@oracle-agent/oracle 0.35.4 → 0.35.6

package/dist/bin/oracle-public-server.mjs

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
-var ve=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};import te from"node:net";import Nr from"node:dns";function xe(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let d=c.split(":"),f=d.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(v=>!Number.isInteger(v)||v<0||v>255))return null;d.splice(d.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return d.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:d.map(u=>Number.parseInt(u,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let a=t.includes("::"),l=8-i.length-s.length;if(!a&&l!==0||a&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(c=>[c>>8,c&255]))}function ze(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function je(e){if(te.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(te.isIPv6(e)){let t=xe(e);if(!t)return!1;let r=xe("::ffff:0:0");return ze(t,r,96)?je([...t.slice(12)].join(".")):ze(t,xe("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>ze(t,xe(o),i)):!1}return!1}function Pr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Cr.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=te.isIP(r);return n!==0&&!je(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function We(e,{lookupFn:t=Nr.promises.lookup}={}){let r=Pr(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:te.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!je(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function Ke({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let d=await t();r=d.Agent,n=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(te.isIPv6(f.address)?6:4)})),a=(d,f,u)=>{i.set(o(d),s(typeof f=="string"?[{address:f,family:u}]:f))},l=d=>{let f=o(d);if(te.isIP(f))return[{address:f,family:te.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return u},p=new r({connect:{lookup(d,f,u){let v;try{v=l(d)}catch(x){return u(x)}return f?.all?u(null,v):u(null,v[0].address,v[0].family)}}}),c=$r((d,f={})=>n(d,{...f,dispatcher:p}),a);return{dispatcher:p,fetch:c,pin:a,resolve:l,async close(){try{await p.destroy()}catch{}}}}function $r(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Ge]=Object.freeze({pin:t}),e}function Ye(e){return typeof e=="function"&&typeof e[Ge]?.pin=="function"}function tn(e,t,r){if(!Ye(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Ge].pin(t,r)}var Cr,Ge,nn=ve(()=>{Cr=new Set(["localhost","metadata.google.internal","metadata.goog"]);Ge=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as Or}from"node:crypto";function Fr(e){let t=String(e||"").toLowerCase();return ln.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function Mr(e){let t={};for(let[r,n]of Object.entries(e||{}))Fr(r)||(t[r]=n);return t}function qr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Dr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function Hr(e,t,r,n={}){let o={};for(let[c,d]of Object.entries(r||{}))o[c.toLowerCase()]=d;let i=Object.keys(o).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),a=[...new Set([...ln,...i])].sort().map(c=>`${c}=${o[c]??""}`).join(`
-`),l=Or("sha256").update(a).digest("hex").slice(0,32),p=`${n.untrustedUrl?"untrusted":"trusted"}:${n.maxResponseBytes??"unbounded"}`;return`${e} ${t} ${p} ${l}`}function Vr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,on):Math.min(250*2**e,on)+Math.floor(Math.random()*100)}function ye(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Xe(e,t,r){return ye(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function be(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function jr(e){return e?e.byteLength??e.length??0:0}async function an(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(be(e),!n))throw Xe(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!n)throw Xe(r,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let a=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(a.push(Buffer.from(d)),l+=jr(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!n))throw Xe(r,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(p?c.subarray(0,t):c).toString("utf8")}function cn(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Wr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:p=null,importUndici:c,validateResponse:d,signal:f}){let u=new AbortController,v=setTimeout(()=>u.abort(),i),x=f?typeof AbortSignal.any=="function"?AbortSignal.any([f,u.signal]):f:u.signal,y=null,I=t,k=s?{lookupFn:s}:{};if(l&&!a&&!Ye(I))throw ye(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let M=async(m,{status:g=null}={})=>{let A=await We(m,k);if(!A.ok)throw ye(g==null?`HTTP refused ${m}: ${A.error}`:`HTTP redirect to ${m} ${A.error}`,g==null?{}:{status:g});let S=new URL(m).hostname;if(a){if(y&&(await y.close(),y=null),!y)try{y=await Ke({requireUndici:!0,...c?{importUndici:c}:{}})}catch(N){throw ye(g==null?`HTTP refused ${m}: ${N?.message||N}`:`HTTP redirect to ${m} refused: ${N?.message||N}`,g==null?{}:{status:g})}y.pin(S,A.addresses),I=y.fetch}else tn(I,S,A.addresses);return A};try{let m=String(e),g={...n||{}};l&&await M(m);for(let A=0;A<=sn;A+=1){let S=await I(m,{method:r,headers:g,body:o,signal:x,redirect:"manual"});if(Ur.has(S.status)){if(r!=="GET"&&r!=="HEAD"){let L=await an(S,p??Br,{url:m,truncate:!0}),H=new Error(`HTTP ${S.status} ${r} ${m} redirected non-idempotent request`);throw H.status=S.status,H.body=cn(L)??L.slice(0,300),H}if(A===sn)throw be(S),new Error(`HTTP redirect loop for ${e}`);let C=S.headers?.get?.("location"),R;try{R=qr(C,m)}catch(L){throw be(S),L}let Z=!Dr(R,m);if(be(S),Z&&(g=Mr(g)),l)await M(R,{status:S.status});else if(Z){let L=await We(R,k);if(!L.ok){let H=new Error(`HTTP redirect from ${m} ${L.error}`);throw H.status=S.status,H.retryable=!1,H}a&&L.addresses?.length&&(y||(y=await Ke(c?{importUndici:c}:{})),y&&(y.pin(new URL(R).hostname,L.addresses),I=y.fetch))}m=R;continue}if(typeof d=="function")try{await d(S,{url:m})}catch(C){throw be(S),ye(C?.message||String(C))}let N=await an(S,p,{url:m,onOversize:()=>u.abort()}),z=cn(N);if(!S.ok){let C=new Error(`HTTP ${S.status} ${r} ${m}`);throw C.status=S.status,C.retryAfter=S.headers?.get?.("retry-after")??null,C.body=z??N.slice(0,300),C}return z??N}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(v),y&&await y.close()}}async function O(e,t={}){let r=t.fetchImpl||globalThis.fetch;if(typeof r!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let n=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},s=t.body;s!=null&&typeof s!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",s=JSON.stringify(s));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):Lr,l=t.lookupFn,p=!t.fetchImpl,c=t.untrustedUrl===!0,d=t.importUndici,f=t.validateResponse,u=t.signal,v=Number(t.maxResponseBytes),x=Number.isFinite(v)&&v>0?Math.floor(v):null,y=async()=>{let g;for(let A=0;A<=a;A++){u?.throwIfAborted?.();try{return await Wr(e,{fetchImpl:r,method:o,headers:i,body:s,timeoutMs:n,lookupFn:l,realFetch:p,untrustedUrl:c,maxResponseBytes:x,importUndici:d,validateResponse:f,signal:u})}catch(S){g=S;let N=S?.status,z=S?.name==="AbortError"||S?.name==="TimeoutError"||u?.aborted,C=new Set([408,425,429]),R=S?.retryable===!1?!1:N!=null?C.has(N)||Rr.has(N)&&rn.has(o):!z&&rn.has(o);if(A===a||!R)throw S;let Z=Vr(A,S?.retryAfter);u?await new Promise((L,H)=>{let Le=setTimeout(L,Z);u.addEventListener("abort",()=>{clearTimeout(Le),H(u.reason||new DOMException("Aborted","AbortError"))},{once:!0})}):await zr(Z)}}throw g};if(!(t.dedupe!==!1&&!u&&o==="GET"&&s==null))return y();let k=Hr(o,e,i,{untrustedUrl:c,maxResponseBytes:x}),M=Je.get(k);if(M)return M;let m=y().finally(()=>Je.delete(k));return Je.set(k,m),m}async function P(e){let t=Date.now();try{let r=await e();return{ok:!0,ms:Date.now()-t,data:r}}catch(r){return{ok:!1,ms:Date.now()-t,error:String(r.message||r),status:r.status??null}}}async function Y(e,t,r){let n=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,n.length||1)),i=new Array(n.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<n.length;){let a=s++;i[a]=await r(n[a],a)}})),i}var Rr,rn,Lr,on,ln,Ur,sn,Br,Je,zr,U=ve(()=>{nn();Rr=new Set([408,425,429,500,502,503,504]),rn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Lr=2,on=4e3,ln=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],Ur=new Set([301,302,303,307,308]),sn=3,Br=64*1024;Je=new Map;zr=e=>new Promise(t=>setTimeout(t,e))});function dn(e){return Kr.get(Number(e))||null}function pn(e,t=process.env){let r=dn(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}var un,Kr,fn=ve(()=>{un={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Kr=new Map(Object.values(un).map(e=>[e.chainId,e]))});import{Interface as Gr,getAddress as Yr}from"ethers";function Qe(e,t){try{return Yr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Xr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=pn(e,r);return n||Jr[Number(e)]||null}function Zr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Qr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}async function W(e,t,r=[],n={}){let o=String(t||"");Zr(o);let i=Xr(e,n);if(!i)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let a=await O(i,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:r},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal});if(a?.error){let l=new Error(a.error.message||JSON.stringify(a.error));throw l.code=a.error.code,l}return a.result}async function Ze(e,t={}){let r=await W(e,"eth_blockNumber",[],t);return parseInt(r,16)}async function et(e,t,r={}){if(!t)throw new Error("rpcGetBalance requires address");let n=await W(e,"eth_getBalance",[t,"latest"],r);return{chainId:Number(e),address:t,balanceWei:BigInt(n).toString(),balanceHex:n}}async function hn(e={},t={}){let r=Number(e.chainId??t.chainId??1),n=Qe(e.token||e.tokenAddress,"token"),o=Qe(e.owner,"owner"),i=Qe(e.spender,"spender"),s=mn.encodeFunctionData("allowance",[o,i]),a=await W(r,"eth_call",[{to:n,data:s},e.blockTag||"latest"],t),l=mn.decodeFunctionResult("allowance",a),p=BigInt(l[0]);return{chainId:r,token:n,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var mn,Jr,Qr,ae=ve(()=>{U();fn();mn=new Gr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Jr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};Qr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/});import{createServer as Pi}from"node:http";import{readFileSync as ar,existsSync as $i}from"node:fs";import{dirname as Oi,join as kt,normalize as Ri,sep as Li}from"node:path";import{fileURLToPath as Ui}from"node:url";import{createHash as fr}from"node:crypto";var me=1,$t=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),mr=Object.freeze(["read","simulate"]),Ot=1e4,Rt=1440*60,Lt=128,Ut=256,Bt=64,Ft=256,Mt=/^0x[0-9a-fA-F]{40}$/,hr=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,yr=/^[a-z][a-z0-9_-]*:\*$/,br=/^[A-Za-z0-9._:-]+$/,gr=/^[A-Za-z0-9._:-]+$/,qt=/^(0|[1-9][0-9]*)$/,j=class extends Error{constructor(t){let r=t.map(n=>`${n.field}: ${n.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${r.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function Dt(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function wr(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return qt.test(t)?t:null}return null}function G(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!qt.test(t))return null;let r=Number(t);return Number.isSafeInteger(r)?r:null}return null}function Me(e){let t=String(e).split(":")[0];return mr.includes(t)}function qe(e,t={}){let r=[],n=(d,f)=>r.push({field:d,message:f});if(!Dt(e))return n("grant","grant must be a plain object"),{ok:!1,errors:r,grant:null};for(let d of Object.keys(e))$t.includes(d)||n(d,"unknown field is not allowed");for(let d of $t)(!(d in e)||e[d]==null)&&n(d,"required field is missing");if(r.length)return{ok:!1,errors:r,grant:null};let o={},i=G(e.chainId);i==null||i<=0?n("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!Mt.test(f.trim())?n(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)n("actions","must be a non-empty array of action scopes");else if(e.actions.length>Bt)n("actions",`too many actions (max ${Bt})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){n("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&yr.test(u)?d.push(u):n("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!hr.test(u)){n("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))n("targets","must be an array of contract addresses");else if(e.targets.length>Ft)n("targets",`too many targets (max ${Ft})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!Mt.test(u)){n("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!Me(u));(f.length>0||o.actions.length===0)&&n("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=wr(e[d]);f==null?n(d,"must be a non-negative integer wei amount"):o[d]=f}let s=G(e.maxSlippageBps);s==null||s>Ot?n("maxSlippageBps",`must be an integer between 0 and ${Ot}`):o.maxSlippageBps=s;let a=864e10,l=G(e.expiresAt);if(l==null||l<=0)n("expiresAt","must be a positive unix-seconds timestamp");else if(l>a)n("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=G(t.now);d==null?n("expiresAt","opts.now must be a unix-seconds integer"):l<=d?n("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>Rt&&n("expiresAt",`grant exceeds the hard 24-hour TTL (${Rt} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():G(e.nonce)!=null?String(G(e.nonce)):null;!p||p.length>Lt||!br.test(p)?n("nonce",`must be a non-empty string (max ${Lt} chars, [A-Za-z0-9._:-])`):o.nonce=p;let c=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!c||c.length>Ut||!gr.test(c)?n("revocationKey",`must be a non-empty public identifier (max ${Ut} chars, [A-Za-z0-9._:-])`):o.revocationKey=c,r.length?{ok:!1,errors:r,grant:null}:{ok:!0,errors:[],grant:o}}function Ae(e,t={}){let{ok:r,errors:n,grant:o}=qe(e,t);if(!r)throw new j(n);return o}function De(e,t={}){let r=Ae(e,t),o=Object.keys(r).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(r[i])}`);return`{"version":${me},${o.join(",")}}`}function Ee(e,t={}){return fr("sha256").update(De(e,t),"utf8").digest("hex")}function Ht(e,t){let r=G(t),n=G(Dt(e)?e.expiresAt:null);return r==null||n==null?!0:n<=r}var Vt="oracle-connect-request",Sr="oracle-unsigned-grant",vr="oracle-grant-canonical-json-utf8-v1",V=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},Ar=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Er=Object.freeze(["privkey","wif","xprv","seed"]);function He(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return Ar.test(t)||Er.includes(r)}var zt=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),jt=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function xr(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>jt.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Wt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new V("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let r=xr(t);for(let{rule:o,re:i}of zt)if(i.test(r))throw new V("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new V("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&He(o))throw new V(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function D(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=jt.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of zt)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new V(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&He(o))throw new V(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");D(o,`${t}[key]`,r),D(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())D(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>D(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if(He(o))throw new V(`${t}.${o}`,"forbidden-key-name");D(i,`${t}.${o}`,r,o)}return e}function he(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))he(t)}return e}function Kt(e,t){let r=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(r)||r<=0)throw new j([{field:t,message:"must be a positive unix-seconds integer"}]);return r}function Gt(e){if(e?.now==null)throw new j([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return Kt(e.now,"opts.now")}function Ir(e){return new Date(e*1e3).toISOString()}function kr(e,t){let r=e.actions.every(n=>Me(n));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${me}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${Ir(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",r?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
-`)}function Yt(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new j([{field:"request",message:"request must be a plain object"}]);let r=Gt(t),{ttlSeconds:n,...o}=e,i={...o};if(n!=null){if(i.expiresAt!=null)throw new j([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=Kt(n,"ttlSeconds");i.expiresAt=r+l}let s=Ae(i,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),a=he({kind:Vt,version:me,grant:s});return D(a)}function Jt(e={},t={}){let r=Gt(t),n=e&&e.kind===Vt?e.grant:e,o=Ae(n,{now:r,allowWildcardActions:t.allowWildcardActions===!0}),i=De(o),s=Ee(o),a=Buffer.from(i,"utf8"),l=he({kind:Sr,unsigned:!0,payload:he({version:me,grantId:s,grant:o,canonical:i}),signing:he({scheme:vr,message:i,bytesHex:`0x${a.toString("hex")}`,byteLength:a.length,sha256:s}),render:kr(o,s)});return D(l)}var se=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function Xt(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function _r(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function Ve(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function Tr(e,t,r){if(e==null)return!1;if(typeof e=="function")return e(t,r)===!0;let n=[t,r.revocationKey];return e instanceof Set?n.some(o=>e.has(o)):Array.isArray(e)?n.some(o=>e.includes(o)):typeof e.has=="function"?n.some(o=>e.has(o)):!1}function Qt(e,{now:t,revoked:r}={}){let n=Ve(t),{grant:o,revoked:i}=_r(e),{ok:s,grant:a}=qe(o);if(!s)return{status:se.INVALID,id:null,grant:null};let l=Ee(a);return i||Tr(r,l,a)?{status:se.REVOKED,id:l,grant:a}:Ht(a,n)?{status:se.EXPIRED,id:l,grant:a}:{status:se.ACTIVE,id:l,grant:a}}function Zt(e,{now:t,revoked:r,agentAddress:n,accountAddress:o,chainId:i}={}){let s=Ve(t),a=n!=null?String(n).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,c=[];for(let d of Xt(e)){let{status:f,id:u,grant:v}=Qt(d,{now:s,revoked:r});f===se.ACTIVE&&(a!=null&&v.agentAddress!==a||l!=null&&v.accountAddress!==l||p!=null&&v.chainId!==p||c.push(Object.freeze({id:u,grant:v})))}return c.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),D(Object.freeze(c))}function en(e,t,{now:r,revoked:n}={}){let o=Ve(r),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of Xt(e)){let a=Qt(s,{now:o,revoked:n});if(a.status!==se.INVALID&&a.id===i)return D(Object.freeze({id:a.id,status:a.status,grant:a.grant}))}return null}import{Interface as vn,getAddress as to,id as An}from"ethers";ae();U();var Ds=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var Vs=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),tt=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),nt=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ae();ae();var Ie=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);U();ae();var yn=new vn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),bn=new vn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),no=An("Approval(address,address,uint256)"),ga=An("ApprovalForAll(address,address,bool)"),ro=1e4,oo=2e5,io=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),so=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),ao=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),co=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),lo=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),uo=(1n<<256n)-1n,po=uo/2n,fo=4320*60*60*1e3,mo=360*60*1e3,ho=600*1e3,yo=45*1e3,bo=512,go=128,gn=new Map,rt=new Map,wn=new Map;function ce(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function it(e,t,r){let n=e.get(t);return n?Date.now()-n.at>r?(e.delete(t),null):n:null}function ke(e,t,r,n){for(e.delete(t),e.set(t,{at:Date.now(),value:r});e.size>n;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function wo(e,t){try{return to(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function So(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function Sn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function vo({unlimited:e,spenderLabel:t,lastActivityAt:r}){if(e)return"unlimited";if(!t)return"unknown-spender";if(r){let n=Date.parse(r);if(Number.isFinite(n)&&Date.now()-n>fo)return"stale"}return"scoped"}function Ao(e,t,r){if(r)return"UNLIMITED";if(t==null)return e.toString();let n=10n**BigInt(t),o=e/n,i=e%n;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Eo(e,t,r,n){let o=`${e}:${t}`,i=n?.get(o);if(i)return i;if(ce(r)){let a=it(gn,o,mo);if(a)return a.value}let s=(async()=>{let a=async d=>{try{let f=yn.encodeFunctionData(d,[]),u=await W(e,"eth_call",[{to:t,data:f},"latest"],r);return!u||u==="0x"?null:yn.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([a("decimals"),a("symbol")]),c={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return ce(r)&&ke(gn,o,c,bo),c})();return n?.set(o,s),s}async function xo(e,t,r){let n=Math.min(Math.max(Number(r.lookbackBlocks)||ro,1),oo),o=await Ze(e,r);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-n),s=await W(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[no,So(t)]}],r);if(!Array.isArray(s))throw new Error("log scan returned no array");let a=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),c=l?.topics?.[2];!p||!c||a.set(`${p}:${Sn(c)}`,{token:p,spender:Sn(c)})}return{pairs:[...a.values()],fromBlock:i,toBlock:o}}function Io(e){return(lo[e]||[]).flatMap(r=>so.map(n=>({token:r.address,spender:n.address,symbol:r.symbol,decimals:r.decimals})))}async function ko(e,t,r={}){let n=[],o="direct-probe",i=null,s=Io(e),a=ot(e),l=ce(r)&&it(rt,e,ho)?.value===!1;if(s.length===0&&a.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await xo(e,t,r);n=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},ce(r)&&ke(rt,e,!0,64)}catch{if(ce(r)&&ke(rt,e,!1,64),n=s,n.length===0&&a.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await Y(n,r.concurrency||4,async u=>{try{let v=await hn({chainId:e,token:u.token,owner:t,spender:u.spender},r),x=BigInt(v.allowance);if(x<=0n)return null;let y=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Eo(e,u.token,r,p),I=x>=po,k=io[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:y.symbol,decimals:y.decimals,spender:u.spender,spenderLabel:k,allowance:x.toString(),allowanceDisplay:Ao(x,y.decimals,I),unlimited:I,lastActivityAt:null,risk:vo({unlimited:I,spenderLabel:k,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await To(e,t,r);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:n.length,collectionsProbed:ot(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function _o(e,t,r,n,o){try{let i=bn.encodeFunctionData("isApprovedForAll",[r,n]),s=await W(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!bn.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function ot(e){return(co[e]||[]).flatMap(r=>ao.map(n=>({collection:r.address,collectionName:r.name,operator:n.address,operatorLabel:n.label})))}async function To(e,t,r){let n=ot(e);return n.length===0?[]:(await Y(n,r.concurrency||4,async i=>await _o(e,i.collection,t,i.operator,r)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function En(e={},t={}){let r=wo(e.owner||e.address,"owner"),n=new Map(Ie.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>n.has(u)):[...n.keys()],i=`${r}:${[...o].sort((u,v)=>u-v).join(",")}:${e.lookbackBlocks??""}`,s=ce(t)&&!e.refresh;if(s){let u=it(wn,i,yo);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let a=await Y(o,e.concurrency||3,u=>ko(u,r,{...t,lookbackBlocks:e.lookbackBlocks})),l=a.flatMap(u=>u.approvals),p=a.map(u=>u.scan),c=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:r,scannedRange:c?`last ${c.toBlock-c.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&ke(wn,i,f,go),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as Xo}from"ethers";U();ae();U();var xn="mainnet-beta",No="https://api.mainnet-beta.solana.com",st="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function Co(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||No).trim()}function ne(e,t="address"){let r=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(r))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return r}function Po(e,t){return t?[...e,{commitment:t}]:e}async function In(e,t=[],r={}){let n=String(e||"");if(n==="sendTransaction"||n==="sendRawTransaction"||n==="requestAirdrop"||n==="requestAirDrop"||/airdrop/i.test(n)||/^send/i.test(n))throw new Error(`solana-rpc: ${n} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await O(Co(r),{method:"POST",body:{jsonrpc:"2.0",id:r.id||1,method:e,params:t},fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function kn(e={},t={}){let r=ne(e.address||e.owner,"address"),n=await In("getBalance",Po([r],e.commitment),t);return{provider:"solana-rpc",cluster:xn,address:r,lamports:String(n?.value??0),slot:n?.context?.slot??null,raw:n}}function $o(e={}){let t=e.account?.data?.parsed?.info||{},r=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(r.amount??"0"),decimals:r.decimals??null,uiAmount:r.uiAmount??null,uiAmountString:r.uiAmountString??null,raw:e}}async function at(e={},t={}){let r=ne(e.owner||e.address,"owner"),n=e.mint?{mint:ne(e.mint,"mint")}:{programId:ne(e.programId||st,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await In("getTokenAccountsByOwner",[r,n,o],t),s=Array.isArray(i?.value)?i.value.map($o):[];return{provider:"solana-rpc",cluster:xn,owner:r,filter:n,slot:i?.context?.slot??null,accounts:s,raw:i}}U();var Oo="mainnet",Ro="https://mempool.space/api",Lo="https://mempool.space/testnet/api";function _n(e={}){return String(e.network||process.env.BTC_NETWORK||Oo).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Uo(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):_n(e)==="testnet"?Lo:Ro}function J(e,t="address"){let r=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(r)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(r))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return r}async function Bo(e,t={}){let r=`${Uo(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(r,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),i=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${i.slice(0,160)}`);return i}async function Fo(e,t={}){let r=await Bo(e,t);try{return JSON.parse(r)}catch{return r}}async function Tn(e={},t={}){let r=J(e.address||e.addr,"address"),n=await Fo(`/address/${r}`,t),o=n.chain_stats||{},i=n.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),a=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:_n(t),address:r,balanceSats:String(s-a),chainStats:o,mempoolStats:i,raw:n}}var Nn="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function le({provider:e,defaultUrl:t,hosts:r=[],url:n,strict:o=!1}){let s=(String(n??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Cn(t)};let a;try{a=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=a.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Cn(t),...r]).has(l)){let c=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return a.protocol==="http:"&&!c?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[Nn]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${Nn}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Cn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function re(e,t,r){let n={...e};if(!r)return n;for(let[o,i]of Object.entries(t||{}))i&&(n[o]=i);return n}function ct(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Mo=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function qo(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",r=!1;try{let n=ct(e);if(n){let o=new URL(n).host,i=new URL(n).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);r=Mo.includes(o)&&(i==="https:"||s)}}catch{r=!1}return re({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},r)}async function Pn(e,t={}){let n=await(t.fetchImpl||fetch)(e,{method:"GET",headers:qo(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await n.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!n.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${n.status} ${String(o).slice(0,160)}`);return i}async function $n(e={},t={}){let r=J(e.address||e.addr,"address"),n=ct(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${n}/v1/indexer/address/${r}/runes/balance-list?start=0&limit=100`,`${n}/v1/runes/address/${r}`,`${n}/runes/balance/${r}`,`${n}/address/${r}/runes`],i=null;for(let s of o)try{let a=await Pn(s,t),l=Do(a);return{provider:"bitcoin-meta",address:r,ok:!0,count:l.length,balances:l,source:s}}catch(a){i=a}return{provider:"bitcoin-meta",address:r,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function Do(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({rune:n.rune||n.runeid||n.runeId||n.spacedRune||n.name||n.ticker||null,runeId:n.runeid||n.runeId||n.id||null,amount:String(n.amount??n.balance??n.total??n.qty??"0"),symbol:n.symbol||null,divisibility:n.divisibility??n.div??null,raw:n}))}async function _e(e={},t={}){let r=J(e.address||e.addr,"address"),n=ct(t);if(!n)return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${n}/v1/indexer/address/${r}/inscription-data?cursor=0&size=${o}`,`${n}/v1/inscriptions/address/${r}?limit=${o}`,`${n}/address/${r}/inscriptions?limit=${o}`],s=null;for(let a of i)try{let l=await Pn(a,t),p=Ho(l);return{provider:"bitcoin-meta",address:r,ok:!0,count:p.length,inscriptions:p,source:a}}catch(l){s=l}return{provider:"bitcoin-meta",address:r,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function Ho(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(n=>({id:n.inscriptionId||n.id||n.inscription_id||null,number:n.inscriptionNumber??n.number??null,sat:n.sat||n.satoshi||null,contentType:n.contentType||n.content_type||null,utxo:n.utxo||n.output||(n.txid!=null?`${n.txid}:${n.vout??n.n}`:null),raw:n}))}U();var Vo="https://api.hyperliquid.xyz/info",zo="https://api.hyperliquid-testnet.xyz/info";function jo({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let r=process.env.HL_API_URL.replace(/\/$/,"");return r.endsWith("/info")?r:`${r}/info`}return e||process.env.HL_TESTNET==="1"?zo:Vo}async function lt(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let r=jo(t);return O(r,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function On(e={}){return lt({type:"allMids"},e)}async function Rn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return lt({type:"spotClearinghouseState",user:e},t)}async function Ln(e,t={}){if(!e)throw new Error("hlUserState requires user");return lt({type:"clearinghouseState",user:e},t)}U();var Wo="https://coins.llama.fi";function Ko(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||Wo).replace(/\/$/,"")}async function ut(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let r=e.map(encodeURIComponent).join(",");return O(`${Ko(t)}/prices/current/${r}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}U();var Un=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,Go=/[<>&`*_~[\]()|\\]/g,Yo=/[\u0000-\u001F\u007F]/g;function dt(e,{max:t=32,fallback:r=""}={}){return e==null?r:String(e).normalize("NFKC").replace(Un,"").replace(Yo,"").replace(Go,"").replace(/\s+/g," ").trim().slice(0,t).trim()||r}function pt(e){if(e==null)return!1;let t=String(e);return Un.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var Bn=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function Jo(e,t={}){let r=Number(e),n=t.baseUrl||Bn[r];if(!n)throw new Error(`Blockscout not configured for chainId ${r}`);return n.replace(/\/$/,"")}function Fn(e){return!!Bn[Number(e)]}async function Mn(e={},t={}){if(!e.address)throw new Error("address required");let r=Number(e.chainId||1),n=`${Jo(r,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await O(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function qn(e=[],{fungibleOnly:t=!0}={}){let r=[];for(let n of e){if(!n||typeof n!="object")continue;let o=n.token&&typeof n.token=="object"?n.token:{},i=String(o.type||n.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||n.token_address||n.tokenAddress||null;if(!s||typeof s!="string")continue;let a=String(n.value??n.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(a)||a==="0")continue;let l=o.decimals??n.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=dt(o.symbol||o.name,{max:32,fallback:"TOKEN"}),c=dt(o.name,{max:80,fallback:""})||null;r.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:c,decimals:l,amountRaw:a,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:pt(o.symbol)||pt(o.name)||void 0})}return r}var Qo="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",Hn=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function X(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Te(e,...t){for(let r of t){let n=String(e?.[r]||"").trim();if(n)return n}return null}function Dn(e){if(!e)return null;try{return Xo(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function ht(e={},t=process.env){let r=e.addresses||{},n=Dn(r.evm||e.evmAddress||Te(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=r.solana||e.solanaAddress||Te(t,"ORACLE_SOLANA_ADDRESS"),i=r.bitcoin||e.bitcoinAddress||Te(t,"ORACLE_BITCOIN_ADDRESS"),s=Dn(r.hyperliquid||e.hyperliquidAddress||Te(t,"ORACLE_HYPERLIQUID_ADDRESS")||n);return{evm:n,solana:o?ne(o,"portfolio Solana address"):null,bitcoin:i?J(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function ge(e,t){let r=BigInt(String(e||"0")),n=Number(t);if(!Number.isInteger(n)||n<0||n>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(n===0)return r.toString();let o=r<0n,i=o?-r:r,s=10n**BigInt(n),a=i/s,l=String(i%s).padStart(n,"0").replace(/0+$/,"");return`${o?"-":""}${a}${l?`.${l}`:""}`}function ue(e){let t=Number(e);return Number.isFinite(t)?t:null}function Ne(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function Q(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Vn(e,t){let r=Hn[t],n=r?e?.coins?.[r]:null,o=Number(n?.price);return{key:r||null,priceUsd:Number.isFinite(o)?o:null,timestamp:n?.timestamp??null,confidence:n?.confidence??null}}function Zo(e){let t=new Map;for(let r of e)if(r?.ok)for(let n of r.data?.accounts||[]){let o=BigInt(String(n.amount||"0"));if(o===0n||!n.mint)continue;let i=`${n.mint}:${n.decimals??"unknown"}`,s=t.get(i)||{mint:n.mint,amountRaw:0n,decimals:n.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,r.program&&s.programs.add(r.program),t.set(i,s)}return[...t.values()].map(r=>{let n=r.amountRaw.toString(),o=r.decimals==null?null:ge(n,r.decimals),i=r.decimals===0&&r.amountRaw===1n;return{mint:r.mint,amountRaw:n,amount:o,decimals:r.decimals,tokenPrograms:[...r.programs],accountCount:r.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function ft(e,t){return{family:e,status:"unsupported",reason:t}}function mt(e,t){if(!e||e.status!=="ok")return e;let r=Vn(t,e.symbol),n=ue(e.amount),o=n!=null&&r.priceUsd!=null?Ne(n*r.priceUsd):null;return{...e,price:r,usdValue:o}}async function zn(e={},t={}){let r=new Date().toISOString(),n=ht(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,a=new Map(Ie.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...a.keys()],p=[...new Set(Object.values(Hn))],c=o?P(()=>ut(p,X(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=Y(l,e.concurrency||5,async h=>{let b=a.get(h);if(!b)return{family:"evm",chainId:h,name:null,address:n.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!n.evm)return{family:"evm",chainId:h,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let E={...X(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},T=await P(()=>et(h,n.evm,E));if(!T.ok)return{family:"evm",chainId:h,name:b.name,address:n.evm,status:"unavailable",latencyMs:T.ms,error:T.error};let $=b.nativeCurrency?.decimals??18,q=b.nativeCurrency?.symbol||"NATIVE",w=T.data.balanceWei,_={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&Fn(h)){let ee=await P(()=>Mn({chainId:h,address:n.evm},{...X(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));ee.ok?_={status:"ok",assets:qn(ee.data,{fungibleOnly:!0}).map(pe=>{let fe=ge(pe.amountRaw,pe.decimals);return{...pe,amount:fe,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:ee.ms}:_={status:"unavailable",assets:[],reason:ee.error||"blockscout token-balances failed",source:"blockscout",latencyMs:ee.ms}}return{family:"evm",chainId:h,name:b.name,address:n.evm,status:"ok",latencyMs:T.ms,native:{status:"ok",symbol:q,amountRaw:w,decimals:$,amount:ge(w,$)},fungibleTokens:_,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:_.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!n.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=X(t,"solana"),b=await P(()=>kn({address:n.solana},h)),E=i||s?await Promise.all([P(()=>at({owner:n.solana,programId:st},h)).then(_=>({..._,program:"spl-token"})),P(()=>at({owner:n.solana,programId:Qo},h)).then(_=>({..._,program:"token-2022"}))]):[],T=Zo(E),$=T.filter(_=>_.classification==="collectible-candidate"),q=T.filter(_=>_.classification!=="collectible-candidate"),w=E.filter(_=>!_.ok).map(_=>_.error);return{family:"solana",name:"Solana Mainnet",address:n.solana,status:b.ok||E.some(_=>_.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:ge(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:i?w.length===E.length?"unavailable":w.length?"partial":"ok":"not-requested",assets:i?q:[],errors:w,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?w.length===E.length?"unavailable":"partial":"not-requested",assets:s?$:[],errors:w,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!n.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=X(t,"bitcoin"),b=X(t,"bitcoinMeta"),[E,T,$]=await Promise.all([P(()=>Tn({address:n.bitcoin},h)),i?P(()=>$n({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?P(()=>_e({address:n.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),q=T.ok?T.data:null,w=$.ok?$.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:n.bitcoin,status:E.ok||q?.ok||w?.ok?"ok":"unavailable",native:E.ok?{status:"ok",symbol:"BTC",amountRaw:E.data.balanceSats,decimals:8,amount:ge(E.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:E.error},fungibleTokens:{status:i?q?.ok?"ok":"unavailable":"not-requested",assets:q?.balances||[],error:q?.ok?null:q?.error||T.error,verification:"indexer-reported"},collectibles:{status:s?w?.ok?"ok":"unavailable":"not-requested",assets:w?.inscriptions||[],error:w?.ok?null:w?.error||$.error,unknownNotEmpty:!!w?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),v=(async()=>{if(!n.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=X(t,"hyperliquid"),[b,E,T]=await Promise.all([P(()=>Rn(n.hyperliquid,h)),P(()=>Ln(n.hyperliquid,h)),P(()=>On(h))]),$=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(w=>Q(w.total)||Q(w.hold)).map(w=>({coin:w.coin||null,total:String(w.total??"0"),hold:String(w.hold??"0"),priceUsd:null,usdValue:null})),q=(E.ok&&Array.isArray(E.data?.assetPositions)?E.data.assetPositions:[]).map(w=>w.position||w).filter(w=>Q(w.szi)).map(w=>({coin:w.coin||null,size:String(w.szi??"0"),entryPrice:w.entryPx??null,positionValueUsd:w.positionValue??null,unrealizedPnlUsd:w.unrealizedPnl??null,liquidationPrice:w.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:n.hyperliquid,status:b.ok||E.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:$,error:b.ok?null:b.error},perps:{status:E.ok?"ok":"unavailable",accountValueUsd:E.data?.marginSummary?.accountValue??null,withdrawableUsd:E.data?.withdrawable??null,positions:q,error:E.ok?null:E.error},mids:T.ok?T.data:{},source:"hyperliquid-info"}})(),[x,y,I,k,M]=await Promise.all([d,f,u,v,c]),m=M.ok?M.data:null,g=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),A=[];for(let h of x){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let b=g[h.chainId];if(b)for(let E of h.fungibleTokens.assets||[])E.address&&A.push(`${b}:${String(E.address).toLowerCase()}`)}let S=null;if(o&&A.length){let h=[...new Set(A)],b=await P(()=>ut(h,X(t,"prices")));b.ok&&(S=b.data)}let N=x.map(h=>{let b=h.native?{...h,native:mt(h.native,m)}:h;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let E=g[b.chainId],T=b.fungibleTokens.assets.map($=>{let q=String($.symbol||"").toUpperCase(),w=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(q)&&(w=1),w==null&&E&&$.address&&S?.coins){let Pt=`${E}:${String($.address).toLowerCase()}`,pe=S.coins[Pt],fe=Number(pe?.price);Number.isFinite(fe)&&fe>0&&(w=fe)}let _=ue($.amount),ee=_!=null&&w!=null?Ne(_*w):null;return{...$,priceUsd:w,usdValue:ee}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:T}}}return b});y.native&&(y.native=mt(y.native,m)),I.native&&(I.native=mt(I.native,m));let z=0,C=0,R=0;for(let h of[...N,y,I]){h.native?.status==="ok"&&Q(h.native.amount)&&(h.native.usdValue!=null?(z+=h.native.usdValue,C+=1):R+=1);for(let b of h.fungibleTokens?.assets||[])!Q(b.amount)&&!Q(b.amountRaw)||(b.usdValue!=null?(z+=b.usdValue,C+=1):R+=1)}let Z=Vn(m,"HYPE");for(let h of k.spot?.balances||[]){let b=String(h.coin||"").toUpperCase(),E=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?Z.priceUsd||ue(k.mids?.HYPE):ue(k.mids?.[h.coin]),T=ue(h.total);h.priceUsd=E,h.usdValue=T!=null&&E!=null?Ne(T*E):null,Q(h.total)&&(h.usdValue!=null?(z+=h.usdValue,C+=1):R+=1)}let L=ue(k.perps?.accountValueUsd);L!=null&&L!==0&&(z+=L,C+=1);let H=[...y.fungibleTokens?.assets||[],...y.collectibles?.assets||[]].filter(h=>Q(h.amount)).length,Le=(I.fungibleTokens?.assets||[]).length+(I.collectibles?.assets||[]).length;R+=H+Le;let Ue=[...N,y,I,k],oe=h=>Ue.filter(b=>b.status===h).length,ie=[],Be=N.filter(h=>h.fungibleTokens?.status==="unavailable"),Ct=N.filter(h=>h.fungibleTokens?.status==="ok");Be.length&&!Ct.length?ie.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):Be.length&&ie.push(`EVM token discovery partial: Blockscout covered ${Ct.length} chain(s); ${Be.length} chain(s) still native-only.`),(y.fungibleTokens?.assets?.length||y.collectibles?.assets?.length)&&ie.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),I.collectibles?.unknownNotEmpty&&ie.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),M.ok||ie.push(`Price provider unavailable: ${M.error}`);let Fe=[ft("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),ft("sui","Sui balance adapter is not installed"),ft("aptos","Aptos balance adapter is not installed")],pr=Ue.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:r,addresses:n,coverage:{requestedSurfaces:Ue.length,ok:oe("ok"),unavailable:oe("unavailable"),notConfigured:oe("not-configured"),unsupported:oe("unsupported")+Fe.length,evmChainsRequested:l.length,evmChainsOk:N.filter(h=>h.status==="ok").length},valuation:{knownUsd:Ne(z),label:"known priced value, not a complete portfolio total",pricedItems:C,unpricedNonzeroItems:R,complete:R===0&&!pr&&oe("unavailable")===0&&oe("not-configured")===0&&Fe.length===0,priceSource:o?"DefiLlama":null,priceStatus:M.ok?"ok":"unavailable",priceQueriedAt:r},chains:[...N,y,I,k],unsupportedFamilies:Fe,warnings:ie}}U();U();import{readFileSync as ti,existsSync as ni}from"node:fs";import{getAddress as ri,Interface as Ce,TypedDataEncoder as Za,parseUnits as ec}from"ethers";var ei=300*1e3,Ka=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var oi="https://api.opensea.io/api/v2",ii="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",ic=new Ce([`function ${ii}`]),sc=new Ce(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),si=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),ai=new Set(si),ci=new Set(["solana","flow"]);function li(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!ni(e))return"";try{for(let t of ti(e,"utf8").split(`
-`)){let r=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(r)return r[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function bt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||li()}function Wn(e={}){return le({provider:"opensea",defaultUrl:oi,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function Kn(e={}){return Wn(e).baseUrl}function Gn(e={}){return re({accept:"application/json"},{"x-api-key":bt(e)},Wn(e).trusted)}function ui(e){let t=String(e||"ethereum").trim().toLowerCase();if(!ai.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function jn(e,t="address"){try{return ri(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function Yn(e,t=null){let r=String(e||"").trim();if(!r)throw new Error("opensea: account address required");if(t&&!ci.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(r))return jn(r,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(r))throw new Error("opensea: invalid account address");return r}function di(e={},t,r){return{chain:t,owner:r,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function gt(e={},t={}){if(!bt(t))throw new Error("OPENSEA_API_KEY required");let r=ui(e.chain),n=Yn(e.address||e.owner,r),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],a=e.next?String(e.next):null,l=0;do{let p=new URL(`${Kn(t)}/chain/${encodeURIComponent(r)}/account/${encodeURIComponent(n)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),a&&p.searchParams.set("next",a);let c=await O(p.toString(),{headers:Gn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(c?.nfts)?c.nfts:[])s.push(di(d,r,n));a=c?.next?String(c.next):null,l+=1}while(a&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:r,owner:n,count:s.length,pages:l,complete:!a,next:a,nfts:s,exec:!1,readOnly:!0}}async function Jn(e={},t={}){if(!bt(t))throw new Error("OPENSEA_API_KEY required");let r=Yn(e.address||e.owner),n=await O(`${Kn(t)}/account/${encodeURIComponent(r)}/pnl`,{headers:Gn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:r,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:n?.realized_pnl_usd??null,unrealizedPnlUsd:n?.unrealized_pnl_usd??null,totalPnlUsd:n?.total_pnl_usd??null,netInvestedUsd:n?.net_invested_usd??null,currentValueUsd:n?.current_value_usd??null,returnPercentage:n?.return_percentage??null,itemLevelPnlAvailable:!1,raw:n,exec:!1,readOnly:!0}}var ac=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var cc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var lc=new Ce(["function setApprovalForAll(address operator,bool approved)"]),uc=new Ce(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var fi="https://api.satflow.com/v1";function Xn(e={}){return le({provider:"satflow",defaultUrl:fi,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function mi(e={}){return Xn(e).baseUrl}function Qn(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function hi(e={}){return re({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":Qn(e)},Xn(e).trusted)}async function yi(e,{method:t="GET",body:r,opts:n={}}={}){if(!Qn(n))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${mi(n)}${e.startsWith("/")?e:`/${e}`}`,a=await(n.fetchImpl||fetch)(i,{method:t,headers:hi(n),body:r!=null?JSON.stringify(r):void 0,signal:AbortSignal.timeout(n.timeoutMs??2e4)}),l=await a.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!a.ok)throw new Error(`satflow ${t} ${e}: HTTP ${a.status} ${String(l).slice(0,200)}`);return p}async function Zn(e={},t={}){let r=J(e.address||e.addr,"address"),n=new URLSearchParams({address:r});e.type&&n.set("type",e.type),e.limit!=null&&n.set("limit",String(e.limit)),e.offset!=null&&n.set("offset",String(e.offset));let o=await yi(`/address/wallet-contents?${n}`,{opts:t});return{provider:"satflow",address:r,contents:o}}U();U();var Ic=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var bi=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],gi=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,wi=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Si(e={}){let t=[],r=String(e.name||""),n=String(e.description||""),o=`${r} ${n}`;gi.test(r)&&t.push("url-in-name");let i=bi.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),wi.test(r)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(r)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,a=!Array.isArray(e.traits)||e.traits.length===0;s&&a&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function er(e={}){let t=Si(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var vi=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Ai=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function wt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function we(e,t){let r=await P(t);return r.ok?{ok:!0,data:r.data}:{ok:!1,error:`${e}: ${r.error}`.slice(0,300)}}function Ei(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function xi(e={},t){let r=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:r==null?null:String(r),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(r?`Inscription ${r}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function Ii(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function tr(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function ki(e){let t=new Map;if(Array.isArray(e)){for(let r of e)r?.assetKey&&t.set(String(r.assetKey).toLowerCase(),r);return t}if(e&&typeof e=="object")for(let[r,n]of Object.entries(e))t.set(r.toLowerCase(),n);return t}function _i(e,t){let r=tr(e),n=t.get(r),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!n)return{...e,assetKey:r};let i=Number(n.costUsd),s=Number(n.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:r,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let a=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-a)*100)/100,currentValueUsd:o,totalCostUsd:a,realizedUsd:null}}:{...e,assetKey:r,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:n.acquiredAt||null,source:n.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Ti(e){let t=new Map;for(let r of e){let n=tr(r);t.has(n)||t.set(n,r)}return[...t.values()]}function Ni(e,t){let r=e.filter(i=>i.itemPnl?.status==="estimated"),n=e.length-r.length,o=Math.round(r.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:n===0&&e.length?"estimated-complete-for-held-items":r.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:r.length,unknownItems:n,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function nr(e={},t={}){let r=new Date().toISOString(),n=ht(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=vi.filter(m=>!o||o.has(m.chain)),s=[],a=[],l=wt(t,"opensea"),p=n.evm?i.filter(m=>m.family!=="solana"):[],c=await Y(p,4,async m=>({row:m,result:await we(`opensea-${m.chain}`,()=>gt({chain:m.chain,address:n.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:g}of c)if(g.ok){let A=g.data.nfts.map(S=>({...S,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));a.push(...A),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:g.data.complete?"ok":"partial",count:A.length,complete:g.data.complete,next:g.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:g.error,source:"opensea"});if(!n.evm)for(let m of i.filter(g=>g.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(n.solana&&(!o||o.has("solana"))){let m=await we("opensea-solana",()=>gt({chain:"solana",address:n.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let g=m.data.nfts.map(A=>({...A,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));a.push(...g),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:g.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(n.bitcoin&&(!o||o.has("bitcoin"))){let m=await we("satflow-wallet-contents",()=>Zn({address:n.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},wt(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let g=Ei(m.data.contents).map(S=>xi(S,n.bitcoin));a.push(...g);let A=g.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:A?"ok":"partial",count:g.length,complete:A,source:"satflow"})}else{let g=await we("bitcoin-meta-inscriptions",()=>_e({address:n.bitcoin},wt(t,"bitcoinMeta")),t.timeoutMs??35e3),A=g.ok&&g.data?.ok&&Array.isArray(g.data.inscriptions)?g.data.inscriptions:[];a.push(...A.map(S=>Ii(S,n.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:A.length?"partial":"unavailable",count:A.length,complete:!1,source:A.length?"bitcoin-meta":"satflow",error:A.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([n.evm,n.solana].filter(Boolean))]){let g=await we(`opensea-pnl-${m}`,()=>Jn({address:m},l),t.timeoutMs??35e3);d.push(g.ok?{status:"ok",...g.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:g.error})}let f=ki(e.costBasis),u=Ti(a).map(m=>_i(m,f)).map(m=>er(m)),v=u.filter(m=>!m.spam),x=u.filter(m=>m.spam),y=v.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),I=Math.round(y.reduce((m,g)=>m+Number(g.estimatedValueUsd),0)*100)/100,k=v.length-y.length,M=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:r,addresses:n,coverage:s,unsupported:Ai,inventory:{count:u.length,visibleCount:v.length,flaggedCount:x.length,items:u,visibleItems:v,flaggedItems:x},valuation:{estimatedCurrentValueUsd:I,valuedItems:y.length,unvaluedItems:k,complete:k===0&&M.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Ni(v,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as St}from"node:os";import{join as vt}from"node:path";var rr=process.env.ORACLE_PUBLIC_DESKTOP==="1",Ci=rr?process.env.ORACLE_CONFIG_DIR||vt(St(),".config","oracle"):vt(St(),".config","oracle"),zc=rr?Ci:vt(St(),".config","mad-desk");function At(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var Bi=JSON.parse(ar(new URL("../../package.json",import.meta.url),"utf8")),de="public",Fi="127.0.0.1",Mi=8799,$e=Bi.version,qi=new Set(["127.0.0.1","localhost","::1"]),Di=kt(Oi(Ui(import.meta.url)),"../.."),Et=kt(Di,"public","oracle-console"),or=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),Hi=1e6,F=class extends Error{constructor(t,r,n){super(n||r),this.status=t,this.code=r}};function K(e,t,r){let n=t,o;try{D(r),o=Wt(r)}catch{n=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(n,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true"}),e.end(o)}function Vi(e){return new Promise((t,r)=>{let n=[],o=0;e.on("data",i=>{if(o+=i.length,o>Hi){r(new F(413,"payload-too-large","request body too large")),e.destroy();return}n.push(i)}),e.on("end",()=>{let i=Buffer.concat(n).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{r(new F(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>r(new F(400,"bad-request","request stream error")))})}function B(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new F(400,t,`${t} must be a JSON object`);return e}function zi(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function ji(e){let t=zi(e);if(!qi.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function Wi(){return{status:200,body:{ok:!0,plane:de,version:$e}}}function Oe(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function Ki(e){let t=B(e,"body"),r=t.input!==void 0?B(t.input,"input"):t,n=Oe(B(t.opts,"opts")),o=r===t?(({opts:i,...s})=>s)(t):r;return{status:200,body:Yt(o,n)}}function Gi(e){let t=B(e,"body"),r=t.request!==void 0?B(t.request,"request"):t.input!==void 0?B(t.input,"input"):t,n=Oe(B(t.opts,"opts")),o=r===t?(({opts:i,...s})=>s)(t):r;return{status:200,body:Jt(o,n)}}function Yi(e){let t=B(e,"body"),r=Oe(B(t.opts,"opts")),n=Zt(t.store??[],r);return{status:200,body:{ok:!0,count:n.length,grants:n}}}function Ji(e){let t=B(e,"body"),r=Oe(B(t.opts,"opts")),n=en(t.store??[],t.id,r);return n==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:n}}function Xi(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,r=!0,n=[];return t&&n.push("privy"),r&&n.push("injected"),{status:200,body:{ok:!0,plane:de,version:$e,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:r,modes:n},privy:{appId:e||null}}}}var xt=400;function Qi(e=[]){if(e.length<=xt)return{rows:e,truncated:!1,omitted:0};let t=n=>n?.kind==="native"?0:n?.priced?1:2;return{rows:[...e].sort((n,o)=>t(n)-t(o)).slice(0,xt),truncated:!0,omitted:e.length-xt}}var It=300;function Zi(e=[]){if(e.length<=It)return{items:e,truncated:!1,omitted:0};let t=n=>n?.spam===!0||n?.nsfw===!0?2:Number.isFinite(Number(n?.floorUsd))&&Number(n?.floorUsd)>0?0:1;return{items:[...e].sort((n,o)=>t(n)-t(o)).slice(0,It),truncated:!0,omitted:e.length-It}}var Pe=12;async function es(e){let t=B(e,"body"),r=typeof t.owner=="string"?t.owner:null;if(!r)throw new F(400,"owner-required","owner must be an EVM address");let n=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(n&&n.length>Pe)throw new F(400,"too-many-chains",`at most ${Pe} chainIds per request`);let i=await En({owner:r,chainIds:n},lr());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var ts=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,ns=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function rs(e){if(typeof e!="string")return null;let t=e.trim();return ts.test(t)?t:null}function os(e){if(typeof e!="string")return null;let t=e.trim();return ns.test(t)?t:null}function cr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function is(e){let t=B(e,"body"),r=cr(t.owner),n=rs(t.solana),o=os(t.bitcoin);if(!r&&!n&&!o)throw new F(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>Pe)throw new F(400,"too-many-chains",`at most ${Pe} chainIds per request`);let s=await zn({addresses:{evm:r,solana:n,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},{env:{}}),a=[],l=[],p=0,c=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let v=u.fungibleTokens?.status??"unavailable";v==="ok"?p+=1:v==="unavailable"&&(c+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:v,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let x=u.native;u.status==="ok"&&x&&x.status==="ok"&&x.amountRaw&&x.amountRaw!=="0"&&x.amountRaw!=="0x0"&&a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:x.symbol,decimals:x.decimals,amount:String(x.amountRaw),amountRaw:String(x.amountRaw),amountFormatted:x.amount,kind:"native",valueUsd:x.usdValue!=null?String(x.usdValue):null,priced:x.usdValue!=null});for(let y of u.fungibleTokens?.assets||[]){let I=y.amountRaw!=null?String(y.amountRaw):null;if(!I||I==="0")continue;let k=typeof y.decimals=="number"&&Number.isInteger(y.decimals)?y.decimals:null;a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:y.symbol||y.coin||"TOKEN",decimals:k,amount:I,amountRaw:I,amountFormatted:y.amount!=null?String(y.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:y.address||y.mint||null,valueUsd:y.usdValue!=null?String(y.usdValue):null,priced:y.usdValue!=null,source:y.source||u.fungibleTokens?.source||null})}}let d=c>0||!!(s.valuation&&s.valuation.complete===!1),f=Qi(a);return{status:200,body:{ok:!0,owner:s.addresses?.evm??r,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&c===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${c} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function lr(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function ss(e){let t=B(e,"body"),r=cr(t.owner);if(!r)throw new F(400,"owner-required","owner must be an EVM address");let n=await nr({addresses:{evm:r}},lr()),o=n?.inventory&&typeof n.inventory=="object"?n.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(n?.items)?n.items:[]).map(c=>{if(!c||typeof c!="object")return null;let d=typeof c.collection=="string"?c.collection:c.collection&&typeof c.collection=="object"&&typeof c.collection.slug=="string"?c.collection.slug:typeof c.contract=="string"?c.contract:null;return{chain:c.chain??null,chainId:c.chainId??null,family:c.family??null,owner:c.owner??r,contract:c.contract??null,tokenId:c.tokenId==null?null:String(c.tokenId),tokenStandard:c.tokenStandard??null,collection:d,name:typeof c.name=="string"?c.name.slice(0,160):null,imageUrl:c.imageUrl??c.image??null,estimatedValueUsd:c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,floorUsd:c.floorUsd!=null&&Number.isFinite(Number(c.floorUsd))?Number(c.floorUsd):c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,spam:c.spam===!0,nsfw:c.nsfw===!0,source:typeof c.source=="string"?c.source.slice(0,64):null}}).filter(Boolean),a=Array.isArray(n?.coverage)?n.coverage:[],l=Zi(s),p=n?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:r,queriedAt:n.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:a.map(c=>({family:c?.family??null,chain:c?.chain??null,chainId:c?.chainId??null,status:c?.status??null,count:c?.count??null,complete:c?.complete===!0,source:c?.source??null,error:null,reason:typeof c?.reason=="string"?c.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:a.filter(c=>c?.status==="partial").map(c=>c.chain).filter(Boolean),unavailable:a.filter(c=>c?.status==="unavailable").map(c=>c.chain).filter(Boolean),unconfigured:a.filter(c=>c?.status==="not-configured").map(c=>c.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:n?.valuation?{estimatedCurrentValueUsd:n.valuation.estimatedCurrentValueUsd??null,valuedItems:n.valuation.valuedItems??null,unvaluedItems:n.valuation.unvaluedItems??null,complete:n.valuation.complete===!0}:null}}}var as=6e4,cs=120,ur=10,ls=300,us=ur,ir=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),ds=4096,Se=new Map;function ps(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let r=t.split(",")[0].trim();if(r)return r.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function fs(e,t){let r=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),n=r==="127.0.0.1"||r==="::1"||r.startsWith("127."),o=ps(e),i=n&&o!==r,s=ir.has(t)?n&&!i?us:ur:n&&!i?ls:cs,a=Date.now(),l=`${o}:${ir.has(t)?"amp":"std"}`,p=Se.get(l);if(!p||a>=p.resetAt){for(Se.set(l,{count:1,resetAt:a+as});Se.size>ds;){let c=Se.keys().next();if(c.done)break;Se.delete(c.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-a)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var sr=Object.freeze({"GET /public/health":Wi,"GET /public/config":Xi,"POST /public/connect/request":Ki,"POST /public/connect/assemble":Gi,"POST /public/grants/active":Yi,"POST /public/grants/get":Ji,"POST /public/approvals":es,"POST /public/portfolio":is,"POST /public/nfts":ss});function _t(e={}){return{"cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true",...e}}function ms(e,t,r,n){e.writeHead(t,_t({"content-type":r})),e.end(n)}function hs(e,t,r){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let n=r===""?"/":r,o=or[n]||or[n.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Ri(kt(Et,o.file));if(!i.startsWith(Et+Li)&&i!==Et)return K(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!$i(i))return K(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=ar(i);return e.method==="HEAD"?(t.writeHead(200,_t({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(ms(t,200,o.type,s),!0)}async function ys(e,t){let n=new URL(e.url,"http://localhost").pathname||"/";n.length>1&&n.endsWith("/")&&n!=="/oracle-console/"&&(n=n.replace(/\/+$/,"")),n===""&&(n="/");let o=n.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=sr[i];try{if(!s){if(hs(e,t,n))return;throw Object.keys(sr).some(d=>d.endsWith(` ${o}`))?new F(405,"method-not-allowed",`unsupported method for ${o}`):new F(404,"not-found",`unknown route ${o}`)}let a=fs(e,o);if(!a.allowed){t.writeHead(429,_t({"content-type":"application/json","retry-after":String(a.retryAfterSec),"x-ratelimit-limit":String(a.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${a.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await Vi(e),p=await s(l);K(t,p.status,p.body)}catch(a){if(a instanceof V){K(t,500,{error:"secret-leak-blocked"});return}if(a instanceof j){K(t,400,{error:"invalid-grant",errors:a.errors.map(l=>({field:l.field,message:l.message}))});return}if(a instanceof F){K(t,a.status,{error:a.code,message:a.message});return}if(a instanceof TypeError){K(t,400,{error:"bad-request",message:a.message});return}K(t,500,{error:"internal-error"})}}function bs(){return Pi((e,t)=>{ys(e,t).catch(()=>{try{K(t,500,{error:"internal-error"})}catch{}})})}function Tt({host:e,port:t}={}){let r=ji(e??At("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",Fi)),n=t??At("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(Mi)),o=Number(n);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(n)}`);return{host:r,port:o}}function dr(e={}){let{host:t,port:r}=Tt(e),n=bs();return n.listen(r,t),n}var Nt=Tt(),Re=dr(Nt);Re.on("listening",()=>{let e=Re.address(),t=typeof e=="object"&&e?e.address:Nt.host,r=typeof e=="object"&&e?e.port:Nt.port;console.log(`oracle-public-server listening on http://${t}:${r} (plane=${de}, version=${$e}, unsigned-only)`)});Re.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{Re.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});
+var Ae=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};import te from"node:net";import Or from"node:dns";function Ie(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let n=c=>{if(!c)return[];let d=c.split(":"),f=d.at(-1);if(f?.includes(".")){let u=f.split(".").map(Number);if(u.length!==4||u.some(v=>!Number.isInteger(v)||v<0||v>255))return null;d.splice(d.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return d.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:d.map(u=>Number.parseInt(u,16))},[r,o]=t.split("::"),i=n(r),s=n(o);if(!i||!s)return null;let a=t.includes("::"),l=8-i.length-s.length;if(!a&&l!==0||a&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(c=>[c>>8,c&255]))}function je(e,t,n){let r=Math.floor(n/8),o=n%8;for(let s=0;s<r;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[r]&i)===(t[r]&i)}function We(e){if(te.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(te.isIPv6(e)){let t=Ie(e);if(!t)return!1;let n=Ie("::ffff:0:0");return je(t,n,96)?We([...t.slice(12)].join(".")):je(t,Ie("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>je(t,Ie(o),i)):!1}return!1}function Lr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let n=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Rr.has(n)||n.endsWith(".localhost")||n.endsWith(".internal"))return{ok:!1,error:`refused internal host ${n}`};let r=te.isIP(n);return r!==0&&!We(n)?{ok:!1,error:`refused private address ${n}`}:{ok:!0,url:t,host:n,isLiteralIp:r!==0}}async function Ke(e,{lookupFn:t=Or.promises.lookup}={}){let n=Lr(e);if(!n.ok)return n;if(n.isLiteralIp)return{ok:!0,url:n.url,addresses:[{address:n.host,family:te.isIPv6(n.host)?6:4}]};let r;try{r=await t(n.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${n.host} did not resolve`}}return!Array.isArray(r)||r.length===0||r.some(o=>!We(o.address))?{ok:!1,error:`refused: ${n.host} resolves to a non-public address`}:{ok:!0,url:n.url,addresses:r}}async function Ge({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let n,r;try{let d=await t();n=d.Agent,r=d.fetch}catch(d){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${d?.message||d}`);return null}if(typeof n!="function"||typeof r!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=d=>String(d).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=d=>(Array.isArray(d)?d:[d]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(te.isIPv6(f.address)?6:4)})),a=(d,f,u)=>{i.set(o(d),s(typeof f=="string"?[{address:f,family:u}]:f))},l=d=>{let f=o(d);if(te.isIP(f))return[{address:f,family:te.isIPv6(f)?6:4}];let u=i.get(f);if(!u||!u.length)throw new Error(`refused: unpinned host ${d} during pinned fetch`);return u},p=new n({connect:{lookup(d,f,u){let v;try{v=l(d)}catch(x){return u(x)}return f?.all?u(null,v):u(null,v[0].address,v[0].family)}}}),c=Ur((d,f={})=>r(d,{...f,dispatcher:p}),a);return{dispatcher:p,fetch:c,pin:a,resolve:l,async close(){try{await p.destroy()}catch{}}}}function Ur(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Ye]=Object.freeze({pin:t}),e}function Je(e){return typeof e=="function"&&typeof e[Ye]?.pin=="function"}function nn(e,t,n){if(!Je(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Ye].pin(t,n)}var Rr,Ye,rn=Ae(()=>{Rr=new Set(["localhost","metadata.google.internal","metadata.goog"]);Ye=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as on}from"node:crypto";function Dr(e){let t=String(e||"").toLowerCase();return pn.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function Hr(e){let t={};for(let[n,r]of Object.entries(e||{}))Dr(n)||(t[n]=r);return t}function Vr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function zr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function ln(e){let t=String(e?.method||"");return t?!jr.test(t):!1}function Kr(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let n=t;if(typeof t=="string")try{n=JSON.parse(t)}catch{return!1}return Array.isArray(n)?n.length>0&&n.every(ln):!n||typeof n!="object"?!1:n.jsonrpc&&n.method?ln(n):typeof n.type=="string"&&Wr.has(n.type)&&n.action==null&&n.signature==null&&n.nonce==null}function Gr(e,t,n,r={},o=null){let i={};for(let[f,u]of Object.entries(n||{}))i[f.toLowerCase()]=u;let s=Object.keys(i).filter(f=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(f)),l=[...new Set([...pn,...s])].sort().map(f=>`${f}=${i[f]??""}`).join(`
+`),p=on("sha256").update(l).digest("hex").slice(0,32),c=`${r.untrustedUrl?"untrusted":"trusted"}:${r.maxResponseBytes??"unbounded"}`,d=o==null?"-":on("sha256").update(String(o)).digest("hex").slice(0,32);return`${e} ${t} ${c} ${p} ${d}`}function Yr(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,an):Math.min(250*2**e,an)+Math.floor(Math.random()*100)}function ye(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function Qe(e,t,n){return ye(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function be(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Xr(e){return e?e.byteLength??e.length??0:0}async function un(e,t,{url:n,truncate:r=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(be(e),!r))throw Qe(n,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let d=await e.text(),f=Buffer.byteLength(d,"utf8");if(f>t){if(!r)throw Qe(n,`body ${f} bytes`,t);return Buffer.from(d,"utf8").subarray(0,t).toString("utf8")}return d}let a=[],l=0,p=!1;try{for(;;){let{value:d,done:f}=await s.read();if(f)break;if(d&&(a.push(Buffer.from(d)),l+=Xr(d),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!r))throw Qe(n,`streamed ${l} bytes`,t);let c=Buffer.concat(a);return(p?c.subarray(0,t):c).toString("utf8")}function dn(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Qr(e,{fetchImpl:t,method:n,headers:r,body:o,timeoutMs:i,lookupFn:s,realFetch:a,untrustedUrl:l=!1,maxResponseBytes:p=null,importUndici:c,validateResponse:d,signal:f}){let u=new AbortController,v=setTimeout(()=>u.abort(),i),x=f?typeof AbortSignal.any=="function"?AbortSignal.any([f,u.signal]):f:u.signal,y=null,I=t,k=s?{lookupFn:s}:{};if(l&&!a&&!Je(I))throw ye(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let M=async(m,{status:g=null}={})=>{let A=await Ke(m,k);if(!A.ok)throw ye(g==null?`HTTP refused ${m}: ${A.error}`:`HTTP redirect to ${m} ${A.error}`,g==null?{}:{status:g});let S=new URL(m).hostname;if(a){if(y&&(await y.close(),y=null),!y)try{y=await Ge({requireUndici:!0,...c?{importUndici:c}:{}})}catch(N){throw ye(g==null?`HTTP refused ${m}: ${N?.message||N}`:`HTTP redirect to ${m} refused: ${N?.message||N}`,g==null?{}:{status:g})}y.pin(S,A.addresses),I=y.fetch}else nn(I,S,A.addresses);return A};try{let m=String(e),g={...r||{}};l&&await M(m);for(let A=0;A<=cn;A+=1){let S=await I(m,{method:n,headers:g,body:o,signal:x,redirect:"manual"});if(Mr.has(S.status)){if(n!=="GET"&&n!=="HEAD"){let L=await un(S,p??qr,{url:m,truncate:!0}),H=new Error(`HTTP ${S.status} ${n} ${m} redirected non-idempotent request`);throw H.status=S.status,H.body=dn(L)??L.slice(0,300),H}if(A===cn)throw be(S),new Error(`HTTP redirect loop for ${e}`);let C=S.headers?.get?.("location"),R;try{R=Vr(C,m)}catch(L){throw be(S),L}let Z=!zr(R,m);if(be(S),Z&&(g=Hr(g)),l)await M(R,{status:S.status});else if(Z){let L=await Ke(R,k);if(!L.ok){let H=new Error(`HTTP redirect from ${m} ${L.error}`);throw H.status=S.status,H.retryable=!1,H}a&&L.addresses?.length&&(y||(y=await Ge(c?{importUndici:c}:{})),y&&(y.pin(new URL(R).hostname,L.addresses),I=y.fetch))}m=R;continue}if(typeof d=="function")try{await d(S,{url:m})}catch(C){throw be(S),ye(C?.message||String(C))}let N=await un(S,p,{url:m,onOversize:()=>u.abort()}),z=dn(N);if(!S.ok){let C=new Error(`HTTP ${S.status} ${n} ${m}`);throw C.status=S.status,C.retryAfter=S.headers?.get?.("retry-after")??null,C.body=z??N.slice(0,300),C}return z??N}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(v),y&&await y.close()}}async function O(e,t={}){let n=t.fetchImpl||globalThis.fetch;if(typeof n!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let r=t.timeoutMs??12e3,o=(t.method||"GET").toUpperCase(),i={Accept:"application/json",...t.headers||{}},s=t.body;s!=null&&typeof s!="string"&&(i["Content-Type"]=i["Content-Type"]||"application/json",s=JSON.stringify(s));let a=Number.isInteger(t.retries)?Math.max(t.retries,0):Fr,l=t.lookupFn,p=!t.fetchImpl,c=t.untrustedUrl===!0,d=t.importUndici,f=t.validateResponse,u=t.signal,v=Number(t.maxResponseBytes),x=Number.isFinite(v)&&v>0?Math.floor(v):null,y=async()=>{let g;for(let A=0;A<=a;A++){u?.throwIfAborted?.();try{return await Qr(e,{fetchImpl:n,method:o,headers:i,body:s,timeoutMs:r,lookupFn:l,realFetch:p,untrustedUrl:c,maxResponseBytes:x,importUndici:d,validateResponse:f,signal:u})}catch(S){g=S;let N=S?.status,z=S?.name==="AbortError"||S?.name==="TimeoutError"||u?.aborted,C=new Set([408,425,429]),R=S?.retryable===!1?!1:N!=null?C.has(N)||Br.has(N)&&sn.has(o):!z&&sn.has(o);if(A===a||!R)throw S;let Z=Yr(A,S?.retryAfter);u?await new Promise((L,H)=>{let Ue=setTimeout(L,Z);u.addEventListener("abort",()=>{clearTimeout(Ue),H(u.reason||new DOMException("Aborted","AbortError"))},{once:!0})}):await Jr(Z)}}throw g};if(!(t.dedupe!==!1&&!u&&Kr(o,s)))return y();let k=Gr(o,e,i,{untrustedUrl:c,maxResponseBytes:x},s),M=Xe.get(k);if(M)return M;let m=y().finally(()=>Xe.delete(k));return Xe.set(k,m),m}async function P(e){let t=Date.now();try{let n=await e();return{ok:!0,ms:Date.now()-t,data:n}}catch(n){return{ok:!1,ms:Date.now()-t,error:String(n.message||n),status:n.status??null}}}async function W(e,t,n){let r=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,r.length||1)),i=new Array(r.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<r.length;){let a=s++;i[a]=await n(r[a],a)}})),i}var Br,sn,Fr,an,pn,Mr,cn,qr,Xe,jr,Wr,Jr,U=Ae(()=>{rn();Br=new Set([408,425,429,500,502,503,504]),sn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Fr=2,an=4e3,pn=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],Mr=new Set([301,302,303,307,308]),cn=3,qr=64*1024;Xe=new Map,jr=/(?:^|_)(send|submit|broadcast|sign|requestAirdrop)(?=[A-Z_]|$)/i,Wr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);Jr=e=>new Promise(t=>setTimeout(t,e))});function mn(e){return Zr.get(Number(e))||null}function hn(e,t=process.env){let n=mn(e);if(!n)return null;for(let r of n.rpcEnv){let o=(t[r]||"").trim();if(o)return o}return null}var fn,Zr,yn=Ae(()=>{fn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Zr=new Map(Object.values(fn).map(e=>[e.chainId,e]))});import{Interface as eo,getAddress as to}from"ethers";function Ze(e,t){try{return to(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function ro(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=hn(e,n);return r||no[Number(e)]||null}function io(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!oo.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}function so(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function ao(e){if(e?.error)throw so(e.error);return e?.result}function co(e,t,n){return`${e}
+${t}
+${JSON.stringify(n??[])}`}async function lo(e,t,n){return O(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function K(e,t,n=[],r={}){let o=String(t||""),i=io(o),s=ro(e,r);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&r.cacheChainId!==!1){let c=gn.get(s);if(c!=null)return c}let l=r.dedupe!==!1&&!r.signal?co(s,o,n):null;if(l&&ge.has(l))return ge.get(l);let p=(async()=>{let c=await lo(s,{jsonrpc:"2.0",id:1,method:t,params:n},r),d=ao(c);return i==="eth_chainid"&&typeof d=="string"&&gn.set(s,d),d})();return l&&(ge.set(l,p),p.finally(()=>{ge.get(l)===p&&ge.delete(l)}).catch(()=>{})),p}async function et(e,t={}){let n=await K(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function tt(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await K(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function wn(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=Ze(e.token||e.tokenAddress,"token"),o=Ze(e.owner,"owner"),i=Ze(e.spender,"spender"),s=bn.encodeFunctionData("allowance",[o,i]),a=await K(n,"eth_call",[{to:r,data:s},e.blockTag||"latest"],t),l=bn.decodeFunctionResult("allowance",a),p=BigInt(l[0]);return{chainId:n,token:r,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var bn,no,oo,ge,gn,ae=Ae(()=>{U();yn();bn=new eo(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);no={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};oo=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;ge=new Map,gn=new Map});import{createServer as Di}from"node:http";import{readFileSync as dr,existsSync as Hi}from"node:fs";import{dirname as Vi,join as _t,normalize as zi,sep as ji}from"node:path";import{fileURLToPath as Wi}from"node:url";import{createHash as br}from"node:crypto";var me=1,Ot=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),gr=Object.freeze(["read","simulate"]),Rt=1e4,Lt=1440*60,Ut=128,Bt=256,Ft=64,Mt=256,qt=/^0x[0-9a-fA-F]{40}$/,wr=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,Sr=/^[a-z][a-z0-9_-]*:\*$/,vr=/^[A-Za-z0-9._:-]+$/,Ar=/^[A-Za-z0-9._:-]+$/,Dt=/^(0|[1-9][0-9]*)$/,j=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function Ht(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function Er(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return Dt.test(t)?t:null}return null}function Y(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!Dt.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function qe(e){let t=String(e).split(":")[0];return gr.includes(t)}function De(e,t={}){let n=[],r=(d,f)=>n.push({field:d,message:f});if(!Ht(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let d of Object.keys(e))Ot.includes(d)||r(d,"unknown field is not allowed");for(let d of Ot)(!(d in e)||e[d]==null)&&r(d,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let o={},i=Y(e.chainId);i==null||i<=0?r("chainId","must be a positive integer chain id"):o.chainId=i;for(let d of["agentAddress","accountAddress"]){let f=e[d];typeof f!="string"||!qt.test(f.trim())?r(d,"must be a 0x-prefixed 20-byte hex address"):o[d]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>Ft)r("actions",`too many actions (max ${Ft})`);else{let d=[];for(let f of e.actions){let u=typeof f=="string"?f.trim():null;if(!u){r("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&Sr.test(u)?d.push(u):r("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!wr.test(u)){r("actions",`malformed action "${u}" (expected verb:resource)`);continue}d.push(u)}o.actions=[...new Set(d)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>Mt)r("targets",`too many targets (max ${Mt})`);else{let d=[];for(let f of e.targets){let u=typeof f=="string"?f.trim():null;if(!u||!qt.test(u)){r("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}d.push(u.toLowerCase())}if(o.targets=[...new Set(d)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(u=>!qe(u));(f.length>0||o.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let d of["maxValueWei","maxGasWei"]){let f=Er(e[d]);f==null?r(d,"must be a non-negative integer wei amount"):o[d]=f}let s=Y(e.maxSlippageBps);s==null||s>Rt?r("maxSlippageBps",`must be an integer between 0 and ${Rt}`):o.maxSlippageBps=s;let a=864e10,l=Y(e.expiresAt);if(l==null||l<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(l>a)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let d=Y(t.now);d==null?r("expiresAt","opts.now must be a unix-seconds integer"):l<=d?r("expiresAt",`grant is expired (expiresAt ${l} <= now ${d})`):l-d>Lt&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${Lt} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():Y(e.nonce)!=null?String(Y(e.nonce)):null;!p||p.length>Ut||!vr.test(p)?r("nonce",`must be a non-empty string (max ${Ut} chars, [A-Za-z0-9._:-])`):o.nonce=p;let c=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!c||c.length>Bt||!Ar.test(c)?r("revocationKey",`must be a non-empty public identifier (max ${Bt} chars, [A-Za-z0-9._:-])`):o.revocationKey=c,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:o}}function Ee(e,t={}){let{ok:n,errors:r,grant:o}=De(e,t);if(!n)throw new j(r);return o}function He(e,t={}){let n=Ee(e,t),o=Object.keys(n).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(n[i])}`);return`{"version":${me},${o.join(",")}}`}function xe(e,t={}){return br("sha256").update(He(e,t),"utf8").digest("hex")}function Vt(e,t){let n=Y(t),r=Y(Ht(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var zt="oracle-connect-request",xr="oracle-unsigned-grant",Ir="oracle-grant-canonical-json-utf8-v1",V=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},kr=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,_r=Object.freeze(["privkey","wif","xprv","seed"]);function Ve(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return kr.test(t)||_r.includes(n)}var jt=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Wt=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Tr(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>Wt.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function Kt(e){let t;try{t=JSON.stringify(e)}catch(o){throw new V("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let n=Tr(t);for(let{rule:o,re:i}of jt)if(i.test(n))throw new V("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new V("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&Ve(o))throw new V(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function D(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let o=Wt.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of jt)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new V(t,i);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&Ve(o))throw new V(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");D(o,`${t}[key]`,n),D(i,`${t}[${String(o)}]`,n)}return e}if(e instanceof Set){let o=0;for(let i of e.values())D(i,`${t}[${o++}]`,n);return e}if(Array.isArray(e))return e.forEach((o,i)=>D(o,`${t}[${i}]`,n)),e;for(let[o,i]of Object.entries(e)){if(Ve(o))throw new V(`${t}.${o}`,"forbidden-key-name");D(i,`${t}.${o}`,n,o)}return e}function he(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))he(t)}return e}function Gt(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new j([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function Yt(e){if(e?.now==null)throw new j([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return Gt(e.now,"opts.now")}function Nr(e){return new Date(e*1e3).toISOString()}function Cr(e,t){let n=e.actions.every(r=>qe(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${me}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${Nr(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
+`)}function Jt(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new j([{field:"request",message:"request must be a plain object"}]);let n=Yt(t),{ttlSeconds:r,...o}=e,i={...o};if(r!=null){if(i.expiresAt!=null)throw new j([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=Gt(r,"ttlSeconds");i.expiresAt=n+l}let s=Ee(i,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),a=he({kind:zt,version:me,grant:s});return D(a)}function Xt(e={},t={}){let n=Yt(t),r=e&&e.kind===zt?e.grant:e,o=Ee(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),i=He(o),s=xe(o),a=Buffer.from(i,"utf8"),l=he({kind:xr,unsigned:!0,payload:he({version:me,grantId:s,grant:o,canonical:i}),signing:he({scheme:Ir,message:i,bytesHex:`0x${a.toString("hex")}`,byteLength:a.length,sha256:s}),render:Cr(o,s)});return D(l)}var se=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function Qt(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function Pr(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function ze(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function $r(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(o=>e.has(o)):Array.isArray(e)?r.some(o=>e.includes(o)):typeof e.has=="function"?r.some(o=>e.has(o)):!1}function Zt(e,{now:t,revoked:n}={}){let r=ze(t),{grant:o,revoked:i}=Pr(e),{ok:s,grant:a}=De(o);if(!s)return{status:se.INVALID,id:null,grant:null};let l=xe(a);return i||$r(n,l,a)?{status:se.REVOKED,id:l,grant:a}:Vt(a,r)?{status:se.EXPIRED,id:l,grant:a}:{status:se.ACTIVE,id:l,grant:a}}function en(e,{now:t,revoked:n,agentAddress:r,accountAddress:o,chainId:i}={}){let s=ze(t),a=r!=null?String(r).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,c=[];for(let d of Qt(e)){let{status:f,id:u,grant:v}=Zt(d,{now:s,revoked:n});f===se.ACTIVE&&(a!=null&&v.agentAddress!==a||l!=null&&v.accountAddress!==l||p!=null&&v.chainId!==p||c.push(Object.freeze({id:u,grant:v})))}return c.sort((d,f)=>d.id<f.id?-1:d.id>f.id?1:0),D(Object.freeze(c))}function tn(e,t,{now:n,revoked:r}={}){let o=ze(n),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of Qt(e)){let a=Zt(s,{now:o,revoked:r});if(a.status!==se.INVALID&&a.id===i)return D(Object.freeze({id:a.id,status:a.status,grant:a.grant}))}return null}import{Interface as In,getAddress as po,id as kn}from"ethers";ae();U();var Xs=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});U();var Zs=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),nt=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),rt=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ae();ae();var ke=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);U();ae();var Sn=new In(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),vn=new In(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),fo=kn("Approval(address,address,uint256)"),Na=kn("ApprovalForAll(address,address,bool)"),mo=1e4,ho=2e5,yo=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),bo=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),go=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),wo=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),So=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),vo=(1n<<256n)-1n,Ao=vo/2n,Eo=4320*60*60*1e3,xo=360*60*1e3,Io=600*1e3,ko=45*1e3,_o=512,To=128,An=new Map,ot=new Map,En=new Map;function ce(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function st(e,t,n){let r=e.get(t);return r?Date.now()-r.at>n?(e.delete(t),null):r:null}function _e(e,t,n,r){for(e.delete(t),e.set(t,{at:Date.now(),value:n});e.size>r;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function No(e,t){try{return po(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Co(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function xn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Po({unlimited:e,spenderLabel:t,lastActivityAt:n}){if(e)return"unlimited";if(!t)return"unknown-spender";if(n){let r=Date.parse(n);if(Number.isFinite(r)&&Date.now()-r>Eo)return"stale"}return"scoped"}function $o(e,t,n){if(n)return"UNLIMITED";if(t==null)return e.toString();let r=10n**BigInt(t),o=e/r,i=e%r;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Oo(e,t,n,r){let o=`${e}:${t}`,i=r?.get(o);if(i)return i;if(ce(n)){let a=st(An,o,xo);if(a)return a.value}let s=(async()=>{let a=async d=>{try{let f=Sn.encodeFunctionData(d,[]),u=await K(e,"eth_call",[{to:t,data:f},"latest"],n);return!u||u==="0x"?null:Sn.decodeFunctionResult(d,u)[0]}catch{return null}},[l,p]=await Promise.all([a("decimals"),a("symbol")]),c={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return ce(n)&&_e(An,o,c,_o),c})();return r?.set(o,s),s}async function Ro(e,t,n){let r=Math.min(Math.max(Number(n.lookbackBlocks)||mo,1),ho),o=await et(e,n);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-r),s=await K(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[fo,Co(t)]}],n);if(!Array.isArray(s))throw new Error("log scan returned no array");let a=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),c=l?.topics?.[2];!p||!c||a.set(`${p}:${xn(c)}`,{token:p,spender:xn(c)})}return{pairs:[...a.values()],fromBlock:i,toBlock:o}}function Lo(e){return(So[e]||[]).flatMap(n=>bo.map(r=>({token:n.address,spender:r.address,symbol:n.symbol,decimals:n.decimals})))}async function Uo(e,t,n={}){let r=[],o="direct-probe",i=null,s=Lo(e),a=it(e),l=ce(n)&&st(ot,e,Io)?.value===!1;if(s.length===0&&a.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await Ro(e,t,n);r=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},ce(n)&&_e(ot,e,!0,64)}catch{if(ce(n)&&_e(ot,e,!1,64),r=s,r.length===0&&a.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,d=(await W(r,n.concurrency||4,async u=>{try{let v=await wn({chainId:e,token:u.token,owner:t,spender:u.spender},n),x=BigInt(v.allowance);if(x<=0n)return null;let y=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Oo(e,u.token,n,p),I=x>=Ao,k=yo[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:y.symbol,decimals:y.decimals,spender:u.spender,spenderLabel:k,allowance:x.toString(),allowanceDisplay:$o(x,y.decimals,I),unlimited:I,lastActivityAt:null,risk:Po({unlimited:I,spenderLabel:k,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await Fo(e,t,n);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:r.length,collectionsProbed:it(e).length,...i||{}},approvals:[...d,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function Bo(e,t,n,r,o){try{let i=vn.encodeFunctionData("isApprovedForAll",[n,r]),s=await K(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!vn.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function it(e){return(wo[e]||[]).flatMap(n=>go.map(r=>({collection:n.address,collectionName:n.name,operator:r.address,operatorLabel:r.label})))}async function Fo(e,t,n){let r=it(e);return r.length===0?[]:(await W(r,n.concurrency||4,async i=>await Bo(e,i.collection,t,i.operator,n)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function _n(e={},t={}){let n=No(e.owner||e.address,"owner"),r=new Map(ke.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>r.has(u)):[...r.keys()],i=`${n}:${[...o].sort((u,v)=>u-v).join(",")}:${e.lookbackBlocks??""}`,s=ce(t)&&!e.refresh;if(s){let u=st(En,i,ko);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let a=await W(o,e.concurrency||3,u=>Uo(u,n,{...t,lookbackBlocks:e.lookbackBlocks})),l=a.flatMap(u=>u.approvals),p=a.map(u=>u.scan),c=p.find(u=>u.method==="log-scan"&&u.toBlock),d=p.some(u=>u.method==="direct-probe"&&u.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:n,scannedRange:c?`last ${c.toBlock-c.fromBlock} blocks`:d?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&_e(En,i,f,To),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as ai}from"ethers";U();ae();U();var Tn="mainnet-beta",Mo="https://api.mainnet-beta.solana.com",at="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function qo(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||Mo).trim()}function ne(e,t="address"){let n=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return n}function Do(e,t){return t?[...e,{commitment:t}]:e}async function Nn(e,t=[],n={}){let r=String(e||"");if(r==="sendTransaction"||r==="sendRawTransaction"||r==="requestAirdrop"||r==="requestAirDrop"||/airdrop/i.test(r)||/^send/i.test(r))throw new Error(`solana-rpc: ${r} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=await O(qo(n),{method:"POST",body:{jsonrpc:"2.0",id:n.id||1,method:e,params:t},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3});if(o?.error)throw new Error(`solana-rpc ${e}: ${o.error.message||JSON.stringify(o.error)}`);return o?.result}async function Cn(e={},t={}){let n=ne(e.address||e.owner,"address"),r=await Nn("getBalance",Do([n],e.commitment),t);return{provider:"solana-rpc",cluster:Tn,address:n,lamports:String(r?.value??0),slot:r?.context?.slot??null,raw:r}}function Ho(e={}){let t=e.account?.data?.parsed?.info||{},n=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(n.amount??"0"),decimals:n.decimals??null,uiAmount:n.uiAmount??null,uiAmountString:n.uiAmountString??null,raw:e}}async function ct(e={},t={}){let n=ne(e.owner||e.address,"owner"),r=e.mint?{mint:ne(e.mint,"mint")}:{programId:ne(e.programId||at,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await Nn("getTokenAccountsByOwner",[n,r,o],t),s=Array.isArray(i?.value)?i.value.map(Ho):[];return{provider:"solana-rpc",cluster:Tn,owner:n,filter:r,slot:i?.context?.slot??null,accounts:s,raw:i}}U();var Vo="mainnet",zo="https://mempool.space/api",jo="https://mempool.space/testnet/api";function Pn(e={}){return String(e.network||process.env.BTC_NETWORK||Vo).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Wo(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):Pn(e)==="testnet"?jo:zo}function J(e,t="address"){let n=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(n)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(n))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return n}async function Ko(e,t={}){let n=`${Wo(t)}${e.startsWith("/")?e:`/${e}`}`,o=await(t.fetchImpl||fetch)(n,{method:"GET",headers:{accept:"application/json,text/plain;q=0.9,*/*;q=0.8"},signal:AbortSignal.timeout(t.timeoutMs??12e3)}),i=await o.text();if(!o.ok)throw new Error(`bitcoin-esplora GET ${e}: HTTP ${o.status} ${i.slice(0,160)}`);return i}async function Go(e,t={}){let n=await Ko(e,t);try{return JSON.parse(n)}catch{return n}}async function $n(e={},t={}){let n=J(e.address||e.addr,"address"),r=await Go(`/address/${n}`,t),o=r.chain_stats||{},i=r.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),a=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:Pn(t),address:n,balanceSats:String(s-a),chainStats:o,mempoolStats:i,raw:r}}var On="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function le({provider:e,defaultUrl:t,hosts:n=[],url:r,strict:o=!1}){let s=(String(r??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:Rn(t)};let a;try{a=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(a.protocol!=="http:"&&a.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=a.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([Rn(t),...n]).has(l)){let c=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return a.protocol==="http:"&&!c?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[On]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${On}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function Rn(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function re(e,t,n){let r={...e};if(!n)return r;for(let[o,i]of Object.entries(t||{}))i&&(r[o]=i);return r}function lt(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Yo=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function Jo(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",n=!1;try{let r=lt(e);if(r){let o=new URL(r).host,i=new URL(r).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);n=Yo.includes(o)&&(i==="https:"||s)}}catch{n=!1}return re({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},n)}async function Ln(e,t={}){let r=await(t.fetchImpl||fetch)(e,{method:"GET",headers:Jo(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await r.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!r.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${r.status} ${String(o).slice(0,160)}`);return i}async function Un(e={},t={}){let n=J(e.address||e.addr,"address"),r=lt(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${r}/v1/indexer/address/${n}/runes/balance-list?start=0&limit=100`,`${r}/v1/runes/address/${n}`,`${r}/runes/balance/${n}`,`${r}/address/${n}/runes`],i=null;for(let s of o)try{let a=await Ln(s,t),l=Xo(a);return{provider:"bitcoin-meta",address:n,ok:!0,count:l.length,balances:l,source:s}}catch(a){i=a}return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function Xo(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({rune:r.rune||r.runeid||r.runeId||r.spacedRune||r.name||r.ticker||null,runeId:r.runeid||r.runeId||r.id||null,amount:String(r.amount??r.balance??r.total??r.qty??"0"),symbol:r.symbol||null,divisibility:r.divisibility??r.div??null,raw:r}))}async function Te(e={},t={}){let n=J(e.address||e.addr,"address"),r=lt(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${r}/v1/indexer/address/${n}/inscription-data?cursor=0&size=${o}`,`${r}/v1/inscriptions/address/${n}?limit=${o}`,`${r}/address/${n}/inscriptions?limit=${o}`],s=null;for(let a of i)try{let l=await Ln(a,t),p=Qo(l);return{provider:"bitcoin-meta",address:n,ok:!0,count:p.length,inscriptions:p,source:a}}catch(l){s=l}return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function Qo(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({id:r.inscriptionId||r.id||r.inscription_id||null,number:r.inscriptionNumber??r.number??null,sat:r.sat||r.satoshi||null,contentType:r.contentType||r.content_type||null,utxo:r.utxo||r.output||(r.txid!=null?`${r.txid}:${r.vout??r.n}`:null),raw:r}))}U();var Zo="https://api.hyperliquid.xyz/info",ei="https://api.hyperliquid-testnet.xyz/info";function ti({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let n=process.env.HL_API_URL.replace(/\/$/,"");return n.endsWith("/info")?n:`${n}/info`}return e||process.env.HL_TESTNET==="1"?ei:Zo}async function ut(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let n=ti(t);return O(n,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}async function Bn(e={}){return ut({type:"allMids"},e)}async function Fn(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return ut({type:"spotClearinghouseState",user:e},t)}async function Mn(e,t={}){if(!e)throw new Error("hlUserState requires user");return ut({type:"clearinghouseState",user:e},t)}U();var ni="https://coins.llama.fi";function ri(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||ni).replace(/\/$/,"")}async function dt(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let n=e.map(encodeURIComponent).join(",");return O(`${ri(t)}/prices/current/${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}U();var qn=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,oi=/[<>&`*_~[\]()|\\]/g,ii=/[\u0000-\u001F\u007F]/g;function pt(e,{max:t=32,fallback:n=""}={}){return e==null?n:String(e).normalize("NFKC").replace(qn,"").replace(ii,"").replace(oi,"").replace(/\s+/g," ").trim().slice(0,t).trim()||n}function ft(e){if(e==null)return!1;let t=String(e);return qn.test(t)?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var Dn=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"});function si(e,t={}){let n=Number(e),r=t.baseUrl||Dn[n];if(!r)throw new Error(`Blockscout not configured for chainId ${n}`);return r.replace(/\/$/,"")}function Hn(e){return!!Dn[Number(e)]}async function Vn(e={},t={}){if(!e.address)throw new Error("address required");let n=Number(e.chainId||1),r=`${si(n,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=await O(r,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}});return Array.isArray(o)?o:[]}function zn(e=[],{fungibleOnly:t=!0}={}){let n=[];for(let r of e){if(!r||typeof r!="object")continue;let o=r.token&&typeof r.token=="object"?r.token:{},i=String(o.type||r.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||r.token_address||r.tokenAddress||null;if(!s||typeof s!="string")continue;let a=String(r.value??r.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(a)||a==="0")continue;let l=o.decimals??r.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=pt(o.symbol||o.name,{max:32,fallback:"TOKEN"}),c=pt(o.name,{max:80,fallback:""})||null;n.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:c,decimals:l,amountRaw:a,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:ft(o.symbol)||ft(o.name)||void 0})}return n}var ci="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",Wn=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function X(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Ne(e,...t){for(let n of t){let r=String(e?.[n]||"").trim();if(r)return r}return null}function jn(e){if(!e)return null;try{return ai(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function yt(e={},t=process.env){let n=e.addresses||{},r=jn(n.evm||e.evmAddress||Ne(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=n.solana||e.solanaAddress||Ne(t,"ORACLE_SOLANA_ADDRESS"),i=n.bitcoin||e.bitcoinAddress||Ne(t,"ORACLE_BITCOIN_ADDRESS"),s=jn(n.hyperliquid||e.hyperliquidAddress||Ne(t,"ORACLE_HYPERLIQUID_ADDRESS")||r);return{evm:r,solana:o?ne(o,"portfolio Solana address"):null,bitcoin:i?J(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function we(e,t){let n=BigInt(String(e||"0")),r=Number(t);if(!Number.isInteger(r)||r<0||r>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(r===0)return n.toString();let o=n<0n,i=o?-n:n,s=10n**BigInt(r),a=i/s,l=String(i%s).padStart(r,"0").replace(/0+$/,"");return`${o?"-":""}${a}${l?`.${l}`:""}`}function ue(e){let t=Number(e);return Number.isFinite(t)?t:null}function Ce(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function Q(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Kn(e,t){let n=Wn[t],r=n?e?.coins?.[n]:null,o=Number(r?.price);return{key:n||null,priceUsd:Number.isFinite(o)?o:null,timestamp:r?.timestamp??null,confidence:r?.confidence??null}}function li(e){let t=new Map;for(let n of e)if(n?.ok)for(let r of n.data?.accounts||[]){let o=BigInt(String(r.amount||"0"));if(o===0n||!r.mint)continue;let i=`${r.mint}:${r.decimals??"unknown"}`,s=t.get(i)||{mint:r.mint,amountRaw:0n,decimals:r.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,n.program&&s.programs.add(n.program),t.set(i,s)}return[...t.values()].map(n=>{let r=n.amountRaw.toString(),o=n.decimals==null?null:we(r,n.decimals),i=n.decimals===0&&n.amountRaw===1n;return{mint:n.mint,amountRaw:r,amount:o,decimals:n.decimals,tokenPrograms:[...n.programs],accountCount:n.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function mt(e,t){return{family:e,status:"unsupported",reason:t}}function ht(e,t){if(!e||e.status!=="ok")return e;let n=Kn(t,e.symbol),r=ue(e.amount),o=r!=null&&n.priceUsd!=null?Ce(r*n.priceUsd):null;return{...e,price:n,usdValue:o}}async function Gn(e={},t={}){let n=new Date().toISOString(),r=yt(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,a=new Map(ke.map(h=>[h.chainId,h])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...a.keys()],p=[...new Set(Object.values(Wn))],c=o?P(()=>dt(p,X(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),d=W(l,e.concurrency||5,async h=>{let b=a.get(h);if(!b)return{family:"evm",chainId:h,name:null,address:r.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!r.evm)return{family:"evm",chainId:h,name:b.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let E={...X(t,"evm"),rpcUrl:e.rpcUrls?.[h]||t.evm?.rpcUrls?.[h]},T=await P(()=>tt(h,r.evm,E));if(!T.ok)return{family:"evm",chainId:h,name:b.name,address:r.evm,status:"unavailable",latencyMs:T.ms,error:T.error};let $=b.nativeCurrency?.decimals??18,q=b.nativeCurrency?.symbol||"NATIVE",w=T.data.balanceWei,_={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&Hn(h)){let ee=await P(()=>Vn({chainId:h,address:r.evm},{...X(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));ee.ok?_={status:"ok",assets:zn(ee.data,{fungibleOnly:!0}).map(pe=>{let fe=we(pe.amountRaw,pe.decimals);return{...pe,amount:fe,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:ee.ms}:_={status:"unavailable",assets:[],reason:ee.error||"blockscout token-balances failed",source:"blockscout",latencyMs:ee.ms}}return{family:"evm",chainId:h,name:b.name,address:r.evm,status:"ok",latencyMs:T.ms,native:{status:"ok",symbol:q,amountRaw:w,decimals:$,amount:we(w,$)},fungibleTokens:_,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:_.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!r.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let h=X(t,"solana"),b=await P(()=>Cn({address:r.solana},h)),E=i||s?await Promise.all([P(()=>ct({owner:r.solana,programId:at},h)).then(_=>({..._,program:"spl-token"})),P(()=>ct({owner:r.solana,programId:ci},h)).then(_=>({..._,program:"token-2022"}))]):[],T=li(E),$=T.filter(_=>_.classification==="collectible-candidate"),q=T.filter(_=>_.classification!=="collectible-candidate"),w=E.filter(_=>!_.ok).map(_=>_.error);return{family:"solana",name:"Solana Mainnet",address:r.solana,status:b.ok||E.some(_=>_.ok)?"ok":"unavailable",native:b.ok?{status:"ok",symbol:"SOL",amountRaw:b.data.lamports,decimals:9,amount:we(b.data.lamports,9),slot:b.data.slot}:{status:"unavailable",symbol:"SOL",error:b.error},fungibleTokens:{status:i?w.length===E.length?"unavailable":w.length?"partial":"ok":"not-requested",assets:i?q:[],errors:w,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?w.length===E.length?"unavailable":"partial":"not-requested",assets:s?$:[],errors:w,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!r.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let h=X(t,"bitcoin"),b=X(t,"bitcoinMeta"),[E,T,$]=await Promise.all([P(()=>$n({address:r.bitcoin},h)),i?P(()=>Un({address:r.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?P(()=>Te({address:r.bitcoin},b)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),q=T.ok?T.data:null,w=$.ok?$.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:r.bitcoin,status:E.ok||q?.ok||w?.ok?"ok":"unavailable",native:E.ok?{status:"ok",symbol:"BTC",amountRaw:E.data.balanceSats,decimals:8,amount:we(E.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:E.error},fungibleTokens:{status:i?q?.ok?"ok":"unavailable":"not-requested",assets:q?.balances||[],error:q?.ok?null:q?.error||T.error,verification:"indexer-reported"},collectibles:{status:s?w?.ok?"ok":"unavailable":"not-requested",assets:w?.inscriptions||[],error:w?.ok?null:w?.error||$.error,unknownNotEmpty:!!w?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),v=(async()=>{if(!r.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let h=X(t,"hyperliquid"),[b,E,T]=await Promise.all([P(()=>Fn(r.hyperliquid,h)),P(()=>Mn(r.hyperliquid,h)),P(()=>Bn(h))]),$=(b.ok&&Array.isArray(b.data?.balances)?b.data.balances:[]).filter(w=>Q(w.total)||Q(w.hold)).map(w=>({coin:w.coin||null,total:String(w.total??"0"),hold:String(w.hold??"0"),priceUsd:null,usdValue:null})),q=(E.ok&&Array.isArray(E.data?.assetPositions)?E.data.assetPositions:[]).map(w=>w.position||w).filter(w=>Q(w.szi)).map(w=>({coin:w.coin||null,size:String(w.szi??"0"),entryPrice:w.entryPx??null,positionValueUsd:w.positionValue??null,unrealizedPnlUsd:w.unrealizedPnl??null,liquidationPrice:w.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:r.hyperliquid,status:b.ok||E.ok?"ok":"unavailable",spot:{status:b.ok?"ok":"unavailable",balances:$,error:b.ok?null:b.error},perps:{status:E.ok?"ok":"unavailable",accountValueUsd:E.data?.marginSummary?.accountValue??null,withdrawableUsd:E.data?.withdrawable??null,positions:q,error:E.ok?null:E.error},mids:T.ok?T.data:{},source:"hyperliquid-info"}})(),[x,y,I,k,M]=await Promise.all([d,f,u,v,c]),m=M.ok?M.data:null,g=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),A=[];for(let h of x){if(h.family!=="evm"||h.fungibleTokens?.status!=="ok")continue;let b=g[h.chainId];if(b)for(let E of h.fungibleTokens.assets||[])E.address&&A.push(`${b}:${String(E.address).toLowerCase()}`)}let S=null;if(o&&A.length){let h=[...new Set(A)],b=await P(()=>dt(h,X(t,"prices")));b.ok&&(S=b.data)}let N=x.map(h=>{let b=h.native?{...h,native:ht(h.native,m)}:h;if(b.fungibleTokens?.status==="ok"&&Array.isArray(b.fungibleTokens.assets)){let E=g[b.chainId],T=b.fungibleTokens.assets.map($=>{let q=String($.symbol||"").toUpperCase(),w=null;if(["USDC","USDT","USDT0","DAI","USDBC","USDE","USDCE"].includes(q)&&(w=1),w==null&&E&&$.address&&S?.coins){let $t=`${E}:${String($.address).toLowerCase()}`,pe=S.coins[$t],fe=Number(pe?.price);Number.isFinite(fe)&&fe>0&&(w=fe)}let _=ue($.amount),ee=_!=null&&w!=null?Ce(_*w):null;return{...$,priceUsd:w,usdValue:ee}});b={...b,fungibleTokens:{...b.fungibleTokens,assets:T}}}return b});y.native&&(y.native=ht(y.native,m)),I.native&&(I.native=ht(I.native,m));let z=0,C=0,R=0;for(let h of[...N,y,I]){h.native?.status==="ok"&&Q(h.native.amount)&&(h.native.usdValue!=null?(z+=h.native.usdValue,C+=1):R+=1);for(let b of h.fungibleTokens?.assets||[])!Q(b.amount)&&!Q(b.amountRaw)||(b.usdValue!=null?(z+=b.usdValue,C+=1):R+=1)}let Z=Kn(m,"HYPE");for(let h of k.spot?.balances||[]){let b=String(h.coin||"").toUpperCase(),E=b==="USDC"||b==="USDT"||b==="USDT0"?1:b==="HYPE"?Z.priceUsd||ue(k.mids?.HYPE):ue(k.mids?.[h.coin]),T=ue(h.total);h.priceUsd=E,h.usdValue=T!=null&&E!=null?Ce(T*E):null,Q(h.total)&&(h.usdValue!=null?(z+=h.usdValue,C+=1):R+=1)}let L=ue(k.perps?.accountValueUsd);L!=null&&L!==0&&(z+=L,C+=1);let H=[...y.fungibleTokens?.assets||[],...y.collectibles?.assets||[]].filter(h=>Q(h.amount)).length,Ue=(I.fungibleTokens?.assets||[]).length+(I.collectibles?.assets||[]).length;R+=H+Ue;let Be=[...N,y,I,k],oe=h=>Be.filter(b=>b.status===h).length,ie=[],Fe=N.filter(h=>h.fungibleTokens?.status==="unavailable"),Pt=N.filter(h=>h.fungibleTokens?.status==="ok");Fe.length&&!Pt.length?ie.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):Fe.length&&ie.push(`EVM token discovery partial: Blockscout covered ${Pt.length} chain(s); ${Fe.length} chain(s) still native-only.`),(y.fungibleTokens?.assets?.length||y.collectibles?.assets?.length)&&ie.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),I.collectibles?.unknownNotEmpty&&ie.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),M.ok||ie.push(`Price provider unavailable: ${M.error}`);let Me=[mt("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),mt("sui","Sui balance adapter is not installed"),mt("aptos","Aptos balance adapter is not installed")],yr=Be.some(h=>["unavailable","partial","not-configured"].includes(h.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(h.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:n,addresses:r,coverage:{requestedSurfaces:Be.length,ok:oe("ok"),unavailable:oe("unavailable"),notConfigured:oe("not-configured"),unsupported:oe("unsupported")+Me.length,evmChainsRequested:l.length,evmChainsOk:N.filter(h=>h.status==="ok").length},valuation:{knownUsd:Ce(z),label:"known priced value, not a complete portfolio total",pricedItems:C,unpricedNonzeroItems:R,complete:R===0&&!yr&&oe("unavailable")===0&&oe("not-configured")===0&&Me.length===0,priceSource:o?"DefiLlama":null,priceStatus:M.ok?"ok":"unavailable",priceQueriedAt:n},chains:[...N,y,I,k],unsupportedFamilies:Me,warnings:ie}}U();U();import{readFileSync as di,existsSync as pi}from"node:fs";import{getAddress as fi,Interface as Pe,TypedDataEncoder as uc,parseUnits as dc}from"ethers";var ui=300*1e3,oc=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var mi="https://api.opensea.io/api/v2",hi="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",yc=new Pe([`function ${hi}`]),bc=new Pe(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),yi=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),bi=new Set(yi),gi=new Set(["solana","flow"]);function wi(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!pi(e))return"";try{for(let t of di(e,"utf8").split(`
+`)){let n=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(n)return n[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function gt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||wi()}function Jn(e={}){return le({provider:"opensea",defaultUrl:mi,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function Xn(e={}){return Jn(e).baseUrl}function Qn(e={}){return re({accept:"application/json"},{"x-api-key":gt(e)},Jn(e).trusted)}function Si(e){let t=String(e||"ethereum").trim().toLowerCase();if(!bi.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function Yn(e,t="address"){try{return fi(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function Zn(e,t=null){let n=String(e||"").trim();if(!n)throw new Error("opensea: account address required");if(t&&!gi.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(n))return Yn(n,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(n))throw new Error("opensea: invalid account address");return n}function vi(e={},t,n){return{chain:t,owner:n,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function wt(e={},t={}){if(!gt(t))throw new Error("OPENSEA_API_KEY required");let n=Si(e.chain),r=Zn(e.address||e.owner,n),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],a=e.next?String(e.next):null,l=0;do{let p=new URL(`${Xn(t)}/chain/${encodeURIComponent(n)}/account/${encodeURIComponent(r)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),a&&p.searchParams.set("next",a);let c=await O(p.toString(),{headers:Qn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let d of Array.isArray(c?.nfts)?c.nfts:[])s.push(vi(d,n,r));a=c?.next?String(c.next):null,l+=1}while(a&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:n,owner:r,count:s.length,pages:l,complete:!a,next:a,nfts:s,exec:!1,readOnly:!0}}async function er(e={},t={}){if(!gt(t))throw new Error("OPENSEA_API_KEY required");let n=Zn(e.address||e.owner),r=await O(`${Xn(t)}/account/${encodeURIComponent(n)}/pnl`,{headers:Qn(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:n,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:r?.realized_pnl_usd??null,unrealizedPnlUsd:r?.unrealized_pnl_usd??null,totalPnlUsd:r?.total_pnl_usd??null,netInvestedUsd:r?.net_invested_usd??null,currentValueUsd:r?.current_value_usd??null,returnPercentage:r?.return_percentage??null,itemLevelPnlAvailable:!1,raw:r,exec:!1,readOnly:!0}}var gc=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var wc=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var Sc=new Pe(["function setApprovalForAll(address operator,bool approved)"]),vc=new Pe(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var Ei="https://api.satflow.com/v1";function tr(e={}){return le({provider:"satflow",defaultUrl:Ei,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function xi(e={}){return tr(e).baseUrl}function nr(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function Ii(e={}){return re({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":nr(e)},tr(e).trusted)}async function ki(e,{method:t="GET",body:n,opts:r={}}={}){if(!nr(r))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${xi(r)}${e.startsWith("/")?e:`/${e}`}`,a=await(r.fetchImpl||fetch)(i,{method:t,headers:Ii(r),body:n!=null?JSON.stringify(n):void 0,signal:AbortSignal.timeout(r.timeoutMs??2e4)}),l=await a.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!a.ok)throw new Error(`satflow ${t} ${e}: HTTP ${a.status} ${String(l).slice(0,200)}`);return p}async function rr(e={},t={}){let n=J(e.address||e.addr,"address"),r=new URLSearchParams({address:n});e.type&&r.set("type",e.type),e.limit!=null&&r.set("limit",String(e.limit)),e.offset!=null&&r.set("offset",String(e.offset));let o=await ki(`/address/wallet-contents?${r}`,{opts:t});return{provider:"satflow",address:n,contents:o}}U();U();var Uc=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var _i=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],Ti=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Ni=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Ci(e={}){let t=[],n=String(e.name||""),r=String(e.description||""),o=`${n} ${r}`;Ti.test(n)&&t.push("url-in-name");let i=_i.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),Ni.test(n)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(n)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,a=!Array.isArray(e.traits)||e.traits.length===0;s&&a&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function or(e={}){let t=Ci(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Pi=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),$i=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function St(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function Se(e,t){let n=await P(t);return n.ok?{ok:!0,data:n.data}:{ok:!1,error:`${e}: ${n.error}`.slice(0,300)}}function Oi(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function Ri(e={},t){let n=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:n==null?null:String(n),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(n?`Inscription ${n}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function Li(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function ir(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function Ui(e){let t=new Map;if(Array.isArray(e)){for(let n of e)n?.assetKey&&t.set(String(n.assetKey).toLowerCase(),n);return t}if(e&&typeof e=="object")for(let[n,r]of Object.entries(e))t.set(n.toLowerCase(),r);return t}function Bi(e,t){let n=ir(e),r=t.get(n),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!r)return{...e,assetKey:n};let i=Number(r.costUsd),s=Number(r.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:n,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let a=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-a)*100)/100,currentValueUsd:o,totalCostUsd:a,realizedUsd:null}}:{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:a,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Fi(e){let t=new Map;for(let n of e){let r=ir(n);t.has(r)||t.set(r,n)}return[...t.values()]}function Mi(e,t){let n=e.filter(i=>i.itemPnl?.status==="estimated"),r=e.length-n.length,o=Math.round(n.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:r===0&&e.length?"estimated-complete-for-held-items":n.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:n.length,unknownItems:r,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function sr(e={},t={}){let n=new Date().toISOString(),r=yt(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(m=>String(m).toLowerCase())):null,i=Pi.filter(m=>!o||o.has(m.chain)),s=[],a=[],l=St(t,"opensea"),p=r.evm?i.filter(m=>m.family!=="solana"):[],c=await W(p,4,async m=>({row:m,result:await Se(`opensea-${m.chain}`,()=>wt({chain:m.chain,address:r.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:m,result:g}of c)if(g.ok){let A=g.data.nfts.map(S=>({...S,family:m.family,chainId:m.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));a.push(...A),s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:g.data.complete?"ok":"partial",count:A.length,complete:g.data.complete,next:g.data.next,source:"opensea"})}else s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"unavailable",error:g.error,source:"opensea"});if(!r.evm)for(let m of i.filter(g=>g.family!=="solana"))s.push({family:m.family,chain:m.chain,chainId:m.chainId,status:"not-configured",reason:"EVM address missing"});if(r.solana&&(!o||o.has("solana"))){let m=await Se("opensea-solana",()=>wt({chain:"solana",address:r.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(m.ok){let g=m.data.nfts.map(A=>({...A,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));a.push(...g),s.push({family:"solana",chain:"solana",status:m.data.complete?"ok":"partial",count:g.length,complete:m.data.complete,next:m.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:m.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(r.bitcoin&&(!o||o.has("bitcoin"))){let m=await Se("satflow-wallet-contents",()=>rr({address:r.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},St(t,"satflow")),t.timeoutMs??35e3);if(m.ok){let g=Oi(m.data.contents).map(S=>Ri(S,r.bitcoin));a.push(...g);let A=g.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:A?"ok":"partial",count:g.length,complete:A,source:"satflow"})}else{let g=await Se("bitcoin-meta-inscriptions",()=>Te({address:r.bitcoin},St(t,"bitcoinMeta")),t.timeoutMs??35e3),A=g.ok&&g.data?.ok&&Array.isArray(g.data.inscriptions)?g.data.inscriptions:[];a.push(...A.map(S=>Li(S,r.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:A.length?"partial":"unavailable",count:A.length,complete:!1,source:A.length?"bitcoin-meta":"satflow",error:A.length?"Satflow unavailable; fallback has IDs only":m.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let d=[];if(e.includePnl!==!1)for(let m of[...new Set([r.evm,r.solana].filter(Boolean))]){let g=await Se(`opensea-pnl-${m}`,()=>er({address:m},l),t.timeoutMs??35e3);d.push(g.ok?{status:"ok",...g.data}:{status:"unavailable",address:m,source:"opensea-indexed-account-pnl",error:g.error})}let f=Ui(e.costBasis),u=Fi(a).map(m=>Bi(m,f)).map(m=>or(m)),v=u.filter(m=>!m.spam),x=u.filter(m=>m.spam),y=v.filter(m=>m.estimatedValueUsd!=null&&Number.isFinite(Number(m.estimatedValueUsd))),I=Math.round(y.reduce((m,g)=>m+Number(g.estimatedValueUsd),0)*100)/100,k=v.length-y.length,M=s.filter(m=>m.status!=="ok"||m.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:n,addresses:r,coverage:s,unsupported:$i,inventory:{count:u.length,visibleCount:v.length,flaggedCount:x.length,items:u,visibleItems:v,flaggedItems:x},valuation:{estimatedCurrentValueUsd:I,valuedItems:y.length,unvaluedItems:k,complete:k===0&&M.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Mi(v,d),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as vt}from"node:os";import{join as At}from"node:path";var ar=process.env.ORACLE_PUBLIC_DESKTOP==="1",qi=ar?process.env.ORACLE_CONFIG_DIR||At(vt(),".config","oracle"):At(vt(),".config","oracle"),tl=ar?qi:At(vt(),".config","mad-desk");function Et(e,t,n=""){let r=process.env[e];if(r!=null&&String(r).trim()!=="")return r;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:n}var Ki=JSON.parse(dr(new URL("../../package.json",import.meta.url),"utf8")),de="public",Gi="127.0.0.1",Yi=8799,Oe=Ki.version,Ji=new Set(["127.0.0.1","localhost","::1"]),Xi=_t(Vi(Wi(import.meta.url)),"../.."),xt=_t(Xi,"public","oracle-console"),cr=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),Qi=1e6,F=class extends Error{constructor(t,n,r){super(r||n),this.status=t,this.code=n}};function G(e,t,n){let r=t,o;try{D(n),o=Kt(n)}catch{r=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(r,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true"}),e.end(o)}function Zi(e){return new Promise((t,n)=>{let r=[],o=0;e.on("data",i=>{if(o+=i.length,o>Qi){n(new F(413,"payload-too-large","request body too large")),e.destroy();return}r.push(i)}),e.on("end",()=>{let i=Buffer.concat(r).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{n(new F(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>n(new F(400,"bad-request","request stream error")))})}function B(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new F(400,t,`${t} must be a JSON object`);return e}function es(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function ts(e){let t=es(e);if(!Ji.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function ns(){return{status:200,body:{ok:!0,plane:de,version:Oe}}}function Re(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function rs(e){let t=B(e,"body"),n=t.input!==void 0?B(t.input,"input"):t,r=Re(B(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:Jt(o,r)}}function os(e){let t=B(e,"body"),n=t.request!==void 0?B(t.request,"request"):t.input!==void 0?B(t.input,"input"):t,r=Re(B(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:Xt(o,r)}}function is(e){let t=B(e,"body"),n=Re(B(t.opts,"opts")),r=en(t.store??[],n);return{status:200,body:{ok:!0,count:r.length,grants:r}}}function ss(e){let t=B(e,"body"),n=Re(B(t.opts,"opts")),r=tn(t.store??[],t.id,n);return r==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:r}}function as(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,n=!0,r=[];return t&&r.push("privy"),n&&r.push("injected"),{status:200,body:{ok:!0,plane:de,version:Oe,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:n,modes:r},privy:{appId:e||null}}}}var It=400;function cs(e=[]){if(e.length<=It)return{rows:e,truncated:!1,omitted:0};let t=r=>r?.kind==="native"?0:r?.priced?1:2;return{rows:[...e].sort((r,o)=>t(r)-t(o)).slice(0,It),truncated:!0,omitted:e.length-It}}var kt=300;function ls(e=[]){if(e.length<=kt)return{items:e,truncated:!1,omitted:0};let t=r=>r?.spam===!0||r?.nsfw===!0?2:Number.isFinite(Number(r?.floorUsd))&&Number(r?.floorUsd)>0?0:1;return{items:[...e].sort((r,o)=>t(r)-t(o)).slice(0,kt),truncated:!0,omitted:e.length-kt}}var $e=12;async function us(e){let t=B(e,"body"),n=typeof t.owner=="string"?t.owner:null;if(!n)throw new F(400,"owner-required","owner must be an EVM address");let r=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(r&&r.length>$e)throw new F(400,"too-many-chains",`at most ${$e} chainIds per request`);let i=await _n({owner:n,chainIds:r},fr());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var ds=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,ps=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function fs(e){if(typeof e!="string")return null;let t=e.trim();return ds.test(t)?t:null}function ms(e){if(typeof e!="string")return null;let t=e.trim();return ps.test(t)?t:null}function pr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function hs(e){let t=B(e,"body"),n=pr(t.owner),r=fs(t.solana),o=ms(t.bitcoin);if(!n&&!r&&!o)throw new F(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>$e)throw new F(400,"too-many-chains",`at most ${$e} chainIds per request`);let s=await Gn({addresses:{evm:n,solana:r,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},{env:{}}),a=[],l=[],p=0,c=0;for(let u of s.chains||[]){if(!["evm","solana","bitcoin"].includes(u.family))continue;let v=u.fungibleTokens?.status??"unavailable";v==="ok"?p+=1:v==="unavailable"&&(c+=1),l.push({chainId:u.chainId,family:u.family,name:u.name,status:u.status,error:u.error??null,tokenDiscovery:v,tokenDiscoveryReason:u.fungibleTokens?.reason??null,tokenCount:Array.isArray(u.fungibleTokens?.assets)?u.fungibleTokens.assets.length:0});let x=u.native;u.status==="ok"&&x&&x.status==="ok"&&x.amountRaw&&x.amountRaw!=="0"&&x.amountRaw!=="0x0"&&a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:x.symbol,decimals:x.decimals,amount:String(x.amountRaw),amountRaw:String(x.amountRaw),amountFormatted:x.amount,kind:"native",valueUsd:x.usdValue!=null?String(x.usdValue):null,priced:x.usdValue!=null});for(let y of u.fungibleTokens?.assets||[]){let I=y.amountRaw!=null?String(y.amountRaw):null;if(!I||I==="0")continue;let k=typeof y.decimals=="number"&&Number.isInteger(y.decimals)?y.decimals:null;a.push({chainId:u.chainId,family:u.family,chain:u.name,symbol:y.symbol||y.coin||"TOKEN",decimals:k,amount:I,amountRaw:I,amountFormatted:y.amount!=null?String(y.amount):null,kind:u.family==="bitcoin"?"rune":u.family==="solana"?"spl":"erc20",address:y.address||y.mint||null,valueUsd:y.usdValue!=null?String(y.usdValue):null,priced:y.usdValue!=null,source:y.source||u.fungibleTokens?.source||null})}}let d=c>0||!!(s.valuation&&s.valuation.complete===!1),f=cs(a);return{status:200,body:{ok:!0,owner:s.addresses?.evm??n,queriedAt:s.queriedAt,portfolio:{rows:f.rows,rowsTruncated:f.truncated,rowsOmitted:f.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!d&&c===0&&!f.truncated,incompleteReason:f.truncated?`Showing ${f.rows.length} of ${f.rows.length+f.omitted} rows (native and priced first); ${f.omitted} low-signal rows omitted.`:d?p?`Token scan live on ${p} chain(s); ${c} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function fr(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function ys(e){let t=B(e,"body"),n=pr(t.owner);if(!n)throw new F(400,"owner-required","owner must be an EVM address");let r=await sr({addresses:{evm:n}},fr()),o=r?.inventory&&typeof r.inventory=="object"?r.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(r?.items)?r.items:[]).map(c=>{if(!c||typeof c!="object")return null;let d=typeof c.collection=="string"?c.collection:c.collection&&typeof c.collection=="object"&&typeof c.collection.slug=="string"?c.collection.slug:typeof c.contract=="string"?c.contract:null;return{chain:c.chain??null,chainId:c.chainId??null,family:c.family??null,owner:c.owner??n,contract:c.contract??null,tokenId:c.tokenId==null?null:String(c.tokenId),tokenStandard:c.tokenStandard??null,collection:d,name:typeof c.name=="string"?c.name.slice(0,160):null,imageUrl:c.imageUrl??c.image??null,estimatedValueUsd:c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,floorUsd:c.floorUsd!=null&&Number.isFinite(Number(c.floorUsd))?Number(c.floorUsd):c.estimatedValueUsd!=null&&Number.isFinite(Number(c.estimatedValueUsd))?Number(c.estimatedValueUsd):null,spam:c.spam===!0,nsfw:c.nsfw===!0,source:typeof c.source=="string"?c.source.slice(0,64):null}}).filter(Boolean),a=Array.isArray(r?.coverage)?r.coverage:[],l=ls(s),p=r?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:n,queriedAt:r.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:a.map(c=>({family:c?.family??null,chain:c?.chain??null,chainId:c?.chainId??null,status:c?.status??null,count:c?.count??null,complete:c?.complete===!0,source:c?.source??null,error:null,reason:typeof c?.reason=="string"?c.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:a.filter(c=>c?.status==="partial").map(c=>c.chain).filter(Boolean),unavailable:a.filter(c=>c?.status==="unavailable").map(c=>c.chain).filter(Boolean),unconfigured:a.filter(c=>c?.status==="not-configured").map(c=>c.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:r?.valuation?{estimatedCurrentValueUsd:r.valuation.estimatedCurrentValueUsd??null,valuedItems:r.valuation.valuedItems??null,unvaluedItems:r.valuation.unvaluedItems??null,complete:r.valuation.complete===!0}:null}}}var bs=6e4,gs=120,mr=10,ws=300,Ss=mr,lr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),vs=4096,ve=new Map;function As(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let n=t.split(",")[0].trim();if(n)return n.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function Es(e,t){let n=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),r=n==="127.0.0.1"||n==="::1"||n.startsWith("127."),o=As(e),i=r&&o!==n,s=lr.has(t)?r&&!i?Ss:mr:r&&!i?ws:gs,a=Date.now(),l=`${o}:${lr.has(t)?"amp":"std"}`,p=ve.get(l);if(!p||a>=p.resetAt){for(ve.set(l,{count:1,resetAt:a+bs});ve.size>vs;){let c=ve.keys().next();if(c.done)break;ve.delete(c.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-a)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var ur=Object.freeze({"GET /public/health":ns,"GET /public/config":as,"POST /public/connect/request":rs,"POST /public/connect/assemble":os,"POST /public/grants/active":is,"POST /public/grants/get":ss,"POST /public/approvals":us,"POST /public/portfolio":hs,"POST /public/nfts":ys});function Tt(e={}){return{"cache-control":"no-store","x-oracle-plane":de,"x-oracle-unsigned":"true",...e}}function xs(e,t,n,r){e.writeHead(t,Tt({"content-type":n})),e.end(r)}function Is(e,t,n){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let r=n===""?"/":n,o=cr[r]||cr[r.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=zi(_t(xt,o.file));if(!i.startsWith(xt+ji)&&i!==xt)return G(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!Hi(i))return G(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=dr(i);return e.method==="HEAD"?(t.writeHead(200,Tt({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(xs(t,200,o.type,s),!0)}async function ks(e,t){let r=new URL(e.url,"http://localhost").pathname||"/";r.length>1&&r.endsWith("/")&&r!=="/oracle-console/"&&(r=r.replace(/\/+$/,"")),r===""&&(r="/");let o=r.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=ur[i];try{if(!s){if(Is(e,t,r))return;throw Object.keys(ur).some(d=>d.endsWith(` ${o}`))?new F(405,"method-not-allowed",`unsupported method for ${o}`):new F(404,"not-found",`unknown route ${o}`)}let a=Es(e,o);if(!a.allowed){t.writeHead(429,Tt({"content-type":"application/json","retry-after":String(a.retryAfterSec),"x-ratelimit-limit":String(a.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${a.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await Zi(e),p=await s(l);G(t,p.status,p.body)}catch(a){if(a instanceof V){G(t,500,{error:"secret-leak-blocked"});return}if(a instanceof j){G(t,400,{error:"invalid-grant",errors:a.errors.map(l=>({field:l.field,message:l.message}))});return}if(a instanceof F){G(t,a.status,{error:a.code,message:a.message});return}if(a instanceof TypeError){G(t,400,{error:"bad-request",message:a.message});return}G(t,500,{error:"internal-error"})}}function _s(){return Di((e,t)=>{ks(e,t).catch(()=>{try{G(t,500,{error:"internal-error"})}catch{}})})}function Nt({host:e,port:t}={}){let n=ts(e??Et("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",Gi)),r=t??Et("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(Yi)),o=Number(r);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(r)}`);return{host:n,port:o}}function hr(e={}){let{host:t,port:n}=Nt(e),r=_s();return r.listen(n,t),r}var Ct=Nt(),Le=hr(Ct);Le.on("listening",()=>{let e=Le.address(),t=typeof e=="object"&&e?e.address:Ct.host,n=typeof e=="object"&&e?e.port:Ct.port;console.log(`oracle-public-server listening on http://${t}:${n} (plane=${de}, version=${Oe}, unsigned-only)`)});Le.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{Le.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});