@oracle-agent/oracle 0.35.43 → 0.35.45

package/dist/bin/oracle-public-server.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-var je=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};import ye from"node:net";import fo from"node:dns";function ze(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let n=a=>{if(!a)return[];let u=a.split(":"),f=u.at(-1);if(f?.includes(".")){let d=f.split(".").map(Number);if(d.length!==4||d.some(w=>!Number.isInteger(w)||w<0||w>255))return null;u.splice(u.length-1,1,(d[0]<<8|d[1]).toString(16),(d[2]<<8|d[3]).toString(16))}return u.some(d=>!/^[0-9a-f]{1,4}$/.test(d))?null:u.map(d=>Number.parseInt(d,16))},[r,o]=t.split("::"),i=n(r),s=n(o);if(!i||!s)return null;let c=t.includes("::"),l=8-i.length-s.length;if(!c&&l!==0||c&&l<1)return null;let p=[...i,...Array(Math.max(0,l)).fill(0),...s];return p.length!==8?null:Uint8Array.from(p.flatMap(a=>[a>>8,a&255]))}function ut(e,t,n){let r=Math.floor(n/8),o=n%8;for(let s=0;s<r;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[r]&i)===(t[r]&i)}function dt(e){if(ye.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(ye.isIPv6(e)){let t=ze(e);if(!t)return!1;let n=ze("::ffff:0:0");return ut(t,n,96)?dt([...t.slice(12)].join(".")):ut(t,ze("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>ut(t,ze(o),i)):!1}return!1}function ho(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let n=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(mo.has(n)||n.endsWith(".localhost")||n.endsWith(".internal"))return{ok:!1,error:`refused internal host ${n}`};let r=ye.isIP(n);return r!==0&&!dt(n)?{ok:!1,error:`refused private address ${n}`}:{ok:!0,url:t,host:n,isLiteralIp:r!==0}}async function pt(e,{lookupFn:t=fo.promises.lookup}={}){let n=ho(e);if(!n.ok)return n;if(n.isLiteralIp)return{ok:!0,url:n.url,addresses:[{address:n.host,family:ye.isIPv6(n.host)?6:4}]};let r;try{r=await t(n.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${n.host} did not resolve`}}return!Array.isArray(r)||r.length===0||r.some(o=>!dt(o.address))?{ok:!1,error:`refused: ${n.host} resolves to a non-public address`}:{ok:!0,url:n.url,addresses:r}}async function ft({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let n,r;try{let u=await t();n=u.Agent,r=u.fetch}catch(u){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${u?.message||u}`);return null}if(typeof n!="function"||typeof r!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=u=>String(u).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=u=>(Array.isArray(u)?u:[u]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(ye.isIPv6(f.address)?6:4)})),c=(u,f,d)=>{i.set(o(u),s(typeof f=="string"?[{address:f,family:d}]:f))},l=u=>{let f=o(u);if(ye.isIP(f))return[{address:f,family:ye.isIPv6(f)?6:4}];let d=i.get(f);if(!d||!d.length)throw new Error(`refused: unpinned host ${u} during pinned fetch`);return d},p=new n({connect:{lookup(u,f,d){let w;try{w=l(u)}catch(g){return d(g)}return f?.all?d(null,w):d(null,w[0].address,w[0].family)}}}),a=yo((u,f={})=>r(u,{...f,dispatcher:p}),c);return{dispatcher:p,fetch:a,pin:c,resolve:l,async close(){try{await p.destroy()}catch{}}}}function yo(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[mt]=Object.freeze({pin:t}),e}function ht(e){return typeof e=="function"&&typeof e[mt]?.pin=="function"}function In(e,t,n){if(!ht(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[mt].pin(t,n)}var mo,mt,_n=je(()=>{mo=new Set(["localhost","metadata.google.internal","metadata.goog"]);mt=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as bo}from"node:crypto";import{types as ue}from"node:util";function B(e){return fe(`HTTP JSON body refused: ${e}`)}function Io(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof ue[t]=="function"&&ue[t](e))}function _o(e){let t=[],n=0,r=0,o=0,i=0,s=new WeakSet,c=a=>{if(n+=Buffer.byteLength(a,"utf8"),n>le.bytes)throw B("serialized byte limit exceeded");t.push(a)},l=a=>{if(Buffer.byteLength(a,"utf8")>le.bytes)throw B("serialized byte limit exceeded");return JSON.stringify(a)},p=(a,u)=>{if(r+=1,r>le.nodes)throw B("node limit exceeded");if(u>le.depth)throw B("depth limit exceeded");if(a===null){c("null");return}if(typeof a=="string"){c(l(a));return}if(typeof a=="boolean"){c(a?"true":"false");return}if(typeof a=="number"){if(!Number.isFinite(a))throw B("non-finite number");c(Object.is(a,-0)?"0":String(a));return}if(typeof a!="object")throw B("unsupported non-JSON value");if(ue.isProxy(a))throw B("proxy value");if(Io(a))throw B("unsupported exotic object");if(s.has(a))throw B("cyclic value");s.add(a);try{if(Object.getOwnPropertySymbols(a).length>0)throw B("symbol-keyed fields are unsupported");if(Array.isArray(a)){let w=Object.getPrototypeOf(a),g=0;for(;w!==null;){if(ue.isProxy(w))throw B("proxy array prototype");if(g+=1,g>le.depth)throw B("array prototype depth limit exceeded");w=Object.getPrototypeOf(w)}if(a.length>le.arrayLength)throw B("array length limit exceeded");for(let _=0;_<a.length;_+=1){let T=Object.getOwnPropertyDescriptor(a,String(_));if(!T||!Object.hasOwn(T,"value")||T.enumerable!==!0)throw B("array entries must be dense enumerable own data")}let A=0;for(let _ in a){if(i+=1,i>le.fields)throw B("enumeration limit exceeded");if(Object.hasOwn(a,_)&&(A+=1,A>a.length))throw B("named array fields are unsupported")}if(A!==a.length)throw B("array entries must be dense enumerable own data");c("[");for(let _=0;_<a.length;_+=1)_&&c(","),p(Object.getOwnPropertyDescriptor(a,String(_)).value,u+1);c("]");return}let f=Object.getPrototypeOf(a);if(f!==Object.prototype&&f!==null)throw B("non-plain object");let d=[];for(let w in a){if(i+=1,i>le.fields)throw B("enumeration limit exceeded");if(!Object.hasOwn(a,w))continue;if(o+=1,o>le.fields)throw B("field limit exceeded");let g=Object.getOwnPropertyDescriptor(a,w);if(!g||!Object.hasOwn(g,"value")||g.enumerable!==!0)throw B("object fields must be enumerable own data");d.push([w,g.value])}c("{");for(let w=0;w<d.length;w+=1)w&&c(","),c(l(d[w][0])),c(":"),p(d[w][1],u+1);c("}")}finally{s.delete(a)}};return p(e,0),t.join("")}function To(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(ue.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let n=new Set;for(let r of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(r))throw new TypeError("HTTP header names must be valid tokens");let o=r.toLowerCase();if(n.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");n.add(o);let i=Object.getOwnPropertyDescriptor(e,r);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[r]=String(s)}return t}function Co(){return Object.assign(Object.create(null),{Accept:"application/json"})}function No(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function Po(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function We(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=On.get(e);return t||(t=Rn,Rn+=1,On.set(e,t)),`reference:${t}`}function $n(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Oo.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function Ln(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let n=t;if(typeof t=="string")try{n=JSON.parse(t)}catch{return!1}if(Array.isArray(n))return n.length>0&&n.every($n);if(!n||typeof n!="object")return!1;if(Object.hasOwn(n,"jsonrpc")||Object.hasOwn(n,"method"))return $n(n);let r=Object.hasOwn(n,"type")?n.type:null;return typeof r=="string"&&Ro.has(r)&&(!Object.hasOwn(n,"action")||n.action==null)&&(!Object.hasOwn(n,"signature")||n.signature==null)&&(!Object.hasOwn(n,"nonce")||n.nonce==null)}function $o(e,t,n,r={},o=null){let i=bo("sha256"),s=(l,p)=>{let a=String(p);i.update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l),i.update("=").update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a).update(`
-`)};s("method",e),s("url",t),Object.keys(n||{}).map((l,p)=>({name:l.toLowerCase(),order:p,value:String(n[l])})).sort((l,p)=>l.name.localeCompare(p.name)||l.order-p.order).forEach((l,p)=>{s(`header-name-${p}`,l.name),s(`header-value-${p}`,l.value)}),s("body",o??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${l}`,r[l]??"-");return i.digest("hex")}function Lo(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,Cn):Math.min(250*2**e,Cn)+Math.floor(Math.random()*100)}function fe(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function bt(e,t,n){return fe(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function be(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Bo(e){return e?e.byteLength??e.length??0:0}async function Fo(e,t,{url:n,truncate:r=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(be(e),!r))throw bt(n,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let u=await e.text(),f=Buffer.byteLength(u,"utf8");if(f>t){if(!r)throw bt(n,`body ${f} bytes`,t);return Buffer.from(u,"utf8").subarray(0,t).toString("utf8")}return u}let c=[],l=0,p=!1;try{for(;;){let{value:u,done:f}=await s.read();if(f)break;if(u&&(c.push(Buffer.from(u)),l+=Bo(u),l>t)){p=!0;break}}}finally{if(p)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(p&&(typeof o=="function"&&o(),!r))throw bt(n,`streamed ${l} bytes`,t);let a=Buffer.concat(c);return(p?a.subarray(0,t):a).toString("utf8")}function Mo(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function qo(e,{fetchImpl:t,method:n,headers:r,body:o,timeoutMs:i,lookupFn:s,realFetch:c,untrustedUrl:l=!1,maxResponseBytes:p=null,sameOriginRedirectsOnly:a=!1,importUndici:u,validateResponse:f,signal:d,redirectPolicy:w="follow",maxRedirects:g=Ke}){let A=null,_=t,T=s?{lookupFn:s}:{};if(l&&!c&&!ht(_))throw fe(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let b=new AbortController,h=setTimeout(()=>b.abort(),i),v=d?Pn?Pn([d,b.signal]):d:b.signal,S=async(x,{status:P=null}={})=>{let U=await pt(x,T);if(!U.ok)throw fe(P==null?`HTTP refused ${x}: ${U.error}`:`HTTP redirect to ${x} ${U.error}`,P==null?{}:{status:P});let H=new URL(x).hostname;if(c){if(A&&(await A.close(),A=null),!A)try{A=await ft({requireUndici:!0,...u?{importUndici:u}:{}})}catch(I){throw fe(P==null?`HTTP refused ${x}: ${I?.message||I}`:`HTTP redirect to ${x} refused: ${I?.message||I}`,P==null?{}:{status:P})}A.pin(H,U.addresses),_=A.fetch}else In(_,H,U.addresses);return U};try{let x=String(e),P=Object.assign(Object.create(null),r||{});l&&await S(x);for(let U=0;U<=g;U+=1){let H=Object.assign(Object.create(null),{method:n,headers:P,body:o,signal:v,redirect:"manual",dispatcher:void 0}),I=await _(x,H);if((w==="error"||g===0)&&I.status>=300&&I.status<400)throw be(I),fe(`HTTP ${I.status} ${n} redirect refused`,{status:I.status,redirectRefused:!0});if(ko.has(I.status)){let D=a===!0&&n==="POST"&&[307,308].includes(I.status)&&Ln(n,o);if(n!=="GET"&&n!=="HEAD"&&!D){be(I);let $=new Error(`HTTP ${I.status} ${n} ${x} redirected non-idempotent request`);throw $.status=I.status,$}if(U===g)throw be(I),fe(`HTTP ${I.status} ${n} redirect budget exhausted`,{status:I.status,redirectRefused:!0});let ae=I.headers?.get?.("location"),z;try{z=No(ae,x)}catch($){throw be(I),$}let ce=!Po(z,x);if(be(I),ce&&n==="POST"){let $=new Error(`HTTP ${I.status} ${n} cross-origin redirect refused`);throw $.status=I.status,$}if(ce&&a){let $=new Error(`HTTP ${I.status} ${n} cross-origin redirect refused`);throw $.status=I.status,$.retryable=!1,$}if(ce&&(P=Co(P)),l)await S(z,{status:I.status});else if(ce){let $=await pt(z,T);if(!$.ok){let R=new Error(`HTTP redirect from ${x} ${$.error}`);throw R.status=I.status,R.retryable=!1,R}c&&$.addresses?.length&&(A||(A=await ft(u?{importUndici:u}:{})),A&&(A.pin(new URL(z).hostname,$.addresses),_=A.fetch))}x=z;continue}if(typeof f=="function")try{await f(I,{url:x})}catch(D){throw be(I),fe(D?.message||String(D))}let q=await Fo(I,p,{url:x,onOversize:()=>b.abort()}),J=Mo(q);if(!I.ok){let D=new Error(`HTTP ${I.status} ${n} ${x}`);throw D.status=I.status,D.retryAfter=I.headers?.get?.("retry-after")??null,D.body=J??q.slice(0,300),D}return J??q}throw new Error(`HTTP redirect loop for ${e}`)}catch(x){if(b.signal.aborted&&!Pe(d)){let P=x&&(typeof x=="object"||typeof x=="function")&&!ue.isProxy(x)?x:null,U=P?Object.getOwnPropertyDescriptor(P,"oversize"):null;if(!(U&&Object.hasOwn(U,"value")&&U.value===!0))try{if(!P)throw new TypeError("unsafe rejection");Object.defineProperties(P,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let I=new Error("HTTP request timed out");throw Object.defineProperties(I,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),I}}throw x}finally{clearTimeout(h),A&&await A.close()}}async function F(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&ue.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let n=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let R of Object.getOwnPropertyNames(t)){let O=Object.getOwnPropertyDescriptor(t,R);if(!(R==="toJSON"&&O&&Object.hasOwn(O,"value")&&O.value===void 0)){if(!n.has(R))throw new TypeError("HTTP options contain unknown fields");if(!O||!O.enumerable||!Object.hasOwn(O,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let r=R=>{if(t==null||!Object.hasOwn(t,R))return;let O=Object.getOwnPropertyDescriptor(t,R);if(!O||!Object.hasOwn(O,"value"))throw new TypeError("HTTP options must contain own data properties");return O.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=r("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=r("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=r("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let c=r("redirectPolicy");if(c!==void 0&&c!=="follow"&&c!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=r("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>Ke))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${Ke}`);if(c==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let p=c??"follow",a=p==="error"?0:l??Ke;for(let R of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let O=r(R);if(O!==void 0&&typeof O!="boolean")throw new TypeError(`HTTP ${R} must be boolean`)}let u=r("maxResponseBytes");if(u!==void 0&&(!Number.isInteger(u)||u<1||u>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let f=r("signal");if(f!==void 0){if(ue.isProxy(f)||!(f instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Pe(f)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let R of["importUndici","lookupFn","validateResponse"]){let O=r(R);if(O!==void 0&&typeof O!="function")throw new TypeError(`HTTP ${R} must be a function`)}let d=r("fetchImpl"),w=d||globalThis.fetch;if(typeof w!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let g=i??12e3,A=(o||"GET").toUpperCase(),_=r("headers"),T=To(_),b=Object.assign(Object.create(null),T);Object.keys(b).some(R=>R.toLowerCase()==="accept")||(b.Accept="application/json");let h=r("body");h!=null&&typeof h!="string"&&(Object.keys(b).find(O=>O.toLowerCase()==="content-type")||(b["Content-Type"]="application/json"),h=_o(h));let v=s??go,S=r("lookupFn"),x=!d,P=r("untrustedUrl")===!0,U=r("sameOriginRedirectsOnly")===!0,H=r("importUndici"),I=r("validateResponse"),q=f,J=u??null,D=async()=>{let R;for(let O=0;O<=v;O++){q&&Ao.call(q);try{return await qo(e,{fetchImpl:w,method:A,headers:b,body:h,timeoutMs:g,lookupFn:S,realFetch:x,untrustedUrl:P,maxResponseBytes:J,sameOriginRedirectsOnly:U,importUndici:H,validateResponse:I,signal:q,redirectPolicy:p,maxRedirects:a})}catch(Z){R=Z;let Y=m=>{if(!Z||typeof Z!="object"&&typeof Z!="function"||ue.isProxy(Z))return;let y=Object.getOwnPropertyDescriptor(Z,m);return y&&Object.hasOwn(y,"value")?y.value:void 0},ne=Y("status"),_e=Y("oracleTimeout")===!0||Y("name")==="AbortError"||Y("name")==="TimeoutError"||Pe(q),qe=new Set([408,425,429]),Te=Y("retryable")===!1?!1:ne!=null?qe.has(ne)||wo.has(ne)&&Tn.has(A):!_e&&Tn.has(A);if(O===v||!Te)throw Z;let De=Lo(O,Y("retryAfter"));q?await new Promise((m,y)=>{let E,k=()=>{clearTimeout(E),Nn.call(q,"abort",k),y(Eo(q)||new DOMException("Aborted","AbortError"))};if(Pe(q)){k();return}E=setTimeout(()=>{Nn.call(q,"abort",k),m()},De),xo.call(q,"abort",k,{once:!0}),Pe(q)&&k()}):await Uo(De)}}throw R};if(!(r("dedupe")!==!1&&!q&&Ln(A,h)))return D();let z=$o(A,e,b,{untrustedUrl:P,maxResponseBytes:J,sameOriginRedirectsOnly:U,redirectPolicy:p,maxRedirects:a,timeoutMs:g,retries:v,fetchImpl:We(w),realFetch:x,lookupFn:We(S),importUndici:We(H),validateResponse:We(I)},h),ce=yt.get(z);if(ce)return ce;let $=D().finally(()=>yt.delete(z));return yt.set(z,$),$}async function V(e){let t=Date.now();try{let n=await e();return{ok:!0,ms:Date.now()-t,data:n}}catch(n){return{ok:!1,ms:Date.now()-t,error:String(n.message||n),status:n.status??null}}}async function oe(e,t,n){let r=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,r.length||1)),i=new Array(r.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<r.length;){let c=s++;i[c]=await n(r[c],c)}})),i}var wo,Tn,go,Cn,So,vo,Ao,xo,Nn,Pn,Pe,Eo,ko,Ke,Da,le,yt,On,Rn,Oo,Ro,Uo,W=je(()=>{_n();wo=new Set([408,425,429,500,502,503,504]),Tn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),go=2,Cn=4e3,So=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,vo=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Ao=AbortSignal.prototype.throwIfAborted,xo=EventTarget.prototype.addEventListener,Nn=EventTarget.prototype.removeEventListener,Pn=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Pe=e=>e?So.call(e):!1,Eo=e=>e?vo.call(e):void 0,ko=new Set([301,302,303,307,308]),Ke=3,Da=64*1024,le=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});yt=new Map,On=new WeakMap,Rn=1;Oo=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Ro=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);Uo=e=>new Promise(t=>setTimeout(t,e))});function Bn(e){return Do.get(Number(e))||null}function Fn(e,t=process.env){let n=Bn(e);if(!n)return null;for(let r of n.rpcEnv){let o=(t[r]||"").trim();if(o)return o}return null}var Un,Do,Mn=je(()=>{Un={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Do=new Map(Object.values(Un).map(e=>[e.chainId,e]))});import{Interface as jo,getAddress as Ho}from"ethers";function wt(e,t){try{return Ho(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function zo(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=Fn(e,n);return r||Vo[Number(e)]||null}function Ko(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Wo.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}function Go(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Yo(e){if(e?.error)throw Go(e.error);return e?.result}function Jo(e,t,n){return`${e}
+var Ce=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};import{AsyncLocalStorage as go}from"node:async_hooks";function Ve(e){let t=So.getStore();if(!t||t.closed||!vo.includes(e))return null;if(t.spans.length>=Eo)return t.droppedSpans++,null;let n={stage:e,startMs:t.now()-t.start,durationMs:null,outcome:"pending",status:null};return t.spans.push(n),(r,o=null)=>{t.closed||n.durationMs!==null||(n.durationMs=Math.max(0,t.now()-t.start-n.startMs),n.outcome=r==="succeeded"?"succeeded":"failed",n.status=Number.isInteger(o)&&o>=100&&o<=599?o:null)}}var So,vo,Eo,Tn=Ce(()=>{So=new go,vo=["http","retry","shared"],Eo=512});import ye from"node:net";import Ao from"node:dns";function ze(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let n=a=>{if(!a)return[];let p=a.split(":"),h=p.at(-1);if(h?.includes(".")){let u=h.split(".").map(Number);if(u.length!==4||u.some(m=>!Number.isInteger(m)||m<0||m>255))return null;p.splice(p.length-1,1,(u[0]<<8|u[1]).toString(16),(u[2]<<8|u[3]).toString(16))}return p.some(u=>!/^[0-9a-f]{1,4}$/.test(u))?null:p.map(u=>Number.parseInt(u,16))},[r,o]=t.split("::"),i=n(r),s=n(o);if(!i||!s)return null;let c=t.includes("::"),l=8-i.length-s.length;if(!c&&l!==0||c&&l<1)return null;let d=[...i,...Array(Math.max(0,l)).fill(0),...s];return d.length!==8?null:Uint8Array.from(d.flatMap(a=>[a>>8,a&255]))}function dt(e,t,n){let r=Math.floor(n/8),o=n%8;for(let s=0;s<r;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[r]&i)===(t[r]&i)}function pt(e){if(ye.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(ye.isIPv6(e)){let t=ze(e);if(!t)return!1;let n=ze("::ffff:0:0");return dt(t,n,96)?pt([...t.slice(12)].join(".")):dt(t,ze("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>dt(t,ze(o),i)):!1}return!1}function ko(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let n=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(xo.has(n)||n.endsWith(".localhost")||n.endsWith(".internal"))return{ok:!1,error:`refused internal host ${n}`};let r=ye.isIP(n);return r!==0&&!pt(n)?{ok:!1,error:`refused private address ${n}`}:{ok:!0,url:t,host:n,isLiteralIp:r!==0}}async function ft(e,{lookupFn:t=Ao.promises.lookup}={}){let n=ko(e);if(!n.ok)return n;if(n.isLiteralIp)return{ok:!0,url:n.url,addresses:[{address:n.host,family:ye.isIPv6(n.host)?6:4}]};let r;if(process.env.ORACLE_HOSTED_EGRESS_PROXY)return{ok:!0,url:n.url,addresses:[]};try{r=await t(n.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${n.host} did not resolve`}}return!Array.isArray(r)||r.length===0||r.some(o=>!pt(o.address))?{ok:!1,error:`refused: ${n.host} resolves to a non-public address`}:{ok:!0,url:n.url,addresses:r}}function Io(e=process.env){let t=e.ORACLE_HOSTED_EGRESS_PROXY||"";if(!t)return null;let n;try{n=new URL(t)}catch{throw new Error("egress-guard: ORACLE_HOSTED_EGRESS_PROXY is not a URL")}if(n.protocol!=="http:"||!["127.0.0.1","::1","localhost","[::1]"].includes(n.hostname)||!n.port||n.username||n.password)throw new Error("egress-guard: egress proxy must be an exact loopback http origin");let r=e.ORACLE_HOSTED_EGRESS_TOKEN||"";if(!/^[A-Za-z0-9_-]{43}$/.test(r))throw new Error("egress-guard: egress proxy token is missing");return{uri:n.origin,token:r}}async function mt({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let n,r,o;try{o=await t(),n=o.Agent,r=o.fetch}catch(u){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${u?.message||u}`);return null}if(typeof n!="function"||typeof r!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let i=u=>String(u).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),s=new Map,c=u=>(Array.isArray(u)?u:[u]).map(m=>typeof m=="string"?{address:m}:m).filter(m=>m&&m.address).map(m=>({address:m.address,family:m.family||(ye.isIPv6(m.address)?6:4)})),l=(u,m,b)=>{s.set(i(u),c(typeof m=="string"?[{address:m,family:b}]:m))},d=u=>{let m=i(u);if(ye.isIP(m))return[{address:m,family:ye.isIPv6(m)?6:4}];let b=s.get(m);if(!b||!b.length)throw new Error(`refused: unpinned host ${u} during pinned fetch`);return b},a=Io(),p=a&&typeof o.ProxyAgent=="function"?new o.ProxyAgent({uri:a.uri,token:`Bearer ${a.token}`,connectTimeout:1e4}):new n({connect:{lookup(u,m,b){let E;try{E=d(u)}catch(_){return b(_)}return m?.all?b(null,E):b(null,E[0].address,E[0].family)}}}),h=_o((u,m={})=>r(u,{...m,dispatcher:p}),l);return{dispatcher:p,fetch:h,pin:l,resolve:d,async close(){try{await p.destroy()}catch{}}}}function _o(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[ht]=Object.freeze({pin:t}),e}function yt(e){return typeof e=="function"&&typeof e[ht]?.pin=="function"}function Cn(e,t,n){if(!yt(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[ht].pin(t,n)}var xo,ht,On=Ce(()=>{xo=new Set(["localhost","metadata.google.internal","metadata.goog"]);ht=Symbol.for("oracle.egressGuard.pinCapableFetch")});import{createHash as To}from"node:crypto";import{types as le}from"node:util";function B(e){return fe(`HTTP JSON body refused: ${e}`)}function Mo(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof le[t]=="function"&&le[t](e))}function Bo(e){let t=[],n=0,r=0,o=0,i=0,s=new WeakSet,c=a=>{if(n+=Buffer.byteLength(a,"utf8"),n>ce.bytes)throw B("serialized byte limit exceeded");t.push(a)},l=a=>{if(Buffer.byteLength(a,"utf8")>ce.bytes)throw B("serialized byte limit exceeded");return JSON.stringify(a)},d=(a,p)=>{if(r+=1,r>ce.nodes)throw B("node limit exceeded");if(p>ce.depth)throw B("depth limit exceeded");if(a===null){c("null");return}if(typeof a=="string"){c(l(a));return}if(typeof a=="boolean"){c(a?"true":"false");return}if(typeof a=="number"){if(!Number.isFinite(a))throw B("non-finite number");c(Object.is(a,-0)?"0":String(a));return}if(typeof a!="object")throw B("unsupported non-JSON value");if(le.isProxy(a))throw B("proxy value");if(Mo(a))throw B("unsupported exotic object");if(s.has(a))throw B("cyclic value");s.add(a);try{if(Object.getOwnPropertySymbols(a).length>0)throw B("symbol-keyed fields are unsupported");if(Array.isArray(a)){let m=Object.getPrototypeOf(a),b=0;for(;m!==null;){if(le.isProxy(m))throw B("proxy array prototype");if(b+=1,b>ce.depth)throw B("array prototype depth limit exceeded");m=Object.getPrototypeOf(m)}if(a.length>ce.arrayLength)throw B("array length limit exceeded");for(let _=0;_<a.length;_+=1){let C=Object.getOwnPropertyDescriptor(a,String(_));if(!C||!Object.hasOwn(C,"value")||C.enumerable!==!0)throw B("array entries must be dense enumerable own data")}let E=0;for(let _ in a){if(i+=1,i>ce.fields)throw B("enumeration limit exceeded");if(Object.hasOwn(a,_)&&(E+=1,E>a.length))throw B("named array fields are unsupported")}if(E!==a.length)throw B("array entries must be dense enumerable own data");c("[");for(let _=0;_<a.length;_+=1)_&&c(","),d(Object.getOwnPropertyDescriptor(a,String(_)).value,p+1);c("]");return}let h=Object.getPrototypeOf(a);if(h!==Object.prototype&&h!==null)throw B("non-plain object");let u=[];for(let m in a){if(i+=1,i>ce.fields)throw B("enumeration limit exceeded");if(!Object.hasOwn(a,m))continue;if(o+=1,o>ce.fields)throw B("field limit exceeded");let b=Object.getOwnPropertyDescriptor(a,m);if(!b||!Object.hasOwn(b,"value")||b.enumerable!==!0)throw B("object fields must be enumerable own data");u.push([m,b.value])}c("{");for(let m=0;m<u.length;m+=1)m&&c(","),c(l(u[m][0])),c(":"),d(u[m][1],p+1);c("}")}finally{s.delete(a)}};return d(e,0),t.join("")}function Fo(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(le.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let n=new Set;for(let r of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(r))throw new TypeError("HTTP header names must be valid tokens");let o=r.toLowerCase();if(n.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");n.add(o);let i=Object.getOwnPropertyDescriptor(e,r);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[r]=String(s)}return t}function qo(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Do(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function Ho(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}function We(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=Ln.get(e);return t||(t=Un,Un+=1,Ln.set(e,t)),`reference:${t}`}function Mn(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?jo.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function Bn(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let n=t;if(typeof t=="string")try{n=JSON.parse(t)}catch{return!1}if(Array.isArray(n))return n.length>0&&n.every(Mn);if(!n||typeof n!="object")return!1;if(Object.hasOwn(n,"jsonrpc")||Object.hasOwn(n,"method"))return Mn(n);let r=Object.hasOwn(n,"type")?n.type:null;return typeof r=="string"&&Vo.has(r)&&(!Object.hasOwn(n,"action")||n.action==null)&&(!Object.hasOwn(n,"signature")||n.signature==null)&&(!Object.hasOwn(n,"nonce")||n.nonce==null)}function zo(e,t,n,r={},o=null){let i=To("sha256"),s=(l,d)=>{let a=String(d);i.update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l),i.update("=").update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a).update(`
+`)};s("method",e),s("url",t),Object.keys(n||{}).map((l,d)=>({name:l.toLowerCase(),order:d,value:String(n[l])})).sort((l,d)=>l.name.localeCompare(d.name)||l.order-d.order).forEach((l,d)=>{s(`header-name-${d}`,l.name),s(`header-value-${d}`,l.value)}),s("body",o??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${l}`,r[l]??"-");return i.digest("hex")}function Wo(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,Pn):Math.min(250*2**e,Pn)+Math.floor(Math.random()*100)}function fe(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function wt(e,t,n){return fe(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function be(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Go(e){return e?e.byteLength??e.length??0:0}async function Yo(e,t,{url:n,truncate:r=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(be(e),!r))throw wt(n,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let p=await e.text(),h=Buffer.byteLength(p,"utf8");if(h>t){if(!r)throw wt(n,`body ${h} bytes`,t);return Buffer.from(p,"utf8").subarray(0,t).toString("utf8")}return p}let c=[],l=0,d=!1;try{for(;;){let{value:p,done:h}=await s.read();if(h)break;if(p&&(c.push(Buffer.from(p)),l+=Go(p),l>t)){d=!0;break}}}finally{if(d)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(d&&(typeof o=="function"&&o(),!r))throw wt(n,`streamed ${l} bytes`,t);let a=Buffer.concat(c);return(d?a.subarray(0,t):a).toString("utf8")}function Jo(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Xo(e,{fetchImpl:t,method:n,headers:r,body:o,timeoutMs:i,lookupFn:s,realFetch:c,untrustedUrl:l=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:a=!1,importUndici:p,validateResponse:h,signal:u,redirectPolicy:m="follow",maxRedirects:b=Ke}){let E=null,_=t,C=s?{lookupFn:s}:{};if(l&&!c&&!yt(_))throw fe(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let g=new AbortController,y=setTimeout(()=>g.abort(),i),v=u?$n?$n([u,g.signal]):u:g.signal,S=async(A,{status:R=null}={})=>{let M=await ft(A,C);if(!M.ok)throw fe(R==null?`HTTP refused ${A}: ${M.error}`:`HTTP redirect to ${A} ${M.error}`,R==null?{}:{status:R});let j=new URL(A).hostname;if(c){if(E&&(await E.close(),E=null),!E)try{E=await mt({requireUndici:!0,...p?{importUndici:p}:{}})}catch(k){throw fe(R==null?`HTTP refused ${A}: ${k?.message||k}`:`HTTP redirect to ${A} refused: ${k?.message||k}`,R==null?{}:{status:R})}E.pin(j,M.addresses),_=E.fetch}else Cn(_,j,M.addresses);return M};try{let A=String(e),R=Object.assign(Object.create(null),r||{});l&&await S(A);for(let M=0;M<=b;M+=1){let j=Object.assign(Object.create(null),{method:n,headers:R,body:o,signal:v,redirect:"manual",dispatcher:void 0}),k=await _(A,j);if((m==="error"||b===0)&&k.status>=300&&k.status<400)throw be(k),fe(`HTTP ${k.status} ${n} redirect refused`,{status:k.status,redirectRefused:!0});if(Uo.has(k.status)){let H=a===!0&&n==="POST"&&[307,308].includes(k.status)&&Bn(n,o);if(n!=="GET"&&n!=="HEAD"&&!H){be(k);let U=new Error(`HTTP ${k.status} ${n} ${A} redirected non-idempotent request`);throw U.status=k.status,U}if(M===b)throw be(k),fe(`HTTP ${k.status} ${n} redirect budget exhausted`,{status:k.status,redirectRefused:!0});let se=k.headers?.get?.("location"),z;try{z=Do(se,A)}catch(U){throw be(k),U}let ae=!Ho(z,A);if(be(k),ae&&n==="POST"){let U=new Error(`HTTP ${k.status} ${n} cross-origin redirect refused`);throw U.status=k.status,U}if(ae&&a){let U=new Error(`HTTP ${k.status} ${n} cross-origin redirect refused`);throw U.status=k.status,U.retryable=!1,U}if(ae&&(R=qo(R)),l)await S(z,{status:k.status});else if(ae){let U=await ft(z,C);if(!U.ok){let P=new Error(`HTTP redirect from ${A} ${U.error}`);throw P.status=k.status,P.retryable=!1,P}c&&U.addresses?.length&&(E||(E=await mt(p?{importUndici:p}:{})),E&&(E.pin(new URL(z).hostname,U.addresses),_=E.fetch))}A=z;continue}if(typeof h=="function")try{await h(k,{url:A})}catch(H){throw be(k),fe(H?.message||String(H))}let D=await Yo(k,d,{url:A,onOversize:()=>g.abort()}),X=Jo(D);if(!k.ok){let H=new Error(`HTTP ${k.status} ${n} ${A}`);throw H.status=k.status,H.retryAfter=k.headers?.get?.("retry-after")??null,H.body=X??D.slice(0,300),H}return X??D}throw new Error(`HTTP redirect loop for ${e}`)}catch(A){if(g.signal.aborted&&!Pe(u)){let R=A&&(typeof A=="object"||typeof A=="function")&&!le.isProxy(A)?A:null,M=R?Object.getOwnPropertyDescriptor(R,"oversize"):null;if(!(M&&Object.hasOwn(M,"value")&&M.value===!0))try{if(!R)throw new TypeError("unsafe rejection");Object.defineProperties(R,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let k=new Error("HTTP request timed out");throw Object.defineProperties(k,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),k}}throw A}finally{clearTimeout(y),E&&await E.close()}}async function F(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&le.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let n=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let P of Object.getOwnPropertyNames(t)){let N=Object.getOwnPropertyDescriptor(t,P);if(!(P==="toJSON"&&N&&Object.hasOwn(N,"value")&&N.value===void 0)){if(!n.has(P))throw new TypeError("HTTP options contain unknown fields");if(!N||!N.enumerable||!Object.hasOwn(N,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let r=P=>{if(t==null||!Object.hasOwn(t,P))return;let N=Object.getOwnPropertyDescriptor(t,P);if(!N||!Object.hasOwn(N,"value"))throw new TypeError("HTTP options must contain own data properties");return N.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=r("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=r("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=r("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let c=r("redirectPolicy");if(c!==void 0&&c!=="follow"&&c!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=r("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>Ke))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${Ke}`);if(c==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=c??"follow",a=d==="error"?0:l??Ke;for(let P of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let N=r(P);if(N!==void 0&&typeof N!="boolean")throw new TypeError(`HTTP ${P} must be boolean`)}let p=r("maxResponseBytes");if(p!==void 0&&(!Number.isInteger(p)||p<1||p>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let h=r("signal");if(h!==void 0){if(le.isProxy(h)||!(h instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Pe(h)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let P of["importUndici","lookupFn","validateResponse"]){let N=r(P);if(N!==void 0&&typeof N!="function")throw new TypeError(`HTTP ${P} must be a function`)}let u=r("fetchImpl"),m=u||globalThis.fetch;if(typeof m!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let b=i??12e3,E=(o||"GET").toUpperCase(),_=r("headers"),C=Fo(_),g=Object.assign(Object.create(null),C);Object.keys(g).some(P=>P.toLowerCase()==="accept")||(g.Accept="application/json");let y=r("body");y!=null&&typeof y!="string"&&(Object.keys(g).find(N=>N.toLowerCase()==="content-type")||(g["Content-Type"]="application/json"),y=Bo(y));let v=s??Oo,S=r("lookupFn"),A=!u,R=r("untrustedUrl")===!0,M=r("sameOriginRedirectsOnly")===!0,j=r("importUndici"),k=r("validateResponse"),D=h,X=p??null,H=async()=>{let P;for(let N=0;N<=v;N++){D&&Ro.call(D);let Se=Ve("http");try{let K=await Xo(e,{fetchImpl:m,method:E,headers:g,body:y,timeoutMs:b,lookupFn:S,realFetch:A,untrustedUrl:R,maxResponseBytes:X,sameOriginRedirectsOnly:M,importUndici:j,validateResponse:k,signal:D,redirectPolicy:d,maxRedirects:a});return Se?.("succeeded"),K}catch(K){P=K;let J=I=>{if(!K||typeof K!="object"&&typeof K!="function"||le.isProxy(K))return;let T=Object.getOwnPropertyDescriptor(K,I);return T&&Object.hasOwn(T,"value")?T.value:void 0},de=J("status");Se?.("failed",de);let De=J("oracleTimeout")===!0||J("name")==="AbortError"||J("name")==="TimeoutError"||Pe(D),Te=new Set([408,425,429]),ot=J("retryable")===!1?!1:de!=null?Te.has(de)||Co.has(de)&&Nn.has(E):!De&&Nn.has(E);if(N===v||!ot)throw K;let f=Wo(N,J("retryAfter")),w=Ve("retry"),x=!1;try{D?await new Promise((I,T)=>{let $,L=()=>{clearTimeout($),Rn.call(D,"abort",L),T(Lo(D)||new DOMException("Aborted","AbortError"))};if(Pe(D)){L();return}$=setTimeout(()=>{Rn.call(D,"abort",L),I()},f),$o.call(D,"abort",L,{once:!0}),Pe(D)&&L()}):await Ko(f),x=!0}finally{w?.(x?"succeeded":"failed")}}}throw P};if(!(r("dedupe")!==!1&&!D&&Bn(E,y)))return H();let z=zo(E,e,g,{untrustedUrl:R,maxResponseBytes:X,sameOriginRedirectsOnly:M,redirectPolicy:d,maxRedirects:a,timeoutMs:b,retries:v,fetchImpl:We(m),realFetch:A,lookupFn:We(S),importUndici:We(j),validateResponse:We(k)},y),ae=bt.get(z);if(ae){let P=Ve("shared");try{let N=await ae;return P?.("succeeded"),N}catch(N){throw P?.("failed"),N}}let U=H().finally(()=>bt.delete(z));return bt.set(z,U),U}async function V(e){let t=Date.now();try{let n=await e();return{ok:!0,ms:Date.now()-t,data:n}}catch(n){return{ok:!1,ms:Date.now()-t,error:String(n.message||n),status:n.status??null}}}async function re(e,t,n){let r=Array.from(e),o=Math.max(1,Math.min(Number(t)||1,r.length||1)),i=new Array(r.length),s=0;return await Promise.all(Array.from({length:o},async()=>{for(;s<r.length;){let c=s++;i[c]=await n(r[c],c)}})),i}var Co,Nn,Oo,Pn,No,Po,Ro,$o,Rn,$n,Pe,Lo,Uo,Ke,ic,ce,bt,Ln,Un,jo,Vo,Ko,W=Ce(()=>{Tn();On();Co=new Set([408,425,429,500,502,503,504]),Nn=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Oo=2,Pn=4e3,No=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Po=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Ro=AbortSignal.prototype.throwIfAborted,$o=EventTarget.prototype.addEventListener,Rn=EventTarget.prototype.removeEventListener,$n=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Pe=e=>e?No.call(e):!1,Lo=e=>e?Po.call(e):void 0,Uo=new Set([301,302,303,307,308]),Ke=3,ic=64*1024,ce=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});bt=new Map,Ln=new WeakMap,Un=1;jo=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Vo=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);Ko=e=>new Promise(t=>setTimeout(t,e))});function qn(e){return Qo.get(Number(e))||null}function Dn(e,t=process.env){let n=qn(e);if(!n)return null;for(let r of n.rpcEnv){let o=(t[r]||"").trim();if(o)return o}return null}var Fn,Qo,Hn=Ce(()=>{Fn={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Qo=new Map(Object.values(Fn).map(e=>[e.chainId,e]))});import{Interface as Zo,getAddress as ei}from"ethers";function gt(e,t){try{return ei(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function ni(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=Dn(e,n);return r||ti[Number(e)]||null}function oi(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!ri.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}function ii(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function si(e){if(e?.error)throw ii(e.error);return e?.result}function ai(e,t,n){return`${e}
 ${t}
-${JSON.stringify(n??[])}`}async function Xo(e,t,n){return F(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function ie(e,t,n=[],r={}){let o=String(t||""),i=Ko(o),s=zo(e,r);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&r.cacheChainId!==!1){let a=Dn.get(s);if(a!=null)return a}let l=r.dedupe!==!1&&!r.signal?Jo(s,o,n):null;if(l&&Oe.has(l))return Oe.get(l);let p=(async()=>{let a=await Xo(s,{jsonrpc:"2.0",id:1,method:t,params:n},r),u=Yo(a);return i==="eth_chainid"&&typeof u=="string"&&Dn.set(s,u),u})();return l&&(Oe.set(l,p),p.finally(()=>{Oe.get(l)===p&&Oe.delete(l)}).catch(()=>{})),p}async function gt(e,t={}){let n=await ie(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function St(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await ie(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function jn(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=wt(e.token||e.tokenAddress,"token"),o=wt(e.owner,"owner"),i=wt(e.spender,"spender"),s=qn.encodeFunctionData("allowance",[o,i]),c=await ie(n,"eth_call",[{to:r,data:s},e.blockTag||"latest"],t),l=qn.decodeFunctionResult("allowance",c),p=BigInt(l[0]);return{chainId:n,token:r,owner:o,spender:i,allowance:p.toString(),allowanceHex:`0x${p.toString(16)}`,blockTag:e.blockTag||"latest"}}var qn,Vo,Wo,Oe,Dn,ve=je(()=>{W();Mn();qn=new jo(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);Vo={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};Wo=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;Oe=new Map,Dn=new Map});import{createServer as qs}from"node:http";import{timingSafeEqual as Yr}from"node:crypto";var Zt="x-oracle-sidecar-token",en=e=>typeof e=="string"&&/^[A-Za-z0-9_-]{43}$/.test(e);function tn(e,t=process.env){if(t.ORACLE_HOSTED_SIDECAR!=="1")return!0;let n=t.ORACLE_HOSTED_SIDECAR_TOKEN,r=typeof e?.get=="function"?e.get(Zt):e?.[Zt];return en(n)&&en(r)&&Yr(Buffer.from(r),Buffer.from(n))}import{readFileSync as Gt,existsSync as Vr}from"node:fs";import{dirname as Ds,join as Me,normalize as Wt,sep as js}from"node:path";import{fileURLToPath as Hs}from"node:url";import{createHash as Jr}from"node:crypto";var Ce=1,nn=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Xr=Object.freeze(["read","simulate"]),rn=1e4,on=1440*60,sn=128,an=256,cn=64,ln=256,un=/^0x[0-9a-fA-F]{40}$/,Qr=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,Zr=/^[a-z][a-z0-9_-]*:\*$/,eo=/^[A-Za-z0-9._:-]+$/,to=/^[A-Za-z0-9._:-]+$/,dn=/^(0|[1-9][0-9]*)$/,re=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function pn(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function no(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return dn.test(t)?t:null}return null}function pe(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!dn.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function it(e){let t=String(e).split(":")[0];return Xr.includes(t)}function st(e,t={}){let n=[],r=(u,f)=>n.push({field:u,message:f});if(!pn(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let u of Object.keys(e))nn.includes(u)||r(u,"unknown field is not allowed");for(let u of nn)(!(u in e)||e[u]==null)&&r(u,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let o={},i=pe(e.chainId);i==null||i<=0?r("chainId","must be a positive integer chain id"):o.chainId=i;for(let u of["agentAddress","accountAddress"]){let f=e[u];typeof f!="string"||!un.test(f.trim())?r(u,"must be a 0x-prefixed 20-byte hex address"):o[u]=f.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>cn)r("actions",`too many actions (max ${cn})`);else{let u=[];for(let f of e.actions){let d=typeof f=="string"?f.trim():null;if(!d){r("actions","action entries must be non-empty strings");continue}if(d.includes("*")){t.allowWildcardActions===!0&&Zr.test(d)?u.push(d):r("actions",`broad wildcard action "${d}" is rejected (fail closed)`);continue}if(!Qr.test(d)){r("actions",`malformed action "${d}" (expected verb:resource)`);continue}u.push(d)}o.actions=[...new Set(u)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>ln)r("targets",`too many targets (max ${ln})`);else{let u=[];for(let f of e.targets){let d=typeof f=="string"?f.trim():null;if(!d||!un.test(d)){r("targets",`target "${f}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}u.push(d.toLowerCase())}if(o.targets=[...new Set(u)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let f=o.actions.filter(d=>!it(d));(f.length>0||o.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${f.join(", ")||"no valid actions"})`)}}for(let u of["maxValueWei","maxGasWei"]){let f=no(e[u]);f==null?r(u,"must be a non-negative integer wei amount"):o[u]=f}let s=pe(e.maxSlippageBps);s==null||s>rn?r("maxSlippageBps",`must be an integer between 0 and ${rn}`):o.maxSlippageBps=s;let c=864e10,l=pe(e.expiresAt);if(l==null||l<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(l>c)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let u=pe(t.now);u==null?r("expiresAt","opts.now must be a unix-seconds integer"):l<=u?r("expiresAt",`grant is expired (expiresAt ${l} <= now ${u})`):l-u>on&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${on} seconds)`)}let p=typeof e.nonce=="string"?e.nonce.trim():pe(e.nonce)!=null?String(pe(e.nonce)):null;!p||p.length>sn||!eo.test(p)?r("nonce",`must be a non-empty string (max ${sn} chars, [A-Za-z0-9._:-])`):o.nonce=p;let a=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!a||a.length>an||!to.test(a)?r("revocationKey",`must be a non-empty public identifier (max ${an} chars, [A-Za-z0-9._:-])`):o.revocationKey=a,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:o}}function He(e,t={}){let{ok:n,errors:r,grant:o}=st(e,t);if(!n)throw new re(r);return o}function at(e,t={}){let n=He(e,t),o=Object.keys(n).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(n[i])}`);return`{"version":${Ce},${o.join(",")}}`}function Ve(e,t={}){return Jr("sha256").update(at(e,t),"utf8").digest("hex")}function fn(e,t){let n=pe(t),r=pe(pn(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var mn="oracle-connect-request",ro="oracle-unsigned-grant",oo="oracle-grant-canonical-json-utf8-v1",ee=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},io=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,so=Object.freeze(["privkey","wif","xprv","seed"]);function ct(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return io.test(t)||so.includes(n)}var hn=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),yn=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function ao(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>yn.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function bn(e){let t;try{t=JSON.stringify(e)}catch(o){throw new ee("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let n=ao(t);for(let{rule:o,re:i}of hn)if(i.test(n))throw new ee("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new ee("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&ct(o))throw new ee(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function X(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let o=yn.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of hn)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new ee(t,i);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&ct(o))throw new ee(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");X(o,`${t}[key]`,n),X(i,`${t}[${String(o)}]`,n)}return e}if(e instanceof Set){let o=0;for(let i of e.values())X(i,`${t}[${o++}]`,n);return e}if(Array.isArray(e))return e.forEach((o,i)=>X(o,`${t}[${i}]`,n)),e;for(let[o,i]of Object.entries(e)){if(ct(o))throw new ee(`${t}.${o}`,"forbidden-key-name");X(i,`${t}.${o}`,n,o)}return e}function Ne(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))Ne(t)}return e}function wn(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new re([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function gn(e){if(e?.now==null)throw new re([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return wn(e.now,"opts.now")}function co(e){return new Date(e*1e3).toISOString()}function lo(e,t){let n=e.actions.every(r=>it(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${Ce}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${co(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
-`)}function Sn(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new re([{field:"request",message:"request must be a plain object"}]);let n=gn(t),{ttlSeconds:r,...o}=e,i={...o};if(r!=null){if(i.expiresAt!=null)throw new re([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=wn(r,"ttlSeconds");i.expiresAt=n+l}let s=He(i,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),c=Ne({kind:mn,version:Ce,grant:s});return X(c)}function vn(e={},t={}){let n=gn(t),r=e&&e.kind===mn?e.grant:e,o=He(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),i=at(o),s=Ve(o),c=Buffer.from(i,"utf8"),l=Ne({kind:ro,unsigned:!0,payload:Ne({version:Ce,grantId:s,grant:o,canonical:i}),signing:Ne({scheme:oo,message:i,bytesHex:`0x${c.toString("hex")}`,byteLength:c.length,sha256:s}),render:lo(o,s)});return X(l)}var Se=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function An(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function uo(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function lt(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function po(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(o=>e.has(o)):Array.isArray(e)?r.some(o=>e.includes(o)):typeof e.has=="function"?r.some(o=>e.has(o)):!1}function xn(e,{now:t,revoked:n}={}){let r=lt(t),{grant:o,revoked:i}=uo(e),{ok:s,grant:c}=st(o);if(!s)return{status:Se.INVALID,id:null,grant:null};let l=Ve(c);return i||po(n,l,c)?{status:Se.REVOKED,id:l,grant:c}:fn(c,r)?{status:Se.EXPIRED,id:l,grant:c}:{status:Se.ACTIVE,id:l,grant:c}}function En(e,{now:t,revoked:n,agentAddress:r,accountAddress:o,chainId:i}={}){let s=lt(t),c=r!=null?String(r).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,p=i!=null?Number(i):null,a=[];for(let u of An(e)){let{status:f,id:d,grant:w}=xn(u,{now:s,revoked:n});f===Se.ACTIVE&&(c!=null&&w.agentAddress!==c||l!=null&&w.accountAddress!==l||p!=null&&w.chainId!==p||a.push(Object.freeze({id:d,grant:w})))}return a.sort((u,f)=>u.id<f.id?-1:u.id>f.id?1:0),X(Object.freeze(a))}function kn(e,t,{now:n,revoked:r}={}){let o=lt(n),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of An(e)){let c=xn(s,{now:o,revoked:r});if(c.status!==Se.INVALID&&c.id===i)return X(Object.freeze({id:c.id,status:c.status,grant:c.grant}))}return null}import{Interface as Yn,getAddress as Zo,id as Jn}from"ethers";ve();W();var Hn="https://api.dexscreener.com",Qa=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var vt=30;W();var ec=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),At=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),xt=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});ve();ve();var Ge=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);W();ve();var Vn=new Yn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),zn=new Yn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),ei=Jn("Approval(address,address,uint256)"),Nc=Jn("ApprovalForAll(address,address,bool)"),ti=1e4,ni=2e5,ri=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),oi=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),ii=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),si=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),ai=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),ci=(1n<<256n)-1n,li=ci/2n,ui=4320*60*60*1e3,di=360*60*1e3,pi=600*1e3,fi=45*1e3,mi=512,hi=128,Wn=new Map,Et=new Map,Kn=new Map;function Ae(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function It(e,t,n){let r=e.get(t);return r?Date.now()-r.at>n?(e.delete(t),null):r:null}function Ye(e,t,n,r){for(e.delete(t),e.set(t,{at:Date.now(),value:n});e.size>r;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function yi(e,t){try{return Zo(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function bi(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function Gn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function wi({unlimited:e,spenderLabel:t,lastActivityAt:n}){if(e)return"unlimited";if(!t)return"unknown-spender";if(n){let r=Date.parse(n);if(Number.isFinite(r)&&Date.now()-r>ui)return"stale"}return"scoped"}function gi(e,t,n){if(n)return"UNLIMITED";if(t==null)return e.toString();let r=10n**BigInt(t),o=e/r,i=e%r;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Si(e,t,n,r){let o=`${e}:${t}`,i=r?.get(o);if(i)return i;if(Ae(n)){let c=It(Wn,o,di);if(c)return c.value}let s=(async()=>{let c=async u=>{try{let f=Vn.encodeFunctionData(u,[]),d=await ie(e,"eth_call",[{to:t,data:f},"latest"],n);return!d||d==="0x"?null:Vn.decodeFunctionResult(u,d)[0]}catch{return null}},[l,p]=await Promise.all([c("decimals"),c("symbol")]),a={decimals:l==null?null:Number(l),symbol:p==null?null:String(p).slice(0,24)};return Ae(n)&&Ye(Wn,o,a,mi),a})();return r?.set(o,s),s}async function vi(e,t,n){let r=Math.min(Math.max(Number(n.lookbackBlocks)||ti,1),ni),o=await gt(e,n);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-r),s=await ie(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[ei,bi(t)]}],n);if(!Array.isArray(s))throw new Error("log scan returned no array");let c=new Map;for(let l of s){let p=String(l?.address||"").toLowerCase(),a=l?.topics?.[2];!p||!a||c.set(`${p}:${Gn(a)}`,{token:p,spender:Gn(a)})}return{pairs:[...c.values()],fromBlock:i,toBlock:o}}function Ai(e){return(ai[e]||[]).flatMap(n=>oi.map(r=>({token:n.address,spender:r.address,symbol:n.symbol,decimals:n.decimals})))}async function xi(e,t,n={}){let r=[],o="direct-probe",i=null,s=Ai(e),c=kt(e),l=Ae(n)&&It(Et,e,pi)?.value===!1;if(s.length===0&&c.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let p=await vi(e,t,n);r=p.pairs,o="log-scan",i={fromBlock:p.fromBlock,toBlock:p.toBlock},Ae(n)&&Ye(Et,e,!0,64)}catch{if(Ae(n)&&Ye(Et,e,!1,64),r=s,r.length===0&&c.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let p=new Map,u=(await oe(r,n.concurrency||4,async d=>{try{let w=await jn({chainId:e,token:d.token,owner:t,spender:d.spender},n),g=BigInt(w.allowance);if(g<=0n)return null;let A=d.symbol?{symbol:d.symbol,decimals:d.decimals??null}:await Si(e,d.token,n,p),_=g>=li,T=ri[d.spender]||null;return{id:`${e}:${d.token}:${d.spender}`,chainId:e,standard:"erc20",token:d.token,tokenSymbol:A.symbol,decimals:A.decimals,spender:d.spender,spenderLabel:T,allowance:g.toString(),allowanceDisplay:gi(g,A.decimals,_),unlimited:_,lastActivityAt:null,risk:wi({unlimited:_,spenderLabel:T,lastActivityAt:null})}}catch{return null}})).filter(Boolean),f=await ki(e,t,n);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:r.length,collectionsProbed:kt(e).length,...i||{}},approvals:[...u,...f]}}catch(p){return{scan:{chainId:e,status:"unavailable",method:o,error:String(p?.message||p).slice(0,200)},approvals:[]}}}async function Ei(e,t,n,r,o){try{let i=zn.encodeFunctionData("isApprovedForAll",[n,r]),s=await ie(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!zn.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function kt(e){return(si[e]||[]).flatMap(n=>ii.map(r=>({collection:n.address,collectionName:n.name,operator:r.address,operatorLabel:r.label})))}async function ki(e,t,n){let r=kt(e);return r.length===0?[]:(await oe(r,n.concurrency||4,async i=>await Ei(e,i.collection,t,i.operator,n)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function Xn(e={},t={}){let n=yi(e.owner||e.address,"owner"),r=new Map(Ge.map(d=>[d.chainId,d])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(d=>r.has(d)):[...r.keys()],i=`${n}:${[...o].sort((d,w)=>d-w).join(",")}:${e.lookbackBlocks??""}`,s=Ae(t)&&!e.refresh;if(s){let d=It(Kn,i,fi);if(d)return{...d.value,cached:!0,cachedAgeMs:Date.now()-d.at}}let c=await oe(o,e.concurrency||3,d=>xi(d,n,{...t,lookbackBlocks:e.lookbackBlocks})),l=c.flatMap(d=>d.approvals),p=c.map(d=>d.scan),a=p.find(d=>d.method==="log-scan"&&d.toBlock),u=p.some(d=>d.method==="direct-probe"&&d.status==="ok"),f={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:n,scannedRange:a?`last ${a.toBlock-a.fromBlock} blocks`:u?"known routers, live allowance probe":null,approvals:l,scans:p,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&Ye(Kn,i,f,hi),{...f,cached:!1,cachedAgeMs:0}}import{getAddress as os}from"ethers";W();ve();W();import{types as _t}from"node:util";function Je(e){if(!e||typeof e!="object"||_t.isProxy(e)||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function Re(e,t){if(e==null||(typeof e=="object"||typeof e=="function")&&_t.isProxy(e)||!Object.hasOwn(Object(e),t))return;let n=Object.getOwnPropertyDescriptor(Object(e),t);return n&&Object.hasOwn(n,"value")?n.value:void 0}function Q(e,t="provider response",n=0){if(n>64)throw new Error(`${t} exceeds the JSON nesting bound`);if(e===null||typeof e=="string"||typeof e=="boolean"||typeof e=="number"&&Number.isFinite(e))return e;if(Array.isArray(e)){if(_t.isProxy(e)||e.length>1e5)throw new Error(`${t} contains an invalid array`);let o=new Array(e.length);for(let i=0;i<e.length;i+=1){let s=Object.getOwnPropertyDescriptor(e,String(i));if(!s||!Object.hasOwn(s,"value"))throw new Error(`${t} arrays must contain dense own data`);o[i]=Q(s.value,t,n+1)}return o}if(!Je(e))throw new Error(`${t} contains a non-JSON value`);let r=Object.create(null);for(let o of Object.keys(e)){let i=Object.getOwnPropertyDescriptor(e,o);if(!i||!Object.hasOwn(i,"value"))throw new Error(`${t} objects must contain own data`);r[o]=Q(i.value,t,n+1)}return r}var Qn="mainnet-beta",Ii="https://api.mainnet-beta.solana.com",Tt="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function _i(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||Ii).trim()}function we(e,t="address"){let n=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return n}function Ti(e,t){return t?[...e,{commitment:t}]:e}async function Zn(e,t=[],n={}){let r=String(e||"");if(r==="sendTransaction"||r==="sendRawTransaction"||r==="requestAirdrop"||r==="requestAirDrop"||/airdrop/i.test(r)||/^send/i.test(r))throw new Error(`solana-rpc: ${r} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=Q(await F(_i(n),{method:"POST",body:{jsonrpc:"2.0",id:n.id||1,method:e,params:t},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,maxResponseBytes:n.maxResponseBytes,sameOriginRedirectsOnly:n.sameOriginRedirectsOnly}),"solana-rpc response");if(!Je(o))throw new Error(`solana-rpc ${e}: invalid response envelope`);let i=Re(o,"error");if(i)throw new Error(`solana-rpc ${e}: ${Re(i,"message")||JSON.stringify(i)}`);if(!Object.hasOwn(o,"result"))throw new Error(`solana-rpc ${e}: missing result`);return Re(o,"result")}async function er(e={},t={}){let n=we(e.address||e.owner,"address"),r=await Zn("getBalance",Ti([n],e.commitment),t);return{provider:"solana-rpc",cluster:Qn,address:n,lamports:String(r?.value??0),slot:r?.context?.slot??null,raw:r}}function Ci(e={}){let t=e.account?.data?.parsed?.info||{},n=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(n.amount??"0"),decimals:n.decimals??null,uiAmount:n.uiAmount??null,uiAmountString:n.uiAmountString??null,raw:e}}async function Ct(e={},t={}){let n=we(e.owner||e.address,"owner"),r=e.mint?{mint:we(e.mint,"mint")}:{programId:we(e.programId||Tt,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await Zn("getTokenAccountsByOwner",[n,r,o],t),s=Array.isArray(i?.value)?i.value.map(Ci):[];return{provider:"solana-rpc",cluster:Qn,owner:n,filter:r,slot:i?.context?.slot??null,accounts:s,raw:i}}W();var Ni="mainnet",Pi="https://mempool.space/api",Oi="https://mempool.space/testnet/api";function tr(e={}){return String(e.network||process.env.BTC_NETWORK||Ni).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Ri(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):tr(e)==="testnet"?Oi:Pi}function me(e,t="address"){let n=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(n)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(n))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return n}async function $i(e,t={}){let n=`${Ri(t)}${e.startsWith("/")?e:`/${e}`}`;return Q(await F(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"bitcoin-esplora response")}async function nr(e={},t={}){let n=me(e.address||e.addr,"address"),r=await $i(`/address/${n}`,t),o=r.chain_stats||{},i=r.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),c=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:tr(t),address:n,balanceSats:String(s-c),chainStats:o,mempoolStats:i,raw:r}}var rr="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function xe({provider:e,defaultUrl:t,hosts:n=[],url:r,strict:o=!1}){let s=(String(r??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:or(t)};let c;try{c=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(c.protocol!=="http:"&&c.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=c.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([or(t),...n]).has(l)){let a=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return c.protocol==="http:"&&!a?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[rr]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${rr}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function or(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function ge(e,t,n){let r={...e};if(!n)return r;for(let[o,i]of Object.entries(t||{}))i&&(r[o]=i);return r}function Nt(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Li=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function Ui(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",n=!1;try{let r=Nt(e);if(r){let o=new URL(r).host,i=new URL(r).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);n=Li.includes(o)&&(i==="https:"||s)}}catch{n=!1}return ge({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},n)}async function ir(e,t={}){let r=await(t.fetchImpl||fetch)(e,{method:"GET",headers:Ui(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await r.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!r.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${r.status} ${String(o).slice(0,160)}`);return i}async function sr(e={},t={}){let n=me(e.address||e.addr,"address"),r=Nt(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${r}/v1/indexer/address/${n}/runes/balance-list?start=0&limit=100`,`${r}/v1/runes/address/${n}`,`${r}/runes/balance/${n}`,`${r}/address/${n}/runes`],i=null;for(let s of o)try{let c=await ir(s,t),l=Bi(c);return{provider:"bitcoin-meta",address:n,ok:!0,count:l.length,balances:l,source:s}}catch(c){i=c}return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function Bi(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({rune:r.rune||r.runeid||r.runeId||r.spacedRune||r.name||r.ticker||null,runeId:r.runeid||r.runeId||r.id||null,amount:String(r.amount??r.balance??r.total??r.qty??"0"),symbol:r.symbol||null,divisibility:r.divisibility??r.div??null,raw:r}))}async function Xe(e={},t={}){let n=me(e.address||e.addr,"address"),r=Nt(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${r}/v1/indexer/address/${n}/inscription-data?cursor=0&size=${o}`,`${r}/v1/inscriptions/address/${n}?limit=${o}`,`${r}/address/${n}/inscriptions?limit=${o}`],s=null;for(let c of i)try{let l=await ir(c,t),p=Fi(l);return{provider:"bitcoin-meta",address:n,ok:!0,count:p.length,inscriptions:p,source:c}}catch(l){s=l}return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function Fi(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({id:r.inscriptionId||r.id||r.inscription_id||null,number:r.inscriptionNumber??r.number??null,sat:r.sat||r.satoshi||null,contentType:r.contentType||r.content_type||null,utxo:r.utxo||r.output||(r.txid!=null?`${r.txid}:${r.vout??r.n}`:null),raw:r}))}W();var Mi="https://api.hyperliquid.xyz/info",qi="https://api.hyperliquid-testnet.xyz/info";function Di({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let n=process.env.HL_API_URL.replace(/\/$/,"");return n.endsWith("/info")?n:`${n}/info`}return e||process.env.HL_TESTNET==="1"?qi:Mi}async function $e(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let n=Di(t);return Q(await F(n,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"hyperliquid info response")}async function ar(e={}){return $e({type:"allMids"},e)}async function cr(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return $e({type:"spotClearinghouseState",user:e},t)}async function lr(e,t={}){if(!e)throw new Error("hlUserState requires user");return $e({type:"clearinghouseState",user:e},t)}var ji=/^0x[0-9a-fA-F]{40}$/;function Hi(e,t){let n=String(e||"").trim();if(!ji.test(n))throw new Error(`hl-vaults: ${t} must be a 0x EVM address`);return n.toLowerCase()}function Vi(e){return e.hlInfo||$e}function zi(e){return{...e,exec:!1,execution:"read-only",armed:!1}}async function ur(e={},t={}){let n=Hi(e.user||e.address,"user"),r=await Vi(t)({type:"userVaultEquities",user:n},t),o=(Array.isArray(r)?r:[]).map(i=>({vaultAddress:i.vaultAddress??i.address??null,equity:i.equity??i.vaultEquity??null}));return zi({provider:"hl-vaults",user:n,count:o.length,positions:o,raw:r})}W();var Wi="https://coins.llama.fi";function Ki(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||Wi).replace(/\/$/,"")}async function Pt(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let n=e.map(encodeURIComponent).join(",");return F(`${Ki(t)}/prices/current/${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}W();var Gi=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood",2741:"abstract",solana:"solana"}),Yi=1e3,Ji=6e4,dr=new Map;function Xi(e){if(e==null)return null;let t=typeof e=="string"&&!/^\d+$/.test(e)?e.toLowerCase():Number(e);return Gi[t]??null}function Qi(e,t){let n=String(t??"").trim();return n?e==="solana"?/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n)?n:null:/^0x[0-9a-fA-F]{40}$/.test(n)?n.toLowerCase():null:null}function Le(e,t){let n=Xi(e),r=n?Qi(n,t):null;return n&&r?`${n}:${r}`:null}function Zi(e,t,n){let r=null;for(let o of Array.isArray(e)?e:[]){if(String(o?.baseToken?.address??"").toLowerCase()!==t.toLowerCase())continue;let s=Number(o?.priceUsd),c=Number(o?.liquidity?.usd);!Number.isFinite(s)||s<=0||!Number.isFinite(c)||c<n||(!r||c>r.liquidityUsd)&&(r={priceUsd:s,liquidityUsd:c,pairAddress:o?.pairAddress??null,dexId:o?.dexId??null,source:"dexscreener",provisional:!0})}return r}async function pr(e=[],t={}){let n=typeof t.now=="function"?t.now():Date.now(),r=Number.isFinite(t.cacheTtlMs)?t.cacheTtlMs:Ji,o=Number.isFinite(t.minLiquidityUsd)?t.minLiquidityUsd:Yi,i=(t.baseUrl||process.env.DEXSCREENER_API_URL||Hn).replace(/\/$/,""),s=new Map,c=[],l=new Map;for(let u of Array.isArray(e)?e:[]){let f=Le(u?.chain??u?.chainId,u?.address);if(!f||s.has(f))continue;let d=dr.get(f);if(d&&d.expiresAt>n){d.value?s.set(f,d.value):s.set(f,null);continue}let[w,g]=f.split(":");l.has(w)||l.set(w,[]),l.get(w).push(g)}let p=[...s.keys()].length+[...l.values()].reduce((u,f)=>u+f.length,0),a=!0;for(let[u,f]of l)for(let d=0;d<f.length;d+=vt){let w=f.slice(d,d+vt),g=null;try{g=await F(`${i}/tokens/v1/${u}/${w.join(",")}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??1e4})}catch(_){a=!1,c.push(`${u}: ${String(_?.message||_).slice(0,120)}`);continue}let A=Array.isArray(g)?g:Array.isArray(g?.pairs)?g.pairs:[];for(let _ of w){let T=`${u}:${_}`,b=Zi(A,_,o);dr.set(T,{value:b,expiresAt:n+r}),s.set(T,b)}}for(let[u,f]of s)f===null&&s.delete(u);return{prices:s,requested:p,resolved:s.size,reachable:a,failures:c}}W();var fr=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,es=/[<>&`*_~[\]()|\\]/g,ts=/[\u0000-\u001F\u007F]/g;function Ee(e,{max:t=32,fallback:n=""}={}){return e==null?n:String(e).normalize("NFKC").replace(fr,"").replace(ts,"").replace(es,"").replace(/\s+/g," ").trim().slice(0,t).trim()||n}function Ot(e){if(e==null)return!1;let t=String(e);return t.search(fr)!==-1?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var mr=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"}),ns=Object.freeze(["block_number","index"]),ol=new Set([...ns,"items_count","value","hash","inserted_at","fee"]);function rs(e,t={}){let n=Number(e),r=t.baseUrl||mr[n];if(!r)throw new Error(`Blockscout not configured for chainId ${n}`);return r.replace(/\/$/,"")}function hr(e){return!!mr[Number(e)]}async function yr(e={},t={}){if(!e.address)throw new Error("address required");let n=Number(e.chainId||1),r=`${rs(n,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=Q(await F(r,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}}),"blockscout token balances response");return Array.isArray(o)?o:[]}function br(e=[],{fungibleOnly:t=!0}={}){let n=[];for(let r of e){if(!r||typeof r!="object")continue;let o=r.token&&typeof r.token=="object"?r.token:{},i=String(o.type||r.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||r.token_address||r.tokenAddress||null;if(!s||typeof s!="string")continue;let c=String(r.value??r.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(c)||c==="0")continue;let l=o.decimals??r.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let p=Ee(o.symbol||o.name,{max:32,fallback:"TOKEN"}),a=Ee(o.name,{max:80,fallback:""})||null;n.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:p,name:a,decimals:l,amountRaw:c,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:Ot(o.symbol)||Ot(o.name)||void 0})}return n}var wr=80,gr=600,is="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",vr=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function de(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Qe(e,...t){for(let n of t){let r=String(e?.[n]||"").trim();if(r)return r}return null}function Sr(e){if(!e)return null;try{return os(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function Lt(e={},t=process.env){let n=e.addresses||{},r=Sr(n.evm||e.evmAddress||Qe(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=n.solana||e.solanaAddress||Qe(t,"ORACLE_SOLANA_ADDRESS"),i=n.bitcoin||e.bitcoinAddress||Qe(t,"ORACLE_BITCOIN_ADDRESS"),s=Sr(n.hyperliquid||e.hyperliquidAddress||Qe(t,"ORACLE_HYPERLIQUID_ADDRESS")||r);return{evm:r,solana:o?we(o,"portfolio Solana address"):null,bitcoin:i?me(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function Ue(e,t){let n=BigInt(String(e||"0")),r=Number(t);if(!Number.isInteger(r)||r<0||r>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(r===0)return n.toString();let o=n<0n,i=o?-n:n,s=10n**BigInt(r),c=i/s,l=String(i%s).padStart(r,"0").replace(/0+$/,"");return`${o?"-":""}${c}${l?`.${l}`:""}`}function he(e){let t=Number(e);return Number.isFinite(t)?t:null}function Be(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function te(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function Ar(e,t){let n=vr[t],r=n?e?.coins?.[n]:null,o=Number(r?.price);return{key:n||null,priceUsd:Number.isFinite(o)?o:null,timestamp:r?.timestamp??null,confidence:r?.confidence??null}}function ss(e){let t=new Map;for(let n of e)if(n?.ok)for(let r of n.data?.accounts||[]){let o=BigInt(String(r.amount||"0"));if(o===0n||!r.mint)continue;let i=`${r.mint}:${r.decimals??"unknown"}`,s=t.get(i)||{mint:r.mint,amountRaw:0n,decimals:r.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,n.program&&s.programs.add(n.program),t.set(i,s)}return[...t.values()].map(n=>{let r=n.amountRaw.toString(),o=n.decimals==null?null:Ue(r,n.decimals),i=n.decimals===0&&n.amountRaw===1n;return{mint:n.mint,amountRaw:r,amount:o,decimals:n.decimals,tokenPrograms:[...n.programs],accountCount:n.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function Rt(e,t){return{family:e,status:"unsupported",reason:t}}function $t(e,t){if(!e||e.status!=="ok")return e;let n=Ar(t,e.symbol),r=he(e.amount),o=r!=null&&n.priceUsd!=null?Be(r*n.priceUsd):null;return{...e,price:n,usdValue:o}}async function xr(e={},t={}){let n=new Date().toISOString(),r=Lt(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,c=new Map(Ge.map(m=>[m.chainId,m])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...c.keys()],p=[...new Set(Object.values(vr))],a=o?V(()=>Pt(p,de(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),u=oe(l,e.concurrency||5,async m=>{let y=c.get(m);if(!y)return{family:"evm",chainId:m,name:null,address:r.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!r.evm)return{family:"evm",chainId:m,name:y.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let E={...de(t,"evm"),rpcUrl:e.rpcUrls?.[m]||t.evm?.rpcUrls?.[m]},k=await V(()=>St(m,r.evm,E)),C=y.nativeCurrency?.decimals??18,L=y.nativeCurrency?.symbol||"NATIVE",j=k.ok?k.data.balanceWei:null,M={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&hr(m)){let N=await V(()=>yr({chainId:m,address:r.evm},{...de(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));N.ok?M={status:"ok",assets:br(N.data,{fungibleOnly:!0}).map(ot=>{let Gr=Ue(ot.amountRaw,ot.decimals);return{...ot,amount:Gr,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:N.ms}:M={status:"unavailable",assets:[],reason:N.error||"blockscout token-balances failed",source:"blockscout",latencyMs:N.ms}}return{family:"evm",chainId:m,name:y.name,address:r.evm,status:k.ok?"ok":"unavailable",...k.ok?{}:{error:k.error},latencyMs:k.ms,native:k.ok?{status:"ok",symbol:L,amountRaw:j,decimals:C,amount:Ue(j,C)}:{status:"unavailable",symbol:L,error:k.error},fungibleTokens:M,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:M.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),f=(async()=>{if(!r.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let m=de(t,"solana"),y=await V(()=>er({address:r.solana},m)),E=i||s?await Promise.all([V(()=>Ct({owner:r.solana,programId:Tt},m)).then(M=>({...M,program:"spl-token"})),V(()=>Ct({owner:r.solana,programId:is},m)).then(M=>({...M,program:"token-2022"}))]):[],k=ss(E),C=k.filter(M=>M.classification==="collectible-candidate"),L=k.filter(M=>M.classification!=="collectible-candidate"),j=E.filter(M=>!M.ok).map(M=>M.error);return{family:"solana",name:"Solana Mainnet",address:r.solana,status:y.ok||E.some(M=>M.ok)?"ok":"unavailable",native:y.ok?{status:"ok",symbol:"SOL",amountRaw:y.data.lamports,decimals:9,amount:Ue(y.data.lamports,9),slot:y.data.slot}:{status:"unavailable",symbol:"SOL",error:y.error},fungibleTokens:{status:i?j.length===E.length?"unavailable":j.length?"partial":"ok":"not-requested",assets:i?L:[],errors:j,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?j.length===E.length?"unavailable":"partial":"not-requested",assets:s?C:[],errors:j,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),d=(async()=>{if(!r.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let m=de(t,"bitcoin"),y=de(t,"bitcoinMeta"),[E,k,C]=await Promise.all([V(()=>nr({address:r.bitcoin},m)),i?V(()=>sr({address:r.bitcoin},y)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?V(()=>Xe({address:r.bitcoin},y)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),L=k.ok?k.data:null,j=C.ok?C.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:r.bitcoin,status:E.ok||L?.ok||j?.ok?"ok":"unavailable",native:E.ok?{status:"ok",symbol:"BTC",amountRaw:E.data.balanceSats,decimals:8,amount:Ue(E.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:E.error},fungibleTokens:{status:i?L?.ok?"ok":"unavailable":"not-requested",assets:L?.balances||[],error:L?.ok?null:L?.error||k.error,verification:"indexer-reported"},collectibles:{status:s?j?.ok?"ok":"unavailable":"not-requested",assets:j?.inscriptions||[],error:j?.ok?null:j?.error||C.error,unknownNotEmpty:!!j?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),w=(async()=>{if(!r.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let m=de(t,"hyperliquid"),[y,E,k,C]=await Promise.all([V(()=>cr(r.hyperliquid,m)),V(()=>lr(r.hyperliquid,m)),V(()=>ar(m)),V(()=>ur({user:r.hyperliquid},m))]),L=(C.ok&&Array.isArray(C.data?.positions)?C.data.positions:[]).filter(N=>N.vaultAddress&&te(N.equity)).map(N=>({vaultAddress:String(N.vaultAddress),equityUsd:he(N.equity)})),j=(y.ok&&Array.isArray(y.data?.balances)?y.data.balances:[]).filter(N=>te(N.total)||te(N.hold)).map(N=>({coin:N.coin||null,total:String(N.total??"0"),hold:String(N.hold??"0"),priceUsd:null,usdValue:null})),M=(E.ok&&Array.isArray(E.data?.assetPositions)?E.data.assetPositions:[]).map(N=>N.position||N).filter(N=>te(N.szi)).map(N=>({coin:N.coin||null,size:String(N.szi??"0"),entryPrice:N.entryPx??null,positionValueUsd:N.positionValue??null,unrealizedPnlUsd:N.unrealizedPnl??null,liquidationPrice:N.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:r.hyperliquid,status:y.ok||E.ok?"ok":"unavailable",spot:{status:y.ok?"ok":"unavailable",balances:j,error:y.ok?null:y.error},perps:{status:E.ok?"ok":"unavailable",accountValueUsd:E.data?.marginSummary?.accountValue??null,withdrawableUsd:E.data?.withdrawable??null,positions:M,error:E.ok?null:E.error},vaults:{status:C.ok?"ok":"unavailable",positions:L,error:C.ok?null:C.error},mids:k.ok?k.data:{},source:"hyperliquid-info"}})(),[g,A,_,T,b]=await Promise.all([u,f,d,w,a]),h=b.ok?b.data:null,v=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),S=[];for(let m of g){if(m.family!=="evm"||m.fungibleTokens?.status!=="ok")continue;let y=v[m.chainId];if(y)for(let E of m.fungibleTokens.assets||[])E.address&&S.push(`${y}:${String(E.address).toLowerCase()}`)}let x=null;if(o&&S.length){let m=[...new Set(S)],y={coins:{}},E=!1;for(let k=0;k<m.length;k+=wr){let C=m.slice(k,k+wr),L=await V(()=>Pt(C,de(t,"prices")));L.ok&&L.data?.coins&&(E=!0,Object.assign(y.coins,L.data.coins))}E&&(x=y)}let P=Object.freeze({1:new Set(["0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","0xdac17f958d2ee523a2206206994597c13d831ec7","0x6b175474e89094c44da98b954eedeac495271d0f","0x4c9edd5852cd905f086c759e8383e09bff1e68b3"]),10:new Set(["0x0b2c639c533813f4aa9d7837caf62653d097ff85","0x94b008aa00579c1307b0ef2c499ad98a8ce58e58","0xda10009cbd5d07dd0cecc66161fc93d7c9000da1"]),56:new Set(["0x8ac76a51cc950d9822d68b83fe1ad97b32cd580d","0x55d398326f99059ff775485246999027b3197955","0x1af3f329e8be154074d8769d1ffa4ee058b1dbc3"]),137:new Set(["0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","0xc2132d05d31c914a87c6611c10748aeb04b58e8f","0x8f3cf7ad23cd3cadbd9735aff958023239c6a063"]),8453:new Set(["0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xd9aaec86b65d86f6a7b5b1b0c42ffa531710b6ca"]),42161:new Set(["0xaf88d065e77c8cc2239327c5edb3a432268e5831","0xff970a61a04b1ca14834a43f5de4533ebddb5cc8","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0xda10009cbd5d07dd0cecc66161fc93d7c9000da1"]),43114:new Set(["0xb97ef9ef8734c71904d8002f8b6bc66dd9c48a6e","0xc7198437980c041c805a1edcba50c1ce5db95118","0xd586e7f844cea2f87f50152665bcbc2c279d8d70"])}),U=(m,y)=>{let E=String(y.address||"").toLowerCase();if(P[m]?.has(E))return{priceUsd:1,priceSource:"stable-peg"};let k=v[m];if(k&&y.address&&x?.coins){let C=`${k}:${String(y.address).toLowerCase()}`,L=Number(x.coins[C]?.price);if(Number.isFinite(L)&&L>0)return{priceUsd:L,priceSource:"defillama"}}return{priceUsd:null,priceSource:null}},H=[];for(let m of g)if(!(m.family!=="evm"||m.fungibleTokens?.status!=="ok"))for(let y of m.fungibleTokens.assets||[])!y.address||!te(y.amount)||U(m.chainId,y).priceUsd==null&&Le(m.chainId,y.address)&&H.push({chain:m.chainId,address:y.address});for(let m of A.fungibleTokens?.assets||[]){let y=m.mint||m.address;y&&te(m.amount)&&Le("solana",y)&&H.push({chain:"solana",address:y})}let I={prices:new Map,requested:0,resolved:0,reachable:!0,failures:[]};if(o&&H.length)try{I=await pr(H.slice(0,gr),de(t,"prices"))}catch(m){I={prices:new Map,requested:H.length,resolved:0,reachable:!1,failures:[String(m?.message||m)]}}let q=(m,y)=>{let E=Le(m,y),k=E?I.prices.get(E):null;return k?{priceUsd:k.priceUsd,priceSource:"dexscreener",priceLiquidityUsd:k.liquidityUsd,priceProvisional:k.provisional===!0}:null},J=g.map(m=>{let y=m.native?{...m,native:$t(m.native,h)}:m;if(y.fungibleTokens?.status==="ok"&&Array.isArray(y.fungibleTokens.assets)){let E=y.fungibleTokens.assets.map(k=>{let C=U(y.chainId,k);C.priceUsd==null&&k.address&&(C=q(y.chainId,k.address)??C);let L=he(k.amount),j=L!=null&&C.priceUsd!=null&&C.priceProvisional!==!0?Be(L*C.priceUsd):null;return{...k,priceUsd:C.priceUsd,priceSource:C.priceSource,...C.priceLiquidityUsd!=null?{priceLiquidityUsd:C.priceLiquidityUsd}:{},...C.priceProvisional===!0?{priceProvisional:!0}:{},usdValue:j}});y={...y,fungibleTokens:{...y.fungibleTokens,assets:E}}}return y});A.native&&(A.native=$t(A.native,h)),A.fungibleTokens?.status==="ok"&&Array.isArray(A.fungibleTokens.assets)&&(A.fungibleTokens={...A.fungibleTokens,assets:A.fungibleTokens.assets.map(m=>{let y=m.mint||m.address,E=y?q("solana",y):null,k=he(m.amount),C=E&&k!=null&&E.priceProvisional!==!0?Be(k*E.priceUsd):null;return{...m,priceUsd:E?.priceUsd??null,priceSource:E?.priceSource??null,...E?.priceLiquidityUsd!=null?{priceLiquidityUsd:E.priceLiquidityUsd}:{},...E?.priceProvisional===!0?{priceProvisional:!0}:{},usdValue:C}})}),_.native&&(_.native=$t(_.native,h));let D=0,ae=0,z=0;for(let m of[...J,A,_]){m.native?.status==="ok"&&te(m.native.amount)&&(m.native.usdValue!=null?(D+=m.native.usdValue,ae+=1):z+=1);for(let y of m.fungibleTokens?.assets||[])!te(y.amount)&&!te(y.amountRaw)||(y.usdValue!=null?(D+=y.usdValue,ae+=1):z+=1)}let ce=Ar(h,"HYPE");for(let m of T.spot?.balances||[]){let y=String(m.coin||"").toUpperCase(),E=y==="USDC"||y==="USDT"||y==="USDT0"?1:y==="HYPE"?ce.priceUsd||he(T.mids?.HYPE):he(T.mids?.[m.coin]),k=he(m.total);m.priceUsd=E,m.usdValue=k!=null&&E!=null?Be(k*E):null,te(m.total)&&(m.usdValue!=null?(D+=m.usdValue,ae+=1):z+=1)}let $=he(T.perps?.accountValueUsd);$!=null&&$!==0&&(D+=$,ae+=1);for(let m of T.vaults?.positions||[])m.equityUsd!=null&&(D+=m.equityUsd,ae+=1);let R=(A.collectibles?.assets||[]).filter(m=>te(m.amount)).length,O=(_.fungibleTokens?.assets||[]).length+(_.collectibles?.assets||[]).length;z+=R+O;let Z=[...J,A,_,T],Y=m=>Z.filter(y=>y.status===m).length,ne=[],_e=J.filter(m=>m.fungibleTokens?.status==="unavailable"),qe=J.filter(m=>m.fungibleTokens?.status==="ok");_e.length&&!qe.length?ne.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):_e.length&&ne.push(`EVM token discovery partial: Blockscout covered ${qe.length} chain(s); ${_e.length} chain(s) still native-only.`),(A.fungibleTokens?.assets?.length||A.collectibles?.assets?.length)&&ne.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),_.collectibles?.unknownNotEmpty&&ne.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),b.ok||ne.push(`Price provider unavailable: ${b.error}`);let Te=[Rt("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),Rt("sui","Sui balance adapter is not installed"),Rt("aptos","Aptos balance adapter is not installed")],De=Z.some(m=>["unavailable","partial","not-configured"].includes(m.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(m.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:n,addresses:r,coverage:{requestedSurfaces:Z.length,ok:Y("ok"),unavailable:Y("unavailable"),notConfigured:Y("not-configured"),unsupported:Y("unsupported")+Te.length,evmChainsRequested:l.length,evmChainsOk:J.filter(m=>m.status==="ok").length},valuation:{knownUsd:Be(D),label:"known priced value, not a complete portfolio total",pricedItems:ae,unpricedNonzeroItems:z,complete:z===0&&!De&&Y("unavailable")===0&&Y("not-configured")===0&&Te.length===0,priceSource:o?"DefiLlama+DexScreener":null,priceStatus:b.ok?"ok":"unavailable",priceFallback:{provider:"DexScreener",requested:I.requested,resolved:I.resolved,reachable:I.reachable,skipped:Math.max(0,H.length-gr)},priceQueriedAt:n},chains:[...J,A,_,T],unsupportedFamilies:Te,warnings:ne}}W();W();import{getAddress as as}from"ethers";var Er=Object.freeze({1:"https://eth.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com"}),kr=e=>!!Er[e];function cs(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("invalid NFT cursor");let t=new URLSearchParams;for(let[n,r]of Object.entries(e)){if(!(n==="token_contract_address_hash"?/^0x[\da-f]{40}$/i.test(String(r)):n==="token_type"?["ERC-721","ERC-1155","ERC-404"].includes(r):["token_id","items_count"].includes(n)&&/^\d{1,100}$/.test(String(r))))throw new Error("invalid NFT cursor");t.set(n,String(r))}if(!t.size)throw new Error("empty NFT cursor");return t.toString()}async function Ir(e={},t={}){let n=as(e.address),r=Er[e.chainId];if(!r)throw new Error("Blockscout NFT chain not verified");let o=Math.min(3,Math.max(1,Math.trunc(Number(e.maxPages)||3))),i=[],s=[],c=new Set,l=null,p="",a=0,u=!1;for(;a<o;)try{let f=Q(await F(`${r}/api/v2/addresses/${n}/nft${p?`?${p}`:""}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??8e3,maxResponseBytes:2e6,redirectPolicy:"error",headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}}),"blockscout NFT inventory");if(!Array.isArray(f?.items))throw new Error("invalid NFT inventory response");a++;for(let w of f.items.slice(0,50)){let g=w.token;if(!/^0x[\da-f]{40}$/i.test(g?.address_hash||"")||!/^\d+$/.test(String(w.id??"")))throw new Error("invalid NFT identity");if(!["ERC-721","ERC-1155","ERC-404"].includes(g.type))throw new Error("invalid NFT standard");if(w.owner?.hash&&w.owner.hash.toLowerCase()!==n.toLowerCase())throw new Error("NFT owner mismatch");i.push({chain:e.chain,chainId:e.chainId,family:"evm",owner:n,contract:g.address_hash,tokenId:String(w.id),tokenStandard:g.type,collection:Ee(g.name,{max:160,fallback:g.address_hash}),name:Ee(w.metadata?.name||g.name,{max:160,fallback:`NFT ${w.id}`}),imageUrl:w.image_url||null,estimatedValueUsd:null,spam:["scam","spam"].includes(g.reputation)||g.is_spam===!0,source:"blockscout-owner-inventory",listingAdapter:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"owner indexer provides no acquisition cost"}})}if(f.items.length>50)throw new Error("NFT provider page exceeds 50 item bound");let d=f.next_page_params??null;if(!d){l=null,u=!0;break}if(l=null,p=cs(d),l=Object.fromEntries(new URLSearchParams(p)),c.has(p))throw new Error("repeated NFT cursor");c.add(p)}catch(f){if(s.push(`blockscout: ${f.message}`.slice(0,300)),!a)throw f;break}return{nfts:i,complete:u,next:l,pages:a,truncated:!u,errors:s}}W();import{readFileSync as us,existsSync as ds}from"node:fs";import{getAddress as ps,Interface as Ze,TypedDataEncoder as Nl,parseUnits as Pl}from"ethers";var ls=300*1e3,El=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var fs="https://api.opensea.io/api/v2",ms="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",Ul=new Ze([`function ${ms}`]),Bl=new Ze(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),hs=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),ys=new Set(hs),bs=new Set(["solana","flow"]);function ws(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!ds(e))return"";try{for(let t of us(e,"utf8").split(`
-`)){let n=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(n)return n[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function Bt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||ws()}function Tr(e={}){return xe({provider:"opensea",defaultUrl:fs,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function Cr(e={}){return Tr(e).baseUrl}function Nr(e={}){return ge({accept:"application/json"},{"x-api-key":Bt(e)},Tr(e).trusted)}function gs(e){let t=String(e||"ethereum").trim().toLowerCase();if(!ys.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function _r(e,t="address"){try{return ps(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function Pr(e,t=null){let n=String(e||"").trim();if(!n)throw new Error("opensea: account address required");if(t&&!bs.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(n))return _r(n,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(n))throw new Error("opensea: invalid account address");return n}function Ss(e={},t,n){return{chain:t,owner:n,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,quantity:e.quantity==null&&e.balance==null?null:String(e.quantity??e.balance),collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function Ft(e={},t={}){if(!Bt(t))throw new Error("OPENSEA_API_KEY required");let n=gs(e.chain),r=Pr(e.address||e.owner,n),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],c=e.next?String(e.next):null,l=0;do{let p=new URL(`${Cr(t)}/chain/${encodeURIComponent(n)}/account/${encodeURIComponent(r)}/nfts`);p.searchParams.set("limit",String(o)),e.collection&&p.searchParams.set("collection",String(e.collection)),c&&p.searchParams.set("next",c);let a=await F(p.toString(),{headers:Nr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let u of Array.isArray(a?.nfts)?a.nfts:[])s.push(Ss(u,n,r));c=a?.next?String(a.next):null,l+=1}while(c&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:n,owner:r,count:s.length,pages:l,complete:!c,next:c,nfts:s,exec:!1,readOnly:!0}}async function Or(e={},t={}){if(!Bt(t))throw new Error("OPENSEA_API_KEY required");let n=Pr(e.address||e.owner),r=await F(`${Cr(t)}/account/${encodeURIComponent(n)}/pnl`,{headers:Nr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:n,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:r?.realized_pnl_usd??null,unrealizedPnlUsd:r?.unrealized_pnl_usd??null,totalPnlUsd:r?.total_pnl_usd??null,netInvestedUsd:r?.net_invested_usd??null,currentValueUsd:r?.current_value_usd??null,returnPercentage:r?.return_percentage??null,itemLevelPnlAvailable:!1,raw:r,exec:!1,readOnly:!0}}var Fl=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var Ml=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var ql=new Ze(["function setApprovalForAll(address operator,bool approved)"]),Dl=new Ze(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var As="https://api.satflow.com/v1";function Rr(e={}){return xe({provider:"satflow",defaultUrl:As,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function xs(e={}){return Rr(e).baseUrl}function $r(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function Es(e={}){return ge({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":$r(e)},Rr(e).trusted)}async function ks(e,{method:t="GET",body:n,opts:r={}}={}){if(!$r(r))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${xs(r)}${e.startsWith("/")?e:`/${e}`}`,c=await(r.fetchImpl||fetch)(i,{method:t,headers:Es(r),body:n!=null?JSON.stringify(n):void 0,signal:AbortSignal.timeout(r.timeoutMs??2e4)}),l=await c.text(),p;try{p=JSON.parse(l)}catch{p=l}if(!c.ok)throw new Error(`satflow ${t} ${e}: HTTP ${c.status} ${String(l).slice(0,200)}`);return p}async function Lr(e={},t={}){let n=me(e.address||e.addr,"address"),r=new URLSearchParams({address:n});e.type&&r.set("type",e.type),e.limit!=null&&r.set("limit",String(e.limit)),e.offset!=null&&r.set("offset",String(e.offset));let o=await ks(`/address/wallet-contents?${r}`,{opts:t});return{provider:"satflow",address:n,contents:o}}W();W();var nu=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Is=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],_s=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Ts=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function Cs(e={}){let t=[],n=String(e.name||""),r=String(e.description||""),o=`${n} ${r}`;_s.test(n)&&t.push("url-in-name");let i=Is.filter(p=>p.test(o)).length;i>0&&t.push(`lure-language:${i}`),Ts.test(n)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(n)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,c=!Array.isArray(e.traits)||e.traits.length===0;s&&c&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function Ur(e={}){let t=Cs(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Ns=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Ps=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function Mt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function ke(e,t){let n=await V(t);return n.ok?{ok:!0,data:n.data}:{ok:!1,error:`${e}: ${n.error}`.slice(0,300)}}function Os(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function Rs(e={},t){let n=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:n==null?null:String(n),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(n?`Inscription ${n}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function $s(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function Br(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function Ls(e){let t=new Map;if(Array.isArray(e)){for(let n of e)n?.assetKey&&t.set(String(n.assetKey).toLowerCase(),n);return t}if(e&&typeof e=="object")for(let[n,r]of Object.entries(e))t.set(n.toLowerCase(),r);return t}function Us(e,t){let n=Br(e),r=t.get(n),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!r)return{...e,assetKey:n};let i=Number(r.costUsd),s=Number(r.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:n,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let c=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-c)*100)/100,currentValueUsd:o,totalCostUsd:c,realizedUsd:null}}:{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Bs(e){let t=new Map;for(let n of e){let r=Br(n);t.has(r)||t.set(r,n)}return[...t.values()]}function Fs(e,t){let n=e.filter(i=>i.itemPnl?.status==="estimated"),r=e.length-n.length,o=Math.round(n.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:r===0&&e.length?"estimated-complete-for-held-items":n.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:n.length,unknownItems:r,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function Fr(e={},t={}){let n=new Date().toISOString(),r=Lt(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(h=>String(h).toLowerCase())):null,i=Ns.filter(h=>!o||o.has(h.chain)),s=[],c=[],l=Mt(t,"opensea"),p=r.evm?i.filter(h=>h.family!=="solana"):[],a=await oe(p,4,async h=>({row:h,result:await ke(`opensea-${h.chain}`,()=>Ft({chain:h.chain,address:r.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:h,result:v}of a)if(v.ok){let S=v.data.nfts.map(x=>({...x,family:h.family,chainId:h.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));c.push(...S),s.push({family:h.family,chain:h.chain,chainId:h.chainId,status:v.data.complete?"ok":"partial",count:S.length,complete:v.data.complete,next:v.data.next,source:"opensea"})}else{let S=kr(h.chainId)?await ke(`blockscout-${h.chain}`,()=>Ir({chain:h.chain,chainId:h.chainId,address:r.evm,maxPages:e.maxPages},{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})):null;S?.ok?(c.push(...S.data.nfts),s.push({...h,status:S.data.complete?"ok":"partial",count:S.data.nfts.length,complete:S.data.complete,next:S.data.next,truncated:S.data.truncated,source:"blockscout",errors:[v.error,...S.data.errors]})):s.push({...h,status:"unavailable",count:null,complete:!1,error:v.error,errors:[v.error,...S?[S.error]:[]],source:"opensea"})}if(!r.evm)for(let h of i.filter(v=>v.family!=="solana"))s.push({family:h.family,chain:h.chain,chainId:h.chainId,status:"not-configured",reason:"EVM address missing"});if(r.solana&&(!o||o.has("solana"))){let h=await ke("opensea-solana",()=>Ft({chain:"solana",address:r.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(h.ok){let v=h.data.nfts.map(S=>({...S,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));c.push(...v),s.push({family:"solana",chain:"solana",status:h.data.complete?"ok":"partial",count:v.length,complete:h.data.complete,next:h.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:h.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(r.bitcoin&&(!o||o.has("bitcoin"))){let h=await ke("satflow-wallet-contents",()=>Lr({address:r.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},Mt(t,"satflow")),t.timeoutMs??35e3);if(h.ok){let v=Os(h.data.contents).map(x=>Rs(x,r.bitcoin));c.push(...v);let S=v.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:S?"ok":"partial",count:v.length,complete:S,source:"satflow"})}else{let v=await ke("bitcoin-meta-inscriptions",()=>Xe({address:r.bitcoin},Mt(t,"bitcoinMeta")),t.timeoutMs??35e3),S=v.ok&&v.data?.ok&&Array.isArray(v.data.inscriptions)?v.data.inscriptions:[];c.push(...S.map(x=>$s(x,r.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:S.length?"partial":"unavailable",count:S.length,complete:!1,source:S.length?"bitcoin-meta":"satflow",error:S.length?"Satflow unavailable; fallback has IDs only":h.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let u=[];if(e.includePnl!==!1)for(let h of[...new Set([r.evm,r.solana].filter(Boolean))]){let v=await ke(`opensea-pnl-${h}`,()=>Or({address:h},l),t.timeoutMs??35e3);u.push(v.ok?{status:"ok",...v.data}:{status:"unavailable",address:h,source:"opensea-indexed-account-pnl",error:v.error})}let f=Ls(e.costBasis),d=Bs(c).map(h=>Us(h,f)).map(h=>Ur(h)),w=d.filter(h=>!h.spam),g=d.filter(h=>h.spam),A=w.filter(h=>h.estimatedValueUsd!=null&&Number.isFinite(Number(h.estimatedValueUsd))),_=Math.round(A.reduce((h,v)=>h+Number(v.estimatedValueUsd),0)*100)/100,T=w.length-A.length,b=s.filter(h=>h.status!=="ok"||h.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:n,addresses:r,coverage:s,unsupported:Ps,inventory:{count:d.length,visibleCount:w.length,flaggedCount:g.length,items:d,visibleItems:w,flaggedItems:g},valuation:{estimatedCurrentValueUsd:_,valuedItems:A.length,unvaluedItems:T,complete:T===0&&b.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Fs(w,u),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as qt}from"node:os";import{join as Dt}from"node:path";var Mr=process.env.ORACLE_PUBLIC_DESKTOP==="1",Ms=Mr?process.env.ORACLE_CONFIG_DIR||Dt(qt(),".config","oracle"):Dt(qt(),".config","oracle"),Au=Mr?Ms:Dt(qt(),".config","mad-desk");function jt(e,t,n=""){let r=process.env[e];if(r!=null&&String(r).trim()!=="")return r;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:n}var Vs=JSON.parse(Gt(new URL("../../package.json",import.meta.url),"utf8")),Ie="public",zs="127.0.0.1",Ws=8799,tt=Vs.version,Ks=new Set(["127.0.0.1","localhost","::1"]),Kt=Me(Ds(Hs(import.meta.url)),"../.."),Ht=Me(Kt,"public","oracle-console"),qr=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),Gs=1e6,K=class extends Error{constructor(t,n,r){super(r||n),this.status=t,this.code=n}};function se(e,t,n){let r=t,o;try{X(n),o=bn(n)}catch{r=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(r,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":Ie,"x-oracle-unsigned":"true"}),e.end(o)}function Ys(e){return new Promise((t,n)=>{let r=[],o=0;e.on("data",i=>{if(o+=i.length,o>Gs){n(new K(413,"payload-too-large","request body too large")),e.destroy();return}r.push(i)}),e.on("end",()=>{let i=Buffer.concat(r).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{n(new K(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>n(new K(400,"bad-request","request stream error")))})}function G(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new K(400,t,`${t} must be a JSON object`);return e}function Js(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function Xs(e){let t=Js(e);if(!Ks.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function Qs(){return{status:200,body:{ok:!0,plane:Ie,version:tt}}}function nt(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function Zs(e){let t=G(e,"body"),n=t.input!==void 0?G(t.input,"input"):t,r=nt(G(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:Sn(o,r)}}function ea(e){let t=G(e,"body"),n=t.request!==void 0?G(t.request,"request"):t.input!==void 0?G(t.input,"input"):t,r=nt(G(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:vn(o,r)}}function ta(e){let t=G(e,"body"),n=nt(G(t.opts,"opts")),r=En(t.store??[],n);return{status:200,body:{ok:!0,count:r.length,grants:r}}}function na(e){let t=G(e,"body"),n=nt(G(t.opts,"opts")),r=kn(t.store??[],t.id,n);return r==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:r}}function ra(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,n=!0,r=[];return t&&r.push("privy"),n&&r.push("injected"),{status:200,body:{ok:!0,plane:Ie,version:tt,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:n,modes:r},privy:{appId:e||null}}}}var Vt=400;function oa(e=[]){if(e.length<=Vt)return{rows:e,truncated:!1,omitted:0};let t=r=>r?.kind==="native"?0:r?.priced?1:2;return{rows:[...e].sort((r,o)=>t(r)-t(o)).slice(0,Vt),truncated:!0,omitted:e.length-Vt}}var zt=300;function ia(e=[]){if(e.length<=zt)return{items:e,truncated:!1,omitted:0};let t=r=>r?.spam===!0||r?.nsfw===!0?2:Number.isFinite(Number(r?.floorUsd))&&Number(r?.floorUsd)>0?0:1;return{items:[...e].sort((r,o)=>t(r)-t(o)).slice(0,zt),truncated:!0,omitted:e.length-zt}}var et=12;async function sa(e){let t=G(e,"body"),n=typeof t.owner=="string"?t.owner:null;if(!n)throw new K(400,"owner-required","owner must be an EVM address");let r=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(r&&r.length>et)throw new K(400,"too-many-chains",`at most ${et} chainIds per request`);let i=await Xn({owner:n,chainIds:r},Yt());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var aa=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,ca=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function la(e){if(typeof e!="string")return null;let t=e.trim();return aa.test(t)?t:null}function ua(e){if(typeof e!="string")return null;let t=e.trim();return ca.test(t)?t:null}function zr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function da(e){let t=G(e,"body"),n=zr(t.owner),r=la(t.solana),o=ua(t.bitcoin);if(!n&&!r&&!o)throw new K(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>et)throw new K(400,"too-many-chains",`at most ${et} chainIds per request`);let s=await xr({addresses:{evm:n,solana:r,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},Yt()),c=[],l=[],p=0,a=0,u=s.queriedAt,f=(b,h,v)=>({account:h??null,asOf:u,provider:"Oracle public data plane",evidence:{status:"complete",references:v}});for(let b of s.chains||[]){if(!["evm","solana","bitcoin"].includes(b.family))continue;let h=b.fungibleTokens?.status??"unavailable";h==="ok"?p+=1:h==="unavailable"&&(a+=1),l.push({chainId:b.chainId,family:b.family,name:b.name,status:b.status,error:b.error??null,tokenDiscovery:h,tokenDiscoveryReason:b.fungibleTokens?.reason??null,tokenCount:Array.isArray(b.fungibleTokens?.assets)?b.fungibleTokens.assets.length:0});let v=b.address??(b.family==="solana"?r:b.family==="bitcoin"?o:n),S=b.native;b.status==="ok"&&S&&S.status==="ok"&&S.amountRaw&&S.amountRaw!=="0"&&S.amountRaw!=="0x0"&&c.push({chainId:b.chainId,family:b.family,chain:b.name,symbol:S.symbol,decimals:S.decimals,amount:String(S.amountRaw),amountRaw:String(S.amountRaw),rawAmount:String(S.amountRaw),amountFormatted:S.amount,kind:"native",valueUsd:S.usdValue!=null?String(S.usdValue):null,priced:S.usdValue!=null,priceSource:S.usdValue!=null?"defillama":null,source:S.source??b.source??`${b.family}-native`,...f(b,v,[{kind:"native-balance",id:`${b.family}:${b.chainId??b.name}:${v}`}])});for(let x of b.fungibleTokens?.assets||[]){let P=x.amountRaw!=null?String(x.amountRaw):null;if(!P||P==="0")continue;let U=typeof x.decimals=="number"&&Number.isInteger(x.decimals)?x.decimals:null,H=x.address||x.mint||null;c.push({chainId:b.chainId,family:b.family,chain:b.name,symbol:x.symbol||x.coin||"TOKEN",decimals:U,amount:P,amountRaw:P,rawAmount:P,amountFormatted:x.amount!=null?String(x.amount):null,kind:b.family==="bitcoin"?"rune":b.family==="solana"?"spl":"erc20",address:H,valueUsd:x.usdValue!=null?String(x.usdValue):null,priced:x.usdValue!=null,priceSource:x.priceSource??null,priceLiquidityUsd:x.priceLiquidityUsd??null,source:x.source||b.fungibleTokens?.source||`${b.family}-token-index`,...f(b,v,[{kind:"token-balance",id:`${b.family}:${b.chainId??b.name}:${H??x.symbol}`}])})}}let d=8,w=b=>{let h=String(b??"").trim(),v=/^(\d+)(?:\.(\d+))?$/.exec(h);if(!v)return null;let S=(v[2]??"").slice(0,d).padEnd(d,"0");return`${v[1]}${S}`.replace(/^0+(?=\d)/,"")},g=(s.chains||[]).find(b=>b.family==="hyperliquid"),A=g?.address??n;if(g&&g.status==="ok"){l.push({chainId:null,family:"hyperliquid",name:g.name,status:g.status,error:g.error??null,tokenDiscovery:g.spot?.status==="ok"?"ok":"unavailable",tokenDiscoveryReason:g.spot?.error??null,tokenCount:Array.isArray(g.spot?.balances)?g.spot.balances.length:0});for(let v of g.spot?.balances||[]){let S=w(v.total);!v.coin||!S||S==="0"||c.push({chainId:null,family:"hyperliquid",chain:"hyperliquid",symbol:String(v.coin),decimals:d,amount:S,amountRaw:S,rawAmount:S,amountFormatted:String(v.total),kind:"hl-spot",valueUsd:v.usdValue!=null?String(v.usdValue):null,priced:v.usdValue!=null,priceSource:v.usdValue!=null?"hyperliquid-mids":null,source:"hyperliquid-info",...f(g,A,[{kind:"hl-spot-balance",id:`hyperliquid:spot:${v.coin}:${A}`}])})}let b=Number(g.perps?.accountValueUsd),h=w(g.perps?.accountValueUsd);g.perps?.status==="ok"&&Number.isFinite(b)&&b>0&&h&&c.push({chainId:null,family:"hyperliquid",chain:"hyperliquid",symbol:"USDC",decimals:d,amount:h,amountRaw:h,rawAmount:h,amountFormatted:String(g.perps.accountValueUsd),kind:"hl-perp-margin",valueUsd:String(b),priced:!0,priceSource:"hyperliquid-account-value",source:"hyperliquid-info",...f(g,A,[{kind:"hl-perp-account",id:`hyperliquid:perps:${A}`}])});for(let v of g.vaults?.positions||[]){let S=v.equityUsd==null?null:w(v.equityUsd);!S||S==="0"||c.push({chainId:null,family:"hyperliquid",chain:"hyperliquid",symbol:"USDC",decimals:d,amount:S,amountRaw:S,rawAmount:S,amountFormatted:String(v.equityUsd),kind:"hl-vault",address:v.vaultAddress,valueUsd:String(v.equityUsd),priced:!0,priceSource:"hyperliquid-vault-equity",source:"hyperliquid-info",...f(g,A,[{kind:"hl-vault-equity",id:`hyperliquid:vault:${v.vaultAddress}:${A}`}])})}}let _=a>0||!!(s.valuation&&s.valuation.complete===!1),T=oa(c);return{status:200,body:{ok:!0,owner:s.addresses?.evm??n,queriedAt:s.queriedAt,portfolio:{rows:T.rows,rowsTruncated:T.truncated,rowsOmitted:T.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!_&&a===0&&!T.truncated,incompleteReason:T.truncated?`Showing ${T.rows.length} of ${T.rows.length+T.omitted} rows (native and priced first); ${T.omitted} low-signal rows omitted.`:_?p?`Token scan live on ${p} chain(s); ${a} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function Yt(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function pa(e){let t=G(e,"body"),n=zr(t.owner);if(!n)throw new K(400,"owner-required","owner must be an EVM address");let r=await Fr({addresses:{evm:n}},Yt()),o=r?.inventory&&typeof r.inventory=="object"?r.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(r?.items)?r.items:[]).map(a=>{if(!a||typeof a!="object")return null;let u=typeof a.collection=="string"?a.collection:a.collection&&typeof a.collection=="object"&&typeof a.collection.slug=="string"?a.collection.slug:typeof a.contract=="string"?a.contract:null;return{chain:a.chain??null,chainId:a.chainId??null,family:a.family??null,owner:a.owner??n,contract:a.contract??null,tokenId:a.tokenId==null?null:String(a.tokenId),tokenStandard:a.tokenStandard??null,collection:u,name:typeof a.name=="string"?a.name.slice(0,160):null,imageUrl:a.imageUrl??a.image??null,estimatedValueUsd:a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,floorUsd:a.floorUsd!=null&&Number.isFinite(Number(a.floorUsd))?Number(a.floorUsd):a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,spam:a.spam===!0,nsfw:a.nsfw===!0,source:typeof a.source=="string"?a.source.slice(0,64):null}}).filter(Boolean),c=Array.isArray(r?.coverage)?r.coverage:[],l=ia(s),p=r?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:n,queriedAt:r.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:c.map(a=>({family:a?.family??null,chain:a?.chain??null,chainId:a?.chainId??null,status:a?.status??null,count:a?.count??null,complete:a?.complete===!0,source:a?.source??null,error:null,reason:typeof a?.reason=="string"?a.reason.slice(0,120):null})),coverage:{operational:!0,complete:p,hasGaps:!p,degraded:c.filter(a=>a?.status==="partial").map(a=>a.chain).filter(Boolean),unavailable:c.filter(a=>a?.status==="unavailable").map(a=>a.chain).filter(Boolean),unconfigured:c.filter(a=>a?.status==="not-configured").map(a=>a.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:r?.valuation?{estimatedCurrentValueUsd:r.valuation.estimatedCurrentValueUsd??null,valuedItems:r.valuation.valuedItems??null,unvaluedItems:r.valuation.unvaluedItems??null,complete:r.valuation.complete===!0}:null}}}var fa=6e4,ma=120,Wr=10,ha=300,ya=Wr,Dr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),ba=4096,Fe=new Map;function wa(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let n=t.split(",")[0].trim();if(n)return n.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function ga(e,t){let n=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),r=n==="127.0.0.1"||n==="::1"||n.startsWith("127."),o=wa(e),i=r&&o!==n,s=Dr.has(t)?r&&!i?ya:Wr:r&&!i?ha:ma,c=Date.now(),l=`${o}:${Dr.has(t)?"amp":"std"}`,p=Fe.get(l);if(!p||c>=p.resetAt){for(Fe.set(l,{count:1,resetAt:c+fa});Fe.size>ba;){let a=Fe.keys().next();if(a.done)break;Fe.delete(a.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return p.count+=1,p.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((p.resetAt-c)/1e3))}:{allowed:!0,limit:s,remaining:s-p.count,retryAfterSec:0}}var jr=Object.freeze({"GET /public/health":Qs,"GET /public/config":ra,"GET /eval":Hr,"GET /public/eval":Hr,"POST /public/connect/request":Zs,"POST /public/connect/assemble":ea,"POST /public/grants/active":ta,"POST /public/grants/get":na,"POST /public/approvals":sa,"POST /public/portfolio":da,"POST /public/nfts":pa});function Hr(){let t=[Wt(Me(Kt,"public","eval-report.json")),Wt(Me(Kt,"docs","eval-report.json"))].find(r=>Vr(r));if(!t)throw new K(404,"not-found","no committed eval report in this build");let n;try{n=JSON.parse(Gt(t,"utf8"))}catch{throw new K(500,"eval-report-invalid","committed eval report is not valid JSON")}return{status:200,body:{...n,servedAt:new Date().toISOString(),note:"Static release artifact. Reproduce: npx @oracle-agent/oracle eval guards|adversarial|fidelity --json"}}}function Jt(e={}){return{"cache-control":"no-store","x-oracle-plane":Ie,"x-oracle-unsigned":"true",...e}}function Sa(e,t,n,r){e.writeHead(t,Jt({"content-type":n})),e.end(r)}function va(e,t,n){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let r=n===""?"/":n,o=qr[r]||qr[r.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Wt(Me(Ht,o.file));if(!i.startsWith(Ht+js)&&i!==Ht)return se(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!Vr(i))return se(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=Gt(i);return e.method==="HEAD"?(t.writeHead(200,Jt({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(Sa(t,200,o.type,s),!0)}async function Aa(e,t){if(!tn(e.headers))return se(t,401,{error:"unauthorized",message:"Hosted service authentication required"});let r=new URL(e.url,"http://localhost").pathname||"/";r.length>1&&r.endsWith("/")&&r!=="/oracle-console/"&&(r=r.replace(/\/+$/,"")),r===""&&(r="/");let o=r.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=jr[i];try{if(!s){if(va(e,t,r))return;throw Object.keys(jr).some(u=>u.endsWith(` ${o}`))?new K(405,"method-not-allowed",`unsupported method for ${o}`):new K(404,"not-found",`unknown route ${o}`)}let c=ga(e,o);if(!c.allowed){t.writeHead(429,Jt({"content-type":"application/json","retry-after":String(c.retryAfterSec),"x-ratelimit-limit":String(c.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${c.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await Ys(e),p=await s(l);se(t,p.status,p.body)}catch(c){if(c instanceof ee){se(t,500,{error:"secret-leak-blocked"});return}if(c instanceof re){se(t,400,{error:"invalid-grant",errors:c.errors.map(l=>({field:l.field,message:l.message}))});return}if(c instanceof K){se(t,c.status,{error:c.code,message:c.message});return}if(c instanceof TypeError){se(t,400,{error:"bad-request",message:c.message});return}se(t,500,{error:"internal-error"})}}function xa(){return qs((e,t)=>{Aa(e,t).catch(()=>{try{se(t,500,{error:"internal-error"})}catch{}})})}function Xt({host:e,port:t}={}){let n=Xs(e??jt("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",zs)),r=t??jt("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(Ws)),o=Number(r);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(r)}`);return{host:n,port:o}}function Kr(e={}){let{host:t,port:n}=Xt(e),r=xa();return r.listen(n,t),r}var Qt=Xt(),rt=Kr(Qt);rt.on("listening",()=>{let e=rt.address(),t=typeof e=="object"&&e?e.address:Qt.host,n=typeof e=="object"&&e?e.port:Qt.port;console.log(`oracle-public-server listening on http://${t}:${n} (plane=${Ie}, version=${tt}, unsigned-only)`)});rt.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{rt.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});
+${JSON.stringify(n??[])}`}async function ci(e,t,n){return F(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function oe(e,t,n=[],r={}){let o=String(t||""),i=oi(o),s=ni(e,r);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&r.cacheChainId!==!1){let a=Vn.get(s);if(a!=null)return a}let l=r.dedupe!==!1&&!r.signal?ai(s,o,n):null;if(l&&Re.has(l))return Re.get(l);let d=(async()=>{let a=await ci(s,{jsonrpc:"2.0",id:1,method:t,params:n},r),p=si(a);return i==="eth_chainid"&&typeof p=="string"&&Vn.set(s,p),p})();return l&&(Re.set(l,d),d.finally(()=>{Re.get(l)===d&&Re.delete(l)}).catch(()=>{})),d}async function St(e,t={}){let n=await oe(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function vt(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await oe(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function zn(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=gt(e.token||e.tokenAddress,"token"),o=gt(e.owner,"owner"),i=gt(e.spender,"spender"),s=jn.encodeFunctionData("allowance",[o,i]),c=await oe(n,"eth_call",[{to:r,data:s},e.blockTag||"latest"],t),l=jn.decodeFunctionResult("allowance",c),d=BigInt(l[0]);return{chainId:n,token:r,owner:o,spender:i,allowance:d.toString(),allowanceHex:`0x${d.toString(16)}`,blockTag:e.blockTag||"latest"}}var jn,ti,ri,Re,Vn,Ee=Ce(()=>{W();Hn();jn=new Zo(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);ti={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};ri=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;Re=new Map,Vn=new Map});import Qr from"node:http";import Zr from"node:https";var eo=Symbol.for("oracle.hosted.transport.identity.v1");function en(e,t=process.env){if(t.ORACLE_HOSTED_SIDECAR!=="1")return Qr.createServer(e);let n=globalThis[eo];if(!n)throw new Error("Hosted server requires an inherited transport identity");return Zr.createServer({...n,minVersion:"TLSv1.3"},e)}import{timingSafeEqual as to}from"node:crypto";var tn="x-oracle-sidecar-token",nn=e=>typeof e=="string"&&/^[A-Za-z0-9_-]{43}$/.test(e);function rn(e,t=process.env){if(t.ORACLE_HOSTED_SIDECAR!=="1")return!0;let n=t.ORACLE_HOSTED_SIDECAR_TOKEN,r=typeof e?.get=="function"?e.get(tn):e?.[tn];return nn(n)&&nn(r)&&to(Buffer.from(r),Buffer.from(n))}import{readFileSync as Yt,existsSync as Kr}from"node:fs";import{dirname as Xs,join as qe,normalize as Kt,sep as Qs}from"node:path";import{fileURLToPath as Zs}from"node:url";import{createHash as no}from"node:crypto";var Oe=1,on=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),ro=Object.freeze(["read","simulate"]),sn=1e4,an=1440*60,cn=128,ln=256,un=64,dn=256,pn=/^0x[0-9a-fA-F]{40}$/,oo=/^[a-z][a-z0-9_-]*:[a-z0-9._-]+$/,io=/^[a-z][a-z0-9_-]*:\*$/,so=/^[A-Za-z0-9._:-]+$/,ao=/^[A-Za-z0-9._:-]+$/,fn=/^(0|[1-9][0-9]*)$/,ne=class extends Error{constructor(t){let n=t.map(r=>`${r.field}: ${r.message}`);super(`invalid grant (${t.length} error${t.length===1?"":"s"}): ${n.join("; ")}`),this.name="GrantValidationError",this.errors=t}};function mn(e){return e!=null&&typeof e=="object"&&!Array.isArray(e)}function co(e){if(typeof e=="bigint")return e>=0n?e.toString(10):null;if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:String(e);if(typeof e=="string"){let t=e.trim();return fn.test(t)?t:null}return null}function pe(e){if(typeof e=="bigint")return e<0n||e>BigInt(Number.MAX_SAFE_INTEGER)?null:Number(e);if(typeof e=="number")return!Number.isSafeInteger(e)||e<0?null:e;if(typeof e=="string"){let t=e.trim();if(!fn.test(t))return null;let n=Number(t);return Number.isSafeInteger(n)?n:null}return null}function st(e){let t=String(e).split(":")[0];return ro.includes(t)}function at(e,t={}){let n=[],r=(p,h)=>n.push({field:p,message:h});if(!mn(e))return r("grant","grant must be a plain object"),{ok:!1,errors:n,grant:null};for(let p of Object.keys(e))on.includes(p)||r(p,"unknown field is not allowed");for(let p of on)(!(p in e)||e[p]==null)&&r(p,"required field is missing");if(n.length)return{ok:!1,errors:n,grant:null};let o={},i=pe(e.chainId);i==null||i<=0?r("chainId","must be a positive integer chain id"):o.chainId=i;for(let p of["agentAddress","accountAddress"]){let h=e[p];typeof h!="string"||!pn.test(h.trim())?r(p,"must be a 0x-prefixed 20-byte hex address"):o[p]=h.trim().toLowerCase()}if(!Array.isArray(e.actions)||e.actions.length===0)r("actions","must be a non-empty array of action scopes");else if(e.actions.length>un)r("actions",`too many actions (max ${un})`);else{let p=[];for(let h of e.actions){let u=typeof h=="string"?h.trim():null;if(!u){r("actions","action entries must be non-empty strings");continue}if(u.includes("*")){t.allowWildcardActions===!0&&io.test(u)?p.push(u):r("actions",`broad wildcard action "${u}" is rejected (fail closed)`);continue}if(!oo.test(u)){r("actions",`malformed action "${u}" (expected verb:resource)`);continue}p.push(u)}o.actions=[...new Set(p)].sort()}if(!Array.isArray(e.targets))r("targets","must be an array of contract addresses");else if(e.targets.length>dn)r("targets",`too many targets (max ${dn})`);else{let p=[];for(let h of e.targets){let u=typeof h=="string"?h.trim():null;if(!u||!pn.test(u)){r("targets",`target "${h}" must be a 0x-prefixed 20-byte hex address (wildcards not allowed)`);continue}p.push(u.toLowerCase())}if(o.targets=[...new Set(p)].sort(),o.targets.length===0&&Array.isArray(o.actions)){let h=o.actions.filter(u=>!st(u));(h.length>0||o.actions.length===0)&&r("targets",`empty targets are only allowed for read/simulate scopes (blocked by: ${h.join(", ")||"no valid actions"})`)}}for(let p of["maxValueWei","maxGasWei"]){let h=co(e[p]);h==null?r(p,"must be a non-negative integer wei amount"):o[p]=h}let s=pe(e.maxSlippageBps);s==null||s>sn?r("maxSlippageBps",`must be an integer between 0 and ${sn}`):o.maxSlippageBps=s;let c=864e10,l=pe(e.expiresAt);if(l==null||l<=0)r("expiresAt","must be a positive unix-seconds timestamp");else if(l>c)r("expiresAt","exceeds the max unix-seconds timestamp (pass seconds, not milliseconds)");else if(o.expiresAt=l,t.now!=null){let p=pe(t.now);p==null?r("expiresAt","opts.now must be a unix-seconds integer"):l<=p?r("expiresAt",`grant is expired (expiresAt ${l} <= now ${p})`):l-p>an&&r("expiresAt",`grant exceeds the hard 24-hour TTL (${an} seconds)`)}let d=typeof e.nonce=="string"?e.nonce.trim():pe(e.nonce)!=null?String(pe(e.nonce)):null;!d||d.length>cn||!so.test(d)?r("nonce",`must be a non-empty string (max ${cn} chars, [A-Za-z0-9._:-])`):o.nonce=d;let a=typeof e.revocationKey=="string"?e.revocationKey.trim():null;return!a||a.length>ln||!ao.test(a)?r("revocationKey",`must be a non-empty public identifier (max ${ln} chars, [A-Za-z0-9._:-])`):o.revocationKey=a,n.length?{ok:!1,errors:n,grant:null}:{ok:!0,errors:[],grant:o}}function He(e,t={}){let{ok:n,errors:r,grant:o}=at(e,t);if(!n)throw new ne(r);return o}function ct(e,t={}){let n=He(e,t),o=Object.keys(n).sort().map(i=>`${JSON.stringify(i)}:${JSON.stringify(n[i])}`);return`{"version":${Oe},${o.join(",")}}`}function je(e,t={}){return no("sha256").update(ct(e,t),"utf8").digest("hex")}function hn(e,t){let n=pe(t),r=pe(mn(e)?e.expiresAt:null);return n==null||r==null?!0:r<=n}var yn="oracle-connect-request",lo="oracle-unsigned-grant",uo="oracle-grant-canonical-json-utf8-v1",ee=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},po=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,fo=Object.freeze(["privkey","wif","xprv","seed"]);function lt(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return po.test(t)||fo.includes(n)}var bn=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),wn=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function mo(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>wn.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function gn(e){let t;try{t=JSON.stringify(e)}catch(o){throw new ee("$",`unserializable-payload: ${String(o?.message||o)}`)}if(t===void 0)return"null";let n=mo(t);for(let{rule:o,re:i}of bn)if(i.test(n))throw new ee("$<serialized>",o);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new ee("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(o,i)=>{if(o&&lt(o))throw new ee(`$<serialized>.${o}`,"forbidden-key-name");return i}),t}function Q(e,t="$",n=new Set,r=""){if(e==null)return e;if(typeof e=="string"){let o=wn.includes(String(r).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of bn)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new ee(t,i);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&lt(o))throw new ee(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");Q(o,`${t}[key]`,n),Q(i,`${t}[${String(o)}]`,n)}return e}if(e instanceof Set){let o=0;for(let i of e.values())Q(i,`${t}[${o++}]`,n);return e}if(Array.isArray(e))return e.forEach((o,i)=>Q(o,`${t}[${i}]`,n)),e;for(let[o,i]of Object.entries(e)){if(lt(o))throw new ee(`${t}.${o}`,"forbidden-key-name");Q(i,`${t}.${o}`,n,o)}return e}function Ne(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))Ne(t)}return e}function Sn(e,t){let n=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(n)||n<=0)throw new ne([{field:t,message:"must be a positive unix-seconds integer"}]);return n}function vn(e){if(e?.now==null)throw new ne([{field:"opts.now",message:"explicit reference time is required for live grant construction"}]);return Sn(e.now,"opts.now")}function ho(e){return new Date(e*1e3).toISOString()}function yo(e,t){let n=e.actions.every(r=>st(r));return["ORACLE \u2014 CONNECT AGENT (unsigned grant, you sign it, we never do)","=================================================================",`Grant ID:      ${t}`,`Version:       ${Oe}`,`Chain:         ${e.chainId}`,`Agent:         ${e.agentAddress}`,`Your account:  ${e.accountAddress}`,`Actions:       ${e.actions.join(", ")}`,`Targets:       ${e.targets.length?e.targets.join(", "):"(none \u2014 read/simulate only)"}`,`Max value:     ${e.maxValueWei} wei`,`Max gas:       ${e.maxGasWei} wei`,`Max slippage:  ${e.maxSlippageBps} bps`,`Expires:       ${ho(e.expiresAt)} (unix ${e.expiresAt})`,`Nonce:         ${e.nonce}`,`Revocation:    ${e.revocationKey}`,"-----------------------------------------------------------------",n?"Scope: read/simulate only \u2014 this grant cannot move funds.":"Scope: includes state-changing actions bounded by the caps above.","Self-custodial: this payload is UNSIGNED and contains public data only.","Sign the bytes below with YOUR wallet; Oracle never holds your keys."].join(`
+`)}function En(e={},t={}){if(e==null||typeof e!="object"||Array.isArray(e))throw new ne([{field:"request",message:"request must be a plain object"}]);let n=vn(t),{ttlSeconds:r,...o}=e,i={...o};if(r!=null){if(i.expiresAt!=null)throw new ne([{field:"ttlSeconds",message:"pass either ttlSeconds or expiresAt, not both"}]);let l=Sn(r,"ttlSeconds");i.expiresAt=n+l}let s=He(i,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),c=Ne({kind:yn,version:Oe,grant:s});return Q(c)}function An(e={},t={}){let n=vn(t),r=e&&e.kind===yn?e.grant:e,o=He(r,{now:n,allowWildcardActions:t.allowWildcardActions===!0}),i=ct(o),s=je(o),c=Buffer.from(i,"utf8"),l=Ne({kind:lo,unsigned:!0,payload:Ne({version:Oe,grantId:s,grant:o,canonical:i}),signing:Ne({scheme:uo,message:i,bytesHex:`0x${c.toString("hex")}`,byteLength:c.length,sha256:s}),render:yo(o,s)});return Q(l)}var ve=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked",INVALID:"invalid"});function xn(e){if(e==null)return[];if(Array.isArray(e))return e;if(e instanceof Map)return[...e.values()];if(typeof e[Symbol.iterator]=="function")return[...e];throw new TypeError("grant store must be an array, Map, or iterable of grant records")}function bo(e){return e&&typeof e=="object"&&!Array.isArray(e)&&e.grant!=null?{grant:e.grant,revoked:e.revoked===!0||e.revokedAt!=null}:{grant:e,revoked:!1}}function ut(e){let t=Number(typeof e=="string"?e.trim():e);if(!Number.isSafeInteger(t)||t<0)throw new TypeError("an explicit unix-seconds `now` is required (deterministic liveness, no wall-clock fallback)");return t}function wo(e,t,n){if(e==null)return!1;if(typeof e=="function")return e(t,n)===!0;let r=[t,n.revocationKey];return e instanceof Set?r.some(o=>e.has(o)):Array.isArray(e)?r.some(o=>e.includes(o)):typeof e.has=="function"?r.some(o=>e.has(o)):!1}function kn(e,{now:t,revoked:n}={}){let r=ut(t),{grant:o,revoked:i}=bo(e),{ok:s,grant:c}=at(o);if(!s)return{status:ve.INVALID,id:null,grant:null};let l=je(c);return i||wo(n,l,c)?{status:ve.REVOKED,id:l,grant:c}:hn(c,r)?{status:ve.EXPIRED,id:l,grant:c}:{status:ve.ACTIVE,id:l,grant:c}}function In(e,{now:t,revoked:n,agentAddress:r,accountAddress:o,chainId:i}={}){let s=ut(t),c=r!=null?String(r).trim().toLowerCase():null,l=o!=null?String(o).trim().toLowerCase():null,d=i!=null?Number(i):null,a=[];for(let p of xn(e)){let{status:h,id:u,grant:m}=kn(p,{now:s,revoked:n});h===ve.ACTIVE&&(c!=null&&m.agentAddress!==c||l!=null&&m.accountAddress!==l||d!=null&&m.chainId!==d||a.push(Object.freeze({id:u,grant:m})))}return a.sort((p,h)=>p.id<h.id?-1:p.id>h.id?1:0),Q(Object.freeze(a))}function _n(e,t,{now:n,revoked:r}={}){let o=ut(n),i=String(t??"").trim().toLowerCase();if(!/^[0-9a-f]{64}$/.test(i))return null;for(let s of xn(e)){let c=kn(s,{now:o,revoked:r});if(c.status!==ve.INVALID&&c.id===i)return Q(Object.freeze({id:c.id,status:c.status,grant:c.grant}))}return null}import{Interface as Qn,getAddress as ui,id as Zn}from"ethers";Ee();W();var Wn="https://api.dexscreener.com",yc=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var Et=30;W();var wc=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),At=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),xt=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});Ee();Ee();var Ge=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);W();Ee();var Kn=new Qn(["function decimals() view returns (uint8)","function symbol() view returns (string)"]),Gn=new Qn(["function isApprovedForAll(address owner, address operator) view returns (bool)","function name() view returns (string)"]),di=Zn("Approval(address,address,uint256)"),Gc=Zn("ApprovalForAll(address,address,bool)"),pi=1e4,fi=2e5,mi=Object.freeze({"0x1111111254eeb25477b68fb85ed929f73a960582":"1inch v5 Router","0x111111125421ca6dc452d289314280a0f8842a65":"1inch v6 Router","0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45":"Uniswap Universal Router","0x3fc91a3afd70395cd496c647d5a6cc9d4b2b7fad":"Uniswap Universal Router","0x000000000022d473030f116ddee9f6b43ac78ba3":"Permit2","0xe592427a0aece92de3edee1f18e0157c05861564":"Uniswap v3 Router","0x7a250d5630b4cf539739df2c5dacb4c659f2488d":"Uniswap v2 Router","0xdef1c0ded9bec7f1a1670819833240f027b25eff":"0x Exchange Proxy","0x2626664c2603336e57b271c5c0b26f421741e481":"Uniswap SwapRouter02 (Base)","0x6131b5fae19ea4f9d964eac0408e4408b66337b5":"KyberSwap Meta Aggregator","0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48":"USDC (token contract)"}),hi=Object.freeze([{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"},{address:"0x1111111254eeb25477b68fb85ed929f73a960582",label:"1inch v5 Router"},{address:"0x111111125421ca6dc452d289314280a0f8842a65",label:"1inch v6 Router"},{address:"0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45",label:"Uniswap Universal Router"},{address:"0xe592427a0aece92de3edee1f18e0157c05861564",label:"Uniswap v3 Router"},{address:"0x7a250d5630b4cf539739df2c5dacb4c659f2488d",label:"Uniswap v2 Router"},{address:"0xdef1c0ded9bec7f1a1670819833240f027b25eff",label:"0x Exchange Proxy"},{address:"0x2626664c2603336e57b271c5c0b26f421741e481",label:"Uniswap SwapRouter02"}]),yi=Object.freeze([{address:"0x1e0049783f008a0085193e00003d00cd54003c71",label:"OpenSea Seaport Conduit"},{address:"0x00000000000000adc04c56bf30ac9d3c0aaf14dc",label:"Seaport 1.5"},{address:"0x0000000000000068f116a894984e2db1123eb395",label:"Seaport 1.6"},{address:"0x00000000000001ad428e4906ae43d8f9852d0dd6",label:"Seaport 1.4"},{address:"0x000000000000ad05ccc4f10045630fb830b95127",label:"Blur Marketplace"},{address:"0x00000000000000000000000000000000000000a5",label:"Blur Execution Delegate"},{address:"0xf42aa99f011a1fa7cda90e5e98b277e306bca83e",label:"Rarible Transfer Proxy"},{address:"0x000000000022d473030f116ddee9f6b43ac78ba3",label:"Permit2"}]),bi=Object.freeze({1:[{address:"0xbc4ca0eda7647a8ab7c2061c2e118a18a936f13d",name:"Bored Ape Yacht Club"},{address:"0x60e4d786628fea6478f785a6d7e704777c86a7c6",name:"Mutant Ape Yacht Club"},{address:"0xed5af388653567af2f388e6224dc7c4b3241c544",name:"Azuki"},{address:"0x8a90cab2b38dba80c64b7734e58ee1db38b8992e",name:"Doodles"},{address:"0x49cf6f5d44e70224e2e23fdcdd2c053f30ada28b",name:"CloneX"},{address:"0x23581767a106ae21c074b2276d25e5c3e136a68b",name:"Moonbirds"}]}),wi=Object.freeze({1:[{address:"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",symbol:"USDC",decimals:6},{address:"0xdac17f958d2ee523a2206206994597c13d831ec7",symbol:"USDT",decimals:6},{address:"0x6b175474e89094c44da98b954eedeac495271d0f",symbol:"DAI",decimals:18},{address:"0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2",symbol:"WETH",decimals:18},{address:"0x2260fac5e5542a773aa44fbcfedf7c193bc2c599",symbol:"WBTC",decimals:8}],8453:[{address:"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],42161:[{address:"0xaf88d065e77c8cc2239327c5edb3a432268e5831",symbol:"USDC",decimals:6},{address:"0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9",symbol:"USDT",decimals:6},{address:"0x82af49447d8a07e3bd95bd0d56f35241523fbab1",symbol:"WETH",decimals:18}],10:[{address:"0x0b2c639c533813f4aa9d7837caf62653d097ff85",symbol:"USDC",decimals:6},{address:"0x4200000000000000000000000000000000000006",symbol:"WETH",decimals:18}],137:[{address:"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",symbol:"USDC",decimals:6},{address:"0xc2132d05d31c914a87c6611c10748aeb04b58e8f",symbol:"USDT",decimals:6}]}),gi=(1n<<256n)-1n,Si=gi/2n,vi=4320*60*60*1e3,Ei=360*60*1e3,Ai=600*1e3,xi=45*1e3,ki=512,Ii=128,Yn=new Map,kt=new Map,Jn=new Map;function Ae(e){return e?.cache===!1?!1:!e?.fetchImpl||e.cache===!0}function _t(e,t,n){let r=e.get(t);return r?Date.now()-r.at>n?(e.delete(t),null):r:null}function Ye(e,t,n,r){for(e.delete(t),e.set(t,{at:Date.now(),value:n});e.size>r;){let o=e.keys().next();if(o.done)break;e.delete(o.value)}}function _i(e,t){try{return ui(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Ti(e){return`0x${e.slice(2).toLowerCase().padStart(64,"0")}`}function Xn(e){return`0x${String(e).slice(-40).toLowerCase()}`}function Ci({unlimited:e,spenderLabel:t,lastActivityAt:n}){if(e)return"unlimited";if(!t)return"unknown-spender";if(n){let r=Date.parse(n);if(Number.isFinite(r)&&Date.now()-r>vi)return"stale"}return"scoped"}function Oi(e,t,n){if(n)return"UNLIMITED";if(t==null)return e.toString();let r=10n**BigInt(t),o=e/r,i=e%r;if(i===0n)return o.toLocaleString("en-US");let s=i.toString().padStart(t,"0").replace(/0+$/,"").slice(0,6);return`${o.toLocaleString("en-US")}${s?`.${s}`:""}`}async function Ni(e,t,n,r){let o=`${e}:${t}`,i=r?.get(o);if(i)return i;if(Ae(n)){let c=_t(Yn,o,Ei);if(c)return c.value}let s=(async()=>{let c=async p=>{try{let h=Kn.encodeFunctionData(p,[]),u=await oe(e,"eth_call",[{to:t,data:h},"latest"],n);return!u||u==="0x"?null:Kn.decodeFunctionResult(p,u)[0]}catch{return null}},[l,d]=await Promise.all([c("decimals"),c("symbol")]),a={decimals:l==null?null:Number(l),symbol:d==null?null:String(d).slice(0,24)};return Ae(n)&&Ye(Yn,o,a,ki),a})();return r?.set(o,s),s}async function Pi(e,t,n){let r=Math.min(Math.max(Number(n.lookbackBlocks)||pi,1),fi),o=await St(e,n);if(!Number.isFinite(o))throw new Error("chain head unavailable");let i=Math.max(0,o-r),s=await oe(e,"eth_getLogs",[{fromBlock:`0x${i.toString(16)}`,toBlock:"latest",topics:[di,Ti(t)]}],n);if(!Array.isArray(s))throw new Error("log scan returned no array");let c=new Map;for(let l of s){let d=String(l?.address||"").toLowerCase(),a=l?.topics?.[2];!d||!a||c.set(`${d}:${Xn(a)}`,{token:d,spender:Xn(a)})}return{pairs:[...c.values()],fromBlock:i,toBlock:o}}function Ri(e){return(wi[e]||[]).flatMap(n=>hi.map(r=>({token:n.address,spender:r.address,symbol:n.symbol,decimals:n.decimals})))}async function $i(e,t,n={}){let r=[],o="direct-probe",i=null,s=Ri(e),c=It(e),l=Ae(n)&&_t(kt,e,Ai)?.value===!1;if(s.length===0&&c.length===0&&l)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]};try{let d=await Pi(e,t,n);r=d.pairs,o="log-scan",i={fromBlock:d.fromBlock,toBlock:d.toBlock},Ae(n)&&Ye(kt,e,!0,64)}catch{if(Ae(n)&&Ye(kt,e,!1,64),r=s,r.length===0&&c.length===0)return{scan:{chainId:e,status:"unconfigured",method:o,error:"no Approval log access and no candidate token or collection set for this chain"},approvals:[]}}try{let d=new Map,p=(await re(r,n.concurrency||4,async u=>{try{let m=await zn({chainId:e,token:u.token,owner:t,spender:u.spender},n),b=BigInt(m.allowance);if(b<=0n)return null;let E=u.symbol?{symbol:u.symbol,decimals:u.decimals??null}:await Ni(e,u.token,n,d),_=b>=Si,C=mi[u.spender]||null;return{id:`${e}:${u.token}:${u.spender}`,chainId:e,standard:"erc20",token:u.token,tokenSymbol:E.symbol,decimals:E.decimals,spender:u.spender,spenderLabel:C,allowance:b.toString(),allowanceDisplay:Oi(b,E.decimals,_),unlimited:_,lastActivityAt:null,risk:Ci({unlimited:_,spenderLabel:C,lastActivityAt:null})}}catch{return null}})).filter(Boolean),h=await Ui(e,t,n);return{scan:{chainId:e,status:"ok",method:o,pairsProbed:r.length,collectionsProbed:It(e).length,...i||{}},approvals:[...p,...h]}}catch(d){return{scan:{chainId:e,status:"unavailable",method:o,error:String(d?.message||d).slice(0,200)},approvals:[]}}}async function Li(e,t,n,r,o){try{let i=Gn.encodeFunctionData("isApprovedForAll",[n,r]),s=await oe(e,"eth_call",[{to:t,data:i},"latest"],o);return!s||s==="0x"?null:!!Gn.decodeFunctionResult("isApprovedForAll",s)[0]}catch{return null}}function It(e){return(bi[e]||[]).flatMap(n=>yi.map(r=>({collection:n.address,collectionName:n.name,operator:r.address,operatorLabel:r.label})))}async function Ui(e,t,n){let r=It(e);return r.length===0?[]:(await re(r,n.concurrency||4,async i=>await Li(e,i.collection,t,i.operator,n)!==!0?null:{id:`${e}:${i.collection}:${i.operator}:all`,chainId:e,standard:"erc721",token:i.collection,tokenSymbol:i.collectionName,decimals:null,spender:i.operator,spenderLabel:i.operatorLabel,allowance:null,allowanceDisplay:"ALL ITEMS",unlimited:!0,lastActivityAt:null,risk:"operator-all"})).filter(Boolean)}async function er(e={},t={}){let n=_i(e.owner||e.address,"owner"),r=new Map(Ge.map(u=>[u.chainId,u])),o=Array.isArray(e.chainIds)&&e.chainIds.length?[...new Set(e.chainIds.map(Number))].filter(u=>r.has(u)):[...r.keys()],i=`${n}:${[...o].sort((u,m)=>u-m).join(",")}:${e.lookbackBlocks??""}`,s=Ae(t)&&!e.refresh;if(s){let u=_t(Jn,i,xi);if(u)return{...u.value,cached:!0,cachedAgeMs:Date.now()-u.at}}let c=await re(o,e.concurrency||3,u=>$i(u,n,{...t,lookbackBlocks:e.lookbackBlocks})),l=c.flatMap(u=>u.approvals),d=c.map(u=>u.scan),a=d.find(u=>u.method==="log-scan"&&u.toBlock),p=d.some(u=>u.method==="direct-probe"&&u.status==="ok"),h={provider:"approvals",operation:"scan",readOnly:!0,queriedAt:new Date().toISOString(),owner:n,scannedRange:a?`last ${a.toBlock-a.fromBlock} blocks`:p?"known routers, live allowance probe":null,approvals:l,scans:d,warnings:["Approval discovery is scoped. Log scanning is used where the endpoint permits it; otherwise a curated router set is probed directly. An empty result means nothing was found in that scope, not that the wallet is safe.","NFT operator approval (setApprovalForAll) is checked against a curated collection and marketplace set on supported chains only. A collection outside that set is not checked."]};return s&&Ye(Jn,i,h,Ii),{...h,cached:!1,cachedAgeMs:0}}import{getAddress as hs}from"ethers";W();Ee();W();import{types as Tt}from"node:util";function Je(e){if(!e||typeof e!="object"||Tt.isProxy(e)||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function $e(e,t){if(e==null||(typeof e=="object"||typeof e=="function")&&Tt.isProxy(e)||!Object.hasOwn(Object(e),t))return;let n=Object.getOwnPropertyDescriptor(Object(e),t);return n&&Object.hasOwn(n,"value")?n.value:void 0}function Z(e,t="provider response",n=0){if(n>64)throw new Error(`${t} exceeds the JSON nesting bound`);if(e===null||typeof e=="string"||typeof e=="boolean"||typeof e=="number"&&Number.isFinite(e))return e;if(Array.isArray(e)){if(Tt.isProxy(e)||e.length>1e5)throw new Error(`${t} contains an invalid array`);let o=new Array(e.length);for(let i=0;i<e.length;i+=1){let s=Object.getOwnPropertyDescriptor(e,String(i));if(!s||!Object.hasOwn(s,"value"))throw new Error(`${t} arrays must contain dense own data`);o[i]=Z(s.value,t,n+1)}return o}if(!Je(e))throw new Error(`${t} contains a non-JSON value`);let r=Object.create(null);for(let o of Object.keys(e)){let i=Object.getOwnPropertyDescriptor(e,o);if(!i||!Object.hasOwn(i,"value"))throw new Error(`${t} objects must contain own data`);r[o]=Z(i.value,t,n+1)}return r}var tr="mainnet-beta",Mi="https://api.mainnet-beta.solana.com",Ct="TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";function Bi(e={}){return String(e.rpcUrl||process.env.SOLANA_RPC_URL||Mi).trim()}function we(e,t="address"){let n=String(e||"").trim();if(!/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n))throw new Error(`solana-rpc: ${t} must be a base58 public key`);return n}function Fi(e,t){return t?[...e,{commitment:t}]:e}async function nr(e,t=[],n={}){let r=String(e||"");if(r==="sendTransaction"||r==="sendRawTransaction"||r==="requestAirdrop"||r==="requestAirDrop"||/airdrop/i.test(r)||/^send/i.test(r))throw new Error(`solana-rpc: ${r} refused \u2014 @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);let o=Z(await F(Bi(n),{method:"POST",body:{jsonrpc:"2.0",id:n.id||1,method:e,params:t},fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,maxResponseBytes:n.maxResponseBytes,sameOriginRedirectsOnly:n.sameOriginRedirectsOnly}),"solana-rpc response");if(!Je(o))throw new Error(`solana-rpc ${e}: invalid response envelope`);let i=$e(o,"error");if(i)throw new Error(`solana-rpc ${e}: ${$e(i,"message")||JSON.stringify(i)}`);if(!Object.hasOwn(o,"result"))throw new Error(`solana-rpc ${e}: missing result`);return $e(o,"result")}async function rr(e={},t={}){let n=we(e.address||e.owner,"address"),r=await nr("getBalance",Fi([n],e.commitment),t);return{provider:"solana-rpc",cluster:tr,address:n,lamports:String(r?.value??0),slot:r?.context?.slot??null,raw:r}}function qi(e={}){let t=e.account?.data?.parsed?.info||{},n=t.tokenAmount||{};return{pubkey:e.pubkey,mint:t.mint||null,owner:t.owner||null,amount:String(n.amount??"0"),decimals:n.decimals??null,uiAmount:n.uiAmount??null,uiAmountString:n.uiAmountString??null,raw:e}}async function Ot(e={},t={}){let n=we(e.owner||e.address,"owner"),r=e.mint?{mint:we(e.mint,"mint")}:{programId:we(e.programId||Ct,"token program")},o={encoding:"jsonParsed"};e.commitment&&(o.commitment=e.commitment);let i=await nr("getTokenAccountsByOwner",[n,r,o],t),s=Array.isArray(i?.value)?i.value.map(qi):[];return{provider:"solana-rpc",cluster:tr,owner:n,filter:r,slot:i?.context?.slot??null,accounts:s,raw:i}}W();var Di="mainnet",Hi="https://mempool.space/api",ji="https://mempool.space/testnet/api";function or(e={}){return String(e.network||process.env.BTC_NETWORK||Di).trim().toLowerCase()==="testnet"?"testnet":"mainnet"}function Vi(e={}){return e.baseUrl?String(e.baseUrl).replace(/\/$/,""):process.env.BTC_ESPLORA_URL?String(process.env.BTC_ESPLORA_URL).replace(/\/$/,""):or(e)==="testnet"?ji:Hi}function me(e,t="address"){let n=String(e||"").trim();if(!/^(bc1|tb1|bcrt1)[a-z0-9]{20,90}$/i.test(n)&&!/^[13mn2][a-km-zA-HJ-NP-Z1-9]{25,34}$/.test(n))throw new Error(`bitcoin-esplora: ${t} must look like a Bitcoin address`);return n}async function zi(e,t={}){let n=`${Vi(t)}${e.startsWith("/")?e:`/${e}`}`;return Z(await F(n,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"bitcoin-esplora response")}async function ir(e={},t={}){let n=me(e.address||e.addr,"address"),r=await zi(`/address/${n}`,t),o=r.chain_stats||{},i=r.mempool_stats||{},s=Number(o.funded_txo_sum||0)+Number(i.funded_txo_sum||0),c=Number(o.spent_txo_sum||0)+Number(i.spent_txo_sum||0);return{provider:"bitcoin-esplora",network:or(t),address:n,balanceSats:String(s-c),chainStats:o,mempoolStats:i,raw:r}}var sr="ORACLE_ALLOW_CUSTOM_PROVIDER_URL";function xe({provider:e,defaultUrl:t,hosts:n=[],url:r,strict:o=!1}){let s=(String(r??"").trim()||String(t)).replace(/\/$/,"");if(s===String(t).replace(/\/$/,""))return{baseUrl:s,trusted:!0,host:ar(t)};let c;try{c=new URL(s)}catch{throw new Error(`${e}: baseUrl must be an absolute http(s) URL`)}if(c.protocol!=="http:"&&c.protocol!=="https:")throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);let l=c.host;if(!l)throw new Error(`${e}: baseUrl must be an absolute http(s) URL`);if(new Set([ar(t),...n]).has(l)){let a=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(l);return c.protocol==="http:"&&!a?{baseUrl:s,trusted:!1,host:l,reason:"plaintext http downgrade"}:{baseUrl:s,trusted:!0,host:l}}if(String(process.env[sr]||"")==="1")return{baseUrl:s,trusted:!1,host:l};if(o)throw new Error(`${e}: refusing to call non-allowlisted host ${l} (set ${sr}=1 to permit it)`);return{baseUrl:s,trusted:!1,host:l}}function ar(e){let t=new URL(String(e));if(t.protocol!=="http:"&&t.protocol!=="https:")throw new Error("unsupported protocol");return t.host}function ge(e,t,n){let r={...e};if(!n)return r;for(let[o,i]of Object.entries(t||{}))i&&(r[o]=i);return r}function Nt(e={}){return String(e.baseUrl||process.env.BTC_META_API_URL||process.env.UNISAT_API_URL||"").trim().replace(/\/$/,"")}var Wi=["open-api.unisat.io","open-api-testnet.unisat.io","api.bestinslot.xyz","api.hiro.so"];function Ki(e={}){let t=e.apiKey||process.env.UNISAT_API_KEY||process.env.BESTINSLOT_API_KEY||process.env.BTC_META_API_KEY||"",n=!1;try{let r=Nt(e);if(r){let o=new URL(r).host,i=new URL(r).protocol,s=/^(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/i.test(o);n=Wi.includes(o)&&(i==="https:"||s)}}catch{n=!1}return ge({accept:"application/json","user-agent":"oracle-btc-meta/0.1"},{authorization:t?`Bearer ${t}`:"","x-api-key":t},n)}async function cr(e,t={}){let r=await(t.fetchImpl||fetch)(e,{method:"GET",headers:Ki(t),signal:AbortSignal.timeout(t.timeoutMs??12e3)}),o=await r.text(),i;try{i=JSON.parse(o)}catch{i=o}if(!r.ok)throw new Error(`bitcoin-meta GET ${e}: HTTP ${r.status} ${String(o).slice(0,160)}`);return i}async function lr(e={},t={}){let n=me(e.address||e.addr,"address"),r=Nt(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:"no indexer configured (set BTC_META_API_URL or vendor API key env)"};let o=[`${r}/v1/indexer/address/${n}/runes/balance-list?start=0&limit=100`,`${r}/v1/runes/address/${n}`,`${r}/runes/balance/${n}`,`${r}/address/${n}/runes`],i=null;for(let s of o)try{let c=await cr(s,t),l=Gi(c);return{provider:"bitcoin-meta",address:n,ok:!0,count:l.length,balances:l,source:s}}catch(c){i=c}return{provider:"bitcoin-meta",address:n,ok:!1,balances:[],error:String(i?.message||i||"all indexer paths failed")}}function Gi(e){let t=e?.data?.detail||e?.data?.list||e?.data||e?.balances||e?.results||e?.runes||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({rune:r.rune||r.runeid||r.runeId||r.spacedRune||r.name||r.ticker||null,runeId:r.runeid||r.runeId||r.id||null,amount:String(r.amount??r.balance??r.total??r.qty??"0"),symbol:r.symbol||null,divisibility:r.divisibility??r.div??null,raw:r}))}async function Xe(e={},t={}){let n=me(e.address||e.addr,"address"),r=Nt(t);if(!r)return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:"no indexer configured \u2014 address-indexed lookups need a keyed indexer (BTC_META_API_URL + UNISAT_API_KEY / BESTINSLOT_API_KEY). ordinals.com recursive is keyless but has no address index.",unknownNotEmpty:!0,keylessAlternatives:["btc_inscription_info (by inscription id)","btc_meta_health"]};let o=Math.min(Number(e.limit||50),200),i=[`${r}/v1/indexer/address/${n}/inscription-data?cursor=0&size=${o}`,`${r}/v1/inscriptions/address/${n}?limit=${o}`,`${r}/address/${n}/inscriptions?limit=${o}`],s=null;for(let c of i)try{let l=await cr(c,t),d=Yi(l);return{provider:"bitcoin-meta",address:n,ok:!0,count:d.length,inscriptions:d,source:c}}catch(l){s=l}return{provider:"bitcoin-meta",address:n,ok:!1,inscriptions:[],error:String(s?.message||s||"all indexer paths failed")}}function Yi(e){let t=e?.data?.inscription||e?.data?.detail||e?.data?.list||e?.data||e?.inscriptions||e?.results||(Array.isArray(e)?e:[]);return(Array.isArray(t)?t:[]).map(r=>({id:r.inscriptionId||r.id||r.inscription_id||null,number:r.inscriptionNumber??r.number??null,sat:r.sat||r.satoshi||null,contentType:r.contentType||r.content_type||null,utxo:r.utxo||r.output||(r.txid!=null?`${r.txid}:${r.vout??r.n}`:null),raw:r}))}W();var Ji="https://api.hyperliquid.xyz/info",Xi="https://api.hyperliquid-testnet.xyz/info";function Qi({testnet:e,baseUrl:t}={}){if(t)return t.replace(/\/$/,"").endsWith("/info")?t:`${t.replace(/\/$/,"")}/info`;if(process.env.HL_INFO_URL)return process.env.HL_INFO_URL;if(process.env.HL_API_URL){let n=process.env.HL_API_URL.replace(/\/$/,"");return n.endsWith("/info")?n:`${n}/info`}return e||process.env.HL_TESTNET==="1"?Xi:Ji}async function Le(e,t={}){if(!e||!e.type)throw new Error("hlInfo requires body.type");let n=Qi(t);return Z(await F(n,{method:"POST",body:e,fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs,maxResponseBytes:t.maxResponseBytes,sameOriginRedirectsOnly:t.sameOriginRedirectsOnly}),"hyperliquid info response")}async function ur(e={}){return Le({type:"allMids"},e)}async function dr(e,t={}){if(!e)throw new Error("hlClearinghouse requires user address");return Le({type:"spotClearinghouseState",user:e},t)}async function pr(e,t={}){if(!e)throw new Error("hlUserState requires user");return Le({type:"clearinghouseState",user:e},t)}var Zi=/^0x[0-9a-fA-F]{40}$/;function es(e,t){let n=String(e||"").trim();if(!Zi.test(n))throw new Error(`hl-vaults: ${t} must be a 0x EVM address`);return n.toLowerCase()}function ts(e){return e.hlInfo||Le}function ns(e){return{...e,exec:!1,execution:"read-only",armed:!1}}async function fr(e={},t={}){let n=es(e.user||e.address,"user"),r=await ts(t)({type:"userVaultEquities",user:n},t),o=(Array.isArray(r)?r:[]).map(i=>({vaultAddress:i.vaultAddress??i.address??null,equity:i.equity??i.vaultEquity??null}));return ns({provider:"hl-vaults",user:n,count:o.length,positions:o,raw:r})}W();var rs="https://coins.llama.fi";function os(e={}){return(e.baseUrl||process.env.DEFILLAMA_COINS_URL||rs).replace(/\/$/,"")}async function Pt(e,t={}){if(!Array.isArray(e)||!e.length)throw new Error("llamaPrices requires coins[]");let n=e.map(encodeURIComponent).join(",");return F(`${os(t)}/prices/current/${n}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})}W();var is=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood",2741:"abstract",solana:"solana"}),ss=1e3,as=6e4,mr=new Map;function cs(e){if(e==null)return null;let t=typeof e=="string"&&!/^\d+$/.test(e)?e.toLowerCase():Number(e);return is[t]??null}function ls(e,t){let n=String(t??"").trim();return n?e==="solana"?/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(n)?n:null:/^0x[0-9a-fA-F]{40}$/.test(n)?n.toLowerCase():null:null}function Ue(e,t){let n=cs(e),r=n?ls(n,t):null;return n&&r?`${n}:${r}`:null}function us(e,t,n){let r=null;for(let o of Array.isArray(e)?e:[]){if(String(o?.baseToken?.address??"").toLowerCase()!==t.toLowerCase())continue;let s=Number(o?.priceUsd),c=Number(o?.liquidity?.usd);!Number.isFinite(s)||s<=0||!Number.isFinite(c)||c<n||(!r||c>r.liquidityUsd)&&(r={priceUsd:s,liquidityUsd:c,pairAddress:o?.pairAddress??null,dexId:o?.dexId??null,source:"dexscreener",provisional:!0})}return r}async function hr(e=[],t={}){let n=typeof t.now=="function"?t.now():Date.now(),r=Number.isFinite(t.cacheTtlMs)?t.cacheTtlMs:as,o=Number.isFinite(t.minLiquidityUsd)?t.minLiquidityUsd:ss,i=(t.baseUrl||process.env.DEXSCREENER_API_URL||Wn).replace(/\/$/,""),s=new Map,c=[],l=new Map;for(let p of Array.isArray(e)?e:[]){let h=Ue(p?.chain??p?.chainId,p?.address);if(!h||s.has(h))continue;let u=mr.get(h);if(u&&u.expiresAt>n){u.value?s.set(h,u.value):s.set(h,null);continue}let[m,b]=h.split(":");l.has(m)||l.set(m,[]),l.get(m).push(b)}let d=[...s.keys()].length+[...l.values()].reduce((p,h)=>p+h.length,0),a=!0;for(let[p,h]of l)for(let u=0;u<h.length;u+=Et){let m=h.slice(u,u+Et),b=null;try{b=await F(`${i}/tokens/v1/${p}/${m.join(",")}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??1e4})}catch(_){a=!1,c.push(`${p}: ${String(_?.message||_).slice(0,120)}`);continue}let E=Array.isArray(b)?b:Array.isArray(b?.pairs)?b.pairs:[];for(let _ of m){let C=`${p}:${_}`,g=us(E,_,o);mr.set(C,{value:g,expiresAt:n+r}),s.set(C,g)}}for(let[p,h]of s)h===null&&s.delete(p);return{prices:s,requested:d,resolved:s.size,reachable:a,failures:c}}W();var yr=/[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF]/g,ds=/[<>&`*_~[\]()|\\]/g,ps=/[\u0000-\u001F\u007F]/g;function ke(e,{max:t=32,fallback:n=""}={}){return e==null?n:String(e).normalize("NFKC").replace(yr,"").replace(ps,"").replace(ds,"").replace(/\s+/g," ").trim().slice(0,t).trim()||n}function Rt(e){if(e==null)return!1;let t=String(e);return t.search(yr)!==-1?!0:/[\u0400-\u04FF\u0370-\u03FF]/.test(t)&&/[A-Za-z]/.test(t)}var br=Object.freeze({1:"https://eth.blockscout.com",10:"https://explorer.optimism.io",137:"https://polygon.blockscout.com",324:"https://zksync.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com",534352:"https://scrollscan.com"}),fs=Object.freeze(["block_number","index"]),El=new Set([...fs,"items_count","value","hash","inserted_at","fee"]);function ms(e,t={}){let n=Number(e),r=t.baseUrl||br[n];if(!r)throw new Error(`Blockscout not configured for chainId ${n}`);return r.replace(/\/$/,"")}function wr(e){return!!br[Number(e)]}async function gr(e={},t={}){if(!e.address)throw new Error("address required");let n=Number(e.chainId||1),r=`${ms(n,t)}/api/v2/addresses/${encodeURIComponent(e.address)}/token-balances`,o=Z(await F(r,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??18e3,headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}}),"blockscout token balances response");return Array.isArray(o)?o:[]}function Sr(e=[],{fungibleOnly:t=!0}={}){let n=[];for(let r of e){if(!r||typeof r!="object")continue;let o=r.token&&typeof r.token=="object"?r.token:{},i=String(o.type||r.token_type||"").toUpperCase();if(t&&i&&!i.includes("ERC-20")&&i!=="ERC20")continue;let s=o.address_hash||o.address||r.token_address||r.tokenAddress||null;if(!s||typeof s!="string")continue;let c=String(r.value??r.balance??"0").replace(/^0x/i,"");if(!/^\d+$/.test(c)||c==="0")continue;let l=o.decimals??r.decimals;typeof l=="string"&&/^\d+$/.test(l)&&(l=Number(l)),(typeof l!="number"||!Number.isInteger(l)||l<0||l>36)&&(l=18);let d=ke(o.symbol||o.name,{max:32,fallback:"TOKEN"}),a=ke(o.name,{max:80,fallback:""})||null;n.push({address:s.toLowerCase().startsWith("0x")?s:`0x${s}`,symbol:d,name:a,decimals:l,amountRaw:c,tokenType:i||"ERC-20",source:"blockscout",verification:"indexer-reported",displaySuspicious:Rt(o.symbol)||Rt(o.name)||void 0})}return n}var vr=80,Er=600,ys="TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb",xr=Object.freeze({ETH:"coingecko:ethereum",POL:"coingecko:polygon-ecosystem-token",BNB:"coingecko:binancecoin",AVAX:"coingecko:avalanche-2",HYPE:"coingecko:hyperliquid",USDT0:"coingecko:tether",SOL:"coingecko:solana",BTC:"coingecko:bitcoin"});function ue(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,...e[t]||{}}}function Qe(e,...t){for(let n of t){let r=String(e?.[n]||"").trim();if(r)return r}return null}function Ar(e){if(!e)return null;try{return hs(String(e).trim().toLowerCase())}catch{throw new Error("portfolio: EVM address must be a valid 20-byte address")}}function Ut(e={},t=process.env){let n=e.addresses||{},r=Ar(n.evm||e.evmAddress||Qe(t,"ORACLE_EVM_ADDRESS","ORACLE_DEFAULT_ADDRESS","MAD_OPERATOR_ADDRESS")),o=n.solana||e.solanaAddress||Qe(t,"ORACLE_SOLANA_ADDRESS"),i=n.bitcoin||e.bitcoinAddress||Qe(t,"ORACLE_BITCOIN_ADDRESS"),s=Ar(n.hyperliquid||e.hyperliquidAddress||Qe(t,"ORACLE_HYPERLIQUID_ADDRESS")||r);return{evm:r,solana:o?we(o,"portfolio Solana address"):null,bitcoin:i?me(i,"portfolio Bitcoin address"):null,hyperliquid:s}}function Me(e,t){let n=BigInt(String(e||"0")),r=Number(t);if(!Number.isInteger(r)||r<0||r>36)throw new Error("portfolio: decimals must be an integer from 0 to 36");if(r===0)return n.toString();let o=n<0n,i=o?-n:n,s=10n**BigInt(r),c=i/s,l=String(i%s).padStart(r,"0").replace(/0+$/,"");return`${o?"-":""}${c}${l?`.${l}`:""}`}function he(e){let t=Number(e);return Number.isFinite(t)?t:null}function Be(e){return Number.isFinite(e)?Number(e.toFixed(2)):null}function te(e){let t=Number(e);return Number.isFinite(t)&&t!==0}function kr(e,t){let n=xr[t],r=n?e?.coins?.[n]:null,o=Number(r?.price);return{key:n||null,priceUsd:Number.isFinite(o)?o:null,timestamp:r?.timestamp??null,confidence:r?.confidence??null}}function bs(e){let t=new Map;for(let n of e)if(n?.ok)for(let r of n.data?.accounts||[]){let o=BigInt(String(r.amount||"0"));if(o===0n||!r.mint)continue;let i=`${r.mint}:${r.decimals??"unknown"}`,s=t.get(i)||{mint:r.mint,amountRaw:0n,decimals:r.decimals??null,programs:new Set,accounts:0};s.amountRaw+=o,s.accounts+=1,n.program&&s.programs.add(n.program),t.set(i,s)}return[...t.values()].map(n=>{let r=n.amountRaw.toString(),o=n.decimals==null?null:Me(r,n.decimals),i=n.decimals===0&&n.amountRaw===1n;return{mint:n.mint,amountRaw:r,amount:o,decimals:n.decimals,tokenPrograms:[...n.programs],accountCount:n.accounts,verification:"unverified",classification:i?"collectible-candidate":"fungible-or-unclassified",priceUsd:null,usdValue:null}})}function $t(e,t){return{family:e,status:"unsupported",reason:t}}function Lt(e,t){if(!e||e.status!=="ok")return e;let n=kr(t,e.symbol),r=he(e.amount),o=r!=null&&n.priceUsd!=null?Be(r*n.priceUsd):null;return{...e,price:n,usdValue:o}}async function Ir(e={},t={}){let n=new Date().toISOString(),r=Ut(e,t.env||process.env),o=e.includePrices!==!1,i=e.includeTokens!==!1,s=e.includeCollectibles!==!1,c=new Map(Ge.map(f=>[f.chainId,f])),l=Array.isArray(e.evmChainIds)&&e.evmChainIds.length?[...new Set(e.evmChainIds.map(Number))]:[...c.keys()],d=[...new Set(Object.values(xr))],a=o?V(()=>Pt(d,ue(t,"prices"))):Promise.resolve({ok:!1,ms:0,error:"price lookup disabled"}),p=re(l,e.concurrency||5,async f=>{let w=c.get(f);if(!w)return{family:"evm",chainId:f,name:null,address:r.evm,status:"unsupported",error:"chainId is not in Oracle's configured EVM registry"};if(!r.evm)return{family:"evm",chainId:f,name:w.name,address:null,status:"not-configured",error:"set ORACLE_EVM_ADDRESS or pass addresses.evm"};let x={...ue(t,"evm"),rpcUrl:e.rpcUrls?.[f]||t.evm?.rpcUrls?.[f]},I=await V(()=>vt(f,r.evm,x)),T=w.nativeCurrency?.decimals??18,$=w.nativeCurrency?.symbol||"NATIVE",L=I.ok?I.data.balanceWei:null,q={status:i?"unavailable":"not-requested",assets:[],reason:i?"EVM JSON-RPC cannot enumerate wallet tokens without an address indexer":"token discovery disabled"};if(i&&wr(f)){let O=await V(()=>gr({chainId:f,address:r.evm},{...ue(t,"blockscout"),timeoutMs:t.timeoutMs??18e3}));O.ok?q={status:"ok",assets:Sr(O.data,{fungibleOnly:!0}).map(it=>{let Xr=Me(it.amountRaw,it.decimals);return{...it,amount:Xr,priceUsd:null,usdValue:null}}),reason:null,source:"blockscout",latencyMs:O.ms}:q={status:"unavailable",assets:[],reason:O.error||"blockscout token-balances failed",source:"blockscout",latencyMs:O.ms}}return{family:"evm",chainId:f,name:w.name,address:r.evm,status:I.ok?"ok":"unavailable",...I.ok?{}:{error:I.error},latencyMs:I.ms,native:I.ok?{status:"ok",symbol:$,amountRaw:L,decimals:T,amount:Me(L,T)}:{status:"unavailable",symbol:$,error:I.error},fungibleTokens:q,collectibles:{status:s?"unavailable":"not-requested",assets:[],reason:s?"EVM JSON-RPC cannot enumerate wallet NFTs without an address indexer":"collectible discovery disabled"},source:q.source==="blockscout"?"evm-rpc+blockscout":"evm-rpc"}}),h=(async()=>{if(!r.solana)return{family:"solana",name:"Solana Mainnet",address:null,status:"not-configured",error:"set ORACLE_SOLANA_ADDRESS or pass addresses.solana"};let f=ue(t,"solana"),w=await V(()=>rr({address:r.solana},f)),x=i||s?await Promise.all([V(()=>Ot({owner:r.solana,programId:Ct},f)).then(q=>({...q,program:"spl-token"})),V(()=>Ot({owner:r.solana,programId:ys},f)).then(q=>({...q,program:"token-2022"}))]):[],I=bs(x),T=I.filter(q=>q.classification==="collectible-candidate"),$=I.filter(q=>q.classification!=="collectible-candidate"),L=x.filter(q=>!q.ok).map(q=>q.error);return{family:"solana",name:"Solana Mainnet",address:r.solana,status:w.ok||x.some(q=>q.ok)?"ok":"unavailable",native:w.ok?{status:"ok",symbol:"SOL",amountRaw:w.data.lamports,decimals:9,amount:Me(w.data.lamports,9),slot:w.data.slot}:{status:"unavailable",symbol:"SOL",error:w.error},fungibleTokens:{status:i?L.length===x.length?"unavailable":L.length?"partial":"ok":"not-requested",assets:i?$:[],errors:L,note:"SPL accounts are unverified until a metadata/indexer source confirms symbol and spam status"},collectibles:{status:s?L.length===x.length?"unavailable":"partial":"not-requested",assets:s?T:[],errors:L,note:"decimals=0 and amount=1 is only a collectible candidate, not verified NFT metadata"},source:"solana-rpc"}})(),u=(async()=>{if(!r.bitcoin)return{family:"bitcoin",name:"Bitcoin Mainnet",address:null,status:"not-configured",error:"set ORACLE_BITCOIN_ADDRESS or pass addresses.bitcoin"};let f=ue(t,"bitcoin"),w=ue(t,"bitcoinMeta"),[x,I,T]=await Promise.all([V(()=>ir({address:r.bitcoin},f)),i?V(()=>lr({address:r.bitcoin},w)):Promise.resolve({ok:!1,ms:0,error:"token discovery disabled"}),s?V(()=>Xe({address:r.bitcoin},w)):Promise.resolve({ok:!1,ms:0,error:"collectible discovery disabled"})]),$=I.ok?I.data:null,L=T.ok?T.data:null;return{family:"bitcoin",name:"Bitcoin Mainnet",address:r.bitcoin,status:x.ok||$?.ok||L?.ok?"ok":"unavailable",native:x.ok?{status:"ok",symbol:"BTC",amountRaw:x.data.balanceSats,decimals:8,amount:Me(x.data.balanceSats,8)}:{status:"unavailable",symbol:"BTC",error:x.error},fungibleTokens:{status:i?$?.ok?"ok":"unavailable":"not-requested",assets:$?.balances||[],error:$?.ok?null:$?.error||I.error,verification:"indexer-reported"},collectibles:{status:s?L?.ok?"ok":"unavailable":"not-requested",assets:L?.inscriptions||[],error:L?.ok?null:L?.error||T.error,unknownNotEmpty:!!L?.unknownNotEmpty,verification:"indexer-reported"},source:"bitcoin-esplora+bitcoin-meta"}})(),m=(async()=>{if(!r.hyperliquid)return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:null,status:"not-configured",error:"set ORACLE_HYPERLIQUID_ADDRESS or pass addresses.hyperliquid"};let f=ue(t,"hyperliquid"),[w,x,I,T]=await Promise.all([V(()=>dr(r.hyperliquid,f)),V(()=>pr(r.hyperliquid,f)),V(()=>ur(f)),V(()=>fr({user:r.hyperliquid},f))]),$=(T.ok&&Array.isArray(T.data?.positions)?T.data.positions:[]).filter(O=>O.vaultAddress&&te(O.equity)).map(O=>({vaultAddress:String(O.vaultAddress),equityUsd:he(O.equity)})),L=(w.ok&&Array.isArray(w.data?.balances)?w.data.balances:[]).filter(O=>te(O.total)||te(O.hold)).map(O=>({coin:O.coin||null,total:String(O.total??"0"),hold:String(O.hold??"0"),priceUsd:null,usdValue:null})),q=(x.ok&&Array.isArray(x.data?.assetPositions)?x.data.assetPositions:[]).map(O=>O.position||O).filter(O=>te(O.szi)).map(O=>({coin:O.coin||null,size:String(O.szi??"0"),entryPrice:O.entryPx??null,positionValueUsd:O.positionValue??null,unrealizedPnlUsd:O.unrealizedPnl??null,liquidationPrice:O.liquidationPx??null}));return{family:"hyperliquid",name:"Hyperliquid HyperCore",address:r.hyperliquid,status:w.ok||x.ok?"ok":"unavailable",spot:{status:w.ok?"ok":"unavailable",balances:L,error:w.ok?null:w.error},perps:{status:x.ok?"ok":"unavailable",accountValueUsd:x.data?.marginSummary?.accountValue??null,withdrawableUsd:x.data?.withdrawable??null,positions:q,error:x.ok?null:x.error},vaults:{status:T.ok?"ok":"unavailable",positions:$,error:T.ok?null:T.error},mids:I.ok?I.data:{},source:"hyperliquid-info"}})(),[b,E,_,C,g]=await Promise.all([p,h,u,m,a]),y=g.ok?g.data:null,v=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avax",81457:"blast",534352:"scroll",59144:"linea",324:"era"}),S=[];for(let f of b){if(f.family!=="evm"||f.fungibleTokens?.status!=="ok")continue;let w=v[f.chainId];if(w)for(let x of f.fungibleTokens.assets||[])x.address&&S.push(`${w}:${String(x.address).toLowerCase()}`)}let A=null;if(o&&S.length){let f=[...new Set(S)],w={coins:{}},x=!1;for(let I=0;I<f.length;I+=vr){let T=f.slice(I,I+vr),$=await V(()=>Pt(T,ue(t,"prices")));$.ok&&$.data?.coins&&(x=!0,Object.assign(w.coins,$.data.coins))}x&&(A=w)}let R=Object.freeze({1:new Set(["0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","0xdac17f958d2ee523a2206206994597c13d831ec7","0x6b175474e89094c44da98b954eedeac495271d0f","0x4c9edd5852cd905f086c759e8383e09bff1e68b3"]),10:new Set(["0x0b2c639c533813f4aa9d7837caf62653d097ff85","0x94b008aa00579c1307b0ef2c499ad98a8ce58e58","0xda10009cbd5d07dd0cecc66161fc93d7c9000da1"]),56:new Set(["0x8ac76a51cc950d9822d68b83fe1ad97b32cd580d","0x55d398326f99059ff775485246999027b3197955","0x1af3f329e8be154074d8769d1ffa4ee058b1dbc3"]),137:new Set(["0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","0xc2132d05d31c914a87c6611c10748aeb04b58e8f","0x8f3cf7ad23cd3cadbd9735aff958023239c6a063"]),8453:new Set(["0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xd9aaec86b65d86f6a7b5b1b0c42ffa531710b6ca"]),42161:new Set(["0xaf88d065e77c8cc2239327c5edb3a432268e5831","0xff970a61a04b1ca14834a43f5de4533ebddb5cc8","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0xda10009cbd5d07dd0cecc66161fc93d7c9000da1"]),43114:new Set(["0xb97ef9ef8734c71904d8002f8b6bc66dd9c48a6e","0xc7198437980c041c805a1edcba50c1ce5db95118","0xd586e7f844cea2f87f50152665bcbc2c279d8d70"])}),M=(f,w)=>{let x=String(w.address||"").toLowerCase();if(R[f]?.has(x))return{priceUsd:1,priceSource:"stable-peg"};let I=v[f];if(I&&w.address&&A?.coins){let T=`${I}:${String(w.address).toLowerCase()}`,$=Number(A.coins[T]?.price);if(Number.isFinite($)&&$>0)return{priceUsd:$,priceSource:"defillama"}}return{priceUsd:null,priceSource:null}},j=[];for(let f of b)if(!(f.family!=="evm"||f.fungibleTokens?.status!=="ok"))for(let w of f.fungibleTokens.assets||[])!w.address||!te(w.amount)||M(f.chainId,w).priceUsd==null&&Ue(f.chainId,w.address)&&j.push({chain:f.chainId,address:w.address});for(let f of E.fungibleTokens?.assets||[]){let w=f.mint||f.address;w&&te(f.amount)&&Ue("solana",w)&&j.push({chain:"solana",address:w})}let k={prices:new Map,requested:0,resolved:0,reachable:!0,failures:[]};if(o&&j.length)try{k=await hr(j.slice(0,Er),ue(t,"prices"))}catch(f){k={prices:new Map,requested:j.length,resolved:0,reachable:!1,failures:[String(f?.message||f)]}}let D=(f,w)=>{let x=Ue(f,w),I=x?k.prices.get(x):null;return I?{priceUsd:I.priceUsd,priceSource:"dexscreener",priceLiquidityUsd:I.liquidityUsd,priceProvisional:I.provisional===!0}:null},X=b.map(f=>{let w=f.native?{...f,native:Lt(f.native,y)}:f;if(w.fungibleTokens?.status==="ok"&&Array.isArray(w.fungibleTokens.assets)){let x=w.fungibleTokens.assets.map(I=>{let T=M(w.chainId,I);T.priceUsd==null&&I.address&&(T=D(w.chainId,I.address)??T);let $=he(I.amount),L=$!=null&&T.priceUsd!=null&&T.priceProvisional!==!0?Be($*T.priceUsd):null;return{...I,priceUsd:T.priceUsd,priceSource:T.priceSource,...T.priceLiquidityUsd!=null?{priceLiquidityUsd:T.priceLiquidityUsd}:{},...T.priceProvisional===!0?{priceProvisional:!0}:{},usdValue:L}});w={...w,fungibleTokens:{...w.fungibleTokens,assets:x}}}return w});E.native&&(E.native=Lt(E.native,y)),E.fungibleTokens?.status==="ok"&&Array.isArray(E.fungibleTokens.assets)&&(E.fungibleTokens={...E.fungibleTokens,assets:E.fungibleTokens.assets.map(f=>{let w=f.mint||f.address,x=w?D("solana",w):null,I=he(f.amount),T=x&&I!=null&&x.priceProvisional!==!0?Be(I*x.priceUsd):null;return{...f,priceUsd:x?.priceUsd??null,priceSource:x?.priceSource??null,...x?.priceLiquidityUsd!=null?{priceLiquidityUsd:x.priceLiquidityUsd}:{},...x?.priceProvisional===!0?{priceProvisional:!0}:{},usdValue:T}})}),_.native&&(_.native=Lt(_.native,y));let H=0,se=0,z=0;for(let f of[...X,E,_]){f.native?.status==="ok"&&te(f.native.amount)&&(f.native.usdValue!=null?(H+=f.native.usdValue,se+=1):z+=1);for(let w of f.fungibleTokens?.assets||[])!te(w.amount)&&!te(w.amountRaw)||(w.usdValue!=null?(H+=w.usdValue,se+=1):z+=1)}let ae=kr(y,"HYPE");for(let f of C.spot?.balances||[]){let w=String(f.coin||"").toUpperCase(),x=w==="USDC"||w==="USDT"||w==="USDT0"?1:w==="HYPE"?ae.priceUsd||he(C.mids?.HYPE):he(C.mids?.[f.coin]),I=he(f.total);f.priceUsd=x,f.usdValue=I!=null&&x!=null?Be(I*x):null,te(f.total)&&(f.usdValue!=null?(H+=f.usdValue,se+=1):z+=1)}let U=he(C.perps?.accountValueUsd);U!=null&&U!==0&&(H+=U,se+=1);for(let f of C.vaults?.positions||[])f.equityUsd!=null&&(H+=f.equityUsd,se+=1);let P=(E.collectibles?.assets||[]).filter(f=>te(f.amount)).length,N=(_.fungibleTokens?.assets||[]).length+(_.collectibles?.assets||[]).length;z+=P+N;let Se=[...X,E,_,C],K=f=>Se.filter(w=>w.status===f).length,J=[],de=X.filter(f=>f.fungibleTokens?.status==="unavailable"),De=X.filter(f=>f.fungibleTokens?.status==="ok");de.length&&!De.length?J.push("EVM token discovery is unavailable without a working address indexer; native balances are still live."):de.length&&J.push(`EVM token discovery partial: Blockscout covered ${De.length} chain(s); ${de.length} chain(s) still native-only.`),(E.fungibleTokens?.assets?.length||E.collectibles?.assets?.length)&&J.push("Solana token accounts are unverified and may include spam; collectible candidates are not confirmed NFTs."),_.collectibles?.unknownNotEmpty&&J.push("Bitcoin inscription holdings are unknown, not zero, because no address indexer is configured."),g.ok||J.push(`Price provider unavailable: ${g.error}`);let Te=[$t("cosmos","requires a chain-specific bech32 address and LCD/RPC adapter"),$t("sui","Sui balance adapter is not installed"),$t("aptos","Aptos balance adapter is not installed")],ot=Se.some(f=>["unavailable","partial","not-configured"].includes(f.fungibleTokens?.status)||["unavailable","partial","not-configured"].includes(f.collectibles?.status));return{provider:"portfolio",operation:"balances",readOnly:!0,queriedAt:n,addresses:r,coverage:{requestedSurfaces:Se.length,ok:K("ok"),unavailable:K("unavailable"),notConfigured:K("not-configured"),unsupported:K("unsupported")+Te.length,evmChainsRequested:l.length,evmChainsOk:X.filter(f=>f.status==="ok").length},valuation:{knownUsd:Be(H),label:"known priced value, not a complete portfolio total",pricedItems:se,unpricedNonzeroItems:z,complete:z===0&&!ot&&K("unavailable")===0&&K("not-configured")===0&&Te.length===0,priceSource:o?"DefiLlama+DexScreener":null,priceStatus:g.ok?"ok":"unavailable",priceFallback:{provider:"DexScreener",requested:k.requested,resolved:k.resolved,reachable:k.reachable,skipped:Math.max(0,j.length-Er)},priceQueriedAt:n},chains:[...X,E,_,C],unsupportedFamilies:Te,warnings:J}}W();W();import{getAddress as ws}from"ethers";var _r=Object.freeze({1:"https://eth.blockscout.com",8453:"https://base.blockscout.com",42161:"https://arbitrum.blockscout.com"}),Tr=e=>!!_r[e];function gs(e){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("invalid NFT cursor");let t=new URLSearchParams;for(let[n,r]of Object.entries(e)){if(!(n==="token_contract_address_hash"?/^0x[\da-f]{40}$/i.test(String(r)):n==="token_type"?["ERC-721","ERC-1155","ERC-404"].includes(r):["token_id","items_count"].includes(n)&&/^\d{1,100}$/.test(String(r))))throw new Error("invalid NFT cursor");t.set(n,String(r))}if(!t.size)throw new Error("empty NFT cursor");return t.toString()}async function Cr(e={},t={}){let n=ws(e.address),r=_r[e.chainId];if(!r)throw new Error("Blockscout NFT chain not verified");let o=Math.min(3,Math.max(1,Math.trunc(Number(e.maxPages)||3))),i=[],s=[],c=new Set,l=null,d="",a=0,p=!1;for(;a<o;)try{let h=Z(await F(`${r}/api/v2/addresses/${n}/nft${d?`?${d}`:""}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??8e3,maxResponseBytes:2e6,redirectPolicy:"error",headers:{accept:"application/json","user-agent":"OraclePortfolio/1.0"}}),"blockscout NFT inventory");if(!Array.isArray(h?.items))throw new Error("invalid NFT inventory response");a++;for(let m of h.items.slice(0,50)){let b=m.token;if(!/^0x[\da-f]{40}$/i.test(b?.address_hash||"")||!/^\d+$/.test(String(m.id??"")))throw new Error("invalid NFT identity");if(!["ERC-721","ERC-1155","ERC-404"].includes(b.type))throw new Error("invalid NFT standard");if(m.owner?.hash&&m.owner.hash.toLowerCase()!==n.toLowerCase())throw new Error("NFT owner mismatch");i.push({chain:e.chain,chainId:e.chainId,family:"evm",owner:n,contract:b.address_hash,tokenId:String(m.id),tokenStandard:b.type,collection:ke(b.name,{max:160,fallback:b.address_hash}),name:ke(m.metadata?.name||b.name,{max:160,fallback:`NFT ${m.id}`}),imageUrl:m.image_url||null,estimatedValueUsd:null,spam:["scam","spam"].includes(b.reputation)||b.is_spam===!0,source:"blockscout-owner-inventory",listingAdapter:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"owner indexer provides no acquisition cost"}})}if(h.items.length>50)throw new Error("NFT provider page exceeds 50 item bound");let u=h.next_page_params??null;if(!u){l=null,p=!0;break}if(l=null,d=gs(u),l=Object.fromEntries(new URLSearchParams(d)),c.has(d))throw new Error("repeated NFT cursor");c.add(d)}catch(h){if(s.push(`blockscout: ${h.message}`.slice(0,300)),!a)throw h;break}return{nfts:i,complete:p,next:l,pages:a,truncated:!p,errors:s}}W();import{readFileSync as vs,existsSync as Es}from"node:fs";import{getAddress as As,Interface as Ze,TypedDataEncoder as Gl,parseUnits as Yl}from"ethers";var Ss=300*1e3,Hl=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();var xs="https://api.opensea.io/api/v2",ks="fulfillAdvancedOrder(((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 totalOriginalConsiderationItems) parameters,uint120 numerator,uint120 denominator,bytes signature,bytes extraData) advancedOrder,(uint256 orderIndex,uint8 side,uint256 index,uint256 identifier,bytes32[] criteriaProof)[] criteriaResolvers,bytes32 fulfillerConduitKey,address recipient)",eu=new Ze([`function ${ks}`]),tu=new Ze(["function mintPublic(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity) payable","function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Is=Object.freeze(["blast","base","ethereum","zora","arbitrum","sei","avalanche","polygon","optimism","ape_chain","flow","b3","soneium","ronin","bera_chain","solana","shape","unichain","gunzilla","abstract","animechain","hyperevm","somnia","monad","hyperliquid","megaeth","ink","robinhood","stablechain"]),_s=new Set(Is),Ts=new Set(["solana","flow"]);function Cs(){let e=process.env.OPENSEA_ENV_FILE||`${process.env.HOME||""}/.config/locals-only/opensea.env`;if(!Es(e))return"";try{for(let t of vs(e,"utf8").split(`
+`)){let n=t.match(/^\s*OPENSEA_API_KEY\s*=\s*(.+)\s*$/);if(n)return n[1].replace(/^["']|["']$/g,"").trim()}}catch{}return""}function Bt(e={}){return e.apiKey?e.apiKey:e.allowAmbientCredentials===!1||e.allowDiskCredentials===!1?e.env?.OPENSEA_API_KEY||e.env?.OPEN_SEA_API_KEY||"":e.env?.OPENSEA_API_KEY||process.env.OPENSEA_API_KEY||process.env.OPEN_SEA_API_KEY||Cs()}function Nr(e={}){return xe({provider:"opensea",defaultUrl:xs,hosts:["api.opensea.io","testnets-api.opensea.io"],url:e.baseUrl||process.env.OPENSEA_API_URL})}function Pr(e={}){return Nr(e).baseUrl}function Rr(e={}){return ge({accept:"application/json"},{"x-api-key":Bt(e)},Nr(e).trusted)}function Os(e){let t=String(e||"ethereum").trim().toLowerCase();if(!_s.has(t))throw new Error(`opensea: unsupported account chain ${t}`);return t}function Or(e,t="address"){try{return As(String(e||"").trim().toLowerCase())}catch{throw new Error(`opensea: invalid ${t}`)}}function $r(e,t=null){let n=String(e||"").trim();if(!n)throw new Error("opensea: account address required");if(t&&!Ts.has(t)||!t&&/^0x[0-9a-fA-F]{40}$/.test(n))return Or(n,"account address");if(!/^[1-9A-HJ-NP-Za-km-z]{32,64}$/.test(n))throw new Error("opensea: invalid account address");return n}function Ns(e={},t,n){return{chain:t,owner:n,contract:e.contract||null,tokenId:e.identifier==null?null:String(e.identifier),tokenStandard:e.token_standard||null,quantity:e.quantity==null&&e.balance==null?null:String(e.quantity??e.balance),collection:e.collection||null,name:e.name||null,description:e.description||null,imageUrl:e.display_image_url||e.image_url||e.original_image_url||null,originalImageUrl:e.original_image_url||e.image_url||null,animationUrl:e.display_animation_url||e.original_animation_url||null,metadataUrl:e.metadata_url||null,marketplaceUrl:e.opensea_url||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,spam:e.is_disabled===!0,disabled:e.is_disabled===!0,nsfw:e.is_nsfw===!0,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"OpenSea account inventory does not expose trustworthy per-item acquisition cost"}}}async function Ft(e={},t={}){if(!Bt(t))throw new Error("OPENSEA_API_KEY required");let n=Os(e.chain),r=$r(e.address||e.owner,n),o=Math.min(Math.max(Number(e.pageSize??e.limit??200)||200,1),200),i=Math.min(Math.max(Number(e.maxPages??5)||5,1),25),s=[],c=e.next?String(e.next):null,l=0;do{let d=new URL(`${Pr(t)}/chain/${encodeURIComponent(n)}/account/${encodeURIComponent(r)}/nfts`);d.searchParams.set("limit",String(o)),e.collection&&d.searchParams.set("collection",String(e.collection)),c&&d.searchParams.set("next",c);let a=await F(d.toString(),{headers:Rr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});for(let p of Array.isArray(a?.nfts)?a.nfts:[])s.push(Ns(p,n,r));c=a?.next?String(a.next):null,l+=1}while(c&&l<i);return{provider:"opensea-nft",source:"opensea-account-inventory",chain:n,owner:r,count:s.length,pages:l,complete:!c,next:c,nfts:s,exec:!1,readOnly:!0}}async function Lr(e={},t={}){if(!Bt(t))throw new Error("OPENSEA_API_KEY required");let n=$r(e.address||e.owner),r=await F(`${Pr(t)}/account/${encodeURIComponent(n)}/pnl`,{headers:Rr(t),fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??2e4});return{provider:"opensea-nft",source:"opensea-indexed-account-pnl",address:n,scope:"OpenSea-indexed account trading PnL across supported currencies, not per-item NFT cost basis",methodology:"provider-indexed",realizedPnlUsd:r?.realized_pnl_usd??null,unrealizedPnlUsd:r?.unrealized_pnl_usd??null,totalPnlUsd:r?.total_pnl_usd??null,netInvestedUsd:r?.net_invested_usd??null,currentValueUsd:r?.current_value_usd??null,returnPercentage:r?.return_percentage??null,itemLevelPnlAvailable:!1,raw:r,exec:!1,readOnly:!0}}var nu=Object.freeze({robinhood:4663,ethereum:1,base:8453,arbitrum:42161,optimism:10,polygon:137,avalanche:43114,zora:7777777,blast:81457,sei:1329,ape_chain:33139,b3:8333,soneium:1868,ronin:2020,bera_chain:80094,shape:360,unichain:130,gunzilla:43419,abstract:2741,animechain:69e3,hyperevm:999,somnia:5031,monad:143,megaeth:4326,ink:57073,stablechain:988});var ru=Object.freeze({OrderComponents:[{name:"offerer",type:"address"},{name:"zone",type:"address"},{name:"offer",type:"OfferItem[]"},{name:"consideration",type:"ConsiderationItem[]"},{name:"orderType",type:"uint8"},{name:"startTime",type:"uint256"},{name:"endTime",type:"uint256"},{name:"zoneHash",type:"bytes32"},{name:"salt",type:"uint256"},{name:"conduitKey",type:"bytes32"},{name:"counter",type:"uint256"}],OfferItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"}],ConsiderationItem:[{name:"itemType",type:"uint8"},{name:"token",type:"address"},{name:"identifierOrCriteria",type:"uint256"},{name:"startAmount",type:"uint256"},{name:"endAmount",type:"uint256"},{name:"recipient",type:"address"}]});var ou=new Ze(["function setApprovalForAll(address operator,bool approved)"]),iu=new Ze(["function cancel((address offerer,address zone,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount)[] offer,(uint8 itemType,address token,uint256 identifierOrCriteria,uint256 startAmount,uint256 endAmount,address recipient)[] consideration,uint8 orderType,uint256 startTime,uint256 endTime,bytes32 zoneHash,uint256 salt,bytes32 conduitKey,uint256 counter)[] orders) returns (bool cancelled)"]);var Rs="https://api.satflow.com/v1";function Ur(e={}){return xe({provider:"satflow",defaultUrl:Rs,hosts:["api.satflow.com"],url:e.baseUrl||process.env.SATFLOW_API_URL})}function $s(e={}){return Ur(e).baseUrl}function Mr(e={}){return String(e.apiKey||process.env.SATFLOW_API_KEY||process.env.BTC_SATFLOW_API_KEY||"").trim()}function Ls(e={}){return ge({accept:"application/json","content-type":"application/json","user-agent":"oracle-btc-satflow/0.1"},{"x-api-key":Mr(e)},Ur(e).trusted)}async function Us(e,{method:t="GET",body:n,opts:r={}}={}){if(!Mr(r))throw new Error("satflow: SATFLOW_API_KEY not set (request key via Satflow docs form)");let i=`${$s(r)}${e.startsWith("/")?e:`/${e}`}`,c=await(r.fetchImpl||fetch)(i,{method:t,headers:Ls(r),body:n!=null?JSON.stringify(n):void 0,signal:AbortSignal.timeout(r.timeoutMs??2e4)}),l=await c.text(),d;try{d=JSON.parse(l)}catch{d=l}if(!c.ok)throw new Error(`satflow ${t} ${e}: HTTP ${c.status} ${String(l).slice(0,200)}`);return d}async function Br(e={},t={}){let n=me(e.address||e.addr,"address"),r=new URLSearchParams({address:n});e.type&&r.set("type",e.type),e.limit!=null&&r.set("limit",String(e.limit)),e.offset!=null&&r.set("offset",String(e.offset));let o=await Us(`/address/wallet-contents?${r}`,{opts:t});return{provider:"satflow",address:n,contents:o}}W();W();var Su=Object.freeze(["i.seadn.io","openseauserdata.com","arweave.net","ipfs.io","nftstorage.link","dweb.link","cloudflare-ipfs.com","ordinals.com","ordinals.g.com","cdn.helius-rpc.com","shdw-drive.genesysgo.net"]);var Ms=[/\bclaim\b/i,/\breward\b/i,/\bairdrop\b/i,/\bvoucher\b/i,/\bwinner\b/i,/\bfree\s*mint\b/i,/\bactivate\b/i,/\bunlock\b/i,/\bverify\b/i,/\bconnect\s+wallet\b/i],Bs=/(https?:\/\/|www\.|[a-z0-9-]+\.(?:com|net|io|xyz|org|app|finance|gift|claims?|site|link|live|vip|top|cc))/i,Fs=/(\$\s?\d|\d[\d,.]*\s*(?:usd|usdc|usdt|eth|weth|btc|sol)\b)/i;function qs(e={}){let t=[],n=String(e.name||""),r=String(e.description||""),o=`${n} ${r}`;Bs.test(n)&&t.push("url-in-name");let i=Ms.filter(d=>d.test(o)).length;i>0&&t.push(`lure-language:${i}`),Fs.test(n)&&t.push("value-claim-in-name"),/[\u200B-\u200F\u202A-\u202E\uFEFF]/.test(n)&&t.push("invisible-characters"),e.disabled===!0&&t.push("marketplace-disabled");let s=e.estimatedValueUsd==null&&e.estimatedValueSats==null,c=!Array.isArray(e.traits)||e.traits.length===0;s&&c&&i>0&&t.push("valueless-airdrop-with-lure");let l=t.includes("url-in-name")||t.includes("invisible-characters")||t.includes("valueless-airdrop-with-lure")||t.length>=2;return{spam:l,risk:l?"high":t.length>0?"low":"none",reasons:t}}function Fr(e={}){let t=qs(e);return{...e,spam:e.spam===!0||t.spam,riskLevel:t.risk,riskReasons:t.reasons.length?t.reasons:void 0}}var Ds=Object.freeze([{chain:"ethereum",chainId:1,family:"evm"},{chain:"optimism",chainId:10,family:"evm"},{chain:"polygon",chainId:137,family:"evm"},{chain:"stablechain",chainId:988,family:"evm"},{chain:"hyperevm",chainId:999,family:"evm"},{chain:"abstract",chainId:2741,family:"evm"},{chain:"robinhood",chainId:4663,family:"evm"},{chain:"base",chainId:8453,family:"evm"},{chain:"arbitrum",chainId:42161,family:"evm"},{chain:"avalanche",chainId:43114,family:"evm"},{chain:"hyperliquid",chainId:null,family:"hyperliquid"}]),Hs=Object.freeze([{family:"evm",chain:"bsc",chainId:56,reason:"OpenSea account inventory does not support BSC"},{family:"cosmos",reason:"requires a chain-specific bech32 address and NFT indexer"},{family:"sui",reason:"owner inventory adapter not installed"},{family:"aptos",reason:"owner inventory adapter not installed"}]);function qt(e={},t){return{fetchImpl:e.fetchImpl,timeoutMs:e.timeoutMs,env:e.env,allowDiskCredentials:e.allowDiskCredentials,allowAmbientCredentials:e.allowAmbientCredentials,...e[t]||{}}}async function Ie(e,t){let n=await V(t);return n.ok?{ok:!0,data:n.data}:{ok:!1,error:`${e}: ${n.error}`.slice(0,300)}}function js(e){if(Array.isArray(e))return e;for(let t of["items","results","ordinals","inscriptions","data"])if(Array.isArray(e?.[t]))return e[t];return[]}function Vs(e={},t){let n=e.inscription_id||e.inscriptionId||e.id||e.inscription||null;return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:n==null?null:String(n),tokenStandard:"ordinal",collection:e.collection_slug||e.collectionSlug||e.collection?.slug||e.collection||null,name:e.name||e.meta?.name||(n?`Inscription ${n}`:"Bitcoin inscription"),description:e.description||e.meta?.description||null,imageUrl:e.image_url||e.imageUrl||e.content_url||e.contentUrl||e.thumbnail||null,originalImageUrl:e.content_url||e.contentUrl||e.image_url||e.imageUrl||null,animationUrl:null,metadataUrl:e.metadata_url||e.metadataUrl||null,marketplaceUrl:e.marketplace_url||e.marketplaceUrl||null,estimatedValueUsd:e.estimated_value_usd!=null&&Number.isFinite(Number(e.estimated_value_usd))?Number(e.estimated_value_usd):null,estimatedValueSats:(e.floor_price_sats??e.price_sats)!=null&&Number.isFinite(Number(e.floor_price_sats??e.price_sats))?Number(e.floor_price_sats??e.price_sats):null,spam:!1,disabled:!1,nsfw:!1,listed:e.listed===!0||e.is_listed===!0,listingId:e.listing_id||e.listingId||null,traits:Array.isArray(e.traits)?e.traits:[],updatedAt:e.updated_at||e.updatedAt||null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"Satflow wallet inventory does not expose trustworthy acquisition cost"},listingAdapter:"satflow",source:"satflow-wallet-contents"}}function zs(e,t){return{chain:"bitcoin",family:"bitcoin",owner:t,contract:null,tokenId:String(e),tokenStandard:"ordinal",collection:null,name:`Inscription ${e}`,description:null,imageUrl:null,originalImageUrl:null,animationUrl:null,metadataUrl:null,marketplaceUrl:null,estimatedValueUsd:null,spam:!1,disabled:!1,nsfw:!1,traits:[],updatedAt:null,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"address indexer returned no acquisition or valuation data"},listingAdapter:"satflow",source:"bitcoin-meta-address-indexer"}}function qr(e={}){return[e.chain||"unknown",e.contract||"native",e.tokenId||"unknown"].join(":").toLowerCase()}function Ws(e){let t=new Map;if(Array.isArray(e)){for(let n of e)n?.assetKey&&t.set(String(n.assetKey).toLowerCase(),n);return t}if(e&&typeof e=="object")for(let[n,r]of Object.entries(e))t.set(n.toLowerCase(),r);return t}function Ks(e,t){let n=qr(e),r=t.get(n),o=e.estimatedValueUsd==null?null:Number(e.estimatedValueUsd);if(!r)return{...e,assetKey:n};let i=Number(r.costUsd),s=Number(r.feesUsd??0);if(!Number.isFinite(i)||i<0||!Number.isFinite(s)||s<0)return{...e,assetKey:n,acquisitionCost:null,itemPnl:{status:"unavailable",reason:"invalid user-supplied cost basis"}};let c=Math.round((i+s)*100)/100;return Number.isFinite(o)?{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"estimated",methodology:"provider estimated current value minus supplied USD acquisition cost and fees",unrealizedUsd:Math.round((o-c)*100)/100,currentValueUsd:o,totalCostUsd:c,realizedUsd:null}}:{...e,assetKey:n,acquisitionCost:{costUsd:i,feesUsd:s,totalCostUsd:c,acquiredAt:r.acquiredAt||null,source:r.source||"user-supplied"},itemPnl:{status:"unavailable",reason:"current NFT valuation is unavailable"}}}function Gs(e){let t=new Map;for(let n of e){let r=qr(n);t.has(r)||t.set(r,n)}return[...t.values()]}function Ys(e,t){let n=e.filter(i=>i.itemPnl?.status==="estimated"),r=e.length-n.length,o=Math.round(n.reduce((i,s)=>i+Number(s.itemPnl.unrealizedUsd||0),0)*100)/100;return{nftItemPnl:{status:r===0&&e.length?"estimated-complete-for-held-items":n.length?"partial":"unavailable",methodology:"Only items with explicit acquisition cost and provider estimated current value are included",knownUnrealizedUsd:o,knownItems:n.length,unknownItems:r,realizedUsd:null,warning:"Transfers, gifts, airdrops, mints, bridges, gas, royalties, and off-market sales can make cost basis unavailable or incomplete."},providerAccountPnl:t}}async function Dr(e={},t={}){let n=new Date().toISOString(),r=Ut(e,t.env||process.env),o=Array.isArray(e.chains)&&e.chains.length?new Set(e.chains.map(y=>String(y).toLowerCase())):null,i=Ds.filter(y=>!o||o.has(y.chain)),s=[],c=[],l=qt(t,"opensea"),d=r.evm?i.filter(y=>y.family!=="solana"):[],a=await re(d,4,async y=>({row:y,result:await Ie(`opensea-${y.chain}`,()=>Ft({chain:y.chain,address:r.evm,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3)}));for(let{row:y,result:v}of a)if(v.ok){let S=v.data.nfts.map(A=>({...A,family:y.family,chainId:y.chainId,listingAdapter:"opensea",source:"opensea-account-inventory"}));c.push(...S),s.push({family:y.family,chain:y.chain,chainId:y.chainId,status:v.data.complete?"ok":"partial",count:S.length,complete:v.data.complete,next:v.data.next,source:"opensea"})}else{let S=Tr(y.chainId)?await Ie(`blockscout-${y.chain}`,()=>Cr({chain:y.chain,chainId:y.chainId,address:r.evm,maxPages:e.maxPages},{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs})):null;S?.ok?(c.push(...S.data.nfts),s.push({...y,status:S.data.complete?"ok":"partial",count:S.data.nfts.length,complete:S.data.complete,next:S.data.next,truncated:S.data.truncated,source:"blockscout",errors:[v.error,...S.data.errors]})):s.push({...y,status:"unavailable",count:null,complete:!1,error:v.error,errors:[v.error,...S?[S.error]:[]],source:"opensea"})}if(!r.evm)for(let y of i.filter(v=>v.family!=="solana"))s.push({family:y.family,chain:y.chain,chainId:y.chainId,status:"not-configured",reason:"EVM address missing"});if(r.solana&&(!o||o.has("solana"))){let y=await Ie("opensea-solana",()=>Ft({chain:"solana",address:r.solana,pageSize:e.pageSize,maxPages:e.maxPages},l),t.timeoutMs??35e3);if(y.ok){let v=y.data.nfts.map(S=>({...S,family:"solana",chainId:null,listingAdapter:null,source:"opensea-account-inventory"}));c.push(...v),s.push({family:"solana",chain:"solana",status:y.data.complete?"ok":"partial",count:v.length,complete:y.data.complete,next:y.data.next,source:"opensea"})}else s.push({family:"solana",chain:"solana",status:"unavailable",error:y.error,source:"opensea"})}else(!o||o.has("solana"))&&s.push({family:"solana",chain:"solana",status:"not-configured",reason:"Solana address missing"});if(r.bitcoin&&(!o||o.has("bitcoin"))){let y=await Ie("satflow-wallet-contents",()=>Br({address:r.bitcoin,type:"ordinals",limit:e.bitcoinLimit??100,offset:0},qt(t,"satflow")),t.timeoutMs??35e3);if(y.ok){let v=js(y.data.contents).map(A=>Vs(A,r.bitcoin));c.push(...v);let S=v.length<Number(e.bitcoinLimit??100);s.push({family:"bitcoin",chain:"bitcoin",status:S?"ok":"partial",count:v.length,complete:S,source:"satflow"})}else{let v=await Ie("bitcoin-meta-inscriptions",()=>Xe({address:r.bitcoin},qt(t,"bitcoinMeta")),t.timeoutMs??35e3),S=v.ok&&v.data?.ok&&Array.isArray(v.data.inscriptions)?v.data.inscriptions:[];c.push(...S.map(A=>zs(A,r.bitcoin))),s.push({family:"bitcoin",chain:"bitcoin",status:S.length?"partial":"unavailable",count:S.length,complete:!1,source:S.length?"bitcoin-meta":"satflow",error:S.length?"Satflow unavailable; fallback has IDs only":y.error})}}else(!o||o.has("bitcoin"))&&s.push({family:"bitcoin",chain:"bitcoin",status:"not-configured",reason:"Bitcoin address missing"});let p=[];if(e.includePnl!==!1)for(let y of[...new Set([r.evm,r.solana].filter(Boolean))]){let v=await Ie(`opensea-pnl-${y}`,()=>Lr({address:y},l),t.timeoutMs??35e3);p.push(v.ok?{status:"ok",...v.data}:{status:"unavailable",address:y,source:"opensea-indexed-account-pnl",error:v.error})}let h=Ws(e.costBasis),u=Gs(c).map(y=>Ks(y,h)).map(y=>Fr(y)),m=u.filter(y=>!y.spam),b=u.filter(y=>y.spam),E=m.filter(y=>y.estimatedValueUsd!=null&&Number.isFinite(Number(y.estimatedValueUsd))),_=Math.round(E.reduce((y,v)=>y+Number(v.estimatedValueUsd),0)*100)/100,C=m.length-E.length,g=s.filter(y=>y.status!=="ok"||y.complete===!1);return{provider:"nft-portfolio",operation:"inventory",readOnly:!0,generatedAt:n,addresses:r,coverage:s,unsupported:Hs,inventory:{count:u.length,visibleCount:m.length,flaggedCount:b.length,items:u,visibleItems:m,flaggedItems:b},valuation:{estimatedCurrentValueUsd:_,valuedItems:E.length,unvaluedItems:C,complete:C===0&&g.length===0,methodology:"Sum of provider estimated_value_usd for non-flagged items. It is not an executable bid."},pnl:Ys(m,p),listingCoverage:{opensea:"EVM listing actions available with OPENSEA_API_KEY, explicit price/currency/expiry, and user confirmation",satflow:"Bitcoin unsigned listing PSBT available with SATFLOW_API_KEY, explicit price/expiry, and user confirmation",solana:"Magic Eden unsigned list transaction available with MAGICEDEN_API_KEY, explicit SOL price/expiry, and user confirmation",unsupported:"Sui, Aptos, Cosmos, BSC, and unknown marketplaces fail closed"},traitSniperCoverage:{opensea:"Evaluates reveal/trait-floor mispricing only with recent trait sales and volume evidence. Buy intents require local vault signing.",execution:"prepare-only on hosted surfaces; local vault required for purchase"},metadataSafety:{imagesAreUntrusted:!0,animationAndHtmlNotRendered:!0,galleryRasterOnly:!0,missingImagesUsePlaceholders:!0}}}import{homedir as Dt}from"node:os";import{join as Ht}from"node:path";var Hr=process.env.ORACLE_PUBLIC_DESKTOP==="1",Js=Hr?process.env.ORACLE_CONFIG_DIR||Ht(Dt(),".config","oracle"):Ht(Dt(),".config","oracle"),qu=Hr?Js:Ht(Dt(),".config","mad-desk");function jt(e,t,n=""){let r=process.env[e];if(r!=null&&String(r).trim()!=="")return r;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:n}var ea=JSON.parse(Yt(new URL("../../package.json",import.meta.url),"utf8")),_e="public",ta="127.0.0.1",na=8799,tt=ea.version,ra=new Set(["127.0.0.1","localhost","::1"]),Gt=qe(Xs(Zs(import.meta.url)),"../.."),Vt=qe(Gt,"public","oracle-console"),jr=Object.freeze({"/":{file:"index.html",type:"text/html; charset=utf-8"},"/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"},"/oracle-console":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/index.html":{file:"index.html",type:"text/html; charset=utf-8"},"/oracle-console/app.js":{file:"app.js",type:"application/javascript; charset=utf-8"},"/oracle-console/styles.css":{file:"styles.css",type:"text/css; charset=utf-8"}}),oa=1e6,G=class extends Error{constructor(t,n,r){super(r||n),this.status=t,this.code=n}};function ie(e,t,n){let r=t,o;try{Q(n),o=gn(n)}catch{r=500,o=JSON.stringify({error:"secret-leak-blocked"})}e.writeHead(r,{"content-type":"application/json; charset=utf-8","cache-control":"no-store","x-oracle-plane":_e,"x-oracle-unsigned":"true"}),e.end(o)}function ia(e){return new Promise((t,n)=>{let r=[],o=0;e.on("data",i=>{if(o+=i.length,o>oa){n(new G(413,"payload-too-large","request body too large")),e.destroy();return}r.push(i)}),e.on("end",()=>{let i=Buffer.concat(r).toString("utf8").trim();if(i==="")return t({});try{t(JSON.parse(i))}catch{n(new G(400,"invalid-json","request body must be valid JSON"))}}),e.on("error",()=>n(new G(400,"bad-request","request stream error")))})}function Y(e,t){if(e==null)return{};if(typeof e!="object"||Array.isArray(e))throw new G(400,t,`${t} must be a JSON object`);return e}function sa(e){return String(e||"").trim().toLowerCase().replace(/^\[|\]$/g,"")}function aa(e){let t=sa(e);if(!ra.has(t))throw new TypeError(`oracle-public only binds loopback hosts; got ${String(e)}`);return t==="::1"?"::1":String(e).trim()}function ca(){return{status:200,body:{ok:!0,plane:_e,version:tt}}}function nt(e){return{...e,allowWildcardActions:!1,now:Math.floor(Date.now()/1e3)}}function la(e){let t=Y(e,"body"),n=t.input!==void 0?Y(t.input,"input"):t,r=nt(Y(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:En(o,r)}}function ua(e){let t=Y(e,"body"),n=t.request!==void 0?Y(t.request,"request"):t.input!==void 0?Y(t.input,"input"):t,r=nt(Y(t.opts,"opts")),o=n===t?(({opts:i,...s})=>s)(t):n;return{status:200,body:An(o,r)}}function da(e){let t=Y(e,"body"),n=nt(Y(t.opts,"opts")),r=In(t.store??[],n);return{status:200,body:{ok:!0,count:r.length,grants:r}}}function pa(e){let t=Y(e,"body"),n=nt(Y(t.opts,"opts")),r=_n(t.store??[],t.id,n);return r==null?{status:404,body:{error:"grant-not-found"}}:{status:200,body:r}}function fa(){let e=(process.env.ORACLE_PRIVY_APP_ID||process.env.PRIVY_APP_ID||"").trim(),t=e.length>0,n=!0,r=[];return t&&r.push("privy"),n&&r.push("injected"),{status:200,body:{ok:!0,plane:_e,version:tt,custody:{selfCustodial:!0,signer:"user-wallet",privyEnabled:t,injectedEnabled:n,modes:r},privy:{appId:e||null}}}}var zt=400;function ma(e=[]){if(e.length<=zt)return{rows:e,truncated:!1,omitted:0};let t=r=>r?.kind==="native"?0:r?.priced?1:2;return{rows:[...e].sort((r,o)=>t(r)-t(o)).slice(0,zt),truncated:!0,omitted:e.length-zt}}var Wt=300;function ha(e=[]){if(e.length<=Wt)return{items:e,truncated:!1,omitted:0};let t=r=>r?.spam===!0||r?.nsfw===!0?2:Number.isFinite(Number(r?.floorUsd))&&Number(r?.floorUsd)>0?0:1;return{items:[...e].sort((r,o)=>t(r)-t(o)).slice(0,Wt),truncated:!0,omitted:e.length-Wt}}var et=12;async function ya(e){let t=Y(e,"body"),n=typeof t.owner=="string"?t.owner:null;if(!n)throw new G(400,"owner-required","owner must be an EVM address");let r=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(r&&r.length>et)throw new G(400,"too-many-chains",`at most ${et} chainIds per request`);let i=await er({owner:n,chainIds:r},Jt());return{status:200,body:{ok:!0,owner:i.owner,scannedRange:i.scannedRange,approvals:i.approvals,scans:i.scans,warnings:i.warnings}}}var ba=/^[1-9A-HJ-NP-Za-km-z]{32,44}$/,wa=/^([13][1-9A-HJ-NP-Za-km-z]{25,34}|bc1[ac-hj-np-z02-9]{11,71})$/i;function ga(e){if(typeof e!="string")return null;let t=e.trim();return ba.test(t)?t:null}function Sa(e){if(typeof e!="string")return null;let t=e.trim();return wa.test(t)?t:null}function Gr(e){if(typeof e=="string")return e.trim()===""?null:e;if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e.evm;if(typeof t=="string"&&t.trim()!=="")return t}return null}async function va(e){let t=Y(e,"body"),n=Gr(t.owner),r=ga(t.solana),o=Sa(t.bitcoin);if(!n&&!r&&!o)throw new G(400,"owner-required","owner must be an EVM address (or pass solana/bitcoin)");let i=Array.isArray(t.chainIds)?t.chainIds.map(Number).filter(Number.isFinite):void 0;if(i&&i.length>et)throw new G(400,"too-many-chains",`at most ${et} chainIds per request`);let s=await Ir({addresses:{evm:n,solana:r,bitcoin:o},evmChainIds:i,includePrices:!0,includeTokens:!0,includeCollectibles:!1},Jt()),c=[],l=[],d=0,a=0,p=s.queriedAt,h=(g,y,v)=>({account:y??null,asOf:p,provider:"Oracle public data plane",evidence:{status:"complete",references:v}});for(let g of s.chains||[]){if(!["evm","solana","bitcoin"].includes(g.family))continue;let y=g.fungibleTokens?.status??"unavailable";y==="ok"?d+=1:y==="unavailable"&&(a+=1),l.push({chainId:g.chainId,family:g.family,name:g.name,status:g.status,error:g.error??null,tokenDiscovery:y,tokenDiscoveryReason:g.fungibleTokens?.reason??null,tokenCount:Array.isArray(g.fungibleTokens?.assets)?g.fungibleTokens.assets.length:0});let v=g.address??(g.family==="solana"?r:g.family==="bitcoin"?o:n),S=g.native;g.status==="ok"&&S&&S.status==="ok"&&S.amountRaw&&S.amountRaw!=="0"&&S.amountRaw!=="0x0"&&c.push({chainId:g.chainId,family:g.family,chain:g.name,symbol:S.symbol,decimals:S.decimals,amount:String(S.amountRaw),amountRaw:String(S.amountRaw),rawAmount:String(S.amountRaw),amountFormatted:S.amount,kind:"native",valueUsd:S.usdValue!=null?String(S.usdValue):null,priced:S.usdValue!=null,priceSource:S.usdValue!=null?"defillama":null,source:S.source??g.source??`${g.family}-native`,...h(g,v,[{kind:"native-balance",id:`${g.family}:${g.chainId??g.name}:${v}`}])});for(let A of g.fungibleTokens?.assets||[]){let R=A.amountRaw!=null?String(A.amountRaw):null;if(!R||R==="0")continue;let M=typeof A.decimals=="number"&&Number.isInteger(A.decimals)?A.decimals:null,j=A.address||A.mint||null;c.push({chainId:g.chainId,family:g.family,chain:g.name,symbol:A.symbol||A.coin||"TOKEN",decimals:M,amount:R,amountRaw:R,rawAmount:R,amountFormatted:A.amount!=null?String(A.amount):null,kind:g.family==="bitcoin"?"rune":g.family==="solana"?"spl":"erc20",address:j,valueUsd:A.usdValue!=null?String(A.usdValue):null,priced:A.usdValue!=null,priceSource:A.priceSource??null,priceLiquidityUsd:A.priceLiquidityUsd??null,source:A.source||g.fungibleTokens?.source||`${g.family}-token-index`,...h(g,v,[{kind:"token-balance",id:`${g.family}:${g.chainId??g.name}:${j??A.symbol}`}])})}}let u=8,m=g=>{let y=String(g??"").trim(),v=/^(\d+)(?:\.(\d+))?$/.exec(y);if(!v)return null;let S=(v[2]??"").slice(0,u).padEnd(u,"0");return`${v[1]}${S}`.replace(/^0+(?=\d)/,"")},b=(s.chains||[]).find(g=>g.family==="hyperliquid"),E=b?.address??n;if(b&&b.status==="ok"){l.push({chainId:null,family:"hyperliquid",name:b.name,status:b.status,error:b.error??null,tokenDiscovery:b.spot?.status==="ok"?"ok":"unavailable",tokenDiscoveryReason:b.spot?.error??null,tokenCount:Array.isArray(b.spot?.balances)?b.spot.balances.length:0});for(let v of b.spot?.balances||[]){let S=m(v.total);!v.coin||!S||S==="0"||c.push({chainId:null,family:"hyperliquid",chain:"hyperliquid",symbol:String(v.coin),decimals:u,amount:S,amountRaw:S,rawAmount:S,amountFormatted:String(v.total),kind:"hl-spot",valueUsd:v.usdValue!=null?String(v.usdValue):null,priced:v.usdValue!=null,priceSource:v.usdValue!=null?"hyperliquid-mids":null,source:"hyperliquid-info",...h(b,E,[{kind:"hl-spot-balance",id:`hyperliquid:spot:${v.coin}:${E}`}])})}let g=Number(b.perps?.accountValueUsd),y=m(b.perps?.accountValueUsd);b.perps?.status==="ok"&&Number.isFinite(g)&&g>0&&y&&c.push({chainId:null,family:"hyperliquid",chain:"hyperliquid",symbol:"USDC",decimals:u,amount:y,amountRaw:y,rawAmount:y,amountFormatted:String(b.perps.accountValueUsd),kind:"hl-perp-margin",valueUsd:String(g),priced:!0,priceSource:"hyperliquid-account-value",source:"hyperliquid-info",...h(b,E,[{kind:"hl-perp-account",id:`hyperliquid:perps:${E}`}])});for(let v of b.vaults?.positions||[]){let S=v.equityUsd==null?null:m(v.equityUsd);!S||S==="0"||c.push({chainId:null,family:"hyperliquid",chain:"hyperliquid",symbol:"USDC",decimals:u,amount:S,amountRaw:S,rawAmount:S,amountFormatted:String(v.equityUsd),kind:"hl-vault",address:v.vaultAddress,valueUsd:String(v.equityUsd),priced:!0,priceSource:"hyperliquid-vault-equity",source:"hyperliquid-info",...h(b,E,[{kind:"hl-vault-equity",id:`hyperliquid:vault:${v.vaultAddress}:${E}`}])})}}let _=a>0||!!(s.valuation&&s.valuation.complete===!1),C=ma(c);return{status:200,body:{ok:!0,owner:s.addresses?.evm??n,queriedAt:s.queriedAt,portfolio:{rows:C.rows,rowsTruncated:C.truncated,rowsOmitted:C.omitted,chains:l,coverage:s.coverage,valuation:s.valuation??null,complete:!_&&a===0&&!C.truncated,incompleteReason:C.truncated?`Showing ${C.rows.length} of ${C.rows.length+C.omitted} rows (native and priced first); ${C.omitted} low-signal rows omitted.`:_?d?`Token scan live on ${d} chain(s); ${a} chain(s) still lack an indexer (native-only).`:"EVM token enumeration requires a public explorer/indexer; natives are still live.":null},warnings:s.warnings}}}function Jt(){return{env:{},allowDiskCredentials:!1,allowAmbientCredentials:!1}}async function Ea(e){let t=Y(e,"body"),n=Gr(t.owner);if(!n)throw new G(400,"owner-required","owner must be an EVM address");let r=await Dr({addresses:{evm:n}},Jt()),o=r?.inventory&&typeof r.inventory=="object"?r.inventory:{},s=(Array.isArray(o.visibleItems)?o.visibleItems:Array.isArray(o.items)?o.items:Array.isArray(r?.items)?r.items:[]).map(a=>{if(!a||typeof a!="object")return null;let p=typeof a.collection=="string"?a.collection:a.collection&&typeof a.collection=="object"&&typeof a.collection.slug=="string"?a.collection.slug:typeof a.contract=="string"?a.contract:null;return{chain:a.chain??null,chainId:a.chainId??null,family:a.family??null,owner:a.owner??n,contract:a.contract??null,tokenId:a.tokenId==null?null:String(a.tokenId),tokenStandard:a.tokenStandard??null,collection:p,name:typeof a.name=="string"?a.name.slice(0,160):null,imageUrl:a.imageUrl??a.image??null,estimatedValueUsd:a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,floorUsd:a.floorUsd!=null&&Number.isFinite(Number(a.floorUsd))?Number(a.floorUsd):a.estimatedValueUsd!=null&&Number.isFinite(Number(a.estimatedValueUsd))?Number(a.estimatedValueUsd):null,spam:a.spam===!0,nsfw:a.nsfw===!0,source:typeof a.source=="string"?a.source.slice(0,64):null}}).filter(Boolean),c=Array.isArray(r?.coverage)?r.coverage:[],l=ha(s),d=r?.valuation?.complete===!0&&!l.truncated;return{status:200,body:{ok:!0,owner:n,queriedAt:r.generatedAt??new Date().toISOString(),nfts:{items:l.items,itemsTruncated:l.truncated,itemsOmitted:l.omitted,chains:c.map(a=>({family:a?.family??null,chain:a?.chain??null,chainId:a?.chainId??null,status:a?.status??null,count:a?.count??null,complete:a?.complete===!0,source:a?.source??null,error:null,reason:typeof a?.reason=="string"?a.reason.slice(0,120):null})),coverage:{operational:!0,complete:d,hasGaps:!d,degraded:c.filter(a=>a?.status==="partial").map(a=>a.chain).filter(Boolean),unavailable:c.filter(a=>a?.status==="unavailable").map(a=>a.chain).filter(Boolean),unconfigured:c.filter(a=>a?.status==="not-configured").map(a=>a.chain).filter(Boolean)},count:l.items.length,visibleCount:l.items.length,totalCount:s.length},valuation:r?.valuation?{estimatedCurrentValueUsd:r.valuation.estimatedCurrentValueUsd??null,valuedItems:r.valuation.valuedItems??null,unvaluedItems:r.valuation.unvaluedItems??null,complete:r.valuation.complete===!0}:null}}}var Aa=6e4,xa=120,Yr=10,ka=300,Ia=Yr,Vr=Object.freeze(new Set(["/public/approvals","/public/portfolio","/public/nfts"])),_a=4096,Fe=new Map;function Ta(e){if(process.env.ORACLE_TRUST_PROXY==="1"){let t=e.headers["x-forwarded-for"];if(typeof t=="string"&&t.length>0){let n=t.split(",")[0].trim();if(n)return n.slice(0,64)}}return e.socket?.remoteAddress||"unknown"}function Ca(e,t){let n=String(e.socket?.remoteAddress||"").replace(/^::ffff:/,""),r=n==="127.0.0.1"||n==="::1"||n.startsWith("127."),o=Ta(e),i=r&&o!==n,s=Vr.has(t)?r&&!i?Ia:Yr:r&&!i?ka:xa,c=Date.now(),l=`${o}:${Vr.has(t)?"amp":"std"}`,d=Fe.get(l);if(!d||c>=d.resetAt){for(Fe.set(l,{count:1,resetAt:c+Aa});Fe.size>_a;){let a=Fe.keys().next();if(a.done)break;Fe.delete(a.value)}return{allowed:!0,limit:s,remaining:s-1,retryAfterSec:0}}return d.count+=1,d.count>s?{allowed:!1,limit:s,remaining:0,retryAfterSec:Math.max(1,Math.ceil((d.resetAt-c)/1e3))}:{allowed:!0,limit:s,remaining:s-d.count,retryAfterSec:0}}var zr=Object.freeze({"GET /public/health":ca,"GET /public/config":fa,"GET /eval":Wr,"GET /public/eval":Wr,"POST /public/connect/request":la,"POST /public/connect/assemble":ua,"POST /public/grants/active":da,"POST /public/grants/get":pa,"POST /public/approvals":ya,"POST /public/portfolio":va,"POST /public/nfts":Ea});function Wr(){let t=[Kt(qe(Gt,"public","eval-report.json")),Kt(qe(Gt,"docs","eval-report.json"))].find(r=>Kr(r));if(!t)throw new G(404,"not-found","no committed eval report in this build");let n;try{n=JSON.parse(Yt(t,"utf8"))}catch{throw new G(500,"eval-report-invalid","committed eval report is not valid JSON")}return{status:200,body:{...n,servedAt:new Date().toISOString(),note:"Static release artifact. Reproduce: npx @oracle-agent/oracle eval guards|adversarial|fidelity --json"}}}function Xt(e={}){return{"cache-control":"no-store","x-oracle-plane":_e,"x-oracle-unsigned":"true",...e}}function Oa(e,t,n,r){e.writeHead(t,Xt({"content-type":n})),e.end(r)}function Na(e,t,n){if(e.method!=="GET"&&e.method!=="HEAD")return!1;let r=n===""?"/":n,o=jr[r]||jr[r.replace(/\/+$/,"")||"/"];if(!o)return!1;let i=Kt(qe(Vt,o.file));if(!i.startsWith(Vt+Qs)&&i!==Vt)return ie(t,404,{error:"not-found",message:"unknown static path"}),!0;if(!Kr(i))return ie(t,404,{error:"not-found",message:`missing static file ${o.file}`}),!0;let s=Yt(i);return e.method==="HEAD"?(t.writeHead(200,Xt({"content-type":o.type,"content-length":String(s.length)})),t.end(),!0):(Oa(t,200,o.type,s),!0)}async function Pa(e,t){if(!rn(e.headers))return ie(t,401,{error:"unauthorized",message:"Hosted service authentication required"});let r=new URL(e.url,"http://localhost").pathname||"/";r.length>1&&r.endsWith("/")&&r!=="/oracle-console/"&&(r=r.replace(/\/+$/,"")),r===""&&(r="/");let o=r.replace(/\/+$/,"")||"/",i=`${e.method} ${o}`,s=zr[i];try{if(!s){if(Na(e,t,r))return;throw Object.keys(zr).some(p=>p.endsWith(` ${o}`))?new G(405,"method-not-allowed",`unsupported method for ${o}`):new G(404,"not-found",`unknown route ${o}`)}let c=Ca(e,o);if(!c.allowed){t.writeHead(429,Xt({"content-type":"application/json","retry-after":String(c.retryAfterSec),"x-ratelimit-limit":String(c.limit),"x-ratelimit-remaining":"0"})),t.end(JSON.stringify({error:"rate-limited",message:`too many requests for ${o}; retry in ${c.retryAfterSec}s`}));return}let l=e.method==="GET"||e.method==="HEAD"?void 0:await ia(e),d=await s(l);ie(t,d.status,d.body)}catch(c){if(c instanceof ee){ie(t,500,{error:"secret-leak-blocked"});return}if(c instanceof ne){ie(t,400,{error:"invalid-grant",errors:c.errors.map(l=>({field:l.field,message:l.message}))});return}if(c instanceof G){ie(t,c.status,{error:c.code,message:c.message});return}if(c instanceof TypeError){ie(t,400,{error:"bad-request",message:c.message});return}ie(t,500,{error:"internal-error"})}}function Ra(){return en((e,t)=>{Pa(e,t).catch(()=>{try{ie(t,500,{error:"internal-error"})}catch{}})})}function Qt({host:e,port:t}={}){let n=aa(e??jt("ORACLE_PUBLIC_HOST","MAD_PUBLIC_HOST",ta)),r=t??jt("ORACLE_PUBLIC_PORT","MAD_PUBLIC_PORT",String(na)),o=Number(r);if(!Number.isInteger(o)||o<0||o>65535)throw new TypeError(`invalid public port: ${String(r)}`);return{host:n,port:o}}function Jr(e={}){let{host:t,port:n}=Qt(e),r=Ra();return r.listen(n,t),r}var Zt=Qt(),rt=Jr(Zt);rt.on("listening",()=>{let e=rt.address(),t=typeof e=="object"&&e?e.address:Zt.host,n=typeof e=="object"&&e?e.port:Zt.port;console.log(`oracle-public-server listening on ${process.env.ORACLE_HOSTED_SIDECAR==="1"?"https":"http"}://${t}:${n} (plane=${_e}, version=${tt}, unsigned-only)`)});rt.on("error",e=>{console.error(`oracle-public-server failed to bind: ${e.code||e.message}`),process.exit(1)});for(let e of["SIGINT","SIGTERM"])process.on(e,()=>{rt.close(()=>process.exit(0)),setTimeout(()=>process.exit(0),1e3).unref()});