@oracle-agent/oracle 0.35.43 → 0.35.45

package/dist/cli/commands/fees.mjs

@@ -1,4 +1,4 @@
-import{readFileSync as D,existsSync as w}from"node:fs";import{Contract as C,JsonRpcProvider as m}from"ethers";var d="0x62FCFAf7573AD8B41a0FBF347AfEb85e06599A75",_=999,x="https://rpc.hyperliquid.xyz/evm",R=["function balanceOf(address owner) view returns (uint256)"],g=/^0x[a-fA-F0-9]{40}$/;function f(o){return g.test(String(o||""))}async function O(o,{contract:s=d,rpc:e=x,chainId:i=_,balanceOf:n}={}){if(!f(o))throw new Error("invalid-address");if(n)return BigInt(await n(o));let r=new m(e,i,{staticNetwork:!0}),c=new C(s,R,r);return BigInt(await c.balanceOf(o))}import p from"node:fs";import y from"node:os";import l from"node:path";import{fileURLToPath as v}from"node:url";var U=l.dirname(v(import.meta.url)),M=l.resolve(U,"../..");function L(){return process.env.ORACLE_FAKE_HOME||y.homedir()}function S(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function h(){return S()?process.env.ORACLE_CONFIG_DIR||l.join(L(),".config","oracle"):l.join(L(),".config","oracle")}function A(){return l.join(h(),"exec.env")}function b(){return l.join(h(),"desk.json")}function j(){return l.join(h(),"env")}function u({force:o=!1}={}){if(u._done&&!o)return u._result||null;u._done=!0;let s={},e=(n,r)=>{if(r==null)return;let c=String(r).trim();c&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=c,s[n]=c))};try{let n=j();if(p.existsSync(n))for(let r of p.readFileSync(n,"utf8").split(/\r?\n/)){let c=r.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!c||c[2].startsWith("#"))continue;let a=c[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),e(c[1],a)}}catch{}try{let n=b();if(p.existsSync(n)){let r=JSON.parse(p.readFileSync(n,"utf8"));r&&typeof r=="object"&&(e("ORACLE_DESK_URL",r.deskUrl||r.dataUrl||r.url),e("ORACLE_DATA_URL",r.dataUrl||r.deskUrl||r.url),e("ORACLE_API_URL",r.apiUrl||r.dataUrl||r.deskUrl),e("ORACLE_PUBLIC_URL",r.publicUrl||r.deskUrl||r.dataUrl),e("ORACLE_EXEC_URL",r.execUrl),e("MAD_DESK_URL",r.deskUrl||r.dataUrl))}}catch{}let i=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return i&&(e("ORACLE_DESK_URL",i),e("ORACLE_DATA_URL",i),e("ORACLE_API_URL",i),e("ORACLE_PUBLIC_URL",i),e("MAD_DESK_URL",i)),u._result=Object.keys(s).length?s:null,u._result}try{u()}catch{}var E=`oracle fees \u2014 Oracle fee-waiver status
+import{readFileSync as D,existsSync as w}from"node:fs";import{Contract as C,JsonRpcProvider as m}from"ethers";var d="0x62FCFAf7573AD8B41a0FBF347AfEb85e06599A75",_=999,x="https://rpc.hyperliquid.xyz/evm",R=["function balanceOf(address owner) view returns (uint256)"],g=/^0x[a-fA-F0-9]{40}$/;function f(o){return g.test(String(o||""))}async function O(o,{contract:s=d,rpc:e=x,chainId:i=_,balanceOf:t}={}){if(!f(o))throw new Error("invalid-address");if(t)return BigInt(await t(o));let n=new m(e,i,{staticNetwork:!0}),c=new C(s,R,n);return BigInt(await c.balanceOf(o))}import p from"node:fs";import y from"node:os";import l from"node:path";import{fileURLToPath as v}from"node:url";var U=l.dirname(v(import.meta.url)),M=l.resolve(U,"../..");function L(){return process.env.ORACLE_FAKE_HOME||y.homedir()}function S(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function h(){return S()?process.env.ORACLE_CONFIG_DIR||l.join(L(),".config","oracle"):l.join(L(),".config","oracle")}function A(){return l.join(h(),"exec.env")}function b(){return l.join(h(),"desk.json")}function j(){return l.join(h(),"env")}function u({force:o=!1}={}){if(u._done&&!o)return u._result||null;u._done=!0;let s={},e=(t,n)=>{if(n==null)return;let c=String(n).trim();c&&(process.env[t]!=null&&String(process.env[t]).trim()!==""||(process.env[t]=c,s[t]=c))};try{let t=j();if(p.existsSync(t))for(let n of p.readFileSync(t,"utf8").split(/\r?\n/)){let c=n.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!c||c[2].startsWith("#"))continue;let a=c[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),e(c[1],a)}}catch{}try{let t=b();if(p.existsSync(t)){let n=JSON.parse(p.readFileSync(t,"utf8"));n&&typeof n=="object"&&(e("ORACLE_DESK_URL",n.deskUrl||n.dataUrl||n.url),e("ORACLE_DATA_URL",n.dataUrl||n.deskUrl||n.url),e("ORACLE_API_URL",n.apiUrl||n.dataUrl||n.deskUrl),e("ORACLE_PUBLIC_URL",n.publicUrl||n.deskUrl||n.dataUrl),e("ORACLE_EXEC_URL",n.execUrl),e("MAD_DESK_URL",n.deskUrl||n.dataUrl))}}catch{}let i=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return i&&(e("ORACLE_DESK_URL",i),e("ORACLE_DATA_URL",i),e("ORACLE_API_URL",i),e("ORACLE_PUBLIC_URL",i),e("MAD_DESK_URL",i)),u._result=Object.keys(s).length?s:null,u._result}try{u()}catch{}var E=`oracle fees \u2014 Oracle fee-waiver status
 
   oracle fees status            check the configured agent wallet
   oracle fees check <address>   check any address
@@ -6,5 +6,5 @@ import{readFileSync as D,existsSync as w}from"node:fs";import{Contract as C,Json
 
 Oracle is public to everyone. A Locals Only NFT only waives Oracle's integrator
 fee. This command reads balanceOf on HyperEVM; it does not sign or request keys.`;function k(o=A()){if(!w(o))return null;try{let s=D(o,"utf8");for(let e of s.split(`
-`)){let i=e.match(/^\s*(?:export\s+)?ORACLE_EVM_ADDRESS\s*=\s*(.+)\s*$/);if(!i)continue;let n=i[1].trim().replace(/^["']|["']$/g,"");if(f(n))return n}}catch{return null}return null}function t(o,s){o.write(s+`
-`)}async function P(o=[],s={}){let e=s.out??process.stdout,i=s.err??process.stderr,n=s.balanceOf??O,r=o[0];if(!r||r==="--help"||r==="-h"||r==="help")return t(e,E),0;if(r==="info")return t(e,`contract: ${d}`),t(e,`chain:    HyperEVM (${_})`),t(e,"benefit:  0% Oracle integrator fee"),t(e,"access:   public to everyone"),0;let c;if(r==="status"){if(c=s.agentAddress?s.agentAddress():k(),!c)return t(e,"wallet: not configured"),t(e,"Locals Only fee-waiver status: unavailable"),t(e,"standard Oracle fee applies when configured"),t(e,"Oracle access remains public to everyone."),0}else if(r==="check"){if(c=o[1],!f(c))return t(i,"usage: oracle fees check <0x address>"),2}else return t(i,`oracle fees: unknown subcommand '${r}'`),2;try{let a=await n(c);return t(e,`wallet: ${c}`),BigInt(a)>0n?(t(e,`Locals Only balance: ${a}`),t(e,"Oracle integrator fee: 0%")):(t(e,"Locals Only balance: 0"),t(e,"standard Oracle fee applies when configured")),t(e,"Oracle access remains public to everyone."),0}catch{return t(e,"Locals Only fee-waiver status: unavailable"),t(e,"standard Oracle fee applies when configured"),t(e,"Oracle access remains public to everyone."),0}}var z="check Locals Only zero-fee eligibility",J={name:"fees",summary:"check Locals Only zero-fee eligibility",group:"read",usage:E,async run(o){return P(o.argv??[])}};export{k as agentAddress,J as default,z as help,P as run};
+`)){let i=e.match(/^\s*(?:export\s+)?ORACLE_EVM_ADDRESS\s*=\s*(.+)\s*$/);if(!i)continue;let t=i[1].trim().replace(/^["']|["']$/g,"");if(f(t))return t}}catch{return null}return null}function r(o,s){o.write(s+`
+`)}async function P(o=[],s={}){let e=s.out??process.stdout,i=s.err??process.stderr,t=s.balanceOf??O,n=o[0];if(!n||n==="--help"||n==="-h"||n==="help")return r(e,E),0;if(n==="info")return r(e,`contract: ${d}`),r(e,`chain:    HyperEVM (${_})`),r(e,"benefit:  0% Oracle integrator fee"),r(e,"access:   public to everyone"),0;let c;if(n==="status"){if(c=s.agentAddress?s.agentAddress():k(),!c)return r(e,"wallet: not configured"),r(e,"Locals Only fee-waiver status: unavailable"),r(e,"standard Oracle fee applies when configured"),r(e,"Oracle access remains public to everyone."),0}else if(n==="check"){if(c=o[1],!f(c))return r(i,"usage: oracle fees check <0x address>"),2}else return r(i,`oracle fees: unknown subcommand '${n}'`),2;try{let a=await t(c);return r(e,`wallet: ${c}`),BigInt(a)>0n?(r(e,`Locals Only balance: ${a}`),r(e,"Oracle integrator fee: 0%")):(r(e,"Locals Only balance: 0"),r(e,"standard Oracle fee applies when configured")),r(e,"Oracle access remains public to everyone."),0}catch{return r(e,"Locals Only fee-waiver status: unavailable"),r(e,"standard Oracle fee applies when configured"),r(e,"Oracle access remains public to everyone."),0}}var z="check Locals Only zero-fee eligibility",J={name:"fees",summary:"check Locals Only zero-fee eligibility",group:"read",usage:E,async run(o){return P(o.argv??[])}};export{k as agentAddress,J as default,z as help,P as run};

package/dist/cli/commands/follow.mjs

@@ -1,8 +1,8 @@
-var Ke="0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef",Oe={1:["https://mainnet.gateway.tenderly.co","https://eth.drpc.org","https://rpc.flashbots.net"],8453:["https://base.gateway.tenderly.co","https://mainnet.base.org","https://base.drpc.org"],42161:["https://arbitrum.gateway.tenderly.co","https://arb1.arbitrum.io/rpc","https://arbitrum.drpc.org"]},Ht=1e4,vt=e=>new Promise(t=>setTimeout(t,e)),Ye=e=>"0x"+BigInt(e).toString(16),Ft=e=>"0x"+"0".repeat(24)+e.slice(2).toLowerCase(),Xe=e=>"0x"+e.slice(26).toLowerCase(),Ut=/timeout|timed out|too many requests|rate.?limit|429|502|503|504|internal error|temporarily|aborted|fetch failed|ECONNRESET|socket hang up/i,Mt=/too many|exceeds|limited to|not supported on free plan|response too large|range must not exceed|narrow your filter/i,J=class extends Error{constructor(t,{transient:r=!1,tooBig:n=!1,http:o=0}={}){super(t),this.transient=r,this.tooBig=n,this.http=o}};async function Dt(e,t,r,n){let o=new AbortController,i=setTimeout(()=>o.abort(),n),s,l;try{s=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:t,params:r}),signal:o.signal}),l=await s.text()}catch(u){throw new J(`${t} network: ${u.message}`,{transient:!0})}finally{clearTimeout(i)}let a;try{a=JSON.parse(l)}catch{throw new J(`${t} non-JSON http=${s.status}: ${l.slice(0,80)}`,{transient:s.status>=500||s.status===429,http:s.status})}if(a.error){let u=a.error.message||"rpc error";throw new J(`${t} rpc: ${u}`,{transient:Ut.test(u),tooBig:Mt.test(u),http:s.status})}if(s.status!==200)throw new J(`${t} http=${s.status}: ${l.slice(0,80)}`,{transient:s.status>=500||s.status===429,http:s.status});return a.result}async function Ze(e,t,r,{retries:n,timeoutMs:o,onWarn:i}){let s;for(let l of e){for(let a=0;a<=n;a++)try{return{result:await Dt(l,t,r,o),url:l}}catch(u){if(s=u,u.tooBig)throw u;if(!u.transient||a===n)break;let c=Math.min(2e3*2**a,8e3)+Math.random()*250;i?.(`retry ${l} (${u.message.slice(0,70)}) in ${Math.round(c)}ms`),await vt(c)}i?.(`endpoint exhausted: ${l} -> ${s?.message.slice(0,70)}`)}throw s??new J("no endpoints available")}async function Te(e,t,r,n,o,i){let s=[{...t,fromBlock:Ye(r),toBlock:Ye(n)}];try{let{result:a}=await Ze(e,"eth_getLogs",s,o);Array.isArray(a)&&i.push(...a);return}catch(a){if(!a.tooBig||n<=r)throw a;o.onWarn?.(`splitting ${r}-${n} (${a.message.slice(0,60)})`)}let l=r+Math.floor((n-r)/2);await Promise.all([Te(e,t,r,l,o,i),Te(e,t,l+1,n,o,i)])}async function _e(e,t={}){if(!/^0x[0-9a-fA-F]{40}$/.test(e||""))throw new Error(`invalid address: ${e}`);let{chains:r=[1,8453,42161],lookback:n=1e5,fromBlock:o,toBlock:i,chunkSize:s=Ht,tokens:l,direction:a="both",retries:u=3,timeoutMs:c=2e4,concurrency:p=4,endpoints:f=Oe,onWarn:h}=t,d={retries:u,timeoutMs:c,onWarn:h},y=Ft(e),b=[],S=[],R={},N=new Set;return await Promise.all(r.map(async x=>{let C=f[x];if(!C?.length){S.push({chainId:x,stage:"config",error:"no endpoints configured"});return}try{let L=i;if(L==null){let{result:g}=await Ze(C,"eth_blockNumber",[],d);L=parseInt(g,16)}let w=Math.max(0,o??L-n+1),E=Math.max(w,L);R[x]={fromBlock:w,toBlock:E,blocks:E-w+1};let _=[];for(let g=w;g<=E;g+=s)_.push([g,Math.min(g+s-1,E)]);let I=[],m=l?.length?{address:l}:{};(a==="in"||a==="both")&&I.push({...m,topics:[Ke,null,y]}),(a==="out"||a==="both")&&I.push({...m,topics:[Ke,y,null]});let A=[];for(let g of I)for(let j of _)A.push([g,j]);let v=[],k=0,W=Array.from({length:Math.min(p,A.length)},async()=>{for(;k<A.length;){let[g,[j,T]]=A[k++];try{await Te(C,g,j,T,d,v)}catch(O){S.push({chainId:x,stage:"getLogs",range:[j,T],error:O.message})}}});await Promise.all(W);for(let g of v){if(!g?.topics||g.topics.length<3)continue;let j=parseInt(g.logIndex,16),T=`${x}|${g.transactionHash}|${j}`;N.has(T)||(N.add(T),b.push({chainId:x,token:g.address.toLowerCase(),from:Xe(g.topics[1]),to:Xe(g.topics[2]),value:BigInt(g.data==="0x"?"0x0":g.data).toString(),blockNumber:parseInt(g.blockNumber,16),txHash:g.transactionHash,logIndex:j}))}}catch(L){S.push({chainId:x,stage:"range",error:L.message})}})),b.sort((x,C)=>C.blockNumber-x.blockNumber||C.logIndex-x.logIndex),{events:b,errors:S,ranges:R}}import{keccak_256 as je}from"@noble/hashes/sha3.js";import{createHash as qt}from"node:crypto";import{types as z}from"node:util";import V from"node:net";import Bt from"node:dns";var zt=new Set(["localhost","metadata.google.internal","metadata.goog"]);function de(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let p=c.split(":"),f=p.at(-1);if(f?.includes(".")){let h=f.split(".").map(Number);if(h.length!==4||h.some(d=>!Number.isInteger(d)||d<0||d>255))return null;p.splice(p.length-1,1,(h[0]<<8|h[1]).toString(16),(h[2]<<8|h[3]).toString(16))}return p.some(h=>!/^[0-9a-f]{1,4}$/.test(h))?null:p.map(h=>Number.parseInt(h,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let l=t.includes("::"),a=8-i.length-s.length;if(!l&&a!==0||l&&a<1)return null;let u=[...i,...Array(Math.max(0,a)).fill(0),...s];return u.length!==8?null:Uint8Array.from(u.flatMap(c=>[c>>8,c&255]))}function ke(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function $e(e){if(V.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(V.isIPv6(e)){let t=de(e);if(!t)return!1;let r=de("::ffff:0:0");return ke(t,r,96)?$e([...t.slice(12)].join(".")):ke(t,de("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>ke(t,de(o),i)):!1}return!1}function Gt(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(zt.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=V.isIP(r);return n!==0&&!$e(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function Re(e,{lookupFn:t=Bt.promises.lookup}={}){let r=Gt(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:V.isIPv6(r.host)?6:4}]};let n;try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!$e(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function Ne({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n;try{let p=await t();r=p.Agent,n=p.fetch}catch(p){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${p?.message||p}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let o=p=>String(p).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,s=p=>(Array.isArray(p)?p:[p]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(V.isIPv6(f.address)?6:4)})),l=(p,f,h)=>{i.set(o(p),s(typeof f=="string"?[{address:f,family:h}]:f))},a=p=>{let f=o(p);if(V.isIP(f))return[{address:f,family:V.isIPv6(f)?6:4}];let h=i.get(f);if(!h||!h.length)throw new Error(`refused: unpinned host ${p} during pinned fetch`);return h},u=new r({connect:{lookup(p,f,h){let d;try{d=a(p)}catch(y){return h(y)}return f?.all?h(null,d):h(null,d[0].address,d[0].family)}}}),c=Wt((p,f={})=>n(p,{...f,dispatcher:u}),l);return{dispatcher:u,fetch:c,pin:l,resolve:a,async close(){try{await u.destroy()}catch{}}}}var Ie=Symbol.for("oracle.egressGuard.pinCapableFetch");function Wt(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Ie]=Object.freeze({pin:t}),e}function Pe(e){return typeof e=="function"&&typeof e[Ie]?.pin=="function"}function Qe(e,t,r){if(!Pe(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Ie].pin(t,r)}var Jt=new Set([408,425,429,500,502,503,504]),et=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Vt=2,tt=4e3,Kt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Yt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Xt=AbortSignal.prototype.throwIfAborted,Zt=EventTarget.prototype.addEventListener,rt=EventTarget.prototype.removeEventListener,nt=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,oe=e=>e?Kt.call(e):!1,Qt=e=>e?Yt.call(e):void 0,er=new Set([301,302,303,307,308]),pe=3,so=64*1024,B=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function P(e){return G(`HTTP JSON body refused: ${e}`)}function tr(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof z[t]=="function"&&z[t](e))}function rr(e){let t=[],r=0,n=0,o=0,i=0,s=new WeakSet,l=c=>{if(r+=Buffer.byteLength(c,"utf8"),r>B.bytes)throw P("serialized byte limit exceeded");t.push(c)},a=c=>{if(Buffer.byteLength(c,"utf8")>B.bytes)throw P("serialized byte limit exceeded");return JSON.stringify(c)},u=(c,p)=>{if(n+=1,n>B.nodes)throw P("node limit exceeded");if(p>B.depth)throw P("depth limit exceeded");if(c===null){l("null");return}if(typeof c=="string"){l(a(c));return}if(typeof c=="boolean"){l(c?"true":"false");return}if(typeof c=="number"){if(!Number.isFinite(c))throw P("non-finite number");l(Object.is(c,-0)?"0":String(c));return}if(typeof c!="object")throw P("unsupported non-JSON value");if(z.isProxy(c))throw P("proxy value");if(tr(c))throw P("unsupported exotic object");if(s.has(c))throw P("cyclic value");s.add(c);try{if(Object.getOwnPropertySymbols(c).length>0)throw P("symbol-keyed fields are unsupported");if(Array.isArray(c)){let d=Object.getPrototypeOf(c),y=0;for(;d!==null;){if(z.isProxy(d))throw P("proxy array prototype");if(y+=1,y>B.depth)throw P("array prototype depth limit exceeded");d=Object.getPrototypeOf(d)}if(c.length>B.arrayLength)throw P("array length limit exceeded");for(let S=0;S<c.length;S+=1){let R=Object.getOwnPropertyDescriptor(c,String(S));if(!R||!Object.hasOwn(R,"value")||R.enumerable!==!0)throw P("array entries must be dense enumerable own data")}let b=0;for(let S in c){if(i+=1,i>B.fields)throw P("enumeration limit exceeded");if(Object.hasOwn(c,S)&&(b+=1,b>c.length))throw P("named array fields are unsupported")}if(b!==c.length)throw P("array entries must be dense enumerable own data");l("[");for(let S=0;S<c.length;S+=1)S&&l(","),u(Object.getOwnPropertyDescriptor(c,String(S)).value,p+1);l("]");return}let f=Object.getPrototypeOf(c);if(f!==Object.prototype&&f!==null)throw P("non-plain object");let h=[];for(let d in c){if(i+=1,i>B.fields)throw P("enumeration limit exceeded");if(!Object.hasOwn(c,d))continue;if(o+=1,o>B.fields)throw P("field limit exceeded");let y=Object.getOwnPropertyDescriptor(c,d);if(!y||!Object.hasOwn(y,"value")||y.enumerable!==!0)throw P("object fields must be enumerable own data");h.push([d,y.value])}l("{");for(let d=0;d<h.length;d+=1)d&&l(","),l(a(h[d][0])),l(":"),u(h[d][1],p+1);l("}")}finally{s.delete(c)}};return u(e,0),t.join("")}function nr(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(z.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let i=Object.getOwnPropertyDescriptor(e,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[n]=String(s)}return t}function or(){return Object.assign(Object.create(null),{Accept:"application/json"})}function sr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function ir(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Ce=new Map,ot=new WeakMap,st=1;function fe(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=ot.get(e);return t||(t=st,st+=1,ot.set(e,t)),`reference:${t}`}var ar=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),cr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function it(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?ar.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function at(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(it);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return it(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&cr.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function lr(e,t,r,n={},o=null){let i=qt("sha256"),s=(a,u)=>{let c=String(u);i.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),i.update("=").update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c).update(`
-`)};s("method",e),s("url",t),Object.keys(r||{}).map((a,u)=>({name:a.toLowerCase(),order:u,value:String(r[a])})).sort((a,u)=>a.name.localeCompare(u.name)||a.order-u.order).forEach((a,u)=>{s(`header-name-${u}`,a.name),s(`header-value-${u}`,a.value)}),s("body",o??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${a}`,n[a]??"-");return i.digest("hex")}function ur(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,tt):Math.min(250*2**e,tt)+Math.floor(Math.random()*100)}var dr=e=>new Promise(t=>setTimeout(t,e));function G(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Le(e,t,r){return G(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function K(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function fr(e){return e?e.byteLength??e.length??0:0}async function pr(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(K(e),!n))throw Le(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let p=await e.text(),f=Buffer.byteLength(p,"utf8");if(f>t){if(!n)throw Le(r,`body ${f} bytes`,t);return Buffer.from(p,"utf8").subarray(0,t).toString("utf8")}return p}let l=[],a=0,u=!1;try{for(;;){let{value:p,done:f}=await s.read();if(f)break;if(p&&(l.push(Buffer.from(p)),a+=fr(p),a>t)){u=!0;break}}}finally{if(u)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(u&&(typeof o=="function"&&o(),!n))throw Le(r,`streamed ${a} bytes`,t);let c=Buffer.concat(l);return(u?c.subarray(0,t):c).toString("utf8")}function hr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function mr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:l,untrustedUrl:a=!1,maxResponseBytes:u=null,sameOriginRedirectsOnly:c=!1,importUndici:p,validateResponse:f,signal:h,redirectPolicy:d="follow",maxRedirects:y=pe}){let b=null,S=t,R=s?{lookupFn:s}:{};if(a&&!l&&!Pe(S))throw G(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let N=new AbortController,x=setTimeout(()=>N.abort(),i),C=h?nt?nt([h,N.signal]):h:N.signal,L=async(w,{status:E=null}={})=>{let _=await Re(w,R);if(!_.ok)throw G(E==null?`HTTP refused ${w}: ${_.error}`:`HTTP redirect to ${w} ${_.error}`,E==null?{}:{status:E});let I=new URL(w).hostname;if(l){if(b&&(await b.close(),b=null),!b)try{b=await Ne({requireUndici:!0,...p?{importUndici:p}:{}})}catch(m){throw G(E==null?`HTTP refused ${w}: ${m?.message||m}`:`HTTP redirect to ${w} refused: ${m?.message||m}`,E==null?{}:{status:E})}b.pin(I,_.addresses),S=b.fetch}else Qe(S,I,_.addresses);return _};try{let w=String(e),E=Object.assign(Object.create(null),n||{});a&&await L(w);for(let _=0;_<=y;_+=1){let I=Object.assign(Object.create(null),{method:r,headers:E,body:o,signal:C,redirect:"manual",dispatcher:void 0}),m=await S(w,I);if((d==="error"||y===0)&&m.status>=300&&m.status<400)throw K(m),G(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(er.has(m.status)){let k=c===!0&&r==="POST"&&[307,308].includes(m.status)&&at(r,o);if(r!=="GET"&&r!=="HEAD"&&!k){K(m);let T=new Error(`HTTP ${m.status} ${r} ${w} redirected non-idempotent request`);throw T.status=m.status,T}if(_===y)throw K(m),G(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let W=m.headers?.get?.("location"),g;try{g=sr(W,w)}catch(T){throw K(m),T}let j=!ir(g,w);if(K(m),j&&r==="POST"){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T}if(j&&c){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T.retryable=!1,T}if(j&&(E=or(E)),a)await L(g,{status:m.status});else if(j){let T=await Re(g,R);if(!T.ok){let O=new Error(`HTTP redirect from ${w} ${T.error}`);throw O.status=m.status,O.retryable=!1,O}l&&T.addresses?.length&&(b||(b=await Ne(p?{importUndici:p}:{})),b&&(b.pin(new URL(g).hostname,T.addresses),S=b.fetch))}w=g;continue}if(typeof f=="function")try{await f(m,{url:w})}catch(k){throw K(m),G(k?.message||String(k))}let A=await pr(m,u,{url:w,onOversize:()=>N.abort()}),v=hr(A);if(!m.ok){let k=new Error(`HTTP ${m.status} ${r} ${w}`);throw k.status=m.status,k.retryAfter=m.headers?.get?.("retry-after")??null,k.body=v??A.slice(0,300),k}return v??A}throw new Error(`HTTP redirect loop for ${e}`)}catch(w){if(N.signal.aborted&&!oe(h)){let E=w&&(typeof w=="object"||typeof w=="function")&&!z.isProxy(w)?w:null,_=E?Object.getOwnPropertyDescriptor(E,"oversize"):null;if(!(_&&Object.hasOwn(_,"value")&&_.value===!0))try{if(!E)throw new TypeError("unsafe rejection");Object.defineProperties(E,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw w}finally{clearTimeout(x),b&&await b.close()}}async function he(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&z.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let O of Object.getOwnPropertyNames(t)){let $=Object.getOwnPropertyDescriptor(t,O);if(!(O==="toJSON"&&$&&Object.hasOwn($,"value")&&$.value===void 0)){if(!r.has(O))throw new TypeError("HTTP options contain unknown fields");if(!$||!$.enumerable||!Object.hasOwn($,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=O=>{if(t==null||!Object.hasOwn(t,O))return;let $=Object.getOwnPropertyDescriptor(t,O);if(!$||!Object.hasOwn($,"value"))throw new TypeError("HTTP options must contain own data properties");return $.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=n("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let l=n("redirectPolicy");if(l!==void 0&&l!=="follow"&&l!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>pe))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${pe}`);if(l==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let u=l??"follow",c=u==="error"?0:a??pe;for(let O of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let $=n(O);if($!==void 0&&typeof $!="boolean")throw new TypeError(`HTTP ${O} must be boolean`)}let p=n("maxResponseBytes");if(p!==void 0&&(!Number.isInteger(p)||p<1||p>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let f=n("signal");if(f!==void 0){if(z.isProxy(f)||!(f instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{oe(f)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let O of["importUndici","lookupFn","validateResponse"]){let $=n(O);if($!==void 0&&typeof $!="function")throw new TypeError(`HTTP ${O} must be a function`)}let h=n("fetchImpl"),d=h||globalThis.fetch;if(typeof d!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let y=i??12e3,b=(o||"GET").toUpperCase(),S=n("headers"),R=nr(S),N=Object.assign(Object.create(null),R);Object.keys(N).some(O=>O.toLowerCase()==="accept")||(N.Accept="application/json");let x=n("body");x!=null&&typeof x!="string"&&(Object.keys(N).find($=>$.toLowerCase()==="content-type")||(N["Content-Type"]="application/json"),x=rr(x));let C=s??Vt,L=n("lookupFn"),w=!h,E=n("untrustedUrl")===!0,_=n("sameOriginRedirectsOnly")===!0,I=n("importUndici"),m=n("validateResponse"),A=f,v=p??null,k=async()=>{let O;for(let $=0;$<=C;$++){A&&Xt.call(A);try{return await mr(e,{fetchImpl:d,method:b,headers:N,body:x,timeoutMs:y,lookupFn:L,realFetch:w,untrustedUrl:E,maxResponseBytes:v,sameOriginRedirectsOnly:_,importUndici:I,validateResponse:m,signal:A,redirectPolicy:u,maxRedirects:c})}catch(q){O=q;let Q=Ae=>{if(!q||typeof q!="object"&&typeof q!="function"||z.isProxy(q))return;let re=Object.getOwnPropertyDescriptor(q,Ae);return re&&Object.hasOwn(re,"value")?re.value:void 0},Ee=Q("status"),Ct=Q("oracleTimeout")===!0||Q("name")==="AbortError"||Q("name")==="TimeoutError"||oe(A),Lt=new Set([408,425,429]),jt=Q("retryable")===!1?!1:Ee!=null?Lt.has(Ee)||Jt.has(Ee)&&et.has(b):!Ct&&et.has(b);if($===C||!jt)throw q;let Je=ur($,Q("retryAfter"));A?await new Promise((Ae,re)=>{let Ve,ne=()=>{clearTimeout(Ve),rt.call(A,"abort",ne),re(Qt(A)||new DOMException("Aborted","AbortError"))};if(oe(A)){ne();return}Ve=setTimeout(()=>{rt.call(A,"abort",ne),Ae()},Je),Zt.call(A,"abort",ne,{once:!0}),oe(A)&&ne()}):await dr(Je)}}throw O};if(!(n("dedupe")!==!1&&!A&&at(b,x)))return k();let g=lr(b,e,N,{untrustedUrl:E,maxResponseBytes:v,sameOriginRedirectsOnly:_,redirectPolicy:u,maxRedirects:c,timeoutMs:y,retries:C,fetchImpl:fe(d),realFetch:w,lookupFn:fe(L),importUndici:fe(I),validateResponse:fe(m)},x),j=Ce.get(g);if(j)return j;let T=k().finally(()=>Ce.delete(g));return Ce.set(g,T),T}var ct={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},yr=new Map(Object.values(ct).map(e=>[e.chainId,e]));function lt(e){return yr.get(Number(e))||null}function ut(e,t=process.env){let r=lt(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}import{Interface as wr,getAddress as po}from"ethers";var ho=new wr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var br={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function gr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=ut(e,r);return n||br[Number(e)]||null}var xr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Sr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!xr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var se=new Map,dt=new Map;function Er(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Ar(e){if(e?.error)throw Er(e.error);return e?.result}function Tr(e,t,r){return`${e}
+var Ze="0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef",_e={1:["https://mainnet.gateway.tenderly.co","https://eth.drpc.org","https://rpc.flashbots.net"],8453:["https://base.gateway.tenderly.co","https://mainnet.base.org","https://base.drpc.org"],42161:["https://arbitrum.gateway.tenderly.co","https://arb1.arbitrum.io/rpc","https://arbitrum.drpc.org"]},Ut=1e4,Dt=e=>new Promise(t=>setTimeout(t,e)),Qe=e=>"0x"+BigInt(e).toString(16),Bt=e=>"0x"+"0".repeat(24)+e.slice(2).toLowerCase(),et=e=>"0x"+e.slice(26).toLowerCase(),zt=/timeout|timed out|too many requests|rate.?limit|429|502|503|504|internal error|temporarily|aborted|fetch failed|ECONNRESET|socket hang up/i,Gt=/too many|exceeds|limited to|not supported on free plan|response too large|range must not exceed|narrow your filter/i,V=class extends Error{constructor(t,{transient:r=!1,tooBig:n=!1,http:o=0}={}){super(t),this.transient=r,this.tooBig=n,this.http=o}};async function Wt(e,t,r,n){let o=new AbortController,i=setTimeout(()=>o.abort(),n),s,u;try{s=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:t,params:r}),signal:o.signal}),u=await s.text()}catch(d){throw new V(`${t} network: ${d.message}`,{transient:!0})}finally{clearTimeout(i)}let a;try{a=JSON.parse(u)}catch{throw new V(`${t} non-JSON http=${s.status}: ${u.slice(0,80)}`,{transient:s.status>=500||s.status===429,http:s.status})}if(a.error){let d=a.error.message||"rpc error";throw new V(`${t} rpc: ${d}`,{transient:zt.test(d),tooBig:Gt.test(d),http:s.status})}if(s.status!==200)throw new V(`${t} http=${s.status}: ${u.slice(0,80)}`,{transient:s.status>=500||s.status===429,http:s.status});return a.result}async function tt(e,t,r,{retries:n,timeoutMs:o,onWarn:i}){let s;for(let u of e){for(let a=0;a<=n;a++)try{return{result:await Wt(u,t,r,o),url:u}}catch(d){if(s=d,d.tooBig)throw d;if(!d.transient||a===n)break;let l=Math.min(2e3*2**a,8e3)+Math.random()*250;i?.(`retry ${u} (${d.message.slice(0,70)}) in ${Math.round(l)}ms`),await Dt(l)}i?.(`endpoint exhausted: ${u} -> ${s?.message.slice(0,70)}`)}throw s??new V("no endpoints available")}async function Oe(e,t,r,n,o,i){let s=[{...t,fromBlock:Qe(r),toBlock:Qe(n)}];try{let{result:a}=await tt(e,"eth_getLogs",s,o);Array.isArray(a)&&i.push(...a);return}catch(a){if(!a.tooBig||n<=r)throw a;o.onWarn?.(`splitting ${r}-${n} (${a.message.slice(0,60)})`)}let u=r+Math.floor((n-r)/2);await Promise.all([Oe(e,t,r,u,o,i),Oe(e,t,u+1,n,o,i)])}async function ke(e,t={}){if(!/^0x[0-9a-fA-F]{40}$/.test(e||""))throw new Error(`invalid address: ${e}`);let{chains:r=[1,8453,42161],lookback:n=1e5,fromBlock:o,toBlock:i,chunkSize:s=Ut,tokens:u,direction:a="both",retries:d=3,timeoutMs:l=2e4,concurrency:h=4,endpoints:p=_e,onWarn:f}=t,c={retries:d,timeoutMs:l,onWarn:f},y=Bt(e),w=[],S=[],R={},N=new Set;return await Promise.all(r.map(async x=>{let C=p[x];if(!C?.length){S.push({chainId:x,stage:"config",error:"no endpoints configured"});return}try{let L=i;if(L==null){let{result:g}=await tt(C,"eth_blockNumber",[],c);L=parseInt(g,16)}let b=Math.max(0,o??L-n+1),E=Math.max(b,L);R[x]={fromBlock:b,toBlock:E,blocks:E-b+1};let k=[];for(let g=b;g<=E;g+=s)k.push([g,Math.min(g+s-1,E)]);let I=[],m=u?.length?{address:u}:{};(a==="in"||a==="both")&&I.push({...m,topics:[Ze,null,y]}),(a==="out"||a==="both")&&I.push({...m,topics:[Ze,y,null]});let A=[];for(let g of I)for(let H of k)A.push([g,H]);let v=[],$=0,q=Array.from({length:Math.min(h,A.length)},async()=>{for(;$<A.length;){let[g,[H,_]]=A[$++];try{await Oe(C,g,H,_,c,v)}catch(T){S.push({chainId:x,stage:"getLogs",range:[H,_],error:T.message})}}});await Promise.all(q);for(let g of v){if(!g?.topics||g.topics.length<3)continue;let H=parseInt(g.logIndex,16),_=`${x}|${g.transactionHash}|${H}`;N.has(_)||(N.add(_),w.push({chainId:x,token:g.address.toLowerCase(),from:et(g.topics[1]),to:et(g.topics[2]),value:BigInt(g.data==="0x"?"0x0":g.data).toString(),blockNumber:parseInt(g.blockNumber,16),txHash:g.transactionHash,logIndex:H}))}}catch(L){S.push({chainId:x,stage:"range",error:L.message})}})),w.sort((x,C)=>C.blockNumber-x.blockNumber||C.logIndex-x.logIndex),{events:w,errors:S,ranges:R}}import{keccak_256 as je}from"@noble/hashes/sha3.js";import{createHash as tr}from"node:crypto";import{types as G}from"node:util";import{AsyncLocalStorage as qt}from"node:async_hooks";var Vt=new qt,Jt=["http","retry","shared"],Kt=512;function fe(e){let t=Vt.getStore();if(!t||t.closed||!Jt.includes(e))return null;if(t.spans.length>=Kt)return t.droppedSpans++,null;let r={stage:e,startMs:t.now()-t.start,durationMs:null,outcome:"pending",status:null};return t.spans.push(r),(n,o=null)=>{t.closed||r.durationMs!==null||(r.durationMs=Math.max(0,t.now()-t.start-r.startMs),r.outcome=n==="succeeded"?"succeeded":"failed",r.status=Number.isInteger(o)&&o>=100&&o<=599?o:null)}}import J from"node:net";import Yt from"node:dns";var Xt=new Set(["localhost","metadata.google.internal","metadata.goog"]);function pe(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=l=>{if(!l)return[];let h=l.split(":"),p=h.at(-1);if(p?.includes(".")){let f=p.split(".").map(Number);if(f.length!==4||f.some(c=>!Number.isInteger(c)||c<0||c>255))return null;h.splice(h.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return h.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:h.map(f=>Number.parseInt(f,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let u=t.includes("::"),a=8-i.length-s.length;if(!u&&a!==0||u&&a<1)return null;let d=[...i,...Array(Math.max(0,a)).fill(0),...s];return d.length!==8?null:Uint8Array.from(d.flatMap(l=>[l>>8,l&255]))}function $e(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function Re(e){if(J.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(J.isIPv6(e)){let t=pe(e);if(!t)return!1;let r=pe("::ffff:0:0");return $e(t,r,96)?Re([...t.slice(12)].join(".")):$e(t,pe("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>$e(t,pe(o),i)):!1}return!1}function Zt(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Xt.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=J.isIP(r);return n!==0&&!Re(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function Ne(e,{lookupFn:t=Yt.promises.lookup}={}){let r=Zt(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:J.isIPv6(r.host)?6:4}]};let n;if(process.env.ORACLE_HOSTED_EGRESS_PROXY)return{ok:!0,url:r.url,addresses:[]};try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!Re(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}function Qt(e=process.env){let t=e.ORACLE_HOSTED_EGRESS_PROXY||"";if(!t)return null;let r;try{r=new URL(t)}catch{throw new Error("egress-guard: ORACLE_HOSTED_EGRESS_PROXY is not a URL")}if(r.protocol!=="http:"||!["127.0.0.1","::1","localhost","[::1]"].includes(r.hostname)||!r.port||r.username||r.password)throw new Error("egress-guard: egress proxy must be an exact loopback http origin");let n=e.ORACLE_HOSTED_EGRESS_TOKEN||"";if(!/^[A-Za-z0-9_-]{43}$/.test(n))throw new Error("egress-guard: egress proxy token is missing");return{uri:r.origin,token:n}}async function Ie({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n,o;try{o=await t(),r=o.Agent,n=o.fetch}catch(f){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${f?.message||f}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let i=f=>String(f).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),s=new Map,u=f=>(Array.isArray(f)?f:[f]).map(c=>typeof c=="string"?{address:c}:c).filter(c=>c&&c.address).map(c=>({address:c.address,family:c.family||(J.isIPv6(c.address)?6:4)})),a=(f,c,y)=>{s.set(i(f),u(typeof c=="string"?[{address:c,family:y}]:c))},d=f=>{let c=i(f);if(J.isIP(c))return[{address:c,family:J.isIPv6(c)?6:4}];let y=s.get(c);if(!y||!y.length)throw new Error(`refused: unpinned host ${f} during pinned fetch`);return y},l=Qt(),h=l&&typeof o.ProxyAgent=="function"?new o.ProxyAgent({uri:l.uri,token:`Bearer ${l.token}`,connectTimeout:1e4}):new r({connect:{lookup(f,c,y){let w;try{w=d(f)}catch(S){return y(S)}return c?.all?y(null,w):y(null,w[0].address,w[0].family)}}}),p=er((f,c={})=>n(f,{...c,dispatcher:h}),a);return{dispatcher:h,fetch:p,pin:a,resolve:d,async close(){try{await h.destroy()}catch{}}}}var Pe=Symbol.for("oracle.egressGuard.pinCapableFetch");function er(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Pe]=Object.freeze({pin:t}),e}function Ce(e){return typeof e=="function"&&typeof e[Pe]?.pin=="function"}function rt(e,t,r){if(!Ce(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Pe].pin(t,r)}var rr=new Set([408,425,429,500,502,503,504]),nt=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),nr=2,ot=4e3,or=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,sr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,ir=AbortSignal.prototype.throwIfAborted,ar=EventTarget.prototype.addEventListener,st=EventTarget.prototype.removeEventListener,it=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,oe=e=>e?or.call(e):!1,cr=e=>e?sr.call(e):void 0,lr=new Set([301,302,303,307,308]),me=3,bo=64*1024,z=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function P(e){return W(`HTTP JSON body refused: ${e}`)}function ur(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof G[t]=="function"&&G[t](e))}function dr(e){let t=[],r=0,n=0,o=0,i=0,s=new WeakSet,u=l=>{if(r+=Buffer.byteLength(l,"utf8"),r>z.bytes)throw P("serialized byte limit exceeded");t.push(l)},a=l=>{if(Buffer.byteLength(l,"utf8")>z.bytes)throw P("serialized byte limit exceeded");return JSON.stringify(l)},d=(l,h)=>{if(n+=1,n>z.nodes)throw P("node limit exceeded");if(h>z.depth)throw P("depth limit exceeded");if(l===null){u("null");return}if(typeof l=="string"){u(a(l));return}if(typeof l=="boolean"){u(l?"true":"false");return}if(typeof l=="number"){if(!Number.isFinite(l))throw P("non-finite number");u(Object.is(l,-0)?"0":String(l));return}if(typeof l!="object")throw P("unsupported non-JSON value");if(G.isProxy(l))throw P("proxy value");if(ur(l))throw P("unsupported exotic object");if(s.has(l))throw P("cyclic value");s.add(l);try{if(Object.getOwnPropertySymbols(l).length>0)throw P("symbol-keyed fields are unsupported");if(Array.isArray(l)){let c=Object.getPrototypeOf(l),y=0;for(;c!==null;){if(G.isProxy(c))throw P("proxy array prototype");if(y+=1,y>z.depth)throw P("array prototype depth limit exceeded");c=Object.getPrototypeOf(c)}if(l.length>z.arrayLength)throw P("array length limit exceeded");for(let S=0;S<l.length;S+=1){let R=Object.getOwnPropertyDescriptor(l,String(S));if(!R||!Object.hasOwn(R,"value")||R.enumerable!==!0)throw P("array entries must be dense enumerable own data")}let w=0;for(let S in l){if(i+=1,i>z.fields)throw P("enumeration limit exceeded");if(Object.hasOwn(l,S)&&(w+=1,w>l.length))throw P("named array fields are unsupported")}if(w!==l.length)throw P("array entries must be dense enumerable own data");u("[");for(let S=0;S<l.length;S+=1)S&&u(","),d(Object.getOwnPropertyDescriptor(l,String(S)).value,h+1);u("]");return}let p=Object.getPrototypeOf(l);if(p!==Object.prototype&&p!==null)throw P("non-plain object");let f=[];for(let c in l){if(i+=1,i>z.fields)throw P("enumeration limit exceeded");if(!Object.hasOwn(l,c))continue;if(o+=1,o>z.fields)throw P("field limit exceeded");let y=Object.getOwnPropertyDescriptor(l,c);if(!y||!Object.hasOwn(y,"value")||y.enumerable!==!0)throw P("object fields must be enumerable own data");f.push([c,y.value])}u("{");for(let c=0;c<f.length;c+=1)c&&u(","),u(a(f[c][0])),u(":"),d(f[c][1],h+1);u("}")}finally{s.delete(l)}};return d(e,0),t.join("")}function fr(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(G.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let i=Object.getOwnPropertyDescriptor(e,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[n]=String(s)}return t}function pr(){return Object.assign(Object.create(null),{Accept:"application/json"})}function hr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function mr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Le=new Map,at=new WeakMap,ct=1;function he(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=at.get(e);return t||(t=ct,ct+=1,at.set(e,t)),`reference:${t}`}var yr=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),wr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function lt(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?yr.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function ut(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(lt);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return lt(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&wr.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function br(e,t,r,n={},o=null){let i=tr("sha256"),s=(a,d)=>{let l=String(d);i.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),i.update("=").update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l).update(`
+`)};s("method",e),s("url",t),Object.keys(r||{}).map((a,d)=>({name:a.toLowerCase(),order:d,value:String(r[a])})).sort((a,d)=>a.name.localeCompare(d.name)||a.order-d.order).forEach((a,d)=>{s(`header-name-${d}`,a.name),s(`header-value-${d}`,a.value)}),s("body",o??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${a}`,n[a]??"-");return i.digest("hex")}function gr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,ot):Math.min(250*2**e,ot)+Math.floor(Math.random()*100)}var xr=e=>new Promise(t=>setTimeout(t,e));function W(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function He(e,t,r){return W(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function K(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Sr(e){return e?e.byteLength??e.length??0:0}async function Er(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(K(e),!n))throw He(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let h=await e.text(),p=Buffer.byteLength(h,"utf8");if(p>t){if(!n)throw He(r,`body ${p} bytes`,t);return Buffer.from(h,"utf8").subarray(0,t).toString("utf8")}return h}let u=[],a=0,d=!1;try{for(;;){let{value:h,done:p}=await s.read();if(p)break;if(h&&(u.push(Buffer.from(h)),a+=Sr(h),a>t)){d=!0;break}}}finally{if(d)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(d&&(typeof o=="function"&&o(),!n))throw He(r,`streamed ${a} bytes`,t);let l=Buffer.concat(u);return(d?l.subarray(0,t):l).toString("utf8")}function Ar(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Tr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:u,untrustedUrl:a=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:l=!1,importUndici:h,validateResponse:p,signal:f,redirectPolicy:c="follow",maxRedirects:y=me}){let w=null,S=t,R=s?{lookupFn:s}:{};if(a&&!u&&!Ce(S))throw W(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let N=new AbortController,x=setTimeout(()=>N.abort(),i),C=f?it?it([f,N.signal]):f:N.signal,L=async(b,{status:E=null}={})=>{let k=await Ne(b,R);if(!k.ok)throw W(E==null?`HTTP refused ${b}: ${k.error}`:`HTTP redirect to ${b} ${k.error}`,E==null?{}:{status:E});let I=new URL(b).hostname;if(u){if(w&&(await w.close(),w=null),!w)try{w=await Ie({requireUndici:!0,...h?{importUndici:h}:{}})}catch(m){throw W(E==null?`HTTP refused ${b}: ${m?.message||m}`:`HTTP redirect to ${b} refused: ${m?.message||m}`,E==null?{}:{status:E})}w.pin(I,k.addresses),S=w.fetch}else rt(S,I,k.addresses);return k};try{let b=String(e),E=Object.assign(Object.create(null),n||{});a&&await L(b);for(let k=0;k<=y;k+=1){let I=Object.assign(Object.create(null),{method:r,headers:E,body:o,signal:C,redirect:"manual",dispatcher:void 0}),m=await S(b,I);if((c==="error"||y===0)&&m.status>=300&&m.status<400)throw K(m),W(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(lr.has(m.status)){let $=l===!0&&r==="POST"&&[307,308].includes(m.status)&&ut(r,o);if(r!=="GET"&&r!=="HEAD"&&!$){K(m);let _=new Error(`HTTP ${m.status} ${r} ${b} redirected non-idempotent request`);throw _.status=m.status,_}if(k===y)throw K(m),W(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let q=m.headers?.get?.("location"),g;try{g=hr(q,b)}catch(_){throw K(m),_}let H=!mr(g,b);if(K(m),H&&r==="POST"){let _=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw _.status=m.status,_}if(H&&l){let _=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw _.status=m.status,_.retryable=!1,_}if(H&&(E=pr(E)),a)await L(g,{status:m.status});else if(H){let _=await Ne(g,R);if(!_.ok){let T=new Error(`HTTP redirect from ${b} ${_.error}`);throw T.status=m.status,T.retryable=!1,T}u&&_.addresses?.length&&(w||(w=await Ie(h?{importUndici:h}:{})),w&&(w.pin(new URL(g).hostname,_.addresses),S=w.fetch))}b=g;continue}if(typeof p=="function")try{await p(m,{url:b})}catch($){throw K(m),W($?.message||String($))}let A=await Er(m,d,{url:b,onOversize:()=>N.abort()}),v=Ar(A);if(!m.ok){let $=new Error(`HTTP ${m.status} ${r} ${b}`);throw $.status=m.status,$.retryAfter=m.headers?.get?.("retry-after")??null,$.body=v??A.slice(0,300),$}return v??A}throw new Error(`HTTP redirect loop for ${e}`)}catch(b){if(N.signal.aborted&&!oe(f)){let E=b&&(typeof b=="object"||typeof b=="function")&&!G.isProxy(b)?b:null,k=E?Object.getOwnPropertyDescriptor(E,"oversize"):null;if(!(k&&Object.hasOwn(k,"value")&&k.value===!0))try{if(!E)throw new TypeError("unsafe rejection");Object.defineProperties(E,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw b}finally{clearTimeout(x),w&&await w.close()}}async function ye(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&G.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let T of Object.getOwnPropertyNames(t)){let O=Object.getOwnPropertyDescriptor(t,T);if(!(T==="toJSON"&&O&&Object.hasOwn(O,"value")&&O.value===void 0)){if(!r.has(T))throw new TypeError("HTTP options contain unknown fields");if(!O||!O.enumerable||!Object.hasOwn(O,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=T=>{if(t==null||!Object.hasOwn(t,T))return;let O=Object.getOwnPropertyDescriptor(t,T);if(!O||!Object.hasOwn(O,"value"))throw new TypeError("HTTP options must contain own data properties");return O.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=n("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let u=n("redirectPolicy");if(u!==void 0&&u!=="follow"&&u!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>me))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${me}`);if(u==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=u??"follow",l=d==="error"?0:a??me;for(let T of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let O=n(T);if(O!==void 0&&typeof O!="boolean")throw new TypeError(`HTTP ${T} must be boolean`)}let h=n("maxResponseBytes");if(h!==void 0&&(!Number.isInteger(h)||h<1||h>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=n("signal");if(p!==void 0){if(G.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{oe(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let T of["importUndici","lookupFn","validateResponse"]){let O=n(T);if(O!==void 0&&typeof O!="function")throw new TypeError(`HTTP ${T} must be a function`)}let f=n("fetchImpl"),c=f||globalThis.fetch;if(typeof c!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let y=i??12e3,w=(o||"GET").toUpperCase(),S=n("headers"),R=fr(S),N=Object.assign(Object.create(null),R);Object.keys(N).some(T=>T.toLowerCase()==="accept")||(N.Accept="application/json");let x=n("body");x!=null&&typeof x!="string"&&(Object.keys(N).find(O=>O.toLowerCase()==="content-type")||(N["Content-Type"]="application/json"),x=dr(x));let C=s??nr,L=n("lookupFn"),b=!f,E=n("untrustedUrl")===!0,k=n("sameOriginRedirectsOnly")===!0,I=n("importUndici"),m=n("validateResponse"),A=p,v=h??null,$=async()=>{let T;for(let O=0;O<=C;O++){A&&ir.call(A);let Je=fe("http");try{let B=await Tr(e,{fetchImpl:c,method:w,headers:N,body:x,timeoutMs:y,lookupFn:L,realFetch:b,untrustedUrl:E,maxResponseBytes:v,sameOriginRedirectsOnly:k,importUndici:I,validateResponse:m,signal:A,redirectPolicy:d,maxRedirects:l});return Je?.("succeeded"),B}catch(B){T=B;let Q=Te=>{if(!B||typeof B!="object"&&typeof B!="function"||G.isProxy(B))return;let re=Object.getOwnPropertyDescriptor(B,Te);return re&&Object.hasOwn(re,"value")?re.value:void 0},de=Q("status");Je?.("failed",de);let jt=Q("oracleTimeout")===!0||Q("name")==="AbortError"||Q("name")==="TimeoutError"||oe(A),vt=new Set([408,425,429]),Mt=Q("retryable")===!1?!1:de!=null?vt.has(de)||rr.has(de)&&nt.has(w):!jt&&nt.has(w);if(O===C||!Mt)throw B;let Ke=gr(O,Q("retryAfter")),Ft=fe("retry"),Ye=!1;try{A?await new Promise((Te,re)=>{let Xe,ne=()=>{clearTimeout(Xe),st.call(A,"abort",ne),re(cr(A)||new DOMException("Aborted","AbortError"))};if(oe(A)){ne();return}Xe=setTimeout(()=>{st.call(A,"abort",ne),Te()},Ke),ar.call(A,"abort",ne,{once:!0}),oe(A)&&ne()}):await xr(Ke),Ye=!0}finally{Ft?.(Ye?"succeeded":"failed")}}}throw T};if(!(n("dedupe")!==!1&&!A&&ut(w,x)))return $();let g=br(w,e,N,{untrustedUrl:E,maxResponseBytes:v,sameOriginRedirectsOnly:k,redirectPolicy:d,maxRedirects:l,timeoutMs:y,retries:C,fetchImpl:he(c),realFetch:b,lookupFn:he(L),importUndici:he(I),validateResponse:he(m)},x),H=Le.get(g);if(H){let T=fe("shared");try{let O=await H;return T?.("succeeded"),O}catch(O){throw T?.("failed"),O}}let _=$().finally(()=>Le.delete(g));return Le.set(g,_),_}var dt={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Or=new Map(Object.values(dt).map(e=>[e.chainId,e]));function ft(e){return Or.get(Number(e))||null}function pt(e,t=process.env){let r=ft(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}import{Interface as _r,getAddress as Oo}from"ethers";var _o=new _r(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var kr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function $r(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=pt(e,r);return n||kr[Number(e)]||null}var Rr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Nr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Rr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var se=new Map,ht=new Map;function Ir(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Pr(e){if(e?.error)throw Ir(e.error);return e?.result}function Cr(e,t,r){return`${e}
 ${t}
-${JSON.stringify(r??[])}`}async function Or(e,t,r){return he(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function me(e,t,r=[],n={}){let o=String(t||""),i=Sr(o),s=gr(e,n);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let c=dt.get(s);if(c!=null)return c}let a=n.dedupe!==!1&&!n.signal?Tr(s,o,r):null;if(a&&se.has(a))return se.get(a);let u=(async()=>{let c=await Or(s,{jsonrpc:"2.0",id:1,method:t,params:r},n),p=Ar(c);return i==="eth_chainid"&&typeof p=="string"&&dt.set(s,p),p})();return a&&(se.set(a,u),u.finally(()=>{se.get(a)===u&&se.delete(a)}).catch(()=>{})),u}var ve=999,He=1,_r=8453,ft="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",kr="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",pt="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",$r="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",Rr=".80002105.reverse",ht=/^0x[a-fA-F0-9]{40}$/,mt=new TextEncoder,yt=e=>"0x"+Buffer.from(e).toString("hex"),Y=e=>yt(je(mt.encode(e))).slice(0,10),wt=e=>e.toLowerCase().replace(/^0x/,"").padStart(64,"0");function ye(e){let t=new Uint8Array(32);if(e)for(let r of String(e).split(".").reverse()){let n=je(mt.encode(r)),o=new Uint8Array(64);o.set(t,0),o.set(n,32),t=je(o)}return yt(t)}function Fe(e){if(!e||e==="0x"||/^0x0*$/.test(e))return"";try{let t=e.slice(2),r=parseInt(t.slice(0,64),16)*2,n=parseInt(t.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let o=t.slice(r+64,r+64+n*2);return Buffer.from(o,"hex").toString("utf8")}catch{return""}}async function X(e,t,r){try{return await me(e,"eth_call",[{to:t,data:r},"latest"])}catch{return null}}async function Nr(e){let t=await X(ve,ft,Y("primaryName(address)")+wt(e)),r=Fe(t);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function Ir(e){let t=await X(ve,kr,Y("getName(address)")+wt(e)),r=Fe(t);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function bt(e,t,r){let n=await X(e,r,Y("name(bytes32)")+t.slice(2));return Fe(n)||null}async function Pr(e){let t=ye(`${e.slice(2).toLowerCase()}.addr.reverse`),r=await X(He,pt,Y("resolver(bytes32)")+t.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:bt(He,t,n)}async function Cr(e){let t=ye(e.slice(2).toLowerCase()+Rr);return bt(_r,t,$r)}var Lr=[{source:"hl",fn:Nr},{source:"hype",fn:Ir},{source:"ens",fn:Pr},{source:"basename",fn:Cr}];async function jr(e){let t=ye(e),r=await X(ve,ft,Y("ownerOf(uint256)")+t.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function Hr(e,t,r){let n=ye(t),o=await X(e,r,Y("resolver(bytes32)")+n.slice(2));if(!o)return null;let i="0x"+o.slice(-40);if(/^0x0+$/.test(i))return null;let s=await X(e,i,Y("addr(bytes32)")+n.slice(2));if(!s)return null;let l="0x"+s.slice(-40);return/^0x0+$/.test(l)?null:l}async function gt(e){let t=String(e||"").trim().toLowerCase();if(!t||!t.includes("."))return null;if(t.endsWith(".hl")){let r=await jr(t);return r?{address:r,source:"hl",name:t}:null}if(t.endsWith(".eth")){let r=await Hr(He,t,pt);return r?{address:r,source:t.endsWith(".base.eth")?"basename":"ens",name:t}:null}return null}var bo=Lr.map(e=>e.source);var vr="protective-monitors",Fr="read-only",So=Object.freeze(["depeg","oracleDeviation","exploitFeed","goplus","liquidationLadder"]),Ur="https://hermes.pyth.network",Mr="https://coins.llama.fi",Dr="https://api.llama.fi/hacks",Br="https://api.gopluslabs.io/api/v1/token_security",zr="https://api.v3.aave.com/user",Gr=Object.freeze({USDT:"2b89b9dc8fdf9f34709a5b106b472f0f39bb6ca9ce04b0fd7f2e971688e2e53b",USDC:"eaa020c61cc479712813461ce153894a96a6c00b21ed0cfc2798d1f9a9e9c94a"}),Wr=Object.freeze({USDT:"coingecko:tether",USDC:"coingecko:usd-coin",DAI:"coingecko:dai"}),qr=Object.freeze(["is_honeypot","is_proxy","is_mintable","owner_change_balance","hidden_owner","selfdestruct","cannot_buy","cannot_sell_all","is_blacklisted"]),xt=Object.freeze({liquidatable:0,danger:1,critical:2,warning:3,healthy:4}),Jr=/^0x[0-9a-fA-F]{40}$/,Vr=/^[0-9a-fA-F]{64}$/;function ie(e,t={}){return{ok:!0,provider:vr,op:e,alertOnly:!0,execution:Fr,exec:!1,...t}}function H(e,t){throw new Error(`protective-monitors: ${e}${t?` ${t}`:""}`)}async function ae(e,t={}){return typeof t.http=="function"?t.http(e,t):typeof t.httpJson=="function"?t.httpJson(e,t):he(e,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,retries:t.retries??0})}function we(e){return String(e||"USDT").trim().toUpperCase().replace(/\/USD$/,"")}function Kr(e={}){if(e.feedId){let n=String(e.feedId).replace(/^0x/i,"");return Vr.test(n)||H("feedId must be a 32-byte hex id"),n.toLowerCase()}let t=we(e.symbol),r=Gr[t];return r||H("unknown symbol",t),r}function Yr(e={}){if(e.llamaCoin)return String(e.llamaCoin);let t=we(e.symbol);return Wr[t]||`coingecko:${t.toLowerCase()}`}function St(e,t){let r=Number(e.thresholdBps??t);return(!Number.isFinite(r)||r<0)&&H("thresholdBps must be a non-negative number"),r}function Xr(e){let t=Array.isArray(e?.parsed)?e.parsed[0]:e?.price?e:null,r=Number(t?.price?.price),n=Number(t?.price?.expo);return(!Number.isFinite(r)||!Number.isFinite(n))&&H("no pyth price returned"),n<0?r/10**-n:r*10**n}function Zr(e,t){let r=e?.coins?.[t]||e?.coins?.[String(t).toLowerCase()],n=Number(r?.price);return Number.isFinite(n)?n:null}function Qr(e,t={}){let r=String(t.pythBaseUrl||Ur).replace(/\/$/,""),n=new URL(`${r}/v2/updates/price/latest`);return n.searchParams.append("ids[]",e),n.searchParams.set("parsed","true"),n.toString()}function en(e,t={}){return`${String(t.llamaCoinsBaseUrl||Mr).replace(/\/$/,"")}/prices/current/${encodeURIComponent(e)}`}async function Et(e,t){let r=Kr(e),n=await ae(Qr(r,t),t),o=Xr(n);return o>0||H("pyth price must be positive"),{id:r,price:o}}async function At(e,t){let r=Yr(e),n=await ae(en(r,t),t);return{coin:r,price:Zr(n,r)}}async function tn(e={},t={}){let r=Number(e.peg??1);(!Number.isFinite(r)||r<=0)&&H("peg must be a positive number");let n=St(e,50),o=await Et(e,t),i=Math.round(Math.abs(o.price-r)*1e4),s={required:!1,llamaPrice:null};try{let l=await At(e,t);s={required:!1,llamaPrice:l.price,llamaCoin:l.coin}}catch{s={required:!1,llamaPrice:null}}return ie("depeg",{symbol:we(e.symbol),feedId:o.id,price:o.price,peg:r,thresholdBps:n,deviationBps:i,alert:i>n,crossCheck:s})}async function rn(e={},t={}){let r=St(e,100),n=await Et(e,t),o=await At(e,t);o.price>0||H("llama price required for oracleDeviation");let i=(n.price+o.price)/2,s=Math.round(Math.abs(n.price-o.price)/i*1e4);return ie("oracleDeviation",{symbol:we(e.symbol),pythPrice:n.price,llamaPrice:o.price,mid:i,thresholdBps:r,deviationBps:s,alert:s>r})}function nn(e,t){return String(e.id||e.defillamaId||e.slug||`hack-${t}`)}function on(e,t){return{id:nn(e,t),name:String(e.name||e.protocol||"unknown"),classification:e.classification?String(e.classification):null,technique:e.technique?String(e.technique):null,amount:Number.isFinite(Number(e.amount))?Number(e.amount):null,chain:Array.isArray(e.chain)?e.chain.map(String):e.chain?[String(e.chain)]:[],source:e.source?String(e.source):null}}function sn(e){return(String(e).match(/<item\b[\s\S]*?<\/item>/gi)||[]).map((r,n)=>{let o=i=>{let s=r.match(new RegExp(`<${i}[^>]*>([\\s\\S]*?)</${i}>`,"i"));return s?s[1].replace(/<!\[CDATA\[|\]\]>/g,"").trim():""};return{id:o("guid")||o("link")||o("title")||`rss-${n}`,name:o("title")||"unknown",classification:"rss",technique:null,amount:null,chain:[],source:o("link")||null}})}function Tt(e){if(typeof e=="string"){let t=e.trim();if(t.startsWith("<"))return sn(t);try{return Tt(JSON.parse(t))}catch{H("exploitFeed payload is not JSON or RSS")}}return Array.isArray(e)?e:Array.isArray(e?.hacks)?e.hacks:Array.isArray(e?.items)?e.items:[]}function an(e){return e.map((t,r)=>({item:t,index:r})).sort((t,r)=>{let n=String(t.item.id).localeCompare(String(r.item.id));return n!==0?n:t.index-r.index}).map(t=>t.item)}async function cn(e={},t={}){let r=Dr,n=e.payload??await ae(r,t),o=an(Tt(n).map(on));return ie("exploitFeed",{count:o.length,fingerprint:o.map(i=>i.id).join("|"),items:o,alert:o.length>0})}function ln(e){return e===!0||e===1||e==="1"}function un(e,t){let r=e?.result&&typeof e.result=="object"?e.result:e,n=String(t).toLowerCase();if(r&&typeof r=="object"){for(let[o,i]of Object.entries(r))if(String(o).toLowerCase()===n&&i&&typeof i=="object")return{address:o,token:i}}return null}async function Ue(e={},t={}){e.asSoleGate===!0&&H("goplus is a second opinion and must never be a sole gate");let r=String(e.address||e.token||"").trim();Jr.test(r)||H("goplus requires an EVM token address");let n=Number(e.chainId??1);(!Number.isInteger(n)||n<=0)&&H("chainId must be a positive integer");let i=`${String(t.goplusBaseUrl||Br).replace(/\/$/,"")}/${n}?contract_addresses=${r}`,s=e.payload??await ae(i,t),l=un(s,r);l||H("goplus returned no result for",r);let a=qr.filter(u=>ln(l.token[u]));return ie("goplus",{chainId:n,address:r.toLowerCase(),role:"second-opinion",secondOpinion:!0,soleGate:!1,neverSoleGate:!0,token:{address:l.address,name:l.token.token_name||null,symbol:l.token.token_symbol||null},findings:a,alert:a.length>0,note:"second opinion only \u2014 never the sole gate"})}function dn(e){let t=Number(e);return(!Number.isFinite(t)||t<0)&&H("healthFactor must be a non-negative number"),t<1?"liquidatable":t<1.05?"danger":t<1.2?"critical":t<1.5?"warning":"healthy"}function fn(e,t){let r=Number(e.healthFactor??e.hf);Number.isFinite(r)||H("position healthFactor required");let n=dn(r);return{id:String(e.id||e.protocol||`pos-${t}`),protocol:String(e.protocol||"unknown"),healthFactor:r,collateralUsd:e.collateralUsd!=null?Number(e.collateralUsd):null,debtUsd:e.debtUsd!=null?Number(e.debtUsd):null,rung:n}}async function pn(e={},t={}){let r=null;if(Array.isArray(e.positions))r=e;else if(Array.isArray(e))r={positions:e};else{let s=String(e.user||"").trim();s||H("liquidationLadder requires user or positions");let l=String(t.aaveUrl||`${zr}/${s}`);r=await ae(l,t)}let o=(Array.isArray(r?.positions)?r.positions:[]).map(fn),i=o.reduce((s,l)=>s?xt[l.rung]<xt[s]?l.rung:s:l.rung,null);return ie("liquidationLadder",{user:r?.user||e.user||null,chainId:r?.chainId??e.chainId??null,ladder:o,worstRung:i,alert:o.some(s=>s.rung!=="healthy")})}var Eo=Object.freeze({depeg:tn,oracleDeviation:rn,exploitFeed:cn,goplus:Ue,liquidationLadder:pn});import ee from"node:fs";import Rn from"node:os";import ge from"node:path";import{randomUUID as Nn}from"node:crypto";var To=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),Oo=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),M=(e,t=0,r=1)=>Math.min(r,Math.max(t,e)),F=e=>Number.isFinite(Number(e))?Number(e):null,hn=e=>Math.round(e*1e4)/1e4;function U(e,t,r,n=!0){!n||r===null||!Number.isFinite(r)||e.push({feature:t,value:hn(r)})}function mn(e,t){let r=F(e.repeatBuys??e.repeat_buys??e.buyCount),n=F(e.walletWinRate??e.winRate);U(t,"repeat_buys",r===null?null:M((r-1)/4)*.38),U(t,"wallet_win_rate",n===null?null:(M(n)-.5)*.5)}function yn(e,t){let r=F(e.ageHours??e.poolAgeHours),n=F(e.liquidityUsd??e.liquidity),o=e.liquidityLocked??e.locked;U(t,"pool_age",r===null?null:r<24?-.42:M(r/720)*.12),U(t,"liquidity",n===null?null:(M(Math.log10(Math.max(1,n))/7)-.5)*.28),U(t,"liquidity_lock",o==null?null:o?.12:-.28)}function wn(e,t){let r=F(e.floorChange??e.floorChangePct),n=F(e.sales??e.saleCount);U(t,"floor_change",r===null?null:M(r,-1,1)*.35),U(t,"sales_depth",n===null?null:M(n/50)*.18)}function bn(e,t){let r=F(e.flowImbalance??e.imbalance),n=F(e.fundingRate??e.funding);U(t,"flow_imbalance",r===null?null:M(r,-1,1)*.42),U(t,"funding",n===null?null:-M(n*100,-1,1)*.12)}function gn(e,t){let r=F(e.marketProbability??e.marketPrice??e.probability),n=F(e.fairProbability??e.referenceProbability??e.fairValue);U(t,"probability_mispricing",r===null||n===null?null:M(n-r,-1,1)*.65);let o=F(e.liquidityUsd??e.liquidity);U(t,"market_liquidity",o===null?null:M(Math.log10(Math.max(1,o))/6)*.12)}var _o=Object.freeze({wallet:mn,pool:yn,nft_floor:wn,hl_flow:bn,prediction_market:gn});import{createHash as Tn}from"node:crypto";var $o=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Ro=Object.freeze(["read","simulate"]);var No=1440*60;var ce=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},xn=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Sn=Object.freeze(["privkey","wif","xprv","seed"]);function Ot(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return xn.test(t)||Sn.includes(r)}var En=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),An=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Z(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=An.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of En)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new ce(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&Ot(o))throw new ce(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");Z(o,`${t}[key]`,r),Z(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())Z(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>Z(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if(Ot(o))throw new ce(`${t}.${o}`,"forbidden-key-name");Z(i,`${t}.${o}`,r,o)}return e}var Me=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),Bo=Object.freeze(Object.fromEntries(Me.map((e,t)=>[e,Object.freeze(t+1<Me.length?[Me[t+1]]:[])])));function De(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(De).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${De(e[t])}`).join(",")}}`}function On(e){return e===void 0?null:JSON.parse(JSON.stringify(e))}function Be(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))Be(t)}return e}function _n(e,t="fact"){try{Z(e,t)}catch{throw new Error(`${t} contains custody material and is forbidden`)}}function kn(e){return Tn("sha256").update(De(e)).digest("hex")}function $n({tradeId:e,state:t,fact:r,asOf:n,previousHash:o,external:i}){let s={tradeId:e,state:t,asOf:n,previousHash:o??null,external:i===!0,fact:On(r)};return Be({...s,hash:kn(s)})}function _t({tradeId:e,intent:t,asOf:r=0}={}){if(!e||typeof e!="string")throw new Error("tradeId is required");if(!t||typeof t!="object"||Array.isArray(t))throw new Error("intent fact is required");_n(t,"intent");let n=$n({tradeId:e,state:"intent",fact:t,asOf:r,previousHash:null,external:!1});return Be({tradeId:e,state:"intent",events:[n],headHash:n.hash,custody:"none",execution:"prepare-only"})}function kt(e,t={}){if(!e||typeof e!="object")throw new TypeError("signal required");if(e.noTrade===!0)throw new Error("NO_TRADE signal cannot open a trade lifecycle");if(e.executionAllowed===!0)throw new Error("executionAllowed must be false on public plane");let r=String(t.tradeId||`sig-${e.id||"unknown"}`).slice(0,128),n={source:"signal_score",signalId:e.id,signalType:e.type,score:e.score,confidence:e.confidence,flags:e.flags||[],promote:"research_only",execution:"prepare-only",custody:"none",note:"Cold signal \u2192 prepare intent only. Owner wallet must sign any later tx.",...t.intentExtra&&typeof t.intentExtra=="object"?t.intentExtra:{}},o=_t({tradeId:r,intent:n,asOf:t.asOf??Date.now()});return{tradeId:r,intent:n,lifecycle:o,recommendation:"PREPARE_RESEARCH_ONLY"}}var Nt=1,ze=5e3,In=Object.freeze({1:new Set(["0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","0xdac17f958d2ee523a2206206994597c13d831ec","0x6b175474e89094c44da98b954eedeac495271d0","0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2"]),8453:new Set(["0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0x4200000000000000000000000000000000000006"]),42161:new Set(["0xaf88d065e77c8cc2239327c5edb3a432268e5831","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x82af49447d8a07e3bd95bd0d56f35241523fbab1"])}),Pn=/^0x[0-9a-fA-F]{40}$/,Cn=/^0x[0-9a-fA-F]{64}$/,Ln=/^(?:0|[1-9]\d*)(?:\.\d{1,2})?$/;function D(e,t){let r=String(e||"").trim();if(!Pn.test(r))throw new TypeError(`${t} must be a 0x-prefixed EVM address`);return r.toLowerCase()}function It(e,t){let r=In[Number(e)];if(!r)return!1;try{return r.has(D(t,"token"))}catch{return!1}}function le(e,t="usd"){let r=typeof e=="number"?String(e):e;if(typeof r!="string"||!Ln.test(r))throw new TypeError(`${t} must be a non-negative decimal string with at most 2 decimal places`);let[n,o=""]=r.split("."),i=(o+"00").slice(0,2);return BigInt(n)*100n+BigInt(i)}function ue(e){let t=BigInt(e);if(t<0n)throw new RangeError("centsToUsd: cents must be non-negative");let r=t/100n,n=t%100n;return`${r.toString()}.${n.toString().padStart(2,"0")}`}function jn({dailyCapUsd:e,spentTodayUsd:t,proportionalUsd:r=null}){let n=le(e,"dailyCapUsd"),o=le(t,"spentTodayUsd"),i=n-o;if(i<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"daily-cap-exhausted"};if(r==null)return{sizeCents:i,sizeUsd:ue(i),basis:"cap-only"};let s=le(r,"proportionalUsd");if(s<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"sized-to-zero"};let l=s<i?s:i;return{sizeCents:l,sizeUsd:ue(l),basis:l===i?"cap-limited":"proportional"}}function Hn(e={}){let t=String(e.txHash||"").trim().toLowerCase();if(!Cn.test(t))throw new TypeError("event.txHash must be a 32-byte tx hash");let r=D(e.token,"event.token"),n=D(e.from,"event.from"),o=D(e.to,"event.to"),i=e.txFrom==null?null:D(e.txFrom,"event.txFrom");return{txHash:t,token:r,from:n,to:o,txFrom:i,chainId:Number(e.chainId),blockNumber:Number.isFinite(Number(e.blockNumber))?Number(e.blockNumber):null,logIndex:Number.isFinite(Number(e.logIndex))?Number(e.logIndex):null,valueUsd:e.valueUsd==null?null:String(e.valueUsd)}}function vn(e,{followedWallet:t}={}){let r=D(t,"followedWallet");return e.txFrom?e.txFrom!==r?{included:!1,reason:"not-initiated-by-followed-wallet"}:It(e.chainId,e.token)?{included:!1,reason:"quote-asset-transfer"}:e.to===r?{included:!0,side:"buy"}:e.from===r?{included:!0,side:"sell"}:{included:!1,reason:"wallet-not-a-party"}:{included:!1,reason:"tx-from-unknown"}}function Fn({chainId:e,txHash:t,noTrade:r}){return{id:`follow-mirror:${e}:${t}`,type:"wallet_mirror",score:r?0:1,confidence:r?0:1,noTrade:r,executionAllowed:!1,flags:r?["FOLLOW_MIRROR","NO_TRADE"]:["FOLLOW_MIRROR"]}}function be({chainId:e,txHash:t,token:r,side:n,sizeUsd:o,sizeBasis:i,followedWallet:s,refuseReason:l=null}={}){let a=Fn({chainId:e,txHash:t,noTrade:l!=null});try{let u=kt(a,{tradeId:`follow-mirror-${e}-${t}`,intentExtra:{source:"follow_mirror",chain:e,followedWallet:s,token:r,side:n,sizeUsd:o,sizeBasis:i,txHash:t,executionAllowed:!1,backendSigner:!1,note:"Wallet-follow mirror. Cold, prepare-only. Owner wallet must sign any later tx."}});return{ok:!0,requiresWalletSignature:!0,backendSigner:!1,executionAllowed:!1,tradeId:u.tradeId,chain:e,token:r,side:n,sizeUsd:o,sizeBasis:i,txHash:t,followedWallet:s,recommendation:u.recommendation,lifecycle:u.lifecycle,intent:u.intent}}catch(u){return{ok:!1,reason:l||String(u?.message||u)}}}function Un(e=[],{followedWallet:t,dailyCapUsd:r,spentTodayUsd:n="0",seenTxHashes:o=new Set,honeypotResults:i={}}={}){if(!Array.isArray(e))throw new TypeError("rawEvents must be an array");let s=D(t,"followedWallet"),l=new Set(o),a=le(n,"spentTodayUsd"),u=le(r,"dailyCapUsd"),c=[],p=[],f=[];for(let h of e){let d;try{d=Hn(h)}catch(x){f.push({txHash:h?.txHash??null,reason:`malformed-event: ${x.message}`});continue}if(l.has(d.txHash)){f.push({txHash:d.txHash,reason:"duplicate-tx"});continue}let y=vn(d,{followedWallet:s});if(!y.included){f.push({txHash:d.txHash,reason:y.reason});continue}let b=i[d.token];if(b?.flagged){l.add(d.txHash);let x=be({chainId:d.chainId,txHash:d.txHash,token:d.token,side:y.side,sizeUsd:"0.00",sizeBasis:"refused",followedWallet:s,refuseReason:`token flagged: ${b.reason||"security check flagged this token"}`});p.push({txHash:d.txHash,token:d.token,side:y.side,reason:x.reason});continue}if(u-a<=0n){l.add(d.txHash);let x=be({chainId:d.chainId,txHash:d.txHash,token:d.token,side:y.side,sizeUsd:"0.00",sizeBasis:"refused",followedWallet:s,refuseReason:"daily-cap-exhausted"});p.push({txHash:d.txHash,token:d.token,side:y.side,reason:x.reason});continue}let R=jn({dailyCapUsd:ue(u),spentTodayUsd:ue(a),proportionalUsd:d.valueUsd});if(R.sizeCents<=0n){l.add(d.txHash);let x=be({chainId:d.chainId,txHash:d.txHash,token:d.token,side:y.side,sizeUsd:"0.00",sizeBasis:R.basis,followedWallet:s,refuseReason:R.basis});p.push({txHash:d.txHash,token:d.token,side:y.side,reason:x.reason});continue}let N=be({chainId:d.chainId,txHash:d.txHash,token:d.token,side:y.side,sizeUsd:R.sizeUsd,sizeBasis:R.basis,followedWallet:s});l.add(d.txHash),N.ok?(c.push(N),a+=R.sizeCents):p.push({txHash:d.txHash,token:d.token,side:y.side,reason:N.reason})}return{intents:c,refusals:p,skipped:f,seenTxHashes:l,spentTodayUsd:ue(a)}}function Ge(e=process.env){let t=e.ORACLE_CONFIG_DIR||ge.join(Rn.homedir(),".config","oracle");return ge.join(t,"follow-mirror.json")}function $t(){return{version:Nt,targets:{}}}function Rt(e,t){return`${String(e).toLowerCase()}:${D(t,"address")}`}function xe(e){try{let t=ee.readFileSync(e,"utf8"),r=JSON.parse(t);return!r||typeof r!="object"||r.version!==Nt||!r.targets||typeof r.targets!="object"?$t():r}catch{return $t()}}function Mn(e,t){let r=ge.dirname(e);ee.mkdirSync(r,{recursive:!0,mode:448});let n=ge.join(r,`.follow-mirror.${process.pid}.${Date.now()}.${Nn()}.tmp`);try{ee.writeFileSync(n,`${JSON.stringify(t)}
-`,{mode:384,flag:"wx"}),ee.renameSync(n,e);try{ee.chmodSync(e,384)}catch{}}catch(o){try{ee.unlinkSync(n)}catch{}throw o}}function Dn(e){return new Date(e).toISOString().slice(0,10)}function Bn(e,t,r){let n=e.targets[t],o=new Set(Array.isArray(n?.seenTxHashes)?n.seenTxHashes:[]),i=typeof n?.days?.[r]=="string"?n.days[r]:"0";return{seenTxHashes:o,spentTodayUsd:i}}function zn(e,t,{seenTxHashes:r,spentTodayUsd:n,day:o,newIntents:i,newRefusals:s}){let l=e.targets[t]||{seenTxHashes:[],days:{},intents:[],refusals:[]},a=[...r].slice(-ze),u=[...l.intents||[],...i].slice(-ze),c=[...l.refusals||[],...s].slice(-ze);e.targets[t]={seenTxHashes:a,days:{...l.days||{},[o]:n},intents:u,refusals:c}}function We({now:e=()=>Date.now(),fetchWallet:t,fetchTxFrom:r,checkHoneypot:n,estimateUsdValue:o=async()=>null,storePath:i=Ge()}={}){if(typeof t!="function")throw new TypeError("createFollowMirror requires fetchWallet");if(typeof r!="function")throw new TypeError("createFollowMirror requires fetchTxFrom");if(typeof n!="function")throw new TypeError("createFollowMirror requires checkHoneypot");async function s({address:a,chain:u,chainId:c,dailyCapUsd:p,lookback:f}={}){let h=D(a,"address"),d=Number(c);if(!Number.isInteger(d)||d<=0)throw new TypeError("observe requires a numeric chainId");let y=e(),b=Dn(y),S=Rt(u||d,h),R=xe(i),{seenTxHashes:N,spentTodayUsd:x}=Bn(R,S,b),C=await t(h,{chains:[d],lookback:f}),L=Array.isArray(C?.events)?C.events:[],w=[],E={},_=new Set;for(let m of L){let A=null;try{A=await r(d,m.txHash)}catch{A=null}let v=null;try{v=await o({...m,chainId:d,txFrom:A})}catch{v=null}let k=String(m.token||"").toLowerCase();if(A===h&&!It(d,k)&&!_.has(k)&&k){_.add(k);try{E[k]=await n(d,k)}catch(W){E[k]={flagged:!0,reason:`security check unavailable: ${String(W?.message||W).slice(0,160)}`}}}w.push({...m,chainId:d,txFrom:A,valueUsd:v})}let I=Un(w,{followedWallet:h,dailyCapUsd:String(p),spentTodayUsd:x,seenTxHashes:N,honeypotResults:E});return zn(R,S,{seenTxHashes:I.seenTxHashes,spentTodayUsd:I.spentTodayUsd,day:b,newIntents:I.intents.map(m=>({tradeId:m.tradeId,txHash:m.txHash,token:m.token,side:m.side,sizeUsd:m.sizeUsd,createdAt:y})),newRefusals:I.refusals.map(m=>({...m,createdAt:y}))}),Mn(i,R),{ok:!0,cold:!0,executionAllowed:!1,chain:u||d,chainId:d,address:h,observed:L.length,intents:I.intents,refusals:I.refusals,skipped:I.skipped,spentTodayUsd:I.spentTodayUsd,dailyCapUsd:String(p),errors:C?.errors||[]}}function l({address:a,chain:u}={}){let c=D(a,"address"),p=xe(i),f=Rt(u,c),h=p.targets[f]||{intents:[],refusals:[],days:{}};return{ok:!0,address:c,chain:u,intents:h.intents||[],refusals:h.refusals||[],days:h.days||{}}}return Object.freeze({observe:s,status:l,storePath:i})}var te={1:"ethereum",8453:"base",42161:"arbitrum"},Gn=Object.fromEntries(Object.entries(te).map(([e,t])=>[t,Number(e)])),Wn=new Set(["is_honeypot","cannot_sell_all","cannot_buy","is_blacklisted","selfdestruct","owner_change_balance"]),Pt=`oracle follow <name-or-address> [--chain <name>] [--blocks <n>] [--json]
+${JSON.stringify(r??[])}`}async function Lr(e,t,r){return ye(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function we(e,t,r=[],n={}){let o=String(t||""),i=Nr(o),s=$r(e,n);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let l=ht.get(s);if(l!=null)return l}let a=n.dedupe!==!1&&!n.signal?Cr(s,o,r):null;if(a&&se.has(a))return se.get(a);let d=(async()=>{let l=await Lr(s,{jsonrpc:"2.0",id:1,method:t,params:r},n),h=Pr(l);return i==="eth_chainid"&&typeof h=="string"&&ht.set(s,h),h})();return a&&(se.set(a,d),d.finally(()=>{se.get(a)===d&&se.delete(a)}).catch(()=>{})),d}var Me=999,ve=1,Hr=8453,mt="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",jr="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",yt="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",vr="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",Mr=".80002105.reverse",wt=/^0x[a-fA-F0-9]{40}$/,bt=new TextEncoder,gt=e=>"0x"+Buffer.from(e).toString("hex"),Y=e=>gt(je(bt.encode(e))).slice(0,10),xt=e=>e.toLowerCase().replace(/^0x/,"").padStart(64,"0");function be(e){let t=new Uint8Array(32);if(e)for(let r of String(e).split(".").reverse()){let n=je(bt.encode(r)),o=new Uint8Array(64);o.set(t,0),o.set(n,32),t=je(o)}return gt(t)}function Fe(e){if(!e||e==="0x"||/^0x0*$/.test(e))return"";try{let t=e.slice(2),r=parseInt(t.slice(0,64),16)*2,n=parseInt(t.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let o=t.slice(r+64,r+64+n*2);return Buffer.from(o,"hex").toString("utf8")}catch{return""}}async function X(e,t,r){try{return await we(e,"eth_call",[{to:t,data:r},"latest"])}catch{return null}}async function Fr(e){let t=await X(Me,mt,Y("primaryName(address)")+xt(e)),r=Fe(t);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function Ur(e){let t=await X(Me,jr,Y("getName(address)")+xt(e)),r=Fe(t);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function St(e,t,r){let n=await X(e,r,Y("name(bytes32)")+t.slice(2));return Fe(n)||null}async function Dr(e){let t=be(`${e.slice(2).toLowerCase()}.addr.reverse`),r=await X(ve,yt,Y("resolver(bytes32)")+t.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:St(ve,t,n)}async function Br(e){let t=be(e.slice(2).toLowerCase()+Mr);return St(Hr,t,vr)}var zr=[{source:"hl",fn:Fr},{source:"hype",fn:Ur},{source:"ens",fn:Dr},{source:"basename",fn:Br}];async function Gr(e){let t=be(e),r=await X(Me,mt,Y("ownerOf(uint256)")+t.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function Wr(e,t,r){let n=be(t),o=await X(e,r,Y("resolver(bytes32)")+n.slice(2));if(!o)return null;let i="0x"+o.slice(-40);if(/^0x0+$/.test(i))return null;let s=await X(e,i,Y("addr(bytes32)")+n.slice(2));if(!s)return null;let u="0x"+s.slice(-40);return/^0x0+$/.test(u)?null:u}async function Et(e){let t=String(e||"").trim().toLowerCase();if(!t||!t.includes("."))return null;if(t.endsWith(".hl")){let r=await Gr(t);return r?{address:r,source:"hl",name:t}:null}if(t.endsWith(".eth")){let r=await Wr(ve,t,yt);return r?{address:r,source:t.endsWith(".base.eth")?"basename":"ens",name:t}:null}return null}var No=zr.map(e=>e.source);var qr="protective-monitors",Vr="read-only",Co=Object.freeze(["depeg","oracleDeviation","exploitFeed","goplus","liquidationLadder"]),Jr="https://hermes.pyth.network",Kr="https://coins.llama.fi",Yr="https://api.llama.fi/hacks",Xr="https://api.gopluslabs.io/api/v1/token_security",Zr="https://api.v3.aave.com/user",Qr=Object.freeze({USDT:"2b89b9dc8fdf9f34709a5b106b472f0f39bb6ca9ce04b0fd7f2e971688e2e53b",USDC:"eaa020c61cc479712813461ce153894a96a6c00b21ed0cfc2798d1f9a9e9c94a"}),en=Object.freeze({USDT:"coingecko:tether",USDC:"coingecko:usd-coin",DAI:"coingecko:dai"}),tn=Object.freeze(["is_honeypot","is_proxy","is_mintable","owner_change_balance","hidden_owner","selfdestruct","cannot_buy","cannot_sell_all","is_blacklisted"]),At=Object.freeze({liquidatable:0,danger:1,critical:2,warning:3,healthy:4}),rn=/^0x[0-9a-fA-F]{40}$/,nn=/^[0-9a-fA-F]{64}$/;function ie(e,t={}){return{ok:!0,provider:qr,op:e,alertOnly:!0,execution:Vr,exec:!1,...t}}function j(e,t){throw new Error(`protective-monitors: ${e}${t?` ${t}`:""}`)}async function ae(e,t={}){return typeof t.http=="function"?t.http(e,t):typeof t.httpJson=="function"?t.httpJson(e,t):ye(e,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,retries:t.retries??0})}function ge(e){return String(e||"USDT").trim().toUpperCase().replace(/\/USD$/,"")}function on(e={}){if(e.feedId){let n=String(e.feedId).replace(/^0x/i,"");return nn.test(n)||j("feedId must be a 32-byte hex id"),n.toLowerCase()}let t=ge(e.symbol),r=Qr[t];return r||j("unknown symbol",t),r}function sn(e={}){if(e.llamaCoin)return String(e.llamaCoin);let t=ge(e.symbol);return en[t]||`coingecko:${t.toLowerCase()}`}function Tt(e,t){let r=Number(e.thresholdBps??t);return(!Number.isFinite(r)||r<0)&&j("thresholdBps must be a non-negative number"),r}function an(e){let t=Array.isArray(e?.parsed)?e.parsed[0]:e?.price?e:null,r=Number(t?.price?.price),n=Number(t?.price?.expo);return(!Number.isFinite(r)||!Number.isFinite(n))&&j("no pyth price returned"),n<0?r/10**-n:r*10**n}function cn(e,t){let r=e?.coins?.[t]||e?.coins?.[String(t).toLowerCase()],n=Number(r?.price);return Number.isFinite(n)?n:null}function ln(e,t={}){let r=String(t.pythBaseUrl||Jr).replace(/\/$/,""),n=new URL(`${r}/v2/updates/price/latest`);return n.searchParams.append("ids[]",e),n.searchParams.set("parsed","true"),n.toString()}function un(e,t={}){return`${String(t.llamaCoinsBaseUrl||Kr).replace(/\/$/,"")}/prices/current/${encodeURIComponent(e)}`}async function Ot(e,t){let r=on(e),n=await ae(ln(r,t),t),o=an(n);return o>0||j("pyth price must be positive"),{id:r,price:o}}async function _t(e,t){let r=sn(e),n=await ae(un(r,t),t);return{coin:r,price:cn(n,r)}}async function dn(e={},t={}){let r=Number(e.peg??1);(!Number.isFinite(r)||r<=0)&&j("peg must be a positive number");let n=Tt(e,50),o=await Ot(e,t),i=Math.round(Math.abs(o.price-r)*1e4),s={required:!1,llamaPrice:null};try{let u=await _t(e,t);s={required:!1,llamaPrice:u.price,llamaCoin:u.coin}}catch{s={required:!1,llamaPrice:null}}return ie("depeg",{symbol:ge(e.symbol),feedId:o.id,price:o.price,peg:r,thresholdBps:n,deviationBps:i,alert:i>n,crossCheck:s})}async function fn(e={},t={}){let r=Tt(e,100),n=await Ot(e,t),o=await _t(e,t);o.price>0||j("llama price required for oracleDeviation");let i=(n.price+o.price)/2,s=Math.round(Math.abs(n.price-o.price)/i*1e4);return ie("oracleDeviation",{symbol:ge(e.symbol),pythPrice:n.price,llamaPrice:o.price,mid:i,thresholdBps:r,deviationBps:s,alert:s>r})}function pn(e,t){return String(e.id||e.defillamaId||e.slug||`hack-${t}`)}function hn(e,t){return{id:pn(e,t),name:String(e.name||e.protocol||"unknown"),classification:e.classification?String(e.classification):null,technique:e.technique?String(e.technique):null,amount:Number.isFinite(Number(e.amount))?Number(e.amount):null,chain:Array.isArray(e.chain)?e.chain.map(String):e.chain?[String(e.chain)]:[],source:e.source?String(e.source):null}}function mn(e){return(String(e).match(/<item\b[\s\S]*?<\/item>/gi)||[]).map((r,n)=>{let o=i=>{let s=r.match(new RegExp(`<${i}[^>]*>([\\s\\S]*?)</${i}>`,"i"));return s?s[1].replace(/<!\[CDATA\[|\]\]>/g,"").trim():""};return{id:o("guid")||o("link")||o("title")||`rss-${n}`,name:o("title")||"unknown",classification:"rss",technique:null,amount:null,chain:[],source:o("link")||null}})}function kt(e){if(typeof e=="string"){let t=e.trim();if(t.startsWith("<"))return mn(t);try{return kt(JSON.parse(t))}catch{j("exploitFeed payload is not JSON or RSS")}}return Array.isArray(e)?e:Array.isArray(e?.hacks)?e.hacks:Array.isArray(e?.items)?e.items:[]}function yn(e){return e.map((t,r)=>({item:t,index:r})).sort((t,r)=>{let n=String(t.item.id).localeCompare(String(r.item.id));return n!==0?n:t.index-r.index}).map(t=>t.item)}async function wn(e={},t={}){let r=Yr,n=e.payload??await ae(r,t),o=yn(kt(n).map(hn));return ie("exploitFeed",{count:o.length,fingerprint:o.map(i=>i.id).join("|"),items:o,alert:o.length>0})}function bn(e){return e===!0||e===1||e==="1"}function gn(e,t){let r=e?.result&&typeof e.result=="object"?e.result:e,n=String(t).toLowerCase();if(r&&typeof r=="object"){for(let[o,i]of Object.entries(r))if(String(o).toLowerCase()===n&&i&&typeof i=="object")return{address:o,token:i}}return null}async function Ue(e={},t={}){e.asSoleGate===!0&&j("goplus is a second opinion and must never be a sole gate");let r=String(e.address||e.token||"").trim();rn.test(r)||j("goplus requires an EVM token address");let n=Number(e.chainId??1);(!Number.isInteger(n)||n<=0)&&j("chainId must be a positive integer");let i=`${String(t.goplusBaseUrl||Xr).replace(/\/$/,"")}/${n}?contract_addresses=${r}`,s=e.payload??await ae(i,t),u=gn(s,r);u||j("goplus returned no result for",r);let a=tn.filter(d=>bn(u.token[d]));return ie("goplus",{chainId:n,address:r.toLowerCase(),role:"second-opinion",secondOpinion:!0,soleGate:!1,neverSoleGate:!0,token:{address:u.address,name:u.token.token_name||null,symbol:u.token.token_symbol||null},findings:a,alert:a.length>0,note:"second opinion only \u2014 never the sole gate"})}function xn(e){let t=Number(e);return(!Number.isFinite(t)||t<0)&&j("healthFactor must be a non-negative number"),t<1?"liquidatable":t<1.05?"danger":t<1.2?"critical":t<1.5?"warning":"healthy"}function Sn(e,t){let r=Number(e.healthFactor??e.hf);Number.isFinite(r)||j("position healthFactor required");let n=xn(r);return{id:String(e.id||e.protocol||`pos-${t}`),protocol:String(e.protocol||"unknown"),healthFactor:r,collateralUsd:e.collateralUsd!=null?Number(e.collateralUsd):null,debtUsd:e.debtUsd!=null?Number(e.debtUsd):null,rung:n}}async function En(e={},t={}){let r=null;if(Array.isArray(e.positions))r=e;else if(Array.isArray(e))r={positions:e};else{let s=String(e.user||"").trim();s||j("liquidationLadder requires user or positions");let u=String(t.aaveUrl||`${Zr}/${s}`);r=await ae(u,t)}let o=(Array.isArray(r?.positions)?r.positions:[]).map(Sn),i=o.reduce((s,u)=>s?At[u.rung]<At[s]?u.rung:s:u.rung,null);return ie("liquidationLadder",{user:r?.user||e.user||null,chainId:r?.chainId??e.chainId??null,ladder:o,worstRung:i,alert:o.some(s=>s.rung!=="healthy")})}var Lo=Object.freeze({depeg:dn,oracleDeviation:fn,exploitFeed:wn,goplus:Ue,liquidationLadder:En});import ee from"node:fs";import Mn from"node:os";import Se from"node:path";import{randomUUID as Fn}from"node:crypto";var jo=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),vo=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),U=(e,t=0,r=1)=>Math.min(r,Math.max(t,e)),M=e=>Number.isFinite(Number(e))?Number(e):null,An=e=>Math.round(e*1e4)/1e4;function F(e,t,r,n=!0){!n||r===null||!Number.isFinite(r)||e.push({feature:t,value:An(r)})}function Tn(e,t){let r=M(e.repeatBuys??e.repeat_buys??e.buyCount),n=M(e.walletWinRate??e.winRate);F(t,"repeat_buys",r===null?null:U((r-1)/4)*.38),F(t,"wallet_win_rate",n===null?null:(U(n)-.5)*.5)}function On(e,t){let r=M(e.ageHours??e.poolAgeHours),n=M(e.liquidityUsd??e.liquidity),o=e.liquidityLocked??e.locked;F(t,"pool_age",r===null?null:r<24?-.42:U(r/720)*.12),F(t,"liquidity",n===null?null:(U(Math.log10(Math.max(1,n))/7)-.5)*.28),F(t,"liquidity_lock",o==null?null:o?.12:-.28)}function _n(e,t){let r=M(e.floorChange??e.floorChangePct),n=M(e.sales??e.saleCount);F(t,"floor_change",r===null?null:U(r,-1,1)*.35),F(t,"sales_depth",n===null?null:U(n/50)*.18)}function kn(e,t){let r=M(e.flowImbalance??e.imbalance),n=M(e.fundingRate??e.funding);F(t,"flow_imbalance",r===null?null:U(r,-1,1)*.42),F(t,"funding",n===null?null:-U(n*100,-1,1)*.12)}function $n(e,t){let r=M(e.marketProbability??e.marketPrice??e.probability),n=M(e.fairProbability??e.referenceProbability??e.fairValue);F(t,"probability_mispricing",r===null||n===null?null:U(n-r,-1,1)*.65);let o=M(e.liquidityUsd??e.liquidity);F(t,"market_liquidity",o===null?null:U(Math.log10(Math.max(1,o))/6)*.12)}var Mo=Object.freeze({wallet:Tn,pool:On,nft_floor:_n,hl_flow:kn,prediction_market:$n});import{createHash as Cn}from"node:crypto";var Uo=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Do=Object.freeze(["read","simulate"]);var Bo=1440*60;var ce=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},Rn=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Nn=Object.freeze(["privkey","wif","xprv","seed"]);function $t(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return Rn.test(t)||Nn.includes(r)}var In=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Pn=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Z(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Pn.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of In)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new ce(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&$t(o))throw new ce(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");Z(o,`${t}[key]`,r),Z(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())Z(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>Z(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if($t(o))throw new ce(`${t}.${o}`,"forbidden-key-name");Z(i,`${t}.${o}`,r,o)}return e}var De=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),es=Object.freeze(Object.fromEntries(De.map((e,t)=>[e,Object.freeze(t+1<De.length?[De[t+1]]:[])])));function Be(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(Be).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${Be(e[t])}`).join(",")}}`}function Ln(e){return e===void 0?null:JSON.parse(JSON.stringify(e))}function ze(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))ze(t)}return e}function Hn(e,t="fact"){try{Z(e,t)}catch{throw new Error(`${t} contains custody material and is forbidden`)}}function jn(e){return Cn("sha256").update(Be(e)).digest("hex")}function vn({tradeId:e,state:t,fact:r,asOf:n,previousHash:o,external:i}){let s={tradeId:e,state:t,asOf:n,previousHash:o??null,external:i===!0,fact:Ln(r)};return ze({...s,hash:jn(s)})}function Rt({tradeId:e,intent:t,asOf:r=0}={}){if(!e||typeof e!="string")throw new Error("tradeId is required");if(!t||typeof t!="object"||Array.isArray(t))throw new Error("intent fact is required");Hn(t,"intent");let n=vn({tradeId:e,state:"intent",fact:t,asOf:r,previousHash:null,external:!1});return ze({tradeId:e,state:"intent",events:[n],headHash:n.hash,custody:"none",execution:"prepare-only"})}function Nt(e,t={}){if(!e||typeof e!="object")throw new TypeError("signal required");if(e.noTrade===!0)throw new Error("NO_TRADE signal cannot open a trade lifecycle");if(e.executionAllowed===!0)throw new Error("executionAllowed must be false on public plane");let r=String(t.tradeId||`sig-${e.id||"unknown"}`).slice(0,128),n={source:"signal_score",signalId:e.id,signalType:e.type,score:e.score,confidence:e.confidence,flags:e.flags||[],promote:"research_only",execution:"prepare-only",custody:"none",note:"Cold signal \u2192 prepare intent only. Owner wallet must sign any later tx.",...t.intentExtra&&typeof t.intentExtra=="object"?t.intentExtra:{}},o=Rt({tradeId:r,intent:n,asOf:t.asOf??Date.now()});return{tradeId:r,intent:n,lifecycle:o,recommendation:"PREPARE_RESEARCH_ONLY"}}var Ct=1,Ge=5e3,Un=Object.freeze({1:new Set(["0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","0xdac17f958d2ee523a2206206994597c13d831ec","0x6b175474e89094c44da98b954eedeac495271d0","0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2"]),8453:new Set(["0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0x4200000000000000000000000000000000000006"]),42161:new Set(["0xaf88d065e77c8cc2239327c5edb3a432268e5831","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x82af49447d8a07e3bd95bd0d56f35241523fbab1"])}),Dn=/^0x[0-9a-fA-F]{40}$/,Bn=/^0x[0-9a-fA-F]{64}$/,zn=/^(?:0|[1-9]\d*)(?:\.\d{1,2})?$/;function D(e,t){let r=String(e||"").trim();if(!Dn.test(r))throw new TypeError(`${t} must be a 0x-prefixed EVM address`);return r.toLowerCase()}function Lt(e,t){let r=Un[Number(e)];if(!r)return!1;try{return r.has(D(t,"token"))}catch{return!1}}function le(e,t="usd"){let r=typeof e=="number"?String(e):e;if(typeof r!="string"||!zn.test(r))throw new TypeError(`${t} must be a non-negative decimal string with at most 2 decimal places`);let[n,o=""]=r.split("."),i=(o+"00").slice(0,2);return BigInt(n)*100n+BigInt(i)}function ue(e){let t=BigInt(e);if(t<0n)throw new RangeError("centsToUsd: cents must be non-negative");let r=t/100n,n=t%100n;return`${r.toString()}.${n.toString().padStart(2,"0")}`}function Gn({dailyCapUsd:e,spentTodayUsd:t,proportionalUsd:r=null}){let n=le(e,"dailyCapUsd"),o=le(t,"spentTodayUsd"),i=n-o;if(i<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"daily-cap-exhausted"};if(r==null)return{sizeCents:i,sizeUsd:ue(i),basis:"cap-only"};let s=le(r,"proportionalUsd");if(s<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"sized-to-zero"};let u=s<i?s:i;return{sizeCents:u,sizeUsd:ue(u),basis:u===i?"cap-limited":"proportional"}}function Wn(e={}){let t=String(e.txHash||"").trim().toLowerCase();if(!Bn.test(t))throw new TypeError("event.txHash must be a 32-byte tx hash");let r=D(e.token,"event.token"),n=D(e.from,"event.from"),o=D(e.to,"event.to"),i=e.txFrom==null?null:D(e.txFrom,"event.txFrom");return{txHash:t,token:r,from:n,to:o,txFrom:i,chainId:Number(e.chainId),blockNumber:Number.isFinite(Number(e.blockNumber))?Number(e.blockNumber):null,logIndex:Number.isFinite(Number(e.logIndex))?Number(e.logIndex):null,valueUsd:e.valueUsd==null?null:String(e.valueUsd)}}function qn(e,{followedWallet:t}={}){let r=D(t,"followedWallet");return e.txFrom?e.txFrom!==r?{included:!1,reason:"not-initiated-by-followed-wallet"}:Lt(e.chainId,e.token)?{included:!1,reason:"quote-asset-transfer"}:e.to===r?{included:!0,side:"buy"}:e.from===r?{included:!0,side:"sell"}:{included:!1,reason:"wallet-not-a-party"}:{included:!1,reason:"tx-from-unknown"}}function Vn({chainId:e,txHash:t,noTrade:r}){return{id:`follow-mirror:${e}:${t}`,type:"wallet_mirror",score:r?0:1,confidence:r?0:1,noTrade:r,executionAllowed:!1,flags:r?["FOLLOW_MIRROR","NO_TRADE"]:["FOLLOW_MIRROR"]}}function xe({chainId:e,txHash:t,token:r,side:n,sizeUsd:o,sizeBasis:i,followedWallet:s,refuseReason:u=null}={}){let a=Vn({chainId:e,txHash:t,noTrade:u!=null});try{let d=Nt(a,{tradeId:`follow-mirror-${e}-${t}`,intentExtra:{source:"follow_mirror",chain:e,followedWallet:s,token:r,side:n,sizeUsd:o,sizeBasis:i,txHash:t,executionAllowed:!1,backendSigner:!1,note:"Wallet-follow mirror. Cold, prepare-only. Owner wallet must sign any later tx."}});return{ok:!0,requiresWalletSignature:!0,backendSigner:!1,executionAllowed:!1,tradeId:d.tradeId,chain:e,token:r,side:n,sizeUsd:o,sizeBasis:i,txHash:t,followedWallet:s,recommendation:d.recommendation,lifecycle:d.lifecycle,intent:d.intent}}catch(d){return{ok:!1,reason:u||String(d?.message||d)}}}function Jn(e=[],{followedWallet:t,dailyCapUsd:r,spentTodayUsd:n="0",seenTxHashes:o=new Set,honeypotResults:i={}}={}){if(!Array.isArray(e))throw new TypeError("rawEvents must be an array");let s=D(t,"followedWallet"),u=new Set(o),a=le(n,"spentTodayUsd"),d=le(r,"dailyCapUsd"),l=[],h=[],p=[];for(let f of e){let c;try{c=Wn(f)}catch(x){p.push({txHash:f?.txHash??null,reason:`malformed-event: ${x.message}`});continue}if(u.has(c.txHash)){p.push({txHash:c.txHash,reason:"duplicate-tx"});continue}let y=qn(c,{followedWallet:s});if(!y.included){p.push({txHash:c.txHash,reason:y.reason});continue}let w=i[c.token];if(w?.flagged){u.add(c.txHash);let x=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:"0.00",sizeBasis:"refused",followedWallet:s,refuseReason:`token flagged: ${w.reason||"security check flagged this token"}`});h.push({txHash:c.txHash,token:c.token,side:y.side,reason:x.reason});continue}if(d-a<=0n){u.add(c.txHash);let x=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:"0.00",sizeBasis:"refused",followedWallet:s,refuseReason:"daily-cap-exhausted"});h.push({txHash:c.txHash,token:c.token,side:y.side,reason:x.reason});continue}let R=Gn({dailyCapUsd:ue(d),spentTodayUsd:ue(a),proportionalUsd:c.valueUsd});if(R.sizeCents<=0n){u.add(c.txHash);let x=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:"0.00",sizeBasis:R.basis,followedWallet:s,refuseReason:R.basis});h.push({txHash:c.txHash,token:c.token,side:y.side,reason:x.reason});continue}let N=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:R.sizeUsd,sizeBasis:R.basis,followedWallet:s});u.add(c.txHash),N.ok?(l.push(N),a+=R.sizeCents):h.push({txHash:c.txHash,token:c.token,side:y.side,reason:N.reason})}return{intents:l,refusals:h,skipped:p,seenTxHashes:u,spentTodayUsd:ue(a)}}function We(e=process.env){let t=e.ORACLE_CONFIG_DIR||Se.join(Mn.homedir(),".config","oracle");return Se.join(t,"follow-mirror.json")}function It(){return{version:Ct,targets:{}}}function Pt(e,t){return`${String(e).toLowerCase()}:${D(t,"address")}`}function Ee(e){try{let t=ee.readFileSync(e,"utf8"),r=JSON.parse(t);return!r||typeof r!="object"||r.version!==Ct||!r.targets||typeof r.targets!="object"?It():r}catch{return It()}}function Kn(e,t){let r=Se.dirname(e);ee.mkdirSync(r,{recursive:!0,mode:448});let n=Se.join(r,`.follow-mirror.${process.pid}.${Date.now()}.${Fn()}.tmp`);try{ee.writeFileSync(n,`${JSON.stringify(t)}
+`,{mode:384,flag:"wx"}),ee.renameSync(n,e);try{ee.chmodSync(e,384)}catch{}}catch(o){try{ee.unlinkSync(n)}catch{}throw o}}function Yn(e){return new Date(e).toISOString().slice(0,10)}function Xn(e,t,r){let n=e.targets[t],o=new Set(Array.isArray(n?.seenTxHashes)?n.seenTxHashes:[]),i=typeof n?.days?.[r]=="string"?n.days[r]:"0";return{seenTxHashes:o,spentTodayUsd:i}}function Zn(e,t,{seenTxHashes:r,spentTodayUsd:n,day:o,newIntents:i,newRefusals:s}){let u=e.targets[t]||{seenTxHashes:[],days:{},intents:[],refusals:[]},a=[...r].slice(-Ge),d=[...u.intents||[],...i].slice(-Ge),l=[...u.refusals||[],...s].slice(-Ge);e.targets[t]={seenTxHashes:a,days:{...u.days||{},[o]:n},intents:d,refusals:l}}function qe({now:e=()=>Date.now(),fetchWallet:t,fetchTxFrom:r,checkHoneypot:n,estimateUsdValue:o=async()=>null,storePath:i=We()}={}){if(typeof t!="function")throw new TypeError("createFollowMirror requires fetchWallet");if(typeof r!="function")throw new TypeError("createFollowMirror requires fetchTxFrom");if(typeof n!="function")throw new TypeError("createFollowMirror requires checkHoneypot");async function s({address:a,chain:d,chainId:l,dailyCapUsd:h,lookback:p}={}){let f=D(a,"address"),c=Number(l);if(!Number.isInteger(c)||c<=0)throw new TypeError("observe requires a numeric chainId");let y=e(),w=Yn(y),S=Pt(d||c,f),R=Ee(i),{seenTxHashes:N,spentTodayUsd:x}=Xn(R,S,w),C=await t(f,{chains:[c],lookback:p}),L=Array.isArray(C?.events)?C.events:[],b=[],E={},k=new Set;for(let m of L){let A=null;try{A=await r(c,m.txHash)}catch{A=null}let v=null;try{v=await o({...m,chainId:c,txFrom:A})}catch{v=null}let $=String(m.token||"").toLowerCase();if(A===f&&!Lt(c,$)&&!k.has($)&&$){k.add($);try{E[$]=await n(c,$)}catch(q){E[$]={flagged:!0,reason:`security check unavailable: ${String(q?.message||q).slice(0,160)}`}}}b.push({...m,chainId:c,txFrom:A,valueUsd:v})}let I=Jn(b,{followedWallet:f,dailyCapUsd:String(h),spentTodayUsd:x,seenTxHashes:N,honeypotResults:E});return Zn(R,S,{seenTxHashes:I.seenTxHashes,spentTodayUsd:I.spentTodayUsd,day:w,newIntents:I.intents.map(m=>({tradeId:m.tradeId,txHash:m.txHash,token:m.token,side:m.side,sizeUsd:m.sizeUsd,createdAt:y})),newRefusals:I.refusals.map(m=>({...m,createdAt:y}))}),Kn(i,R),{ok:!0,cold:!0,executionAllowed:!1,chain:d||c,chainId:c,address:f,observed:L.length,intents:I.intents,refusals:I.refusals,skipped:I.skipped,spentTodayUsd:I.spentTodayUsd,dailyCapUsd:String(h),errors:C?.errors||[]}}function u({address:a,chain:d}={}){let l=D(a,"address"),h=Ee(i),p=Pt(d,l),f=h.targets[p]||{intents:[],refusals:[],days:{}};return{ok:!0,address:l,chain:d,intents:f.intents||[],refusals:f.refusals||[],days:f.days||{}}}return Object.freeze({observe:s,status:u,storePath:i})}var te={1:"ethereum",8453:"base",42161:"arbitrum"},Qn=Object.fromEntries(Object.entries(te).map(([e,t])=>[t,Number(e)])),eo=new Set(["is_honeypot","cannot_sell_all","cannot_buy","is_blacklisted","selfdestruct","owner_change_balance"]),Ht=`oracle follow <name-or-address> [--chain <name>] [--blocks <n>] [--json]
 oracle follow <name-or-address> --chain <name> --mirror --max-usd <n> [--json]
 oracle follow status [<name-or-address>] [--chain <name>] [--json]
 
@@ -34,35 +34,35 @@ Chains: ${Object.values(te).join(", ")}. Default: ethereum.
 Lookback defaults to 40000 blocks. Endpoints are keyless.
 
 Note publicnode-class RPCs are deliberately excluded: they retain only ~128
-blocks, so they return an empty result instead of an error.`;function Se(e,t){let r=e.indexOf(t);return r>=0?e[r+1]:void 0}function qn(e){let t=String(e??"");return t.length>22?`${t.slice(0,19)}...`:t}async function Jn(e,t){let n=(await me(e,"eth_getTransactionByHash",[t]))?.from;return typeof n!="string"||!/^0x[0-9a-fA-F]{40}$/.test(n)?null:n.toLowerCase()}async function Vn(e,t){try{let n=((await Ue({address:t,chainId:e},{})).findings||[]).filter(o=>Wn.has(o));return n.length>0?{flagged:!0,reason:`goplus: ${n.join(", ")}`}:{flagged:!1,reason:null}}catch(r){return{flagged:!0,reason:`goplus check unavailable: ${String(r?.message||r).slice(0,160)}`}}}async function qe(e){if(ht.test(e))return{address:e,resolvedFrom:null};let t=await gt(e);return t?.address?{address:t.address,resolvedFrom:e}:{address:null,resolvedFrom:null}}async function Kn(e,{query:t,chainArg:r,chainId:n,lookbackBlocks:o,asJson:i}){let s=Se(e,"--max-usd");if(!s||!/^\d+(?:\.\d{1,2})?$/.test(s))return process.stderr.write(`follow --mirror: --max-usd must be a positive decimal (at most 2 decimal places), got "${s??""}"
-`),1;let{address:l,resolvedFrom:a}=await qe(t);if(!l)return process.stderr.write(`follow: could not resolve "${t}" to an address
-`),1;let c=await We({fetchWallet:_e,fetchTxFrom:Jn,checkHoneypot:Vn}).observe({address:l,chain:te[n]||String(n),chainId:n,dailyCapUsd:s,lookback:o});if(i)return process.stdout.write(`${JSON.stringify({resolvedFrom:a,...c})}
-`),0;let p=a?`${a}  ${l}`:l;process.stdout.write(`${p}
-`),process.stdout.write(`  ${c.chain} \xB7 observed ${c.observed} transfer${c.observed===1?"":"s"} \xB7 spent ${c.spentTodayUsd}/${c.dailyCapUsd} today
-`),c.intents.length||process.stdout.write(`  no new prepared mirror intents this run
-`);for(let f of c.intents)process.stdout.write(`  PREPARED  ${f.side}  ${f.token}  $${f.sizeUsd}  tx ${f.txHash}
-`);for(let f of c.refusals)process.stdout.write(`  REFUSED   ${f.side}  ${f.token}  ${f.reason}  tx ${f.txHash}
-`);for(let f of c.errors||[])process.stderr.write(`  error: ${f.stage||"rpc"}: ${f.error}
-`);return 0}async function Yn(e,t){let r=(Se(e,"--chain")||"").toLowerCase(),o=(e.filter((a,u)=>a==="--json"||a==="status"||a==="--chain"&&e[u+1]!=null||e[u-1]==="--chain"?!1:!a.startsWith("--"))[0]||"").trim();if(o){let{address:a,resolvedFrom:u}=await qe(o);if(!a)return process.stderr.write(`follow status: could not resolve "${o}" to an address
-`),1;let c=We({fetchWallet:async()=>({events:[],errors:[]}),fetchTxFrom:async()=>null,checkHoneypot:async()=>({flagged:!1})}),p=r||"ethereum",f=c.status({address:a,chain:p});if(t)return process.stdout.write(`${JSON.stringify({resolvedFrom:u,...f})}
-`),0;process.stdout.write(`${u?`${u}  ${a}`:a}  (${p})
-`),!f.intents.length&&!f.refusals.length&&process.stdout.write(`  no prepared mirror intents on disk for this target
-`);for(let h of f.intents)process.stdout.write(`  PREPARED  ${h.side}  ${h.token}  $${h.sizeUsd}  tx ${h.txHash}
-`);for(let h of f.refusals)process.stdout.write(`  REFUSED   ${h.side}  ${h.token}  ${h.reason}  tx ${h.txHash}
-`);return 0}let i=Ge(),s=xe(i),l=Object.entries(s.targets||{});if(t)return process.stdout.write(`${JSON.stringify({storePath:i,targets:Object.fromEntries(l)})}
-`),0;if(!l.length)return process.stdout.write(`no follow --mirror targets on disk yet
-`),0;for(let[a,u]of l)process.stdout.write(`${a}  ${(u.intents||[]).length} prepared, ${(u.refusals||[]).length} refused
-`);return 0}async function Xn(e=[]){let t=e.includes("--json"),r=e.includes("--mirror"),n=[];for(let u=0;u<e.length;u+=1){let c=e[u];if(!(c==="--json"||c==="--mirror")){if(c==="--chain"||c==="--blocks"||c==="--max-usd"){u+=1;continue}n.push(c)}}if(n[0]==="status")return Yn(e,t);let o=(n[0]||"").trim();if(!o||o==="--help"||o==="-h")return process.stdout.write(`${Pt}
-`),o?0:1;let i=(Se(e,"--chain")||"ethereum").toLowerCase(),s=Gn[i]??Number(i);if(!Oe[s])return process.stderr.write(`follow: unsupported chain "${i}". Supported: ${Object.values(te).join(", ")}
-`),1;let l=Se(e,"--blocks"),a=l?Number(l):4e4;if(!Number.isFinite(a)||a<=0)return process.stderr.write(`follow: --blocks must be a positive number, got "${l}"
-`),1;try{if(r)return await Kn(e,{query:o,chainArg:i,chainId:s,lookbackBlocks:a,asJson:t});let{address:u,resolvedFrom:c}=await qe(o);if(!u)return process.stderr.write(`follow: could not resolve "${o}" to an address
-`),1;let p=await _e(u,{chains:[s],lookback:a,onWarn:t?void 0:d=>process.stderr.write(`  warn: ${d}
-`)}),f=p.events||[];if(t)return process.stdout.write(`${JSON.stringify({address:u,resolvedFrom:c,chain:te[s]||String(s),lookbackBlocks:a,count:f.length,errors:p.errors||[],events:f})}
-`),0;let h=c?`${c}  ${u}`:u;process.stdout.write(`${h}
-`),process.stdout.write(`  ${te[s]||s} \xB7 last ${a} blocks \xB7 ${f.length} transfer${f.length===1?"":"s"}
-`),f.length||process.stdout.write(`  no ERC20 transfers in this window
-`);for(let d of f.slice(0,25)){let y=d.to?.toLowerCase()===u.toLowerCase()?"in ":"out";process.stdout.write(`  ${y} blk ${d.blockNumber}  token ${d.token}  ${qn(d.value)}
-`)}f.length>25&&process.stdout.write(`  ... ${f.length-25} more (use --json for all)
-`);for(let d of p.errors||[])process.stderr.write(`  error: ${d.stage||"rpc"}: ${d.error}
-`);return 0}catch(u){return process.stderr.write(`follow failed: ${u?.message||u}
-`),1}}var ss={name:"follow",summary:"read a wallet's recent ERC20 transfer activity, or --mirror it to prepared intents",group:"read",usage:Pt,async run(e){return Xn(e.argv||[])}};export{ss as default};
+blocks, so they return an empty result instead of an error.`;function Ae(e,t){let r=e.indexOf(t);return r>=0?e[r+1]:void 0}function to(e){let t=String(e??"");return t.length>22?`${t.slice(0,19)}...`:t}async function ro(e,t){let n=(await we(e,"eth_getTransactionByHash",[t]))?.from;return typeof n!="string"||!/^0x[0-9a-fA-F]{40}$/.test(n)?null:n.toLowerCase()}async function no(e,t){try{let n=((await Ue({address:t,chainId:e},{})).findings||[]).filter(o=>eo.has(o));return n.length>0?{flagged:!0,reason:`goplus: ${n.join(", ")}`}:{flagged:!1,reason:null}}catch(r){return{flagged:!0,reason:`goplus check unavailable: ${String(r?.message||r).slice(0,160)}`}}}async function Ve(e){if(wt.test(e))return{address:e,resolvedFrom:null};let t=await Et(e);return t?.address?{address:t.address,resolvedFrom:e}:{address:null,resolvedFrom:null}}async function oo(e,{query:t,chainArg:r,chainId:n,lookbackBlocks:o,asJson:i}){let s=Ae(e,"--max-usd");if(!s||!/^\d+(?:\.\d{1,2})?$/.test(s))return process.stderr.write(`follow --mirror: --max-usd must be a positive decimal (at most 2 decimal places), got "${s??""}"
+`),1;let{address:u,resolvedFrom:a}=await Ve(t);if(!u)return process.stderr.write(`follow: could not resolve "${t}" to an address
+`),1;let l=await qe({fetchWallet:ke,fetchTxFrom:ro,checkHoneypot:no}).observe({address:u,chain:te[n]||String(n),chainId:n,dailyCapUsd:s,lookback:o});if(i)return process.stdout.write(`${JSON.stringify({resolvedFrom:a,...l})}
+`),0;let h=a?`${a}  ${u}`:u;process.stdout.write(`${h}
+`),process.stdout.write(`  ${l.chain} \xB7 observed ${l.observed} transfer${l.observed===1?"":"s"} \xB7 spent ${l.spentTodayUsd}/${l.dailyCapUsd} today
+`),l.intents.length||process.stdout.write(`  no new prepared mirror intents this run
+`);for(let p of l.intents)process.stdout.write(`  PREPARED  ${p.side}  ${p.token}  $${p.sizeUsd}  tx ${p.txHash}
+`);for(let p of l.refusals)process.stdout.write(`  REFUSED   ${p.side}  ${p.token}  ${p.reason}  tx ${p.txHash}
+`);for(let p of l.errors||[])process.stderr.write(`  error: ${p.stage||"rpc"}: ${p.error}
+`);return 0}async function so(e,t){let r=(Ae(e,"--chain")||"").toLowerCase(),o=(e.filter((a,d)=>a==="--json"||a==="status"||a==="--chain"&&e[d+1]!=null||e[d-1]==="--chain"?!1:!a.startsWith("--"))[0]||"").trim();if(o){let{address:a,resolvedFrom:d}=await Ve(o);if(!a)return process.stderr.write(`follow status: could not resolve "${o}" to an address
+`),1;let l=qe({fetchWallet:async()=>({events:[],errors:[]}),fetchTxFrom:async()=>null,checkHoneypot:async()=>({flagged:!1})}),h=r||"ethereum",p=l.status({address:a,chain:h});if(t)return process.stdout.write(`${JSON.stringify({resolvedFrom:d,...p})}
+`),0;process.stdout.write(`${d?`${d}  ${a}`:a}  (${h})
+`),!p.intents.length&&!p.refusals.length&&process.stdout.write(`  no prepared mirror intents on disk for this target
+`);for(let f of p.intents)process.stdout.write(`  PREPARED  ${f.side}  ${f.token}  $${f.sizeUsd}  tx ${f.txHash}
+`);for(let f of p.refusals)process.stdout.write(`  REFUSED   ${f.side}  ${f.token}  ${f.reason}  tx ${f.txHash}
+`);return 0}let i=We(),s=Ee(i),u=Object.entries(s.targets||{});if(t)return process.stdout.write(`${JSON.stringify({storePath:i,targets:Object.fromEntries(u)})}
+`),0;if(!u.length)return process.stdout.write(`no follow --mirror targets on disk yet
+`),0;for(let[a,d]of u)process.stdout.write(`${a}  ${(d.intents||[]).length} prepared, ${(d.refusals||[]).length} refused
+`);return 0}async function io(e=[]){let t=e.includes("--json"),r=e.includes("--mirror"),n=[];for(let d=0;d<e.length;d+=1){let l=e[d];if(!(l==="--json"||l==="--mirror")){if(l==="--chain"||l==="--blocks"||l==="--max-usd"){d+=1;continue}n.push(l)}}if(n[0]==="status")return so(e,t);let o=(n[0]||"").trim();if(!o||o==="--help"||o==="-h")return process.stdout.write(`${Ht}
+`),o?0:1;let i=(Ae(e,"--chain")||"ethereum").toLowerCase(),s=Qn[i]??Number(i);if(!_e[s])return process.stderr.write(`follow: unsupported chain "${i}". Supported: ${Object.values(te).join(", ")}
+`),1;let u=Ae(e,"--blocks"),a=u?Number(u):4e4;if(!Number.isFinite(a)||a<=0)return process.stderr.write(`follow: --blocks must be a positive number, got "${u}"
+`),1;try{if(r)return await oo(e,{query:o,chainArg:i,chainId:s,lookbackBlocks:a,asJson:t});let{address:d,resolvedFrom:l}=await Ve(o);if(!d)return process.stderr.write(`follow: could not resolve "${o}" to an address
+`),1;let h=await ke(d,{chains:[s],lookback:a,onWarn:t?void 0:c=>process.stderr.write(`  warn: ${c}
+`)}),p=h.events||[];if(t)return process.stdout.write(`${JSON.stringify({address:d,resolvedFrom:l,chain:te[s]||String(s),lookbackBlocks:a,count:p.length,errors:h.errors||[],events:p})}
+`),0;let f=l?`${l}  ${d}`:d;process.stdout.write(`${f}
+`),process.stdout.write(`  ${te[s]||s} \xB7 last ${a} blocks \xB7 ${p.length} transfer${p.length===1?"":"s"}
+`),p.length||process.stdout.write(`  no ERC20 transfers in this window
+`);for(let c of p.slice(0,25)){let y=c.to?.toLowerCase()===d.toLowerCase()?"in ":"out";process.stdout.write(`  ${y} blk ${c.blockNumber}  token ${c.token}  ${to(c.value)}
+`)}p.length>25&&process.stdout.write(`  ... ${p.length-25} more (use --json for all)
+`);for(let c of h.errors||[])process.stderr.write(`  error: ${c.stage||"rpc"}: ${c.error}
+`);return 0}catch(d){return process.stderr.write(`follow failed: ${d?.message||d}
+`),1}}var ws={name:"follow",summary:"read a wallet's recent ERC20 transfer activity, or --mirror it to prepared intents",group:"read",usage:Ht,async run(e){return io(e.argv||[])}};export{ws as default};

package/dist/cli/commands/mcp.mjs

@@ -1,12 +1,12 @@
-import{parseArgs as Ut}from"node:util";import{spawnSync as V}from"node:child_process";import q from"node:path";import u from"node:fs";import v from"node:path";import dt from"node:os";import C from"node:fs";import ct from"node:os";import g from"node:path";import{fileURLToPath as at}from"node:url";var ut=g.dirname(at(import.meta.url)),x=g.resolve(ut,"../..");function W(){return process.env.ORACLE_FAKE_HOME||ct.homedir()}function pt(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function G(){return pt()?process.env.ORACLE_CONFIG_DIR||g.join(W(),".config","oracle"):g.join(W(),".config","oracle")}function lt(){return g.join(G(),"desk.json")}function ft(){return g.join(G(),"env")}function w({force:t=!1}={}){if(w._done&&!t)return w._result||null;w._done=!0;let n={},r=(e,o)=>{if(o==null)return;let i=String(o).trim();i&&(process.env[e]!=null&&String(process.env[e]).trim()!==""||(process.env[e]=i,n[e]=i))};try{let e=ft();if(C.existsSync(e))for(let o of C.readFileSync(e,"utf8").split(/\r?\n/)){let i=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let c=i[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),r(i[1],c)}}catch{}try{let e=lt();if(C.existsSync(e)){let o=JSON.parse(C.readFileSync(e,"utf8"));o&&typeof o=="object"&&(r("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),r("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),r("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),r("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),r("ORACLE_EXEC_URL",o.execUrl),r("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let s=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return s&&(r("ORACLE_DESK_URL",s),r("ORACLE_DATA_URL",s),r("ORACLE_API_URL",s),r("ORACLE_PUBLIC_URL",s),r("MAD_DESK_URL",s)),w._result=Object.keys(n).length?n:null,w._result}try{w()}catch{}function B(t){let n=[g.join(x,"bin",t),g.join(x,"dist","bin",t),g.join(x,"..","bin",t)];return n.find(r=>C.existsSync(r))||n[0]}function d(){return process.env.ORACLE_FAKE_HOME||dt.homedir()}function m({oracleRoot:t=x}={}){return{ok:!0,specs:{"oracle-data":{command:"node",args:[t===x?B("oracle-data-mcp.mjs"):[v.join(t,"bin","oracle-data-mcp.mjs"),v.join(t,"dist","bin","oracle-data-mcp.mjs")].find(s=>u.existsSync(s))||v.join(t,"bin","oracle-data-mcp.mjs")]}}}}function k(t){if(!u.existsSync(t))return null;let n=`${t}.bak-oracle-${Math.floor(Date.now()/1e3)}`,r=n;for(let e=1;u.existsSync(r);e+=1)r=`${n}-${e}`;let s=Y(t,"read");try{let e=mt(r);try{u.writeFileSync(e,u.readFileSync(s))}finally{u.closeSync(e)}}finally{u.closeSync(s)}return r}function L(){return u.constants.O_NOFOLLOW||0}function K(t){let n=u.lstatSync(t);if(n.isSymbolicLink()||!n.isFile())throw new Error(`refusing to use non-regular config path: ${t}`)}function Y(t,n){K(t);let r=(n==="read"?u.constants.O_RDONLY:u.constants.O_WRONLY)|L();return u.openSync(t,r)}function mt(t){return u.openSync(t,u.constants.O_WRONLY|u.constants.O_CREAT|u.constants.O_EXCL|L(),384)}function gt(t,n){u.existsSync(t)&&K(t);let r=u.openSync(t,u.constants.O_WRONLY|u.constants.O_CREAT|u.constants.O_TRUNC|L(),384);try{u.writeFileSync(r,n)}finally{u.closeSync(r)}try{u.chmodSync(t,384)}catch{}}function U(t,n=""){if(!u.existsSync(t))return n;let r=Y(t,"read");try{return u.readFileSync(r,"utf8")}finally{u.closeSync(r)}}function O(t,n){u.mkdirSync(v.dirname(t),{recursive:!0}),gt(t,n)}function $(t,n={}){return u.existsSync(t)?JSON.parse(U(t,"{}")):structuredClone(n)}function N(t,n){O(t,JSON.stringify(n,null,2)+`
+import{parseArgs as Ut}from"node:util";import{spawnSync as V}from"node:child_process";import q from"node:path";import u from"node:fs";import v from"node:path";import dt from"node:os";import j from"node:fs";import ct from"node:os";import g from"node:path";import{fileURLToPath as at}from"node:url";var ut=g.dirname(at(import.meta.url)),O=g.resolve(ut,"../..");function W(){return process.env.ORACLE_FAKE_HOME||ct.homedir()}function pt(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function G(){return pt()?process.env.ORACLE_CONFIG_DIR||g.join(W(),".config","oracle"):g.join(W(),".config","oracle")}function lt(){return g.join(G(),"desk.json")}function ft(){return g.join(G(),"env")}function w({force:t=!1}={}){if(w._done&&!t)return w._result||null;w._done=!0;let n={},r=(e,o)=>{if(o==null)return;let i=String(o).trim();i&&(process.env[e]!=null&&String(process.env[e]).trim()!==""||(process.env[e]=i,n[e]=i))};try{let e=ft();if(j.existsSync(e))for(let o of j.readFileSync(e,"utf8").split(/\r?\n/)){let i=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let c=i[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),r(i[1],c)}}catch{}try{let e=lt();if(j.existsSync(e)){let o=JSON.parse(j.readFileSync(e,"utf8"));o&&typeof o=="object"&&(r("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),r("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),r("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),r("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),r("ORACLE_EXEC_URL",o.execUrl),r("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let s=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return s&&(r("ORACLE_DESK_URL",s),r("ORACLE_DATA_URL",s),r("ORACLE_API_URL",s),r("ORACLE_PUBLIC_URL",s),r("MAD_DESK_URL",s)),w._result=Object.keys(n).length?n:null,w._result}try{w()}catch{}function B(t,n=O){let r=[g.join(n,"bin",t),g.join(n,"dist","bin",t),g.join(n,"..","bin",t)];return r.find(s=>j.existsSync(s))||r[0]}function d(){return process.env.ORACLE_FAKE_HOME||dt.homedir()}function m({oracleRoot:t=O}={}){return{ok:!0,specs:{"oracle-data":{command:"node",args:[t===O?B("oracle-data-mcp.mjs"):[v.join(t,"bin","oracle-data-mcp.mjs"),v.join(t,"dist","bin","oracle-data-mcp.mjs")].find(s=>u.existsSync(s))||v.join(t,"bin","oracle-data-mcp.mjs")]}}}}function k(t){if(!u.existsSync(t))return null;let n=`${t}.bak-oracle-${Math.floor(Date.now()/1e3)}`,r=n;for(let e=1;u.existsSync(r);e+=1)r=`${n}-${e}`;let s=Y(t,"read");try{let e=mt(r);try{u.writeFileSync(e,u.readFileSync(s))}finally{u.closeSync(e)}}finally{u.closeSync(s)}return r}function L(){return u.constants.O_NOFOLLOW||0}function K(t){let n=u.lstatSync(t);if(n.isSymbolicLink()||!n.isFile())throw new Error(`refusing to use non-regular config path: ${t}`)}function Y(t,n){K(t);let r=(n==="read"?u.constants.O_RDONLY:u.constants.O_WRONLY)|L();return u.openSync(t,r)}function mt(t){return u.openSync(t,u.constants.O_WRONLY|u.constants.O_CREAT|u.constants.O_EXCL|L(),384)}function gt(t,n){u.existsSync(t)&&K(t);let r=u.openSync(t,u.constants.O_WRONLY|u.constants.O_CREAT|u.constants.O_TRUNC|L(),384);try{u.writeFileSync(r,n)}finally{u.closeSync(r)}try{u.chmodSync(t,384)}catch{}}function U(t,n=""){if(!u.existsSync(t))return n;let r=Y(t,"read");try{return u.readFileSync(r,"utf8")}finally{u.closeSync(r)}}function C(t,n){u.mkdirSync(v.dirname(t),{recursive:!0}),gt(t,n)}function $(t,n={}){return u.existsSync(t)?JSON.parse(U(t,"{}")):structuredClone(n)}function N(t,n){C(t,JSON.stringify(n,null,2)+`
 `)}function h(t,n){let r=$(t,{});(!r.mcpServers||typeof r.mcpServers!="object")&&(r.mcpServers={});let s=!1;for(let[o,i]of Object.entries(n)){let c=r.mcpServers[o];c&&JSON.stringify(c)===JSON.stringify(i)||(r.mcpServers[o]=i,s=!0)}if(!s)return{status:"present",backup:null};let e=k(t);return N(t,r),{status:"written",backup:e}}function f(t,n={}){return{status:t,...n}}function kt(){return q.join(d(),".claude.json")}function ht(t){return q.join(t||process.cwd(),".mcp.json")}function St(t,n){let r=V("claude",["--version"],{encoding:"utf8",timeout:1e4});if(r.error||r.status!==0)return null;let s=V("claude",["mcp","add-json",t,JSON.stringify(n),"--scope","user"],{encoding:"utf8",timeout:3e4});return s.status!==0?{ok:!1,stderr:s.stderr||s.stdout||"failed"}:{ok:!0}}async function X({oracleRoot:t,project:n=!1,printOnly:r=!1,cwd:s=process.cwd()}){let e=m({oracleRoot:t});if(!e.ok)return{ok:!1,code:3,reason:e.reason};if(r)return{ok:!0,print:{mcpServers:e.specs}};if(n){let a=ht(s),l=h(a,e.specs);return{ok:!0,...f(l.status,{path:a,backup:l.backup})}}let o=!1;for(let[a,l]of Object.entries(e.specs)){let p=St(a,l);if(p&&p.ok){o=!0;continue}break}if(o)return{ok:!0,...f("written",{method:"claude-cli"})};let i=kt(),c=h(i,e.specs);return{ok:!0,...f(c.status,{path:i,backup:c.backup})}}import yt from"node:fs";import P from"node:path";function bt(){return process.platform==="darwin"?P.join(d(),"Library","Application Support","Claude","claude_desktop_config.json"):P.join(d(),".config","Claude","claude_desktop_config.json")}async function T({oracleRoot:t,printOnly:n=!1}){let r=m({oracleRoot:t});if(!r.ok)return{ok:!1,code:3,reason:r.reason};let s=bt(),e={mcpServers:r.specs};if(n)return{ok:!0,print:e};let o=P.dirname(s);if(!yt.existsSync(o))return{ok:!0,status:"printed (Claude Desktop not detected)",path:s,print:e};let i=h(s,r.specs);return{ok:!0,...f(i.status,{path:s,backup:i.backup})}}import Z from"node:fs";import z from"node:path";var Q="# oracle-mcp-install begin",tt="# oracle-mcp-install end";function wt(){return z.join(d(),".codex","config.toml")}function xt(t){let n=[Q];for(let[r,s]of Object.entries(t))n.push(`[mcp_servers.${r}]`),n.push(`command = ${JSON.stringify(s.command)}`),n.push(`args = [${s.args.map(e=>JSON.stringify(e)).join(", ")}]`),n.push("");return n.push(tt),n.join(`
 `)+`
 `}function jt(t){return t.replace(new RegExp(`${Q}[\\s\\S]*?${tt}\\n?`,"g"),"")}async function D({oracleRoot:t,printOnly:n=!1}){let r=m({oracleRoot:t});if(!r.ok)return{ok:!1,code:3,reason:r.reason};let s=xt(r.specs),e=wt();if(n)return{ok:!0,printText:s,path:e};Z.mkdirSync(z.dirname(e),{recursive:!0});let o=Z.existsSync(e)?U(e,""):"";if(o.includes(s.trim()))return{ok:!0,...f("present",{path:e,backup:null})};let c=(jt(o).trimEnd()+`
 
-`+s).replace(/^\n+/,"");if(o.trim()===c.trim())return{ok:!0,...f("present",{path:e,backup:null})};let a=o?k(e):null;return O(e,c.endsWith(`
+`+s).replace(/^\n+/,"");if(o.trim()===c.trim())return{ok:!0,...f("present",{path:e,backup:null})};let a=o?k(e):null;return C(e,c.endsWith(`
 `)?c:c+`
 `),{ok:!0,...f("written",{path:e,backup:a})}}import Ct from"node:fs";import et from"node:path";var F="ChatGPT is hosted and can NEVER sign or reach your keys. This connector is read/prepare only; anything it prepares is unsigned until you sign it locally.";function Ot(){return{openapi:"3.1.0",info:{title:"Oracle Public (read/prepare)",version:"1.0.0",description:"Secret-free public surface for hosted clients. "+F},servers:[{url:"https://REPLACE-WITH-YOUR-TUNNEL"}],paths:{"/public/health":{get:{operationId:"publicHealth",summary:"Health check",responses:{200:{description:"ok"}}}},"/public/config":{get:{operationId:"publicConfig",summary:"Public config",responses:{200:{description:"ok"}}}},"/public/connect/request":{post:{operationId:"connectRequest",summary:"Build a connect request (unsigned)",responses:{200:{description:"unsigned request artifact"}}}},"/public/connect/assemble":{post:{operationId:"connectAssemble",summary:"Assemble an unsigned grant artifact",responses:{200:{description:"unsigned grant artifact"}}}},"/public/grants/active":{post:{operationId:"grantsActive",summary:"List active grants (read)",responses:{200:{description:"ok"}}}},"/public/grants/get":{post:{operationId:"grantsGet",summary:"Get a grant by id (read)",responses:{200:{description:"ok"}}}}}}}async function I({printOnly:t=!1}={}){let n=Ot(),r=et.join(d(),".config","oracle","connectors","chatgpt-openapi.json"),s=JSON.stringify(n,null,2)+`
-`;t||(Ct.mkdirSync(et.dirname(r),{recursive:!0}),O(r,s));let e=[F,"","Next steps:","  1. oracle public serve","  2. Expose 127.0.0.1:8799 through YOUR HTTPS tunnel (cloudflared, tailscale funnel, etc.).","     Oracle will not create tunnels for you.","  3. Paste the OpenAPI spec into a GPT Action, or add the tunnel URL as a developer-mode MCP connector.",t?"":`  Spec written to: ${r}`].filter(Boolean).join(`
+`;t||(Ct.mkdirSync(et.dirname(r),{recursive:!0}),C(r,s));let e=[F,"","Next steps:","  1. oracle public serve","  2. Expose 127.0.0.1:8799 through YOUR HTTPS tunnel (cloudflared, tailscale funnel, etc.).","     Oracle will not create tunnels for you.","  3. Paste the OpenAPI spec into a GPT Action, or add the tunnel URL as a developer-mode MCP connector.",t?"":`  Spec written to: ${r}`].filter(Boolean).join(`
 `);return{ok:!0,...f(t?"printed":"written",{path:r,print:n,instructions:e,cannotSign:F})}}import J from"node:path";import rt from"node:os";function vt(){return process.platform==="darwin"?J.join(rt.homedir(),"Library","Application Support","Cursor","User","globalStorage","mcp.json"):process.platform==="win32"?J.join(rt.homedir(),"AppData","Roaming","Cursor","User","globalStorage","mcp.json"):J.join(d(),".config","cursor","mcp.json")}async function M({oracleRoot:t,project:n=!1,printOnly:r=!1,cwd:s=process.cwd()}){let e=m({oracleRoot:t});if(!e.ok)return{ok:!1,code:3,reason:e.reason};if(r)return{ok:!0,printText:['Add this to your Cursor MCP config (Cmd+Shift+P \u2192 "MCP: Open Configuration"):',JSON.stringify({mcpServers:e.specs},null,2)].join(`
 
 `)};let o=vt(),i=h(o,e.specs);return{ok:!0,...f(i.status,{path:o,backup:i.backup})}}import _ from"node:path";import nt from"node:os";function _t(){return process.platform==="darwin"?_.join(nt.homedir(),"Library","Application Support","Code","User","globalStorage","mcp.json"):process.platform==="win32"?_.join(nt.homedir(),"AppData","Roaming","Code","User","globalStorage","mcp.json"):_.join(d(),".config","Code","User","globalStorage","mcp.json")}function Et(t){return _.join(t||process.cwd(),".vscode","mcp.json")}async function H({oracleRoot:t,project:n=!1,printOnly:r=!1,cwd:s=process.cwd()}){let e=m({oracleRoot:t});if(!e.ok)return{ok:!1,code:3,reason:e.reason};if(r)return{ok:!0,printText:["Add this to your VS Code MCP config (.vscode/mcp.json):",JSON.stringify({mcpServers:e.specs},null,2),"","Alternatively, add to VS Code settings.json:",`"mcp.servers": ${JSON.stringify(e.specs,null,2)}`].join(`
@@ -35,17 +35,17 @@ ${s.slice(0,500)}...`,status:"printed"};b(e)||ot(e,{recursive:!0});let i=k(o);re
 `,"utf8"),{ok:!0,path:o,backup:i,status:"installed"}}return{ok:!1,reason:`--with-soul not supported for target '${t}'`}}function R(){process.stderr.write(`usage: oracle mcp <install|print> [target] [flags]
   targets: claude-code | claude-desktop | codex | copilot | chatgpt | cursor | vscode | generic
   flags:   --with-soul --project --print --json
-`)}function j(t,{json:n=!1}={}){if(t.print&&!t.instructions?process.stdout.write(JSON.stringify(t.print,null,2)+`
+`)}function x(t,{json:n=!1}={}){if(t.print&&!t.instructions?process.stdout.write(JSON.stringify(t.print,null,2)+`
 `):t.printText&&process.stdout.write(t.printText),t.instructions&&(process.stdout.write(t.instructions+`
 `),t.print&&n&&process.stdout.write(JSON.stringify(t.print,null,2)+`
 `)),!t.print&&!t.printText&&!t.instructions){let r={status:t.status,path:t.path||null,backup:t.backup||null,method:t.method||null};process.stdout.write((n?JSON.stringify(r,null,2):`${r.status}${r.path?" "+r.path:""}`)+`
 `)}}var Le={name:"mcp",summary:"wire Oracle into AI clients",group:"read",usage:"oracle mcp install <target> [--with-soul] | oracle mcp print [--target <t>] | oracle mcp watchdog [--once]",async run(t){let n=t.argv[0];if(!n||n==="--help"||n==="-h")return R(),n?0:1;if(n==="watchdog"){let{spawn:a}=await import("node:child_process"),l=await import("node:path"),p=t.argv.includes("--once"),y=l.join(t.root,"bin","oracle-mcp-watchdog.mjs");return a(process.execPath,[y,...p?["--once"]:[]],{stdio:"inherit",detached:!0}).unref(),0}let r,s;try{({values:r,positionals:s}=Ut({args:t.argv.slice(1),options:{"with-soul":{type:"boolean",default:!1},project:{type:"boolean",default:!1},print:{type:"boolean",default:!1},json:{type:"boolean",default:!1},target:{type:"string"}},allowPositionals:!0,strict:!0}))}catch(a){return process.stderr.write(`oracle mcp: ${a.message}
 `),R(),1}let e=!!r["with-soul"],o=!!r.project,i=!!r.json,c={oracleRoot:t.root,project:o,cwd:process.cwd()};if(n==="print"){let a=r.target||s[0]||"claude-code";if(a==="generic"||a==="claude-code"){let l=m(c);return process.stdout.write(JSON.stringify({mcpServers:l.specs},null,2)+`
-`),0}if(a==="chatgpt"){let l=await I({printOnly:!0});return j(l,{json:i}),0}return a==="codex"||a==="copilot"?(j(await D({...c,printOnly:!0}),{json:i}),0):a==="claude-desktop"?(j(await T({...c,printOnly:!0}),{json:i}),0):a==="cursor"?(j(await M({...c,printOnly:!0}),{json:i}),0):a==="vscode"||a==="vs-code"?(j(await H({...c,printOnly:!0}),{json:i}),0):(process.stderr.write(`oracle mcp: unknown target '${a}'
+`),0}if(a==="chatgpt"){let l=await I({printOnly:!0});return x(l,{json:i}),0}return a==="codex"||a==="copilot"?(x(await D({...c,printOnly:!0}),{json:i}),0):a==="claude-desktop"?(x(await T({...c,printOnly:!0}),{json:i}),0):a==="cursor"?(x(await M({...c,printOnly:!0}),{json:i}),0):a==="vscode"||a==="vs-code"?(x(await H({...c,printOnly:!0}),{json:i}),0):(process.stderr.write(`oracle mcp: unknown target '${a}'
 `),1)}if(n==="install"){let a=s[0]||r.target;if(!a)return R(),1;let l=!!r.print,p;if(a==="claude-code")p=await X({...c,printOnly:l});else if(a==="claude-desktop")p=await T({...c,printOnly:l});else if(a==="codex"||a==="copilot")p=await D({...c,printOnly:l});else if(a==="chatgpt")p=await I({printOnly:l});else if(a==="cursor")p=await M({...c,printOnly:l});else if(a==="vscode"||a==="vs-code")p=await H({...c,printOnly:l});else if(a==="generic"){let y=m(c);return process.stdout.write(JSON.stringify({mcpServers:y.specs},null,2)+`
 `),0}else return process.stderr.write(`oracle mcp: unknown target '${a}'
 `),1;if(!p.ok)return process.stderr.write(`oracle mcp: ${p.reason||"failed"}
-`),p.code||1;if(j(p,{json:i}),e){let y=await it(a,{cwd:process.cwd(),printOnly:l});y.ok?process.stderr.write(`  soul \u2192 ${y.path||"injected"}
+`),p.code||1;if(x(p,{json:i}),e){let y=await it(a,{cwd:process.cwd(),printOnly:l});y.ok?process.stderr.write(`  soul \u2192 ${y.path||"injected"}
 `):process.stderr.write(`  soul: ${y.reason||"failed"}
 `)}return p.status&&String(p.status).startsWith("printed")&&p.print&&process.stdout.write(JSON.stringify(p.print,null,2)+`
 `),0}return R(),1}};export{Le as default};