@oracle-agent/oracle 0.35.43 → 0.35.44

package/dist/cli/commands/snipe.mjs

@@ -1,11 +1,11 @@
-var jt=/\b0x[a-fA-F0-9]{40}\b/g,Vt=/\b[1-9A-HJ-NP-Za-km-z]{32,44}\b/g,zt=new Set(["0x0000000000000000000000000000000000000000","0x000000000000000000000000000000000000dead","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"].map(e=>e.toLowerCase())),Wt=new Set(["So11111111111111111111111111111111111111112","EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB","11111111111111111111111111111111"]);function Gt(e){return!(Wt.has(e)||/^0x/i.test(e)||!/\d/.test(e)&&e===e.toLowerCase()||!/\d/.test(e)&&e===e.toUpperCase())}function De(e,{extras:t=[]}={}){let r=[e,...t].map(n=>String(n||"")).join(`
-`),s=[...new Set((r.match(jt)||[]).map(n=>n.toLowerCase()))].filter(n=>!zt.has(n)),o=[...new Set(r.match(Vt)||[])].filter(Gt);return{evm:s,solana:o,all:[...s.map(n=>({chainFamily:"evm",address:n})),...o.map(n=>({chainFamily:"solana",address:n}))]}}function Me(e){let t=String(e||"").trim();if(!t)return[];let r=[],s=o=>{if(!o||typeof o!="object")return;let n=String(o.id||o.id_str||o.tweetId||o.statusId||""),a=o.text||o.full_text||o.fullText||o.body||o.note_tweet?.text||"",c=[],i=o.entities?.urls||o.entities?.Urls||[];for(let d of i)d?.expanded_url&&c.push(d.expanded_url),d?.url&&c.push(d.url);(n||a)&&r.push({id:n,text:String(a),urls:c,raw:o})};try{let o=JSON.parse(t),n=Array.isArray(o)?o:o.data?Array.isArray(o.data)?o.data:[o.data]:o.tweets||o.statuses||o.results||[];Array.isArray(n)?n.forEach(s):s(o)}catch{for(let o of t.split(`
-`)){let n=o.trim();if(n.startsWith("{"))try{s(JSON.parse(n))}catch{}}r.length||r.push({id:"",text:t,urls:[]})}return r}import{spawnSync as ir}from"node:child_process";import He from"node:fs";import be from"node:path";var Kt=(process.env.ORACLE_REDACT_SECRETS??"true").toLowerCase(),Xt=["1","true","yes","on"].includes(Kt),Yt=[/sk-[A-Za-z0-9_-]{10,}/g,/sk_live_[A-Za-z0-9]{10,}/g,/sk_test_[A-Za-z0-9]{10,}/g,/ghp_[A-Za-z0-9]{10,}/g,/github_pat_[A-Za-z0-9_]{10,}/g,/gho_[A-Za-z0-9]{10,}/g,/ghs_[A-Za-z0-9]{10,}/g,/xox[baprs]-[A-Za-z0-9-]{10,}/g,/AIza[A-Za-z0-9_-]{30,}/g,/AKIA[A-Z0-9]{16}/g,/pplx-[A-Za-z0-9]{10,}/g,/hf_[A-Za-z0-9]{10,}/g,/xai-[A-Za-z0-9]{30,}/g,/gsk_[A-Za-z0-9]{10,}/g,/npm_[A-Za-z0-9]{10,}/g,/tvly-[A-Za-z0-9]{10,}/g,/Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi],Zt=/\b0x[a-fA-F0-9]{64}\b/g,Qt=/-----BEGIN (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----/g,Jt=/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,er=/\b([A-Z][A-Z0-9_]{0,40}(?:API_?KEY|TOKEN|SECRET|PASSWORD|PASSWD|PRIVATE_?KEY|MNEMONIC|SEED|AUTH)[A-Z0-9_]{0,20})\s*=\s*(['"]?)(\S+)\2/g,tr=/^(?:export\s+)?((?:api[_-]?key|token|secret|password|private[_-]?key|mnemonic|seed[_-]?phrase|authorization))\s*[:=]\s*(['"]?)([^\s&]+)\2/gim,rr=/("(?:api[_-]?key|apiKey|access[_-]?token|refresh[_-]?token|client[_-]?secret|private[_-]?key|privateKey|secret|password|authorization|bearer|mnemonic|seedPhrase)"\s*:\s*")([^"]{6,})(")/gi,nr=new Set(["access_token","refresh_token","id_token","token","api_key","apikey","client_secret","password","auth","jwt","session","secret","key","code","signature","x-amz-signature","private_key","authorization"]),zn=new Set([...nr].map(e=>e.replace(/[^a-z0-9]/gi,"").toLowerCase()));function or(e){let t=String(e??"");return t.length<18?"[REDACTED]":`${t.slice(0,6)}\u2026${t.slice(-4)}`}function sr(e){return`\xABredacted:${String(e??"").slice(0,4)}\u2026\xBB`}function re(e,t={}){if(e==null)return e;let r=typeof e=="string"?e:String(e);if(!r||!(t.force||Xt))return r;let s=t.fileRead?sr:or;r=r.replace(Qt,"[REDACTED_PRIVATE_KEY]"),r=r.replace(Zt,"[REDACTED_EVM_KEY]"),r=r.replace(Jt,o=>s(o));for(let o of Yt)o.lastIndex=0,r=r.replace(o,n=>s(n));return r=r.replace(er,(o,n,a,c)=>/^(?:os\.(?:getenv|environ)|process\.env|\$ENV\{)/.test(c)?`${n}=${a||""}${c}${a||""}`:`${n}=${a||""}${s(c)}${a||""}`),r=r.replace(tr,(o,n,a,c)=>o.replace(c,s(c))),r=r.replace(rr,(o,n,a,c)=>`${n}${s(a)}${c}`),r}var je=45e3,ar=4e4,cr=Object.freeze(["whoami","user","read","search","timeline","mentions","bookmarks","likes","following","followers","dms","auth"]),ur=Object.freeze(["post","reply","quote","delete","like","unlike","repost","unrepost","bookmark","unbookmark","follow","unfollow","block","unblock","mute","unmute","dm"]),Ve=Object.freeze(["--verbose","-v","--trace","-t","--bearer-token","--consumer-key","--consumer-secret","--access-token","--token-secret","--client-id","--client-secret"]);function lr(e=process.env){let t=String(e.ORACLE_XURL_ENABLED||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function ze(e=process.env){let t=String(e.ORACLE_XURL_ALLOW_WRITE||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function dr(e=process.env){let t=String(e.ORACLE_XURL_BIN||"").trim();if(t)return be.isAbsolute(t)?He.existsSync(t)?{ok:!0,bin:t}:{ok:!1,error:`ORACLE_XURL_BIN not found: ${t}`}:{ok:!1,error:"ORACLE_XURL_BIN must be absolute"};let r=String(e.PATH||process.env.PATH||"");for(let s of r.split(be.delimiter)){if(!s)continue;let o=be.join(s,"xurl");try{if(He.existsSync(o))return{ok:!0,bin:o}}catch{}}return{ok:!1,error:"xurl binary not found on PATH. Install: curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash"}}function pr(e=process.env){let t=e.HOME||process.env.HOME||"";return{PATH:e.PATH||process.env.PATH||"/usr/bin:/bin",HOME:t,USER:e.USER||process.env.USER||"",LANG:e.LANG||process.env.LANG||"C.UTF-8",LC_ALL:e.LC_ALL||process.env.LC_ALL||"C.UTF-8",XDG_CONFIG_HOME:e.XDG_CONFIG_HOME||process.env.XDG_CONFIG_HOME||"",XDG_DATA_HOME:e.XDG_DATA_HOME||process.env.XDG_DATA_HOME||"",NO_COLOR:"1"}}function fr(e){for(let t of e){let r=String(t);if(Ve.includes(r))return r;if(Ve.some(s=>s.startsWith("--")&&r.startsWith(`${s}=`)))return r.split("=")[0]}return null}function hr(e={},t=process.env){let r;if(Array.isArray(e.argv))r=e.argv.map(i=>String(i));else{let i=String(e.command||e.cmd||"").trim();if(!i)return{ok:!1,error:"command is required (e.g. whoami, search, read, post)"};let d=Array.isArray(e.args)?e.args.map(u=>String(u)):typeof e.query=="string"?[e.query]:typeof e.text=="string"?[e.text]:typeof e.id=="string"?[e.id]:typeof e.handle=="string"?[e.handle]:[];i==="search"&&e.limit!=null&&d.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),(i==="timeline"||i==="mentions")&&e.limit!=null&&d.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),r=[i,...d]}if(r.length===0)return{ok:!1,error:"empty argv"};if(r.length>24)return{ok:!1,error:"too many arguments"};for(let i of r)if(String(i).length>4e3)return{ok:!1,error:"argument too long"};let s=fr(r);if(s)return{ok:!1,error:`forbidden flag: ${s}`};if(r.some(i=>String(i).includes("\0")))return{ok:!1,error:"nul byte in argv"};let o=String(r[0]||"").replace(/^\//,"");if(o.startsWith("2/")||r[0].startsWith("/2/")||r[0].startsWith("https://api.x.com/")){if(!ze(t)&&r.some(i=>/^-X$/.test(i)||/^--request$/.test(i))){let i=r.findIndex(u=>u==="-X"||u==="--request"),d=String(r[i+1]||"GET").toUpperCase();if(d!=="GET"&&d!=="HEAD")return{ok:!1,error:"raw non-GET requires ORACLE_XURL_ALLOW_WRITE=true"}}}else if(o==="auth"){if(String(r[1]||"")!=="status")return{ok:!1,error:"only `auth status` is allowed (no apps add / oauth2 from the agent)"}}else if(!cr.includes(o))if(ur.includes(o)){if(!ze(t))return{ok:!1,error:`write command '${o}' requires ORACLE_XURL_ALLOW_WRITE=true`}}else return o==="media"?{ok:!1,error:"media upload is disabled in the agent tool (run xurl media outside the agent)"}:{ok:!1,error:`command not allowlisted: ${o}`};let n=[...r],a=String(t.ORACLE_XURL_APP||"").trim(),c=String(t.ORACLE_XURL_USER||"").trim();if(a&&!n.includes("--app")&&n.unshift("--app",a),c&&!n.includes("--username")&&!n.includes("-u")){let i=0;n[0]==="--app"&&(i=2),i<n.length&&n.splice(i+1,0,"-u",c)}return{ok:!0,argv:n,command:o}}async function We(e,t={},r={}){if(e!=="xurl")return{ok:!1,error:`unknown tool: ${e}`};let s=r.env||process.env;if(!lr(s))return{ok:!1,error:"xurl is disabled. Set ORACLE_XURL_ENABLED=true after `xurl auth status` succeeds. Writes stay off until ORACLE_XURL_ALLOW_WRITE=true."};let o=hr(t,s);if(!o.ok)return o;let n=dr(s);if(!n.ok)return n;let c=(r.spawnFn||ir)(n.bin,o.argv,{encoding:"utf8",timeout:r.timeoutMs||je,maxBuffer:1024*1024,env:pr(s)});if(c.error){let l=c.error.code==="ETIMEDOUT"?`xurl timed out after ${r.timeoutMs||je}ms`:String(c.error.message||c.error);return{ok:!1,error:re(l,{force:!0})}}let i=re(String(c.stdout||"").slice(0,ar),{force:!0}),d=re(String(c.stderr||"").slice(0,2e3),{force:!0}),u=typeof c.status=="number"?c.status:1;return{ok:u===0,status:u,command:o.command,argv:o.argv.map(l=>/=/.test(l)&&/token|secret|key|bearer/i.test(l)?"[redacted-arg]":l),stdout:i,stderr:d||void 0}}var Zn=Object.freeze([{type:"function",function:{name:"xurl",description:"Call the official xurl CLI against the X API with an allowlisted command. Reads (whoami/user/read/search/timeline/mentions/...) work when ORACLE_XURL_ENABLED=true. Writes (post/reply/like/follow/dm/...) also need ORACLE_XURL_ALLOW_WRITE=true. Never pass secrets or --verbose. Auth is whatever the operator configured in ~/.xurl.",parameters:{type:"object",properties:{command:{type:"string",description:"xurl subcommand: whoami, user, read, search, timeline, mentions, post, reply, ..."},args:{type:"array",items:{type:"string"},description:"Positional args after the command (query, id, handle, text)."},query:{type:"string",description:"Convenience for search query."},text:{type:"string",description:"Convenience for post/reply/dm text."},id:{type:"string",description:"Convenience for read/like/reply target id or URL."},handle:{type:"string",description:"Convenience for user/follow/dm handle."},limit:{type:"integer",description:"Result limit for search/timeline/mentions (1-50)."},argv:{type:"array",items:{type:"string"},description:"Raw argv alternative (still allowlisted + flag-filtered)."}},additionalProperties:!1}}}]);import{createHash as yr}from"node:crypto";import{types as D}from"node:util";import V from"node:net";import mr from"node:dns";var br=new Set(["localhost","metadata.google.internal","metadata.goog"]);function ne(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=u=>{if(!u)return[];let l=u.split(":"),p=l.at(-1);if(p?.includes(".")){let f=p.split(".").map(Number);if(f.length!==4||f.some(h=>!Number.isInteger(h)||h<0||h>255))return null;l.splice(l.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return l.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:l.map(f=>Number.parseInt(f,16))},[s,o]=t.split("::"),n=r(s),a=r(o);if(!n||!a)return null;let c=t.includes("::"),i=8-n.length-a.length;if(!c&&i!==0||c&&i<1)return null;let d=[...n,...Array(Math.max(0,i)).fill(0),...a];return d.length!==8?null:Uint8Array.from(d.flatMap(u=>[u>>8,u&255]))}function ge(e,t,r){let s=Math.floor(r/8),o=r%8;for(let a=0;a<s;a+=1)if(e[a]!==t[a])return!1;if(!o)return!0;let n=255<<8-o;return(e[s]&n)===(t[s]&n)}function we(e){if(V.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(V.isIPv6(e)){let t=ne(e);if(!t)return!1;let r=ne("::ffff:0:0");return ge(t,r,96)?we([...t.slice(12)].join(".")):ge(t,ne("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,n])=>ge(t,ne(o),n)):!1}return!1}function gr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(br.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let s=V.isIP(r);return s!==0&&!we(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:s!==0}}async function ye(e,{lookupFn:t=mr.promises.lookup}={}){let r=gr(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:V.isIPv6(r.host)?6:4}]};let s;try{s=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(s)||s.length===0||s.some(o=>!we(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:s}}async function ve({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,s;try{let l=await t();r=l.Agent,s=l.fetch}catch(l){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${l?.message||l}`);return null}if(typeof r!="function"||typeof s!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=l=>String(l).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),n=new Map,a=l=>(Array.isArray(l)?l:[l]).map(p=>typeof p=="string"?{address:p}:p).filter(p=>p&&p.address).map(p=>({address:p.address,family:p.family||(V.isIPv6(p.address)?6:4)})),c=(l,p,f)=>{n.set(o(l),a(typeof p=="string"?[{address:p,family:f}]:p))},i=l=>{let p=o(l);if(V.isIP(p))return[{address:p,family:V.isIPv6(p)?6:4}];let f=n.get(p);if(!f||!f.length)throw new Error(`refused: unpinned host ${l} during pinned fetch`);return f},d=new r({connect:{lookup(l,p,f){let h;try{h=i(l)}catch(m){return f(m)}return p?.all?f(null,h):f(null,h[0].address,h[0].family)}}}),u=wr((l,p={})=>s(l,{...p,dispatcher:d}),c);return{dispatcher:d,fetch:u,pin:c,resolve:i,async close(){try{await d.destroy()}catch{}}}}var Ee=Symbol.for("oracle.egressGuard.pinCapableFetch");function wr(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Ee]=Object.freeze({pin:t}),e}function Ae(e){return typeof e=="function"&&typeof e[Ee]?.pin=="function"}function Ge(e,t,r){if(!Ae(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Ee].pin(t,r)}var vr=new Set([408,425,429,500,502,503,504]),Ke=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Er=2,Xe=4e3,Ar=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Sr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,xr=AbortSignal.prototype.throwIfAborted,Cr=EventTarget.prototype.addEventListener,Ye=EventTarget.prototype.removeEventListener,Ze=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Z=e=>e?Ar.call(e):!1,kr=e=>e?Sr.call(e):void 0,Tr=new Set([301,302,303,307,308]),se=3,so=64*1024,F=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function N(e){return M(`HTTP JSON body refused: ${e}`)}function Ir(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof D[t]=="function"&&D[t](e))}function _r(e){let t=[],r=0,s=0,o=0,n=0,a=new WeakSet,c=u=>{if(r+=Buffer.byteLength(u,"utf8"),r>F.bytes)throw N("serialized byte limit exceeded");t.push(u)},i=u=>{if(Buffer.byteLength(u,"utf8")>F.bytes)throw N("serialized byte limit exceeded");return JSON.stringify(u)},d=(u,l)=>{if(s+=1,s>F.nodes)throw N("node limit exceeded");if(l>F.depth)throw N("depth limit exceeded");if(u===null){c("null");return}if(typeof u=="string"){c(i(u));return}if(typeof u=="boolean"){c(u?"true":"false");return}if(typeof u=="number"){if(!Number.isFinite(u))throw N("non-finite number");c(Object.is(u,-0)?"0":String(u));return}if(typeof u!="object")throw N("unsupported non-JSON value");if(D.isProxy(u))throw N("proxy value");if(Ir(u))throw N("unsupported exotic object");if(a.has(u))throw N("cyclic value");a.add(u);try{if(Object.getOwnPropertySymbols(u).length>0)throw N("symbol-keyed fields are unsupported");if(Array.isArray(u)){let h=Object.getPrototypeOf(u),m=0;for(;h!==null;){if(D.isProxy(h))throw N("proxy array prototype");if(m+=1,m>F.depth)throw N("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(u.length>F.arrayLength)throw N("array length limit exceeded");for(let y=0;y<u.length;y+=1){let S=Object.getOwnPropertyDescriptor(u,String(y));if(!S||!Object.hasOwn(S,"value")||S.enumerable!==!0)throw N("array entries must be dense enumerable own data")}let b=0;for(let y in u){if(n+=1,n>F.fields)throw N("enumeration limit exceeded");if(Object.hasOwn(u,y)&&(b+=1,b>u.length))throw N("named array fields are unsupported")}if(b!==u.length)throw N("array entries must be dense enumerable own data");c("[");for(let y=0;y<u.length;y+=1)y&&c(","),d(Object.getOwnPropertyDescriptor(u,String(y)).value,l+1);c("]");return}let p=Object.getPrototypeOf(u);if(p!==Object.prototype&&p!==null)throw N("non-plain object");let f=[];for(let h in u){if(n+=1,n>F.fields)throw N("enumeration limit exceeded");if(!Object.hasOwn(u,h))continue;if(o+=1,o>F.fields)throw N("field limit exceeded");let m=Object.getOwnPropertyDescriptor(u,h);if(!m||!Object.hasOwn(m,"value")||m.enumerable!==!0)throw N("object fields must be enumerable own data");f.push([h,m.value])}c("{");for(let h=0;h<f.length;h+=1)h&&c(","),c(i(f[h][0])),c(":"),d(f[h][1],l+1);c("}")}finally{a.delete(u)}};return d(e,0),t.join("")}function Or(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(D.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let s of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(s))throw new TypeError("HTTP header names must be valid tokens");let o=s.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let n=Object.getOwnPropertyDescriptor(e,s);if(!n||!Object.hasOwn(n,"value"))throw new TypeError("HTTP headers must contain own data properties");let a=n.value;if(a==null||["object","function","symbol"].includes(typeof a))throw new TypeError("HTTP header values must be scalar");t[s]=String(a)}return t}function Nr(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Rr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Lr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Se=new Map,Qe=new WeakMap,Je=1;function oe(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=Qe.get(e);return t||(t=Je,Je+=1,Qe.set(e,t)),`reference:${t}`}var Pr=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Ur=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function et(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Pr.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function tt(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(et);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return et(r);let s=Object.hasOwn(r,"type")?r.type:null;return typeof s=="string"&&Ur.has(s)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function qr(e,t,r,s={},o=null){let n=yr("sha256"),a=(i,d)=>{let u=String(d);n.update(String(Buffer.byteLength(i,"utf8"))).update(":").update(i),n.update("=").update(String(Buffer.byteLength(u,"utf8"))).update(":").update(u).update(`
-`)};a("method",e),a("url",t),Object.keys(r||{}).map((i,d)=>({name:i.toLowerCase(),order:d,value:String(r[i])})).sort((i,d)=>i.name.localeCompare(d.name)||i.order-d.order).forEach((i,d)=>{a(`header-name-${d}`,i.name),a(`header-value-${d}`,i.value)}),a("body",o??"-");for(let i of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])a(`context-${i}`,s[i]??"-");return n.digest("hex")}function Br(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Xe):Math.min(250*2**e,Xe)+Math.floor(Math.random()*100)}var $r=e=>new Promise(t=>setTimeout(t,e));function M(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function xe(e,t,r){return M(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function z(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Fr(e){return e?e.byteLength??e.length??0:0}async function Dr(e,t,{url:r,truncate:s=!1,onOversize:o}={}){if(t==null)return await e.text();let n=Number(e.headers?.get?.("content-length"));if(Number.isFinite(n)&&n>t&&(z(e),!s))throw xe(r,`content-length ${n}`,t);let a=e.body?.getReader?.();if(!a){let l=await e.text(),p=Buffer.byteLength(l,"utf8");if(p>t){if(!s)throw xe(r,`body ${p} bytes`,t);return Buffer.from(l,"utf8").subarray(0,t).toString("utf8")}return l}let c=[],i=0,d=!1;try{for(;;){let{value:l,done:p}=await a.read();if(p)break;if(l&&(c.push(Buffer.from(l)),i+=Fr(l),i>t)){d=!0;break}}}finally{if(d)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(d&&(typeof o=="function"&&o(),!s))throw xe(r,`streamed ${i} bytes`,t);let u=Buffer.concat(c);return(d?u.subarray(0,t):u).toString("utf8")}function Mr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Hr(e,{fetchImpl:t,method:r,headers:s,body:o,timeoutMs:n,lookupFn:a,realFetch:c,untrustedUrl:i=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:u=!1,importUndici:l,validateResponse:p,signal:f,redirectPolicy:h="follow",maxRedirects:m=se}){let b=null,y=t,S=a?{lookupFn:a}:{};if(i&&!c&&!Ae(y))throw M(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let x=new AbortController,T=setTimeout(()=>x.abort(),n),I=f?Ze?Ze([f,x.signal]):f:x.signal,C=async(E,{status:k=null}={})=>{let A=await ye(E,S);if(!A.ok)throw M(k==null?`HTTP refused ${E}: ${A.error}`:`HTTP redirect to ${E} ${A.error}`,k==null?{}:{status:k});let L=new URL(E).hostname;if(c){if(b&&(await b.close(),b=null),!b)try{b=await ve({requireUndici:!0,...l?{importUndici:l}:{}})}catch(g){throw M(k==null?`HTTP refused ${E}: ${g?.message||g}`:`HTTP redirect to ${E} refused: ${g?.message||g}`,k==null?{}:{status:k})}b.pin(L,A.addresses),y=b.fetch}else Ge(y,L,A.addresses);return A};try{let E=String(e),k=Object.assign(Object.create(null),s||{});i&&await C(E);for(let A=0;A<=m;A+=1){let L=Object.assign(Object.create(null),{method:r,headers:k,body:o,signal:I,redirect:"manual",dispatcher:void 0}),g=await y(E,L);if((h==="error"||m===0)&&g.status>=300&&g.status<400)throw z(g),M(`HTTP ${g.status} ${r} redirect refused`,{status:g.status,redirectRefused:!0});if(Tr.has(g.status)){let U=u===!0&&r==="POST"&&[307,308].includes(g.status)&&tt(r,o);if(r!=="GET"&&r!=="HEAD"&&!U){z(g);let R=new Error(`HTTP ${g.status} ${r} ${E} redirected non-idempotent request`);throw R.status=g.status,R}if(A===m)throw z(g),M(`HTTP ${g.status} ${r} redirect budget exhausted`,{status:g.status,redirectRefused:!0});let Be=g.headers?.get?.("location"),$;try{$=Rr(Be,E)}catch(R){throw z(g),R}let H=!Lr($,E);if(z(g),H&&r==="POST"){let R=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw R.status=g.status,R}if(H&&u){let R=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw R.status=g.status,R.retryable=!1,R}if(H&&(k=Nr(k)),i)await C($,{status:g.status});else if(H){let R=await ye($,S);if(!R.ok){let O=new Error(`HTTP redirect from ${E} ${R.error}`);throw O.status=g.status,O.retryable=!1,O}c&&R.addresses?.length&&(b||(b=await ve(l?{importUndici:l}:{})),b&&(b.pin(new URL($).hostname,R.addresses),y=b.fetch))}E=$;continue}if(typeof p=="function")try{await p(g,{url:E})}catch(U){throw z(g),M(U?.message||String(U))}let P=await Dr(g,d,{url:E,onOversize:()=>x.abort()}),K=Mr(P);if(!g.ok){let U=new Error(`HTTP ${g.status} ${r} ${E}`);throw U.status=g.status,U.retryAfter=g.headers?.get?.("retry-after")??null,U.body=K??P.slice(0,300),U}return K??P}throw new Error(`HTTP redirect loop for ${e}`)}catch(E){if(x.signal.aborted&&!Z(f)){let k=E&&(typeof E=="object"||typeof E=="function")&&!D.isProxy(E)?E:null,A=k?Object.getOwnPropertyDescriptor(k,"oversize"):null;if(!(A&&Object.hasOwn(A,"value")&&A.value===!0))try{if(!k)throw new TypeError("unsafe rejection");Object.defineProperties(k,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let g=new Error("HTTP request timed out");throw Object.defineProperties(g,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),g}}throw E}finally{clearTimeout(T),b&&await b.close()}}async function ie(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&D.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let O of Object.getOwnPropertyNames(t)){let _=Object.getOwnPropertyDescriptor(t,O);if(!(O==="toJSON"&&_&&Object.hasOwn(_,"value")&&_.value===void 0)){if(!r.has(O))throw new TypeError("HTTP options contain unknown fields");if(!_||!_.enumerable||!Object.hasOwn(_,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let s=O=>{if(t==null||!Object.hasOwn(t,O))return;let _=Object.getOwnPropertyDescriptor(t,O);if(!_||!Object.hasOwn(_,"value"))throw new TypeError("HTTP options must contain own data properties");return _.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=s("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let n=s("timeoutMs");if(n!==void 0&&(!Number.isInteger(n)||n<1||n>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let a=s("retries");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>10))throw new TypeError("HTTP retries must be a bounded integer");let c=s("redirectPolicy");if(c!==void 0&&c!=="follow"&&c!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let i=s("maxRedirects");if(i!==void 0&&(!Number.isInteger(i)||i<0||i>se))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${se}`);if(c==="error"&&i!==void 0&&i!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=c??"follow",u=d==="error"?0:i??se;for(let O of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let _=s(O);if(_!==void 0&&typeof _!="boolean")throw new TypeError(`HTTP ${O} must be boolean`)}let l=s("maxResponseBytes");if(l!==void 0&&(!Number.isInteger(l)||l<1||l>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=s("signal");if(p!==void 0){if(D.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Z(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let O of["importUndici","lookupFn","validateResponse"]){let _=s(O);if(_!==void 0&&typeof _!="function")throw new TypeError(`HTTP ${O} must be a function`)}let f=s("fetchImpl"),h=f||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let m=n??12e3,b=(o||"GET").toUpperCase(),y=s("headers"),S=Or(y),x=Object.assign(Object.create(null),S);Object.keys(x).some(O=>O.toLowerCase()==="accept")||(x.Accept="application/json");let T=s("body");T!=null&&typeof T!="string"&&(Object.keys(x).find(_=>_.toLowerCase()==="content-type")||(x["Content-Type"]="application/json"),T=_r(T));let I=a??Er,C=s("lookupFn"),E=!f,k=s("untrustedUrl")===!0,A=s("sameOriginRedirectsOnly")===!0,L=s("importUndici"),g=s("validateResponse"),P=p,K=l??null,U=async()=>{let O;for(let _=0;_<=I;_++){P&&xr.call(P);try{return await Hr(e,{fetchImpl:h,method:b,headers:x,body:T,timeoutMs:m,lookupFn:C,realFetch:E,untrustedUrl:k,maxResponseBytes:K,sameOriginRedirectsOnly:A,importUndici:L,validateResponse:g,signal:P,redirectPolicy:d,maxRedirects:u})}catch(j){O=j;let G=me=>{if(!j||typeof j!="object"&&typeof j!="function"||D.isProxy(j))return;let X=Object.getOwnPropertyDescriptor(j,me);return X&&Object.hasOwn(X,"value")?X.value:void 0},he=G("status"),Dt=G("oracleTimeout")===!0||G("name")==="AbortError"||G("name")==="TimeoutError"||Z(P),Mt=new Set([408,425,429]),Ht=G("retryable")===!1?!1:he!=null?Mt.has(he)||vr.has(he)&&Ke.has(b):!Dt&&Ke.has(b);if(_===I||!Ht)throw j;let $e=Br(_,G("retryAfter"));P?await new Promise((me,X)=>{let Fe,Y=()=>{clearTimeout(Fe),Ye.call(P,"abort",Y),X(kr(P)||new DOMException("Aborted","AbortError"))};if(Z(P)){Y();return}Fe=setTimeout(()=>{Ye.call(P,"abort",Y),me()},$e),Cr.call(P,"abort",Y,{once:!0}),Z(P)&&Y()}):await $r($e)}}throw O};if(!(s("dedupe")!==!1&&!P&&tt(b,T)))return U();let $=qr(b,e,x,{untrustedUrl:k,maxResponseBytes:K,sameOriginRedirectsOnly:A,redirectPolicy:d,maxRedirects:u,timeoutMs:m,retries:I,fetchImpl:oe(h),realFetch:E,lookupFn:oe(C),importUndici:oe(L),validateResponse:oe(g)},T),H=Se.get($);if(H)return H;let R=U().finally(()=>Se.delete($));return Se.set($,R),R}async function rt(e,t,r){let s=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,s.length||1)),n=new Array(s.length),a=0;return await Promise.all(Array.from({length:o},async()=>{for(;a<s.length;){let c=a++;n[c]=await r(s[c],c)}})),n}var nt={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},jr=new Map(Object.values(nt).map(e=>[e.chainId,e]));function ot(e){return jr.get(Number(e))||null}function st(e,t=process.env){let r=ot(e);if(!r)return null;for(let s of r.rpcEnv){let o=(t[s]||"").trim();if(o)return o}return null}import{Interface as Vr,getAddress as zr}from"ethers";var it=new Vr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function at(e,t){try{return zr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}var Wr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Gr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let s=st(e,r);return s||Wr[Number(e)]||null}var Kr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Xr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Kr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var Q=new Map,ct=new Map;function Yr(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Zr(e){if(e?.error)throw Yr(e.error);return e?.result}function Qr(e,t,r){return`${e}
+var Gt=/\b0x[a-fA-F0-9]{40}\b/g,Kt=/\b[1-9A-HJ-NP-Za-km-z]{32,44}\b/g,Xt=new Set(["0x0000000000000000000000000000000000000000","0x000000000000000000000000000000000000dead","0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"].map(e=>e.toLowerCase())),Yt=new Set(["So11111111111111111111111111111111111111112","EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB","11111111111111111111111111111111"]);function Zt(e){return!(Yt.has(e)||/^0x/i.test(e)||!/\d/.test(e)&&e===e.toLowerCase()||!/\d/.test(e)&&e===e.toUpperCase())}function je(e,{extras:t=[]}={}){let r=[e,...t].map(o=>String(o||"")).join(`
+`),s=[...new Set((r.match(Gt)||[]).map(o=>o.toLowerCase()))].filter(o=>!Xt.has(o)),n=[...new Set(r.match(Kt)||[])].filter(Zt);return{evm:s,solana:n,all:[...s.map(o=>({chainFamily:"evm",address:o})),...n.map(o=>({chainFamily:"solana",address:o}))]}}function Ve(e){let t=String(e||"").trim();if(!t)return[];let r=[],s=n=>{if(!n||typeof n!="object")return;let o=String(n.id||n.id_str||n.tweetId||n.statusId||""),a=n.text||n.full_text||n.fullText||n.body||n.note_tweet?.text||"",c=[],i=n.entities?.urls||n.entities?.Urls||[];for(let d of i)d?.expanded_url&&c.push(d.expanded_url),d?.url&&c.push(d.url);(o||a)&&r.push({id:o,text:String(a),urls:c,raw:n})};try{let n=JSON.parse(t),o=Array.isArray(n)?n:n.data?Array.isArray(n.data)?n.data:[n.data]:n.tweets||n.statuses||n.results||[];Array.isArray(o)?o.forEach(s):s(n)}catch{for(let n of t.split(`
+`)){let o=n.trim();if(o.startsWith("{"))try{s(JSON.parse(o))}catch{}}r.length||r.push({id:"",text:t,urls:[]})}return r}import{spawnSync as lr}from"node:child_process";import ze from"node:fs";import ge from"node:path";var Qt=(process.env.ORACLE_REDACT_SECRETS??"true").toLowerCase(),Jt=["1","true","yes","on"].includes(Qt),er=[/sk-[A-Za-z0-9_-]{10,}/g,/sk_live_[A-Za-z0-9]{10,}/g,/sk_test_[A-Za-z0-9]{10,}/g,/ghp_[A-Za-z0-9]{10,}/g,/github_pat_[A-Za-z0-9_]{10,}/g,/gho_[A-Za-z0-9]{10,}/g,/ghs_[A-Za-z0-9]{10,}/g,/xox[baprs]-[A-Za-z0-9-]{10,}/g,/AIza[A-Za-z0-9_-]{30,}/g,/AKIA[A-Z0-9]{16}/g,/pplx-[A-Za-z0-9]{10,}/g,/hf_[A-Za-z0-9]{10,}/g,/xai-[A-Za-z0-9]{30,}/g,/gsk_[A-Za-z0-9]{10,}/g,/npm_[A-Za-z0-9]{10,}/g,/tvly-[A-Za-z0-9]{10,}/g,/Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi],tr=/\b0x[a-fA-F0-9]{64}\b/g,rr=/-----BEGIN (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH |ENCRYPTED )?PRIVATE KEY-----/g,nr=/\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,or=/\b([A-Z][A-Z0-9_]{0,40}(?:API_?KEY|TOKEN|SECRET|PASSWORD|PASSWD|PRIVATE_?KEY|MNEMONIC|SEED|AUTH)[A-Z0-9_]{0,20})\s*=\s*(['"]?)(\S+)\2/g,sr=/^(?:export\s+)?((?:api[_-]?key|token|secret|password|private[_-]?key|mnemonic|seed[_-]?phrase|authorization))\s*[:=]\s*(['"]?)([^\s&]+)\2/gim,ir=/("(?:api[_-]?key|apiKey|access[_-]?token|refresh[_-]?token|client[_-]?secret|private[_-]?key|privateKey|secret|password|authorization|bearer|mnemonic|seedPhrase)"\s*:\s*")([^"]{6,})(")/gi,ar=new Set(["access_token","refresh_token","id_token","token","api_key","apikey","client_secret","password","auth","jwt","session","secret","key","code","signature","x-amz-signature","private_key","authorization"]),Jn=new Set([...ar].map(e=>e.replace(/[^a-z0-9]/gi,"").toLowerCase()));function cr(e){let t=String(e??"");return t.length<18?"[REDACTED]":`${t.slice(0,6)}\u2026${t.slice(-4)}`}function ur(e){return`\xABredacted:${String(e??"").slice(0,4)}\u2026\xBB`}function ne(e,t={}){if(e==null)return e;let r=typeof e=="string"?e:String(e);if(!r||!(t.force||Jt))return r;let s=t.fileRead?ur:cr;r=r.replace(rr,"[REDACTED_PRIVATE_KEY]"),r=r.replace(tr,"[REDACTED_EVM_KEY]"),r=r.replace(nr,n=>s(n));for(let n of er)n.lastIndex=0,r=r.replace(n,o=>s(o));return r=r.replace(or,(n,o,a,c)=>/^(?:os\.(?:getenv|environ)|process\.env|\$ENV\{)/.test(c)?`${o}=${a||""}${c}${a||""}`:`${o}=${a||""}${s(c)}${a||""}`),r=r.replace(sr,(n,o,a,c)=>n.replace(c,s(c))),r=r.replace(ir,(n,o,a,c)=>`${o}${s(a)}${c}`),r}var We=45e3,dr=4e4,pr=Object.freeze(["whoami","user","read","search","timeline","mentions","bookmarks","likes","following","followers","dms","auth"]),fr=Object.freeze(["post","reply","quote","delete","like","unlike","repost","unrepost","bookmark","unbookmark","follow","unfollow","block","unblock","mute","unmute","dm"]),Ge=Object.freeze(["--verbose","-v","--trace","-t","--bearer-token","--consumer-key","--consumer-secret","--access-token","--token-secret","--client-id","--client-secret"]);function hr(e=process.env){let t=String(e.ORACLE_XURL_ENABLED||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function Ke(e=process.env){let t=String(e.ORACLE_XURL_ALLOW_WRITE||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function mr(e=process.env){let t=String(e.ORACLE_XURL_BIN||"").trim();if(t)return ge.isAbsolute(t)?ze.existsSync(t)?{ok:!0,bin:t}:{ok:!1,error:`ORACLE_XURL_BIN not found: ${t}`}:{ok:!1,error:"ORACLE_XURL_BIN must be absolute"};let r=String(e.PATH||process.env.PATH||"");for(let s of r.split(ge.delimiter)){if(!s)continue;let n=ge.join(s,"xurl");try{if(ze.existsSync(n))return{ok:!0,bin:n}}catch{}}return{ok:!1,error:"xurl binary not found on PATH. Install: curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash"}}function br(e=process.env){let t=e.HOME||process.env.HOME||"";return{PATH:e.PATH||process.env.PATH||"/usr/bin:/bin",HOME:t,USER:e.USER||process.env.USER||"",LANG:e.LANG||process.env.LANG||"C.UTF-8",LC_ALL:e.LC_ALL||process.env.LC_ALL||"C.UTF-8",XDG_CONFIG_HOME:e.XDG_CONFIG_HOME||process.env.XDG_CONFIG_HOME||"",XDG_DATA_HOME:e.XDG_DATA_HOME||process.env.XDG_DATA_HOME||"",NO_COLOR:"1"}}function gr(e){for(let t of e){let r=String(t);if(Ge.includes(r))return r;if(Ge.some(s=>s.startsWith("--")&&r.startsWith(`${s}=`)))return r.split("=")[0]}return null}function wr(e={},t=process.env){let r;if(Array.isArray(e.argv))r=e.argv.map(i=>String(i));else{let i=String(e.command||e.cmd||"").trim();if(!i)return{ok:!1,error:"command is required (e.g. whoami, search, read, post)"};let d=Array.isArray(e.args)?e.args.map(u=>String(u)):typeof e.query=="string"?[e.query]:typeof e.text=="string"?[e.text]:typeof e.id=="string"?[e.id]:typeof e.handle=="string"?[e.handle]:[];i==="search"&&e.limit!=null&&d.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),(i==="timeline"||i==="mentions")&&e.limit!=null&&d.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),r=[i,...d]}if(r.length===0)return{ok:!1,error:"empty argv"};if(r.length>24)return{ok:!1,error:"too many arguments"};for(let i of r)if(String(i).length>4e3)return{ok:!1,error:"argument too long"};let s=gr(r);if(s)return{ok:!1,error:`forbidden flag: ${s}`};if(r.some(i=>String(i).includes("\0")))return{ok:!1,error:"nul byte in argv"};let n=String(r[0]||"").replace(/^\//,"");if(n.startsWith("2/")||r[0].startsWith("/2/")||r[0].startsWith("https://api.x.com/")){if(!Ke(t)&&r.some(i=>/^-X$/.test(i)||/^--request$/.test(i))){let i=r.findIndex(u=>u==="-X"||u==="--request"),d=String(r[i+1]||"GET").toUpperCase();if(d!=="GET"&&d!=="HEAD")return{ok:!1,error:"raw non-GET requires ORACLE_XURL_ALLOW_WRITE=true"}}}else if(n==="auth"){if(String(r[1]||"")!=="status")return{ok:!1,error:"only `auth status` is allowed (no apps add / oauth2 from the agent)"}}else if(!pr.includes(n))if(fr.includes(n)){if(!Ke(t))return{ok:!1,error:`write command '${n}' requires ORACLE_XURL_ALLOW_WRITE=true`}}else return n==="media"?{ok:!1,error:"media upload is disabled in the agent tool (run xurl media outside the agent)"}:{ok:!1,error:`command not allowlisted: ${n}`};let o=[...r],a=String(t.ORACLE_XURL_APP||"").trim(),c=String(t.ORACLE_XURL_USER||"").trim();if(a&&!o.includes("--app")&&o.unshift("--app",a),c&&!o.includes("--username")&&!o.includes("-u")){let i=0;o[0]==="--app"&&(i=2),i<o.length&&o.splice(i+1,0,"-u",c)}return{ok:!0,argv:o,command:n}}async function Xe(e,t={},r={}){if(e!=="xurl")return{ok:!1,error:`unknown tool: ${e}`};let s=r.env||process.env;if(!hr(s))return{ok:!1,error:"xurl is disabled. Set ORACLE_XURL_ENABLED=true after `xurl auth status` succeeds. Writes stay off until ORACLE_XURL_ALLOW_WRITE=true."};let n=wr(t,s);if(!n.ok)return n;let o=mr(s);if(!o.ok)return o;let c=(r.spawnFn||lr)(o.bin,n.argv,{encoding:"utf8",timeout:r.timeoutMs||We,maxBuffer:1024*1024,env:br(s)});if(c.error){let l=c.error.code==="ETIMEDOUT"?`xurl timed out after ${r.timeoutMs||We}ms`:String(c.error.message||c.error);return{ok:!1,error:ne(l,{force:!0})}}let i=ne(String(c.stdout||"").slice(0,dr),{force:!0}),d=ne(String(c.stderr||"").slice(0,2e3),{force:!0}),u=typeof c.status=="number"?c.status:1;return{ok:u===0,status:u,command:n.command,argv:n.argv.map(l=>/=/.test(l)&&/token|secret|key|bearer/i.test(l)?"[redacted-arg]":l),stdout:i,stderr:d||void 0}}var so=Object.freeze([{type:"function",function:{name:"xurl",description:"Call the official xurl CLI against the X API with an allowlisted command. Reads (whoami/user/read/search/timeline/mentions/...) work when ORACLE_XURL_ENABLED=true. Writes (post/reply/like/follow/dm/...) also need ORACLE_XURL_ALLOW_WRITE=true. Never pass secrets or --verbose. Auth is whatever the operator configured in ~/.xurl.",parameters:{type:"object",properties:{command:{type:"string",description:"xurl subcommand: whoami, user, read, search, timeline, mentions, post, reply, ..."},args:{type:"array",items:{type:"string"},description:"Positional args after the command (query, id, handle, text)."},query:{type:"string",description:"Convenience for search query."},text:{type:"string",description:"Convenience for post/reply/dm text."},id:{type:"string",description:"Convenience for read/like/reply target id or URL."},handle:{type:"string",description:"Convenience for user/follow/dm handle."},limit:{type:"integer",description:"Result limit for search/timeline/mentions (1-50)."},argv:{type:"array",items:{type:"string"},description:"Raw argv alternative (still allowlisted + flag-filtered)."}},additionalProperties:!1}}}]);import{createHash as Tr}from"node:crypto";import{types as M}from"node:util";import{AsyncLocalStorage as yr}from"node:async_hooks";var vr=new yr,Er=["http","retry","shared"],Sr=512;function oe(e){let t=vr.getStore();if(!t||t.closed||!Er.includes(e))return null;if(t.spans.length>=Sr)return t.droppedSpans++,null;let r={stage:e,startMs:t.now()-t.start,durationMs:null,outcome:"pending",status:null};return t.spans.push(r),(s,n=null)=>{t.closed||r.durationMs!==null||(r.durationMs=Math.max(0,t.now()-t.start-r.startMs),r.outcome=s==="succeeded"?"succeeded":"failed",r.status=Number.isInteger(n)&&n>=100&&n<=599?n:null)}}import V from"node:net";import Ar from"node:dns";var xr=new Set(["localhost","metadata.google.internal","metadata.goog"]);function se(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=u=>{if(!u)return[];let l=u.split(":"),p=l.at(-1);if(p?.includes(".")){let f=p.split(".").map(Number);if(f.length!==4||f.some(h=>!Number.isInteger(h)||h<0||h>255))return null;l.splice(l.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return l.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:l.map(f=>Number.parseInt(f,16))},[s,n]=t.split("::"),o=r(s),a=r(n);if(!o||!a)return null;let c=t.includes("::"),i=8-o.length-a.length;if(!c&&i!==0||c&&i<1)return null;let d=[...o,...Array(Math.max(0,i)).fill(0),...a];return d.length!==8?null:Uint8Array.from(d.flatMap(u=>[u>>8,u&255]))}function we(e,t,r){let s=Math.floor(r/8),n=r%8;for(let a=0;a<s;a+=1)if(e[a]!==t[a])return!1;if(!n)return!0;let o=255<<8-n;return(e[s]&o)===(t[s]&o)}function ye(e){if(V.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(V.isIPv6(e)){let t=se(e);if(!t)return!1;let r=se("::ffff:0:0");return we(t,r,96)?ye([...t.slice(12)].join(".")):we(t,se("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([n,o])=>we(t,se(n),o)):!1}return!1}function Cr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(xr.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let s=V.isIP(r);return s!==0&&!ye(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:s!==0}}async function ve(e,{lookupFn:t=Ar.promises.lookup}={}){let r=Cr(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:V.isIPv6(r.host)?6:4}]};let s;try{s=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(s)||s.length===0||s.some(n=>!ye(n.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:s}}async function Ee({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,s;try{let l=await t();r=l.Agent,s=l.fetch}catch(l){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${l?.message||l}`);return null}if(typeof r!="function"||typeof s!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let n=l=>String(l).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),o=new Map,a=l=>(Array.isArray(l)?l:[l]).map(p=>typeof p=="string"?{address:p}:p).filter(p=>p&&p.address).map(p=>({address:p.address,family:p.family||(V.isIPv6(p.address)?6:4)})),c=(l,p,f)=>{o.set(n(l),a(typeof p=="string"?[{address:p,family:f}]:p))},i=l=>{let p=n(l);if(V.isIP(p))return[{address:p,family:V.isIPv6(p)?6:4}];let f=o.get(p);if(!f||!f.length)throw new Error(`refused: unpinned host ${l} during pinned fetch`);return f},d=new r({connect:{lookup(l,p,f){let h;try{h=i(l)}catch(m){return f(m)}return p?.all?f(null,h):f(null,h[0].address,h[0].family)}}}),u=kr((l,p={})=>s(l,{...p,dispatcher:d}),c);return{dispatcher:d,fetch:u,pin:c,resolve:i,async close(){try{await d.destroy()}catch{}}}}var Se=Symbol.for("oracle.egressGuard.pinCapableFetch");function kr(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Se]=Object.freeze({pin:t}),e}function Ae(e){return typeof e=="function"&&typeof e[Se]?.pin=="function"}function Ye(e,t,r){if(!Ae(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Se].pin(t,r)}var Ir=new Set([408,425,429,500,502,503,504]),Ze=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),_r=2,Qe=4e3,Or=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Nr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Rr=AbortSignal.prototype.throwIfAborted,Lr=EventTarget.prototype.addEventListener,Je=EventTarget.prototype.removeEventListener,et=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Z=e=>e?Or.call(e):!1,Pr=e=>e?Nr.call(e):void 0,Ur=new Set([301,302,303,307,308]),ae=3,go=64*1024,D=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function N(e){return H(`HTTP JSON body refused: ${e}`)}function qr(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof M[t]=="function"&&M[t](e))}function Br(e){let t=[],r=0,s=0,n=0,o=0,a=new WeakSet,c=u=>{if(r+=Buffer.byteLength(u,"utf8"),r>D.bytes)throw N("serialized byte limit exceeded");t.push(u)},i=u=>{if(Buffer.byteLength(u,"utf8")>D.bytes)throw N("serialized byte limit exceeded");return JSON.stringify(u)},d=(u,l)=>{if(s+=1,s>D.nodes)throw N("node limit exceeded");if(l>D.depth)throw N("depth limit exceeded");if(u===null){c("null");return}if(typeof u=="string"){c(i(u));return}if(typeof u=="boolean"){c(u?"true":"false");return}if(typeof u=="number"){if(!Number.isFinite(u))throw N("non-finite number");c(Object.is(u,-0)?"0":String(u));return}if(typeof u!="object")throw N("unsupported non-JSON value");if(M.isProxy(u))throw N("proxy value");if(qr(u))throw N("unsupported exotic object");if(a.has(u))throw N("cyclic value");a.add(u);try{if(Object.getOwnPropertySymbols(u).length>0)throw N("symbol-keyed fields are unsupported");if(Array.isArray(u)){let h=Object.getPrototypeOf(u),m=0;for(;h!==null;){if(M.isProxy(h))throw N("proxy array prototype");if(m+=1,m>D.depth)throw N("array prototype depth limit exceeded");h=Object.getPrototypeOf(h)}if(u.length>D.arrayLength)throw N("array length limit exceeded");for(let y=0;y<u.length;y+=1){let x=Object.getOwnPropertyDescriptor(u,String(y));if(!x||!Object.hasOwn(x,"value")||x.enumerable!==!0)throw N("array entries must be dense enumerable own data")}let b=0;for(let y in u){if(o+=1,o>D.fields)throw N("enumeration limit exceeded");if(Object.hasOwn(u,y)&&(b+=1,b>u.length))throw N("named array fields are unsupported")}if(b!==u.length)throw N("array entries must be dense enumerable own data");c("[");for(let y=0;y<u.length;y+=1)y&&c(","),d(Object.getOwnPropertyDescriptor(u,String(y)).value,l+1);c("]");return}let p=Object.getPrototypeOf(u);if(p!==Object.prototype&&p!==null)throw N("non-plain object");let f=[];for(let h in u){if(o+=1,o>D.fields)throw N("enumeration limit exceeded");if(!Object.hasOwn(u,h))continue;if(n+=1,n>D.fields)throw N("field limit exceeded");let m=Object.getOwnPropertyDescriptor(u,h);if(!m||!Object.hasOwn(m,"value")||m.enumerable!==!0)throw N("object fields must be enumerable own data");f.push([h,m.value])}c("{");for(let h=0;h<f.length;h+=1)h&&c(","),c(i(f[h][0])),c(":"),d(f[h][1],l+1);c("}")}finally{a.delete(u)}};return d(e,0),t.join("")}function $r(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(M.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let s of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(s))throw new TypeError("HTTP header names must be valid tokens");let n=s.toLowerCase();if(r.has(n))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(n);let o=Object.getOwnPropertyDescriptor(e,s);if(!o||!Object.hasOwn(o,"value"))throw new TypeError("HTTP headers must contain own data properties");let a=o.value;if(a==null||["object","function","symbol"].includes(typeof a))throw new TypeError("HTTP header values must be scalar");t[s]=String(a)}return t}function Fr(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Dr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Mr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var xe=new Map,tt=new WeakMap,rt=1;function ie(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=tt.get(e);return t||(t=rt,rt+=1,tt.set(e,t)),`reference:${t}`}var Hr=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),jr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function nt(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Hr.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function ot(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(nt);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return nt(r);let s=Object.hasOwn(r,"type")?r.type:null;return typeof s=="string"&&jr.has(s)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function Vr(e,t,r,s={},n=null){let o=Tr("sha256"),a=(i,d)=>{let u=String(d);o.update(String(Buffer.byteLength(i,"utf8"))).update(":").update(i),o.update("=").update(String(Buffer.byteLength(u,"utf8"))).update(":").update(u).update(`
+`)};a("method",e),a("url",t),Object.keys(r||{}).map((i,d)=>({name:i.toLowerCase(),order:d,value:String(r[i])})).sort((i,d)=>i.name.localeCompare(d.name)||i.order-d.order).forEach((i,d)=>{a(`header-name-${d}`,i.name),a(`header-value-${d}`,i.value)}),a("body",n??"-");for(let i of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])a(`context-${i}`,s[i]??"-");return o.digest("hex")}function zr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Qe):Math.min(250*2**e,Qe)+Math.floor(Math.random()*100)}var Wr=e=>new Promise(t=>setTimeout(t,e));function H(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Ce(e,t,r){return H(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function z(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Gr(e){return e?e.byteLength??e.length??0:0}async function Kr(e,t,{url:r,truncate:s=!1,onOversize:n}={}){if(t==null)return await e.text();let o=Number(e.headers?.get?.("content-length"));if(Number.isFinite(o)&&o>t&&(z(e),!s))throw Ce(r,`content-length ${o}`,t);let a=e.body?.getReader?.();if(!a){let l=await e.text(),p=Buffer.byteLength(l,"utf8");if(p>t){if(!s)throw Ce(r,`body ${p} bytes`,t);return Buffer.from(l,"utf8").subarray(0,t).toString("utf8")}return l}let c=[],i=0,d=!1;try{for(;;){let{value:l,done:p}=await a.read();if(p)break;if(l&&(c.push(Buffer.from(l)),i+=Gr(l),i>t)){d=!0;break}}}finally{if(d)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(d&&(typeof n=="function"&&n(),!s))throw Ce(r,`streamed ${i} bytes`,t);let u=Buffer.concat(c);return(d?u.subarray(0,t):u).toString("utf8")}function Xr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Yr(e,{fetchImpl:t,method:r,headers:s,body:n,timeoutMs:o,lookupFn:a,realFetch:c,untrustedUrl:i=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:u=!1,importUndici:l,validateResponse:p,signal:f,redirectPolicy:h="follow",maxRedirects:m=ae}){let b=null,y=t,x=a?{lookupFn:a}:{};if(i&&!c&&!Ae(y))throw H(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let C=new AbortController,_=setTimeout(()=>C.abort(),o),O=f?et?et([f,C.signal]):f:C.signal,T=async(E,{status:I=null}={})=>{let S=await ve(E,x);if(!S.ok)throw H(I==null?`HTTP refused ${E}: ${S.error}`:`HTTP redirect to ${E} ${S.error}`,I==null?{}:{status:I});let L=new URL(E).hostname;if(c){if(b&&(await b.close(),b=null),!b)try{b=await Ee({requireUndici:!0,...l?{importUndici:l}:{}})}catch(g){throw H(I==null?`HTTP refused ${E}: ${g?.message||g}`:`HTTP redirect to ${E} refused: ${g?.message||g}`,I==null?{}:{status:I})}b.pin(L,S.addresses),y=b.fetch}else Ye(y,L,S.addresses);return S};try{let E=String(e),I=Object.assign(Object.create(null),s||{});i&&await T(E);for(let S=0;S<=m;S+=1){let L=Object.assign(Object.create(null),{method:r,headers:I,body:n,signal:O,redirect:"manual",dispatcher:void 0}),g=await y(E,L);if((h==="error"||m===0)&&g.status>=300&&g.status<400)throw z(g),H(`HTTP ${g.status} ${r} redirect refused`,{status:g.status,redirectRefused:!0});if(Ur.has(g.status)){let U=u===!0&&r==="POST"&&[307,308].includes(g.status)&&ot(r,n);if(r!=="GET"&&r!=="HEAD"&&!U){z(g);let R=new Error(`HTTP ${g.status} ${r} ${E} redirected non-idempotent request`);throw R.status=g.status,R}if(S===m)throw z(g),H(`HTTP ${g.status} ${r} redirect budget exhausted`,{status:g.status,redirectRefused:!0});let $e=g.headers?.get?.("location"),$;try{$=Dr($e,E)}catch(R){throw z(g),R}let j=!Mr($,E);if(z(g),j&&r==="POST"){let R=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw R.status=g.status,R}if(j&&u){let R=new Error(`HTTP ${g.status} ${r} cross-origin redirect refused`);throw R.status=g.status,R.retryable=!1,R}if(j&&(I=Fr(I)),i)await T($,{status:g.status});else if(j){let R=await ve($,x);if(!R.ok){let k=new Error(`HTTP redirect from ${E} ${R.error}`);throw k.status=g.status,k.retryable=!1,k}c&&R.addresses?.length&&(b||(b=await Ee(l?{importUndici:l}:{})),b&&(b.pin(new URL($).hostname,R.addresses),y=b.fetch))}E=$;continue}if(typeof p=="function")try{await p(g,{url:E})}catch(U){throw z(g),H(U?.message||String(U))}let P=await Kr(g,d,{url:E,onOversize:()=>C.abort()}),K=Xr(P);if(!g.ok){let U=new Error(`HTTP ${g.status} ${r} ${E}`);throw U.status=g.status,U.retryAfter=g.headers?.get?.("retry-after")??null,U.body=K??P.slice(0,300),U}return K??P}throw new Error(`HTTP redirect loop for ${e}`)}catch(E){if(C.signal.aborted&&!Z(f)){let I=E&&(typeof E=="object"||typeof E=="function")&&!M.isProxy(E)?E:null,S=I?Object.getOwnPropertyDescriptor(I,"oversize"):null;if(!(S&&Object.hasOwn(S,"value")&&S.value===!0))try{if(!I)throw new TypeError("unsafe rejection");Object.defineProperties(I,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let g=new Error("HTTP request timed out");throw Object.defineProperties(g,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),g}}throw E}finally{clearTimeout(_),b&&await b.close()}}async function ce(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&M.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let k of Object.getOwnPropertyNames(t)){let A=Object.getOwnPropertyDescriptor(t,k);if(!(k==="toJSON"&&A&&Object.hasOwn(A,"value")&&A.value===void 0)){if(!r.has(k))throw new TypeError("HTTP options contain unknown fields");if(!A||!A.enumerable||!Object.hasOwn(A,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let s=k=>{if(t==null||!Object.hasOwn(t,k))return;let A=Object.getOwnPropertyDescriptor(t,k);if(!A||!Object.hasOwn(A,"value"))throw new TypeError("HTTP options must contain own data properties");return A.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let n=s("method");if(n!==void 0&&(typeof n!="string"||!/^[A-Za-z]+$/u.test(n)))throw new TypeError("HTTP method must be a string token");let o=s("timeoutMs");if(o!==void 0&&(!Number.isInteger(o)||o<1||o>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let a=s("retries");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>10))throw new TypeError("HTTP retries must be a bounded integer");let c=s("redirectPolicy");if(c!==void 0&&c!=="follow"&&c!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let i=s("maxRedirects");if(i!==void 0&&(!Number.isInteger(i)||i<0||i>ae))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ae}`);if(c==="error"&&i!==void 0&&i!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=c??"follow",u=d==="error"?0:i??ae;for(let k of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let A=s(k);if(A!==void 0&&typeof A!="boolean")throw new TypeError(`HTTP ${k} must be boolean`)}let l=s("maxResponseBytes");if(l!==void 0&&(!Number.isInteger(l)||l<1||l>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=s("signal");if(p!==void 0){if(M.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Z(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let k of["importUndici","lookupFn","validateResponse"]){let A=s(k);if(A!==void 0&&typeof A!="function")throw new TypeError(`HTTP ${k} must be a function`)}let f=s("fetchImpl"),h=f||globalThis.fetch;if(typeof h!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let m=o??12e3,b=(n||"GET").toUpperCase(),y=s("headers"),x=$r(y),C=Object.assign(Object.create(null),x);Object.keys(C).some(k=>k.toLowerCase()==="accept")||(C.Accept="application/json");let _=s("body");_!=null&&typeof _!="string"&&(Object.keys(C).find(A=>A.toLowerCase()==="content-type")||(C["Content-Type"]="application/json"),_=Br(_));let O=a??_r,T=s("lookupFn"),E=!f,I=s("untrustedUrl")===!0,S=s("sameOriginRedirectsOnly")===!0,L=s("importUndici"),g=s("validateResponse"),P=p,K=l??null,U=async()=>{let k;for(let A=0;A<=O;A++){P&&Rr.call(P);let Fe=oe("http");try{let F=await Yr(e,{fetchImpl:h,method:b,headers:C,body:_,timeoutMs:m,lookupFn:T,realFetch:E,untrustedUrl:I,maxResponseBytes:K,sameOriginRedirectsOnly:S,importUndici:L,validateResponse:g,signal:P,redirectPolicy:d,maxRedirects:u});return Fe?.("succeeded"),F}catch(F){k=F;let G=be=>{if(!F||typeof F!="object"&&typeof F!="function"||M.isProxy(F))return;let X=Object.getOwnPropertyDescriptor(F,be);return X&&Object.hasOwn(X,"value")?X.value:void 0},re=G("status");Fe?.("failed",re);let jt=G("oracleTimeout")===!0||G("name")==="AbortError"||G("name")==="TimeoutError"||Z(P),Vt=new Set([408,425,429]),zt=G("retryable")===!1?!1:re!=null?Vt.has(re)||Ir.has(re)&&Ze.has(b):!jt&&Ze.has(b);if(A===O||!zt)throw F;let De=zr(A,G("retryAfter")),Wt=oe("retry"),Me=!1;try{P?await new Promise((be,X)=>{let He,Y=()=>{clearTimeout(He),Je.call(P,"abort",Y),X(Pr(P)||new DOMException("Aborted","AbortError"))};if(Z(P)){Y();return}He=setTimeout(()=>{Je.call(P,"abort",Y),be()},De),Lr.call(P,"abort",Y,{once:!0}),Z(P)&&Y()}):await Wr(De),Me=!0}finally{Wt?.(Me?"succeeded":"failed")}}}throw k};if(!(s("dedupe")!==!1&&!P&&ot(b,_)))return U();let $=Vr(b,e,C,{untrustedUrl:I,maxResponseBytes:K,sameOriginRedirectsOnly:S,redirectPolicy:d,maxRedirects:u,timeoutMs:m,retries:O,fetchImpl:ie(h),realFetch:E,lookupFn:ie(T),importUndici:ie(L),validateResponse:ie(g)},_),j=xe.get($);if(j){let k=oe("shared");try{let A=await j;return k?.("succeeded"),A}catch(A){throw k?.("failed"),A}}let R=U().finally(()=>xe.delete($));return xe.set($,R),R}async function st(e,t,r){let s=Array.from(e),n=Math.max(1,Math.min(Number(t)||1,s.length||1)),o=new Array(s.length),a=0;return await Promise.all(Array.from({length:n},async()=>{for(;a<s.length;){let c=a++;o[c]=await r(s[c],c)}})),o}var it={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Zr=new Map(Object.values(it).map(e=>[e.chainId,e]));function at(e){return Zr.get(Number(e))||null}function ct(e,t=process.env){let r=at(e);if(!r)return null;for(let s of r.rpcEnv){let n=(t[s]||"").trim();if(n)return n}return null}import{Interface as Qr,getAddress as Jr}from"ethers";var ut=new Qr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function lt(e,t){try{return Jr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}var en={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function tn(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let s=ct(e,r);return s||en[Number(e)]||null}var rn=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function nn(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!rn.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var Q=new Map,dt=new Map;function on(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function sn(e){if(e?.error)throw on(e.error);return e?.result}function an(e,t,r){return`${e}
 ${t}
-${JSON.stringify(r??[])}`}async function Jr(e,t,r){return ie(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function q(e,t,r=[],s={}){let o=String(t||""),n=Xr(o),a=Gr(e,s);if(!a)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(n==="eth_chainid"&&s.cacheChainId!==!1){let u=ct.get(a);if(u!=null)return u}let i=s.dedupe!==!1&&!s.signal?Qr(a,o,r):null;if(i&&Q.has(i))return Q.get(i);let d=(async()=>{let u=await Jr(a,{jsonrpc:"2.0",id:1,method:t,params:r},s),l=Zr(u);return n==="eth_chainid"&&typeof l=="string"&&ct.set(a,l),l})();return i&&(Q.set(i,d),d.finally(()=>{Q.get(i)===d&&Q.delete(i)}).catch(()=>{})),d}async function ut(e,t={}){let r=await q(e,"eth_blockNumber",[],t);return parseInt(r,16)}async function lt(e,t,r={}){if(!t)throw new Error("rpcGetBalance requires address");let s=await q(e,"eth_getBalance",[t,"latest"],r);return{chainId:Number(e),address:t,balanceWei:BigInt(s).toString(),balanceHex:s}}async function dt(e={},t={}){let r=Number(e.chainId??t.chainId??1),s=at(e.token||e.tokenAddress,"token"),o=at(e.account||e.owner||e.address,"account"),n=it.encodeFunctionData("balanceOf",[o]),a=await q(r,"eth_call",[{to:s,data:n},e.blockTag||"latest"],t),c=it.decodeFunctionResult("balanceOf",a),i=BigInt(c[0]);return{chainId:r,token:s,account:o,balance:i.toString(),balanceHex:`0x${i.toString(16)}`,blockTag:e.blockTag||"latest"}}var en=new Set(["usdc","usdt","usdg","dai","usd1","usde","pyusd"]);function pt(e,t){let r=String(e||"").toLowerCase(),s=String(t?.quote||t?.quoteToken?.address||"").toLowerCase(),o=String(t?.base||t?.baseToken?.address||"").toLowerCase();return s===r?{address:t.base||t.baseToken?.address,symbol:t.baseToken?.symbol}:o===r?{address:t.quote||t.quoteToken?.address,symbol:t.quoteToken?.symbol}:{address:t.quote||t.quoteToken?.address,symbol:t.quoteToken?.symbol}}function ae(e,t=[],{stables:r=[],wrappedNative:s=null}={}){let o=String(e||"").toLowerCase(),n=new Set((r||[]).map(i=>String(i).toLowerCase())),a=String(s||"").toLowerCase(),c=(t||[]).map((i,d)=>{let u=pt(o,i),l=String(u.address||"").toLowerCase(),p=String(u.symbol||"").toLowerCase(),f=Number(i.liquidityUsd??i.liquidity?.usd),h=Number.isFinite(f)?f:0,m=String(i.dex||i.dexId||"").toLowerCase(),b=0;return n.has(l)||en.has(p)?b=300:a&&l===a&&(b=100),m.includes("v4")?b+=20:m.includes("v3")?b+=10:(m.includes("v2")||m.includes("raydium")||m.includes("orca")||m.includes("meteora"))&&(b+=8),{pool:i,score:b*1e12+h,index:d,otherAddr:l,liquidityUsd:h}});return c.sort((i,d)=>d.score-i.score||i.index-d.index),c.map(i=>i.pool)}function ft(e,t=[]){let r=Array.isArray(t)?t:[];return r.length&&pt(e,r[0]).address||null}var tn="https://api.dexscreener.com",go=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});function rn(e={}){return(e.baseUrl||process.env.DEXSCREENER_API_URL||tn).replace(/\/$/,"")}function nn(e,t){if(typeof e!="string"&&typeof e!="number")throw new Error(`${t} required`);let r=String(e).trim();if(!r||r.length>128||!/^[A-Za-z0-9][A-Za-z0-9._:+~-]*$/u.test(r))throw new Error(`${t} must be a valid path component of at most 128 characters`);return encodeURIComponent(r)}function on(e,t){return ie(`${rn(t)}${e}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3})}async function Ce(e,t={}){return on(`/latest/dex/tokens/${nn(e,"tokenAddress")}`,t)}var sn=["EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB"];async function ht(e,{chainSlug:t="solana",stables:r=sn}={},s={}){let o=await Ce(e,s),a=(o?.pairs||o?.data?.pairs||[]).filter(i=>String(i.chainId).toLowerCase()===String(t).toLowerCase()).map(i=>({pair:i.pairAddress,dex:i.dexId,dexId:i.dexId,base:i.baseToken?.address,quote:i.quoteToken?.address,baseToken:i.baseToken,quoteToken:i.quoteToken,liquidityUsd:i.liquidity?.usd??null,priceUsd:i.priceUsd??null,volume24hUsd:i.volume?.h24??null,createdAt:i.pairCreatedAt??null})),c=ae(e,a,{stables:r});return{chain:t,token:e,pools:c,topPool:c[0]||null}}var ce=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),v=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),w=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"}),an=/^0x[0-9a-fA-F]{40}$/;function cn(e={}){let t=[],r=[];if(!e||typeof e!="object")return{ok:!1,errors:["definition must be an object"],warnings:r};if((!Number.isInteger(e.chainId)||e.chainId<=0)&&t.push("chainId must be a positive integer"),(typeof e.key!="string"||!/^[a-z][a-z0-9-]*$/.test(e.key||""))&&t.push('key must be a lowercase slug (e.g. "base")'),(typeof e.name!="string"||!e.name.trim())&&t.push("name is required"),!Array.isArray(e.rpcEnv)||e.rpcEnv.length===0)t.push("rpcEnv must list at least one environment variable name");else for(let o of e.rpcEnv)(typeof o!="string"||!/^[A-Z][A-Z0-9_]*$/.test(o))&&t.push(`rpcEnv entry "${o}" should be an UPPER_SNAKE env var name`);if(e.nativeCurrency){let o=e.nativeCurrency;(typeof o.symbol!="string"||!o.symbol)&&t.push("nativeCurrency.symbol is required when nativeCurrency is set"),Number.isInteger(o.decimals)||t.push("nativeCurrency.decimals must be an integer")}for(let[o,n]of(e.venues||[]).entries()){let a=`venues[${o}]`;if(!n||typeof n!="object"){t.push(`${a} must be an object`);continue}an.test(n.address||"")||t.push(`${a}.address is not a valid 20-byte address`),/^0x0{40}$/.test(n.address||"")&&t.push(`${a}.address is the zero address -- placeholder left in place?`),n.kind||t.push(`${a}.kind is required (router|quoter|factory|...)`),n.verified?(n.verified.method||t.push(`${a}.verified.method is required`),n.verified.source||t.push(`${a}.verified.source is required`),n.verified.date||r.push(`${a}.verified.date missing -- add one so staleness is visible`)):t.push(`${a} must record verification: { verified: { method, source, date } }. An unverified venue stays blocked.`)}let s=e.capabilities||{};for(let o of Object.keys(s))ce.includes(o)?typeof s[o]!="function"&&t.push(`capability "${o}" must be a function`):t.push(`unknown capability "${o}"`);return Object.keys(s).length===0&&r.push("scanner implements no capabilities -- it can only be registered, not used"),s.prepareUnsignedTx&&!s.quote&&r.push("prepareUnsignedTx without quote: no priced expectation to validate the built tx against"),s.prepareUnsignedTx&&!s.sellSimulation&&r.push("prepareUnsignedTx without sellSimulation: cannot prove an asset is exitable before buying"),{ok:t.length===0,errors:t,warnings:r}}function un(e){let{ok:t,errors:r,warnings:s}=cn(e);if(!t)throw new Error(`invalid scanner for ${e?.key??"<unknown>"}:
+${JSON.stringify(r??[])}`}async function cn(e,t,r){return ce(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function q(e,t,r=[],s={}){let n=String(t||""),o=nn(n),a=tn(e,s);if(!a)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(o==="eth_chainid"&&s.cacheChainId!==!1){let u=dt.get(a);if(u!=null)return u}let i=s.dedupe!==!1&&!s.signal?an(a,n,r):null;if(i&&Q.has(i))return Q.get(i);let d=(async()=>{let u=await cn(a,{jsonrpc:"2.0",id:1,method:t,params:r},s),l=sn(u);return o==="eth_chainid"&&typeof l=="string"&&dt.set(a,l),l})();return i&&(Q.set(i,d),d.finally(()=>{Q.get(i)===d&&Q.delete(i)}).catch(()=>{})),d}async function pt(e,t={}){let r=await q(e,"eth_blockNumber",[],t);return parseInt(r,16)}async function ft(e,t,r={}){if(!t)throw new Error("rpcGetBalance requires address");let s=await q(e,"eth_getBalance",[t,"latest"],r);return{chainId:Number(e),address:t,balanceWei:BigInt(s).toString(),balanceHex:s}}async function ht(e={},t={}){let r=Number(e.chainId??t.chainId??1),s=lt(e.token||e.tokenAddress,"token"),n=lt(e.account||e.owner||e.address,"account"),o=ut.encodeFunctionData("balanceOf",[n]),a=await q(r,"eth_call",[{to:s,data:o},e.blockTag||"latest"],t),c=ut.decodeFunctionResult("balanceOf",a),i=BigInt(c[0]);return{chainId:r,token:s,account:n,balance:i.toString(),balanceHex:`0x${i.toString(16)}`,blockTag:e.blockTag||"latest"}}var un=new Set(["usdc","usdt","usdg","dai","usd1","usde","pyusd"]);function mt(e,t){let r=String(e||"").toLowerCase(),s=String(t?.quote||t?.quoteToken?.address||"").toLowerCase(),n=String(t?.base||t?.baseToken?.address||"").toLowerCase();return s===r?{address:t.base||t.baseToken?.address,symbol:t.baseToken?.symbol}:n===r?{address:t.quote||t.quoteToken?.address,symbol:t.quoteToken?.symbol}:{address:t.quote||t.quoteToken?.address,symbol:t.quoteToken?.symbol}}function ue(e,t=[],{stables:r=[],wrappedNative:s=null}={}){let n=String(e||"").toLowerCase(),o=new Set((r||[]).map(i=>String(i).toLowerCase())),a=String(s||"").toLowerCase(),c=(t||[]).map((i,d)=>{let u=mt(n,i),l=String(u.address||"").toLowerCase(),p=String(u.symbol||"").toLowerCase(),f=Number(i.liquidityUsd??i.liquidity?.usd),h=Number.isFinite(f)?f:0,m=String(i.dex||i.dexId||"").toLowerCase(),b=0;return o.has(l)||un.has(p)?b=300:a&&l===a&&(b=100),m.includes("v4")?b+=20:m.includes("v3")?b+=10:(m.includes("v2")||m.includes("raydium")||m.includes("orca")||m.includes("meteora"))&&(b+=8),{pool:i,score:b*1e12+h,index:d,otherAddr:l,liquidityUsd:h}});return c.sort((i,d)=>d.score-i.score||i.index-d.index),c.map(i=>i.pool)}function bt(e,t=[]){let r=Array.isArray(t)?t:[];return r.length&&mt(e,r[0]).address||null}var ln="https://api.dexscreener.com",Io=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});function dn(e={}){return(e.baseUrl||process.env.DEXSCREENER_API_URL||ln).replace(/\/$/,"")}function pn(e,t){if(typeof e!="string"&&typeof e!="number")throw new Error(`${t} required`);let r=String(e).trim();if(!r||r.length>128||!/^[A-Za-z0-9][A-Za-z0-9._:+~-]*$/u.test(r))throw new Error(`${t} must be a valid path component of at most 128 characters`);return encodeURIComponent(r)}function fn(e,t){return ce(`${dn(t)}${e}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3})}async function ke(e,t={}){return fn(`/latest/dex/tokens/${pn(e,"tokenAddress")}`,t)}var hn=["EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB"];async function gt(e,{chainSlug:t="solana",stables:r=hn}={},s={}){let n=await ke(e,s),a=(n?.pairs||n?.data?.pairs||[]).filter(i=>String(i.chainId).toLowerCase()===String(t).toLowerCase()).map(i=>({pair:i.pairAddress,dex:i.dexId,dexId:i.dexId,base:i.baseToken?.address,quote:i.quoteToken?.address,baseToken:i.baseToken,quoteToken:i.quoteToken,liquidityUsd:i.liquidity?.usd??null,priceUsd:i.priceUsd??null,volume24hUsd:i.volume?.h24??null,createdAt:i.pairCreatedAt??null})),c=ue(e,a,{stables:r});return{chain:t,token:e,pools:c,topPool:c[0]||null}}var le=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),v=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),w=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"}),mn=/^0x[0-9a-fA-F]{40}$/;function bn(e={}){let t=[],r=[];if(!e||typeof e!="object")return{ok:!1,errors:["definition must be an object"],warnings:r};if((!Number.isInteger(e.chainId)||e.chainId<=0)&&t.push("chainId must be a positive integer"),(typeof e.key!="string"||!/^[a-z][a-z0-9-]*$/.test(e.key||""))&&t.push('key must be a lowercase slug (e.g. "base")'),(typeof e.name!="string"||!e.name.trim())&&t.push("name is required"),!Array.isArray(e.rpcEnv)||e.rpcEnv.length===0)t.push("rpcEnv must list at least one environment variable name");else for(let n of e.rpcEnv)(typeof n!="string"||!/^[A-Z][A-Z0-9_]*$/.test(n))&&t.push(`rpcEnv entry "${n}" should be an UPPER_SNAKE env var name`);if(e.nativeCurrency){let n=e.nativeCurrency;(typeof n.symbol!="string"||!n.symbol)&&t.push("nativeCurrency.symbol is required when nativeCurrency is set"),Number.isInteger(n.decimals)||t.push("nativeCurrency.decimals must be an integer")}for(let[n,o]of(e.venues||[]).entries()){let a=`venues[${n}]`;if(!o||typeof o!="object"){t.push(`${a} must be an object`);continue}mn.test(o.address||"")||t.push(`${a}.address is not a valid 20-byte address`),/^0x0{40}$/.test(o.address||"")&&t.push(`${a}.address is the zero address -- placeholder left in place?`),o.kind||t.push(`${a}.kind is required (router|quoter|factory|...)`),o.verified?(o.verified.method||t.push(`${a}.verified.method is required`),o.verified.source||t.push(`${a}.verified.source is required`),o.verified.date||r.push(`${a}.verified.date missing -- add one so staleness is visible`)):t.push(`${a} must record verification: { verified: { method, source, date } }. An unverified venue stays blocked.`)}let s=e.capabilities||{};for(let n of Object.keys(s))le.includes(n)?typeof s[n]!="function"&&t.push(`capability "${n}" must be a function`):t.push(`unknown capability "${n}"`);return Object.keys(s).length===0&&r.push("scanner implements no capabilities -- it can only be registered, not used"),s.prepareUnsignedTx&&!s.quote&&r.push("prepareUnsignedTx without quote: no priced expectation to validate the built tx against"),s.prepareUnsignedTx&&!s.sellSimulation&&r.push("prepareUnsignedTx without sellSimulation: cannot prove an asset is exitable before buying"),{ok:t.length===0,errors:t,warnings:r}}function gn(e){let{ok:t,errors:r,warnings:s}=bn(e);if(!t)throw new Error(`invalid scanner for ${e?.key??"<unknown>"}:
   - ${r.join(`
-  - `)}`);let o=e.capabilities||{},n=ce.filter(c=>typeof o[c]=="function"),a={key:e.key,chainId:e.chainId,name:e.name,rpcEnv:[...e.rpcEnv],nativeCurrency:e.nativeCurrency?{...e.nativeCurrency}:null,wrappedNative:e.wrappedNative||null,explorer:e.explorer||null,venues:(e.venues||[]).map(c=>({...c})),warnings:s,capabilities(){return{chainId:e.chainId,key:e.key,supported:[...n],unsupported:ce.filter(c=>!n.includes(c))}},supports(c){return n.includes(c)}};for(let c of ce)n.includes(c)?a[c]=async(...i)=>o[c](...i,{scanner:a}):a[c]=async()=>{throw new Error(`${e.key} (chain ${e.chainId}) does not implement "${c}". Supported: ${n.join(", ")||"none"}. An unimplemented capability is absent, not assumed -- implement it or treat this chain as fail-closed for that operation.`)};return Object.freeze(a)}var mt=new Map;function bt(e){let t=un(e);return mt.set(t.chainId,t),t}function gt(e){return mt.get(Number(e))||null}var Te={getAmountsOut:"d06ca61f",swapExactTokensForTokens:"38ed1739",swapExactETHForTokens:"7ff36ab5"},B=e=>BigInt(e).toString(16).padStart(64,"0"),J=e=>e.slice(2).toLowerCase().padStart(64,"0");function ln(e,t){return`0x${Te.getAmountsOut}`+B(e)+B(64)+B(t.length)+t.map(J).join("")}function dn(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length<128)return null;let r=Number(BigInt(`0x${t.slice(64,128)}`));if(!Number.isFinite(r)||r<1||r>16)return null;let s=[];for(let o=0;o<r;o++){let n=128+o*64;if(t.length<n+64)return null;s.push(BigInt(`0x${t.slice(n,n+64)}`))}return s}function ke(e,t="router"){return(e?.venues||[]).find(s=>s.kind===t)?.address??null}var Ie=100;function pn(e,t){let r=Number(t);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>Ie)throw new Error(`slippageBps ${r} exceeds the ${Ie} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(r))/10000n}function wt(e){let{chainId:t,wrappedNative:r}=e;async function s(o,n,a,c){let i=await q(t,"eth_call",[{to:o,data:ln(n,a)},"latest"],c);return dn(i?.result??i)}return{async quote({tokenIn:o,tokenOut:n,amountIn:a,path:c},i={}){let d=ke(i.scanner);if(!d)return{chainId:t,evidence:v.UNAVAILABLE,reason:"no verified router configured for this chain; quoting stays fail-closed rather than guessing a venue address"};let u=c||[o,n];if(u.some(p=>!/^0x[0-9a-fA-F]{40}$/.test(p||"")))throw new Error("quote requires valid 20-byte addresses");let l=await s(d,a,u,i);return l?{chainId:t,router:d,path:u,amountIn:String(a),amountOut:l[l.length-1].toString(),hops:u.length-1,evidence:v.LIVE,note:"exact-input quote at current reserves; not a guaranteed fill"}:{chainId:t,router:d,path:u,evidence:v.UNKNOWN,reason:"router returned no amounts -- no pool for this path, or the call reverted"}},async sellSimulation({token:o,amountIn:n,base:a},c={}){let i=ke(c.scanner),d=a||r;if(d&&String(o).toLowerCase()===String(d).toLowerCase())return{chainId:t,token:o,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!i||!d)return{chainId:t,token:o,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:i?"no wrappedNative configured for this chain, so no base asset to round-trip against":"no verified router configured for this chain"};let u=await s(i,n,[d,o],c);if(!u)return{chainId:t,token:o,verdict:w.FAIL,evidence:v.LIVE,leg:"buy",reason:"buy leg returned no amounts -- no route in"};let l=u[u.length-1];if(l===0n)return{chainId:t,token:o,verdict:w.FAIL,evidence:v.LIVE,leg:"buy",reason:"buy leg quotes zero output"};let p=await s(i,l,[o,d],c);if(!p)return{chainId:t,token:o,verdict:w.FAIL,evidence:v.LIVE,leg:"sell",bought:l.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let f=p[p.length-1],h=Number(f*10000n/BigInt(n)),m=w.PASS,b="round trip completes with expected fee/impact loss";return h<5e3?(m=w.FAIL,b=`round trip returns only ${(h/100).toFixed(2)}% -- punitive tax or no real liquidity`):h<9e3&&(m=w.CAUTION,b=`round trip returns ${(h/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,token:o,base:d,router:i,verdict:m,reason:b,amountIn:String(n),bought:l.toString(),returned:f.toString(),retentionBps:h,evidence:v.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:o,tokenOut:n,amountIn:a,recipient:c,slippageBps:i=50,deadlineSeconds:d=900,path:u},l={}){let p=l.scanner,f=ke(p);if(!f)throw new Error(`chain ${t} has no verified router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!/^0x[0-9a-fA-F]{40}$/.test(c||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let h=u||[o,n],m=await this.quote({tokenIn:o,tokenOut:n,amountIn:a,path:h},l);if(m.evidence!==v.LIVE)throw new Error(`cannot prepare without a live quote (${m.evidence}: ${m.reason??"no reason given"})`);let b=pn(m.amountOut,i);if(b<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let y=BigInt(Math.floor(Date.now()/1e3)+Number(d)),S=r&&h[0].toLowerCase()===r.toLowerCase()&&l.useNative,x=S?`0x${Te.swapExactETHForTokens}`+B(b)+B(128)+J(c)+B(y)+B(h.length)+h.map(J).join(""):`0x${Te.swapExactTokensForTokens}`+B(a)+B(b)+B(160)+J(c)+B(y)+B(h.length)+h.map(J).join("");return{unsigned:!0,signedBy:"user-wallet",chainId:t,tx:{to:f,data:x,value:S?`0x${BigInt(a).toString(16)}`:"0x0"},guard:{quotedOut:m.amountOut,minOut:b.toString(),slippageBps:i,maxSlippageBps:Ie,deadline:y.toString()},requires:S?[]:[{step:"approve",token:h[0],spender:f,amount:String(a)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var fn=[100,500,3e3,1e4],yt={quoteExactInputSingle:"c6a5026a",exactInputSingle:"04e45aaf"},W=e=>BigInt(e).toString(16).padStart(64,"0"),ee=e=>e.slice(2).toLowerCase().padStart(64,"0"),vt=/^0x[0-9a-fA-F]{40}$/,Oe=100;function hn(e,t){let r=Number(t);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>Oe)throw new Error(`slippageBps ${r} exceeds the ${Oe} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(r))/10000n}function _e(e,t){return(e?.venues||[]).find(r=>r.kind===t)?.address??null}function Et(e){let{chainId:t,wrappedNative:r}=e;async function s({quoter:n,tokenIn:a,tokenOut:c,amountIn:i,fee:d},u){let l=`0x${yt.quoteExactInputSingle}`+ee(a)+ee(c)+W(i)+W(d)+W(0),p=await q(t,"eth_call",[{to:n,data:l},"latest"],u).catch(()=>null),f=p?.result??p;if(!f||f==="0x"||f.length<66)return null;let h=BigInt(`0x${f.slice(2,66)}`);return h>0n?h:null}async function o({quoter:n,tokenIn:a,tokenOut:c,amountIn:i},d){let u=await Promise.all(fn.map(async p=>{let f=await s({quoter:n,tokenIn:a,tokenOut:c,amountIn:i,fee:p},d);return{fee:p,amountOut:f?f.toString():null,out:f}})),l=null;for(let p of u)p.out&&(!l||p.out>l.amountOut)&&(l={fee:p.fee,amountOut:p.out});return{best:l,tried:u.map(({fee:p,amountOut:f})=>({fee:p,amountOut:f}))}}return{async quote({tokenIn:n,tokenOut:a,amountIn:c},i={}){let d=_e(i.scanner,"quoter");if(!d)return{chainId:t,evidence:v.UNAVAILABLE,reason:"no verified quoter configured for this chain; quoting stays fail-closed rather than guessing a venue address"};for(let p of[n,a])if(!vt.test(p||""))throw new Error("quote requires valid 20-byte addresses");let{best:u,tried:l}=await o({quoter:d,tokenIn:n,tokenOut:a,amountIn:c},i);return u?{chainId:t,venue:"uniswap-v3",quoter:d,tokenIn:n,tokenOut:a,amountIn:String(c),amountOut:u.amountOut.toString(),fee:u.fee,useNative:!!r&&String(n).toLowerCase()===String(r).toLowerCase(),triedFeeTiers:l,evidence:v.LIVE,note:"exact-input single-hop quote at current tick; not a guaranteed fill"}:{chainId:t,quoter:d,tokenIn:n,tokenOut:a,triedFeeTiers:l,evidence:v.UNKNOWN,reason:"no fee tier returned a quote -- no V3 pool for this pair, or no liquidity"}},async sellSimulation({token:n,amountIn:a,base:c},i={}){let d=_e(i.scanner,"quoter"),u=(e.stableQuoteAssets||[]).map(I=>String(I).toLowerCase()),l=null;!c&&typeof e.resolveQuoteAsset=="function"&&(l=await e.resolveQuoteAsset(n,i).catch(()=>null));let p=String(n).toLowerCase(),f=String(r||"").toLowerCase();if(f&&p===f)return{chainId:t,token:n,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};let h=c||l||(u[0]&&p!==u[0]?u[0]:null)||r;if(h&&p===String(h).toLowerCase())return{chainId:t,token:n,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!d||!h)return{chainId:t,token:n,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:d?"no wrappedNative configured, so there is no base asset to round-trip against":"no verified quoter configured for this chain"};let m=await o({quoter:d,tokenIn:h,tokenOut:n,amountIn:a},i);if(!m.best){let I=u.find(C=>C&&C!==String(h).toLowerCase()&&C!==String(n).toLowerCase());if(I){let C=await o({quoter:d,tokenIn:I,tokenOut:n,amountIn:a},i);if(C.best){let E=await o({quoter:d,tokenIn:n,tokenOut:I,amountIn:C.best.amountOut},i);if(E.best){let k=E.best.amountOut,A=Number(k*10000n/BigInt(a)),L=w.PASS,g="round trip vs dollar book completes with expected fee/impact loss";return A<5e3?(L=w.FAIL,g=`round trip vs dollar book returns only ${(A/100).toFixed(2)}% -- punitive tax or no real liquidity`):A<9e3&&(L=w.CAUTION,g=`round trip vs dollar book returns ${(A/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,venue:"uniswap-v3",token:n,base:I,quoteAsset:I,verdict:L,reason:g,amountIn:String(a),bought:C.best.amountOut.toString(),returned:k.toString(),retentionBps:A,buyFee:C.best.fee,sellFee:E.best.fee,evidence:v.LIVE,note:"Quoted against the dollar book, not wrapped native. A missing WETH pool is not a honeypot."}}}}return{chainId:t,token:n,verdict:w.FAIL,evidence:v.LIVE,leg:"buy",reason:"no V3 pool priced the buy leg on any fee tier against wrapped native or the dollar book"}}let b=await o({quoter:d,tokenIn:n,tokenOut:h,amountIn:m.best.amountOut},i);if(!b.best){let I=u.find(C=>C&&C!==String(h).toLowerCase()&&C!==String(n).toLowerCase());if(I){let C=await o({quoter:d,tokenIn:I,tokenOut:n,amountIn:a},i),E=C.best?await o({quoter:d,tokenIn:n,tokenOut:I,amountIn:C.best.amountOut},i):{best:null};if(C.best&&E.best){let k=E.best.amountOut,A=Number(k*10000n/BigInt(a)),L=w.PASS,g="round trip vs dollar book completes; missing WETH sell pool is not a honeypot";return A<5e3?(L=w.FAIL,g=`dollar-book round trip returns only ${(A/100).toFixed(2)}%`):A<9e3&&(L=w.CAUTION,g=`dollar-book round trip returns ${(A/100).toFixed(2)}%`),{chainId:t,venue:"uniswap-v3",token:n,base:I,quoteAsset:I,verdict:L,reason:g,amountIn:String(a),bought:C.best.amountOut.toString(),returned:k.toString(),retentionBps:A,buyFee:C.best.fee,sellFee:E.best.fee,evidence:v.LIVE,note:"Sell vs wrapped native failed; dollar book succeeded. Not labelled honeypot."}}}return{chainId:t,token:n,verdict:w.FAIL,evidence:v.LIVE,leg:"sell",bought:m.best.amountOut.toString(),reason:"SELL LEG FAILED against wrapped native and the dollar book. This is the honeypot signature: do not trade."}}let y=b.best.amountOut,S=Number(y*10000n/BigInt(a)),x=w.PASS,T="round trip completes with expected fee/impact loss";return S<5e3?(x=w.FAIL,T=`round trip returns only ${(S/100).toFixed(2)}% -- punitive tax or no real liquidity`):S<9e3&&(x=w.CAUTION,T=`round trip returns ${(S/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,venue:"uniswap-v3",token:n,base:h,verdict:x,reason:T,amountIn:String(a),bought:m.best.amountOut.toString(),returned:y.toString(),retentionBps:S,buyFee:m.best.fee,sellFee:b.best.fee,evidence:v.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:n,tokenOut:a,amountIn:c,recipient:i,slippageBps:d=50,fee:u},l={}){let p=_e(l.scanner,"router");if(!p)throw new Error(`chain ${t} has no verified V3 router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!vt.test(i||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let f=await this.quote({tokenIn:n,tokenOut:a,amountIn:c},l);if(f.evidence!==v.LIVE)throw new Error(`cannot prepare without a live quote (${f.evidence}: ${f.reason??"no reason given"})`);let h=u??f.fee,m=hn(f.amountOut,d);if(m<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let b=!!(l.useNative||f.useNative)&&r&&String(n).toLowerCase()===String(r).toLowerCase(),y=`0x${yt.exactInputSingle}`+ee(n)+ee(a)+W(h)+ee(i)+W(c)+W(m)+W(0);return{unsigned:!0,signedBy:"user-wallet",chainId:t,venue:"uniswap-v3",tx:{to:p,data:y,value:b?String(c):"0x0"},guard:{quotedOut:f.amountOut,minOut:m.toString(),slippageBps:d,maxSlippageBps:Oe,fee:h},requires:b?[]:[{step:"approve",token:n,spender:p,amount:String(c)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var ue={decimals:"0x313ce567",symbol:"0x95d89b41",name:"0x06fdde03",totalSupply:"0x18160ddd",owner:"0x8da5cb5b"};function At(e){if(!e||e==="0x")return null;try{return BigInt(e)}catch{return null}}function St(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length>=128){let s=Number(BigInt(`0x${t.slice(64,128)}`));if(s>0&&s<=256&&t.length>=128+s*2){let o=t.slice(128,128+s*2),n=Buffer.from(o,"hex").toString("utf8").replace(/\0+$/,"");if(n)return n}}return Buffer.from(t.slice(0,64),"hex").toString("utf8").replace(/\0+$/,"")||null}function mn(e){let{chainId:t}=e;async function r(s,o,n){return q(t,"eth_call",[{to:s,data:o},"latest"],n)}return{async blockNumber(s={}){let o=await ut(t,s);return{chainId:t,blockNumber:o?.blockNumber??o,evidence:v.LIVE}},async nativeBalance(s,o={}){let n=await lt(t,s,o);return{chainId:t,address:s,wei:n?.wei??n?.balance??null,symbol:e.nativeCurrency?.symbol??null,decimals:e.nativeCurrency?.decimals??18,evidence:v.LIVE}},async tokenBalance({token:s,owner:o},n={}){let a=await dt({chainId:t,token:s,owner:o},n);return{chainId:t,token:s,owner:o,raw:a?.balance??a,evidence:v.LIVE}},async resolveToken(s,o={}){if(!/^0x[0-9a-fA-F]{40}$/.test(s||""))return{chainId:t,token:s,evidence:v.UNKNOWN,error:"resolveToken needs a 20-byte address; symbol lookup is a market-data concern"};let[n,a,c,i]=await Promise.all([r(s,ue.decimals,o).catch(()=>null),r(s,ue.symbol,o).catch(()=>null),r(s,ue.name,o).catch(()=>null),r(s,ue.totalSupply,o).catch(()=>null)]),d=At(n?.result??n),u=d!==null||a?.result||c?.result,l={chainId:t,address:s,decimals:d===null?null:Number(d),symbol:St(a?.result??a),name:St(c?.result??c),totalSupply:(At(i?.result??i)??null)?.toString()??null,evidence:u?v.LIVE:v.UNKNOWN};return u||(l.warning="no ERC-20 metadata returned -- may not be a token contract"),l},async resolvePools(s,o={}){let n=e.dexscreenerSlug;if(!n)return{chainId:t,token:s,pools:[],evidence:v.UNAVAILABLE,reason:"no dexscreenerSlug configured for this chain; pool discovery is unavailable rather than guessed"};let a=await Ce(s,o).catch(()=>null),i=(a?.pairs||a?.data?.pairs||[]).filter(u=>String(u.chainId).toLowerCase()===String(n).toLowerCase()).map(u=>({pair:u.pairAddress,dex:u.dexId,base:u.baseToken?.address,quote:u.quoteToken?.address,liquidityUsd:u.liquidity?.usd??null,priceUsd:u.priceUsd??null,volume24hUsd:u.volume?.h24??null,createdAt:u.pairCreatedAt??null})).sort((u,l)=>(l.liquidityUsd??0)-(u.liquidityUsd??0)),d=ae(s,i,{stables:e.stableQuoteAssets||[],wrappedNative:e.wrappedNative});return{chainId:t,token:s,pools:d,topPool:d[0]||null,quoteAsset:ft(s,d),evidence:d.length?v.LIVE:v.UNKNOWN}},async scanBlocks({fromBlock:s,toBlock:o,address:n,topics:a,chunkSize:c=2e3}={},i={}){if(!Number.isInteger(s)||!Number.isInteger(o))throw new Error("scanBlocks requires integer fromBlock and toBlock");if(o<s)throw new Error("toBlock must be >= fromBlock");let d=[],u=[];for(let p=s;p<=o;p+=c){let f=Math.min(p+c-1,o);u.push([p,f])}let l=await rt(u,4,async([p,f])=>{let h={fromBlock:`0x${p.toString(16)}`,toBlock:`0x${f.toString(16)}`};n&&(h.address=n),a&&(h.topics=a);let m=await q(t,"eth_getLogs",[h],i).catch(b=>({error:String(b?.message||b)}));return{start:p,end:f,res:m}});for(let{start:p,end:f,res:h}of l){if(h?.error)return{chainId:t,fromBlock:s,toBlock:o,logs:d,complete:!1,failedAt:[p,f],error:h.error,evidence:v.UNKNOWN};for(let m of h?.result??h??[])d.push(m)}return{chainId:t,fromBlock:s,toBlock:o,logs:d,complete:!0,chunks:u.length,evidence:v.LIVE}},async scoreRisk(s,o={}){let n=[],a=w.PASS,c=u=>{let l={[w.PASS]:0,[w.CAUTION]:1,[w.UNKNOWN]:2,[w.FAIL]:3};l[u]>l[a]&&(a=u)},[i,d]=await Promise.all([this.resolveToken(s,o),this.resolvePools(s,o)]);if(i.evidence!==v.LIVE?(n.push({check:"erc20-metadata",result:w.UNKNOWN,detail:i.warning}),c(w.UNKNOWN)):n.push({check:"erc20-metadata",result:w.PASS,detail:`${i.symbol} / ${i.decimals}d`}),d.evidence===v.UNAVAILABLE)n.push({check:"liquidity",result:w.UNKNOWN,detail:d.reason}),c(w.UNKNOWN);else if(!d.pools.length)n.push({check:"liquidity",result:w.FAIL,detail:"no pool with liquidity found"}),c(w.FAIL);else{let u=d.pools[0],l=u.liquidityUsd??0;l<5e3?(n.push({check:"liquidity",result:w.CAUTION,detail:`top pool only $${l}`}),c(w.CAUTION)):n.push({check:"liquidity",result:w.PASS,detail:`$${l} on ${u.dex}`}),u.createdAt&&Date.now()-u.createdAt<24*3600*1e3&&(n.push({check:"age",result:w.CAUTION,detail:"pool under 24h old"}),c(w.CAUTION))}if(typeof this.sellSimulation=="function"){let u=await this.sellSimulation({token:s,amountIn:(10n**16n).toString()},o).catch(l=>({verdict:w.UNKNOWN,reason:String(l?.message||l)}));n.push({check:"sellability",result:u.verdict,detail:u.retentionBps!=null?`round trip returns ${(u.retentionBps/100).toFixed(2)}% -- ${u.reason}`:u.reason}),c(u.verdict)}else n.push({check:"sellability",result:w.UNKNOWN,detail:"no verified router on this chain, so a round-trip sell simulation cannot run. Treat as unproven -- a buy path is not an exit path."}),c(w.UNKNOWN);return{chainId:t,token:s,verdict:a,checks:n,note:"Structural checks only. UNKNOWN is not PASS. A token is not tradeable until a sell simulation succeeds."}}}}function xt(e){let r={...mn(e)},s=new Set((e.venues||[]).map(n=>n.kind));e.venueKind==="uniswap-v3"&&s.has("quoter")&&s.has("router")?Object.assign(r,Et({chainId:e.chainId,wrappedNative:e.wrappedNative,stableQuoteAssets:e.stableQuoteAssets||[],resolveQuoteAsset:async(n,a)=>(await r.resolvePools(n,a)).quoteAsset||null})):e.venueKind==="uniswap-v2"&&s.has("router")&&Object.assign(r,wt({chainId:e.chainId,wrappedNative:e.wrappedNative}));let o={};for(let[n,a]of Object.entries(r))o[n]=a.bind(r);return{key:e.key,chainId:e.chainId,name:e.name,rpcEnv:e.rpcEnv,nativeCurrency:e.nativeCurrency,explorer:e.explorer,venues:e.venues||[],capabilities:o}}var bn=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);function Ct(){return bn.map(e=>bt(xt(e)))}import{createHash as vn,createHmac as It,timingSafeEqual as En}from"node:crypto";import{readFileSync as gn}from"node:fs";import{homedir as wn}from"node:os";import{join as le}from"node:path";function yn(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let r=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return r?[r]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),t=wn();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let r=(process.env.ORACLE_CONFIG_DIR||le(t,".config","oracle")).trim();return[e,le(r,"exec.env")].filter(Boolean)}return[e,le(t,".config","oracle","exec.env"),le(t,".config","mad-desk","exec.env")].filter(Boolean)}function kt(e,t,r){let s=e??process.env[t]??process.env[r];if(!String(s||"").trim())for(let o of yn())try{let n=gn(o,"utf8"),a=n.match(new RegExp(`^${t}=(.*)$`,"m"))||n.match(new RegExp(`^${r}=(.*)$`,"m"));if(a&&(s=a[1].trim(),s))break}catch{}if(!String(s||"").trim())throw new Error(`${t} required for attestation. Set it in the environment, or place ${t}=<value> in ~/.config/oracle/exec.env`);return s}var de=100,Tt=2e4;function pe(e){return Array.isArray(e)?`[${e.map(pe).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${pe(e[t])}`).join(",")}}`:JSON.stringify(e??null)}function _t(e,{required:t=!1}={}){try{return kt(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(r){if(t)throw r;return null}}function Re(e){let{signature:t,...r}=e;return r}function Ot(e,{secret:t}={}){let r=_t(t);return r?{...e,signature:It("sha256",r).update(pe(Re(e))).digest("hex")}:e}function An(e){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<10||t.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return vn("sha256").update(Buffer.from(t.slice(2),"hex")).digest("hex")}function Nt(e,{chainId:t,venue:r,data:s,secret:o}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");if(Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(String(e.venue).toLowerCase()!==String(r||"").toLowerCase())throw new Error("auto-slippage guard venue mismatch");let n=_t(o);if(n){let f=It("sha256",n).update(pe(Re(e))).digest("hex");if(!Sn(e.signature,f))throw new Error("auto-slippage guard signature mismatch \u2014 refusing to bind a guard this Oracle did not issue")}let a=Number(e.selectedBps),c=Number(e.capBps);if(!Number.isInteger(a)||a<0||a>de||!Number.isInteger(c)||c<0||c>de||a>c)throw new Error("auto-slippage guard bounds are invalid");let i=BigInt(e.quoteAmountOut??0),d=BigInt(e.minAmountOut??0);if(i<=0n||d<=0n)throw new Error("auto-slippage guard amounts must be positive");let u=i*BigInt(1e4-a),l=u/10000n;if(u%10000n!==0n&&(l+=1n),d<l)throw new Error("auto-slippage guard is under-protected relative to its quote");let p=kn(s);if(p!=null&&p!==d)throw new Error(`auto-slippage: calldata encodes floor ${p}, not the guard floor ${d} \u2014 refusing to bind`);return Ot({...Re(e),calldataHash:An(s)},{secret:o})}function Sn(e,t){let r=Buffer.from(String(e??""),"utf8"),s=Buffer.from(String(t??""),"utf8");return r.length!==s.length||r.length===0?!1:En(r,s)}function Ne(e,t=0){let r=Number(e);return Number.isFinite(r)?r:t}function xn(e){let t=e==null?de:Number(e);if(!Number.isInteger(t)||t<0)throw new Error("auto-slippage cap must be a non-negative integer bps value");return Math.min(t,de)}function Cn({liquidityUsd:e,priceChange5m:t=0,quoteAgeMs:r=0,crossChain:s=!1,requestedCapBps:o}={}){let n=Ne(e,0),a=n>0?n>=25e4?5:n>=1e5?10:n>=5e4?20:n>=1e4?40:70:s?30:10,c=Math.min(60,Math.abs(Ne(t,0))*2),i=Math.min(40,Math.floor(Math.max(0,Ne(r,0))/5e3)*5),d=Math.max(25,Math.ceil(20+a+c+i)),u=xn(o);return{mode:"auto",requiredBps:d,selectedBps:Math.min(d,u),capBps:u,executable:d<=u}}function Rt({chainId:e,venue:t,quoteAmountOut:r,liquidityUsd:s,priceChange5m:o=0,quoteAgeMs:n=0,crossChain:a=!1,requestedCapBps:c,quotedAtMs:i=Date.now(),ttlMs:d=Tt,secret:u}={}){let l=BigInt(r??0);if(l<=0n)throw new Error("auto-slippage guard requires positive quoteAmountOut");let p=Cn({liquidityUsd:s,priceChange5m:o,quoteAgeMs:n,crossChain:a,requestedCapBps:c});if(!p.executable)throw new Error(`auto-slippage requires ${p.requiredBps} bps above hard/requested cap ${p.capBps}; route blocked`);let f=Number(i);if(!Number.isFinite(f))throw new Error("auto-slippage: quotedAtMs must be a finite number");let h=Math.min(3e4,Math.max(1e3,Number(d)||Tt)),m=l*BigInt(1e4-p.selectedBps),b=m/10000n;if(m%10000n!==0n&&(b+=1n),b>l&&(b=l),l>0n&&b<=0n)throw new Error(`auto-slippage: quote ${l} is too small to express a ${p.selectedBps} bps floor without rounding to zero`);let y=Number((l-b)*10000n/(l===0n?1n:l));if(y>p.capBps)throw new Error(`auto-slippage: realised floor implies ${y} bps, above cap ${p.capBps} \u2014 refusing to issue a guard weaker than advertised`);return Ot({mode:"auto",chainId:Number(e),venue:String(t||"unknown"),quoteAmountOut:l.toString(),minAmountOut:b.toString(),requiredBps:p.requiredBps,selectedBps:p.selectedBps,capBps:p.capBps,quotedAtMs:f,expiresAtMs:f+h},{secret:u})}function kn(e){let t=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(t)||t.length<10||t.length%2!==0)return null;let r=t.slice(0,10).toLowerCase(),s=[];for(let n=10;n+64<=t.length;n+=64)s.push(t.slice(n,n+64));let o=n=>s[n]==null?null:BigInt("0x"+s[n]);switch(r){case"0x414bf389":return o(6);case"0x04e45aaf":return o(5);case"0xc04b8d59":{let n=o(0);if(n==null)return null;let a=Number(n)/32;return!Number.isInteger(a)||a<0?null:o(a+4)}case"0xb858183f":{let n=o(0);if(n==null)return null;let a=Number(n)/32;return!Number.isInteger(a)||a<0?null:o(a+3)}case"0xa026383e":return o(6);case"0x38ed1739":case"0x5c11d795":return o(1);case"0x7ff36ab5":case"0xb6f9de95":return o(0);case"0x18cbafe5":case"0x791ac947":return o(1);default:return null}}var Tn=Object.freeze({"8da5cb5b":{name:"owner()",weight:"low",note:"contract has an owner"},f2fde38b:{name:"transferOwnership(address)",weight:"low",note:"ownership transferable"},"40c10f19":{name:"mint(address,uint256)",weight:"high",note:"owner can mint new supply"},a0712d68:{name:"mint(uint256)",weight:"high",note:"owner can mint new supply"},f9f92be4:{name:"blacklist(address)",weight:"high",note:"addresses can be blocked from selling"},e4997dc5:{name:"removeBlackList(address)",weight:"high",note:"blacklist machinery present"},"8456cb59":{name:"pause()",weight:"high",note:"transfers can be frozen"},"3f4ba83a":{name:"unpause()",weight:"high",note:"pausable transfers"},c0246668:{name:"setFee/excludeFromFee",weight:"high",note:"transfer fees can be changed"},"3659cfe6":{name:"upgradeTo(address)",weight:"high",note:"logic can be replaced entirely"},"4f1ef286":{name:"upgradeToAndCall(address,bytes)",weight:"high",note:"logic can be replaced entirely"}}),In=Object.freeze([{label:"eip1967",slot:"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc"},{label:"zeppelinos",slot:"0x7050c9e0f4ca769c69bd3a8ef740bc37934f8e2c036e5a723fd8ee048ed3f8c3"},{label:"eip1822",slot:"0xc5f16f0fcc639fa48a6947836d9850f504798523bf8c9a3a87d5876cf622bcf7"}]),_n=`0x${"0".repeat(64)}`;function On(e){return!e||e==="0x"||e===_n}async function Lt(e={},t={}){let r=t.rpcCall||q,s=String(e.address||"").trim().toLowerCase(),o=Number(e.chainId);if(!/^0x[a-f0-9]{40}$/.test(s))return{status:"error",error:"address must be a 0x-prefixed EVM address",risk:"unknown-risk",findings:[],notes:[]};if(!Number.isInteger(o))return{status:"error",error:"chainId is required",risk:"unknown-risk",findings:[],notes:[]};let n;try{n=await r(o,"eth_getCode",[s,"latest"],t)}catch(m){return{address:s,chainId:o,status:"unavailable",error:m?.message||"eth_getCode failed",risk:"unknown-risk",findings:[],isProxy:!1,codeSize:0,notes:["could not read contract code; treat as unverified"]}}if(!n||n==="0x")return{address:s,chainId:o,status:"ok",risk:"high",findings:[{selector:"-",name:"no-code",weight:"high",note:"no contract deployed at this address"}],isProxy:!1,codeSize:0,notes:["nothing is deployed here \u2014 an approval or transfer to this address is unrecoverable"]};let a=[],c=[],i=n.slice(2).toLowerCase();for(let[m,b]of Object.entries(Tn))i.includes(m)&&c.push({selector:`0x${m}`,...b});let d=!1,u=null,l=null,p=await Promise.all(In.map(async({label:m,slot:b})=>{try{let y=await r(o,"eth_getStorageAt",[s,b,"latest"],t);return{label:m,word:y,error:null}}catch{return{label:m,word:null,error:`proxy slot (${m}) unreadable; proxy status uncertain`}}}));for(let m of p)m.error&&a.push(m.error),!d&&m.word&&!On(m.word)&&(d=!0,u=m.label,l=`0x${String(m.word).slice(-40)}`);d&&(c.push({selector:u,name:"proxy",weight:"high",note:"implementation is upgradeable \u2014 current behaviour is not a guarantee"}),a.push(`bytecode scan covers the proxy (${u}), not the implementation ${l} it delegates to`));let h=c.filter(m=>m.weight==="high").length>0?"high":c.length>0?"elevated":"unknown-risk";return h==="unknown-risk"&&a.push("no owner-power selectors found; this is weak evidence, not a safety guarantee"),{address:s,chainId:o,status:"ok",risk:h,findings:c,isProxy:d,proxyStandard:u,implementation:l,codeSize:Math.floor(i.length/2),notes:a}}var Nn=/^0x[0-9a-fA-F]{40}$/,Rn=4663;function fe(e,t){let r=String(e||"").trim();if(!Nn.test(r))throw new Error(`evm-token-sniper: ${t} must be a 0x EVM address`);return r}function Le(e,t){let r=String(e??"").trim();if(!/^\d+$/.test(r)||BigInt(r)<=0n)throw new Error(`evm-token-sniper: ${t} must be a positive raw integer amount`);return r}function te(e,t){return e==null||e===""?null:Le(e,t)}function Ln({chainId:e,tokenAddress:t,tokenIn:r,amountIn:s,recipient:o,quote:n,topPool:a,unsignedTx:c,args:i,opts:d}){let u=c?.tx;if(!u||typeof u!="object")throw new Error("local-signer envelope requires unsigned tx object");let l=fe(u.to,"prepared destination"),p=String(u.data||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(p))throw new Error("local-signer envelope requires hex calldata");let f=Le(u.value??s,"prepared native value");if(BigInt(f)!==BigInt(s))throw new Error("local-signer envelope requires native value equal amountIn");let h=te(u.gasLimit??i.gasLimit,"gasLimit"),m=te(u.maxFeePerGas??i.maxFeePerGas,"maxFeePerGas");if(!h||!m)throw new Error("local-signer envelope requires explicit gasLimit and maxFeePerGas caps");let b=Number(d.nowMs??Date.now()),y=Math.min(6e4,Math.max(1e3,Number(i.ttlMs??i.expiresInMs??3e4)||3e4)),S=Rt({chainId:e,venue:"uniswap-v3",quoteAmountOut:n?.amountOut,liquidityUsd:a?.liquidityUsd,requestedCapBps:i.slippageBps??50,quotedAtMs:b,ttlMs:y,secret:d.routeAttestationSecret}),x=Nt(S,{chainId:e,venue:"uniswap-v3",data:p,secret:d.routeAttestationSecret}),T={chainId:e,from:o,to:l,data:p,value:f,gasLimit:h,maxFeePerGas:m,slippageBps:x.selectedBps,expiresAtMs:b+y},I=te(u.maxPriorityFeePerGas??i.maxPriorityFeePerGas,"maxPriorityFeePerGas");return I&&(T.maxPriorityFeePerGas=I),i.nonce!==void 0&&(T.nonce=Number(i.nonce)),(i.txType!==void 0||I)&&(T.type=Number(i.txType??2)),i.l1FeeWei!==void 0&&(T.l1FeeWei=te(i.l1FeeWei,"l1FeeWei")??"0"),i.operatorFeeWei!==void 0&&(T.operatorFeeWei=te(i.operatorFeeWei,"operatorFeeWei")??"0"),{version:1,surface:"evm-swap",action:"swap",provider:"uniswap-v3",owner:o,destination:l,tradeId:i.tradeId||`evm-token-sniper-${e}-${t.toLowerCase()}`,slippageBps:x.selectedBps,expiresAtMs:b+y,fee:{oracleFeeBps:5},autoSlippage:x,artifact:{chainId:e,owner:o,transactions:[T]},meta:{source:"evm-token-sniper",tokenIn:r,tokenOut:t}}}function Pn(e,t){if(t){if(Number(t.chainId)!==e)throw new Error(`evm-token-sniper: supplied scanner chain ${t.chainId} does not match ${e}`);return t}Ct();let r=gt(e);if(!r)throw new Error(`evm-token-sniper: unsupported EVM chainId ${e}`);return r}function Un({token:e,pools:t,structuralRisk:r,scannerRisk:s,sellability:o,quote:n,args:a,scanner:c}){let i=[];return e?.evidence!==v.LIVE&&i.push("token identity is not live-verified"),(!Array.isArray(t?.pools)||t.pools.length===0)&&i.push("no liquid pool was resolved"),r?.status!=="ok"&&i.push("structural contract risk is unavailable"),r?.risk==="high"&&i.push("structural contract risk is high"),s?.verdict!==w.PASS&&i.push(`scanner risk verdict is ${s?.verdict||"UNKNOWN"}`),c.supports?.("sellSimulation")?o?.verdict!==w.PASS&&i.push(`sellability verdict is ${o?.verdict||"UNKNOWN"}`):i.push("sell simulation is unavailable on this chain"),c.supports?.("quote")?n?.evidence!==v.LIVE&&i.push("no live quote was returned"):i.push("live quoting is unavailable on this chain"),c.supports?.("prepareUnsignedTx")||i.push("unsigned transaction preparation is unavailable on this chain"),a.tokenIn||i.push("tokenIn is required to prepare"),a.amountIn||i.push("amountIn is required to prepare"),a.recipient||i.push("recipient is required to prepare"),i}async function Pt(e={},t={}){let r=Number(e.chainId??Rn);if(!Number.isInteger(r)||r<=0)throw new Error("evm-token-sniper: chainId must be a positive integer");let s=fe(e.tokenAddress||e.address||e.token,"tokenAddress"),o=e.tokenIn?fe(e.tokenIn,"tokenIn"):null,n=e.recipient?fe(e.recipient,"recipient"):null,a=e.amountIn==null?null:Le(e.amountIn,"amountIn"),c=Pn(r,t.scanner),i=t.scanContractRisk||Lt,[d,u,l]=await Promise.all([c.resolveToken(s),c.resolvePools(s),i({address:s,chainId:r},t.contractRiskOpts||t)]),p=await c.scoreRisk(s),f=null;c.supports?.("sellSimulation")&&a?f=await c.sellSimulation({token:s,amountIn:a,base:o||void 0}):c.supports?.("sellSimulation")&&(f=await c.sellSimulation({token:s,amountIn:"10000000000000000"}));let h=null;c.supports?.("quote")&&o&&a&&(h=await c.quote({tokenIn:o,tokenOut:s,amountIn:a}));let m={...e,tokenIn:o,amountIn:a,recipient:n},b=Un({token:d,pools:u,structuralRisk:l,scannerRisk:p,sellability:f,quote:h,args:m,scanner:c}),y=null,S=null,x=null;if(e.prepare===!0&&b.length===0){y=await c.prepareUnsignedTx({tokenIn:o,tokenOut:s,amountIn:a,recipient:n,slippageBps:e.slippageBps??50,fee:h?.fee});try{S=Ln({chainId:r,tokenAddress:s,tokenIn:o,amountIn:a,recipient:n,quote:h,topPool:u?.pools?.[0]||null,unsignedTx:y,args:e,opts:t})}catch(T){x=String(T?.message||T).slice(0,200)}}return{provider:"evm-token-sniper",execution:"armed-local",armed:!!S,signing:"local-signer",broadcasting:"local-signer",chainId:r,chain:{key:c.key,name:c.name,nativeCurrency:c.nativeCurrency},token:d,pools:u,topPool:u?.pools?.[0]||null,structuralRisk:l,scannerRisk:p,sellability:f,quote:h,blockedReasons:b,prepared:!!y,unsignedTx:y,localSignerEnvelope:S,localSignerBlockedReason:x,signed:S?"pending-local-signer":!1,broadcast:S?"pending-local-signer":!1}}import{homedir as Pe}from"node:os";import{join as Ue}from"node:path";var Ut=process.env.ORACLE_PUBLIC_DESKTOP==="1",qn=Ut?process.env.ORACLE_CONFIG_DIR||Ue(Pe(),".config","oracle"):Ue(Pe(),".config","oracle"),ns=Ut?qn:Ue(Pe(),".config","mad-desk");var Bn=4663,$n="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",Fn="Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB";function qe(e=process.env){return String((e||process.env).ORACLE_SNIPE_EXECUTE||"").trim()==="1"}function qt(e){return String(e||"").trim().replace(/^@/,"")}async function Dn({handle:e,limit:t=5,xurlFn:r=We}={},s={}){let o=qt(e);if(!o)throw new Error("twitter-ca-watch: handle required");let n=await r("xurl",{command:"search",query:`from:${o}`,limit:Math.min(20,Math.max(1,Number(t)||5))},s);return n?.ok?{ok:!0,tweets:Me(n.stdout),raw:n}:{ok:!1,error:n?.error||"xurl search failed",tweets:[]}}async function Mn(e,{chainId:t,amountIn:r,tokenIn:s,recipient:o,prepare:n},a){let c=await Pt({chainId:t,tokenAddress:e,amountIn:r,tokenIn:s,recipient:o,prepare:n===!0},a),i=c.topPool||c.pools?.pools?.[0]||null;return{chainFamily:"evm",chainId:t,address:e,topPool:i,quoteAsset:c.pools?.quoteAsset||null,sellability:c.sellability||null,blockedReasons:c.blockedReasons||[],prepared:!!c.prepared,unsignedTx:c.unsignedTx||null,localSignerEnvelope:c.localSignerEnvelope||null,execution:!1,broadcast:!1}}async function Hn(e,t){let r=await ht(e,{chainSlug:"solana",stables:[$n,Fn]},t);return{chainFamily:"solana",chainId:"solana",address:e,topPool:r.topPool,pools:r.pools,prepared:!1,execution:!1,broadcast:!1,note:"Solana CA ranked on USD book. Prepare stays Jupiter/local-signer; this tick does not broadcast."}}async function jn(e,t={},r={}){let s=Number(t.chainId??Bn),o=[];for(let n of e.evm||[])o.push(await Mn(n,{...t,chainId:s},r));for(let n of e.solana||[])o.push(await Hn(n,r));return o}async function Bt(e={},t={}){let r=qt(e.handle),s=e.seen instanceof Set?e.seen:new Set(e.seen||[]),o=await Dn({handle:r,limit:e.limit,xurlFn:t.xurlFn},t);if(!o.ok)return{ok:!1,handle:r,error:o.error,hits:[],seen:[...s]};let n=[];for(let c of o.tweets){let i=c.id||`${r}:${c.text.slice(0,80)}`;if(s.has(i))continue;let d=De(c.text,{extras:c.urls||[]});if(!d.all.length){s.add(i);continue}let l=await(t.evaluateFn||jn)(d,e,t);s.add(i),n.push({tweetId:c.id||null,handle:r,text:c.text,contracts:d,evaluations:l})}let a=e.automated!==!1;return{ok:!0,handle:r,source:"twitter-ca-watch",automated:a,card:!1,notify:!1,telegram:!1,execution:!1,broadcast:!1,snipeExecuteEnabled:qe(t.env||process.env),hits:n,seen:[...s]}}var $t=`oracle snipe twitter <handle> [--chain 4663] [--json]
+  - `)}`);let n=e.capabilities||{},o=le.filter(c=>typeof n[c]=="function"),a={key:e.key,chainId:e.chainId,name:e.name,rpcEnv:[...e.rpcEnv],nativeCurrency:e.nativeCurrency?{...e.nativeCurrency}:null,wrappedNative:e.wrappedNative||null,explorer:e.explorer||null,venues:(e.venues||[]).map(c=>({...c})),warnings:s,capabilities(){return{chainId:e.chainId,key:e.key,supported:[...o],unsupported:le.filter(c=>!o.includes(c))}},supports(c){return o.includes(c)}};for(let c of le)o.includes(c)?a[c]=async(...i)=>n[c](...i,{scanner:a}):a[c]=async()=>{throw new Error(`${e.key} (chain ${e.chainId}) does not implement "${c}". Supported: ${o.join(", ")||"none"}. An unimplemented capability is absent, not assumed -- implement it or treat this chain as fail-closed for that operation.`)};return Object.freeze(a)}var wt=new Map;function yt(e){let t=gn(e);return wt.set(t.chainId,t),t}function vt(e){return wt.get(Number(e))||null}var Ie={getAmountsOut:"d06ca61f",swapExactTokensForTokens:"38ed1739",swapExactETHForTokens:"7ff36ab5"},B=e=>BigInt(e).toString(16).padStart(64,"0"),J=e=>e.slice(2).toLowerCase().padStart(64,"0");function wn(e,t){return`0x${Ie.getAmountsOut}`+B(e)+B(64)+B(t.length)+t.map(J).join("")}function yn(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length<128)return null;let r=Number(BigInt(`0x${t.slice(64,128)}`));if(!Number.isFinite(r)||r<1||r>16)return null;let s=[];for(let n=0;n<r;n++){let o=128+n*64;if(t.length<o+64)return null;s.push(BigInt(`0x${t.slice(o,o+64)}`))}return s}function Te(e,t="router"){return(e?.venues||[]).find(s=>s.kind===t)?.address??null}var _e=100;function vn(e,t){let r=Number(t);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>_e)throw new Error(`slippageBps ${r} exceeds the ${_e} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(r))/10000n}function Et(e){let{chainId:t,wrappedNative:r}=e;async function s(n,o,a,c){let i=await q(t,"eth_call",[{to:n,data:wn(o,a)},"latest"],c);return yn(i?.result??i)}return{async quote({tokenIn:n,tokenOut:o,amountIn:a,path:c},i={}){let d=Te(i.scanner);if(!d)return{chainId:t,evidence:v.UNAVAILABLE,reason:"no verified router configured for this chain; quoting stays fail-closed rather than guessing a venue address"};let u=c||[n,o];if(u.some(p=>!/^0x[0-9a-fA-F]{40}$/.test(p||"")))throw new Error("quote requires valid 20-byte addresses");let l=await s(d,a,u,i);return l?{chainId:t,router:d,path:u,amountIn:String(a),amountOut:l[l.length-1].toString(),hops:u.length-1,evidence:v.LIVE,note:"exact-input quote at current reserves; not a guaranteed fill"}:{chainId:t,router:d,path:u,evidence:v.UNKNOWN,reason:"router returned no amounts -- no pool for this path, or the call reverted"}},async sellSimulation({token:n,amountIn:o,base:a},c={}){let i=Te(c.scanner),d=a||r;if(d&&String(n).toLowerCase()===String(d).toLowerCase())return{chainId:t,token:n,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!i||!d)return{chainId:t,token:n,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:i?"no wrappedNative configured for this chain, so no base asset to round-trip against":"no verified router configured for this chain"};let u=await s(i,o,[d,n],c);if(!u)return{chainId:t,token:n,verdict:w.FAIL,evidence:v.LIVE,leg:"buy",reason:"buy leg returned no amounts -- no route in"};let l=u[u.length-1];if(l===0n)return{chainId:t,token:n,verdict:w.FAIL,evidence:v.LIVE,leg:"buy",reason:"buy leg quotes zero output"};let p=await s(i,l,[n,d],c);if(!p)return{chainId:t,token:n,verdict:w.FAIL,evidence:v.LIVE,leg:"sell",bought:l.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let f=p[p.length-1],h=Number(f*10000n/BigInt(o)),m=w.PASS,b="round trip completes with expected fee/impact loss";return h<5e3?(m=w.FAIL,b=`round trip returns only ${(h/100).toFixed(2)}% -- punitive tax or no real liquidity`):h<9e3&&(m=w.CAUTION,b=`round trip returns ${(h/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,token:n,base:d,router:i,verdict:m,reason:b,amountIn:String(o),bought:l.toString(),returned:f.toString(),retentionBps:h,evidence:v.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:n,tokenOut:o,amountIn:a,recipient:c,slippageBps:i=50,deadlineSeconds:d=900,path:u},l={}){let p=l.scanner,f=Te(p);if(!f)throw new Error(`chain ${t} has no verified router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!/^0x[0-9a-fA-F]{40}$/.test(c||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let h=u||[n,o],m=await this.quote({tokenIn:n,tokenOut:o,amountIn:a,path:h},l);if(m.evidence!==v.LIVE)throw new Error(`cannot prepare without a live quote (${m.evidence}: ${m.reason??"no reason given"})`);let b=vn(m.amountOut,i);if(b<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let y=BigInt(Math.floor(Date.now()/1e3)+Number(d)),x=r&&h[0].toLowerCase()===r.toLowerCase()&&l.useNative,C=x?`0x${Ie.swapExactETHForTokens}`+B(b)+B(128)+J(c)+B(y)+B(h.length)+h.map(J).join(""):`0x${Ie.swapExactTokensForTokens}`+B(a)+B(b)+B(160)+J(c)+B(y)+B(h.length)+h.map(J).join("");return{unsigned:!0,signedBy:"user-wallet",chainId:t,tx:{to:f,data:C,value:x?`0x${BigInt(a).toString(16)}`:"0x0"},guard:{quotedOut:m.amountOut,minOut:b.toString(),slippageBps:i,maxSlippageBps:_e,deadline:y.toString()},requires:x?[]:[{step:"approve",token:h[0],spender:f,amount:String(a)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var En=[100,500,3e3,1e4],St={quoteExactInputSingle:"c6a5026a",exactInputSingle:"04e45aaf"},W=e=>BigInt(e).toString(16).padStart(64,"0"),ee=e=>e.slice(2).toLowerCase().padStart(64,"0"),At=/^0x[0-9a-fA-F]{40}$/,Ne=100;function Sn(e,t){let r=Number(t);if(!Number.isFinite(r)||r<0)throw new Error("slippageBps must be a non-negative number");if(r>Ne)throw new Error(`slippageBps ${r} exceeds the ${Ne} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(r))/10000n}function Oe(e,t){return(e?.venues||[]).find(r=>r.kind===t)?.address??null}function xt(e){let{chainId:t,wrappedNative:r}=e;async function s({quoter:o,tokenIn:a,tokenOut:c,amountIn:i,fee:d},u){let l=`0x${St.quoteExactInputSingle}`+ee(a)+ee(c)+W(i)+W(d)+W(0),p=await q(t,"eth_call",[{to:o,data:l},"latest"],u).catch(()=>null),f=p?.result??p;if(!f||f==="0x"||f.length<66)return null;let h=BigInt(`0x${f.slice(2,66)}`);return h>0n?h:null}async function n({quoter:o,tokenIn:a,tokenOut:c,amountIn:i},d){let u=await Promise.all(En.map(async p=>{let f=await s({quoter:o,tokenIn:a,tokenOut:c,amountIn:i,fee:p},d);return{fee:p,amountOut:f?f.toString():null,out:f}})),l=null;for(let p of u)p.out&&(!l||p.out>l.amountOut)&&(l={fee:p.fee,amountOut:p.out});return{best:l,tried:u.map(({fee:p,amountOut:f})=>({fee:p,amountOut:f}))}}return{async quote({tokenIn:o,tokenOut:a,amountIn:c},i={}){let d=Oe(i.scanner,"quoter");if(!d)return{chainId:t,evidence:v.UNAVAILABLE,reason:"no verified quoter configured for this chain; quoting stays fail-closed rather than guessing a venue address"};for(let p of[o,a])if(!At.test(p||""))throw new Error("quote requires valid 20-byte addresses");let{best:u,tried:l}=await n({quoter:d,tokenIn:o,tokenOut:a,amountIn:c},i);return u?{chainId:t,venue:"uniswap-v3",quoter:d,tokenIn:o,tokenOut:a,amountIn:String(c),amountOut:u.amountOut.toString(),fee:u.fee,useNative:!!r&&String(o).toLowerCase()===String(r).toLowerCase(),triedFeeTiers:l,evidence:v.LIVE,note:"exact-input single-hop quote at current tick; not a guaranteed fill"}:{chainId:t,quoter:d,tokenIn:o,tokenOut:a,triedFeeTiers:l,evidence:v.UNKNOWN,reason:"no fee tier returned a quote -- no V3 pool for this pair, or no liquidity"}},async sellSimulation({token:o,amountIn:a,base:c},i={}){let d=Oe(i.scanner,"quoter"),u=(e.stableQuoteAssets||[]).map(O=>String(O).toLowerCase()),l=null;!c&&typeof e.resolveQuoteAsset=="function"&&(l=await e.resolveQuoteAsset(o,i).catch(()=>null));let p=String(o).toLowerCase(),f=String(r||"").toLowerCase();if(f&&p===f)return{chainId:t,token:o,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};let h=c||l||(u[0]&&p!==u[0]?u[0]:null)||r;if(h&&p===String(h).toLowerCase())return{chainId:t,token:o,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:"token is the base asset for this chain, so there is nothing to round-trip against. Sellability must be judged against a different quote asset."};if(!d||!h)return{chainId:t,token:o,verdict:w.UNKNOWN,evidence:v.UNAVAILABLE,reason:d?"no wrappedNative configured, so there is no base asset to round-trip against":"no verified quoter configured for this chain"};let m=await n({quoter:d,tokenIn:h,tokenOut:o,amountIn:a},i);if(!m.best){let O=u.find(T=>T&&T!==String(h).toLowerCase()&&T!==String(o).toLowerCase());if(O){let T=await n({quoter:d,tokenIn:O,tokenOut:o,amountIn:a},i);if(T.best){let E=await n({quoter:d,tokenIn:o,tokenOut:O,amountIn:T.best.amountOut},i);if(E.best){let I=E.best.amountOut,S=Number(I*10000n/BigInt(a)),L=w.PASS,g="round trip vs dollar book completes with expected fee/impact loss";return S<5e3?(L=w.FAIL,g=`round trip vs dollar book returns only ${(S/100).toFixed(2)}% -- punitive tax or no real liquidity`):S<9e3&&(L=w.CAUTION,g=`round trip vs dollar book returns ${(S/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,venue:"uniswap-v3",token:o,base:O,quoteAsset:O,verdict:L,reason:g,amountIn:String(a),bought:T.best.amountOut.toString(),returned:I.toString(),retentionBps:S,buyFee:T.best.fee,sellFee:E.best.fee,evidence:v.LIVE,note:"Quoted against the dollar book, not wrapped native. A missing WETH pool is not a honeypot."}}}}return{chainId:t,token:o,verdict:w.FAIL,evidence:v.LIVE,leg:"buy",reason:"no V3 pool priced the buy leg on any fee tier against wrapped native or the dollar book"}}let b=await n({quoter:d,tokenIn:o,tokenOut:h,amountIn:m.best.amountOut},i);if(!b.best){let O=u.find(T=>T&&T!==String(h).toLowerCase()&&T!==String(o).toLowerCase());if(O){let T=await n({quoter:d,tokenIn:O,tokenOut:o,amountIn:a},i),E=T.best?await n({quoter:d,tokenIn:o,tokenOut:O,amountIn:T.best.amountOut},i):{best:null};if(T.best&&E.best){let I=E.best.amountOut,S=Number(I*10000n/BigInt(a)),L=w.PASS,g="round trip vs dollar book completes; missing WETH sell pool is not a honeypot";return S<5e3?(L=w.FAIL,g=`dollar-book round trip returns only ${(S/100).toFixed(2)}%`):S<9e3&&(L=w.CAUTION,g=`dollar-book round trip returns ${(S/100).toFixed(2)}%`),{chainId:t,venue:"uniswap-v3",token:o,base:O,quoteAsset:O,verdict:L,reason:g,amountIn:String(a),bought:T.best.amountOut.toString(),returned:I.toString(),retentionBps:S,buyFee:T.best.fee,sellFee:E.best.fee,evidence:v.LIVE,note:"Sell vs wrapped native failed; dollar book succeeded. Not labelled honeypot."}}}return{chainId:t,token:o,verdict:w.FAIL,evidence:v.LIVE,leg:"sell",bought:m.best.amountOut.toString(),reason:"SELL LEG FAILED against wrapped native and the dollar book. This is the honeypot signature: do not trade."}}let y=b.best.amountOut,x=Number(y*10000n/BigInt(a)),C=w.PASS,_="round trip completes with expected fee/impact loss";return x<5e3?(C=w.FAIL,_=`round trip returns only ${(x/100).toFixed(2)}% -- punitive tax or no real liquidity`):x<9e3&&(C=w.CAUTION,_=`round trip returns ${(x/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,venue:"uniswap-v3",token:o,base:h,verdict:C,reason:_,amountIn:String(a),bought:m.best.amountOut.toString(),returned:y.toString(),retentionBps:x,buyFee:m.best.fee,sellFee:b.best.fee,evidence:v.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:o,tokenOut:a,amountIn:c,recipient:i,slippageBps:d=50,fee:u},l={}){let p=Oe(l.scanner,"router");if(!p)throw new Error(`chain ${t} has no verified V3 router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!At.test(i||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let f=await this.quote({tokenIn:o,tokenOut:a,amountIn:c},l);if(f.evidence!==v.LIVE)throw new Error(`cannot prepare without a live quote (${f.evidence}: ${f.reason??"no reason given"})`);let h=u??f.fee,m=Sn(f.amountOut,d);if(m<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let b=!!(l.useNative||f.useNative)&&r&&String(o).toLowerCase()===String(r).toLowerCase(),y=`0x${St.exactInputSingle}`+ee(o)+ee(a)+W(h)+ee(i)+W(c)+W(m)+W(0);return{unsigned:!0,signedBy:"user-wallet",chainId:t,venue:"uniswap-v3",tx:{to:p,data:y,value:b?String(c):"0x0"},guard:{quotedOut:f.amountOut,minOut:m.toString(),slippageBps:d,maxSlippageBps:Ne,fee:h},requires:b?[]:[{step:"approve",token:o,spender:p,amount:String(c)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var de={decimals:"0x313ce567",symbol:"0x95d89b41",name:"0x06fdde03",totalSupply:"0x18160ddd",owner:"0x8da5cb5b"};function Ct(e){if(!e||e==="0x")return null;try{return BigInt(e)}catch{return null}}function kt(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length>=128){let s=Number(BigInt(`0x${t.slice(64,128)}`));if(s>0&&s<=256&&t.length>=128+s*2){let n=t.slice(128,128+s*2),o=Buffer.from(n,"hex").toString("utf8").replace(/\0+$/,"");if(o)return o}}return Buffer.from(t.slice(0,64),"hex").toString("utf8").replace(/\0+$/,"")||null}function An(e){let{chainId:t}=e;async function r(s,n,o){return q(t,"eth_call",[{to:s,data:n},"latest"],o)}return{async blockNumber(s={}){let n=await pt(t,s);return{chainId:t,blockNumber:n?.blockNumber??n,evidence:v.LIVE}},async nativeBalance(s,n={}){let o=await ft(t,s,n);return{chainId:t,address:s,wei:o?.wei??o?.balance??null,symbol:e.nativeCurrency?.symbol??null,decimals:e.nativeCurrency?.decimals??18,evidence:v.LIVE}},async tokenBalance({token:s,owner:n},o={}){let a=await ht({chainId:t,token:s,owner:n},o);return{chainId:t,token:s,owner:n,raw:a?.balance??a,evidence:v.LIVE}},async resolveToken(s,n={}){if(!/^0x[0-9a-fA-F]{40}$/.test(s||""))return{chainId:t,token:s,evidence:v.UNKNOWN,error:"resolveToken needs a 20-byte address; symbol lookup is a market-data concern"};let[o,a,c,i]=await Promise.all([r(s,de.decimals,n).catch(()=>null),r(s,de.symbol,n).catch(()=>null),r(s,de.name,n).catch(()=>null),r(s,de.totalSupply,n).catch(()=>null)]),d=Ct(o?.result??o),u=d!==null||a?.result||c?.result,l={chainId:t,address:s,decimals:d===null?null:Number(d),symbol:kt(a?.result??a),name:kt(c?.result??c),totalSupply:(Ct(i?.result??i)??null)?.toString()??null,evidence:u?v.LIVE:v.UNKNOWN};return u||(l.warning="no ERC-20 metadata returned -- may not be a token contract"),l},async resolvePools(s,n={}){let o=e.dexscreenerSlug;if(!o)return{chainId:t,token:s,pools:[],evidence:v.UNAVAILABLE,reason:"no dexscreenerSlug configured for this chain; pool discovery is unavailable rather than guessed"};let a=await ke(s,n).catch(()=>null),i=(a?.pairs||a?.data?.pairs||[]).filter(u=>String(u.chainId).toLowerCase()===String(o).toLowerCase()).map(u=>({pair:u.pairAddress,dex:u.dexId,base:u.baseToken?.address,quote:u.quoteToken?.address,liquidityUsd:u.liquidity?.usd??null,priceUsd:u.priceUsd??null,volume24hUsd:u.volume?.h24??null,createdAt:u.pairCreatedAt??null})).sort((u,l)=>(l.liquidityUsd??0)-(u.liquidityUsd??0)),d=ue(s,i,{stables:e.stableQuoteAssets||[],wrappedNative:e.wrappedNative});return{chainId:t,token:s,pools:d,topPool:d[0]||null,quoteAsset:bt(s,d),evidence:d.length?v.LIVE:v.UNKNOWN}},async scanBlocks({fromBlock:s,toBlock:n,address:o,topics:a,chunkSize:c=2e3}={},i={}){if(!Number.isInteger(s)||!Number.isInteger(n))throw new Error("scanBlocks requires integer fromBlock and toBlock");if(n<s)throw new Error("toBlock must be >= fromBlock");let d=[],u=[];for(let p=s;p<=n;p+=c){let f=Math.min(p+c-1,n);u.push([p,f])}let l=await st(u,4,async([p,f])=>{let h={fromBlock:`0x${p.toString(16)}`,toBlock:`0x${f.toString(16)}`};o&&(h.address=o),a&&(h.topics=a);let m=await q(t,"eth_getLogs",[h],i).catch(b=>({error:String(b?.message||b)}));return{start:p,end:f,res:m}});for(let{start:p,end:f,res:h}of l){if(h?.error)return{chainId:t,fromBlock:s,toBlock:n,logs:d,complete:!1,failedAt:[p,f],error:h.error,evidence:v.UNKNOWN};for(let m of h?.result??h??[])d.push(m)}return{chainId:t,fromBlock:s,toBlock:n,logs:d,complete:!0,chunks:u.length,evidence:v.LIVE}},async scoreRisk(s,n={}){let o=[],a=w.PASS,c=u=>{let l={[w.PASS]:0,[w.CAUTION]:1,[w.UNKNOWN]:2,[w.FAIL]:3};l[u]>l[a]&&(a=u)},[i,d]=await Promise.all([this.resolveToken(s,n),this.resolvePools(s,n)]);if(i.evidence!==v.LIVE?(o.push({check:"erc20-metadata",result:w.UNKNOWN,detail:i.warning}),c(w.UNKNOWN)):o.push({check:"erc20-metadata",result:w.PASS,detail:`${i.symbol} / ${i.decimals}d`}),d.evidence===v.UNAVAILABLE)o.push({check:"liquidity",result:w.UNKNOWN,detail:d.reason}),c(w.UNKNOWN);else if(!d.pools.length)o.push({check:"liquidity",result:w.FAIL,detail:"no pool with liquidity found"}),c(w.FAIL);else{let u=d.pools[0],l=u.liquidityUsd??0;l<5e3?(o.push({check:"liquidity",result:w.CAUTION,detail:`top pool only $${l}`}),c(w.CAUTION)):o.push({check:"liquidity",result:w.PASS,detail:`$${l} on ${u.dex}`}),u.createdAt&&Date.now()-u.createdAt<24*3600*1e3&&(o.push({check:"age",result:w.CAUTION,detail:"pool under 24h old"}),c(w.CAUTION))}if(typeof this.sellSimulation=="function"){let u=await this.sellSimulation({token:s,amountIn:(10n**16n).toString()},n).catch(l=>({verdict:w.UNKNOWN,reason:String(l?.message||l)}));o.push({check:"sellability",result:u.verdict,detail:u.retentionBps!=null?`round trip returns ${(u.retentionBps/100).toFixed(2)}% -- ${u.reason}`:u.reason}),c(u.verdict)}else o.push({check:"sellability",result:w.UNKNOWN,detail:"no verified router on this chain, so a round-trip sell simulation cannot run. Treat as unproven -- a buy path is not an exit path."}),c(w.UNKNOWN);return{chainId:t,token:s,verdict:a,checks:o,note:"Structural checks only. UNKNOWN is not PASS. A token is not tradeable until a sell simulation succeeds."}}}}function Tt(e){let r={...An(e)},s=new Set((e.venues||[]).map(o=>o.kind));e.venueKind==="uniswap-v3"&&s.has("quoter")&&s.has("router")?Object.assign(r,xt({chainId:e.chainId,wrappedNative:e.wrappedNative,stableQuoteAssets:e.stableQuoteAssets||[],resolveQuoteAsset:async(o,a)=>(await r.resolvePools(o,a)).quoteAsset||null})):e.venueKind==="uniswap-v2"&&s.has("router")&&Object.assign(r,Et({chainId:e.chainId,wrappedNative:e.wrappedNative}));let n={};for(let[o,a]of Object.entries(r))n[o]=a.bind(r);return{key:e.key,chainId:e.chainId,name:e.name,rpcEnv:e.rpcEnv,nativeCurrency:e.nativeCurrency,explorer:e.explorer,venues:e.venues||[],capabilities:n}}var xn=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);function It(){return xn.map(e=>yt(Tt(e)))}import{createHash as In,createHmac as Nt,timingSafeEqual as _n}from"node:crypto";import{readFileSync as Cn}from"node:fs";import{homedir as kn}from"node:os";import{join as pe}from"node:path";function Tn(){if(process.env.ORACLE_TEST_ISOLATE_SECRETS==="1"){let r=(process.env.ORACLE_EXEC_ENV_FILE||"").trim();return r?[r]:[]}let e=(process.env.ORACLE_EXEC_ENV_FILE||process.env.MAD_EXEC_ENV_FILE||"").trim(),t=kn();if(process.env.ORACLE_PUBLIC_DESKTOP==="1"){let r=(process.env.ORACLE_CONFIG_DIR||pe(t,".config","oracle")).trim();return[e,pe(r,"exec.env")].filter(Boolean)}return[e,pe(t,".config","oracle","exec.env"),pe(t,".config","mad-desk","exec.env")].filter(Boolean)}function _t(e,t,r){let s=e??process.env[t]??process.env[r];if(!String(s||"").trim())for(let n of Tn())try{let o=Cn(n,"utf8"),a=o.match(new RegExp(`^${t}=(.*)$`,"m"))||o.match(new RegExp(`^${r}=(.*)$`,"m"));if(a&&(s=a[1].trim(),s))break}catch{}if(!String(s||"").trim())throw new Error(`${t} required for attestation. Set it in the environment, or place ${t}=<value> in ~/.config/oracle/exec.env`);return s}var fe=100,Ot=2e4;function he(e){return Array.isArray(e)?`[${e.map(he).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${he(e[t])}`).join(",")}}`:JSON.stringify(e??null)}function Rt(e,{required:t=!1}={}){try{return _t(e,"ORACLE_ROUTE_ATTESTATION_SECRET","MAD_ROUTE_ATTESTATION_SECRET")}catch(r){if(t)throw r;return null}}function Le(e){let{signature:t,...r}=e;return r}function Lt(e,{secret:t}={}){let r=Rt(t);return r?{...e,signature:Nt("sha256",r).update(he(Le(e))).digest("hex")}:e}function On(e){let t=String(e||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(t)||t.length<10||t.length%2!==0)throw new Error("auto-slippage calldata must be even-length hex with a selector");return In("sha256").update(Buffer.from(t.slice(2),"hex")).digest("hex")}function Pt(e,{chainId:t,venue:r,data:s,secret:n}={}){if(!e||e.mode!=="auto")throw new Error("bounded auto-slippage guard required");if(Number(e.chainId)!==Number(t))throw new Error("auto-slippage guard chain mismatch");if(String(e.venue).toLowerCase()!==String(r||"").toLowerCase())throw new Error("auto-slippage guard venue mismatch");let o=Rt(n);if(o){let f=Nt("sha256",o).update(he(Le(e))).digest("hex");if(!Nn(e.signature,f))throw new Error("auto-slippage guard signature mismatch \u2014 refusing to bind a guard this Oracle did not issue")}let a=Number(e.selectedBps),c=Number(e.capBps);if(!Number.isInteger(a)||a<0||a>fe||!Number.isInteger(c)||c<0||c>fe||a>c)throw new Error("auto-slippage guard bounds are invalid");let i=BigInt(e.quoteAmountOut??0),d=BigInt(e.minAmountOut??0);if(i<=0n||d<=0n)throw new Error("auto-slippage guard amounts must be positive");let u=i*BigInt(1e4-a),l=u/10000n;if(u%10000n!==0n&&(l+=1n),d<l)throw new Error("auto-slippage guard is under-protected relative to its quote");let p=Pn(s);if(p!=null&&p!==d)throw new Error(`auto-slippage: calldata encodes floor ${p}, not the guard floor ${d} \u2014 refusing to bind`);return Lt({...Le(e),calldataHash:On(s)},{secret:n})}function Nn(e,t){let r=Buffer.from(String(e??""),"utf8"),s=Buffer.from(String(t??""),"utf8");return r.length!==s.length||r.length===0?!1:_n(r,s)}function Re(e,t=0){let r=Number(e);return Number.isFinite(r)?r:t}function Rn(e){let t=e==null?fe:Number(e);if(!Number.isInteger(t)||t<0)throw new Error("auto-slippage cap must be a non-negative integer bps value");return Math.min(t,fe)}function Ln({liquidityUsd:e,priceChange5m:t=0,quoteAgeMs:r=0,crossChain:s=!1,requestedCapBps:n}={}){let o=Re(e,0),a=o>0?o>=25e4?5:o>=1e5?10:o>=5e4?20:o>=1e4?40:70:s?30:10,c=Math.min(60,Math.abs(Re(t,0))*2),i=Math.min(40,Math.floor(Math.max(0,Re(r,0))/5e3)*5),d=Math.max(25,Math.ceil(20+a+c+i)),u=Rn(n);return{mode:"auto",requiredBps:d,selectedBps:Math.min(d,u),capBps:u,executable:d<=u}}function Ut({chainId:e,venue:t,quoteAmountOut:r,liquidityUsd:s,priceChange5m:n=0,quoteAgeMs:o=0,crossChain:a=!1,requestedCapBps:c,quotedAtMs:i=Date.now(),ttlMs:d=Ot,secret:u}={}){let l=BigInt(r??0);if(l<=0n)throw new Error("auto-slippage guard requires positive quoteAmountOut");let p=Ln({liquidityUsd:s,priceChange5m:n,quoteAgeMs:o,crossChain:a,requestedCapBps:c});if(!p.executable)throw new Error(`auto-slippage requires ${p.requiredBps} bps above hard/requested cap ${p.capBps}; route blocked`);let f=Number(i);if(!Number.isFinite(f))throw new Error("auto-slippage: quotedAtMs must be a finite number");let h=Math.min(3e4,Math.max(1e3,Number(d)||Ot)),m=l*BigInt(1e4-p.selectedBps),b=m/10000n;if(m%10000n!==0n&&(b+=1n),b>l&&(b=l),l>0n&&b<=0n)throw new Error(`auto-slippage: quote ${l} is too small to express a ${p.selectedBps} bps floor without rounding to zero`);let y=Number((l-b)*10000n/(l===0n?1n:l));if(y>p.capBps)throw new Error(`auto-slippage: realised floor implies ${y} bps, above cap ${p.capBps} \u2014 refusing to issue a guard weaker than advertised`);return Lt({mode:"auto",chainId:Number(e),venue:String(t||"unknown"),quoteAmountOut:l.toString(),minAmountOut:b.toString(),requiredBps:p.requiredBps,selectedBps:p.selectedBps,capBps:p.capBps,quotedAtMs:f,expiresAtMs:f+h},{secret:u})}function Pn(e){let t=String(e||"");if(!/^0x[0-9a-fA-F]+$/.test(t)||t.length<10||t.length%2!==0)return null;let r=t.slice(0,10).toLowerCase(),s=[];for(let o=10;o+64<=t.length;o+=64)s.push(t.slice(o,o+64));let n=o=>s[o]==null?null:BigInt("0x"+s[o]);switch(r){case"0x414bf389":return n(6);case"0x04e45aaf":return n(5);case"0xc04b8d59":{let o=n(0);if(o==null)return null;let a=Number(o)/32;return!Number.isInteger(a)||a<0?null:n(a+4)}case"0xb858183f":{let o=n(0);if(o==null)return null;let a=Number(o)/32;return!Number.isInteger(a)||a<0?null:n(a+3)}case"0xa026383e":return n(6);case"0x38ed1739":case"0x5c11d795":return n(1);case"0x7ff36ab5":case"0xb6f9de95":return n(0);case"0x18cbafe5":case"0x791ac947":return n(1);default:return null}}var Un=Object.freeze({"8da5cb5b":{name:"owner()",weight:"low",note:"contract has an owner"},f2fde38b:{name:"transferOwnership(address)",weight:"low",note:"ownership transferable"},"40c10f19":{name:"mint(address,uint256)",weight:"high",note:"owner can mint new supply"},a0712d68:{name:"mint(uint256)",weight:"high",note:"owner can mint new supply"},f9f92be4:{name:"blacklist(address)",weight:"high",note:"addresses can be blocked from selling"},e4997dc5:{name:"removeBlackList(address)",weight:"high",note:"blacklist machinery present"},"8456cb59":{name:"pause()",weight:"high",note:"transfers can be frozen"},"3f4ba83a":{name:"unpause()",weight:"high",note:"pausable transfers"},c0246668:{name:"setFee/excludeFromFee",weight:"high",note:"transfer fees can be changed"},"3659cfe6":{name:"upgradeTo(address)",weight:"high",note:"logic can be replaced entirely"},"4f1ef286":{name:"upgradeToAndCall(address,bytes)",weight:"high",note:"logic can be replaced entirely"}}),qn=Object.freeze([{label:"eip1967",slot:"0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc"},{label:"zeppelinos",slot:"0x7050c9e0f4ca769c69bd3a8ef740bc37934f8e2c036e5a723fd8ee048ed3f8c3"},{label:"eip1822",slot:"0xc5f16f0fcc639fa48a6947836d9850f504798523bf8c9a3a87d5876cf622bcf7"}]),Bn=`0x${"0".repeat(64)}`;function $n(e){return!e||e==="0x"||e===Bn}async function qt(e={},t={}){let r=t.rpcCall||q,s=String(e.address||"").trim().toLowerCase(),n=Number(e.chainId);if(!/^0x[a-f0-9]{40}$/.test(s))return{status:"error",error:"address must be a 0x-prefixed EVM address",risk:"unknown-risk",findings:[],notes:[]};if(!Number.isInteger(n))return{status:"error",error:"chainId is required",risk:"unknown-risk",findings:[],notes:[]};let o;try{o=await r(n,"eth_getCode",[s,"latest"],t)}catch(m){return{address:s,chainId:n,status:"unavailable",error:m?.message||"eth_getCode failed",risk:"unknown-risk",findings:[],isProxy:!1,codeSize:0,notes:["could not read contract code; treat as unverified"]}}if(!o||o==="0x")return{address:s,chainId:n,status:"ok",risk:"high",findings:[{selector:"-",name:"no-code",weight:"high",note:"no contract deployed at this address"}],isProxy:!1,codeSize:0,notes:["nothing is deployed here \u2014 an approval or transfer to this address is unrecoverable"]};let a=[],c=[],i=o.slice(2).toLowerCase();for(let[m,b]of Object.entries(Un))i.includes(m)&&c.push({selector:`0x${m}`,...b});let d=!1,u=null,l=null,p=await Promise.all(qn.map(async({label:m,slot:b})=>{try{let y=await r(n,"eth_getStorageAt",[s,b,"latest"],t);return{label:m,word:y,error:null}}catch{return{label:m,word:null,error:`proxy slot (${m}) unreadable; proxy status uncertain`}}}));for(let m of p)m.error&&a.push(m.error),!d&&m.word&&!$n(m.word)&&(d=!0,u=m.label,l=`0x${String(m.word).slice(-40)}`);d&&(c.push({selector:u,name:"proxy",weight:"high",note:"implementation is upgradeable \u2014 current behaviour is not a guarantee"}),a.push(`bytecode scan covers the proxy (${u}), not the implementation ${l} it delegates to`));let h=c.filter(m=>m.weight==="high").length>0?"high":c.length>0?"elevated":"unknown-risk";return h==="unknown-risk"&&a.push("no owner-power selectors found; this is weak evidence, not a safety guarantee"),{address:s,chainId:n,status:"ok",risk:h,findings:c,isProxy:d,proxyStandard:u,implementation:l,codeSize:Math.floor(i.length/2),notes:a}}var Fn=/^0x[0-9a-fA-F]{40}$/,Dn=4663;function me(e,t){let r=String(e||"").trim();if(!Fn.test(r))throw new Error(`evm-token-sniper: ${t} must be a 0x EVM address`);return r}function Pe(e,t){let r=String(e??"").trim();if(!/^\d+$/.test(r)||BigInt(r)<=0n)throw new Error(`evm-token-sniper: ${t} must be a positive raw integer amount`);return r}function te(e,t){return e==null||e===""?null:Pe(e,t)}function Mn({chainId:e,tokenAddress:t,tokenIn:r,amountIn:s,recipient:n,quote:o,topPool:a,unsignedTx:c,args:i,opts:d}){let u=c?.tx;if(!u||typeof u!="object")throw new Error("local-signer envelope requires unsigned tx object");let l=me(u.to,"prepared destination"),p=String(u.data||"").toLowerCase();if(!/^0x[0-9a-f]+$/.test(p))throw new Error("local-signer envelope requires hex calldata");let f=Pe(u.value??s,"prepared native value");if(BigInt(f)!==BigInt(s))throw new Error("local-signer envelope requires native value equal amountIn");let h=te(u.gasLimit??i.gasLimit,"gasLimit"),m=te(u.maxFeePerGas??i.maxFeePerGas,"maxFeePerGas");if(!h||!m)throw new Error("local-signer envelope requires explicit gasLimit and maxFeePerGas caps");let b=Number(d.nowMs??Date.now()),y=Math.min(6e4,Math.max(1e3,Number(i.ttlMs??i.expiresInMs??3e4)||3e4)),x=Ut({chainId:e,venue:"uniswap-v3",quoteAmountOut:o?.amountOut,liquidityUsd:a?.liquidityUsd,requestedCapBps:i.slippageBps??50,quotedAtMs:b,ttlMs:y,secret:d.routeAttestationSecret}),C=Pt(x,{chainId:e,venue:"uniswap-v3",data:p,secret:d.routeAttestationSecret}),_={chainId:e,from:n,to:l,data:p,value:f,gasLimit:h,maxFeePerGas:m,slippageBps:C.selectedBps,expiresAtMs:b+y},O=te(u.maxPriorityFeePerGas??i.maxPriorityFeePerGas,"maxPriorityFeePerGas");return O&&(_.maxPriorityFeePerGas=O),i.nonce!==void 0&&(_.nonce=Number(i.nonce)),(i.txType!==void 0||O)&&(_.type=Number(i.txType??2)),i.l1FeeWei!==void 0&&(_.l1FeeWei=te(i.l1FeeWei,"l1FeeWei")??"0"),i.operatorFeeWei!==void 0&&(_.operatorFeeWei=te(i.operatorFeeWei,"operatorFeeWei")??"0"),{version:1,surface:"evm-swap",action:"swap",provider:"uniswap-v3",owner:n,destination:l,tradeId:i.tradeId||`evm-token-sniper-${e}-${t.toLowerCase()}`,slippageBps:C.selectedBps,expiresAtMs:b+y,fee:{oracleFeeBps:5},autoSlippage:C,artifact:{chainId:e,owner:n,transactions:[_]},meta:{source:"evm-token-sniper",tokenIn:r,tokenOut:t}}}function Hn(e,t){if(t){if(Number(t.chainId)!==e)throw new Error(`evm-token-sniper: supplied scanner chain ${t.chainId} does not match ${e}`);return t}It();let r=vt(e);if(!r)throw new Error(`evm-token-sniper: unsupported EVM chainId ${e}`);return r}function jn({token:e,pools:t,structuralRisk:r,scannerRisk:s,sellability:n,quote:o,args:a,scanner:c}){let i=[];return e?.evidence!==v.LIVE&&i.push("token identity is not live-verified"),(!Array.isArray(t?.pools)||t.pools.length===0)&&i.push("no liquid pool was resolved"),r?.status!=="ok"&&i.push("structural contract risk is unavailable"),r?.risk==="high"&&i.push("structural contract risk is high"),s?.verdict!==w.PASS&&i.push(`scanner risk verdict is ${s?.verdict||"UNKNOWN"}`),c.supports?.("sellSimulation")?n?.verdict!==w.PASS&&i.push(`sellability verdict is ${n?.verdict||"UNKNOWN"}`):i.push("sell simulation is unavailable on this chain"),c.supports?.("quote")?o?.evidence!==v.LIVE&&i.push("no live quote was returned"):i.push("live quoting is unavailable on this chain"),c.supports?.("prepareUnsignedTx")||i.push("unsigned transaction preparation is unavailable on this chain"),a.tokenIn||i.push("tokenIn is required to prepare"),a.amountIn||i.push("amountIn is required to prepare"),a.recipient||i.push("recipient is required to prepare"),i}async function Bt(e={},t={}){let r=Number(e.chainId??Dn);if(!Number.isInteger(r)||r<=0)throw new Error("evm-token-sniper: chainId must be a positive integer");let s=me(e.tokenAddress||e.address||e.token,"tokenAddress"),n=e.tokenIn?me(e.tokenIn,"tokenIn"):null,o=e.recipient?me(e.recipient,"recipient"):null,a=e.amountIn==null?null:Pe(e.amountIn,"amountIn"),c=Hn(r,t.scanner),i=t.scanContractRisk||qt,[d,u,l]=await Promise.all([c.resolveToken(s),c.resolvePools(s),i({address:s,chainId:r},t.contractRiskOpts||t)]),p=await c.scoreRisk(s),f=null;c.supports?.("sellSimulation")&&a?f=await c.sellSimulation({token:s,amountIn:a,base:n||void 0}):c.supports?.("sellSimulation")&&(f=await c.sellSimulation({token:s,amountIn:"10000000000000000"}));let h=null;c.supports?.("quote")&&n&&a&&(h=await c.quote({tokenIn:n,tokenOut:s,amountIn:a}));let m={...e,tokenIn:n,amountIn:a,recipient:o},b=jn({token:d,pools:u,structuralRisk:l,scannerRisk:p,sellability:f,quote:h,args:m,scanner:c}),y=null,x=null,C=null;if(e.prepare===!0&&b.length===0){y=await c.prepareUnsignedTx({tokenIn:n,tokenOut:s,amountIn:a,recipient:o,slippageBps:e.slippageBps??50,fee:h?.fee});try{x=Mn({chainId:r,tokenAddress:s,tokenIn:n,amountIn:a,recipient:o,quote:h,topPool:u?.pools?.[0]||null,unsignedTx:y,args:e,opts:t})}catch(_){C=String(_?.message||_).slice(0,200)}}return{provider:"evm-token-sniper",execution:"armed-local",armed:!!x,signing:"local-signer",broadcasting:"local-signer",chainId:r,chain:{key:c.key,name:c.name,nativeCurrency:c.nativeCurrency},token:d,pools:u,topPool:u?.pools?.[0]||null,structuralRisk:l,scannerRisk:p,sellability:f,quote:h,blockedReasons:b,prepared:!!y,unsignedTx:y,localSignerEnvelope:x,localSignerBlockedReason:C,signed:x?"pending-local-signer":!1,broadcast:x?"pending-local-signer":!1}}import{homedir as Ue}from"node:os";import{join as qe}from"node:path";var $t=process.env.ORACLE_PUBLIC_DESKTOP==="1",Vn=$t?process.env.ORACLE_CONFIG_DIR||qe(Ue(),".config","oracle"):qe(Ue(),".config","oracle"),hs=$t?Vn:qe(Ue(),".config","mad-desk");var zn=4663,Wn="EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",Gn="Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB";function Be(e=process.env){return String((e||process.env).ORACLE_SNIPE_EXECUTE||"").trim()==="1"}function Ft(e){return String(e||"").trim().replace(/^@/,"")}async function Kn({handle:e,limit:t=5,xurlFn:r=Xe}={},s={}){let n=Ft(e);if(!n)throw new Error("twitter-ca-watch: handle required");let o=await r("xurl",{command:"search",query:`from:${n}`,limit:Math.min(20,Math.max(1,Number(t)||5))},s);return o?.ok?{ok:!0,tweets:Ve(o.stdout),raw:o}:{ok:!1,error:o?.error||"xurl search failed",tweets:[]}}async function Xn(e,{chainId:t,amountIn:r,tokenIn:s,recipient:n,prepare:o},a){let c=await Bt({chainId:t,tokenAddress:e,amountIn:r,tokenIn:s,recipient:n,prepare:o===!0},a),i=c.topPool||c.pools?.pools?.[0]||null;return{chainFamily:"evm",chainId:t,address:e,topPool:i,quoteAsset:c.pools?.quoteAsset||null,sellability:c.sellability||null,blockedReasons:c.blockedReasons||[],prepared:!!c.prepared,unsignedTx:c.unsignedTx||null,localSignerEnvelope:c.localSignerEnvelope||null,execution:!1,broadcast:!1}}async function Yn(e,t){let r=await gt(e,{chainSlug:"solana",stables:[Wn,Gn]},t);return{chainFamily:"solana",chainId:"solana",address:e,topPool:r.topPool,pools:r.pools,prepared:!1,execution:!1,broadcast:!1,note:"Solana CA ranked on USD book. Prepare stays Jupiter/local-signer; this tick does not broadcast."}}async function Zn(e,t={},r={}){let s=Number(t.chainId??zn),n=[];for(let o of e.evm||[])n.push(await Xn(o,{...t,chainId:s},r));for(let o of e.solana||[])n.push(await Yn(o,r));return n}async function Dt(e={},t={}){let r=Ft(e.handle),s=e.seen instanceof Set?e.seen:new Set(e.seen||[]),n=await Kn({handle:r,limit:e.limit,xurlFn:t.xurlFn},t);if(!n.ok)return{ok:!1,handle:r,error:n.error,hits:[],seen:[...s]};let o=[];for(let c of n.tweets){let i=c.id||`${r}:${c.text.slice(0,80)}`;if(s.has(i))continue;let d=je(c.text,{extras:c.urls||[]});if(!d.all.length){s.add(i);continue}let l=await(t.evaluateFn||Zn)(d,e,t);s.add(i),o.push({tweetId:c.id||null,handle:r,text:c.text,contracts:d,evaluations:l})}let a=e.automated!==!1;return{ok:!0,handle:r,source:"twitter-ca-watch",automated:a,card:!1,notify:!1,telegram:!1,execution:!1,broadcast:!1,snipeExecuteEnabled:Be(t.env||process.env),hits:o,seen:[...s]}}var Mt=`oracle snipe twitter <handle> [--chain 4663] [--json]
 
 Watch one X/Twitter account for contract addresses, rank the USD book, sell-sim,
 and PREPARE only. This does not broadcast.
@@ -15,12 +15,12 @@ and PREPARE only. This does not broadcast.
 Automated ticks never send a Telegram / Claude / Codex card.
 Fill still requires the local signer + Telegram Allow / /approve.
 ORACLE_SNIPE_EXECUTE=1 does not start an autonomous loop.
-`;function Ft(e,t){let r=e.indexOf(`--${t}`);if(r>=0&&e[r+1]&&!e[r+1].startsWith("--"))return e[r+1];let s=e.find(o=>o.startsWith(`--${t}=`));return s?s.split("=").slice(1).join("="):null}var fs={name:"snipe",summary:"Twitter CA watch \u2192 USD-book prepare (no broadcast)",group:"read",usage:$t,async run(e){let t=e.argv||[];if(!t.length||t[0]==="--help"||t[0]==="-h")return process.stdout.write($t),0;if(t[0]!=="twitter")return process.stderr.write(`usage: oracle snipe twitter <handle>
+`;function Ht(e,t){let r=e.indexOf(`--${t}`);if(r>=0&&e[r+1]&&!e[r+1].startsWith("--"))return e[r+1];let s=e.find(n=>n.startsWith(`--${t}=`));return s?s.split("=").slice(1).join("="):null}var xs={name:"snipe",summary:"Twitter CA watch \u2192 USD-book prepare (no broadcast)",group:"read",usage:Mt,async run(e){let t=e.argv||[];if(!t.length||t[0]==="--help"||t[0]==="-h")return process.stdout.write(Mt),0;if(t[0]!=="twitter")return process.stderr.write(`usage: oracle snipe twitter <handle>
 `),1;let r=t[1];if(!r)return process.stderr.write(`snipe twitter requires a handle
-`),1;let s=await Bt({handle:r,chainId:Ft(t,"chain")?Number(Ft(t,"chain")):4663});if(t.includes("--json"))return process.stdout.write(`${JSON.stringify({...s,snipeExecuteEnabled:qe()},null,2)}
+`),1;let s=await Dt({handle:r,chainId:Ht(t,"chain")?Number(Ht(t,"chain")):4663});if(t.includes("--json"))return process.stdout.write(`${JSON.stringify({...s,snipeExecuteEnabled:Be()},null,2)}
 `),s.ok?0:1;if(!s.ok)return process.stderr.write(`${s.error}
 `),1;if(!s.hits.length)return process.stdout.write(`no new CA tweets from @${r}
-`),0;for(let o of s.hits){process.stdout.write(`@${r} ${o.tweetId||""} ${o.contracts.all.map(n=>n.address).join(" ")}
-`);for(let n of o.evaluations){let a=n.topPool;process.stdout.write(`  ${n.chainFamily} ${n.address} pool=${a?.dex||"none"} liq=${a?.liquidityUsd??"n/a"} prepared=${n.prepared} broadcast=false
+`),0;for(let n of s.hits){process.stdout.write(`@${r} ${n.tweetId||""} ${n.contracts.all.map(o=>o.address).join(" ")}
+`);for(let o of n.evaluations){let a=o.topPool;process.stdout.write(`  ${o.chainFamily} ${o.address} pool=${a?.dex||"none"} liq=${a?.liquidityUsd??"n/a"} prepared=${o.prepared} broadcast=false
 `)}}return process.stdout.write(`PREPARE only. No card. Allow on Telegram / local signer still required to fill.
-`),0}};export{fs as default};
+`),0}};export{xs as default};