist")return{...Zn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function to(e){let r=X(e);if(r==="0x40c10f19")throw new Error("envelope: ambiguous mint(address,uint256) calldata is not a built-in signer surface");let t=jn[r];if(!t)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(t.layout==="mint-no-args")return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:1n};if(t.layout==="mint-quantity"){let n=re(e,1,"generic NFT mint");return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:q(n.word(0),"mint quantity")}}throw new Error("envelope: unsupported generic NFT mint calldata")}function fe(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function Wt(e,r,t,{nowMs:n=Date.now(),networkFees:o,requireNetworkFees:i=!1}={}){let s=S(e.owner,"owner"),u=e.artifact,a=Number(u?.chainId??fe(e)[0]?.chainId);if(!Number.isSafeInteger(a)||a<=0)throw new Error("envelope: explicit batch chainId required");if(k(a,r.chains,"chain"),u?.owner!==void 0&&S(u.owner,"batch owner")!==s)throw new Error("envelope: explicit batch owner mismatch");let c=fe(e);if(!c.length||c.length>8)throw new Error("envelope: bounded EVM transaction batch required");let d=0n,l=0n,p=0n;for(let f of c){if(!f||typeof f!="object"||Array.isArray(f))throw new Error("envelope: structured EVM transaction required");if(Number(f.chainId)!==a)throw new Error("envelope: every batch leg must use the same chain");if(S(f.from,"transaction owner")!==s)throw new Error("envelope: every batch leg must use the same owner");if(k(X(f.data),r.selectors,"selector"),d+=y(f.value??0,"value"),l+=y(f.gasLimit,"gasLimit"),p+=qt(f),G(a)&&(f.l1FeeWei===void 0||f.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(d>y(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(l>y(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(p>y(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:c,chainId:a,owner:s,totalValue:d,totalGas:l,totalFee:p}}function Ht(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let o=String(e?.surface||"");if(o!=="evm-swap"&&o!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let i=le(e.provider,"provider",64).toLowerCase();k(i,r.providers,"provider");let s=Wt(e,r,o,{nowMs:t}),u=[],a=-1;for(let m=0;m<s.transactions.length;m++){let w=s.transactions[m],h=Gn(w.data),g;if(h){if(a!==-1)throw new Error("envelope: approval must be before action");if(y(w.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let T=S(w.to,"approval token");if(k(T,r.tokens,"token"),k(h.spender,r.spenders,"spender"),h.amount>y(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");g={...h,token:T,index:m}}else{if(a!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");k(w.to,r.destinations,"destination"),g={...Xn(w.data,i),target:S(w.to,"action target"),index:m},a=m}let A=y(w.value??0,"value"),b=y(w.gasLimit,"gasLimit");u.push({...g,value:A,gas:b,fee:qt(w)})}if(a<0)throw new Error("envelope: reviewed swap/bridge action required");let c=u[a],d=o==="evm-swap"?"swap":"bridge";if(c.action!==d||e.action!==d)throw new Error("envelope: surface/action/calldata mismatch");if(S(e.destination,"destination")!==c.target)throw new Error("envelope: destination must equal decoded action target");if(c.recipient!==s.owner)throw new Error("envelope: decoded recipient must equal owner");if(c.depositor&&c.depositor!==s.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(k(c.inputToken,r.tokens,"input token"),k(c.outputToken,r.tokens,"output token"),c.amountIn<=0n||c.amountIn>y(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(c.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(Te(e.autoSlippage,{nowMs:t,chainId:s.chainId,venue:i,tx:s.transactions[a],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(c.minimumOut!==y(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(c.action==="bridge"&&y(e.toChainId,"toChainId")!==c.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let l=u.filter(m=>m.kind==="approval");if(!new Set([...Wn,...Array.isArray(r.nativeInputTokens)?r.nativeInputTokens.map(m=>String(m).toLowerCase()):[]]).has(c.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(l.length)throw new Error("envelope: native-value action must not include token approval");if(c.value!==c.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let f=Object.freeze({quoteAmountOut:y(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:y(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...s,decoded:u,action:c,provider:i,authenticatedQuote:f}}function ro(e,r,{nowMs:t}){let n=e.anvilAttestation,o=e.artifact?.anvilAttestation;if(!n||typeof n!="object"||Array.isArray(n))throw new Error("envelope: Anvil attestation is required");if(!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: Anvil attestation artifact mismatch");if(Number(n.version)!==1||n.source!=="anvil-snapshot-rpc-reviewed-runtime")throw new Error("envelope: unsupported Anvil attestation");if(Number(n.chainId)!==4663)throw new Error("envelope: Anvil attestation chain mismatch");let i=S(e.destination,"Anvil market"),s=S(e.contract,"NFT contract"),u=S(e.paymentToken,"payment token");if(S(n.market,"attested Anvil market")!==i)throw new Error("envelope: Anvil attestation market mismatch");if(S(n.collection,"attested NFT collection")!==s)throw new Error("envelope: Anvil attestation collection mismatch");if(S(n.paymentToken,"attested payment token")!==u)throw new Error("envelope: Anvil attestation payment token mismatch");let a=Number(e.paymentTokenDecimals??e.artifact?.paymentTokenDecimals);if(!Number.isSafeInteger(a)||a<0||a>255||Number(n.paymentTokenDecimals)!==a)throw new Error("envelope: Anvil payment token decimals mismatch");let c=y(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei").toString();if(y(n.nativeSwapFeeWei,"attested nativeSwapFeeWei").toString()!==c)throw new Error("envelope: Anvil attestation native swap fee mismatch");let d=Number(n.snapshotFetchedAtMs),l=Number(n.snapshotExpiresAtMs);if(!Number.isFinite(d)||!Number.isFinite(l)||d>t||l<=t||l<=d)throw new Error("envelope: Anvil snapshot attestation is stale");let p=y(n.blockNumber,"attested blockNumber");if(p<=0n||!/^0x[0-9a-f]{64}$/.test(String(n.blockHash||"").toLowerCase()))throw new Error("envelope: Anvil block attestation is invalid");let f=String(n.runtimeCodeHash||"").toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(f))throw new Error("envelope: Anvil runtime code hash is invalid");let m=Object.entries(r.anvilRuntimeCodeHashes||{}).find(([h])=>h.toLowerCase()===i)?.[1];if(!m||String(m).toLowerCase()!==f)throw new Error("policy: Anvil runtime code hash is not reviewed");let w=Object.entries(r.nftPaymentTokenCaps||{}).find(([h])=>h.toLowerCase()===u)?.[1];if(!w||Number(w.decimals)!==a)throw new Error("policy: Anvil payment token decimals are not reviewed");return Object.freeze({...n,market:i,collection:s,paymentToken:u,paymentTokenDecimals:a,runtimeCodeHash:f,blockNumber:p})}function Mt(e,r){let t=e.artifact,n=e.anvilQuote,o=t?.anvilQuote;if(!n||typeof n!="object"||Array.isArray(n)||!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: exact Anvil quote artifact mismatch");if(e.preconditions?.exactQuoteConfirmed!==!0)throw new Error("envelope: exact Anvil quote confirmation required");let i=r==="buy"?[[n.totalCostRaw,"anvilQuote.totalCostRaw"],[e.maxPaymentTokenAmountRaw,"maxPaymentTokenAmountRaw"],[t?.maxPaymentTokenAmountRaw,"artifact maxPaymentTokenAmountRaw"],[e.exactQuoteTotalCostRaw,"exactQuoteTotalCostRaw"],[t?.exactQuoteTotalCostRaw,"artifact exactQuoteTotalCostRaw"],[e.preconditions?.confirmedTotalCostRaw,"confirmedTotalCostRaw"]]:[[n.netPayoutRaw,"anvilQuote.netPayoutRaw"],[e.minPayoutRaw,"minPayoutRaw"],[t?.minPayoutRaw,"artifact minPayoutRaw"],[e.exactQuoteNetPayoutRaw,"exactQuoteNetPayoutRaw"],[t?.exactQuoteNetPayoutRaw,"artifact exactQuoteNetPayoutRaw"],[e.preconditions?.confirmedNetPayoutRaw,"confirmedNetPayoutRaw"]],s=y(i[0][0],i[0][1]);for(let[u,a]of i.slice(1))if(y(u,a)!==s)throw new Error(`envelope: Anvil ${r} exact settlement limit mismatch`);return s}function jt(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint or NFT action");let n=le(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();de(n,r.providers,"provider");let o=Wt(e,r,"evm-nft",{nowMs:t});if(n==="anvil-nft"){if(e.action!=="nft")throw new Error("envelope: Anvil requires NFT action");if(o.chainId!==4663)throw new Error("envelope: Anvil requires chain 4663");if(r.confirmationMode!=="exact-human")throw new Error("policy: Anvil requires exact-human confirmation");if(o.transactions.length!==1)throw new Error("envelope: Anvil requires one atomic action with pre-existing approval");if(Number(e.slippageBps)!==0)throw new Error("envelope: Anvil exact limit requires zero slippageBps");let[f]=o.transactions,m=S(e.destination,"Anvil market");if(S(f.to,"Anvil action target")!==m)throw new Error("envelope: Anvil action target mismatch");k(m,r.destinations,"destination");let w=S(e.contract??e.artifact?.contract,"NFT contract");if(de(w,r.nftContracts,"NFT contract"),S(e.marketCollection??e.artifact?.marketCollection,"Anvil market collection")!==w)throw new Error("envelope: Anvil market collection mismatch");let g=S(e.paymentToken??e.artifact?.paymentToken,"payment token");de(g,r.erc20Tokens,"ERC20 token");let A=ro(e,r,{nowMs:t}),b=y(e.tokenId??e.artifact?.tokenId,"tokenId"),T=y(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei");if(o.totalValue!==T||y(f.value??0,"Anvil action value")!==T)throw new Error("envelope: Anvil native swap fee mismatch");if(T>y(r.maxNativeSwapFeeWei,"maxNativeSwapFeeWei"))throw new Error("policy: Anvil native swap fee exceeds cap");let N=le(e.nftAction,"nftAction",8).toLowerCase(),O;if(N==="buy"){let E=Mt(e,N),Q=Object.entries(r.nftPaymentTokenCaps||{}).find(([We])=>We.toLowerCase()===g)?.[1];if(!Q)throw new Error("policy: Anvil payment-token cap required");if(E>y(Q.maxPerTradeRaw,"maxPerTradeRaw"))throw new Error("policy: Anvil payment amount exceeds cap");if(e.preconditions?.allowanceVerified!==!0||y(e.preconditions?.allowanceRaw,"allowanceRaw")<E)throw new Error("envelope: Anvil pre-existing allowance proof required");let V=be.decodeFunctionData("buySpecificNFT",f.data);if(be.encodeFunctionData("buySpecificNFT",[V[0],V[1]]).toLowerCase()!==String(f.data).toLowerCase())throw new Error("envelope: non-canonical Anvil buy calldata");if(BigInt(V[0])!==b)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(V[1])!==E)throw new Error("envelope: Anvil maxCost mismatch");O={kind:"nft",action:"buy",tokenId:b,maxPaymentTokenAmountRaw:E,target:m}}else if(N==="sell"){let E=e.preconditions||{},Q=S(E.approvedAddress,"NFT approval address");if(E.nftApprovalVerified!==!0||Q!==m&&E.approvedForAll!==!0)throw new Error("envelope: Anvil pre-existing NFT approval proof required");let V=Mt(e,N),oe=be.decodeFunctionData("sellNFT",f.data);if(be.encodeFunctionData("sellNFT",[oe[0],oe[1]]).toLowerCase()!==String(f.data).toLowerCase())throw new Error("envelope: non-canonical Anvil sell calldata");if(BigInt(oe[0])!==b)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(oe[1])!==V)throw new Error("envelope: Anvil minPayout mismatch");O={kind:"nft",action:"sell",tokenId:b,minPayoutRaw:V,target:m}}else throw new Error("envelope: unsupported Anvil NFT action");return{...o,provider:n,nftAction:N,tokenId:b,paymentToken:g,paymentTokenDecimals:A.paymentTokenDecimals,anvilAttestation:A,decoded:[O]}}let i=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;if(i?.oraclePrepared===!0&&Ve(i,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"}),o.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let s=o.transactions[0],u=X(s.data);k(u,r.selectors,"selector"),k(s.to,r.destinations,"destination");let a=eo(s.data,n),c=S(e.contract??e.artifact?.contract,"NFT contract");if(de(c,r.nftContracts,"NFT contract"),(a.contract||S(s.to,"NFT contract"))!==c)throw new Error("envelope: mint calldata NFT contract mismatch");if(a.recipient&&a.recipient!==o.owner)throw new Error("envelope: mint calldata recipient mismatch");a.feeRecipient&&de(a.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let l=y(e.quantity??e.artifact?.quantity,"quantity");if(l<=0n||l>y(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(a.quantity!==l)throw new Error("envelope: mint calldata quantity mismatch");let p=y(e.totalWei??e.artifact?.totalWei,"totalWei");if(o.totalValue!==p)throw new Error("envelope: mint value does not match declared totalWei");if(a.mintType==="allowlist"){let f=BigInt(Math.floor(t/1e3));if(a.startTime>f||a.endTime<=f)throw new Error("policy: SeaDrop allowlist stage is not open");if(a.mintPrice*l!==p)throw new Error("envelope: SeaDrop allowlist price does not match declared totalWei")}if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&y(e.priceWei??e.artifact.priceWei,"priceWei")*l!==p)throw new Error("envelope: mint price does not match declared totalWei");if(p>y(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...o,provider:n,decoded:[{...a,target:S(s.to,"mint target"),value:o.totalValue,gas:o.totalGas,fee:o.totalFee}]}}function zt(e,{localsWaiver:r=!1}={}){if(!(e in Re))throw new Error("fee: unknown action");return r?0:Re[e]}function ne(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:o,networkFees:i,requireNetworkFees:s=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let u=le(e.surface,"surface",16);if(!Rt.has(u))throw new Error("envelope: unsupported public surface");let a=le(e.action,"action",32);k(u,r.surfaces,"surface"),k(a,r.actions,"action"),k(e.owner,r.owners,"owner"),k(e.destination,r.destinations,"destination");let c=_t(r.maxTtlMs,"maxTtlMs"),d=_t(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>c)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>d)throw new Error("policy: slippage exceeds cap");let l=e.artifact;if(!l||typeof l!="object"||Array.isArray(l))throw new Error("envelope: structured artifact required");if(u==="evm-swap"||u==="evm-bridge")Ht(e,r,{nowMs:t,routeAttestationSecret:o});else if(u==="evm-nft")jt(e,r,{nowMs:t});else if(u==="evm"){if(!["transfer","approve","delegate","identity"].includes(a))throw new Error(a==="mint"?"envelope: generic evm requires transfer or approve; use strict evm-nft for mint action":"envelope: generic evm requires transfer, approve, delegate, or identity");if(a==="swap"||a==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(Number(l.type)===4&&a!=="delegate")throw new Error("envelope: type-4 requires delegate");if(String(l.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(l.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");ge({...l,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:i,requireNetworkFees:s});let m=String(l.data||"0x").toLowerCase(),w=y(l.value,"EVM value");if(a==="delegate"){if(Number(l.type)!==4)throw new Error("envelope: delegate requires type-4");if(m!=="0x")throw new Error("envelope: 7702 delegate calldata must be empty");if(w!==0n)throw new Error("envelope: 7702 delegate cannot transfer native value")}else if(a==="identity"){if(w!==0n)throw new Error("envelope: ERC-8004 identity cannot transfer native value");let h=m.slice(0,10);if(h!=="0xf2c298be"&&h!=="0x0af28bd3")throw new Error("envelope: ERC-8004 selector not allowed")}else if(m==="0x"){if(w===0n)throw new Error("envelope: native EVM transfer value required")}else if(Y(m)){if(w!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else u==="btc"?et(e,r):u==="sol"?dt(e,r):u==="hl"?mt(e,r):u==="poly"?yt(e,r):u==="lighter"?St(e,r):u==="evm-order"&&Pt(e,r);let p=Number(e.fee?.oracleFeeBps)===0&&Re[a]!==0;if(e.fee?.waiver||p&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(p&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let f=zt(a,{localsWaiver:p});if(Number(e.fee?.oracleFeeBps)!==f)throw new Error("fee: final artifact fee mismatch");return!0}var Ee=Object.freeze([...Rt]),no=Object.freeze({...Dt});function oo(e={}){let r={};for(let t of Ee){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(o,i)=>n.simulate(structuredClone(o),structuredClone(i)),sign:(o,i)=>n.sign(structuredClone(o),structuredClone(i)),broadcast:(o,i,s)=>n.broadcast(o,structuredClone(i),structuredClone(s))})}}return Object.freeze(r)}function io(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as Ss}from"@noble/curves/ed25519.js";import{base58 as ao}from"@scure/base";import{RawTx as Is,SigHash as ks,Transaction as so}from"@scure/btc-signer";import{Transaction as co,keccak256 as De,verifyTypedData as Os}from"ethers";import{encode as ls}from"@msgpack/msgpack";import{keccak256 as ps,verifyTypedData as ms}from"ethers";var ws=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),hs=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Gt=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function uo(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let o=e[n++];if(r|=(o&127)<<t,(o&128)===0)return{value:r,offset:n};t+=7}return null}function Jt(e,r){try{if(e==="evm-order")return De(r);if(String(e).startsWith("evm"))return co.from(r).hash;if(e==="btc"){let t=Gt(r);if(!t)return null;let n=so.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=Gt(r);if(!t)return null;let n=uo(t);if(!n||n.value!==1)return null;let o=t.subarray(n.offset,n.offset+64);return o.length===64?ao.encode(o):null}if(e==="hl"&&typeof r=="string"&&r.startsWith("0x"))return De(r);if(e==="poly"&&typeof r=="string"&&r.startsWith("0x"))return De(r)}catch{}return null}var mo=e=>String(e||"").toLowerCase();function z(e){return lo("sha256").update(JSON.stringify(e)).digest("hex")}function me(e,r,t={}){return ge(e,r,t)}async function wo(e,r={}){if(!G(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function Yt(e,r,t=!1){if(!G(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),o=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<o)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function ho(e,r={}){return renderConfirmationArtifact(e,z(e),r)}var pe=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let o=fo(32).toString("hex");return this.#e.set(o,{digest:z(r),owner:mo(t),expiresAtMs:this.now()+n}),o}consume(r,t){let n=this.#e.get(String(r));if(!n)throw new Error("confirmation: used or unknown nonce");if(n.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let o=Buffer.from(n.digest,"hex"),i=Buffer.from(z(t),"hex");if(!po(o,i))throw new Error("confirmation: artifact mismatch");return this.#e.delete(String(r)),n}clear(){this.#e.clear()}};function go(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if(Y(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function xo(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function yo(e){return e==="evm"||e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Ae(e,r){let t=String(r||"");if(e==="evm-order"||String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=Vt.decode(t);return n.length===64&&Vt.encode(n)===t}catch{return!1}return e==="hl"?/^0x[0-9a-fA-F]{64}$/.test(t):e==="poly"?/^0x[0-9a-fA-F]{64}$/.test(t):!1}function Kt(e,r,t){return!Ae(e,r)||!Ae(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function bo(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function qe({artifact:e,envelope:r,nonce:t,deps:n,policy:o,confirmation:i,consumeNonce:s,nowMs:u}){let a=bo(o);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(a!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,u())!==!0)throw new Error("signer: autonomous trigger attestation required");return i}if(a!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(s)return n.confirmations.consume(t,e);if(!i||!Number.isFinite(i.expiresAtMs)||i.expiresAtMs<=u())throw new Error("confirmation: expired nonce");return i}function Eo(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Ao(e,r){return e&&Eo(e.surface)?fe(e):[r]}function So(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!Kt(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function vo(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:xo(t,n)}}async function Se(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=e?.version===1&&e?.surface?e:null,o=n?n.artifact:(()=>{let{tradeId:h,...g}=e||{};return g})(),i=Ao(n,o),s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,u=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),a=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:s,confirmation:null,consumeNonce:!0,nowMs:u}),c=z(e),d=(h={})=>{n?ne(n,s,h):(me(o,s,{nowMs:h.nowMs,networkFees:h.networkFees,requireNetworkFees:h.requireNetworkFees}),go(o))},l=async h=>{let g=!n||yo(n.surface),A=g?await wo(h,t):void 0;return{nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:A,requireNetworkFees:g&&G(h?.chainId)}};d({nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let h of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[h]!="function")throw new Error(`signer: ${h} is required`);let p=t.reserveLedger(n||e,s);if(!p)throw new Error("signer: ledger reservation required");let f=!1,m=[];try{for(let h of i){if(typeof t.simulate!="function"||await t.simulate(h,n)!==!0)throw new Error("signer: strict affirmative simulation required");let g=await l(h);if((g.requireNetworkFees||g.networkFees!=null)&&Yt(h,g.networkFees,g.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,a=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:s,confirmation:a,consumeNonce:!1,nowMs:u}),d(g),t.validateReservation(p,s,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,s):void 0),f=!0;let A=await t.sign(h,n);if(typeof t.verifySigned!="function"||await t.verifySigned(A,h,n)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");if(!t.isArmed())throw new Error("signer: disarmed before broadcast");if(z(e)!==c)throw new Error("signer: artifact mutated after signing");s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,a=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:s,confirmation:a,consumeNonce:!1,nowMs:u});let b=await l(h);(b.requireNetworkFees||b.networkFees!=null)&&Yt(h,b.networkFees,b.requireNetworkFees),d(b),t.validateReservation(p,s,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,s):void 0);let T=await t.broadcast(A,h,n),N=T?.status,O=n?.surface||"evm",E=So(T,O),Q=Jt(O,A);if(!Kt(O,E,Q))throw new Error("signer: receipt transaction hash does not match signed bytes");if(N===0||N==="0x0")throw Ae(O,E)?(t.settleFailedLedger(p),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(N!==1&&N!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!Ae(O,E))throw new Error("signer: successful broadcast requires a valid transaction hash");m.push(vo(T,E))}}catch(h){throw f||t.releaseLedger(p),h}if(t.commitLedger(p),m.length===1){let h={receipt:m[0]};return n?.surface==="evm-bridge"&&(h.originStatus="success",h.destinationStatus="unverified",h.destinationSuccess=!1,h.note="Origin-chain receipts do not prove destination-chain settlement."),h}let w={receipts:m,status:"success"};return n?.surface==="evm-bridge"&&(w.originStatus="success",w.destinationStatus="unverified",w.destinationSuccess=!1,w.note="Origin-chain receipts do not prove destination-chain settlement."),w}import To from"node:http";import{timingSafeEqual as Io}from"node:crypto";var Xt=new Set(["127.0.0.1","::1","localhost"]),ko=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&Io(t,n)},x=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function No(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var we=e=>new Promise((r,t)=>{let n=0,o=[],i=!1;e.on("data",s=>{n+=s.length,n>64*1024&&!i?(i=!0,t(new Error("request refused")),e.resume()):i||o.push(s)}),e.on("end",()=>{if(!i)try{r(JSON.parse(Buffer.concat(o).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)});function Oo(e={}){let r=e.host||"127.0.0.1";if(!Xt.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let a of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[a]!="function")throw new Error(`signer: ${a} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new pe,n=e.pending||new Map;function o(a){let c=a.artifact?.version===1&&a.artifact?.surface?a.artifact:null,d=c?.artifact||a.artifact||{};return{id:a.digest.slice(0,8),digest:a.digest,surface:c?.surface||"evm",action:c?.action||"evm",chain:d.chainId??d.network??null,to:d.to||c?.destination||null,value:d.value??d.message?.sellAmount??d.message?.makingAmount??null,receiver:d.message?.receiver||d.typedData?.message?.receiver||null,maker:d.message?.maker||d.typedData?.message?.maker||null,makingAmount:d.message?.makingAmount||d.typedData?.message?.makingAmount||null,takingAmount:d.message?.takingAmount||d.typedData?.message?.takingAmount||null,sellAmount:d.message?.sellAmount||d.typedData?.message?.sellAmount||null,buyAmount:d.message?.buyAmount||d.typedData?.message?.buyAmount||null,kind:d.kind||null,type:d.type??null,authorizationList:d.authorizationList||null,feeAmount:d.message?.feeAmount||d.typedData?.message?.feeAmount||null,createdAtMs:a.createdAtMs}}function i(a){let c=String(a||"").trim().toLowerCase().replace(/^0x/,"");return c?[...n.values()].filter(d=>d.digest.toLowerCase().startsWith(c)||d.digest.slice(0,8)===c):[...n.values()]}let s=e.origin||`http://${r}`;return To.createServer(async(a,c)=>{try{let d=String(a.headers.authorization||"").replace(/^Bearer /i,"");if(!ko(d,e.token))return x(c,401,{error:"unauthorized"});let l=No(a.headers.host);if(!Xt.has(l))return x(c,403,{error:"host refused"});if(a.headers.origin&&a.headers.origin!==s)return x(c,403,{error:"origin refused"});if(a.method==="GET"&&a.url==="/status"){let p=typeof e.readPolicy=="function"?e.readPolicy():e.policy,f=new Set(Ee),m=Array.isArray(p?.surfaces)?p.surfaces.filter(w=>typeof w=="string"&&f.has(w)):[];return x(c,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:m,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(a.method==="POST"&&a.url==="/disarm")return e.disarm(),t.clear(),n.clear(),x(c,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(a.method))return x(c,405,{error:"request refused"});if(a.method==="POST"&&String(a.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return x(c,415,{error:"request refused"});if(a.method==="GET"&&a.url==="/pending"){let p=[...n.values()].map(o);return x(c,200,{ok:!0,armed:e.isArmed?.()===!0,count:p.length,items:p})}if(a.method==="POST"&&a.url==="/pending"){if(e.autonomous===!0)return x(c,403,{error:"autonomous signer does not queue human approvals"});let f=(await we(a)).artifact;if(!f||typeof f!="object")return x(c,400,{error:"artifact required"});let m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return x(c,403,{error:"exact-human policy required"});let w=typeof e.nowMs=="function"?e.nowMs():Date.now();if(f?.surface==="cex"){if(typeof e.inspectCex!="function")return x(c,403,{error:"cex execution unavailable"});e.inspectCex(f,m,w)}else if(f?.version===1&&f?.surface)ne(f,m,{nowMs:w,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:A,...b}=f||{};me(b,m,{nowMs:w})}let h=z(f),g=f?.surface==="cex"?Object.freeze(structuredClone(f)):f;return n.set(h,{artifact:g,digest:h,createdAtMs:w}),x(c,200,{ok:!0,...o(n.get(h))})}if(a.method==="POST"&&a.url==="/ack"){if(e.autonomous===!0)return x(c,403,{error:"autonomous signer does not accept messaging acks"});let p=await we(a),f=i(p.digest||p.id);if(f.length===0)return x(c,404,{error:"no pending artifact"});if(f.length>1)return x(c,409,{error:"ambiguous digest; pass more hex"});let m=f[0];if((typeof e.readPolicy=="function"?e.readPolicy():e.policy)?.confirmationMode!=="exact-human")return x(c,403,{error:"exact-human policy required"});if(e.isArmed?.()!==!0)return x(c,403,{error:"signer is disarmed"});if(m.artifact?.surface==="cex"){if(typeof e.verifyCexOwnerProof!="function"||e.verifyCexOwnerProof(p.ownerProof,{digest:m.digest})!==!0)return x(c,403,{error:"exact owner Allow proof required"});if(typeof e.cexExecute!="function")return x(c,403,{error:"cex execution unavailable"});n.delete(m.digest);let A=await e.cexExecute(m.artifact);return x(c,200,{ok:!0,executed:!0,digest:m.digest,id:m.digest.slice(0,8),result:A})}n.delete(m.digest);let h=t.issue({artifact:m.artifact,owner:m.artifact?.owner??m.artifact?.from,ttlMs:p.ttlMs}),g=await Se(m.artifact,h,{...e,confirmations:t});return x(c,200,{ok:!0,executed:!0,confirmationNonce:h,digest:m.digest,id:m.digest.slice(0,8),result:g})}if(a.method==="POST"&&a.url==="/deny"){let p=await we(a),f=i(p.digest||p.id);return f.length===0?x(c,404,{error:"no pending artifact"}):f.length>1?x(c,409,{error:"ambiguous digest; pass more hex"}):(n.delete(f[0].digest),x(c,200,{ok:!0,denied:!0,id:f[0].digest.slice(0,8)}))}if(a.method==="POST"&&a.url==="/confirm"){if(e.autonomous===!0)return x(c,403,{error:"autonomous signer does not issue human confirmation nonces"});let p=await we(a);if(p.artifact?.surface==="cex")return x(c,403,{error:"cex requires pending owner ack"});let f=z(p.artifact),m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return x(c,403,{error:"exact-human policy required"});let w=typeof e.nowMs=="function"?e.nowMs():Date.now();if(p.artifact?.version===1&&p.artifact?.surface)ne(p.artifact,m,{nowMs:w,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:h,...g}=p.artifact||{};me(g,m,{nowMs:w})}return typeof e.confirmArtifact!="function"?x(c,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(p.artifact,f,m)!==!0?x(c,400,{error:"exact human confirmation refused"}):x(c,200,{confirmationNonce:t.issue({artifact:p.artifact,owner:p.artifact?.owner??p.artifact?.from,ttlMs:p.ttlMs})})}if(a.method==="POST"&&a.url==="/execute"){let p=await we(a);if(p.artifact?.surface==="cex")return x(c,403,{error:"cex requires pending owner ack"});let f=await Se(p.artifact,p.confirmationNonce,{...e,confirmations:t});return x(c,200,f)}return x(c,404,{error:"not found"})}catch(d){e.onError?.(String(d?.message||d));let l=String(a.url||"");return l==="/pending"||l==="/ack"||l==="/deny"?x(c,400,{error:String(d?.message||"request refused").slice(0,300)}):x(c,400,{error:"request refused"})}})}import{createHmac as Lo}from"node:crypto";import{HDNodeWallet as Po,Mnemonic as Bo,Wallet as tr}from"ethers";function Co(e){return BigInt(e).toString(16).padStart(64,"0")}function Qt(e){return e.slice(2).padStart(64,"0")}function Zt(e,r,t){return`0x42842e0e${Qt(e)}${Qt(r)}${Co(t)}`}var _o=/^(?:[a-z]+ ){11}[a-z]+$|^(?:[a-z]+ ){23}[a-z]+$/,Fo=/^(?:0x)?[0-9a-fA-F]{64}$/;function Mo(e){let r=String(e||"").trim().toLowerCase().replace(/\s+/g," ");if(!_o.test(r))return null;try{if(!Bo.isValidMnemonic(r))return null}catch{return null}return r}function $o(e){let r=String(e||"").trim();return Fo.test(r)?r.startsWith("0x")?r:`0x${r}`:null}function Ro(e,r){let t=Buffer.from(e.replace(/^0x/i,""),"hex");return`0x${Lo("sha256",t).update(`oracle-mint-fanout:v1:${r}`).digest("hex")}`}function Ue(e,r,t,n){return{index:e,address:String(r).toLowerCase(),path:t,kind:n}}function Do(e,{childCount:r}={}){let t=Number(r);if(!Number.isInteger(t)||t<1)throw new Error("hd-fanout: childCount must be a positive integer");if(t>32)throw new Error(`hd-fanout: childCount exceeds hard max ${32}`);let n=Mo(e);if(n){let i=[];for(let s=0;s<=t;s++){let u=`m/44'/60'/0'/0/${s}`,a=Po.fromPhrase(n,"",u);i.push(Ue(s,a.address,u,"bip44"))}return{kind:"bip44",main:i[0],children:i.slice(1)}}let o=$o(e);if(o){let i=new tr(o),s=[];for(let u=1;u<=t;u++){let a=new tr(Ro(o,u));s.push(Ue(u,a.address,`hmac:v1:${u}`,"hmac"))}return{kind:"hmac",main:Ue(0,i.address,"vault-key","hmac"),children:s}}throw new Error("hd-fanout: secret must be a BIP-39 mnemonic or a 32-byte hex key")}function qo(e,r){let t=String(r||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error("hd-fanout: vault address required");if(e.main.address!==t)throw new Error(`hd-fanout: derived main ${e.main.address} does not match vault ${t} (BIP-44 index 0 must be the vault wallet, or use the raw-key HMAC path)`)}function Uo(e,{nonce:r,value:t}){let n={type:2,chainId:e.chainId,to:e.to,data:e.data&&e.data!=="0x"?e.data:"0x",value:BigInt(t??e.value??0),gasLimit:BigInt(e.gasLimit),maxFeePerGas:BigInt(e.maxFeePerGas),maxPriorityFeePerGas:BigInt(e.maxPriorityFeePerGas||0)};return r!=null&&(n.nonce=Number(r)),n}async function Wo(e,r){if(e.valueMode!=="remainder")return e.value;if(typeof r!="function")throw new Error("mint-fanout: getBalance required for remainder sweep");let t=BigInt(await r(e.from)),n=BigInt(e.gasLimit)*BigInt(e.maxFeePerGas);return(t>n?t-n:0n).toString()}function Ho(e,r){if(e.kind!=="sweep-nft"||!e.needsTokenId)return e;if(r==null||String(r).length===0)throw new Error(`mint-fanout: hop ${e.step} needs tokenId after mint`);return{...e,needsTokenId:!1,tokenId:String(r),data:Zt(e.from,e.nftTo,BigInt(r))}}async function jo(e,{byAddress:r,getNonce:t,getBalance:n,tokenIdsByChildIndex:o={}}={}){if(!e||e.signed)throw new Error("mint-fanout: unsigned plan required");if(!(r instanceof Map))throw new Error("mint-fanout: wallet map required");let i=[],s=new Map;for(let u of e.hops){let a=Ho(u,o[u.walletIndex]),c=String(a.from).toLowerCase(),d=r.get(c);if(!d)throw new Error(`mint-fanout: no local key for ${c}`);let l=await Wo(a,n),p=a.nonce;if(p==null){if(typeof t!="function")throw new Error("mint-fanout: getNonce required when hops omit nonce");s.has(c)||s.set(c,Number(await t(c))),p=s.get(c),s.set(c,p+1)}let f=Uo(a,{nonce:p,value:l}),m=await d.signTransaction(f);i.push({step:a.step,kind:a.kind,walletIndex:a.walletIndex,from:a.from,to:a.to,chainId:a.chainId,value:String(l),nonce:p,delayMsAfter:a.delayMsAfter||0,signedRaw:m})}return{execution:"signed-local",signed:!0,main:e.main,chainId:e.chainId,contract:e.contract,hopCount:i.length,hops:i}}async function zo(e,{broadcastFn:r,sleepFn:t=n=>new Promise(o=>setTimeout(o,n))}={}){if(!e?.signed)throw new Error("mint-fanout: signed plan required");if(typeof r!="function")throw new Error("mint-fanout: broadcastFn required");let n=[];for(let o of e.hops){let i=await r(o.signedRaw,o);if(!i?.hash)throw new Error(`mint-fanout: hop ${o.step} broadcast returned no hash`);n.push({step:o.step,kind:o.kind,from:o.from,hash:i.hash}),o.delayMsAfter>0&&await t(o.delayMsAfter)}return{ok:!0,receipts:n}}export{pe as ConfirmationStore,Ee as PUBLIC_SIGNER_SURFACES,no as REVIEWED_EVM_SELECTORS,z as artifactDigest,me as assertExactPolicy,qo as assertMainMatchesVault,zo as broadcastMintFanout,Oo as createSignerServer,oo as createSurfaceAdapters,Do as deriveFanoutAccounts,fe as evmTransactions,Se as executeConfirmedArtifact,ho as inspectArtifactForConfirmation,Ht as inspectEvmBatch,jt as inspectEvmNft,zt as publicFeeBps,jo as signMintFanoutPlan,io as surfaceAdapterFor,ne as validateSurfaceEnvelope};
+import{createHash as lo,randomBytes as fo,timingSafeEqual as po}from"node:crypto";import{base58 as Vt}from"@scure/base";import{Interface as $t}from"ethers";import{Interface as gr,MaxUint256 as xr,isAddress as yr,keccak256 as Ni,toUtf8Bytes as Oi}from"ethers";import{Interface as wr,isAddress as ui}from"ethers";import{isAddress as ni}from"ethers";import{createHash as ar,createHmac as sr,timingSafeEqual as cr}from"node:crypto";import{readFileSync as rr}from"node:fs";import{homedir as nr}from"node:os";import{join as he}from"node:path";function or(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let t=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return t?[t]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),r=nr();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let t=(process.env.ORACLE_CONFIG_DIR||he(r,".config","oracle")).trim();return[e,he(t,"exec.env")].filter(Boolean)}return[e,he(r,".config","oracle","exec.env"),he(r,".config","mad-desk","exec.env")].filter(Boolean)}function ie(e,r,t){let n=e??process.env[r]??process.env[t];if(!String(n||"").trim())for(let o of or())try{let i=rr(o,"utf8"),s=i.match(new RegExp(`^${r}=(.*)$`,"m"))||i.match(new RegExp(`^${t}=(.*)$`,"m"));if(s&&(n=s[1].trim(),n))break}catch{}if(!String(n||"").trim())throw new Error(`${r} required for attestation. Set it in the environment, or place ${r}=<value> in ~/.config/oracle/exec.env`);return n}function Z(e,r,t="guard"){if(typeof r!="number"||!Number.isFinite(r))throw new Error(`${t}: current time must be a finite number (got ${ir(r)})`);let n=r,o=Number(e?.issuedAtMs),i=Number(e?.expiresAtMs);if(!Number.isFinite(i))throw new Error(`${t}: expiresAtMs is required and must be a finite number`);if(n>i)throw new Error(`${t} expired at ${i}, now ${n}`);if(e?.issuedAtMs!=null){if(!Number.isFinite(o))throw new Error(`${t}: issuedAtMs must be a finite number when present`);if(i<=o)throw new Error(`${t}: expiry must be after issuance`)}return{now:n,issuedAtMs:o,expiresAtMs:i}}function ir(e){return e===null?"null":e===void 0?"undefined":typeof e=="number"?String(e):`${typeof e} ${JSON.stringify(String(e)).slice(0,24)}`}var He=100;function ve(e){return Array.isArray(e)?`[${e.map(ve).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(r=>`${JSON.stringify(r)}:${ve(e[r])}`).join(",")}}`:JSON.stringify(e??null)}function ur(e,{required:r=!1}={}){try{return ie(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(t){if(r)throw t;return null}}function dr(e){let{signature:r,...t}=e;return t}function lr(e){let r=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(r)||r.length<10||r.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return ar("sha256").update(Buffer.from(r.slice(2),"hex")).digest("hex")}function fr(e,r){let t=Buffer.from(String(e??""),"utf8"),n=Buffer.from(String(r??""),"utf8");return t.length!==n.length||t.length===0?!1:cr(t,n)}function pr(e){let r=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(r)||r.length<10||r.length%2!==0)return null;let t=r.slice(0,10).toLowerCase(),n=[];for(let i=10;i+64<=r.length;i+=64)n.push(r.slice(i,i+64));let o=i=>n[i]==null?null:BigInt("0x"+n[i]);switch(t){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let i=o(0);if(i==null)return null;let s=Number(i)/32;return!Number.isInteger(s)||s<0?null:o(s+4)}case"0xb858183f":{let i=o(0);if(i==null)return null;let s=Number(i)/32;return!Number.isInteger(s)||s<0?null:o(s+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}function Te(e,{nowMs:r=Date.now(),chainId:t,venue:n,secret:o,tx:i,requireSigned:s=!1}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");let u=ur(o,{required:s});if(s&&!u)throw new Error("auto-slippage attestation secret required for signing or broadcast");if(u){let m=sr("sha256",u).update(ve(dr(e))).digest("hex");if(!fr(e.signature,m))throw new Error("auto-slippage guard signature mismatch \u2014 the guard was not issued by this Oracle")}else if(e.signature)throw new Error("auto-slippage guard carries a signature but no attestation secret is configured");let a=Number(e.selectedBps),c=Number(e.capBps);if(!Number.isInteger(a)||a<0||a>He)throw new Error("auto-slippage selected tolerance exceeds hard 100 bps cap");if(!Number.isInteger(c)||c<0||c>He||a>c)throw new Error("auto-slippage cap exceeds hard 100 bps cap");try{Z({expiresAtMs:e.expiresAtMs,issuedAtMs:e.quotedAtMs},r,"auto-slippage quote")}catch(m){throw new Error(`${m.message}; re-quote before signing`)}if(t!=null&&Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(n&&String(e.venue).toLowerCase()!==String(n).toLowerCase())throw new Error("auto-slippage guard venue mismatch");let d=BigInt(e.quoteAmountOut??0),l=BigInt(e.minAmountOut??0);if(d<=0n||l<=0n)throw new Error("auto-slippage guard amounts must be positive");let p=d*BigInt(1e4-a),f=p/10000n;if(p%10000n!==0n&&(f+=1n),l<f)throw new Error("auto-slippage guard is under-protected relative to its fresh quote");if(i?.data&&e.minAmountOut!=null){let m=pr(i.data);if(e.calldataHash!=null){if(String(e.calldataHash)!==lr(i.data))throw new Error("auto-slippage guard is not bound to this call: calldata hash mismatch");if(m!=null&&m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is hash-bound but the calldata encodes ${m}, not the guard floor ${e.minAmountOut}`)}else{if(m==null){let w=String(i.data).slice(0,10);throw new Error(`auto-slippage: cannot verify the output floor encoded by selector ${w}; refusing rather than trusting unbound calldata at an allowlisted venue`)}if(m!==BigInt(e.minAmountOut))throw new Error(`auto-slippage guard is not bound to this call: guard minAmountOut ${e.minAmountOut} but calldata encodes ${m}`)}}return!0}var pi=new wr(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as hr,isAddress as hi}from"ethers";var Ei=new hr(["function approve(address spender,uint256 amount) returns (bool)"]),bi=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});function v(e,r="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${r} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${r} must be a number or decimal string`);return e}throw new Error(`${r} must be a number or decimal string`)}function P(e,r="value"){if(typeof e!="string"||e==="")throw new Error(`${r} must be a string`);return e}function H(e,r="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${r} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${r} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let t=v(e,r);if(t==="")throw new Error(`${r} is required`);if(!/^-?\d+$/.test(t)&&!/^0x[0-9a-fA-F]+$/.test(t))throw new Error(`${r} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(t)}`);try{return BigInt(t)}catch{throw new Error(`${r} must be an integer, got ${JSON.stringify(t)}`)}}function B(e,r="amount"){let t=H(e,r);if(t<=0n)throw new Error(`${r} must be positive`);return t}function I(e,r,t="amount"){let n=v(e,t);if(!/^-?\d*(\.\d+)?$/.test(n)||n===""||n==="."||n==="-")throw new Error(`${t} must be a decimal number, got ${JSON.stringify(n)}`);let o=n.startsWith("-"),i=o?n.slice(1):n,[s="0",u=""]=i.split(".");if(u.length>r)throw new Error(`${t} has more than ${r} decimal places, which would lose precision`);let a=BigInt((s||"0")+u.padEnd(r,"0"));return o?-a:a}var Fi=new gr(["function approve(address spender,uint256 amount) returns (bool)"]);function je(e,r){let t=String(e||"").trim();if(!yr(t))throw new Error(`${r} must be an address`);return t.toLowerCase()}function Er(e,r="approval amount",{allowZero:t=!1}={}){let n=H(e,r);if(t?n<0n:n<=0n)throw new Error(`${r} must be positive`);if(n>=xr)throw new Error("unlimited approvals are refused; use an exact bounded amount");return n.toString()}var ze=new Set(["0x095ea7b3","0x39509351","0x61f49ed6","0xeb5625d9","0xf9255c1f","0x87517c45","0xd505accf","0x8fcbaf0c","0x2b67b570","0x2a2d80d1"]),br=new Set(["0x39509351","0xf9255c1f"]);function Y(e){let r=String(e||"").toLowerCase();return r.length<10?!1:ze.has(r.slice(0,10))}function Ge(e){if(!Y(e))throw new Error("approval calldata required");let r=String(e||"").toLowerCase(),t=r.slice(0,10),n=r.slice(10).match(/.{1,64}/g)||[],o=c=>n[c]?"0x"+n[c].slice(24):null,i=c=>n[c]?BigInt("0x"+n[c]):null,s=null,u=null,a=null;switch(t){case"0x095ea7b3":case"0x39509351":s=o(0),u=i(1);break;case"0x61f49ed6":case"0xeb5625d9":case"0xf9255c1f":a=o(0),s=o(1),u=i(2);break;case"0xd505accf":s=o(1),u=i(2);break;case"0x8fcbaf0c":{s=o(1),u=i(4)===0n?0n:(1n<<256n)-1n;break}case"0x87517c45":a=o(0),s=o(1),u=i(2);break;default:throw new Error(`approval selector ${t} is recognised but not decodable; refusing to bound it`)}if(s==null||u==null)throw new Error("invalid approve calldata");return{spender:je(s,"approval spender"),token:a==null?null:je(a,"approval token"),amount:Er(u,"approval amount",{allowZero:!0}),selector:t,additive:br.has(t)}}import{createHash as Ar,createHmac as Ri,timingSafeEqual as Di}from"node:crypto";var Sr=2,Ie=300*1e3,Je=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();function vr(e){let r=e==null||e===""?Ie:Number(e);return!Number.isFinite(r)||r<0?Ie:Math.min(r,Je)}function ke(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(ke).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${ke(e[t])}`).join(",")}}`}function Tr(e){let{prepareHash:r,prepareMac:t,note:n,...o}=e||{};return o}function Ir(e){let r=Tr(e);return Ar("sha256").update(ke(r)).digest("hex")}function Ve(e,{maxAgeMs:r=Ie,nowMs:t=Date.now(),providers:n=null,kinds:o=null,label:i="operator"}={}){if(!e||typeof e!="object")throw new Error(`${i}: prepared envelope object required`);if(e.oraclePrepared!==!0)throw new Error(`${i}: prepared integrity envelope missing \u2014 use an @oracle-agent/oracle prepare result`);if(Number(e.prepareVersion)!==Sr)throw new Error(`${i}: unsupported prepareVersion ${e.prepareVersion}`);let s=Ir(e);if(String(e.prepareHash||"")!==s)throw new Error(`${i}: prepareHash mismatch \u2014 payload was altered after prepare`);let u=Number(e.preparedAt),a=Number(e.expiresAt),c=vr(r),d=t-u,l=a-u;if(!Number.isFinite(d)||!Number.isFinite(a)||!Number.isFinite(l)||d<0||l<=0||l>Je||d>c||t>=a)throw new Error(`${i}: prepare envelope expired or clock-skewed (ageMs=${d}, max=${c})`);if(n&&!new Set(n).has(e.provider))throw new Error(`${i}: provider ${e.provider} not allowed here`);if(o&&!new Set(o).has(e.kind))throw new Error(`${i}: kind ${e.kind} not allowed here`);return!0}var ae=e=>String(e||"").toLowerCase(),kr=new Set(["chainId","from","to","data","value","gasLimit","gasPrice","maxFeePerGas","maxPriorityFeePerGas","l1FeeWei","operatorFeeWei","nonce","type","accessList","authorizationList","slippageBps","expiresAtMs"]),Nr=new Set([10n,8453n,84532n,42161n,421614n,11155420n,7777777n]);function G(e){try{return Nr.has(BigInt(e))}catch{return!1}}var _=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Ye=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},ee=(e,r,t,n=String)=>{if(!Array.isArray(r)||r.length===0)throw new Error(`policy: ${t} allowlist is empty`);if(!r.map(n).includes(n(e)))throw new Error(`policy: ${t} not allowed`)};function ge(e,r,{nowMs:t=Date.now(),networkFees:n,requireNetworkFees:o=!1}={}){if(!e||!r)throw new Error("policy: artifact and policy required");if(Object.keys(e).some(f=>!kr.has(f)))throw new Error("policy: unexpected EVM artifact field");if(e.gasPrice!=null&&(e.maxFeePerGas!=null||e.maxPriorityFeePerGas!=null))throw new Error("policy: ambiguous EVM fee fields");if(e.type!=null&&![0,1,2,4].includes(Number(e.type)))throw new Error("policy: unsupported EVM transaction type");if(Number(e.type)===4){if(!Array.isArray(e.authorizationList)||e.authorizationList.length===0||e.authorizationList.length>8)throw new Error("policy: type-4 requires 1-8 authorizationList entries");for(let[f,m]of e.authorizationList.entries()){if(!m||typeof m!="object")throw new Error(`policy: authorizationList[${f}] required`);ee(m.address,r.destinations,"destination",ae);try{if(BigInt(m.chainId)!==BigInt(e.chainId))throw new Error("policy: type-4 authorization chainId must match transaction")}catch(w){throw String(w?.message||"").includes("authorization chainId")?w:new Error("policy: type-4 authorization chainId must match transaction")}}if(String(e.data||"0x").toLowerCase()!=="0x")throw new Error("policy: type-4 calldata must be empty");if(_(e.value,"value")!==0n)throw new Error("policy: type-4 cannot transfer native value")}else if(e.authorizationList!=null)throw new Error("policy: authorizationList is only valid on type-4");let i=(f,m)=>{try{return BigInt(f)===BigInt(m)}catch{return String(f)===String(m)}};if(!Array.isArray(r.chains)||r.chains.length===0)throw new Error("policy: chain allowlist is empty");if(!r.chains.some(f=>i(f,e.chainId)))throw new Error("policy: chain not allowed");if(ee(e.to,r.destinations,"destination",ae),ee(String(e.data||"0x").slice(0,10),r.selectors,"selector",f=>String(f).toLowerCase()),ee(e.from,r.owners,"owner",ae),Y(e.data)){let f;try{f=Ge(e.data)}catch(w){throw new Error(`policy: malformed approval calldata: ${w?.message||w}`)}ee(f.spender,r.spenders,"spender",ae),ee(f.token||e.to,r.erc20Tokens,"ERC-20 token",ae);let m=_(r.maxApproval,"maxApproval");if(BigInt(f.amount)>m)throw new Error("policy: approval exceeds cap");if(f.additive)throw new Error("policy: additive approval cannot be bounded; use approve() with an absolute amount")}if(_(e.value,"value")>_(r.maxValueWei,"maxValueWei"))throw new Error("policy: value exceeds cap");let s=_(e.gasLimit,"gasLimit");if(s>_(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: gas exceeds cap");let u=e.maxFeePerGas??e.gasPrice,a=_(u,"feePerGas")*s,c=0n;try{if(G(e.chainId)&&(e.l1FeeWei===void 0||e.operatorFeeWei===void 0))throw new Error("missing")}catch{throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(e.l1FeeWei!==void 0&&(c+=_(e.l1FeeWei,"l1FeeWei")),e.operatorFeeWei!==void 0&&(c+=_(e.operatorFeeWei,"operatorFeeWei")),G(e.chainId)&&(o||n!=null)){if(!n||n.l1FeeWei===void 0||n.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let f=_(n.l1FeeWei,"estimated l1FeeWei")+_(n.operatorFeeWei,"estimated operatorFeeWei");if(c<f)throw new Error("policy: rollup fee attestation understates estimate")}if(a+c>_(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: fee exceeds cap");let l=Ye(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>l)throw new Error("policy: slippage attestation exceeds cap");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t)throw new Error("policy: artifact expired");let p=Ye(r.maxTtlMs??12e4,"maxTtlMs");if(p<=0||e.expiresAtMs-t>p)throw new Error("policy: artifact TTL exceeds cap");return!0}import{createHash as Ke}from"node:crypto";import{Address as Or,NETWORK as Cr,OutScript as Xe,RawTx as Lr,SigHash as Qe,TEST_NETWORK as Pr,Transaction as Br}from"@scure/btc-signer";var Ze=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},_r=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},Fr=e=>Array.isArray(e)||e instanceof Uint8Array?e.length>0:e!=null,Mr=e=>/^(bc1|tb1|bcrt1)/i.test(String(e)),K=e=>Mr(e)?String(e).toLowerCase():String(e),Ne=(e,r)=>Array.isArray(r)&&r.some(t=>K(t)===K(e)),$r=(e,r)=>Buffer.from(e||[]).equals(Buffer.from(r||[]));function Rr(e){let r=Buffer.from(Lr.encode(e)),t=Ke("sha256").update(r).digest();return Buffer.from(Ke("sha256").update(t).digest()).reverse().toString("hex")}function Dr(e){if(!e.nonWitnessUtxo)throw new Error("envelope: PSBT input nonWitnessUtxo required");if(Rr(e.nonWitnessUtxo)!==Buffer.from(e.txid||[]).toString("hex"))throw new Error("envelope: Bitcoin prevout txid mismatch");let r=e.nonWitnessUtxo.outputs?.[e.index];if(!r)throw new Error("envelope: Bitcoin prevout output missing");if(!e.witnessUtxo)throw new Error("envelope: PSBT input witness UTXO required");if(BigInt(e.witnessUtxo.amount)!==BigInt(r.amount)||!$r(e.witnessUtxo.script,r.script))throw new Error("envelope: Bitcoin witness UTXO mismatch");return r}function qr(e,r){if(e.action!=="transfer")throw new Error("envelope: BTC decoder requires transfer action");let t=e?.artifact;if(Object.keys(t).some(l=>!["network","psbt"].includes(l)))throw new Error("envelope: unexpected BTC artifact field");if(!Ne(t.network,r.chains))throw new Error("policy: chain not allowed");let n=["bitcoin","mainnet"].includes(String(t.network).toLowerCase())?Cr:["testnet","signet","regtest"].includes(String(t.network).toLowerCase())?Pr:null;if(!n)throw new Error("envelope: unsupported Bitcoin network");let o;try{o=Br.fromPSBT(_r(t.psbt,"PSBT"))}catch(l){throw new Error(`envelope: invalid PSBT: ${l?.message||l}`)}if(o.inputsLength===0||o.outputsLength===0)throw new Error("envelope: PSBT inputs and outputs required");let i=Or(n);for(let l=0;l<o.inputsLength;l++){let p=o.getInput(l);for(let w of["partialSig","tapKeySig","tapScriptSig","finalScriptSig","finalScriptWitness"])if(Fr(p[w]))throw new Error("envelope: signed or finalized PSBT refused");if(p.sighashType!==void 0&&p.sighashType!==Qe.DEFAULT&&p.sighashType!==Qe.ALL)throw new Error("envelope: Bitcoin sighash must bind all inputs and outputs");let f=Dr(p),m;try{let w=Xe.decode(f.script);if(!["wpkh"].includes(w.type))throw new Error("unsupported input");m=i.encode(w)}catch{throw new Error("envelope: unsupported Bitcoin input script")}if(!Ne(m,r.owners)||K(m)!==K(e.owner))throw new Error("envelope: Bitcoin input owner mismatch")}let s=new Set([e.owner,...r.changeAddresses||[]].map(l=>K(l))),u=0n,a=!1,c=[];for(let l=0;l<o.outputsLength;l++){let p=o.getOutput(l),f;try{f=i.encode(Xe.decode(p.script))}catch{throw new Error("envelope: unsupported Bitcoin output script")}let m=K(f);if(c.push(`${f}:${p.amount}`),m===K(e.destination)){a=!0,u+=p.amount;continue}if(Ne(f,r.destinations)){u+=p.amount;continue}if(!s.has(m))throw new Error("policy: Bitcoin output destination not allowed")}if(!a)throw new Error("envelope: Bitcoin destination mismatch");let d;try{d=o.fee}catch{throw new Error("envelope: PSBT fee cannot be decoded")}if(d<0n||d>Ze(r.maxFeeSats,"maxFeeSats"))throw new Error("policy: Bitcoin fee exceeds cap");if(u>Ze(r.maxValueSats,"maxValueSats"))throw new Error("policy: Bitcoin value exceeds cap");return Object.freeze({unit:"sats",value:u.toString(),notional:(u+d).toString(),fee:d.toString(),outputs:Object.freeze(c)})}function et(e,r){let{unit:t,value:n,notional:o,fee:i}=qr(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}import{createHash as Ce}from"node:crypto";import{base58 as at}from"@scure/base";import{getCompiledTransactionMessageDecoder as Ur}from"@solana/transaction-messages";var Le="11111111111111111111111111111111",Wr="ComputeBudget111111111111111111111111111111",Hr="So11111111111111111111111111111111111111112",st="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";var ct="ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL",jr=5000n,zr=2039280n,Gr=37095705934669439343138083508754565189542113879843219016388785533085940283555n,C=57896044618658097711785492504343953926634992332820282019728792003956564819949n,tt=19681161376707505956807079304988542015446066515923890162744021073123829784752n,rt=e=>Ce("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Jr=new Map([[rt("route"),{name:"route",prefixBytes:0}],[rt("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]),M=(e,r)=>{if(e==null||e==="")throw new Error(`policy: ${r} required`);try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`policy: ${r} must be a non-negative integer`)}},Vr=(e,r)=>{if(typeof e!="string"||e.length===0||e.length>131072||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`envelope: invalid ${r}`);let t=Buffer.from(e,"base64");if(t.toString("base64")!==e)throw new Error(`envelope: invalid ${r}`);return t},j=(e,r)=>Array.isArray(r)&&r.some(t=>String(t)===String(e)),R=e=>String(e||""),Yr=e=>Array.isArray(e.solMints)&&e.solMints.length?e.solMints:e.tokens,ye=e=>Ce("sha256").update(e).digest("hex");function xe(e,r){try{let t=Buffer.from(at.decode(String(e||"")));if(t.length!==32)throw new Error("wrong length");return t}catch{throw new Error(`envelope: invalid Solana ${r}`)}}function F(e){let r=e%C;return r>=0n?r:C+r}function U(e,r){let t=e;for(;r-- >0n;)t=t*t%C;return t}function Kr(e){let t=e*e%C*e%C,n=U(t,2n)*t%C,o=U(n,1n)*e%C,i=U(o,5n)*o%C,s=U(i,10n)*i%C,u=U(s,20n)*s%C,a=U(u,40n)*u%C,c=U(a,80n)*a%C,d=U(c,80n)*a%C,l=U(d,10n)*i%C;return U(l,2n)*e%C}function Xr(e,r){let t=F(r*r*r),n=F(t*t*r),o=Kr(e*n),i=F(e*t*o),s=F(r*i*i),u=i,a=F(i*tt),c=s===e,d=s===F(-e),l=s===F(-e*tt);return c&&(i=u),(d||l)&&(i=a),(F(i)&1n)===1n&&(i=F(-i)),!c&&!d?null:i}function Qr(e){if(!e||e.length!==32)return!1;let r=0n;for(let o=31;o>=0;o--)r=(r<<8n)+BigInt(o===31?e[o]&127:e[o]);let t=F(r*r),n=Xr(F(t-1n),F(Gr*t+1n));return n===null?!1:!(n===0n&&(e[31]&128)!==0)}function Zr(e,r){let t=Buffer.concat([...e,xe(r,"program id"),Buffer.from("ProgramDerivedAddress")]),n=Ce("sha256").update(t).digest();if(Qr(n))throw new Error("envelope: derived Solana program address is on curve");return at.encode(n)}function Pe(e,r,t=st){let n=[xe(e,"owner"),xe(t,"token program"),xe(r,"mint")];for(let o=255;o>=0;o--)try{return Zr([...n,Buffer.from([o])],ct)}catch(i){if(!/on curve/.test(String(i?.message||i)))throw i}throw new Error("envelope: unable to derive associated token account")}function en(e,r){return(r.accountIndices||[]).map(t=>R(e.staticAccounts[t]))}function se(e){return Buffer.from(e.data||[])}function tn(e,r){return R(e.staticAccounts[r.programAddressIndex])}function ut(e,r){return Number(r)<e.header.numSignerAccounts}function rn(e,r){let t=e.header.numSignerAccounts,n=e.header.numReadonlySignerAccounts,o=e.header.numReadonlyNonSignerAccounts,i=e.staticAccounts.length;return Number(r)<t?Number(r)<t-n:Number(r)<i-o}function ce(e){return e.accountIndices||[]}function Oe(e,r){if(!Array.isArray(e)||!e.length)throw new Error(`policy: ${r} allowlist required`);return e.map(String)}function nt(e,r){let t=ce(r).map(n=>{let o=ut(e,n)?"s":"n",i=rn(e,n)?"w":"r";return`${n}:${R(e.staticAccounts[n])}:${o}:${i}`});return ye(Buffer.from(t.join(`
+`)))}function ot(e,r,t){if(r+8>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readBigUInt64LE(r)}function nn(e,r,t){if(r+2>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt16LE(r)}function on(e,r,t){if(r+4>e.length)throw new Error(`envelope: malformed Jupiter ${t}`);return e.readUInt32LE(r)}function an(e,r,t){let n=t.maxJupiterRoutePlanSteps===void 0?1:Number(t.maxJupiterRoutePlanSteps);if(!Number.isSafeInteger(n)||n<1)throw new Error("policy: maxJupiterRoutePlanSteps must be a positive integer");if(r<1||r>n)throw new Error("policy: Jupiter route-plan step count exceeds reviewed cap");let o=Array.isArray(t.jupiterRouteVariants)?t.jupiterRouteVariants.map(Number):[];if(!o.length)throw new Error("policy: Jupiter route variant allowlist required");let i=t.jupiterRouteVariantPayloadBytes||{},s=0,u=0,a=[];for(let c=0;c<r;c++){if(s>=e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let d=e[s++];if(!o.includes(d))throw new Error("policy: Jupiter route variant not allowed");if(!Object.hasOwn(i,String(d)))throw new Error("policy: Jupiter route variant payload size required");let l=Number(i[String(d)]);if(!Number.isSafeInteger(l)||l<0||l>16)throw new Error("policy: Jupiter route variant payload size invalid");if(s+l+3>e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");let p=e.subarray(s,s+l);s+=l;let f=p.toString("hex"),m=t.jupiterRouteVariantPayloads?.[String(d)];if(!Array.isArray(m)||!m.map(String).includes(f))throw new Error("policy: Jupiter route variant payload not allowed");let w=e[s++],h=e[s++],g=e[s++];if(w<1||w>100)throw new Error("envelope: Jupiter route-plan percent invalid");if(h!==c||g!==c+1)throw new Error("envelope: unsupported Jupiter route-plan token index");u+=w,a.push(Object.freeze({swapVariant:d,variantPayloadHex:f,percent:w,inputIndex:h,outputIndex:g}))}if(s!==e.length)throw new Error("envelope: opaque or unsupported Jupiter route-plan payload");if(u!==100*r)throw new Error("envelope: Jupiter route-plan percent total mismatch");return Object.freeze(a)}function sn(e,r){let t=se({data:e}),n=t.subarray(0,8).toString("hex"),o=Jr.get(n);if(!o)throw new Error("envelope: unsupported Jupiter instruction discriminator");let i=19,s=o.prefixBytes===1?t[8]:null;if(o.prefixBytes===1&&t.length<9)throw new Error("envelope: malformed Jupiter shared route payload");let u=8+o.prefixBytes,a=u+4,c=t.length-i;if(c<=a)throw new Error("envelope: malformed Jupiter route payload");let d=on(t,u,"route plan length"),l=t.subarray(a,c),p=an(l,d,r);return Object.freeze({instruction:o.name,routeId:s,routePlanSteps:d,routePlan:p,routePlanHash:ye(l),inAmount:ot(t,c,"in_amount"),quotedOutAmount:ot(t,c+8,"quoted_out_amount"),slippageBps:nn(t,c+16,"slippage_bps"),platformFeeBps:t[c+18],instructionHash:ye(t)})}function cn(e,r,t){let n=en(e,r),o=(i,s)=>{let u=n[i];if(!u)throw new Error(`envelope: Jupiter ${s} account missing`);return u};if(t.instruction==="route"){if(n.length<9)throw new Error("envelope: Jupiter route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),userTransferAuthority:o(1,"userTransferAuthority"),userSourceTokenAccount:o(2,"userSourceTokenAccount"),userDestinationTokenAccount:o(3,"userDestinationTokenAccount"),destinationTokenAccount:o(4,"destinationTokenAccount"),destinationMint:o(5,"destinationMint"),platformFeeAccount:o(6,"platformFeeAccount"),eventAuthority:o(7,"eventAuthority"),program:o(8,"program")}}if(t.instruction==="shared_accounts_route"){if(n.length<13)throw new Error("envelope: Jupiter shared route account layout incomplete");return{tokenProgram:o(0,"tokenProgram"),programAuthority:o(1,"programAuthority"),userTransferAuthority:o(2,"userTransferAuthority"),userSourceTokenAccount:o(3,"sourceTokenAccount"),programSourceTokenAccount:o(4,"programSourceTokenAccount"),programDestinationTokenAccount:o(5,"programDestinationTokenAccount"),userDestinationTokenAccount:o(6,"destinationTokenAccount"),sourceMint:o(7,"sourceMint"),destinationMint:o(8,"destinationMint"),platformFeeAccount:o(9,"platformFeeAccount"),token2022Program:o(10,"token2022Program"),eventAuthority:o(11,"eventAuthority"),program:o(12,"program")}}throw new Error("envelope: unsupported Jupiter account layout")}function it(e,r){return e&&e!==r?e:null}function $(e,r,t){let n=R(e.staticAccounts[r]);if(!n)throw new Error(`envelope: Jupiter ${t} missing`);return n}function un(e,r){let t=se(e);if(t.length===5&&t[0]===2){let n=t.readUInt32LE(1),o=r.maxComputeUnits===void 0?14e5:Number(r.maxComputeUnits);if(!Number.isSafeInteger(o)||o<=0)throw new Error("policy: maxComputeUnits must be positive");if(n>o)throw new Error("policy: Jupiter compute unit limit exceeds cap");return 0n}throw t.length===9&&t[0]===3?new Error("policy: Jupiter priority fee not allowed"):new Error("envelope: unsupported Jupiter compute-budget helper")}function dn(e,r,t,n,o,i){let s=se(r);if(s.length!==1||s[0]!==1)throw new Error("envelope: unsupported Jupiter ATA helper");let u=ce(r);if(u.length!==6)throw new Error("envelope: malformed Jupiter ATA helper");let a=$(e,u[0],"ATA payer"),c=$(e,u[1],"ATA account"),d=$(e,u[2],"ATA owner"),l=$(e,u[3],"ATA mint"),p=$(e,u[4],"ATA system program"),f=$(e,u[5],"ATA token program");if(a!==t.owner)throw new Error("envelope: Jupiter ATA payer must equal owner");if(d!==t.owner)throw new Error("envelope: Jupiter ATA owner must equal owner");if(p!==Le)throw new Error("envelope: Jupiter ATA system program mismatch");if(f!==o)throw new Error("envelope: Jupiter ATA token program mismatch");if(l!==n.inputMint&&l!==n.outputMint)throw new Error("envelope: Jupiter ATA mint mismatch");if(c!==Pe(t.owner,l,o))throw new Error("envelope: Jupiter ATA account mismatch");return{ata:c,debit:i}}function ln(e,r,t,n,o){let i=ce(r),s=se(r);if(i.length!==2||s.length!==12||s.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Jupiter system helper");let u=$(e,i[0],"wrap payer"),a=$(e,i[1],"wrap target"),c=s.readBigUInt64LE(4);if(u!==t.owner||a!==n)throw new Error("envelope: unsupported Jupiter wrap transfer");if(c!==o)throw new Error("envelope: Jupiter wrap transfer amount mismatch");return c}function fn(e,r,t,n){let o=ce(r),i=se(r);if(i.length!==1)throw new Error("envelope: unsupported Jupiter token helper");if(i[0]===17){if(o.length!==1||$(e,o[0],"syncNative account")!==n)throw new Error("envelope: Jupiter syncNative account mismatch");return{kind:"syncNative"}}if(i[0]===9){if(o.length!==3)throw new Error("envelope: malformed Jupiter closeAccount helper");let s=$(e,o[0],"closeAccount source"),u=$(e,o[1],"closeAccount destination"),a=$(e,o[2],"closeAccount authority");if(s!==n||u!==t.owner||a!==t.owner)throw new Error("envelope: Jupiter closeAccount must return to owner");return{kind:"closeAccount"}}throw new Error("envelope: unsupported Jupiter token helper")}function pn(e,r,t,n,o,i,s){let u=Pe(r.owner,r.artifact.inputMint,s);if(o.userSourceTokenAccount!==u)throw new Error("envelope: Jupiter source token account is not owner ATA");let a=M(t.jupiterAtaRentLamports,"jupiterAtaRentLamports");if(a<zr)throw new Error("policy: Jupiter ATA rent below the token-account rent-exempt minimum");let c=new Map,d=0n,l=!1,p=!1;for(let f of e.instructions){if(f===n)continue;let m=tn(e,f);if(m===Wr)un(f,t);else if(m===ct){let{ata:w,debit:h}=dn(e,f,r,r.artifact,s,a);c.set(w,h)}else if(m===Le)d+=ln(e,f,r,u,i);else if(m===s){let w=fn(e,f,r,u);w.kind==="syncNative"&&(l=!0),w.kind==="closeAccount"&&(p=!0)}else throw new Error("envelope: unsupported Jupiter helper instruction")}if(d>0n&&(!l||!p))throw new Error("envelope: Jupiter native wrap helpers incomplete");if(d!==0n&&d!==i)throw new Error("envelope: Jupiter native wrap amount mismatch");return[...c.values()].reduce((f,m)=>f+m,0n)}function mn(e){let r;try{r=Ur().decode(Vr(e.messageBase64,"Solana message"))}catch(t){throw new Error(`envelope: invalid Solana message: ${t?.message||t}`)}if(r.version!=="legacy"&&Array.isArray(r.addressTableLookups)&&r.addressTableLookups.length)throw new Error("envelope: unresolved Solana address tables refused");return r}function wn(e,r,t){if(e.header.numSignerAccounts!==1||R(e.staticAccounts[0])!==r.owner||!j(r.owner,t.owners))throw new Error("envelope: Solana owner mismatch");if(!Array.isArray(e.instructions)||e.instructions.length===0)throw new Error("envelope: Solana instructions required");let n=[];for(let o of e.instructions){let i=R(e.staticAccounts[o.programAddressIndex]);if(!i||!j(i,t.programs))throw new Error("policy: Solana program not allowed");n.push(i)}return n}function hn(e,r,t){let n=M(t.lamportsPerSignature,"lamportsPerSignature");if(n<jr)throw new Error("policy: Solana per-signature fee is below the network minimum");let o=t.maxLamportsPerSignature===void 0?n:M(t.maxLamportsPerSignature,"maxLamportsPerSignature");if(n>o)throw new Error("policy: Solana per-signature fee exceeds cap");let i=BigInt(e.header.numSignerAccounts),s=i*n,u=i*o;if(r.exactFeeLamports!==void 0){let c=M(r.exactFeeLamports,"exactFeeLamports");if(c<s)throw new Error("policy: Solana exact fee below the base signature fee");if(c>u)throw new Error("policy: Solana exact fee exceeds the per-signature bound")}let a=u;if(a>M(t.maxFeeLamports,"maxFeeLamports"))throw new Error("policy: Solana fee exceeds cap");return a}function gn(e,r,t,n){let o=0n,i=!1;for(let s of e.instructions){if(R(e.staticAccounts[s.programAddressIndex])!==Le)throw new Error("envelope: unsupported Solana program decoder");let a=s.accountIndices||[];if(a.length!==2||R(e.staticAccounts[a[0]])!==r.owner)throw new Error("envelope: Solana transfer owner mismatch");let c=R(e.staticAccounts[a[1]]);if(c!==r.destination||!j(c,t.destinations))throw new Error("envelope: Solana destination mismatch");let d=Buffer.from(s.data||[]);if(d.length!==12||d.readUInt32LE(0)!==2)throw new Error("envelope: unsupported Solana system instruction");o+=d.readBigUInt64LE(4),i=!0}if(!i)throw new Error("envelope: Solana destination mismatch");if(o>M(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:o,programs:n}}function xn(e,r,t,n){let o=r.artifact;if(o.provider!=="jupiter")throw new Error("envelope: Solana swap provider must be jupiter");if(o.inputMint!==Hr)throw new Error("envelope: Jupiter local signer requires native SOL input");if(o.outputMint!==r.destination||!j(o.outputMint,t.destinations))throw new Error("envelope: Jupiter output mint destination mismatch");let i=Yr(t);if(!j(o.inputMint,i)||!j(o.outputMint,i))throw new Error("policy: Solana token not allowed");let s=M(o.inAmount,"inAmount"),u=M(o.outAmount,"outAmount"),a=M(o.otherAmountThreshold,"otherAmountThreshold");if(s<=0n||s>M(t.maxPerTradeLamports,"maxPerTradeLamports"))throw new Error("policy: Solana swap amount exceeds per-trade cap");if(s>M(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");if(u<=0n||a<=0n||a>u)throw new Error("envelope: Jupiter quote floor invalid");if(Number(o.slippageBps)!==Number(r.slippageBps))throw new Error("policy: Solana slippage mismatch");let c=R(o.jupiterProgram);if(!c||!j(c,t.programs)||!n.includes(c))throw new Error("policy: Jupiter program not allowed or absent");let d=e.instructions.filter(b=>R(e.staticAccounts[b.programAddressIndex])===c);if(d.length!==1)throw new Error("envelope: exactly one Jupiter swap instruction required");let l=d[0],p=sn(l.data,t);if(p.instruction==="shared_accounts_route"){let b=Array.isArray(t.jupiterSharedRouteIds)?t.jupiterSharedRouteIds.map(Number):[];if(!b.length)throw new Error("policy: Jupiter shared route id allowlist required");if(!b.includes(Number(p.routeId)))throw new Error("policy: Jupiter shared route id not allowed")}else if(p.routeId!=null)throw new Error("envelope: unexpected Jupiter shared route id");if(!Oe(t.jupiterRoutePlanHashes,"Jupiter route-plan hash").includes(p.routePlanHash))throw new Error("policy: Jupiter route-plan hash not allowed");if(p.inAmount!==s)throw new Error("envelope: Jupiter route in_amount mismatch");if(p.quotedOutAmount!==u)throw new Error("envelope: Jupiter route quoted_out_amount mismatch");if(p.slippageBps!==Number(o.slippageBps))throw new Error("envelope: Jupiter route slippage mismatch");let f=p.quotedOutAmount-p.quotedOutAmount*BigInt(p.slippageBps)/10000n;if(a!==f)throw new Error("envelope: Jupiter otherAmountThreshold does not match serialized min-out");if(p.platformFeeBps!==0)throw new Error("policy: Jupiter platform fee not allowed");let m=cn(e,l,p),w=ce(l),h=p.instruction==="shared_accounts_route"?2:1;if(!ut(e,w[h]))throw new Error("envelope: Jupiter transfer authority must be signer");if(m.program!==c)throw new Error("envelope: Jupiter program account mismatch");if(m.userTransferAuthority!==r.owner)throw new Error("envelope: Jupiter transfer authority must equal owner");if(m.destinationMint!==o.outputMint)throw new Error("envelope: Jupiter destination mint mismatch");if(m.sourceMint!==void 0&&m.sourceMint!==o.inputMint)throw new Error("envelope: Jupiter source mint mismatch");let g=Array.isArray(t.tokenPrograms)&&t.tokenPrograms.length?t.tokenPrograms:[st];if(!j(m.tokenProgram,g))throw new Error("policy: Solana token program not allowed");let A=Pe(r.owner,o.outputMint,m.tokenProgram);if(m.userDestinationTokenAccount!==A)throw new Error("envelope: Jupiter destination token account is not owner ATA");let E=it(m.destinationTokenAccount,c);if(E&&E!==A)throw new Error("envelope: Jupiter optional destination account redirects proceeds");if(it(m.platformFeeAccount,c))throw new Error("policy: Jupiter platform fee account not allowed");if(!Oe(t.jupiterRouteAccountHashes,"Jupiter route account hash").includes(nt(e,l)))throw new Error("policy: Jupiter route account hash not allowed");let T=ye(Buffer.from([p.instruction,p.routeId??"",p.routePlanHash,nt(e,l)].join(`
+`)));if(!Oe(t.jupiterRouteReviewHashes,"Jupiter route review hash").includes(T))throw new Error("policy: Jupiter route review hash not allowed");let N=pn(e,r,t,l,m,s,m.tokenProgram),O=s+N;if(O>M(t.maxValueLamports,"maxValueLamports"))throw new Error("policy: Solana value exceeds cap");return{value:O,programs:n}}function yn(e,r){if(e.action!=="transfer"&&e.action!=="swap")throw new Error("envelope: Solana decoder requires transfer or swap action");let t=e?.artifact,n=e.action==="transfer"?["cluster","messageBase64","exactFeeLamports"]:["cluster","provider","messageBase64","exactFeeLamports","inputMint","outputMint","inAmount","outAmount","otherAmountThreshold","slippageBps","jupiterProgram"];if(Object.keys(t||{}).some(a=>!n.includes(a)))throw new Error("envelope: unexpected Solana artifact field");if(!j(t.cluster,r.chains))throw new Error("policy: chain not allowed");let o=mn(t),i=wn(o,e,r),s=e.action==="transfer"?gn(o,e,r,i):xn(o,e,r,i),u=hn(o,t,r);return Object.freeze({unit:"lamports",value:s.value.toString(),notional:(s.value+u).toString(),fee:u.toString(),programs:Object.freeze(s.programs)})}function dt(e,r){let{unit:t,value:n,notional:o,fee:i}=yn(e,r);return Object.freeze({unit:t,value:n,notional:o,fee:i})}var ra=64*1024;var bn=1e8;function Be(e){if(typeof e!="string"||!/^#(?:0|[1-9]\d*)$/.test(e))return null;let r=Number(e.slice(1));if(!Number.isSafeInteger(r)||r<0)return null;let t=r%10;if(t!==0&&t!==1)return null;let n=Math.floor(r/10),o=bn+r;return Number.isSafeInteger(o)?{encoding:r,outcome:n,side:t,coin:`#${r}`,assetId:o}:null}var An=new Set(["https://api.hyperliquid.xyz/exchange","https://api.hyperliquid-testnet.xyz/exchange"]),Sn=new Set(["perp-order","hip3-order","hip4-order","perp-bracket"]),vn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Tn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"}),J=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`hl: bounded ${r} required`);return e};function In(e,r){let t=e.toString().padStart(r+1,"0");if(r===0)return t;let n=t.slice(0,-r),o=t.slice(-r).replace(/0+$/,"");return o?`${n}.${o}`:n}function lt(e,r){let t=v(e,`hl: ${r}`);if(!/^\d+(?:\.\d+)?$/.test(t))throw new Error(`hl: ${r} must be a positive decimal`);let[n,o=""]=t.split("."),i=BigInt(n+o);if(i<=0n)throw new Error(`hl: ${r} must be positive`);return{raw:i,decimals:o.length}}function W(e,r){if(e===null||typeof e=="string"||typeof e=="boolean")return JSON.stringify(e);if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`hl: ${r} must be finite JSON`);return JSON.stringify(e)}if(Array.isArray(e))return`[${e.map(n=>W(n,r)).join(",")}]`;if(!e||typeof e!="object")throw new Error(`hl: ${r} must be structured JSON`);return`{${Object.keys(e).sort().map(n=>`${JSON.stringify(n)}:${W(e[n],r)}`).join(",")}}`}function kn(e){if(typeof e.orderType!="string"||!e.orderType)throw new Error("hl: order type must be a string");let r=e.orderType,t=e.orderWire;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: declared order wire required");if(r==="limit"){let i=t.limit?.tif;if(!["Gtc","Ioc","Alo"].includes(i)||W(t,"declared order type")!==W({limit:{tif:i}},"expected order type"))throw new Error("hl: limit order type must match its wire shape");return}if(r==="market"){if(W(t,"declared order type")!==W({limit:{tif:"Ioc"}},"expected order type"))throw new Error("hl: market order type must match its IOC wire shape");return}let n={stopMarket:{isMarket:!0,tpsl:"sl"},stopLimit:{isMarket:!1,tpsl:"sl"},takeProfitMarket:{isMarket:!0,tpsl:"tp"},takeProfitLimit:{isMarket:!1,tpsl:"tp"}}[r];if(!n)throw new Error("hl: unsupported declared order type");let o=t.trigger?.triggerPx;if(o==null||W(t,"declared order type")!==W({trigger:{isMarket:n.isMarket,triggerPx:o,tpsl:n.tpsl}},"expected order type"))throw new Error("hl: trigger order type must match its wire shape")}function Nn(e,r,t){let n=lt(e.s,"signed size"),o=lt(e.p,"signed price"),i=n.decimals+o.decimals,s=n.raw*o.raw,u=I(r.notionalUsd,i,"hl: notionalUsd");if(u<=0n||s!==u)throw new Error("hl: signed notional must match");let a=I(t.maxNotionalUsd,i,"hl: maxNotionalUsd");if(s>a)throw new Error("hl: notional exceeds cap")}function On(e,r){let t=e.action.builder;if(t==null){if(e.builder!=null)throw new Error("hl: declared builder requires a signed builder");return}if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: signed order builder must be structured");let n=J(t.b,"order builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(n))throw new Error("hl: order builder address required");if(P(e.builder||"","hl: builder").toLowerCase()!==n)throw new Error("hl: signed order builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(u=>String(u).toLowerCase()):[]).includes(n))throw new Error("hl: order builder not allowed");let i=H(t.f,"hl: signed order builder fee");if(i<0n)throw new Error("hl: signed order builder fee must be non-negative");let s=I(r.maxBuilderFeeBps??0,1,"hl: maxBuilderFeeBps");if(i>s)throw new Error("hl: order builder fee exceeds cap")}function ft(e,r,t){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: signed asset must match assetId");if(typeof e.b!="boolean"||e.b!==(r.side==="buy"))throw new Error("hl: signed side must match exactly");if(v(e.s,"hl: signed size")!==v(r.size,"hl: size"))throw new Error("hl: signed size must match");if(v(e.p,"hl: signed price")!==v(r.price,"hl: price"))throw new Error("hl: signed price must match");if(typeof r.reduceOnly!="boolean"||typeof e.r!="boolean"||e.r!==r.reduceOnly)throw new Error("hl: signed reduceOnly must match exactly");if(W(e.t,"signed order type")!==W(r.orderWire,"declared order type"))throw new Error("hl: signed order type must match declared order type");let n=Object.prototype.hasOwnProperty.call(e,"c");if(r.clientOrderId==null){if(n)throw new Error("hl: undeclared signed client order id")}else if(!n||typeof e.c!="string"||e.c!==r.clientOrderId)throw new Error("hl: signed client order id must match")}function pt(e,r,t,n,o){if(!Number.isSafeInteger(e.a)||e.a!==t)throw new Error("hl: bracket protection asset must match");if(typeof e.b!="boolean"||e.b===(r.side==="buy"))throw new Error("hl: bracket protection side must oppose entry");if(v(e.s,"hl: bracket protection size")!==v(r.size,"hl: size"))throw new Error("hl: bracket protection size must match");if(v(e.p,"hl: bracket protection price")!==v(n,"hl: protection price"))throw new Error("hl: bracket protection price must match");if(e.r!==!0)throw new Error("hl: bracket protection must be reduce-only");let i=e.t?.trigger;if(!i||i.isMarket!==!0||i.tpsl!==o)throw new Error("hl: bracket protection trigger must match");if(v(i.triggerPx,"hl: triggerPx")!==v(n,"hl: protection price"))throw new Error("hl: bracket protection trigger must match")}function Cn(e){let r=String(e||"").replace(/\/$/,"");if(!An.has(r))throw new Error("hl: submitTo must be the official Hyperliquid exchange");return r}function _e(e){return Be(e)!=null}function Ln(e,r){let t=String(e||""),n=Array.isArray(r.coins)?r.coins.map(String):[];if(_e(t)){if(r.hip4!==!0)throw new Error("hl: HIP-4 outcome orders are disabled without explicit policy enablement");if(n.includes(t)||n.includes("#*")||n.includes("*")||n.length===0)return!0;throw new Error("hl: outcome coin not allowed")}if(n.length&&!n.includes(t)&&!n.includes("*"))throw new Error("hl: coin not allowed");return!0}function Pn(e,r,t){let n=Array.isArray(t.hlMarkets)?t.hlMarkets:[];if(n.length){if(!n.some(s=>{if(typeof s=="string"){let[u,a]=String(s).split(":");return u===e&&Number(a)===r}return String(s?.coin)===e&&Number(s?.assetId)===r}))throw new Error("hl: coin/assetId pair not allowed");return!0}if(_e(e)){let i=Array.isArray(t.coins)?t.coins.map(String):[];if(i.includes("#*")||i.includes("*")||i.length===0)return!0;throw new Error("hl: restricted coin policy requires hlMarkets pairs")}let o=Array.isArray(t.coins)?t.coins.map(String):[];if(o.length&&!o.includes("*"))throw new Error("hl: restricted coin policy requires hlMarkets pairs");return!0}function mt(e,r){if(e?.surface!=="hl")throw new Error("hl: surface hl required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("hl: structured artifact required");let n=J(t.kind,"kind",48),o=vn[n];if(!o)throw new Error("hl: unsupported Hyperliquid kind");if(e.action!==o)throw new Error("hl: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="hyperliquid")throw new Error("hl: destination must be hyperliquid");if(!/^0x[0-9a-fA-F]{40}$/.test(String(e.owner||"")))throw new Error("hl: owner required");let i=Cn(t.submitTo);if(Object.prototype.hasOwnProperty.call(t,"vaultAddress"))throw new Error("hl: vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t,"expiresAfter"))throw new Error("hl: expiresAfter is not public");let s=Number(t.nonce);if(!Number.isSafeInteger(s)||s<=0)throw new Error("hl: nonce must be a positive integer");if(!t.action||typeof t.action!="object")throw new Error("hl: signed action required");if(Object.prototype.hasOwnProperty.call(t.action,"vaultAddress"))throw new Error("hl: action vaultAddress is not public");if(Object.prototype.hasOwnProperty.call(t.action,"expiresAfter"))throw new Error("hl: action expiresAfter is not public");if(t.action.type!==Tn[n])throw new Error("hl: action type must match kind");let u=t.notionalUsd??0;if(Sn.has(n)||n==="perp-cancel"||n==="perp-leverage"||n==="perp-isolated-margin"){let a=J(t.coin,"coin",64),c=t.assetId??t.assetIndex;if(!Number.isSafeInteger(c)||c<0)throw new Error("hl: assetId required");if(n==="hip4-order"||c>=1e8){let d=Be(a);if(!d||d.coin!==a)throw new Error("hl: HIP-4 actions must use a canonical outcome coin");if(d.assetId!==c)throw new Error("hl: HIP-4 coin must bind to its canonical assetId")}if(Ln(a,r),Pn(a,c,r),n==="hip4-order"&&!_e(a))throw new Error("hl: HIP-4 orders must use an outcome coin");if(n==="perp-order"||n==="hip3-order"||n==="hip4-order"||n==="perp-bracket"){if(t.side!=="buy"&&t.side!=="sell")throw new Error("hl: side must be buy or sell");if(t.action.type!=="order"||!Array.isArray(t.action.orders))throw new Error("hl: signed orders are required");kn(t);let d=t.action.orders;if(n==="perp-bracket"){let l=t.takeProfitPx,p=t.stopLossPx,f=1+(l==null?0:1)+(p==null?0:1);if(f<2||d.length!==f||t.grouping!=="normalTpsl"||t.action.grouping!==t.grouping)throw new Error("hl: bracket must contain exactly the declared entry and protection legs");ft(d[0],t,c);let m=1;l!=null&&pt(d[m++],t,c,l,"tp"),p!=null&&pt(d[m],t,c,p,"sl")}else{if(d.length!==1)throw new Error("hl: exactly one signed order is required");if(t.grouping!=="na"||t.action.grouping!==t.grouping)throw new Error("hl: signed grouping must match declared grouping");ft(d[0],t,c)}Nn(d[0],t,r),On(t,r),u=v(t.notionalUsd,"hl: notionalUsd")}if(n==="perp-leverage"){let d=t.leverage;if(!Number.isSafeInteger(d)||d<1)throw new Error("hl: leverage must be a positive integer");let l=r.maxLeverage==null?50:r.maxLeverage;if(typeof l!="number"||!Number.isSafeInteger(l)||l<1)throw new Error("hl: maxLeverage must be a positive integer");if(d>l)throw new Error("hl: leverage exceeds cap")}if(n==="perp-cancel"){let d=t.action.cancels;if(!Array.isArray(d)||d.length!==1)throw new Error("hl: exactly one cancel is required");if(!Number.isSafeInteger(d[0].a)||d[0].a!==c)throw new Error("hl: signed cancel asset must match assetId");if(!Number.isSafeInteger(t.orderId)||t.orderId<0)throw new Error("hl: declared order id required");if(!Number.isSafeInteger(d[0].o)||d[0].o!==t.orderId)throw new Error("hl: signed cancel order id must match")}if(n==="perp-leverage"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==c)throw new Error("hl: signed leverage asset must match assetId");if(!Number.isSafeInteger(t.action.leverage)||t.action.leverage!==t.leverage)throw new Error("hl: signed leverage must match");if(!["cross","isolated"].includes(t.marginMode))throw new Error("hl: declared margin mode required");let d=t.marginMode==="cross";if(typeof t.action.isCross!="boolean"||t.action.isCross!==d)throw new Error("hl: signed isCross must match declared margin mode")}if(n==="perp-isolated-margin"){if(!Number.isSafeInteger(t.action.asset)||t.action.asset!==c)throw new Error("hl: signed margin asset must match assetId");let d=J(t.usd,"margin usd",64),l=I(d,6,"hl: margin usd");if(H(t.action.ntli,"hl: signed margin ntli")!==l)throw new Error("hl: signed margin amount must match usd");if(typeof t.isBuy!="boolean"||t.action.isBuy!==t.isBuy)throw new Error("hl: signed margin isBuy must match");let f=I(r.maxNotionalUsd,6,"hl: maxNotionalUsd"),m=l<0n?-l:l;if(m>f)throw new Error("hl: margin notional exceeds cap");u=In(m,6)}}if(n==="builder-fee-approval"){let a=J(t.builder,"builder",42).toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(a))throw new Error("hl: builder address required");if(J(t.action.builder,"signed builder",42).toLowerCase()!==a)throw new Error("hl: signed builder must match");if(!(Array.isArray(r.hlBuilders)?r.hlBuilders.map(m=>String(m).toLowerCase()):[]).includes(a))throw new Error("hl: builder not allowed");let d=J(t.maxFeeRate,"maxFeeRate",32);if(J(t.action.maxFeeRate,"signed maxFeeRate",32)!==d)throw new Error("hl: signed builder fee must match");if(!/^\d+(?:\.\d+)?%$/.test(d))throw new Error("hl: builder fee rate must be a percent");let l=I(d.slice(0,-1),12,"hl: builder fee percent"),p=I(r.maxBuilderFeeBps,12,"hl: maxBuilderFeeBps");if(p<0n||l*100n>p)throw new Error("hl: builder fee exceeds cap");if(Number(t.action.nonce)!==s)throw new Error("hl: signed builder nonce must match");let f=i.includes("testnet")?"Testnet":"Mainnet";if(t.hyperliquidChain!==f||t.action.hyperliquidChain!==t.hyperliquidChain)throw new Error("hl: signed Hyperliquid chain must match destination");if(t.signatureChainId!=="0x66eee"||t.action.signatureChainId!==t.signatureChainId)throw new Error("hl: signed signature chain id must match")}if(n.startsWith("hype-stake")||n==="hype-delegate"||n==="hype-undelegate"){if(n==="hype-delegate"||n==="hype-undelegate"){let a=n==="hype-undelegate";if(typeof t.action.isUndelegate!="boolean"||t.action.isUndelegate!==a)throw new Error("hl: signed isUndelegate must match delegate kind exactly")}if(r.maxHypeWei!=null&&BigInt(String(t.action.wei??t.caps?.amountHype??"0"))>BigInt(r.maxHypeWei))throw new Error("hl: stake amount exceeds cap")}return Object.freeze({unit:"usd",value:String(u??t.action.wei??0),notional:String(u??0),fee:"0",kind:n,actionType:t.action.type,amount:String(t.action.wei??u??0),coin:t.coin||null,submitTo:i})}var ma="0x"+"00".repeat(32);function Bn(e){let r=typeof e=="bigint"?e:B(e,"poly: atomicUsdc");if(r<=0n)throw new Error("poly: order amounts must be positive integer micro-units");let t=r/1000000n,n=(r%1000000n).toString().padStart(6,"0").replace(/0+$/,"");return n?`${t.toString()}.${n}`:t.toString()}function wt(e,r){let t=B(e.makerAmount,"poly: makerAmount"),n=B(e.takerAmount,"poly: takerAmount");return Bn(r==="BUY"?t:n)}var _n=new Set(["https://clob.polymarket.com/order"]),ue=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),xa=Object.freeze(ue.map(e=>e[0])),Fn=new Set(["0xe111180000d2663c0091e4f400237545b87b996b","0xe2222d279d744050d28e00520010520000310f59"]),Mn="0xe111180000d2663c0091e4f400237545b87b996b",$n="0xe2222d279d744050d28e00520010520000310f59",ht=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`poly: bounded ${r} required`);return e};function gt(e){let r=String(e||"").replace(/\/$/,"");if(!_n.has(r))throw new Error("poly: submitTo must be the official Polymarket CLOB");return r}function xt(e){let r=P(e,"poly: exchange").toLowerCase();if(!Fn.has(r))throw new Error("poly: verifyingContract must be an official CTF Exchange");return r}function yt(e,r){if(e?.surface!=="poly")throw new Error("poly: surface poly required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("poly: structured artifact required");let n=ht(t.kind,"kind",48);if(n!=="poly-order")throw new Error("poly: unsupported Polymarket kind");if(e.action!=="order")throw new Error("poly: surface/action/kind mismatch");if(P(e.destination,"poly: destination").toLowerCase()!=="polymarket")throw new Error("poly: destination must be polymarket");if(gt(t.submitTo),t.chainId!==137)throw new Error("poly: chainId must be Polygon 137");let o=t.domain;if(!o||typeof o!="object")throw new Error("poly: EIP-712 domain required");if(o.name!=="Polymarket CTF Exchange"||o.version!=="2"||o.chainId!==137)throw new Error("poly: EIP-712 domain must be official CTF Exchange v2 on Polygon");if(xt(o.verifyingContract),xt(t.exchange),P(o.verifyingContract,"poly: verifyingContract").toLowerCase()!==P(t.exchange,"poly: exchange").toLowerCase())throw new Error("poly: exchange/domain mismatch");if(typeof t.negRisk!="boolean")throw new Error("poly: negRisk must be a boolean");let i=t.negRisk?$n:Mn;if(P(t.exchange,"poly: exchange").toLowerCase()!==i)throw new Error("poly: negRisk/exchange mismatch");let s=t.message||t.value;if(!s||typeof s!="object")throw new Error("poly: signed order message required");let u=t.types?.Order;if(!Array.isArray(u)||u.length!==ue.length)throw new Error("poly: EIP-712 Order type must be official CLOB v2");for(let b=0;b<ue.length;b+=1)if(u[b]?.name!==ue[b][0]||u[b]?.type!==ue[b][1])throw new Error("poly: EIP-712 Order type must be official CLOB v2");if((t.orderType||"GTC")!=="GTC")throw new Error("poly: only GTC is public");let a=String(e.owner||"").toLowerCase();if(P(s.maker,"poly: maker").toLowerCase()!==a)throw new Error("poly: maker must equal owner");if(P(s.signer,"poly: signer").toLowerCase()!==a)throw new Error("poly: signer must equal owner");if(s.signatureType!==0)throw new Error("poly: only EOA signatureType 0 is public");if(typeof s.builder!="string"||s.builder.toLowerCase()!==`0x${"00".repeat(32)}`)throw new Error("poly: builder must be zero");if(s.side!==0&&s.side!==1)throw new Error("poly: side must be BUY or SELL");let c=ht(t.tokenId,"tokenId",80);if(P(s.tokenId,"poly: tokenId")!==c)throw new Error("poly: tokenId mismatch");let d=Array.isArray(r.polyTokens)?r.polyTokens.map(String):[];if(d.length&&!d.includes(c)&&!d.includes("*"))throw new Error("poly: tokenId not allowed");let l=Number(s.side)===0?"BUY":"SELL";if(t.side&&t.side!==l)throw new Error("poly: side mismatch");let p=B(s.makerAmount,"poly: makerAmount"),f=B(s.takerAmount,"poly: takerAmount"),m=B(t.makerAmount,"poly: prepared makerAmount"),w=B(t.takerAmount,"poly: prepared takerAmount");if(p!==m)throw new Error("poly: signed makerAmount differs from prepared envelope");if(f!==w)throw new Error("poly: signed takerAmount differs from prepared envelope");let h=l==="BUY"?p:f,g=l==="BUY"?f:p,A=I(t.quantity,6,"poly: quantity");if(A<=0n||A!==g)throw new Error("poly: quantity must match CLOB v2 amounts");let E=I(t.price,6,"poly: price");if(E<=0n||E>=1000000n)throw new Error("poly: price must be within (0,1)");if(g*E!==h*1000000n)throw new Error("poly: price must match CLOB v2 amounts");if(I(t.notionalUsdc,6,"poly: notionalUsdc")!==h)throw new Error("poly: notionalUsdc must match CLOB v2 amounts");let N=wt(s,l);if(I(N,6,"poly: displayed notionalUsdc")!==h)throw new Error("poly: displayed notionalUsdc must match CLOB v2 amounts");let O=r.maxNotionalUsd??r.maxNotionalUsdc;if(O!=null){let b=I(O,6,"poly: maxNotionalUsd");if(h>b)throw new Error("poly: notional exceeds cap")}return Object.freeze({unit:"usdc",value:h.toString(),notional:h.toString(),fee:"0",kind:n,tokenId:c,side:l,makerAmount:p.toString(),takerAmount:f.toString(),price:String(t.price),quantity:String(t.quantity),notionalUsdc:N,submitTo:gt(t.submitTo)})}var Rn=new Set(["https://mainnet.zklighter.elliot.ai/api/v1/sendTx","https://testnet.zklighter.elliot.ai/api/v1/sendTx"]),bt=14,Et=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`lighter: bounded ${r} required`);return e};function te(e,r,t){if(!Number.isSafeInteger(e)||e!==r)throw new Error(`lighter: ${t} must be exact numeric ${r}`)}function At(e){let r=String(e||"").replace(/\/$/,"");if(!Rn.has(r))throw new Error("lighter: submitTo must be the official Lighter sendTx");return r}function St(e,r={}){if(e?.surface!=="lighter")throw new Error("lighter: surface lighter required");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("lighter: structured artifact required");let n=Et(t.kind,"kind",48);if(n!=="lighter-order")throw new Error("lighter: unsupported Lighter kind");if(e.action!=="order")throw new Error("lighter: surface/action/kind mismatch");if(String(e.destination).toLowerCase()!=="lighter")throw new Error("lighter: destination must be lighter");let o=At(t.submitTo),i=t.marketIndex;if(typeof i!="number"||!Number.isSafeInteger(i)||i<0)throw new Error("lighter: marketIndex required");let s=Number(H(t.accountIndex,"lighter: accountIndex"));if(!Number.isSafeInteger(s)||s<0)throw new Error("lighter: accountIndex required");let u=Number(H(t.clientOrderIndex,"lighter: clientOrderIndex"));if(!Number.isSafeInteger(u)||u<0)throw new Error("lighter: clientOrderIndex required");te(t.orderType,0,"orderType"),te(t.timeInForce,1,"timeInForce"),te(t.reduceOnly,0,"reduceOnly"),te(t.triggerPrice,0,"triggerPrice"),te(t.orderExpiry,-1,"orderExpiry");let a=Et(t.symbol||t.coin,"symbol",32),c=Array.isArray(r.lighterMarkets)?r.lighterMarkets.map(String):[];if(c.length&&!c.includes(a)&&!c.includes(String(i))&&!c.includes("*"))throw new Error("lighter: market not allowed");if(t.side!=="buy"&&t.side!=="sell")throw new Error("lighter: side must be buy or sell");let d=B(t.baseAmount,"lighter: baseAmount"),l=B(t.price,"lighter: price");if(d>BigInt(Number.MAX_SAFE_INTEGER)||l>BigInt(Number.MAX_SAFE_INTEGER))throw new Error("lighter: baseAmount and price must be safe integers");let p=Number(d),f=Number(l),m=Number(t.sizeDecimals??0),w=Number(t.priceDecimals??0);if(!Number.isInteger(m)||m<0||m>12)throw new Error("lighter: sizeDecimals required");if(!Number.isInteger(w)||w<0||w>12)throw new Error("lighter: priceDecimals required");let h=m+w,g=d*l,A=I(t.notionalUsd,h,"lighter: notionalUsd");if(A<=0n)throw new Error("lighter: notionalUsd required");if(g!==A)throw new Error("lighter: notionalUsd must match size and price");let E=I(r.maxNotionalUsd??Number.MAX_SAFE_INTEGER,h,"lighter: maxNotionalUsd");if(g>E)throw new Error("lighter: notional exceeds cap");let T=v(t.notionalUsd,"lighter: notionalUsd");return te(t.txType,bt,"txType"),Object.freeze({unit:"usd",value:String(T),notional:String(T),fee:"0",kind:n,symbol:a,marketIndex:i,side:t.side,baseAmount:p,price:f,submitTo:o,actionType:"create-order",amount:String(T)})}import{TypedDataEncoder as It,getAddress as D}from"ethers";import{TypedDataEncoder as Sa,getAddress as va,isAddress as Ta}from"ethers";var vt=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Fe=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as Ma,getAddress as $a,isAddress as Ra}from"ethers";var Na=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var Tt=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),za=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var Me=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Ga=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var qn=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]),Un="0x0000000000000000000000000000000000000000";function $e(e,r,t=256){if(typeof e!="string"||!e||e.length>t)throw new Error(`evm-order: bounded ${r} required`);return e}function kt(e,r){let t=String(e||"").replace(/\/$/,"");if(!qn.some(o=>t===`${o}/v4.0/${r}`||t===`${o}/v4.1/${r}`))throw new Error("evm-order: submitTo must be the official 1inch orderbook");return t}function Nt(e,r){let t={1:"https://api.cow.fi/mainnet/api/v1/orders",100:"https://api.cow.fi/xdai/api/v1/orders",42161:"https://api.cow.fi/arbitrum_one/api/v1/orders",8453:"https://api.cow.fi/base/api/v1/orders"}[Number(r)],n=String(e||"").replace(/\/$/,"");if(!t||n!==t)throw new Error("evm-order: cow submitTo must be official api.cow.fi");return n}function Ot(e,r){let t=e?.Order,n=r.Order;return!Array.isArray(t)||t.length!==n.length?!1:t.every((o,i)=>o?.name===n[i].name&&o?.type===n[i].type)}function Ct(e,...r){let t=Array.isArray(e.tokens)?e.tokens.map(n=>String(n).toLowerCase()):[];if(!t.length)throw new Error("evm-order: tokens allowlist is empty");if(!t.includes("*")){for(let n of r)if(!t.includes(String(n).toLowerCase()))throw new Error("evm-order: token not allowed")}}function Lt(e,r,{allowZero:t=!1}={}){let n=String(r||"").toLowerCase();if(!n)throw new Error("evm-order: receiver required");if(n===Un){if(!t)throw new Error("evm-order: receiver must equal owner");return}if(n!==e)throw new Error("evm-order: receiver must equal owner")}function Pt(e,r){if(e?.surface!=="evm-order")throw new Error("evm-order: surface evm-order required");if(e.action!=="order")throw new Error("evm-order: action must be order");let t=e.artifact;if(!t||typeof t!="object"||Array.isArray(t))throw new Error("evm-order: structured artifact required");let n=$e(t.kind,"kind",32);if(n==="option")throw new Error("evm-order: option kind refused until official Derive/Lyra domain is pinned");if(n==="cow"){let l=Number(t.chainId??e.chainId);if(Nt(t.submitTo,l),$e(e.destination,"destination",32)!=="cowswap")throw new Error("evm-order: cow destination must be cowswap");let p=Tt[l];if(!p)throw new Error(`evm-order: unsupported cow chainId ${l}`);let f=t.domain||t.typedData?.domain,m=t.types||t.typedData?.types,w=t.message||t.typedData?.message;if(!f||!m?.Order||!w)throw new Error("evm-order: CoW EIP-712 Order required");if(!Ot(m,Me))throw new Error("evm-order: cow types must be official GPv2 Order");if(Number(f.chainId)!==l)throw new Error("evm-order: cow domain chain mismatch");if(String(f.name)!=="Gnosis Protocol"||String(f.version)!=="v2")throw new Error("evm-order: cow domain must be official GPv2");if(D(f.verifyingContract)!==D(p))throw new Error("evm-order: cow verifyingContract must be official GPv2 settlement");let h=String(e.owner||"").toLowerCase();Lt(h,w.receiver),Ct(r,w.sellToken,w.buyToken);let g=D(w.sellToken),A=String(w.feeAmount||"0"),E=(BigInt(w.sellAmount)+BigInt(A)).toString();return Object.freeze({unit:`erc20:${g.toLowerCase()}`,value:E,notional:E,fee:A,submitTo:Nt(t.submitTo,l),digest:It.hash(f,{Order:Me.Order},w),chainId:l,kind:"cow",receiver:D(w.receiver),sellAmount:String(w.sellAmount),buyAmount:String(w.buyAmount)})}if(n!=="1inch-limit")throw new Error("evm-order: unsupported kind");if($e(e.destination,"destination",32)!=="1inch-lop")throw new Error("evm-order: destination must be 1inch-lop");let o=Number(t.chainId??e.chainId),i=vt[o];if(!i)throw new Error(`evm-order: unsupported chainId ${o}`);kt(t.submitTo,o);let s=t.domain||t.typedData?.domain,u=t.types||t.typedData?.types,a=t.message||t.typedData?.message;if(!s||!u?.Order||!a)throw new Error("evm-order: EIP-712 Order required");if(!Ot(u,Fe))throw new Error("evm-order: types must be official LOP v4 Order");if(Number(s.chainId)!==o)throw new Error("evm-order: domain chain mismatch");if(D(s.verifyingContract)!==D(i))throw new Error("evm-order: verifyingContract must be official LOP v4");if(s.name!=="1inch Limit Order Protocol"||String(s.version)!=="4")throw new Error("evm-order: EIP-712 domain must be official LOP v4");let c=String(e.owner||"").toLowerCase();if(D(a.maker).toLowerCase()!==c)throw new Error("evm-order: maker must equal owner");Lt(c,a.receiver,{allowZero:!0}),Ct(r,a.makerAsset,a.takerAsset);let d=It.hash(s,{Order:Fe.Order},a);return Object.freeze({unit:`erc20:${D(a.makerAsset).toLowerCase()}`,value:String(a.makingAmount),notional:String(a.makingAmount),fee:"0",submitTo:kt(t.submitTo,o),digest:d,chainId:o,kind:"1inch-limit",receiver:D(a.receiver),makerAsset:D(a.makerAsset),takerAsset:D(a.takerAsset),makingAmount:String(a.makingAmount),takingAmount:String(a.takingAmount)})}var Rt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var Re=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0}),Wn=new Set(["0x0000000000000000000000000000000000000000","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"]),Dt=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Hn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),Ee=new $t(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Bt=new $t(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),jn=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var le=(e,r,t=256)=>{if(typeof e!="string"||!e||e.length>t)throw new Error(`envelope: bounded ${r} required`);return e},y=(e,r)=>{try{let t=BigInt(e);if(t<0n)throw 0;return t}catch{throw new Error(`envelope: ${r} must be a non-negative integer`)}},_t=(e,r)=>{let t=Number(e);if(!Number.isFinite(t))throw new Error(`policy: ${r} must be finite`);return t},zn=(e,r)=>{if(!Array.isArray(e)||e.length===0)throw new Error(`policy: ${r} allowlist is empty`);return e},k=(e,r,t)=>{if(!zn(r,t).map(n=>String(n).toLowerCase()).includes(String(e).toLowerCase()))throw new Error(`policy: ${t} not allowed`)},de=(e,r,t)=>{Array.isArray(r)&&r.length&&k(e,r,t)},S=(e,r)=>{let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error(`envelope: ${r} must be a 20-byte address`);return t},X=e=>String(e||"0x").slice(0,10).toLowerCase(),qt=e=>y(e.gasLimit,"gasLimit")*y(e.maxFeePerGas??e.gasPrice,"feePerGas")+y(e.l1FeeWei??0,"l1FeeWei")+y(e.operatorFeeWei??0,"operatorFeeWei");function re(e,r,t,{dynamicTail:n=!1}={}){let o=String(e||"").toLowerCase();if(!/^0x[0-9a-f]*$/.test(o)||o.length<10+r*64)throw new Error(`envelope: malformed ${t} calldata`);if(!n&&o.length!==10+r*64)throw new Error(`envelope: malformed ${t} calldata`);return{hex:o,word:i=>o.slice(10+i*64,10+(i+1)*64)}}function L(e,r){if(!/^0{24}[0-9a-f]{40}$/.test(e))throw new Error(`envelope: malformed ${r} address`);return`0x${e.slice(24)}`}function q(e,r){try{return BigInt(`0x${e}`)}catch{throw new Error(`envelope: malformed ${r} integer`)}}function Gn(e){if(X(e)!=="0x095ea7b3")return null;let r=re(e,2,"approval");return{kind:"approval",spender:L(r.word(0),"approval spender"),amount:q(r.word(1),"approval amount")}}function Ut(e,r){let t=r==="router02-exact-input-single"?7:8,n=re(e,t,"Uniswap v3 exactInputSingle"),o=t===7?4:5;return{kind:"action",action:"swap",inputToken:L(n.word(0),"input token"),outputToken:L(n.word(1),"output token"),recipient:L(n.word(3),"recipient"),amountIn:q(n.word(o),"amountIn"),minimumOut:q(n.word(o+1),"amountOutMinimum")}}function Jn(e){let r=re(e,12,"Across depositV3",{dynamicTail:!0}),t=q(r.word(11),"message offset");if(t!==384n)throw new Error("envelope: malformed Across depositV3 message offset");let n=10+Number(t)*2;if(r.hex.length<n+64)throw new Error("envelope: malformed Across depositV3 message");let o=Number(BigInt(`0x${r.hex.slice(n,n+64)}`));if(!Number.isSafeInteger(o))throw new Error("envelope: malformed Across depositV3 message length");let i=Math.ceil(o/32)*64;if(r.hex.length!==n+64+i)throw new Error("envelope: malformed Across depositV3 trailing bytes");return{kind:"action",action:"bridge",depositor:L(r.word(0),"depositor"),recipient:L(r.word(1),"recipient"),inputToken:L(r.word(2),"input token"),outputToken:L(r.word(3),"output token"),amountIn:q(r.word(4),"inputAmount"),minimumOut:q(r.word(5),"outputAmount"),destinationChainId:q(r.word(6),"destinationChainId")}}function Vn(e){let r=String(e||"").replace(/^0x/i,"").toLowerCase();if(r.length<86||r.length%2!==0)throw new Error("envelope: malformed Uniswap path");let t=`0x${r.slice(0,40)}`,n=`0x${r.slice(r.length-40)}`;if(!/^0x[0-9a-f]{40}$/.test(t)||!/^0x[0-9a-f]{40}$/.test(n))throw new Error("envelope: malformed Uniswap path tokens");return{inputToken:t,outputToken:n}}function Ft(e,{hasDeadline:r}){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<74)throw new Error("envelope: malformed exactInput calldata");let n=[];for(let h=10;h+64<=t.length;h+=64)n.push(t.slice(h,h+64));let o=(h,g)=>{if(!n[h])throw new Error(`envelope: malformed ${g}`);return BigInt(`0x${n[h]}`)},i=Number(o(0,"exactInput struct offset"));if(i%32!==0)throw new Error("envelope: malformed exactInput struct offset");let s=i/32,u=Number(o(s,"path offset")),a=n[s+1],c=o(s+(r?3:2),"amountIn"),d=o(s+(r?4:3),"amountOutMinimum"),l=s+u/32;if(!Number.isInteger(l)||!n[l])throw new Error("envelope: malformed exactInput path");let p=Number(o(l,"path length")),f=t.slice(10+(l+1)*64,10+(l+1)*64+p*2),{inputToken:m,outputToken:w}=Vn(`0x${f}`);return{kind:"action",action:"swap",inputToken:m,outputToken:w,recipient:L(a,"recipient"),amountIn:c,minimumOut:d}}function Yn(e){let r=re(e,8,"Aerodrome exactInputSingle");return{kind:"action",action:"swap",inputToken:L(r.word(0),"input token"),outputToken:L(r.word(1),"output token"),recipient:L(r.word(3),"recipient"),amountIn:q(r.word(5),"amountIn"),minimumOut:q(r.word(6),"amountOutMinimum")}}function Kn(e){let r=String(e||"").toLowerCase();if(!r.startsWith("0x5ae401dc"))throw new Error("envelope: malformed Uniswap multicall");let t=[];for(let p=10;p+64<=r.length;p+=64)t.push(r.slice(p,p+64));let n=Number(BigInt(`0x${t[1]}`));if(n%32!==0)throw new Error("envelope: malformed multicall data offset");let o=n/32;if(Number(BigInt(`0x${t[o]}`))!==1)throw new Error("envelope: multicall must wrap exactly one swap");let s=Number(BigInt(`0x${t[o+1]}`)),u=o+1+s/32,a=Number(BigInt(`0x${t[u]}`)),d=`0x${r.slice(10+(u+1)*64,10+(u+1)*64+a*2)}`,l=X(d);if(l!=="0x04e45aaf"&&l!=="0x414bf389")throw new Error("envelope: multicall inner call must be exactInputSingle");return Ut(d,l==="0x04e45aaf"?"router02-exact-input-single":"swap-router-exact-input-single")}function Xn(e,r){let t=X(e),n=Dt[t];if(!n)throw new Error("envelope: opaque or unsupported EVM swap/bridge calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed selector");if(n.layout==="router02-exact-input-single"||n.layout==="swap-router-exact-input-single")return{...Ut(e,n.layout),selector:t,provider:n.provider};if(n.layout==="exact-input-deadline")return{...Ft(e,{hasDeadline:!0}),selector:t,provider:n.provider};if(n.layout==="exact-input")return{...Ft(e,{hasDeadline:!1}),selector:t,provider:n.provider};if(n.layout==="multicall-deadline")return{...Kn(e),selector:t,provider:n.provider};if(n.layout==="aerodrome-exact-input-single")return{...Yn(e),selector:t,provider:n.provider};if(n.action==="bridge")return{...Jn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed EVM action")}function Qn(e){let r=re(e,4,"SeaDrop mintPublic");return{kind:"mint",action:"mint",mintType:"public",contract:L(r.word(0),"mint NFT contract"),feeRecipient:L(r.word(1),"mint fee recipient"),recipient:L(r.word(2),"mint recipient"),quantity:q(r.word(3),"mint quantity")}}function Zn(e){let r;try{r=Bt.decodeFunctionData("mintAllowList",e)}catch{throw new Error("envelope: malformed SeaDrop mintAllowList calldata")}let t=r[4],n=[...r[5]].map(String);if(n.length<1||n.length>64||n.some(a=>!/^0x[0-9a-fA-F]{64}$/.test(a)))throw new Error("envelope: bounded canonical SeaDrop allowlist proof required");if(Bt.encodeFunctionData("mintAllowList",[r[0],r[1],r[2],r[3],t,n]).toLowerCase()!==String(e).toLowerCase())throw new Error("envelope: SeaDrop allowlist calldata must be canonical");let i=BigInt(t.startTime),s=BigInt(t.endTime);if(s<=i)throw new Error("envelope: SeaDrop allowlist stage time range is invalid");let u=BigInt(r[3]);if(BigInt(t.maxTotalMintableByWallet)<u)throw new Error("envelope: SeaDrop allowlist wallet cap is below quantity");return{kind:"mint",action:"mint",mintType:"allowlist",contract:S(r[0],"mint NFT contract"),feeRecipient:S(r[1],"mint fee recipient"),recipient:S(r[2],"mint recipient"),quantity:u,mintPrice:BigInt(t.mintPrice),startTime:i,endTime:s,dropStageIndex:BigInt(t.dropStageIndex),proof:n}}function eo(e,r){let t=X(e);if(String(r).toLowerCase()==="nft-mint")return to(e);let n=Hn[t];if(!n)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(String(r).toLowerCase()!==n.provider)throw new Error("envelope: provider does not match reviewed NFT selector");if(n.layout==="seadrop-mint-public")return{...Qn(e),selector:t,provider:n.provider};if(n.layout==="seadrop-mint-allowlist")return{...Zn(e),selector:t,provider:n.provider};throw new Error("envelope: unsupported reviewed NFT action")}function to(e){let r=X(e);if(r==="0x40c10f19")throw new Error("envelope: ambiguous mint(address,uint256) calldata is not a built-in signer surface");let t=jn[r];if(!t)throw new Error("envelope: opaque or unsupported NFT mint calldata");if(t.layout==="mint-no-args")return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:1n};if(t.layout==="mint-quantity"){let n=re(e,1,"generic NFT mint");return{kind:"mint",action:"mint",selector:r,provider:"nft-mint",quantity:q(n.word(0),"mint quantity")}}throw new Error("envelope: unsupported generic NFT mint calldata")}function fe(e){let r=e?.artifact;if(Array.isArray(r?.transactions))return r.transactions;if(r?.transaction&&typeof r.transaction=="object")return[r.transaction];if(r?.data)return[r];throw new Error("envelope: ordered EVM transaction batch required")}function Wt(e,r,t,{nowMs:n=Date.now(),networkFees:o,requireNetworkFees:i=!1}={}){let s=S(e.owner,"owner"),u=e.artifact,a=Number(u?.chainId??fe(e)[0]?.chainId);if(!Number.isSafeInteger(a)||a<=0)throw new Error("envelope: explicit batch chainId required");if(k(a,r.chains,"chain"),u?.owner!==void 0&&S(u.owner,"batch owner")!==s)throw new Error("envelope: explicit batch owner mismatch");let c=fe(e);if(!c.length||c.length>8)throw new Error("envelope: bounded EVM transaction batch required");let d=0n,l=0n,p=0n;for(let f of c){if(!f||typeof f!="object"||Array.isArray(f))throw new Error("envelope: structured EVM transaction required");if(Number(f.chainId)!==a)throw new Error("envelope: every batch leg must use the same chain");if(S(f.from,"transaction owner")!==s)throw new Error("envelope: every batch leg must use the same owner");if(k(X(f.data),r.selectors,"selector"),d+=y(f.value??0,"value"),l+=y(f.gasLimit,"gasLimit"),p+=qt(f),G(a)&&(f.l1FeeWei===void 0||f.operatorFeeWei===void 0))throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei")}if(d>y(r.maxValueWei,"maxValueWei"))throw new Error("policy: aggregate value exceeds cap");if(l>y(r.maxGasLimit,"maxGasLimit"))throw new Error("policy: aggregate gas exceeds cap");if(p>y(r.maxFeeWei,"maxFeeWei"))throw new Error("policy: aggregate fee exceeds cap");return{transactions:c,chainId:a,owner:s,totalValue:d,totalGas:l,totalFee:p}}function Ht(e,r,{nowMs:t=Date.now(),routeAttestationSecret:n}={}){let o=String(e?.surface||"");if(o!=="evm-swap"&&o!=="evm-bridge")throw new Error("envelope: strict EVM swap/bridge surface required");let i=le(e.provider,"provider",64).toLowerCase();k(i,r.providers,"provider");let s=Wt(e,r,o,{nowMs:t}),u=[],a=-1;for(let m=0;m<s.transactions.length;m++){let w=s.transactions[m],h=Gn(w.data),g;if(h){if(a!==-1)throw new Error("envelope: approval must be before action");if(y(w.value??0,"value")!==0n)throw new Error("envelope: approval cannot transfer native value");let T=S(w.to,"approval token");if(k(T,r.tokens,"token"),k(h.spender,r.spenders,"spender"),h.amount>y(r.maxApproval,"maxApproval"))throw new Error("policy: approval exceeds cap");g={...h,token:T,index:m}}else{if(a!==-1)throw new Error("envelope: exactly one swap/bridge action is supported per batch");k(w.to,r.destinations,"destination"),g={...Xn(w.data,i),target:S(w.to,"action target"),index:m},a=m}let A=y(w.value??0,"value"),E=y(w.gasLimit,"gasLimit");u.push({...g,value:A,gas:E,fee:qt(w)})}if(a<0)throw new Error("envelope: reviewed swap/bridge action required");let c=u[a],d=o==="evm-swap"?"swap":"bridge";if(c.action!==d||e.action!==d)throw new Error("envelope: surface/action/calldata mismatch");if(S(e.destination,"destination")!==c.target)throw new Error("envelope: destination must equal decoded action target");if(c.recipient!==s.owner)throw new Error("envelope: decoded recipient must equal owner");if(c.depositor&&c.depositor!==s.owner)throw new Error("envelope: decoded bridge depositor must equal owner");if(k(c.inputToken,r.tokens,"input token"),k(c.outputToken,r.tokens,"output token"),c.amountIn<=0n||c.amountIn>y(r.maxPerTrade,"maxPerTrade"))throw new Error("policy: decoded amount exceeds per-trade cap");if(c.minimumOut<=0n)throw new Error("policy: decoded minimum output must be positive");if(Te(e.autoSlippage,{nowMs:t,chainId:s.chainId,venue:i,tx:s.transactions[a],secret:n,requireSigned:!0}),Number(e.slippageBps)!==Number(e.autoSlippage.selectedBps))throw new Error("policy: slippageBps must equal the authenticated quote selectedBps");if(c.minimumOut!==y(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"))throw new Error("policy: decoded minimum output does not match authenticated quote");if(c.action==="bridge"&&y(e.toChainId,"toChainId")!==c.destinationChainId)throw new Error("envelope: decoded bridge destination chain mismatch");let l=u.filter(m=>m.kind==="approval");if(!new Set([...Wn,...Array.isArray(r.nativeInputTokens)?r.nativeInputTokens.map(m=>String(m).toLowerCase()):[]]).has(c.inputToken))throw new Error("envelope: strict local signer swap/bridge requires native input token; use wallet signing for token-unit rails");if(l.length)throw new Error("envelope: native-value action must not include token approval");if(c.value!==c.amountIn)throw new Error("envelope: native value must exactly match decoded amountIn");let f=Object.freeze({quoteAmountOut:y(e.autoSlippage.quoteAmountOut,"authenticated quote amountOut"),minAmountOut:y(e.autoSlippage.minAmountOut,"authenticated quote minAmountOut"),selectedBps:Number(e.autoSlippage.selectedBps),quotedAtMs:Number(e.autoSlippage.quotedAtMs),expiresAtMs:Number(e.autoSlippage.expiresAtMs)});return{...s,decoded:u,action:c,provider:i,authenticatedQuote:f}}function ro(e,r,{nowMs:t}){let n=e.anvilAttestation,o=e.artifact?.anvilAttestation;if(!n||typeof n!="object"||Array.isArray(n))throw new Error("envelope: Anvil attestation is required");if(!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: Anvil attestation artifact mismatch");if(Number(n.version)!==1||n.source!=="anvil-snapshot-rpc-reviewed-runtime")throw new Error("envelope: unsupported Anvil attestation");if(Number(n.chainId)!==4663)throw new Error("envelope: Anvil attestation chain mismatch");let i=S(e.destination,"Anvil market"),s=S(e.contract,"NFT contract"),u=S(e.paymentToken,"payment token");if(S(n.market,"attested Anvil market")!==i)throw new Error("envelope: Anvil attestation market mismatch");if(S(n.collection,"attested NFT collection")!==s)throw new Error("envelope: Anvil attestation collection mismatch");if(S(n.paymentToken,"attested payment token")!==u)throw new Error("envelope: Anvil attestation payment token mismatch");let a=Number(e.paymentTokenDecimals??e.artifact?.paymentTokenDecimals);if(!Number.isSafeInteger(a)||a<0||a>255||Number(n.paymentTokenDecimals)!==a)throw new Error("envelope: Anvil payment token decimals mismatch");let c=y(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei").toString();if(y(n.nativeSwapFeeWei,"attested nativeSwapFeeWei").toString()!==c)throw new Error("envelope: Anvil attestation native swap fee mismatch");let d=Number(n.snapshotFetchedAtMs),l=Number(n.snapshotExpiresAtMs);if(!Number.isFinite(d)||!Number.isFinite(l)||d>t||l<=t||l<=d)throw new Error("envelope: Anvil snapshot attestation is stale");let p=y(n.blockNumber,"attested blockNumber");if(p<=0n||!/^0x[0-9a-f]{64}$/.test(String(n.blockHash||"").toLowerCase()))throw new Error("envelope: Anvil block attestation is invalid");let f=String(n.runtimeCodeHash||"").toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(f))throw new Error("envelope: Anvil runtime code hash is invalid");let m=Object.entries(r.anvilRuntimeCodeHashes||{}).find(([h])=>h.toLowerCase()===i)?.[1];if(!m||String(m).toLowerCase()!==f)throw new Error("policy: Anvil runtime code hash is not reviewed");let w=Object.entries(r.nftPaymentTokenCaps||{}).find(([h])=>h.toLowerCase()===u)?.[1];if(!w||Number(w.decimals)!==a)throw new Error("policy: Anvil payment token decimals are not reviewed");return Object.freeze({...n,market:i,collection:s,paymentToken:u,paymentTokenDecimals:a,runtimeCodeHash:f,blockNumber:p})}function Mt(e,r){let t=e.artifact,n=e.anvilQuote,o=t?.anvilQuote;if(!n||typeof n!="object"||Array.isArray(n)||!o||JSON.stringify(o)!==JSON.stringify(n))throw new Error("envelope: exact Anvil quote artifact mismatch");if(e.preconditions?.exactQuoteConfirmed!==!0)throw new Error("envelope: exact Anvil quote confirmation required");let i=r==="buy"?[[n.totalCostRaw,"anvilQuote.totalCostRaw"],[e.maxPaymentTokenAmountRaw,"maxPaymentTokenAmountRaw"],[t?.maxPaymentTokenAmountRaw,"artifact maxPaymentTokenAmountRaw"],[e.exactQuoteTotalCostRaw,"exactQuoteTotalCostRaw"],[t?.exactQuoteTotalCostRaw,"artifact exactQuoteTotalCostRaw"],[e.preconditions?.confirmedTotalCostRaw,"confirmedTotalCostRaw"]]:[[n.netPayoutRaw,"anvilQuote.netPayoutRaw"],[e.minPayoutRaw,"minPayoutRaw"],[t?.minPayoutRaw,"artifact minPayoutRaw"],[e.exactQuoteNetPayoutRaw,"exactQuoteNetPayoutRaw"],[t?.exactQuoteNetPayoutRaw,"artifact exactQuoteNetPayoutRaw"],[e.preconditions?.confirmedNetPayoutRaw,"confirmedNetPayoutRaw"]],s=y(i[0][0],i[0][1]);for(let[u,a]of i.slice(1))if(y(u,a)!==s)throw new Error(`envelope: Anvil ${r} exact settlement limit mismatch`);return s}function jt(e,r,{nowMs:t=Date.now()}={}){if(e?.surface!=="evm-nft")throw new Error("envelope: evm-nft surface required");if(!["mint","nft"].includes(e.action))throw new Error("envelope: evm-nft requires mint or NFT action");let n=le(e.provider||e.artifact?.provider||"opensea-nft","provider",64).toLowerCase();de(n,r.providers,"provider");let o=Wt(e,r,"evm-nft",{nowMs:t});if(n==="anvil-nft"){if(e.action!=="nft")throw new Error("envelope: Anvil requires NFT action");if(o.chainId!==4663)throw new Error("envelope: Anvil requires chain 4663");if(r.confirmationMode!=="exact-human")throw new Error("policy: Anvil requires exact-human confirmation");if(o.transactions.length!==1)throw new Error("envelope: Anvil requires one atomic action with pre-existing approval");if(Number(e.slippageBps)!==0)throw new Error("envelope: Anvil exact limit requires zero slippageBps");let[f]=o.transactions,m=S(e.destination,"Anvil market");if(S(f.to,"Anvil action target")!==m)throw new Error("envelope: Anvil action target mismatch");k(m,r.destinations,"destination");let w=S(e.contract??e.artifact?.contract,"NFT contract");if(de(w,r.nftContracts,"NFT contract"),S(e.marketCollection??e.artifact?.marketCollection,"Anvil market collection")!==w)throw new Error("envelope: Anvil market collection mismatch");let g=S(e.paymentToken??e.artifact?.paymentToken,"payment token");de(g,r.erc20Tokens,"ERC20 token");let A=ro(e,r,{nowMs:t}),E=y(e.tokenId??e.artifact?.tokenId,"tokenId"),T=y(e.nativeSwapFeeWei??e.artifact?.nativeSwapFeeWei,"nativeSwapFeeWei");if(o.totalValue!==T||y(f.value??0,"Anvil action value")!==T)throw new Error("envelope: Anvil native swap fee mismatch");if(T>y(r.maxNativeSwapFeeWei,"maxNativeSwapFeeWei"))throw new Error("policy: Anvil native swap fee exceeds cap");let N=le(e.nftAction,"nftAction",8).toLowerCase(),O;if(N==="buy"){let b=Mt(e,N),Q=Object.entries(r.nftPaymentTokenCaps||{}).find(([We])=>We.toLowerCase()===g)?.[1];if(!Q)throw new Error("policy: Anvil payment-token cap required");if(b>y(Q.maxPerTradeRaw,"maxPerTradeRaw"))throw new Error("policy: Anvil payment amount exceeds cap");if(e.preconditions?.allowanceVerified!==!0||y(e.preconditions?.allowanceRaw,"allowanceRaw")<b)throw new Error("envelope: Anvil pre-existing allowance proof required");let V=Ee.decodeFunctionData("buySpecificNFT",f.data);if(Ee.encodeFunctionData("buySpecificNFT",[V[0],V[1]]).toLowerCase()!==String(f.data).toLowerCase())throw new Error("envelope: non-canonical Anvil buy calldata");if(BigInt(V[0])!==E)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(V[1])!==b)throw new Error("envelope: Anvil maxCost mismatch");O={kind:"nft",action:"buy",tokenId:E,maxPaymentTokenAmountRaw:b,target:m}}else if(N==="sell"){let b=e.preconditions||{},Q=S(b.approvedAddress,"NFT approval address");if(b.nftApprovalVerified!==!0||Q!==m&&b.approvedForAll!==!0)throw new Error("envelope: Anvil pre-existing NFT approval proof required");let V=Mt(e,N),oe=Ee.decodeFunctionData("sellNFT",f.data);if(Ee.encodeFunctionData("sellNFT",[oe[0],oe[1]]).toLowerCase()!==String(f.data).toLowerCase())throw new Error("envelope: non-canonical Anvil sell calldata");if(BigInt(oe[0])!==E)throw new Error("envelope: Anvil tokenId mismatch");if(BigInt(oe[1])!==V)throw new Error("envelope: Anvil minPayout mismatch");O={kind:"nft",action:"sell",tokenId:E,minPayoutRaw:V,target:m}}else throw new Error("envelope: unsupported Anvil NFT action");return{...o,provider:n,nftAction:N,tokenId:E,paymentToken:g,paymentTokenDecimals:A.paymentTokenDecimals,anvilAttestation:A,decoded:[O]}}let i=e.artifact?.oraclePrepared===!0?e.artifact:e.prepared;if(i?.oraclePrepared===!0&&Ve(i,{nowMs:t,providers:Array.isArray(r.providers)&&r.providers.length?r.providers:null,kinds:["nft-mint"],label:"local-signer"}),o.transactions.length!==1)throw new Error("envelope: mint supports exactly one transaction");let s=o.transactions[0],u=X(s.data);k(u,r.selectors,"selector"),k(s.to,r.destinations,"destination");let a=eo(s.data,n),c=S(e.contract??e.artifact?.contract,"NFT contract");if(de(c,r.nftContracts,"NFT contract"),(a.contract||S(s.to,"NFT contract"))!==c)throw new Error("envelope: mint calldata NFT contract mismatch");if(a.recipient&&a.recipient!==o.owner)throw new Error("envelope: mint calldata recipient mismatch");a.feeRecipient&&de(a.feeRecipient,r.nftFeeRecipients,"mint fee recipient");let l=y(e.quantity??e.artifact?.quantity,"quantity");if(l<=0n||l>y(r.maxMintQuantity??1,"maxMintQuantity"))throw new Error("policy: mint quantity exceeds cap");if(a.quantity!==l)throw new Error("envelope: mint calldata quantity mismatch");let p=y(e.totalWei??e.artifact?.totalWei,"totalWei");if(o.totalValue!==p)throw new Error("envelope: mint value does not match declared totalWei");if(a.mintType==="allowlist"){let f=BigInt(Math.floor(t/1e3));if(a.startTime>f||a.endTime<=f)throw new Error("policy: SeaDrop allowlist stage is not open");if(a.mintPrice*l!==p)throw new Error("envelope: SeaDrop allowlist price does not match declared totalWei")}if((e.priceWei!==void 0||e.artifact?.priceWei!==void 0)&&y(e.priceWei??e.artifact.priceWei,"priceWei")*l!==p)throw new Error("envelope: mint price does not match declared totalWei");if(p>y(r.maxMintTotalWei??r.maxValueWei,"maxMintTotalWei"))throw new Error("policy: mint total exceeds cap");return{...o,provider:n,decoded:[{...a,target:S(s.to,"mint target"),value:o.totalValue,gas:o.totalGas,fee:o.totalFee}]}}function zt(e,{localsWaiver:r=!1}={}){if(!(e in Re))throw new Error("fee: unknown action");return r?0:Re[e]}function ne(e,r,{nowMs:t=Date.now(),verifyFeeWaiver:n,routeAttestationSecret:o,networkFees:i,requireNetworkFees:s=!1}={}){if(!e||e.version!==1)throw new Error("envelope: version 1 required");let u=le(e.surface,"surface",16);if(!Rt.has(u))throw new Error("envelope: unsupported public surface");let a=le(e.action,"action",32);k(u,r.surfaces,"surface"),k(a,r.actions,"action"),k(e.owner,r.owners,"owner"),k(e.destination,r.destinations,"destination");let c=_t(r.maxTtlMs,"maxTtlMs"),d=_t(r.maxSlippageBps,"maxSlippageBps");if(!Number.isFinite(e.expiresAtMs)||e.expiresAtMs<=t||e.expiresAtMs-t>c)throw new Error("policy: TTL outside bounds");if(!Number.isFinite(e.slippageBps)||e.slippageBps<0||e.slippageBps>d)throw new Error("policy: slippage exceeds cap");let l=e.artifact;if(!l||typeof l!="object"||Array.isArray(l))throw new Error("envelope: structured artifact required");if(u==="evm-swap"||u==="evm-bridge")Ht(e,r,{nowMs:t,routeAttestationSecret:o});else if(u==="evm-nft")jt(e,r,{nowMs:t});else if(u==="evm"){if(!["transfer","approve","delegate","identity"].includes(a))throw new Error(a==="mint"?"envelope: generic evm requires transfer or approve; use strict evm-nft for mint action":"envelope: generic evm requires transfer, approve, delegate, or identity");if(a==="swap"||a==="bridge")throw new Error("envelope: surface/action mismatch; use strict decoded surface");if(Number(l.type)===4&&a!=="delegate")throw new Error("envelope: type-4 requires delegate");if(String(l.to).toLowerCase()!==String(e.destination).toLowerCase())throw new Error("envelope: destination mismatch");if(String(l.from).toLowerCase()!==String(e.owner).toLowerCase())throw new Error("envelope: artifact from mismatch with owner");ge({...l,slippageBps:e.slippageBps,expiresAtMs:e.expiresAtMs},r,{nowMs:t,networkFees:i,requireNetworkFees:s});let m=String(l.data||"0x").toLowerCase(),w=y(l.value,"EVM value");if(a==="delegate"){if(Number(l.type)!==4)throw new Error("envelope: delegate requires type-4");if(m!=="0x")throw new Error("envelope: 7702 delegate calldata must be empty");if(w!==0n)throw new Error("envelope: 7702 delegate cannot transfer native value")}else if(a==="identity"){if(w!==0n)throw new Error("envelope: ERC-8004 identity cannot transfer native value");let h=m.slice(0,10);if(h!=="0xf2c298be"&&h!=="0x0af28bd3")throw new Error("envelope: ERC-8004 selector not allowed")}else if(m==="0x"){if(w===0n)throw new Error("envelope: native EVM transfer value required")}else if(Y(m)){if(w!==0n)throw new Error("envelope: EVM approval cannot transfer native value")}else throw new Error("envelope: unsupported generic EVM calldata")}else u==="btc"?et(e,r):u==="sol"?dt(e,r):u==="hl"?mt(e,r):u==="poly"?yt(e,r):u==="lighter"?St(e,r):u==="evm-order"&&Pt(e,r);let p=Number(e.fee?.oracleFeeBps)===0&&Re[a]!==0;if(e.fee?.waiver||p&&!e.fee?.waiverAttestation)throw new Error("fee: verified waiver attestation required");if(p&&(typeof n!="function"||n(e.fee.waiverAttestation,e)!==!0))throw new Error("fee: waiver attestation invalid");let f=zt(a,{localsWaiver:p});if(Number(e.fee?.oracleFeeBps)!==f)throw new Error("fee: final artifact fee mismatch");return!0}var be=Object.freeze([...Rt]),no=Object.freeze({...Dt});function oo(e={}){let r={};for(let t of be){let n=e[t];if(n){if(typeof n.simulate!="function"||typeof n.sign!="function"||typeof n.broadcast!="function")throw new Error(`adapter: ${t} requires simulate, sign, and broadcast functions`);r[t]=Object.freeze({simulate:(o,i)=>n.simulate(structuredClone(o),structuredClone(i)),sign:(o,i)=>n.sign(structuredClone(o),structuredClone(i)),broadcast:(o,i,s)=>n.broadcast(o,structuredClone(i),structuredClone(s))})}}return Object.freeze(r)}function io(e,r){let t=e?.surface||"evm",n=r?.[t];if(!n)throw new Error(`adapter: ${t} is not configured on this self-host`);return n}import{ed25519 as Ss}from"@noble/curves/ed25519.js";import{base58 as ao}from"@scure/base";import{RawTx as Is,SigHash as ks,Transaction as so}from"@scure/btc-signer";import{Transaction as co,keccak256 as De,verifyTypedData as Os}from"ethers";import{encode as ls}from"@msgpack/msgpack";import{keccak256 as ps,verifyTypedData as ms}from"ethers";var ws=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),hs=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Gt=e=>{if(typeof e!="string"||e.length===0||e.length>262144||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))return null;let r=Buffer.from(e,"base64");return r.toString("base64")===e?r:null};function uo(e){let r=0,t=0,n=0;for(;n<e.length&&n<3;){let o=e[n++];if(r|=(o&127)<<t,(o&128)===0)return{value:r,offset:n};t+=7}return null}function Jt(e,r){try{if(e==="evm-order")return De(r);if(String(e).startsWith("evm"))return co.from(r).hash;if(e==="btc"){let t=Gt(r);if(!t)return null;let n=so.fromPSBT(t);return n.finalize(),n.extract(),n.id}if(e==="sol"){let t=Gt(r);if(!t)return null;let n=uo(t);if(!n||n.value!==1)return null;let o=t.subarray(n.offset,n.offset+64);return o.length===64?ao.encode(o):null}if(e==="hl"&&typeof r=="string"&&r.startsWith("0x"))return De(r);if(e==="poly"&&typeof r=="string"&&r.startsWith("0x"))return De(r)}catch{}return null}var mo=e=>String(e||"").toLowerCase();function z(e){return lo("sha256").update(JSON.stringify(e)).digest("hex")}function me(e,r,t={}){return ge(e,r,t)}async function wo(e,r={}){if(!G(e?.chainId))return{l1FeeWei:"0",operatorFeeWei:"0"};if(typeof r.estimateNetworkFees!="function")throw new Error("policy: rollup fee estimate required");let t=await r.estimateNetworkFees(e);if(!t||t.l1FeeWei===void 0||t.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");return{l1FeeWei:String(t.l1FeeWei),operatorFeeWei:String(t.operatorFeeWei)}}function Yt(e,r,t=!1){if(!G(e?.chainId))return!0;if(e.l1FeeWei===void 0||e.operatorFeeWei===void 0)throw new Error("policy: rollup EVM artifacts require l1FeeWei and operatorFeeWei");if(t||r!=null){if(!r||r.l1FeeWei===void 0||r.operatorFeeWei===void 0)throw new Error("policy: rollup fee estimate required");let n=BigInt(e.l1FeeWei)+BigInt(e.operatorFeeWei),o=BigInt(r.l1FeeWei)+BigInt(r.operatorFeeWei);if(n<o)throw new Error("policy: rollup fee attestation understates estimate")}return!0}function ho(e,r={}){return renderConfirmationArtifact(e,z(e),r)}var pe=class{#e=new Map;constructor({now:r=Date.now}={}){this.now=r}issue({artifact:r,owner:t,ttlMs:n=6e4}){if(!Number.isFinite(n)||!Number.isInteger(n)||n<=0||n>12e4)throw new Error("confirmation: ttl out of range");let o=fo(32).toString("hex");return this.#e.set(o,{digest:z(r),owner:mo(t),expiresAtMs:this.now()+n}),o}consume(r,t){let n=this.#e.get(String(r));if(!n)throw new Error("confirmation: used or unknown nonce");if(n.expiresAtMs<=this.now())throw this.#e.delete(String(r)),new Error("confirmation: expired nonce");let o=Buffer.from(n.digest,"hex"),i=Buffer.from(z(t),"hex");if(!po(o,i))throw new Error("confirmation: artifact mismatch");return this.#e.delete(String(r)),n}clear(){this.#e.clear()}};function go(e){let r=String(e?.data||"0x").toLowerCase(),t=BigInt(e?.value??0);if(r==="0x"){if(t<=0n)throw new Error("signer: native EVM transfer value required");return!0}if(Y(r)){if(t!==0n)throw new Error("signer: EVM approval cannot transfer native value");return!0}throw new Error("signer: unsupported EVM calldata; use a versioned envelope")}function xo(e={},r={}){let t={};for(let n of new Set([...Object.keys(e||{}),...Object.keys(r||{})]))t[n]=(BigInt(r?.[n]??0)-BigInt(e?.[n]??0)).toString();return t}function yo(e){return e==="evm"||e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Ae(e,r){let t=String(r||"");if(e==="evm-order"||String(e).startsWith("evm"))return/^0x[0-9a-fA-F]{64}$/.test(t);if(e==="btc")return/^[0-9a-fA-F]{64}$/.test(t);if(e==="sol")try{let n=Vt.decode(t);return n.length===64&&Vt.encode(n)===t}catch{return!1}return e==="hl"?/^0x[0-9a-fA-F]{64}$/.test(t):e==="poly"?/^0x[0-9a-fA-F]{64}$/.test(t):!1}function Kt(e,r,t){return!Ae(e,r)||!Ae(e,t)?!1:e==="sol"?String(r)===String(t):String(r).toLowerCase()===String(t).toLowerCase()}function Eo(e){let r=e?.confirmationMode;if(r!=="exact-human"&&r!=="auto-within-rails")throw new Error("signer: confirmationMode must be exact-human or auto-within-rails");return r}async function qe({artifact:e,envelope:r,nonce:t,deps:n,policy:o,confirmation:i,consumeNonce:s,nowMs:u}){let a=Eo(o);if(n.autonomous===!0){if(n.env?.ORACLE_AUTONOMOUS_TRADING!=="1")throw new Error("signer: autonomous execution requires ORACLE_AUTONOMOUS_TRADING=1");if(a!=="auto-within-rails")throw new Error("signer: autonomous execution requires auto-within-rails policy");if(typeof n.verifyTriggerAttestation!="function"||await n.verifyTriggerAttestation(r?.triggerAttestation,e,u())!==!0)throw new Error("signer: autonomous trigger attestation required");return i}if(a!=="exact-human")throw new Error("signer: non-autonomous execution requires exact-human exact confirmation policy");if(!n.confirmations)throw new Error("signer: exact-human confirmation store required");if(s)return n.confirmations.consume(t,e);if(!i||!Number.isFinite(i.expiresAtMs)||i.expiresAtMs<=u())throw new Error("confirmation: expired nonce");return i}function bo(e){return e==="evm-swap"||e==="evm-bridge"||e==="evm-nft"}function Ao(e,r){return e&&bo(e.surface)?fe(e):[r]}function So(e,r){let t=e?.hash??null,n=e?.transactionHash??null;if(t!=null&&n!=null&&!Kt(r,t,n))throw new Error("signer: receipt reports conflicting transaction hashes");return t||n||null}function vo(e,r){let t=e?.verifiedBefore??e?.before,n=e?.verifiedAfter??e?.after;return{transactionHash:r,status:e?.status,balanceDeltaVerified:!!(e?.verifiedBefore&&e?.verifiedAfter),delta:xo(t,n)}}async function Se(e,r,t){if(!t.isArmed())throw new Error("signer: disarmed");let n=e?.version===1&&e?.surface?e:null,o=n?n.artifact:(()=>{let{tradeId:h,...g}=e||{};return g})(),i=Ao(n,o),s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,u=()=>typeof t.nowMs=="function"?t.nowMs():t.nowMs??Date.now(),a=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:s,confirmation:null,consumeNonce:!0,nowMs:u}),c=z(e),d=(h={})=>{n?ne(n,s,h):(me(o,s,{nowMs:h.nowMs,networkFees:h.networkFees,requireNetworkFees:h.requireNetworkFees}),go(o))},l=async h=>{let g=!n||yo(n.surface),A=g?await wo(h,t):void 0;return{nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret,networkFees:A,requireNetworkFees:g&&G(h?.chainId)}};d({nowMs:u(),verifyFeeWaiver:t.verifyFeeWaiver,routeAttestationSecret:t.routeAttestationSecret});for(let h of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof t[h]!="function")throw new Error(`signer: ${h} is required`);let p=t.reserveLedger(n||e,s);if(!p)throw new Error("signer: ledger reservation required");let f=!1,m=[];try{for(let h of i){if(typeof t.simulate!="function"||await t.simulate(h,n)!==!0)throw new Error("signer: strict affirmative simulation required");let g=await l(h);if((g.requireNetworkFees||g.networkFees!=null)&&Yt(h,g.networkFees,g.requireNetworkFees),!t.isArmed())throw new Error("signer: disarmed before signing");s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,a=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:s,confirmation:a,consumeNonce:!1,nowMs:u}),d(g),t.validateReservation(p,s,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,s):void 0),f=!0;let A=await t.sign(h,n);if(typeof t.verifySigned!="function"||await t.verifySigned(A,h,n)!==!0)throw new Error("signer: signed bytes do not match confirmed artifact");if(!t.isArmed())throw new Error("signer: disarmed before broadcast");if(z(e)!==c)throw new Error("signer: artifact mutated after signing");s=typeof t.readPolicy=="function"?t.readPolicy():t.policy,a=await qe({artifact:e,envelope:n,nonce:r,deps:t,policy:s,confirmation:a,consumeNonce:!1,nowMs:u});let E=await l(h);(E.requireNetworkFees||E.networkFees!=null)&&Yt(h,E.networkFees,E.requireNetworkFees),d(E),t.validateReservation(p,s,n&&typeof t.decodeEconomics=="function"?t.decodeEconomics(n,s):void 0);let T=await t.broadcast(A,h,n),N=T?.status,O=n?.surface||"evm",b=So(T,O),Q=Jt(O,A);if(!Kt(O,b,Q))throw new Error("signer: receipt transaction hash does not match signed bytes");if(N===0||N==="0x0")throw Ae(O,b)?(t.settleFailedLedger(p),new Error("signer: broadcast did not return a successful receipt")):new Error("signer: failed broadcast requires a valid transaction hash");if(N!==1&&N!=="0x1")throw new Error("signer: broadcast did not return a successful receipt");if(!Ae(O,b))throw new Error("signer: successful broadcast requires a valid transaction hash");m.push(vo(T,b))}}catch(h){throw f||t.releaseLedger(p),h}if(t.commitLedger(p),m.length===1){let h={receipt:m[0]};return n?.surface==="evm-bridge"&&(h.originStatus="success",h.destinationStatus="unverified",h.destinationSuccess=!1,h.note="Origin-chain receipts do not prove destination-chain settlement."),h}let w={receipts:m,status:"success"};return n?.surface==="evm-bridge"&&(w.originStatus="success",w.destinationStatus="unverified",w.destinationSuccess=!1,w.note="Origin-chain receipts do not prove destination-chain settlement."),w}import To from"node:http";import{timingSafeEqual as Io}from"node:crypto";var Xt=new Set(["127.0.0.1","::1","localhost"]),ko=(e,r)=>{let t=Buffer.from(String(e)),n=Buffer.from(String(r));return t.length===n.length&&Io(t,n)},x=(e,r,t)=>{let n=JSON.stringify(t);e.writeHead(r,{"content-type":"application/json","cache-control":"no-store","content-length":Buffer.byteLength(n)}),e.end(n)};function No(e){let r=String(e||"");if(r.startsWith("[")){let t=r.indexOf("]");if(t>1)return r.slice(1,t)}return r.split(":")[0]}var we=e=>new Promise((r,t)=>{let n=0,o=[],i=!1;e.on("data",s=>{n+=s.length,n>64*1024&&!i?(i=!0,t(new Error("request refused")),e.resume()):i||o.push(s)}),e.on("end",()=>{if(!i)try{r(JSON.parse(Buffer.concat(o).toString()||"{}"))}catch{t(new Error("request refused"))}}),e.on("error",t)});function Oo(e={}){let r=e.host||"127.0.0.1";if(!Xt.has(r))throw new Error("signer: loopback bind required");if(String(e.token||"").length<32)throw new Error("signer: strong auth token required");for(let a of["reserveLedger","validateReservation","commitLedger","releaseLedger","settleFailedLedger"])if(typeof e[a]!="function")throw new Error(`signer: ${a} is required`);if(typeof e.disarm!="function")throw new Error("signer: disarm callback is required");let t=e.confirmations||new pe,n=e.pending||new Map;function o(a){let c=a.artifact?.version===1&&a.artifact?.surface?a.artifact:null,d=c?.artifact||a.artifact||{};return{id:a.digest.slice(0,8),digest:a.digest,surface:c?.surface||"evm",action:c?.action||"evm",chain:d.chainId??d.network??null,to:d.to||c?.destination||null,value:d.value??d.message?.sellAmount??d.message?.makingAmount??null,receiver:d.message?.receiver||d.typedData?.message?.receiver||null,maker:d.message?.maker||d.typedData?.message?.maker||null,makingAmount:d.message?.makingAmount||d.typedData?.message?.makingAmount||null,takingAmount:d.message?.takingAmount||d.typedData?.message?.takingAmount||null,sellAmount:d.message?.sellAmount||d.typedData?.message?.sellAmount||null,buyAmount:d.message?.buyAmount||d.typedData?.message?.buyAmount||null,kind:d.kind||null,type:d.type??null,authorizationList:d.authorizationList||null,feeAmount:d.message?.feeAmount||d.typedData?.message?.feeAmount||null,createdAtMs:a.createdAtMs}}function i(a){let c=String(a||"").trim().toLowerCase().replace(/^0x/,"");return c?[...n.values()].filter(d=>d.digest.toLowerCase().startsWith(c)||d.digest.slice(0,8)===c):[...n.values()]}let s=e.origin||`http://${r}`;return To.createServer(async(a,c)=>{try{let d=String(a.headers.authorization||"").replace(/^Bearer /i,"");if(!ko(d,e.token))return x(c,401,{error:"unauthorized"});let l=No(a.headers.host);if(!Xt.has(l))return x(c,403,{error:"host refused"});if(a.headers.origin&&a.headers.origin!==s)return x(c,403,{error:"origin refused"});if(a.method==="GET"&&a.url==="/status"){let p=typeof e.readPolicy=="function"?e.readPolicy():e.policy,f=new Set(be),m=Array.isArray(p?.surfaces)?p.surfaces.filter(w=>typeof w=="string"&&f.has(w)):[];return x(c,200,{ok:!0,service:"oracle-signer",armed:e.isArmed?.()===!0,surfaces:m,sessionExpiresAtMs:e.sessionExpiresAtMs||null})}if(a.method==="POST"&&a.url==="/disarm")return e.disarm(),t.clear(),n.clear(),x(c,200,{ok:!0,armed:!1});if(!["GET","POST"].includes(a.method))return x(c,405,{error:"request refused"});if(a.method==="POST"&&String(a.headers["content-type"]||"").split(";",1)[0].trim().toLowerCase()!=="application/json")return x(c,415,{error:"request refused"});if(a.method==="GET"&&a.url==="/pending"){let p=[...n.values()].map(o);return x(c,200,{ok:!0,armed:e.isArmed?.()===!0,count:p.length,items:p})}if(a.method==="POST"&&a.url==="/pending"){if(e.autonomous===!0)return x(c,403,{error:"autonomous signer does not queue human approvals"});let f=(await we(a)).artifact;if(!f||typeof f!="object")return x(c,400,{error:"artifact required"});let m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return x(c,403,{error:"exact-human policy required"});let w=typeof e.nowMs=="function"?e.nowMs():Date.now();if(f?.surface==="cex"){if(typeof e.inspectCex!="function")return x(c,403,{error:"cex execution unavailable"});e.inspectCex(f,m,w)}else if(f?.version===1&&f?.surface)ne(f,m,{nowMs:w,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:A,...E}=f||{};me(E,m,{nowMs:w})}let h=z(f),g=f?.surface==="cex"?Object.freeze(structuredClone(f)):f;return n.set(h,{artifact:g,digest:h,createdAtMs:w}),x(c,200,{ok:!0,...o(n.get(h))})}if(a.method==="POST"&&a.url==="/ack"){if(e.autonomous===!0)return x(c,403,{error:"autonomous signer does not accept messaging acks"});let p=await we(a),f=i(p.digest||p.id);if(f.length===0)return x(c,404,{error:"no pending artifact"});if(f.length>1)return x(c,409,{error:"ambiguous digest; pass more hex"});let m=f[0];if((typeof e.readPolicy=="function"?e.readPolicy():e.policy)?.confirmationMode!=="exact-human")return x(c,403,{error:"exact-human policy required"});if(e.isArmed?.()!==!0)return x(c,403,{error:"signer is disarmed"});if(m.artifact?.surface==="cex"){if(typeof e.verifyCexOwnerProof!="function"||e.verifyCexOwnerProof(p.ownerProof,{digest:m.digest})!==!0)return x(c,403,{error:"exact owner Allow proof required"});if(typeof e.cexExecute!="function")return x(c,403,{error:"cex execution unavailable"});n.delete(m.digest);let A=await e.cexExecute(m.artifact);return x(c,200,{ok:!0,executed:!0,digest:m.digest,id:m.digest.slice(0,8),result:A})}n.delete(m.digest);let h=t.issue({artifact:m.artifact,owner:m.artifact?.owner??m.artifact?.from,ttlMs:p.ttlMs}),g=await Se(m.artifact,h,{...e,confirmations:t});return x(c,200,{ok:!0,executed:!0,confirmationNonce:h,digest:m.digest,id:m.digest.slice(0,8),result:g})}if(a.method==="POST"&&a.url==="/deny"){let p=await we(a),f=i(p.digest||p.id);return f.length===0?x(c,404,{error:"no pending artifact"}):f.length>1?x(c,409,{error:"ambiguous digest; pass more hex"}):(n.delete(f[0].digest),x(c,200,{ok:!0,denied:!0,id:f[0].digest.slice(0,8)}))}if(a.method==="POST"&&a.url==="/confirm"){if(e.autonomous===!0)return x(c,403,{error:"autonomous signer does not issue human confirmation nonces"});let p=await we(a);if(p.artifact?.surface==="cex")return x(c,403,{error:"cex requires pending owner ack"});let f=z(p.artifact),m=typeof e.readPolicy=="function"?e.readPolicy():e.policy;if(m?.confirmationMode!=="exact-human")return x(c,403,{error:"exact-human policy required"});let w=typeof e.nowMs=="function"?e.nowMs():Date.now();if(p.artifact?.version===1&&p.artifact?.surface)ne(p.artifact,m,{nowMs:w,verifyFeeWaiver:e.verifyFeeWaiver});else{let{tradeId:h,...g}=p.artifact||{};me(g,m,{nowMs:w})}return typeof e.confirmArtifact!="function"?x(c,403,{error:"local human confirmation unavailable"}):await e.confirmArtifact(p.artifact,f,m)!==!0?x(c,400,{error:"exact human confirmation refused"}):x(c,200,{confirmationNonce:t.issue({artifact:p.artifact,owner:p.artifact?.owner??p.artifact?.from,ttlMs:p.ttlMs})})}if(a.method==="POST"&&a.url==="/execute"){let p=await we(a);if(p.artifact?.surface==="cex")return x(c,403,{error:"cex requires pending owner ack"});let f=await Se(p.artifact,p.confirmationNonce,{...e,confirmations:t});return x(c,200,f)}return x(c,404,{error:"not found"})}catch(d){e.onError?.(String(d?.message||d));let l=String(a.url||"");return l==="/pending"||l==="/ack"||l==="/deny"?x(c,400,{error:String(d?.message||"request refused").slice(0,300)}):x(c,400,{error:"request refused"})}})}import{createHmac as Lo}from"node:crypto";import{HDNodeWallet as Po,Mnemonic as Bo,Wallet as tr}from"ethers";function Co(e){return BigInt(e).toString(16).padStart(64,"0")}function Qt(e){return e.slice(2).padStart(64,"0")}function Zt(e,r,t){return`0x42842e0e${Qt(e)}${Qt(r)}${Co(t)}`}var _o=/^(?:[a-z]+ ){11}[a-z]+$|^(?:[a-z]+ ){23}[a-z]+$/,Fo=/^(?:0x)?[0-9a-fA-F]{64}$/;function Mo(e){let r=String(e||"").trim().toLowerCase().replace(/\s+/g," ");if(!_o.test(r))return null;try{if(!Bo.isValidMnemonic(r))return null}catch{return null}return r}function $o(e){let r=String(e||"").trim();return Fo.test(r)?r.startsWith("0x")?r:`0x${r}`:null}function Ro(e,r){let t=Buffer.from(e.replace(/^0x/i,""),"hex");return`0x${Lo("sha256",t).update(`oracle-mint-fanout:v1:${r}`).digest("hex")}`}function Ue(e,r,t,n){return{index:e,address:String(r).toLowerCase(),path:t,kind:n}}function Do(e,{childCount:r}={}){let t=Number(r);if(!Number.isInteger(t)||t<1)throw new Error("hd-fanout: childCount must be a positive integer");if(t>32)throw new Error(`hd-fanout: childCount exceeds hard max ${32}`);let n=Mo(e);if(n){let i=[];for(let s=0;s<=t;s++){let u=`m/44'/60'/0'/0/${s}`,a=Po.fromPhrase(n,"",u);i.push(Ue(s,a.address,u,"bip44"))}return{kind:"bip44",main:i[0],children:i.slice(1)}}let o=$o(e);if(o){let i=new tr(o),s=[];for(let u=1;u<=t;u++){let a=new tr(Ro(o,u));s.push(Ue(u,a.address,`hmac:v1:${u}`,"hmac"))}return{kind:"hmac",main:Ue(0,i.address,"vault-key","hmac"),children:s}}throw new Error("hd-fanout: secret must be a BIP-39 mnemonic or a 32-byte hex key")}function qo(e,r){let t=String(r||"").toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw new Error("hd-fanout: vault address required");if(e.main.address!==t)throw new Error(`hd-fanout: derived main ${e.main.address} does not match vault ${t} (BIP-44 index 0 must be the vault wallet, or use the raw-key HMAC path)`)}function Uo(e,{nonce:r,value:t}){let n={type:2,chainId:e.chainId,to:e.to,data:e.data&&e.data!=="0x"?e.data:"0x",value:BigInt(t??e.value??0),gasLimit:BigInt(e.gasLimit),maxFeePerGas:BigInt(e.maxFeePerGas),maxPriorityFeePerGas:BigInt(e.maxPriorityFeePerGas||0)};return r!=null&&(n.nonce=Number(r)),n}async function Wo(e,r){if(e.valueMode!=="remainder")return e.value;if(typeof r!="function")throw new Error("mint-fanout: getBalance required for remainder sweep");let t=BigInt(await r(e.from)),n=BigInt(e.gasLimit)*BigInt(e.maxFeePerGas);return(t>n?t-n:0n).toString()}function Ho(e,r){if(e.kind!=="sweep-nft"||!e.needsTokenId)return e;if(r==null||String(r).length===0)throw new Error(`mint-fanout: hop ${e.step} needs tokenId after mint`);return{...e,needsTokenId:!1,tokenId:String(r),data:Zt(e.from,e.nftTo,BigInt(r))}}async function jo(e,{byAddress:r,getNonce:t,getBalance:n,tokenIdsByChildIndex:o={}}={}){if(!e||e.signed)throw new Error("mint-fanout: unsigned plan required");if(!(r instanceof Map))throw new Error("mint-fanout: wallet map required");let i=[],s=new Map;for(let u of e.hops){let a=Ho(u,o[u.walletIndex]),c=String(a.from).toLowerCase(),d=r.get(c);if(!d)throw new Error(`mint-fanout: no local key for ${c}`);let l=await Wo(a,n),p=a.nonce;if(p==null){if(typeof t!="function")throw new Error("mint-fanout: getNonce required when hops omit nonce");s.has(c)||s.set(c,Number(await t(c))),p=s.get(c),s.set(c,p+1)}let f=Uo(a,{nonce:p,value:l}),m=await d.signTransaction(f);i.push({step:a.step,kind:a.kind,walletIndex:a.walletIndex,from:a.from,to:a.to,chainId:a.chainId,value:String(l),nonce:p,delayMsAfter:a.delayMsAfter||0,signedRaw:m})}return{execution:"signed-local",signed:!0,main:e.main,chainId:e.chainId,contract:e.contract,hopCount:i.length,hops:i}}async function zo(e,{broadcastFn:r,sleepFn:t=n=>new Promise(o=>setTimeout(o,n))}={}){if(!e?.signed)throw new Error("mint-fanout: signed plan required");if(typeof r!="function")throw new Error("mint-fanout: broadcastFn required");let n=[];for(let o of e.hops){let i=await r(o.signedRaw,o);if(!i?.hash)throw new Error(`mint-fanout: hop ${o.step} broadcast returned no hash`);n.push({step:o.step,kind:o.kind,from:o.from,hash:i.hash}),o.delayMsAfter>0&&await t(o.delayMsAfter)}return{ok:!0,receipts:n}}export{pe as ConfirmationStore,be as PUBLIC_SIGNER_SURFACES,no as REVIEWED_EVM_SELECTORS,z as artifactDigest,me as assertExactPolicy,qo as assertMainMatchesVault,zo as broadcastMintFanout,Oo as createSignerServer,oo as createSurfaceAdapters,Do as deriveFanoutAccounts,fe as evmTransactions,Se as executeConfirmedArtifact,ho as inspectArtifactForConfirmation,Ht as inspectEvmBatch,jt as inspectEvmNft,zt as publicFeeBps,jo as signMintFanoutPlan,io as surfaceAdapterFor,ne as validateSurfaceEnvelope};