@oracle-agent/oracle 0.35.43 → 0.35.45

package/dist/cli/commands/receipt.mjs

@@ -1,15 +1,15 @@
-import{wordlists as ft}from"ethers";var dt=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),pt=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],ht=new Set([12,15,18,21,24]);function mt(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return ht.has(t.length)&&t.every(r=>ft.en.getWordIndex(r)>=0)}var yt=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,bt=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,wt=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function gt(e){let t=je(e);return wt.has(t)||bt.test(t)}var Z=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function je(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function Et(e){let t=je(e);return[...dt].some(r=>t.includes(r))}function At(e,t,r){if(typeof t=="string"){if(pt.some(o=>o.test(t))||mt(t))throw new Z(r);if(yt.test(t)&&!gt(e))throw new Z(r)}}function de(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return At(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((n,s)=>de(n,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let n of Object.keys(e).sort()){let s=`${t}.${n}`;if(Et(n))throw new Z(s);e[n]!==void 0&&(o[n]=de(e[n],s,n))}return o}function Le(e){return de(e)}var Ir=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Nr=Object.freeze(["read","simulate"]);var Rr=1440*60;var j=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},St=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,xt=Object.freeze(["privkey","wif","xprv","seed"]);function pe(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return St.test(t)||xt.includes(r)}var He=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Ue=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Tt(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Ue.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function Fe(e){let t;try{t=JSON.stringify(e)}catch(n){throw new j("$",`unserializable-payload: ${String(n?.message||n)}`)}if(t===void 0)return"null";let r=Tt(t);for(let{rule:n,re:s}of He)if(s.test(r))throw new j("$<serialized>",n);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new j("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(n,s)=>{if(n&&pe(n))throw new j(`$<serialized>.${n}`,"forbidden-key-name");return s}),t}function B(e,t="$",r=new Set,o=""){if(e==null)return e;if(typeof e=="string"){let n=Ue.includes(String(o).toLowerCase().replace(/[_-]/g,""));for(let{rule:s,re:a}of He)if(!(n&&s.startsWith("raw-32-byte-hex"))&&a.test(e))throw new j(t,s);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[n,s]of e.entries()){if(typeof n=="string"&&pe(n))throw new j(`${t}[${JSON.stringify(n)}]`,"forbidden-key-name");B(n,`${t}[key]`,r),B(s,`${t}[${String(n)}]`,r)}return e}if(e instanceof Set){let n=0;for(let s of e.values())B(s,`${t}[${n++}]`,r);return e}if(Array.isArray(e))return e.forEach((n,s)=>B(n,`${t}[${s}]`,r)),e;for(let[n,s]of Object.entries(e)){if(pe(n))throw new j(`${t}.${n}`,"forbidden-key-name");B(s,`${t}.${n}`,r,n)}return e}var Ot=/[\u0000-\u001f\u007f]/;function he(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function me(e,t="control input"){try{B(e,t),Fe(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function Q(e,{required:t=[],optional:r=[]}={},o="object"){he(e,o);let n=new Set([...t,...r]),s=Object.keys(e).filter(a=>!n.has(a));if(s.length)throw new TypeError(`${o} has unknown field ${s[0]}`);for(let a of t)if(!Object.hasOwn(e,a))throw new TypeError(`${o}.${a} is required`);return e}function ye(e,t,r=200,{lower:o=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||Ot.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let n=e.trim();return o?n.toLowerCase():n}function ee(e,t,r=80){let o=ye(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(o))throw new TypeError(`${t} must be a lowercase identifier`);return o}function se(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function P(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))P(t);Object.freeze(e)}return e}var It=Object.freeze(["confirmations","finalizedTag","checkpoint"]),M=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Nt=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"]);function ve({family:e,chainId:t},r="chain"){let o=ee(e,`${r}.family`,40),n;if(o==="evm"){if(typeof t=="number")n=String(se(t,`${r}.chainId`,{positive:!0}));else if(n=ye(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(n))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else n=ee(t,`${r}.chainId`,80);return{family:o,chainId:n}}function Rt(e,t="chain"){return Q(e,{required:["family","chainId"]},t),P(ve(e,t))}function ze(e,t="finality rule"){me(e,t),he(e,t);let r=e.rule;if(!It.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let o=r==="confirmations"?"confirmations":r;Q(e,{required:["family","chainId","rule",o]},t);let n=ve(e,t);return r==="confirmations"?{...n,rule:r,confirmations:se(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...n,rule:r,[o]:ee(e[o],`${t}.${o}`,80)}}function be(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((o,n)=>ze(o,`finality policy rule ${n}`)),r=new Set;for(let o of t){let n=`${o.family}\0${o.chainId}`;if(r.has(n))throw new TypeError(`duplicate finality rule for ${o.family}:${o.chainId}`);r.add(n)}return P({policyVersion:1,rules:t})}function $t(e){if(Q(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return be(e.rules)}function De(e,t){let r=Rt(t,"finality query"),n=$t(e).rules.find(s=>s.family===r.family&&s.chainId===r.chainId);return n?P({status:"KNOWN",...r,rule:n}):P({status:M.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function _t(e,t){if(e==null)return null;me(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(Q(e,{required:["status"],optional:[r]},"finality evidence"),!Nt.includes(e.status))throw new TypeError("finality evidence.status is unknown");let o={status:e.status};return e[r]!=null&&(o[r]=t.rule==="confirmations"?se(e.confirmations,"finality evidence.confirmations",{positive:!0}):ee(e[r],`finality evidence.${r}`,80)),o}function Be(e,t){if(!e||e.status===M.UNKNOWN||e.rule==null)return P({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=ze(e.rule??e,"resolved finality rule"),o=_t(t,r);if(o==null)return P({status:M.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(o.status!=="LIVE")return P({status:M.UNKNOWN,final:!1,reason:`${o.status}_EVIDENCE`});let n=!1;return r.rule==="confirmations"?n=o.confirmations!=null&&o.confirmations>=r.confirmations:r.rule==="finalizedTag"?n=o.finalizedTag===r.finalizedTag:n=o.checkpoint===r.checkpoint,P({status:n?M.FINAL:M.INCLUDED,final:n,reason:n?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var Pt=1,Wr=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),E=(...e)=>e.find(t=>t!=null),te=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype;function Ct(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function Me(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function ge(e){return e==null?e:Array.isArray(e)?e.map(ge):te(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,ge(e[t])])):String(e)}function kt(e,t,r,o){let n=E(e.finalityEvidence,o?.finality,e.evidence),s=E(e.finalityPolicy,e.policy);try{return s==null&&te(e.finalityRule)&&(s=be([{family:t,chainId:r,...e.finalityRule}])),s==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:Be(De(s,{family:t,chainId:r}),n)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function R(e,t,r){r!=null&&(e[t]=r)}function jt(e){return e==null?null:String(e).trim().toLowerCase()}function we(...e){let t=e.map(jt).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function ie(e={}){if(!te(e))throw new TypeError("verified receipt: input object required");let t=Le(e),r=E(t.actionReceipt,t.receipt),o=te(r)?r:t,n=E(t.observation,t.chainObservation,t.observedReceipt),s=te(n),a=E(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash),d=E(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family),l=E(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),u=!we(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash)||!we(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family)||!we(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),i=kt(t,d,l,s&&!u?n:null),c=Ct(E(n?.receiptStatus,n?.executionStatus,n?.status)),f=E(t.reconciliationStatus,t.reconciliation?.status,n?.reconciliationStatus),p=E(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,n?.finalityState),y="UNKNOWN";Me(f)||!u&&(s&&c==="FAIL"||Me(p))?y="FAIL":!u&&a&&s&&c==="SUCCESS"&&["INCLUDED","FINAL"].includes(i.status)&&(y="SUCCESS");let h={verifiedReceiptVersion:Pt,status:y};u&&(h.reason="REFERENCE_MISMATCH"),R(h,"txHash",a),R(h,"chain",E(t.chain,o.chain,n?.chain)),R(h,"family",d),R(h,"chainId",l),R(h,"block",E(n?.block,t.block)),R(h,"blockState",E(n?.blockState,n?.inclusionState)),h.finalityState=i.status,R(h,"confirmations",E(n?.confirmations,n?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),R(h,"observedAt",E(n?.observedAt,t.observedAt)),R(h,"route",E(t.route,o.route)),R(h,"prepareHash",E(t.prepareHash,o.prepareHash)),R(h,"policyOutcome",E(t.policyOutcome,o.policyOutcome,o.policyChecks));let b=E(t.balanceChanges,n?.balanceChanges,n?.balances,o.balanceChanges,o.balances);return b!=null&&(h.balanceChanges=ge(b)),R(h,"createdAt",E(t.createdAt,o.createdAt)),R(h,"submittedAt",E(t.submittedAt,o.submittedAt)),R(h,"finalizedAt",E(t.finalizedAt,n?.finalizedAt)),R(h,"timestamps",E(t.timestamps,o.timestamps,n?.timestamps)),P(h)}import{createHash as vt}from"node:crypto";import{types as H}from"node:util";import V from"node:net";import Lt from"node:dns";var Ht=new Set(["localhost","metadata.google.internal","metadata.goog"]);function ae(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=i=>{if(!i)return[];let c=i.split(":"),f=c.at(-1);if(f?.includes(".")){let p=f.split(".").map(Number);if(p.length!==4||p.some(y=>!Number.isInteger(y)||y<0||y>255))return null;c.splice(c.length-1,1,(p[0]<<8|p[1]).toString(16),(p[2]<<8|p[3]).toString(16))}return c.some(p=>!/^[0-9a-f]{1,4}$/.test(p))?null:c.map(p=>Number.parseInt(p,16))},[o,n]=t.split("::"),s=r(o),a=r(n);if(!s||!a)return null;let d=t.includes("::"),l=8-s.length-a.length;if(!d&&l!==0||d&&l<1)return null;let u=[...s,...Array(Math.max(0,l)).fill(0),...a];return u.length!==8?null:Uint8Array.from(u.flatMap(i=>[i>>8,i&255]))}function Ee(e,t,r){let o=Math.floor(r/8),n=r%8;for(let a=0;a<o;a+=1)if(e[a]!==t[a])return!1;if(!n)return!0;let s=255<<8-n;return(e[o]&s)===(t[o]&s)}function Ae(e){if(V.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(V.isIPv6(e)){let t=ae(e);if(!t)return!1;let r=ae("::ffff:0:0");return Ee(t,r,96)?Ae([...t.slice(12)].join(".")):Ee(t,ae("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([n,s])=>Ee(t,ae(n),s)):!1}return!1}function Ut(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Ht.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let o=V.isIP(r);return o!==0&&!Ae(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:o!==0}}async function Se(e,{lookupFn:t=Lt.promises.lookup}={}){let r=Ut(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:V.isIPv6(r.host)?6:4}]};let o;try{o=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(o)||o.length===0||o.some(n=>!Ae(n.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:o}}async function xe({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,o;try{let c=await t();r=c.Agent,o=c.fetch}catch(c){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${c?.message||c}`);return null}if(typeof r!="function"||typeof o!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let n=c=>String(c).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),s=new Map,a=c=>(Array.isArray(c)?c:[c]).map(f=>typeof f=="string"?{address:f}:f).filter(f=>f&&f.address).map(f=>({address:f.address,family:f.family||(V.isIPv6(f.address)?6:4)})),d=(c,f,p)=>{s.set(n(c),a(typeof f=="string"?[{address:f,family:p}]:f))},l=c=>{let f=n(c);if(V.isIP(f))return[{address:f,family:V.isIPv6(f)?6:4}];let p=s.get(f);if(!p||!p.length)throw new Error(`refused: unpinned host ${c} during pinned fetch`);return p},u=new r({connect:{lookup(c,f,p){let y;try{y=l(c)}catch(h){return p(h)}return f?.all?p(null,y):p(null,y[0].address,y[0].family)}}}),i=Ft((c,f={})=>o(c,{...f,dispatcher:u}),d);return{dispatcher:u,fetch:i,pin:d,resolve:l,async close(){try{await u.destroy()}catch{}}}}var Te=Symbol.for("oracle.egressGuard.pinCapableFetch");function Ft(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Te]=Object.freeze({pin:t}),e}function Oe(e){return typeof e=="function"&&typeof e[Te]?.pin=="function"}function Ve(e,t,r){if(!Oe(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Te].pin(t,r)}var zt=new Set([408,425,429,500,502,503,504]),Ke=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Dt=2,Ge=4e3,Bt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Mt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Vt=AbortSignal.prototype.throwIfAborted,Kt=EventTarget.prototype.addEventListener,We=EventTarget.prototype.removeEventListener,Je=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,re=e=>e?Bt.call(e):!1,Gt=e=>e?Mt.call(e):void 0,Wt=new Set([301,302,303,307,308]),le=3,tn=64*1024,L=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function x(e){return v(`HTTP JSON body refused: ${e}`)}function Jt(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof H[t]=="function"&&H[t](e))}function qt(e){let t=[],r=0,o=0,n=0,s=0,a=new WeakSet,d=i=>{if(r+=Buffer.byteLength(i,"utf8"),r>L.bytes)throw x("serialized byte limit exceeded");t.push(i)},l=i=>{if(Buffer.byteLength(i,"utf8")>L.bytes)throw x("serialized byte limit exceeded");return JSON.stringify(i)},u=(i,c)=>{if(o+=1,o>L.nodes)throw x("node limit exceeded");if(c>L.depth)throw x("depth limit exceeded");if(i===null){d("null");return}if(typeof i=="string"){d(l(i));return}if(typeof i=="boolean"){d(i?"true":"false");return}if(typeof i=="number"){if(!Number.isFinite(i))throw x("non-finite number");d(Object.is(i,-0)?"0":String(i));return}if(typeof i!="object")throw x("unsupported non-JSON value");if(H.isProxy(i))throw x("proxy value");if(Jt(i))throw x("unsupported exotic object");if(a.has(i))throw x("cyclic value");a.add(i);try{if(Object.getOwnPropertySymbols(i).length>0)throw x("symbol-keyed fields are unsupported");if(Array.isArray(i)){let y=Object.getPrototypeOf(i),h=0;for(;y!==null;){if(H.isProxy(y))throw x("proxy array prototype");if(h+=1,h>L.depth)throw x("array prototype depth limit exceeded");y=Object.getPrototypeOf(y)}if(i.length>L.arrayLength)throw x("array length limit exceeded");for(let A=0;A<i.length;A+=1){let U=Object.getOwnPropertyDescriptor(i,String(A));if(!U||!Object.hasOwn(U,"value")||U.enumerable!==!0)throw x("array entries must be dense enumerable own data")}let b=0;for(let A in i){if(s+=1,s>L.fields)throw x("enumeration limit exceeded");if(Object.hasOwn(i,A)&&(b+=1,b>i.length))throw x("named array fields are unsupported")}if(b!==i.length)throw x("array entries must be dense enumerable own data");d("[");for(let A=0;A<i.length;A+=1)A&&d(","),u(Object.getOwnPropertyDescriptor(i,String(A)).value,c+1);d("]");return}let f=Object.getPrototypeOf(i);if(f!==Object.prototype&&f!==null)throw x("non-plain object");let p=[];for(let y in i){if(s+=1,s>L.fields)throw x("enumeration limit exceeded");if(!Object.hasOwn(i,y))continue;if(n+=1,n>L.fields)throw x("field limit exceeded");let h=Object.getOwnPropertyDescriptor(i,y);if(!h||!Object.hasOwn(h,"value")||h.enumerable!==!0)throw x("object fields must be enumerable own data");p.push([y,h.value])}d("{");for(let y=0;y<p.length;y+=1)y&&d(","),d(l(p[y][0])),d(":"),u(p[y][1],c+1);d("}")}finally{a.delete(i)}};return u(e,0),t.join("")}function Yt(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(H.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let o of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(o))throw new TypeError("HTTP header names must be valid tokens");let n=o.toLowerCase();if(r.has(n))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(n);let s=Object.getOwnPropertyDescriptor(e,o);if(!s||!Object.hasOwn(s,"value"))throw new TypeError("HTTP headers must contain own data properties");let a=s.value;if(a==null||["object","function","symbol"].includes(typeof a))throw new TypeError("HTTP header values must be scalar");t[o]=String(a)}return t}function Xt(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Zt(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Qt(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Ie=new Map,qe=new WeakMap,Ye=1;function ce(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=qe.get(e);return t||(t=Ye,Ye+=1,qe.set(e,t)),`reference:${t}`}var er=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),tr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Xe(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?er.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function Ze(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Xe);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Xe(r);let o=Object.hasOwn(r,"type")?r.type:null;return typeof o=="string"&&tr.has(o)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function rr(e,t,r,o={},n=null){let s=vt("sha256"),a=(l,u)=>{let i=String(u);s.update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l),s.update("=").update(String(Buffer.byteLength(i,"utf8"))).update(":").update(i).update(`
-`)};a("method",e),a("url",t),Object.keys(r||{}).map((l,u)=>({name:l.toLowerCase(),order:u,value:String(r[l])})).sort((l,u)=>l.name.localeCompare(u.name)||l.order-u.order).forEach((l,u)=>{a(`header-name-${u}`,l.name),a(`header-value-${u}`,l.value)}),a("body",n??"-");for(let l of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])a(`context-${l}`,o[l]??"-");return s.digest("hex")}function nr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Ge):Math.min(250*2**e,Ge)+Math.floor(Math.random()*100)}var or=e=>new Promise(t=>setTimeout(t,e));function v(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Ne(e,t,r){return v(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function K(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function sr(e){return e?e.byteLength??e.length??0:0}async function ir(e,t,{url:r,truncate:o=!1,onOversize:n}={}){if(t==null)return await e.text();let s=Number(e.headers?.get?.("content-length"));if(Number.isFinite(s)&&s>t&&(K(e),!o))throw Ne(r,`content-length ${s}`,t);let a=e.body?.getReader?.();if(!a){let c=await e.text(),f=Buffer.byteLength(c,"utf8");if(f>t){if(!o)throw Ne(r,`body ${f} bytes`,t);return Buffer.from(c,"utf8").subarray(0,t).toString("utf8")}return c}let d=[],l=0,u=!1;try{for(;;){let{value:c,done:f}=await a.read();if(f)break;if(c&&(d.push(Buffer.from(c)),l+=sr(c),l>t)){u=!0;break}}}finally{if(u)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(u&&(typeof n=="function"&&n(),!o))throw Ne(r,`streamed ${l} bytes`,t);let i=Buffer.concat(d);return(u?i.subarray(0,t):i).toString("utf8")}function ar(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function cr(e,{fetchImpl:t,method:r,headers:o,body:n,timeoutMs:s,lookupFn:a,realFetch:d,untrustedUrl:l=!1,maxResponseBytes:u=null,sameOriginRedirectsOnly:i=!1,importUndici:c,validateResponse:f,signal:p,redirectPolicy:y="follow",maxRedirects:h=le}){let b=null,A=t,U=a?{lookupFn:a}:{};if(l&&!d&&!Oe(A))throw v(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let $=new AbortController,k=setTimeout(()=>$.abort(),s),W=p?Je?Je([p,$.signal]):p:$.signal,J=async(w,{status:O=null}={})=>{let I=await Se(w,U);if(!I.ok)throw v(O==null?`HTTP refused ${w}: ${I.error}`:`HTTP redirect to ${w} ${I.error}`,O==null?{}:{status:O});let F=new URL(w).hostname;if(d){if(b&&(await b.close(),b=null),!b)try{b=await xe({requireUndici:!0,...c?{importUndici:c}:{}})}catch(m){throw v(O==null?`HTTP refused ${w}: ${m?.message||m}`:`HTTP redirect to ${w} refused: ${m?.message||m}`,O==null?{}:{status:O})}b.pin(F,I.addresses),A=b.fetch}else Ve(A,F,I.addresses);return I};try{let w=String(e),O=Object.assign(Object.create(null),o||{});l&&await J(w);for(let I=0;I<=h;I+=1){let F=Object.assign(Object.create(null),{method:r,headers:O,body:n,signal:W,redirect:"manual",dispatcher:void 0}),m=await A(w,F);if((y==="error"||h===0)&&m.status>=300&&m.status<400)throw K(m),v(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(Wt.has(m.status)){let _=i===!0&&r==="POST"&&[307,308].includes(m.status)&&Ze(r,n);if(r!=="GET"&&r!=="HEAD"&&!_){K(m);let T=new Error(`HTTP ${m.status} ${r} ${w} redirected non-idempotent request`);throw T.status=m.status,T}if(I===h)throw K(m),v(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let Pe=m.headers?.get?.("location"),C;try{C=Zt(Pe,w)}catch(T){throw K(m),T}let z=!Qt(C,w);if(K(m),z&&r==="POST"){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T}if(z&&i){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T.retryable=!1,T}if(z&&(O=Xt(O)),l)await J(C,{status:m.status});else if(z){let T=await Se(C,U);if(!T.ok){let S=new Error(`HTTP redirect from ${w} ${T.error}`);throw S.status=m.status,S.retryable=!1,S}d&&T.addresses?.length&&(b||(b=await xe(c?{importUndici:c}:{})),b&&(b.pin(new URL(C).hostname,T.addresses),A=b.fetch))}w=C;continue}if(typeof f=="function")try{await f(m,{url:w})}catch(_){throw K(m),v(_?.message||String(_))}let N=await ir(m,u,{url:w,onOversize:()=>$.abort()}),q=ar(N);if(!m.ok){let _=new Error(`HTTP ${m.status} ${r} ${w}`);throw _.status=m.status,_.retryAfter=m.headers?.get?.("retry-after")??null,_.body=q??N.slice(0,300),_}return q??N}throw new Error(`HTTP redirect loop for ${e}`)}catch(w){if($.signal.aborted&&!re(p)){let O=w&&(typeof w=="object"||typeof w=="function")&&!H.isProxy(w)?w:null,I=O?Object.getOwnPropertyDescriptor(O,"oversize"):null;if(!(I&&Object.hasOwn(I,"value")&&I.value===!0))try{if(!O)throw new TypeError("unsafe rejection");Object.defineProperties(O,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw w}finally{clearTimeout(k),b&&await b.close()}}async function Qe(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&H.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let S of Object.getOwnPropertyNames(t)){let g=Object.getOwnPropertyDescriptor(t,S);if(!(S==="toJSON"&&g&&Object.hasOwn(g,"value")&&g.value===void 0)){if(!r.has(S))throw new TypeError("HTTP options contain unknown fields");if(!g||!g.enumerable||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let o=S=>{if(t==null||!Object.hasOwn(t,S))return;let g=Object.getOwnPropertyDescriptor(t,S);if(!g||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain own data properties");return g.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let n=o("method");if(n!==void 0&&(typeof n!="string"||!/^[A-Za-z]+$/u.test(n)))throw new TypeError("HTTP method must be a string token");let s=o("timeoutMs");if(s!==void 0&&(!Number.isInteger(s)||s<1||s>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let a=o("retries");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>10))throw new TypeError("HTTP retries must be a bounded integer");let d=o("redirectPolicy");if(d!==void 0&&d!=="follow"&&d!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let l=o("maxRedirects");if(l!==void 0&&(!Number.isInteger(l)||l<0||l>le))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${le}`);if(d==="error"&&l!==void 0&&l!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let u=d??"follow",i=u==="error"?0:l??le;for(let S of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let g=o(S);if(g!==void 0&&typeof g!="boolean")throw new TypeError(`HTTP ${S} must be boolean`)}let c=o("maxResponseBytes");if(c!==void 0&&(!Number.isInteger(c)||c<1||c>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let f=o("signal");if(f!==void 0){if(H.isProxy(f)||!(f instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{re(f)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let S of["importUndici","lookupFn","validateResponse"]){let g=o(S);if(g!==void 0&&typeof g!="function")throw new TypeError(`HTTP ${S} must be a function`)}let p=o("fetchImpl"),y=p||globalThis.fetch;if(typeof y!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let h=s??12e3,b=(n||"GET").toUpperCase(),A=o("headers"),U=Yt(A),$=Object.assign(Object.create(null),U);Object.keys($).some(S=>S.toLowerCase()==="accept")||($.Accept="application/json");let k=o("body");k!=null&&typeof k!="string"&&(Object.keys($).find(g=>g.toLowerCase()==="content-type")||($["Content-Type"]="application/json"),k=qt(k));let W=a??Dt,J=o("lookupFn"),w=!p,O=o("untrustedUrl")===!0,I=o("sameOriginRedirectsOnly")===!0,F=o("importUndici"),m=o("validateResponse"),N=f,q=c??null,_=async()=>{let S;for(let g=0;g<=W;g++){N&&Vt.call(N);try{return await cr(e,{fetchImpl:y,method:b,headers:$,body:k,timeoutMs:h,lookupFn:J,realFetch:w,untrustedUrl:O,maxResponseBytes:q,sameOriginRedirectsOnly:I,importUndici:F,validateResponse:m,signal:N,redirectPolicy:u,maxRedirects:i})}catch(D){S=D;let G=fe=>{if(!D||typeof D!="object"&&typeof D!="function"||H.isProxy(D))return;let Y=Object.getOwnPropertyDescriptor(D,fe);return Y&&Object.hasOwn(Y,"value")?Y.value:void 0},ue=G("status"),ct=G("oracleTimeout")===!0||G("name")==="AbortError"||G("name")==="TimeoutError"||re(N),lt=new Set([408,425,429]),ut=G("retryable")===!1?!1:ue!=null?lt.has(ue)||zt.has(ue)&&Ke.has(b):!ct&&Ke.has(b);if(g===W||!ut)throw D;let Ce=nr(g,G("retryAfter"));N?await new Promise((fe,Y)=>{let ke,X=()=>{clearTimeout(ke),We.call(N,"abort",X),Y(Gt(N)||new DOMException("Aborted","AbortError"))};if(re(N)){X();return}ke=setTimeout(()=>{We.call(N,"abort",X),fe()},Ce),Kt.call(N,"abort",X,{once:!0}),re(N)&&X()}):await or(Ce)}}throw S};if(!(o("dedupe")!==!1&&!N&&Ze(b,k)))return _();let C=rr(b,e,$,{untrustedUrl:O,maxResponseBytes:q,sameOriginRedirectsOnly:I,redirectPolicy:u,maxRedirects:i,timeoutMs:h,retries:W,fetchImpl:ce(y),realFetch:w,lookupFn:ce(J),importUndici:ce(F),validateResponse:ce(m)},k),z=Ie.get(C);if(z)return z;let T=_().finally(()=>Ie.delete(C));return Ie.set(C,T),T}var et={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},lr=new Map(Object.values(et).map(e=>[e.chainId,e]));function tt(e){return lr.get(Number(e))||null}function rt(e,t=process.env){let r=tt(e);if(!r)return null;for(let o of r.rpcEnv){let n=(t[o]||"").trim();if(n)return n}return null}import{Interface as ur,getAddress as fr}from"ethers";var ln=new ur(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function Re(e,t){try{return fr(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function dr(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function $e(e){return e==null?null:Number.parseInt(String(e),16)}var pr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function hr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let o=rt(e,r);return o||pr[Number(e)]||null}var mr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function yr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!mr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var ne=new Map,nt=new Map;function br(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function wr(e){if(e?.error)throw br(e.error);return e?.result}function gr(e,t,r){return`${e}
+import{wordlists as mt}from"ethers";var yt=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),bt=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],wt=new Set([12,15,18,21,24]);function gt(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return wt.has(t.length)&&t.every(r=>mt.en.getWordIndex(r)>=0)}var Et=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,St=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,At=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function xt(e){let t=Me(e);return At.has(t)||St.test(t)}var Z=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function Me(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function Tt(e){let t=Me(e);return[...yt].some(r=>t.includes(r))}function Ot(e,t,r){if(typeof t=="string"){if(bt.some(o=>o.test(t))||gt(t))throw new Z(r);if(Et.test(t)&&!xt(e))throw new Z(r)}}function pe(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return Ot(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((n,s)=>pe(n,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let n of Object.keys(e).sort()){let s=`${t}.${n}`;if(Tt(n))throw new Z(s);e[n]!==void 0&&(o[n]=pe(e[n],s,n))}return o}function Ue(e){return pe(e)}var Lr=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Hr=Object.freeze(["read","simulate"]);var Mr=1440*60;var L=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},It=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Nt=Object.freeze(["privkey","wif","xprv","seed"]);function he(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return It.test(t)||Nt.includes(r)}var ve=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Fe=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Rt(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,r)=>Fe.includes(String(r).toLowerCase().replace(/[_-]/g,""))?`"${r}":"<hex64>"`:t)}function De(e){let t;try{t=JSON.stringify(e)}catch(n){throw new L("$",`unserializable-payload: ${String(n?.message||n)}`)}if(t===void 0)return"null";let r=Rt(t);for(let{rule:n,re:s}of ve)if(s.test(r))throw new L("$<serialized>",n);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(r))throw new L("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(n,s)=>{if(n&&he(n))throw new L(`$<serialized>.${n}`,"forbidden-key-name");return s}),t}function z(e,t="$",r=new Set,o=""){if(e==null)return e;if(typeof e=="string"){let n=Fe.includes(String(o).toLowerCase().replace(/[_-]/g,""));for(let{rule:s,re:a}of ve)if(!(n&&s.startsWith("raw-32-byte-hex"))&&a.test(e))throw new L(t,s);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[n,s]of e.entries()){if(typeof n=="string"&&he(n))throw new L(`${t}[${JSON.stringify(n)}]`,"forbidden-key-name");z(n,`${t}[key]`,r),z(s,`${t}[${String(n)}]`,r)}return e}if(e instanceof Set){let n=0;for(let s of e.values())z(s,`${t}[${n++}]`,r);return e}if(Array.isArray(e))return e.forEach((n,s)=>z(n,`${t}[${s}]`,r)),e;for(let[n,s]of Object.entries(e)){if(he(n))throw new L(`${t}.${n}`,"forbidden-key-name");z(s,`${t}.${n}`,r,n)}return e}var _t=/[\u0000-\u001f\u007f]/;function me(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function ye(e,t="control input"){try{z(e,t),De(e)}catch(r){throw new TypeError(`${t} contains secret or custody material: ${r.message}`)}return e}function Q(e,{required:t=[],optional:r=[]}={},o="object"){me(e,o);let n=new Set([...t,...r]),s=Object.keys(e).filter(a=>!n.has(a));if(s.length)throw new TypeError(`${o} has unknown field ${s[0]}`);for(let a of t)if(!Object.hasOwn(e,a))throw new TypeError(`${o}.${a} is required`);return e}function be(e,t,r=200,{lower:o=!1}={}){if(typeof e!="string"||!e.trim()||e.length>r||_t.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${r} characters`);let n=e.trim();return o?n.toLowerCase():n}function ee(e,t,r=80){let o=be(e,t,r,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(o))throw new TypeError(`${t} must be a lowercase identifier`);return o}function ie(e,t,{positive:r=!1}={}){if(!Number.isSafeInteger(e)||e<0||r&&e===0)throw new TypeError(`${t} must be a ${r?"positive":"non-negative"} safe integer`);return e}function P(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))P(t);Object.freeze(e)}return e}var $t=Object.freeze(["confirmations","finalizedTag","checkpoint"]),B=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),Pt=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"]);function ze({family:e,chainId:t},r="chain"){let o=ee(e,`${r}.family`,40),n;if(o==="evm"){if(typeof t=="number")n=String(ie(t,`${r}.chainId`,{positive:!0}));else if(n=be(t,`${r}.chainId`,40),!/^[1-9][0-9]*$/.test(n))throw new TypeError(`${r}.chainId must be a positive decimal EVM chain id`)}else n=ee(t,`${r}.chainId`,80);return{family:o,chainId:n}}function Ct(e,t="chain"){return Q(e,{required:["family","chainId"]},t),P(ze(e,t))}function Be(e,t="finality rule"){ye(e,t),me(e,t);let r=e.rule;if(!$t.includes(r))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let o=r==="confirmations"?"confirmations":r;Q(e,{required:["family","chainId","rule",o]},t);let n=ze(e,t);return r==="confirmations"?{...n,rule:r,confirmations:ie(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...n,rule:r,[o]:ee(e[o],`${t}.${o}`,80)}}function we(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((o,n)=>Be(o,`finality policy rule ${n}`)),r=new Set;for(let o of t){let n=`${o.family}\0${o.chainId}`;if(r.has(n))throw new TypeError(`duplicate finality rule for ${o.family}:${o.chainId}`);r.add(n)}return P({policyVersion:1,rules:t})}function kt(e){if(Q(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return we(e.rules)}function Ge(e,t){let r=Ct(t,"finality query"),n=kt(e).rules.find(s=>s.family===r.family&&s.chainId===r.chainId);return n?P({status:"KNOWN",...r,rule:n}):P({status:B.UNKNOWN,reason:"MISSING_FINALITY_RULE",...r,rule:null})}function jt(e,t){if(e==null)return null;ye(e,"finality evidence");let r=t.rule==="confirmations"?"confirmations":t.rule;if(Q(e,{required:["status"],optional:[r]},"finality evidence"),!Pt.includes(e.status))throw new TypeError("finality evidence.status is unknown");let o={status:e.status};return e[r]!=null&&(o[r]=t.rule==="confirmations"?ie(e.confirmations,"finality evidence.confirmations",{positive:!0}):ee(e[r],`finality evidence.${r}`,80)),o}function Ve(e,t){if(!e||e.status===B.UNKNOWN||e.rule==null)return P({status:B.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let r=Be(e.rule??e,"resolved finality rule"),o=jt(t,r);if(o==null)return P({status:B.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(o.status!=="LIVE")return P({status:B.UNKNOWN,final:!1,reason:`${o.status}_EVIDENCE`});let n=!1;return r.rule==="confirmations"?n=o.confirmations!=null&&o.confirmations>=r.confirmations:r.rule==="finalizedTag"?n=o.finalizedTag===r.finalizedTag:n=o.checkpoint===r.checkpoint,P({status:n?B.FINAL:B.INCLUDED,final:n,reason:n?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:r})}var Lt=1,rn=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),A=(...e)=>e.find(t=>t!=null),te=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype;function Ht(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function Ke(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function Ee(e){return e==null?e:Array.isArray(e)?e.map(Ee):te(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,Ee(e[t])])):String(e)}function Mt(e,t,r,o){let n=A(e.finalityEvidence,o?.finality,e.evidence),s=A(e.finalityPolicy,e.policy);try{return s==null&&te(e.finalityRule)&&(s=we([{family:t,chainId:r,...e.finalityRule}])),s==null||t==null||r==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:Ve(Ge(s,{family:t,chainId:r}),n)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function R(e,t,r){r!=null&&(e[t]=r)}function Ut(e){return e==null?null:String(e).trim().toLowerCase()}function ge(...e){let t=e.map(Ut).filter(Boolean);return t.length<=1||t.every(r=>r===t[0])}function ae(e={}){if(!te(e))throw new TypeError("verified receipt: input object required");let t=Ue(e),r=A(t.actionReceipt,t.receipt),o=te(r)?r:t,n=A(t.observation,t.chainObservation,t.observedReceipt),s=te(n),a=A(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash),h=A(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family),c=A(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),l=!ge(t.txHash,o.txHash,o.transactionHash,n?.txHash,n?.transactionHash)||!ge(t.family,o.family,o.chain?.family,n?.family,n?.chain?.family)||!ge(t.chainId,o.chainId,o.chain?.chainId,n?.chainId,n?.chain?.chainId),i=Mt(t,h,c,s&&!l?n:null),p=Ht(A(n?.receiptStatus,n?.executionStatus,n?.status)),b=A(t.reconciliationStatus,t.reconciliation?.status,n?.reconciliationStatus),f=A(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,n?.finalityState),u="UNKNOWN";Ke(b)||!l&&(s&&p==="FAIL"||Ke(f))?u="FAIL":!l&&a&&s&&p==="SUCCESS"&&["INCLUDED","FINAL"].includes(i.status)&&(u="SUCCESS");let d={verifiedReceiptVersion:Lt,status:u};l&&(d.reason="REFERENCE_MISMATCH"),R(d,"txHash",a),R(d,"chain",A(t.chain,o.chain,n?.chain)),R(d,"family",h),R(d,"chainId",c),R(d,"block",A(n?.block,t.block)),R(d,"blockState",A(n?.blockState,n?.inclusionState)),d.finalityState=i.status,R(d,"confirmations",A(n?.confirmations,n?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),R(d,"observedAt",A(n?.observedAt,t.observedAt)),R(d,"route",A(t.route,o.route)),R(d,"prepareHash",A(t.prepareHash,o.prepareHash)),R(d,"policyOutcome",A(t.policyOutcome,o.policyOutcome,o.policyChecks));let y=A(t.balanceChanges,n?.balanceChanges,n?.balances,o.balanceChanges,o.balances);return y!=null&&(d.balanceChanges=Ee(y)),R(d,"createdAt",A(t.createdAt,o.createdAt)),R(d,"submittedAt",A(t.submittedAt,o.submittedAt)),R(d,"finalizedAt",A(t.finalizedAt,n?.finalizedAt)),R(d,"timestamps",A(t.timestamps,o.timestamps,n?.timestamps)),P(d)}import{createHash as Jt}from"node:crypto";import{types as M}from"node:util";import{AsyncLocalStorage as vt}from"node:async_hooks";var Ft=new vt,Dt=["http","retry","shared"],zt=512;function ce(e){let t=Ft.getStore();if(!t||t.closed||!Dt.includes(e))return null;if(t.spans.length>=zt)return t.droppedSpans++,null;let r={stage:e,startMs:t.now()-t.start,durationMs:null,outcome:"pending",status:null};return t.spans.push(r),(o,n=null)=>{t.closed||r.durationMs!==null||(r.durationMs=Math.max(0,t.now()-t.start-r.startMs),r.outcome=o==="succeeded"?"succeeded":"failed",r.status=Number.isInteger(n)&&n>=100&&n<=599?n:null)}}import G from"node:net";import Bt from"node:dns";var Gt=new Set(["localhost","metadata.google.internal","metadata.goog"]);function ue(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=i=>{if(!i)return[];let p=i.split(":"),b=p.at(-1);if(b?.includes(".")){let f=b.split(".").map(Number);if(f.length!==4||f.some(u=>!Number.isInteger(u)||u<0||u>255))return null;p.splice(p.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return p.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:p.map(f=>Number.parseInt(f,16))},[o,n]=t.split("::"),s=r(o),a=r(n);if(!s||!a)return null;let h=t.includes("::"),c=8-s.length-a.length;if(!h&&c!==0||h&&c<1)return null;let l=[...s,...Array(Math.max(0,c)).fill(0),...a];return l.length!==8?null:Uint8Array.from(l.flatMap(i=>[i>>8,i&255]))}function Se(e,t,r){let o=Math.floor(r/8),n=r%8;for(let a=0;a<o;a+=1)if(e[a]!==t[a])return!1;if(!n)return!0;let s=255<<8-n;return(e[o]&s)===(t[o]&s)}function Ae(e){if(G.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(G.isIPv6(e)){let t=ue(e);if(!t)return!1;let r=ue("::ffff:0:0");return Se(t,r,96)?Ae([...t.slice(12)].join(".")):Se(t,ue("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([n,s])=>Se(t,ue(n),s)):!1}return!1}function Vt(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Gt.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let o=G.isIP(r);return o!==0&&!Ae(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:o!==0}}async function xe(e,{lookupFn:t=Bt.promises.lookup}={}){let r=Vt(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:G.isIPv6(r.host)?6:4}]};let o;if(process.env.ORACLE_HOSTED_EGRESS_PROXY)return{ok:!0,url:r.url,addresses:[]};try{o=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(o)||o.length===0||o.some(n=>!Ae(n.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:o}}function Kt(e=process.env){let t=e.ORACLE_HOSTED_EGRESS_PROXY||"";if(!t)return null;let r;try{r=new URL(t)}catch{throw new Error("egress-guard: ORACLE_HOSTED_EGRESS_PROXY is not a URL")}if(r.protocol!=="http:"||!["127.0.0.1","::1","localhost","[::1]"].includes(r.hostname)||!r.port||r.username||r.password)throw new Error("egress-guard: egress proxy must be an exact loopback http origin");let o=e.ORACLE_HOSTED_EGRESS_TOKEN||"";if(!/^[A-Za-z0-9_-]{43}$/.test(o))throw new Error("egress-guard: egress proxy token is missing");return{uri:r.origin,token:o}}async function Te({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,o,n;try{n=await t(),r=n.Agent,o=n.fetch}catch(f){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${f?.message||f}`);return null}if(typeof r!="function"||typeof o!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let s=f=>String(f).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),a=new Map,h=f=>(Array.isArray(f)?f:[f]).map(u=>typeof u=="string"?{address:u}:u).filter(u=>u&&u.address).map(u=>({address:u.address,family:u.family||(G.isIPv6(u.address)?6:4)})),c=(f,u,d)=>{a.set(s(f),h(typeof u=="string"?[{address:u,family:d}]:u))},l=f=>{let u=s(f);if(G.isIP(u))return[{address:u,family:G.isIPv6(u)?6:4}];let d=a.get(u);if(!d||!d.length)throw new Error(`refused: unpinned host ${f} during pinned fetch`);return d},i=Kt(),p=i&&typeof n.ProxyAgent=="function"?new n.ProxyAgent({uri:i.uri,token:`Bearer ${i.token}`,connectTimeout:1e4}):new r({connect:{lookup(f,u,d){let y;try{y=l(f)}catch(S){return d(S)}return u?.all?d(null,y):d(null,y[0].address,y[0].family)}}}),b=Wt((f,u={})=>o(f,{...u,dispatcher:p}),c);return{dispatcher:p,fetch:b,pin:c,resolve:l,async close(){try{await p.destroy()}catch{}}}}var Oe=Symbol.for("oracle.egressGuard.pinCapableFetch");function Wt(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Oe]=Object.freeze({pin:t}),e}function Ie(e){return typeof e=="function"&&typeof e[Oe]?.pin=="function"}function We(e,t,r){if(!Ie(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Oe].pin(t,r)}var Yt=new Set([408,425,429,500,502,503,504]),Je=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),qt=2,Ye=4e3,Xt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Zt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Qt=AbortSignal.prototype.throwIfAborted,er=EventTarget.prototype.addEventListener,qe=EventTarget.prototype.removeEventListener,Xe=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,re=e=>e?Xt.call(e):!1,tr=e=>e?Zt.call(e):void 0,rr=new Set([301,302,303,307,308]),fe=3,hn=64*1024,H=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function x(e){return F(`HTTP JSON body refused: ${e}`)}function nr(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof M[t]=="function"&&M[t](e))}function or(e){let t=[],r=0,o=0,n=0,s=0,a=new WeakSet,h=i=>{if(r+=Buffer.byteLength(i,"utf8"),r>H.bytes)throw x("serialized byte limit exceeded");t.push(i)},c=i=>{if(Buffer.byteLength(i,"utf8")>H.bytes)throw x("serialized byte limit exceeded");return JSON.stringify(i)},l=(i,p)=>{if(o+=1,o>H.nodes)throw x("node limit exceeded");if(p>H.depth)throw x("depth limit exceeded");if(i===null){h("null");return}if(typeof i=="string"){h(c(i));return}if(typeof i=="boolean"){h(i?"true":"false");return}if(typeof i=="number"){if(!Number.isFinite(i))throw x("non-finite number");h(Object.is(i,-0)?"0":String(i));return}if(typeof i!="object")throw x("unsupported non-JSON value");if(M.isProxy(i))throw x("proxy value");if(nr(i))throw x("unsupported exotic object");if(a.has(i))throw x("cyclic value");a.add(i);try{if(Object.getOwnPropertySymbols(i).length>0)throw x("symbol-keyed fields are unsupported");if(Array.isArray(i)){let u=Object.getPrototypeOf(i),d=0;for(;u!==null;){if(M.isProxy(u))throw x("proxy array prototype");if(d+=1,d>H.depth)throw x("array prototype depth limit exceeded");u=Object.getPrototypeOf(u)}if(i.length>H.arrayLength)throw x("array length limit exceeded");for(let S=0;S<i.length;S+=1){let U=Object.getOwnPropertyDescriptor(i,String(S));if(!U||!Object.hasOwn(U,"value")||U.enumerable!==!0)throw x("array entries must be dense enumerable own data")}let y=0;for(let S in i){if(s+=1,s>H.fields)throw x("enumeration limit exceeded");if(Object.hasOwn(i,S)&&(y+=1,y>i.length))throw x("named array fields are unsupported")}if(y!==i.length)throw x("array entries must be dense enumerable own data");h("[");for(let S=0;S<i.length;S+=1)S&&h(","),l(Object.getOwnPropertyDescriptor(i,String(S)).value,p+1);h("]");return}let b=Object.getPrototypeOf(i);if(b!==Object.prototype&&b!==null)throw x("non-plain object");let f=[];for(let u in i){if(s+=1,s>H.fields)throw x("enumeration limit exceeded");if(!Object.hasOwn(i,u))continue;if(n+=1,n>H.fields)throw x("field limit exceeded");let d=Object.getOwnPropertyDescriptor(i,u);if(!d||!Object.hasOwn(d,"value")||d.enumerable!==!0)throw x("object fields must be enumerable own data");f.push([u,d.value])}h("{");for(let u=0;u<f.length;u+=1)u&&h(","),h(c(f[u][0])),h(":"),l(f[u][1],p+1);h("}")}finally{a.delete(i)}};return l(e,0),t.join("")}function sr(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(M.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let o of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(o))throw new TypeError("HTTP header names must be valid tokens");let n=o.toLowerCase();if(r.has(n))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(n);let s=Object.getOwnPropertyDescriptor(e,o);if(!s||!Object.hasOwn(s,"value"))throw new TypeError("HTTP headers must contain own data properties");let a=s.value;if(a==null||["object","function","symbol"].includes(typeof a))throw new TypeError("HTTP header values must be scalar");t[o]=String(a)}return t}function ir(){return Object.assign(Object.create(null),{Accept:"application/json"})}function ar(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function cr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Ne=new Map,Ze=new WeakMap,Qe=1;function le(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=Ze.get(e);return t||(t=Qe,Qe+=1,Ze.set(e,t)),`reference:${t}`}var ur=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),lr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function et(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?ur.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function tt(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(et);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return et(r);let o=Object.hasOwn(r,"type")?r.type:null;return typeof o=="string"&&lr.has(o)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function fr(e,t,r,o={},n=null){let s=Jt("sha256"),a=(c,l)=>{let i=String(l);s.update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c),s.update("=").update(String(Buffer.byteLength(i,"utf8"))).update(":").update(i).update(`
+`)};a("method",e),a("url",t),Object.keys(r||{}).map((c,l)=>({name:c.toLowerCase(),order:l,value:String(r[c])})).sort((c,l)=>c.name.localeCompare(l.name)||c.order-l.order).forEach((c,l)=>{a(`header-name-${l}`,c.name),a(`header-value-${l}`,c.value)}),a("body",n??"-");for(let c of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])a(`context-${c}`,o[c]??"-");return s.digest("hex")}function dr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Ye):Math.min(250*2**e,Ye)+Math.floor(Math.random()*100)}var pr=e=>new Promise(t=>setTimeout(t,e));function F(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Re(e,t,r){return F(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function V(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function hr(e){return e?e.byteLength??e.length??0:0}async function mr(e,t,{url:r,truncate:o=!1,onOversize:n}={}){if(t==null)return await e.text();let s=Number(e.headers?.get?.("content-length"));if(Number.isFinite(s)&&s>t&&(V(e),!o))throw Re(r,`content-length ${s}`,t);let a=e.body?.getReader?.();if(!a){let p=await e.text(),b=Buffer.byteLength(p,"utf8");if(b>t){if(!o)throw Re(r,`body ${b} bytes`,t);return Buffer.from(p,"utf8").subarray(0,t).toString("utf8")}return p}let h=[],c=0,l=!1;try{for(;;){let{value:p,done:b}=await a.read();if(b)break;if(p&&(h.push(Buffer.from(p)),c+=hr(p),c>t)){l=!0;break}}}finally{if(l)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(l&&(typeof n=="function"&&n(),!o))throw Re(r,`streamed ${c} bytes`,t);let i=Buffer.concat(h);return(l?i.subarray(0,t):i).toString("utf8")}function yr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function br(e,{fetchImpl:t,method:r,headers:o,body:n,timeoutMs:s,lookupFn:a,realFetch:h,untrustedUrl:c=!1,maxResponseBytes:l=null,sameOriginRedirectsOnly:i=!1,importUndici:p,validateResponse:b,signal:f,redirectPolicy:u="follow",maxRedirects:d=fe}){let y=null,S=t,U=a?{lookupFn:a}:{};if(c&&!h&&!Ie(S))throw F(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let _=new AbortController,k=setTimeout(()=>_.abort(),s),W=f?Xe?Xe([f,_.signal]):f:_.signal,J=async(w,{status:O=null}={})=>{let I=await xe(w,U);if(!I.ok)throw F(O==null?`HTTP refused ${w}: ${I.error}`:`HTTP redirect to ${w} ${I.error}`,O==null?{}:{status:O});let v=new URL(w).hostname;if(h){if(y&&(await y.close(),y=null),!y)try{y=await Te({requireUndici:!0,...p?{importUndici:p}:{}})}catch(m){throw F(O==null?`HTTP refused ${w}: ${m?.message||m}`:`HTTP redirect to ${w} refused: ${m?.message||m}`,O==null?{}:{status:O})}y.pin(v,I.addresses),S=y.fetch}else We(S,v,I.addresses);return I};try{let w=String(e),O=Object.assign(Object.create(null),o||{});c&&await J(w);for(let I=0;I<=d;I+=1){let v=Object.assign(Object.create(null),{method:r,headers:O,body:n,signal:W,redirect:"manual",dispatcher:void 0}),m=await S(w,v);if((u==="error"||d===0)&&m.status>=300&&m.status<400)throw V(m),F(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(rr.has(m.status)){let $=i===!0&&r==="POST"&&[307,308].includes(m.status)&&tt(r,n);if(r!=="GET"&&r!=="HEAD"&&!$){V(m);let T=new Error(`HTTP ${m.status} ${r} ${w} redirected non-idempotent request`);throw T.status=m.status,T}if(I===d)throw V(m),F(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let Ce=m.headers?.get?.("location"),C;try{C=ar(Ce,w)}catch(T){throw V(m),T}let D=!cr(C,w);if(V(m),D&&r==="POST"){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T}if(D&&i){let T=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw T.status=m.status,T.retryable=!1,T}if(D&&(O=ir(O)),c)await J(C,{status:m.status});else if(D){let T=await xe(C,U);if(!T.ok){let E=new Error(`HTTP redirect from ${w} ${T.error}`);throw E.status=m.status,E.retryable=!1,E}h&&T.addresses?.length&&(y||(y=await Te(p?{importUndici:p}:{})),y&&(y.pin(new URL(C).hostname,T.addresses),S=y.fetch))}w=C;continue}if(typeof b=="function")try{await b(m,{url:w})}catch($){throw V(m),F($?.message||String($))}let N=await mr(m,l,{url:w,onOversize:()=>_.abort()}),Y=yr(N);if(!m.ok){let $=new Error(`HTTP ${m.status} ${r} ${w}`);throw $.status=m.status,$.retryAfter=m.headers?.get?.("retry-after")??null,$.body=Y??N.slice(0,300),$}return Y??N}throw new Error(`HTTP redirect loop for ${e}`)}catch(w){if(_.signal.aborted&&!re(f)){let O=w&&(typeof w=="object"||typeof w=="function")&&!M.isProxy(w)?w:null,I=O?Object.getOwnPropertyDescriptor(O,"oversize"):null;if(!(I&&Object.hasOwn(I,"value")&&I.value===!0))try{if(!O)throw new TypeError("unsafe rejection");Object.defineProperties(O,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw w}finally{clearTimeout(k),y&&await y.close()}}async function rt(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&M.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let E of Object.getOwnPropertyNames(t)){let g=Object.getOwnPropertyDescriptor(t,E);if(!(E==="toJSON"&&g&&Object.hasOwn(g,"value")&&g.value===void 0)){if(!r.has(E))throw new TypeError("HTTP options contain unknown fields");if(!g||!g.enumerable||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let o=E=>{if(t==null||!Object.hasOwn(t,E))return;let g=Object.getOwnPropertyDescriptor(t,E);if(!g||!Object.hasOwn(g,"value"))throw new TypeError("HTTP options must contain own data properties");return g.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let n=o("method");if(n!==void 0&&(typeof n!="string"||!/^[A-Za-z]+$/u.test(n)))throw new TypeError("HTTP method must be a string token");let s=o("timeoutMs");if(s!==void 0&&(!Number.isInteger(s)||s<1||s>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let a=o("retries");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>10))throw new TypeError("HTTP retries must be a bounded integer");let h=o("redirectPolicy");if(h!==void 0&&h!=="follow"&&h!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let c=o("maxRedirects");if(c!==void 0&&(!Number.isInteger(c)||c<0||c>fe))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${fe}`);if(h==="error"&&c!==void 0&&c!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let l=h??"follow",i=l==="error"?0:c??fe;for(let E of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let g=o(E);if(g!==void 0&&typeof g!="boolean")throw new TypeError(`HTTP ${E} must be boolean`)}let p=o("maxResponseBytes");if(p!==void 0&&(!Number.isInteger(p)||p<1||p>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let b=o("signal");if(b!==void 0){if(M.isProxy(b)||!(b instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{re(b)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let E of["importUndici","lookupFn","validateResponse"]){let g=o(E);if(g!==void 0&&typeof g!="function")throw new TypeError(`HTTP ${E} must be a function`)}let f=o("fetchImpl"),u=f||globalThis.fetch;if(typeof u!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let d=s??12e3,y=(n||"GET").toUpperCase(),S=o("headers"),U=sr(S),_=Object.assign(Object.create(null),U);Object.keys(_).some(E=>E.toLowerCase()==="accept")||(_.Accept="application/json");let k=o("body");k!=null&&typeof k!="string"&&(Object.keys(_).find(g=>g.toLowerCase()==="content-type")||(_["Content-Type"]="application/json"),k=or(k));let W=a??qt,J=o("lookupFn"),w=!f,O=o("untrustedUrl")===!0,I=o("sameOriginRedirectsOnly")===!0,v=o("importUndici"),m=o("validateResponse"),N=b,Y=p??null,$=async()=>{let E;for(let g=0;g<=W;g++){N&&Qt.call(N);let ke=ce("http");try{let j=await br(e,{fetchImpl:u,method:y,headers:_,body:k,timeoutMs:d,lookupFn:J,realFetch:w,untrustedUrl:O,maxResponseBytes:Y,sameOriginRedirectsOnly:I,importUndici:v,validateResponse:m,signal:N,redirectPolicy:l,maxRedirects:i});return ke?.("succeeded"),j}catch(j){E=j;let K=de=>{if(!j||typeof j!="object"&&typeof j!="function"||M.isProxy(j))return;let q=Object.getOwnPropertyDescriptor(j,de);return q&&Object.hasOwn(q,"value")?q.value:void 0},se=K("status");ke?.("failed",se);let ft=K("oracleTimeout")===!0||K("name")==="AbortError"||K("name")==="TimeoutError"||re(N),dt=new Set([408,425,429]),pt=K("retryable")===!1?!1:se!=null?dt.has(se)||Yt.has(se)&&Je.has(y):!ft&&Je.has(y);if(g===W||!pt)throw j;let je=dr(g,K("retryAfter")),ht=ce("retry"),Le=!1;try{N?await new Promise((de,q)=>{let He,X=()=>{clearTimeout(He),qe.call(N,"abort",X),q(tr(N)||new DOMException("Aborted","AbortError"))};if(re(N)){X();return}He=setTimeout(()=>{qe.call(N,"abort",X),de()},je),er.call(N,"abort",X,{once:!0}),re(N)&&X()}):await pr(je),Le=!0}finally{ht?.(Le?"succeeded":"failed")}}}throw E};if(!(o("dedupe")!==!1&&!N&&tt(y,k)))return $();let C=fr(y,e,_,{untrustedUrl:O,maxResponseBytes:Y,sameOriginRedirectsOnly:I,redirectPolicy:l,maxRedirects:i,timeoutMs:d,retries:W,fetchImpl:le(u),realFetch:w,lookupFn:le(J),importUndici:le(v),validateResponse:le(m)},k),D=Ne.get(C);if(D){let E=ce("shared");try{let g=await D;return E?.("succeeded"),g}catch(g){throw E?.("failed"),g}}let T=$().finally(()=>Ne.delete(C));return Ne.set(C,T),T}var nt={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},wr=new Map(Object.values(nt).map(e=>[e.chainId,e]));function ot(e){return wr.get(Number(e))||null}function st(e,t=process.env){let r=ot(e);if(!r)return null;for(let o of r.rpcEnv){let n=(t[o]||"").trim();if(n)return n}return null}import{Interface as gr,getAddress as Er}from"ethers";var Sn=new gr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function _e(e,t){try{return Er(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Sr(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function $e(e){return e==null?null:Number.parseInt(String(e),16)}var Ar={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function xr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let o=st(e,r);return o||Ar[Number(e)]||null}var Tr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Or(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Tr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var ne=new Map,it=new Map;function Ir(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Nr(e){if(e?.error)throw Ir(e.error);return e?.result}function Rr(e,t,r){return`${e}
 ${t}
-${JSON.stringify(r??[])}`}async function Er(e,t,r){return Qe(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function _e(e,t,r=[],o={}){let n=String(t||""),s=yr(n),a=hr(e,o);if(!a)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(s==="eth_chainid"&&o.cacheChainId!==!1){let i=nt.get(a);if(i!=null)return i}let l=o.dedupe!==!1&&!o.signal?gr(a,n,r):null;if(l&&ne.has(l))return ne.get(l);let u=(async()=>{let i=await Er(a,{jsonrpc:"2.0",id:1,method:t,params:r},o),c=wr(i);return s==="eth_chainid"&&typeof c=="string"&&nt.set(a,c),c})();return l&&(ne.set(l,u),u.finally(()=>{ne.get(l)===u&&ne.delete(l)}).catch(()=>{})),u}async function ot(e={},t={}){let r=Number(e.chainId??t.chainId??1),o=dr(e.txHash||e.hash||e.transactionHash),n=await _e(r,"eth_getTransactionReceipt",[o],t);if(!n)return{ok:!1,chainId:r,txHash:o,status:"pending",receipt:null,reason:"receipt pending"};let s=$e(n.status),a=s===1,d=s===1?"success":s===0?"reverted":"unknown",l=a?null:d==="reverted"?"transaction reverted":"unknown receipt status",u=e.expectedTo?Re(e.expectedTo,"expectedTo"):null,i=n.to?Re(n.to,"receipt.to"):null;return u&&i!==u&&(a=!1,l=`to mismatch: expected ${u}, got ${i||"null"}`),{ok:a,chainId:r,txHash:o,status:d,reason:l,statusCode:s,to:i,from:n.from?Re(n.from,"receipt.from"):null,blockNumber:$e(n.blockNumber),transactionIndex:$e(n.transactionIndex),logs:Array.isArray(n.logs)?n.logs:[],receipt:n}}var Ar=/^0x[0-9a-f]{64}$/;function Sr(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function xr({txHash:e,chainId:t,rpcUrl:r},o={}){let n=String(e||"").trim().toLowerCase();if(!Ar.test(n))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let s=Number(t);if(!Number.isSafeInteger(s)||s<=0)throw new TypeError("observe receipt: chainId required");let a=o.transactionReceipt||ot,d=o.rpcCall||_e,l={...o.rpcOptions||{},...r?{rpcUrl:r}:{}},u;try{u=await a({txHash:n,chainId:s},l)}catch(p){return{observation:null,reason:`RPC_UNAVAILABLE: ${p.message}`}}if(!u||u.receipt==null)return{observation:null,reason:u?.reason||"receipt pending"};let i=null,c=u.blockNumber;if(Number.isSafeInteger(c))try{let p=Sr(await d(s,"eth_blockNumber",[],l));p!=null&&p>=c&&(i=p-c+1)}catch{}let f={txHash:n,family:"evm",chainId:String(s),receiptStatus:u.status==="success"?"SUCCESS":u.status==="reverted"?"FAIL":"UNKNOWN",block:c==null?void 0:String(c),observedAt:new Date().toISOString(),finality:{status:"LIVE",...i==null?{}:{confirmations:i}}};return i!=null&&(f.confirmations=i),{observation:f,reason:null}}async function st({txHash:e,chainId:t,confirmations:r=1,rpcUrl:o},n={}){let{observation:s,reason:a}=await xr({txHash:e,chainId:t,rpcUrl:o},n),d=ie({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...s?{observation:s}:{}});return{receipt:d,observed:!!s,final:d.finalityState==="FINAL",requiredConfirmations:r,reason:a}}var it={SUCCESS:0,FAIL:2,UNKNOWN:3};function oe(e,t){let r=e.find(n=>n.startsWith(`--${t}=`));if(r)return r.split("=").slice(1).join("=");let o=e.indexOf(`--${t}`);return o>=0?e[o+1]:void 0}function at(e,{observed:t,reason:r,final:o,requiredConfirmations:n}){let s=[`${e.status}  ${e.txHash||"no hash"}`];return e.reason&&s.push(`  reason        ${e.reason}`),s.push(`  finality      ${e.finalityState}${o?"":` (below pinned depth ${n})`}`),e.confirmations!=null&&s.push(`  confirmations ${e.confirmations}`),e.block!=null&&s.push(`  block         ${e.block}`),e.chainId!=null&&s.push(`  chain         ${e.family||"evm"}:${e.chainId}`),!t&&r&&s.push(`  not observed  ${r}`),e.status==="UNKNOWN"&&s.push("  UNKNOWN is not success. No observed chain state means the action is unproven."),`${s.join(`
+${JSON.stringify(r??[])}`}async function _r(e,t,r){return rt(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function Pe(e,t,r=[],o={}){let n=String(t||""),s=Or(n),a=xr(e,o);if(!a)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(s==="eth_chainid"&&o.cacheChainId!==!1){let i=it.get(a);if(i!=null)return i}let c=o.dedupe!==!1&&!o.signal?Rr(a,n,r):null;if(c&&ne.has(c))return ne.get(c);let l=(async()=>{let i=await _r(a,{jsonrpc:"2.0",id:1,method:t,params:r},o),p=Nr(i);return s==="eth_chainid"&&typeof p=="string"&&it.set(a,p),p})();return c&&(ne.set(c,l),l.finally(()=>{ne.get(c)===l&&ne.delete(c)}).catch(()=>{})),l}async function at(e={},t={}){let r=Number(e.chainId??t.chainId??1),o=Sr(e.txHash||e.hash||e.transactionHash),n=await Pe(r,"eth_getTransactionReceipt",[o],t);if(!n)return{ok:!1,chainId:r,txHash:o,status:"pending",receipt:null,reason:"receipt pending"};let s=$e(n.status),a=s===1,h=s===1?"success":s===0?"reverted":"unknown",c=a?null:h==="reverted"?"transaction reverted":"unknown receipt status",l=e.expectedTo?_e(e.expectedTo,"expectedTo"):null,i=n.to?_e(n.to,"receipt.to"):null;return l&&i!==l&&(a=!1,c=`to mismatch: expected ${l}, got ${i||"null"}`),{ok:a,chainId:r,txHash:o,status:h,reason:c,statusCode:s,to:i,from:n.from?_e(n.from,"receipt.from"):null,blockNumber:$e(n.blockNumber),transactionIndex:$e(n.transactionIndex),logs:Array.isArray(n.logs)?n.logs:[],receipt:n}}var $r=/^0x[0-9a-f]{64}$/;function Pr(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function Cr({txHash:e,chainId:t,rpcUrl:r},o={}){let n=String(e||"").trim().toLowerCase();if(!$r.test(n))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let s=Number(t);if(!Number.isSafeInteger(s)||s<=0)throw new TypeError("observe receipt: chainId required");let a=o.transactionReceipt||at,h=o.rpcCall||Pe,c={...o.rpcOptions||{},...r?{rpcUrl:r}:{}},l;try{l=await a({txHash:n,chainId:s},c)}catch(f){return{observation:null,reason:`RPC_UNAVAILABLE: ${f.message}`}}if(!l||l.receipt==null)return{observation:null,reason:l?.reason||"receipt pending"};let i=null,p=l.blockNumber;if(Number.isSafeInteger(p))try{let f=Pr(await h(s,"eth_blockNumber",[],c));f!=null&&f>=p&&(i=f-p+1)}catch{}let b={txHash:n,family:"evm",chainId:String(s),receiptStatus:l.status==="success"?"SUCCESS":l.status==="reverted"?"FAIL":"UNKNOWN",block:p==null?void 0:String(p),observedAt:new Date().toISOString(),finality:{status:"LIVE",...i==null?{}:{confirmations:i}}};return i!=null&&(b.confirmations=i),{observation:b,reason:null}}async function ct({txHash:e,chainId:t,confirmations:r=1,rpcUrl:o},n={}){let{observation:s,reason:a}=await Cr({txHash:e,chainId:t,rpcUrl:o},n),h=ae({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:r},...s?{observation:s}:{}});return{receipt:h,observed:!!s,final:h.finalityState==="FINAL",requiredConfirmations:r,reason:a}}var ut={SUCCESS:0,FAIL:2,UNKNOWN:3};function oe(e,t){let r=e.find(n=>n.startsWith(`--${t}=`));if(r)return r.split("=").slice(1).join("=");let o=e.indexOf(`--${t}`);return o>=0?e[o+1]:void 0}function lt(e,{observed:t,reason:r,final:o,requiredConfirmations:n}){let s=[`${e.status}  ${e.txHash||"no hash"}`];return e.reason&&s.push(`  reason        ${e.reason}`),s.push(`  finality      ${e.finalityState}${o?"":` (below pinned depth ${n})`}`),e.confirmations!=null&&s.push(`  confirmations ${e.confirmations}`),e.block!=null&&s.push(`  block         ${e.block}`),e.chainId!=null&&s.push(`  chain         ${e.family||"evm"}:${e.chainId}`),!t&&r&&s.push(`  not observed  ${r}`),e.status==="UNKNOWN"&&s.push("  UNKNOWN is not success. No observed chain state means the action is unproven."),`${s.join(`
 `)}
-`}var yn={name:"receipt",summary:"verify an on-chain action against observed chain state (never trust a bare hash)",group:"read",usage:"oracle receipt --hash <txid> --chain <chainId> [--confirmations N] [--rpc-url URL] [--json] [--quiet]",async run(e){let t=e.argv||[],r=t.includes("--quiet"),o=t.indexOf("--json"),n=o>=0?t[o+1]:void 0;if(n&&!n.startsWith("--")){let h;try{h=JSON.parse(n)}catch(A){return process.stderr.write(`receipt: bad json: ${A.message}
-`),1}let b;try{b=ie(h)}catch(A){return process.stderr.write(`receipt: ${A.message}
-`),1}return process.stdout.write(r?`${JSON.stringify(b)}
-`:at(b,{observed:!0,reason:null})),it[b.status]}let s=oe(t,"hash");if(!s)return process.stderr.write(`receipt: --hash required
+`}var Rn={name:"receipt",summary:"verify an on-chain action against observed chain state (never trust a bare hash)",group:"read",usage:"oracle receipt --hash <txid> --chain <chainId> [--confirmations N] [--rpc-url URL] [--json] [--quiet]",async run(e){let t=e.argv||[],r=t.includes("--quiet"),o=t.indexOf("--json"),n=o>=0?t[o+1]:void 0;if(n&&!n.startsWith("--")){let d;try{d=JSON.parse(n)}catch(S){return process.stderr.write(`receipt: bad json: ${S.message}
+`),1}let y;try{y=ae(d)}catch(S){return process.stderr.write(`receipt: ${S.message}
+`),1}return process.stdout.write(r?`${JSON.stringify(y)}
+`:lt(y,{observed:!0,reason:null})),ut[y.status]}let s=oe(t,"hash");if(!s)return process.stderr.write(`receipt: --hash required
 usage: ${this.usage}
 `),1;let a=oe(t,"chain")??oe(t,"chainId");if(!a)return process.stderr.write(`receipt: --chain <chainId> required to observe chain state
-`),1;let d=oe(t,"confirmations"),l=d==null?1:Number(d);if(!Number.isSafeInteger(l)||l<=0)return process.stderr.write(`receipt: --confirmations must be a positive integer
-`),1;let u;try{u=await st({txHash:s,chainId:a,confirmations:l,rpcUrl:oe(t,"rpc-url")})}catch(h){return process.stderr.write(`receipt: ${h.message}
-`),1}let{receipt:i,observed:c,reason:f,final:p,requiredConfirmations:y}=u;return process.stdout.write(r?`${JSON.stringify({...i,observed:c,final:p,requiredConfirmations:y,...f?{notObserved:f}:{}})}
-`:at(i,{observed:c,reason:f,final:p,requiredConfirmations:y})),it[i.status]}};export{yn as default};
+`),1;let h=oe(t,"confirmations"),c=h==null?1:Number(h);if(!Number.isSafeInteger(c)||c<=0)return process.stderr.write(`receipt: --confirmations must be a positive integer
+`),1;let l;try{l=await ct({txHash:s,chainId:a,confirmations:c,rpcUrl:oe(t,"rpc-url")})}catch(d){return process.stderr.write(`receipt: ${d.message}
+`),1}let{receipt:i,observed:p,reason:b,final:f,requiredConfirmations:u}=l;return process.stdout.write(r?`${JSON.stringify({...i,observed:p,final:f,requiredConfirmations:u,...b?{notObserved:b}:{}})}
+`:lt(i,{observed:p,reason:b,final:f,requiredConfirmations:u})),ut[i.status]}};export{Rn as default};

package/dist/cli/commands/resolve.mjs

@@ -1,7 +1,7 @@
-import{keccak_256 as le}from"@noble/hashes/sha3.js";import{createHash as Ze}from"node:crypto";import{types as k}from"node:util";import B from"node:net";import We from"node:dns";var Ye=new Set(["localhost","metadata.google.internal","metadata.goog"]);function K(t){let e=String(t).toLowerCase().split("%")[0];if((e.match(/::/g)||[]).length>1)return null;let r=o=>{if(!o)return[];let a=o.split(":"),l=a.at(-1);if(l?.includes(".")){let h=l.split(".").map(Number);if(h.length!==4||h.some(m=>!Number.isInteger(m)||m<0||m>255))return null;a.splice(a.length-1,1,(h[0]<<8|h[1]).toString(16),(h[2]<<8|h[3]).toString(16))}return a.some(h=>!/^[0-9a-f]{1,4}$/.test(h))?null:a.map(h=>Number.parseInt(h,16))},[n,s]=e.split("::"),i=r(n),c=r(s);if(!i||!c)return null;let d=e.includes("::"),u=8-i.length-c.length;if(!d&&u!==0||d&&u<1)return null;let p=[...i,...Array(Math.max(0,u)).fill(0),...c];return p.length!==8?null:Uint8Array.from(p.flatMap(o=>[o>>8,o&255]))}function re(t,e,r){let n=Math.floor(r/8),s=r%8;for(let c=0;c<n;c+=1)if(t[c]!==e[c])return!1;if(!s)return!0;let i=255<<8-s;return(t[n]&i)===(e[n]&i)}function ne(t){if(B.isIPv4(t)){let e=t.split(".").map(Number);return!(e[0]===0||e[0]===10||e[0]===127||e[0]>=224||e[0]===100&&e[1]>=64&&e[1]<=127||e[0]===169&&e[1]===254||e[0]===172&&e[1]>=16&&e[1]<=31||e[0]===192&&(e[1]===0||e[1]===2||e[1]===168)||e[0]===192&&e[1]===88&&e[2]===99||e[0]===198&&(e[1]===18||e[1]===19||e[1]===51)||e[0]===203&&e[1]===0&&e[2]===113)}if(B.isIPv6(t)){let e=K(t);if(!e)return!1;let r=K("::ffff:0:0");return re(e,r,96)?ne([...e.slice(12)].join(".")):re(e,K("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([s,i])=>re(e,K(s),i)):!1}return!1}function qe(t){let e;try{e=new URL(String(t))}catch{return{ok:!1,error:`not a valid URL: ${String(t).slice(0,120)}`}}if(e.protocol!=="http:"&&e.protocol!=="https:")return{ok:!1,error:`refused protocol ${e.protocol} (only http/https)`};let r=e.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Ye.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=B.isIP(r);return n!==0&&!ne(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:e,host:r,isLiteralIp:n!==0}}async function oe(t,{lookupFn:e=We.promises.lookup}={}){let r=qe(t);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:B.isIPv6(r.host)?6:4}]};let n;try{n=await e(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(s=>!ne(s.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}async function se({requireUndici:t=!1,importUndici:e=()=>import("undici")}={}){let r,n;try{let a=await e();r=a.Agent,n=a.fetch}catch(a){if(t)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${a?.message||a}`);return null}if(typeof r!="function"||typeof n!="function"){if(t)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let s=a=>String(a).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,c=a=>(Array.isArray(a)?a:[a]).map(l=>typeof l=="string"?{address:l}:l).filter(l=>l&&l.address).map(l=>({address:l.address,family:l.family||(B.isIPv6(l.address)?6:4)})),d=(a,l,h)=>{i.set(s(a),c(typeof l=="string"?[{address:l,family:h}]:l))},u=a=>{let l=s(a);if(B.isIP(l))return[{address:l,family:B.isIPv6(l)?6:4}];let h=i.get(l);if(!h||!h.length)throw new Error(`refused: unpinned host ${a} during pinned fetch`);return h},p=new r({connect:{lookup(a,l,h){let m;try{m=u(a)}catch(R){return h(R)}return l?.all?h(null,m):h(null,m[0].address,m[0].family)}}}),o=Ke((a,l={})=>n(a,{...l,dispatcher:p}),d);return{dispatcher:p,fetch:o,pin:d,resolve:u,async close(){try{await p.destroy()}catch{}}}}var ae=Symbol.for("oracle.egressGuard.pinCapableFetch");function Ke(t,e){if(typeof t!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof e!="function")throw new Error("markPinCapableFetch: pin must be a function");return t[ae]=Object.freeze({pin:e}),t}function ie(t){return typeof t=="function"&&typeof t[ae]?.pin=="function"}function be(t,e,r){if(!ie(t))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");t[ae].pin(e,r)}var Xe=new Set([408,425,429,500,502,503,504]),ge=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Qe=2,Te=4e3,et=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,tt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,rt=AbortSignal.prototype.throwIfAborted,nt=EventTarget.prototype.addEventListener,Ee=EventTarget.prototype.removeEventListener,Oe=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,Y=t=>t?et.call(t):!1,ot=t=>t?tt.call(t):void 0,st=new Set([301,302,303,307,308]),X=3,Yt=64*1024,N=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function T(t){return $(`HTTP JSON body refused: ${t}`)}function at(t){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(e=>typeof k[e]=="function"&&k[e](t))}function it(t){let e=[],r=0,n=0,s=0,i=0,c=new WeakSet,d=o=>{if(r+=Buffer.byteLength(o,"utf8"),r>N.bytes)throw T("serialized byte limit exceeded");e.push(o)},u=o=>{if(Buffer.byteLength(o,"utf8")>N.bytes)throw T("serialized byte limit exceeded");return JSON.stringify(o)},p=(o,a)=>{if(n+=1,n>N.nodes)throw T("node limit exceeded");if(a>N.depth)throw T("depth limit exceeded");if(o===null){d("null");return}if(typeof o=="string"){d(u(o));return}if(typeof o=="boolean"){d(o?"true":"false");return}if(typeof o=="number"){if(!Number.isFinite(o))throw T("non-finite number");d(Object.is(o,-0)?"0":String(o));return}if(typeof o!="object")throw T("unsupported non-JSON value");if(k.isProxy(o))throw T("proxy value");if(at(o))throw T("unsupported exotic object");if(c.has(o))throw T("cyclic value");c.add(o);try{if(Object.getOwnPropertySymbols(o).length>0)throw T("symbol-keyed fields are unsupported");if(Array.isArray(o)){let m=Object.getPrototypeOf(o),R=0;for(;m!==null;){if(k.isProxy(m))throw T("proxy array prototype");if(R+=1,R>N.depth)throw T("array prototype depth limit exceeded");m=Object.getPrototypeOf(m)}if(o.length>N.arrayLength)throw T("array length limit exceeded");for(let O=0;O<o.length;O+=1){let C=Object.getOwnPropertyDescriptor(o,String(O));if(!C||!Object.hasOwn(C,"value")||C.enumerable!==!0)throw T("array entries must be dense enumerable own data")}let w=0;for(let O in o){if(i+=1,i>N.fields)throw T("enumeration limit exceeded");if(Object.hasOwn(o,O)&&(w+=1,w>o.length))throw T("named array fields are unsupported")}if(w!==o.length)throw T("array entries must be dense enumerable own data");d("[");for(let O=0;O<o.length;O+=1)O&&d(","),p(Object.getOwnPropertyDescriptor(o,String(O)).value,a+1);d("]");return}let l=Object.getPrototypeOf(o);if(l!==Object.prototype&&l!==null)throw T("non-plain object");let h=[];for(let m in o){if(i+=1,i>N.fields)throw T("enumeration limit exceeded");if(!Object.hasOwn(o,m))continue;if(s+=1,s>N.fields)throw T("field limit exceeded");let R=Object.getOwnPropertyDescriptor(o,m);if(!R||!Object.hasOwn(R,"value")||R.enumerable!==!0)throw T("object fields must be enumerable own data");h.push([m,R.value])}d("{");for(let m=0;m<h.length;m+=1)m&&d(","),d(u(h[m][0])),d(":"),p(h[m][1],a+1);d("}")}finally{c.delete(o)}};return p(t,0),e.join("")}function ct(t){let e=Object.create(null);if(t==null)return e;if(typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP headers must be an object");if(k.isProxy(t))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(t)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let s=n.toLowerCase();if(r.has(s))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(s);let i=Object.getOwnPropertyDescriptor(t,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let c=i.value;if(c==null||["object","function","symbol"].includes(typeof c))throw new TypeError("HTTP header values must be scalar");e[n]=String(c)}return e}function ut(){return Object.assign(Object.create(null),{Accept:"application/json"})}function lt(t,e){if(!t)throw new Error(`HTTP redirect from ${e} missing Location`);let r=new URL(String(t),String(e));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${e} used unsupported protocol ${r.protocol}`);return r.toString()}function ft(t,e){return new URL(String(t)).origin===new URL(String(e)).origin}var ce=new Map,Se=new WeakMap,Pe=1;function Z(t){if((typeof t!="object"||t===null)&&typeof t!="function")return`${typeof t}:${String(t)}`;let e=Se.get(t);return e||(e=Pe,Pe+=1,Se.set(t,e)),`reference:${e}`}var dt=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),pt=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Re(t){if(!t||typeof t!="object"||Array.isArray(t)||!Object.hasOwn(t,"jsonrpc")||!Object.hasOwn(t,"method")||t.jsonrpc!=="2.0")return!1;let e=typeof t.method=="string"?t.method:"";return e?dt.has(e)||/^get[A-Z0-9_]/u.test(e)||/^is[A-Z0-9_]/u.test(e)||/^eth_get[A-Z0-9_]/u.test(e):!1}function Ae(t,e){if(t==="GET"&&e==null)return!0;if(t!=="POST"||e==null)return!1;let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Re);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Re(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&pt.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function ht(t,e,r,n={},s=null){let i=Ze("sha256"),c=(u,p)=>{let o=String(p);i.update(String(Buffer.byteLength(u,"utf8"))).update(":").update(u),i.update("=").update(String(Buffer.byteLength(o,"utf8"))).update(":").update(o).update(`
-`)};c("method",t),c("url",e),Object.keys(r||{}).map((u,p)=>({name:u.toLowerCase(),order:p,value:String(r[u])})).sort((u,p)=>u.name.localeCompare(p.name)||u.order-p.order).forEach((u,p)=>{c(`header-name-${p}`,u.name),c(`header-value-${p}`,u.value)}),c("body",s??"-");for(let u of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])c(`context-${u}`,n[u]??"-");return i.digest("hex")}function mt(t,e){let r=Number(e);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Te):Math.min(250*2**t,Te)+Math.floor(Math.random()*100)}var yt=t=>new Promise(e=>setTimeout(e,t));function $(t,e={}){let r=new Error(t);return r.retryable=!1,Object.assign(r,e),r}function ue(t,e,r){return $(`HTTP response from ${t} exceeded maxResponseBytes ${r} (${e})`,{oversize:!0})}function M(t){try{let e=t?.body?.cancel?.();e&&typeof e.then=="function"&&e.catch(()=>{})}catch{}}function wt(t){return t?t.byteLength??t.length??0:0}async function bt(t,e,{url:r,truncate:n=!1,onOversize:s}={}){if(e==null)return await t.text();let i=Number(t.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>e&&(M(t),!n))throw ue(r,`content-length ${i}`,e);let c=t.body?.getReader?.();if(!c){let a=await t.text(),l=Buffer.byteLength(a,"utf8");if(l>e){if(!n)throw ue(r,`body ${l} bytes`,e);return Buffer.from(a,"utf8").subarray(0,e).toString("utf8")}return a}let d=[],u=0,p=!1;try{for(;;){let{value:a,done:l}=await c.read();if(l)break;if(a&&(d.push(Buffer.from(a)),u+=wt(a),u>e)){p=!0;break}}}finally{if(p)try{await c.cancel()}catch{}try{c.releaseLock?.()}catch{}}if(p&&(typeof s=="function"&&s(),!n))throw ue(r,`streamed ${u} bytes`,e);let o=Buffer.concat(d);return(p?o.subarray(0,e):o).toString("utf8")}function gt(t){if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Tt(t,{fetchImpl:e,method:r,headers:n,body:s,timeoutMs:i,lookupFn:c,realFetch:d,untrustedUrl:u=!1,maxResponseBytes:p=null,sameOriginRedirectsOnly:o=!1,importUndici:a,validateResponse:l,signal:h,redirectPolicy:m="follow",maxRedirects:R=X}){let w=null,O=e,C=c?{lookupFn:c}:{};if(u&&!d&&!ie(O))throw $(`HTTP refused ${t}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let x=new AbortController,I=setTimeout(()=>x.abort(),i),z=h?Oe?Oe([h,x.signal]):h:x.signal,G=async(y,{status:S=null}={})=>{let P=await oe(y,C);if(!P.ok)throw $(S==null?`HTTP refused ${y}: ${P.error}`:`HTTP redirect to ${y} ${P.error}`,S==null?{}:{status:S});let j=new URL(y).hostname;if(d){if(w&&(await w.close(),w=null),!w)try{w=await se({requireUndici:!0,...a?{importUndici:a}:{}})}catch(f){throw $(S==null?`HTTP refused ${y}: ${f?.message||f}`:`HTTP redirect to ${y} refused: ${f?.message||f}`,S==null?{}:{status:S})}w.pin(j,P.addresses),O=w.fetch}else be(O,j,P.addresses);return P};try{let y=String(t),S=Object.assign(Object.create(null),n||{});u&&await G(y);for(let P=0;P<=R;P+=1){let j=Object.assign(Object.create(null),{method:r,headers:S,body:s,signal:z,redirect:"manual",dispatcher:void 0}),f=await O(y,j);if((m==="error"||R===0)&&f.status>=300&&f.status<400)throw M(f),$(`HTTP ${f.status} ${r} redirect refused`,{status:f.status,redirectRefused:!0});if(st.has(f.status)){let v=o===!0&&r==="POST"&&[307,308].includes(f.status)&&Ae(r,s);if(r!=="GET"&&r!=="HEAD"&&!v){M(f);let E=new Error(`HTTP ${f.status} ${r} ${y} redirected non-idempotent request`);throw E.status=f.status,E}if(P===R)throw M(f),$(`HTTP ${f.status} ${r} redirect budget exhausted`,{status:f.status,redirectRefused:!0});let me=f.headers?.get?.("location"),_;try{_=lt(me,y)}catch(E){throw M(f),E}let H=!ft(_,y);if(M(f),H&&r==="POST"){let E=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw E.status=f.status,E}if(H&&o){let E=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw E.status=f.status,E.retryable=!1,E}if(H&&(S=ut(S)),u)await G(_,{status:f.status});else if(H){let E=await oe(_,C);if(!E.ok){let g=new Error(`HTTP redirect from ${y} ${E.error}`);throw g.status=f.status,g.retryable=!1,g}d&&E.addresses?.length&&(w||(w=await se(a?{importUndici:a}:{})),w&&(w.pin(new URL(_).hostname,E.addresses),O=w.fetch))}y=_;continue}if(typeof l=="function")try{await l(f,{url:y})}catch(v){throw M(f),$(v?.message||String(v))}let A=await bt(f,p,{url:y,onOversize:()=>x.abort()}),J=gt(A);if(!f.ok){let v=new Error(`HTTP ${f.status} ${r} ${y}`);throw v.status=f.status,v.retryAfter=f.headers?.get?.("retry-after")??null,v.body=J??A.slice(0,300),v}return J??A}throw new Error(`HTTP redirect loop for ${t}`)}catch(y){if(x.signal.aborted&&!Y(h)){let S=y&&(typeof y=="object"||typeof y=="function")&&!k.isProxy(y)?y:null,P=S?Object.getOwnPropertyDescriptor(S,"oversize"):null;if(!(P&&Object.hasOwn(P,"value")&&P.value===!0))try{if(!S)throw new TypeError("unsafe rejection");Object.defineProperties(S,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let f=new Error("HTTP request timed out");throw Object.defineProperties(f,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),f}}throw y}finally{clearTimeout(I),w&&await w.close()}}async function xe(t,e={}){if(e!=null&&typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP options must be an object");if(e!=null&&k.isProxy(e))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(e!=null){if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP options contain unknown fields");for(let g of Object.getOwnPropertyNames(e)){let b=Object.getOwnPropertyDescriptor(e,g);if(!(g==="toJSON"&&b&&Object.hasOwn(b,"value")&&b.value===void 0)){if(!r.has(g))throw new TypeError("HTTP options contain unknown fields");if(!b||!b.enumerable||!Object.hasOwn(b,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=g=>{if(e==null||!Object.hasOwn(e,g))return;let b=Object.getOwnPropertyDescriptor(e,g);if(!b||!Object.hasOwn(b,"value"))throw new TypeError("HTTP options must contain own data properties");return b.value};if(typeof t!="string"||t.length===0||t.length>8192)throw new TypeError("HTTP URL must be a bounded string");let s=n("method");if(s!==void 0&&(typeof s!="string"||!/^[A-Za-z]+$/u.test(s)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let c=n("retries");if(c!==void 0&&(!Number.isInteger(c)||c<0||c>10))throw new TypeError("HTTP retries must be a bounded integer");let d=n("redirectPolicy");if(d!==void 0&&d!=="follow"&&d!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let u=n("maxRedirects");if(u!==void 0&&(!Number.isInteger(u)||u<0||u>X))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${X}`);if(d==="error"&&u!==void 0&&u!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let p=d??"follow",o=p==="error"?0:u??X;for(let g of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let b=n(g);if(b!==void 0&&typeof b!="boolean")throw new TypeError(`HTTP ${g} must be boolean`)}let a=n("maxResponseBytes");if(a!==void 0&&(!Number.isInteger(a)||a<1||a>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let l=n("signal");if(l!==void 0){if(k.isProxy(l)||!(l instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{Y(l)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let g of["importUndici","lookupFn","validateResponse"]){let b=n(g);if(b!==void 0&&typeof b!="function")throw new TypeError(`HTTP ${g} must be a function`)}let h=n("fetchImpl"),m=h||globalThis.fetch;if(typeof m!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let R=i??12e3,w=(s||"GET").toUpperCase(),O=n("headers"),C=ct(O),x=Object.assign(Object.create(null),C);Object.keys(x).some(g=>g.toLowerCase()==="accept")||(x.Accept="application/json");let I=n("body");I!=null&&typeof I!="string"&&(Object.keys(x).find(b=>b.toLowerCase()==="content-type")||(x["Content-Type"]="application/json"),I=it(I));let z=c??Qe,G=n("lookupFn"),y=!h,S=n("untrustedUrl")===!0,P=n("sameOriginRedirectsOnly")===!0,j=n("importUndici"),f=n("validateResponse"),A=l,J=a??null,v=async()=>{let g;for(let b=0;b<=z;b++){A&&rt.call(A);try{return await Tt(t,{fetchImpl:m,method:w,headers:x,body:I,timeoutMs:R,lookupFn:G,realFetch:y,untrustedUrl:S,maxResponseBytes:J,sameOriginRedirectsOnly:P,importUndici:j,validateResponse:f,signal:A,redirectPolicy:p,maxRedirects:o})}catch(L){g=L;let F=te=>{if(!L||typeof L!="object"&&typeof L!="function"||k.isProxy(L))return;let V=Object.getOwnPropertyDescriptor(L,te);return V&&Object.hasOwn(V,"value")?V.value:void 0},ee=F("status"),Ge=F("oracleTimeout")===!0||F("name")==="AbortError"||F("name")==="TimeoutError"||Y(A),Je=new Set([408,425,429]),Ve=F("retryable")===!1?!1:ee!=null?Je.has(ee)||Xe.has(ee)&&ge.has(w):!Ge&&ge.has(w);if(b===z||!Ve)throw L;let ye=mt(b,F("retryAfter"));A?await new Promise((te,V)=>{let we,W=()=>{clearTimeout(we),Ee.call(A,"abort",W),V(ot(A)||new DOMException("Aborted","AbortError"))};if(Y(A)){W();return}we=setTimeout(()=>{Ee.call(A,"abort",W),te()},ye),nt.call(A,"abort",W,{once:!0}),Y(A)&&W()}):await yt(ye)}}throw g};if(!(n("dedupe")!==!1&&!A&&Ae(w,I)))return v();let _=ht(w,t,x,{untrustedUrl:S,maxResponseBytes:J,sameOriginRedirectsOnly:P,redirectPolicy:p,maxRedirects:o,timeoutMs:R,retries:z,fetchImpl:Z(m),realFetch:y,lookupFn:Z(G),importUndici:Z(j),validateResponse:Z(f)},I),H=ce.get(_);if(H)return H;let E=v().finally(()=>ce.delete(_));return ce.set(_,E),E}var ve={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Et=new Map(Object.values(ve).map(t=>[t.chainId,t]));function _e(t){return Et.get(Number(t))||null}function Ie(t,e=process.env){let r=_e(t);if(!r)return null;for(let n of r.rpcEnv){let s=(e[n]||"").trim();if(s)return s}return null}import{Interface as Ot,getAddress as tr}from"ethers";var rr=new Ot(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var St={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Pt(t,{rpcUrl:e,env:r=process.env}={}){if(e)return e;let n=Ie(t,r);return n||St[Number(t)]||null}var Rt=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function At(t){let e=String(t||""),r=e.toLowerCase();if(e!==e.trim()||!/^[a-zA-Z0-9_]+$/.test(e)||!Rt.test(r))throw new Error(`evm-rpc: ${e} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var q=new Map,Ne=new Map;function xt(t){let e=new Error(t?.message||JSON.stringify(t));return e.code=t?.code,e}function vt(t){if(t?.error)throw xt(t.error);return t?.result}function _t(t,e,r){return`${t}
+import{keccak_256 as fe}from"@noble/hashes/sha3.js";import{createHash as at}from"node:crypto";import{types as N}from"node:util";import{AsyncLocalStorage as qe}from"node:async_hooks";var Ze=new qe,Qe=["http","retry","shared"],et=512;function q(t){let e=Ze.getStore();if(!e||e.closed||!Qe.includes(t))return null;if(e.spans.length>=et)return e.droppedSpans++,null;let r={stage:t,startMs:e.now()-e.start,durationMs:null,outcome:"pending",status:null};return e.spans.push(r),(n,o=null)=>{e.closed||r.durationMs!==null||(r.durationMs=Math.max(0,e.now()-e.start-r.startMs),r.outcome=n==="succeeded"?"succeeded":"failed",r.status=Number.isInteger(o)&&o>=100&&o<=599?o:null)}}import M from"node:net";import tt from"node:dns";var rt=new Set(["localhost","metadata.google.internal","metadata.goog"]);function Z(t){let e=String(t).toLowerCase().split("%")[0];if((e.match(/::/g)||[]).length>1)return null;let r=s=>{if(!s)return[];let p=s.split(":"),T=p.at(-1);if(T?.includes(".")){let l=T.split(".").map(Number);if(l.length!==4||l.some(u=>!Number.isInteger(u)||u<0||u>255))return null;p.splice(p.length-1,1,(l[0]<<8|l[1]).toString(16),(l[2]<<8|l[3]).toString(16))}return p.some(l=>!/^[0-9a-f]{1,4}$/.test(l))?null:p.map(l=>Number.parseInt(l,16))},[n,o]=e.split("::"),a=r(n),i=r(o);if(!a||!i)return null;let d=e.includes("::"),c=8-a.length-i.length;if(!d&&c!==0||d&&c<1)return null;let h=[...a,...Array(Math.max(0,c)).fill(0),...i];return h.length!==8?null:Uint8Array.from(h.flatMap(s=>[s>>8,s&255]))}function ne(t,e,r){let n=Math.floor(r/8),o=r%8;for(let i=0;i<n;i+=1)if(t[i]!==e[i])return!1;if(!o)return!0;let a=255<<8-o;return(t[n]&a)===(e[n]&a)}function oe(t){if(M.isIPv4(t)){let e=t.split(".").map(Number);return!(e[0]===0||e[0]===10||e[0]===127||e[0]>=224||e[0]===100&&e[1]>=64&&e[1]<=127||e[0]===169&&e[1]===254||e[0]===172&&e[1]>=16&&e[1]<=31||e[0]===192&&(e[1]===0||e[1]===2||e[1]===168)||e[0]===192&&e[1]===88&&e[2]===99||e[0]===198&&(e[1]===18||e[1]===19||e[1]===51)||e[0]===203&&e[1]===0&&e[2]===113)}if(M.isIPv6(t)){let e=Z(t);if(!e)return!1;let r=Z("::ffff:0:0");return ne(e,r,96)?oe([...e.slice(12)].join(".")):ne(e,Z("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,a])=>ne(e,Z(o),a)):!1}return!1}function nt(t){let e;try{e=new URL(String(t))}catch{return{ok:!1,error:`not a valid URL: ${String(t).slice(0,120)}`}}if(e.protocol!=="http:"&&e.protocol!=="https:")return{ok:!1,error:`refused protocol ${e.protocol} (only http/https)`};let r=e.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(rt.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=M.isIP(r);return n!==0&&!oe(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:e,host:r,isLiteralIp:n!==0}}async function se(t,{lookupFn:e=tt.promises.lookup}={}){let r=nt(t);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:M.isIPv6(r.host)?6:4}]};let n;if(process.env.ORACLE_HOSTED_EGRESS_PROXY)return{ok:!0,url:r.url,addresses:[]};try{n=await e(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!oe(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}function ot(t=process.env){let e=t.ORACLE_HOSTED_EGRESS_PROXY||"";if(!e)return null;let r;try{r=new URL(e)}catch{throw new Error("egress-guard: ORACLE_HOSTED_EGRESS_PROXY is not a URL")}if(r.protocol!=="http:"||!["127.0.0.1","::1","localhost","[::1]"].includes(r.hostname)||!r.port||r.username||r.password)throw new Error("egress-guard: egress proxy must be an exact loopback http origin");let n=t.ORACLE_HOSTED_EGRESS_TOKEN||"";if(!/^[A-Za-z0-9_-]{43}$/.test(n))throw new Error("egress-guard: egress proxy token is missing");return{uri:r.origin,token:n}}async function ae({requireUndici:t=!1,importUndici:e=()=>import("undici")}={}){let r,n,o;try{o=await e(),r=o.Agent,n=o.fetch}catch(l){if(t)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${l?.message||l}`);return null}if(typeof r!="function"||typeof n!="function"){if(t)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let a=l=>String(l).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,d=l=>(Array.isArray(l)?l:[l]).map(u=>typeof u=="string"?{address:u}:u).filter(u=>u&&u.address).map(u=>({address:u.address,family:u.family||(M.isIPv6(u.address)?6:4)})),c=(l,u,g)=>{i.set(a(l),d(typeof u=="string"?[{address:u,family:g}]:u))},h=l=>{let u=a(l);if(M.isIP(u))return[{address:u,family:M.isIPv6(u)?6:4}];let g=i.get(u);if(!g||!g.length)throw new Error(`refused: unpinned host ${l} during pinned fetch`);return g},s=ot(),p=s&&typeof o.ProxyAgent=="function"?new o.ProxyAgent({uri:s.uri,token:`Bearer ${s.token}`,connectTimeout:1e4}):new r({connect:{lookup(l,u,g){let m;try{m=h(l)}catch(S){return g(S)}return u?.all?g(null,m):g(null,m[0].address,m[0].family)}}}),T=st((l,u={})=>n(l,{...u,dispatcher:p}),c);return{dispatcher:p,fetch:T,pin:c,resolve:h,async close(){try{await p.destroy()}catch{}}}}var ie=Symbol.for("oracle.egressGuard.pinCapableFetch");function st(t,e){if(typeof t!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof e!="function")throw new Error("markPinCapableFetch: pin must be a function");return t[ie]=Object.freeze({pin:e}),t}function ce(t){return typeof t=="function"&&typeof t[ie]?.pin=="function"}function Ee(t,e,r){if(!ce(t))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");t[ie].pin(e,r)}var it=new Set([408,425,429,500,502,503,504]),Se=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),ct=2,Oe=4e3,ut=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,lt=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,ft=AbortSignal.prototype.throwIfAborted,dt=EventTarget.prototype.addEventListener,Re=EventTarget.prototype.removeEventListener,Pe=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,W=t=>t?ut.call(t):!1,pt=t=>t?lt.call(t):void 0,ht=new Set([301,302,303,307,308]),ee=3,ar=64*1024,C=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function E(t){return j(`HTTP JSON body refused: ${t}`)}function mt(t){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(e=>typeof N[e]=="function"&&N[e](t))}function yt(t){let e=[],r=0,n=0,o=0,a=0,i=new WeakSet,d=s=>{if(r+=Buffer.byteLength(s,"utf8"),r>C.bytes)throw E("serialized byte limit exceeded");e.push(s)},c=s=>{if(Buffer.byteLength(s,"utf8")>C.bytes)throw E("serialized byte limit exceeded");return JSON.stringify(s)},h=(s,p)=>{if(n+=1,n>C.nodes)throw E("node limit exceeded");if(p>C.depth)throw E("depth limit exceeded");if(s===null){d("null");return}if(typeof s=="string"){d(c(s));return}if(typeof s=="boolean"){d(s?"true":"false");return}if(typeof s=="number"){if(!Number.isFinite(s))throw E("non-finite number");d(Object.is(s,-0)?"0":String(s));return}if(typeof s!="object")throw E("unsupported non-JSON value");if(N.isProxy(s))throw E("proxy value");if(mt(s))throw E("unsupported exotic object");if(i.has(s))throw E("cyclic value");i.add(s);try{if(Object.getOwnPropertySymbols(s).length>0)throw E("symbol-keyed fields are unsupported");if(Array.isArray(s)){let u=Object.getPrototypeOf(s),g=0;for(;u!==null;){if(N.isProxy(u))throw E("proxy array prototype");if(g+=1,g>C.depth)throw E("array prototype depth limit exceeded");u=Object.getPrototypeOf(u)}if(s.length>C.arrayLength)throw E("array length limit exceeded");for(let S=0;S<s.length;S+=1){let H=Object.getOwnPropertyDescriptor(s,String(S));if(!H||!Object.hasOwn(H,"value")||H.enumerable!==!0)throw E("array entries must be dense enumerable own data")}let m=0;for(let S in s){if(a+=1,a>C.fields)throw E("enumeration limit exceeded");if(Object.hasOwn(s,S)&&(m+=1,m>s.length))throw E("named array fields are unsupported")}if(m!==s.length)throw E("array entries must be dense enumerable own data");d("[");for(let S=0;S<s.length;S+=1)S&&d(","),h(Object.getOwnPropertyDescriptor(s,String(S)).value,p+1);d("]");return}let T=Object.getPrototypeOf(s);if(T!==Object.prototype&&T!==null)throw E("non-plain object");let l=[];for(let u in s){if(a+=1,a>C.fields)throw E("enumeration limit exceeded");if(!Object.hasOwn(s,u))continue;if(o+=1,o>C.fields)throw E("field limit exceeded");let g=Object.getOwnPropertyDescriptor(s,u);if(!g||!Object.hasOwn(g,"value")||g.enumerable!==!0)throw E("object fields must be enumerable own data");l.push([u,g.value])}d("{");for(let u=0;u<l.length;u+=1)u&&d(","),d(c(l[u][0])),d(":"),h(l[u][1],p+1);d("}")}finally{i.delete(s)}};return h(t,0),e.join("")}function wt(t){let e=Object.create(null);if(t==null)return e;if(typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP headers must be an object");if(N.isProxy(t))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(t)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let a=Object.getOwnPropertyDescriptor(t,n);if(!a||!Object.hasOwn(a,"value"))throw new TypeError("HTTP headers must contain own data properties");let i=a.value;if(i==null||["object","function","symbol"].includes(typeof i))throw new TypeError("HTTP header values must be scalar");e[n]=String(i)}return e}function bt(){return Object.assign(Object.create(null),{Accept:"application/json"})}function gt(t,e){if(!t)throw new Error(`HTTP redirect from ${e} missing Location`);let r=new URL(String(t),String(e));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${e} used unsupported protocol ${r.protocol}`);return r.toString()}function Tt(t,e){return new URL(String(t)).origin===new URL(String(e)).origin}var ue=new Map,Ae=new WeakMap,xe=1;function Q(t){if((typeof t!="object"||t===null)&&typeof t!="function")return`${typeof t}:${String(t)}`;let e=Ae.get(t);return e||(e=xe,xe+=1,Ae.set(t,e)),`reference:${e}`}var Et=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),St=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function ve(t){if(!t||typeof t!="object"||Array.isArray(t)||!Object.hasOwn(t,"jsonrpc")||!Object.hasOwn(t,"method")||t.jsonrpc!=="2.0")return!1;let e=typeof t.method=="string"?t.method:"";return e?Et.has(e)||/^get[A-Z0-9_]/u.test(e)||/^is[A-Z0-9_]/u.test(e)||/^eth_get[A-Z0-9_]/u.test(e):!1}function _e(t,e){if(t==="GET"&&e==null)return!0;if(t!=="POST"||e==null)return!1;let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(ve);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return ve(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&St.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function Ot(t,e,r,n={},o=null){let a=at("sha256"),i=(c,h)=>{let s=String(h);a.update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c),a.update("=").update(String(Buffer.byteLength(s,"utf8"))).update(":").update(s).update(`
+`)};i("method",t),i("url",e),Object.keys(r||{}).map((c,h)=>({name:c.toLowerCase(),order:h,value:String(r[c])})).sort((c,h)=>c.name.localeCompare(h.name)||c.order-h.order).forEach((c,h)=>{i(`header-name-${h}`,c.name),i(`header-value-${h}`,c.value)}),i("body",o??"-");for(let c of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])i(`context-${c}`,n[c]??"-");return a.digest("hex")}function Rt(t,e){let r=Number(e);return Number.isFinite(r)&&r>0?Math.min(r*1e3,Oe):Math.min(250*2**t,Oe)+Math.floor(Math.random()*100)}var Pt=t=>new Promise(e=>setTimeout(e,t));function j(t,e={}){let r=new Error(t);return r.retryable=!1,Object.assign(r,e),r}function le(t,e,r){return j(`HTTP response from ${t} exceeded maxResponseBytes ${r} (${e})`,{oversize:!0})}function B(t){try{let e=t?.body?.cancel?.();e&&typeof e.then=="function"&&e.catch(()=>{})}catch{}}function At(t){return t?t.byteLength??t.length??0:0}async function xt(t,e,{url:r,truncate:n=!1,onOversize:o}={}){if(e==null)return await t.text();let a=Number(t.headers?.get?.("content-length"));if(Number.isFinite(a)&&a>e&&(B(t),!n))throw le(r,`content-length ${a}`,e);let i=t.body?.getReader?.();if(!i){let p=await t.text(),T=Buffer.byteLength(p,"utf8");if(T>e){if(!n)throw le(r,`body ${T} bytes`,e);return Buffer.from(p,"utf8").subarray(0,e).toString("utf8")}return p}let d=[],c=0,h=!1;try{for(;;){let{value:p,done:T}=await i.read();if(T)break;if(p&&(d.push(Buffer.from(p)),c+=At(p),c>e)){h=!0;break}}}finally{if(h)try{await i.cancel()}catch{}try{i.releaseLock?.()}catch{}}if(h&&(typeof o=="function"&&o(),!n))throw le(r,`streamed ${c} bytes`,e);let s=Buffer.concat(d);return(h?s.subarray(0,e):s).toString("utf8")}function vt(t){if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function _t(t,{fetchImpl:e,method:r,headers:n,body:o,timeoutMs:a,lookupFn:i,realFetch:d,untrustedUrl:c=!1,maxResponseBytes:h=null,sameOriginRedirectsOnly:s=!1,importUndici:p,validateResponse:T,signal:l,redirectPolicy:u="follow",maxRedirects:g=ee}){let m=null,S=e,H=i?{lookupFn:i}:{};if(c&&!d&&!ce(S))throw j(`HTTP refused ${t}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let x=new AbortController,I=setTimeout(()=>x.abort(),a),G=l?Pe?Pe([l,x.signal]):l:x.signal,z=async(y,{status:R=null}={})=>{let P=await se(y,H);if(!P.ok)throw j(R==null?`HTTP refused ${y}: ${P.error}`:`HTTP redirect to ${y} ${P.error}`,R==null?{}:{status:R});let $=new URL(y).hostname;if(d){if(m&&(await m.close(),m=null),!m)try{m=await ae({requireUndici:!0,...p?{importUndici:p}:{}})}catch(f){throw j(R==null?`HTTP refused ${y}: ${f?.message||f}`:`HTTP redirect to ${y} refused: ${f?.message||f}`,R==null?{}:{status:R})}m.pin($,P.addresses),S=m.fetch}else Ee(S,$,P.addresses);return P};try{let y=String(t),R=Object.assign(Object.create(null),n||{});c&&await z(y);for(let P=0;P<=g;P+=1){let $=Object.assign(Object.create(null),{method:r,headers:R,body:o,signal:G,redirect:"manual",dispatcher:void 0}),f=await S(y,$);if((u==="error"||g===0)&&f.status>=300&&f.status<400)throw B(f),j(`HTTP ${f.status} ${r} redirect refused`,{status:f.status,redirectRefused:!0});if(ht.has(f.status)){let v=s===!0&&r==="POST"&&[307,308].includes(f.status)&&_e(r,o);if(r!=="GET"&&r!=="HEAD"&&!v){B(f);let O=new Error(`HTTP ${f.status} ${r} ${y} redirected non-idempotent request`);throw O.status=f.status,O}if(P===g)throw B(f),j(`HTTP ${f.status} ${r} redirect budget exhausted`,{status:f.status,redirectRefused:!0});let ye=f.headers?.get?.("location"),_;try{_=gt(ye,y)}catch(O){throw B(f),O}let L=!Tt(_,y);if(B(f),L&&r==="POST"){let O=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw O.status=f.status,O}if(L&&s){let O=new Error(`HTTP ${f.status} ${r} cross-origin redirect refused`);throw O.status=f.status,O.retryable=!1,O}if(L&&(R=bt(R)),c)await z(_,{status:f.status});else if(L){let O=await se(_,H);if(!O.ok){let b=new Error(`HTTP redirect from ${y} ${O.error}`);throw b.status=f.status,b.retryable=!1,b}d&&O.addresses?.length&&(m||(m=await ae(p?{importUndici:p}:{})),m&&(m.pin(new URL(_).hostname,O.addresses),S=m.fetch))}y=_;continue}if(typeof T=="function")try{await T(f,{url:y})}catch(v){throw B(f),j(v?.message||String(v))}let A=await xt(f,h,{url:y,onOversize:()=>x.abort()}),V=vt(A);if(!f.ok){let v=new Error(`HTTP ${f.status} ${r} ${y}`);throw v.status=f.status,v.retryAfter=f.headers?.get?.("retry-after")??null,v.body=V??A.slice(0,300),v}return V??A}throw new Error(`HTTP redirect loop for ${t}`)}catch(y){if(x.signal.aborted&&!W(l)){let R=y&&(typeof y=="object"||typeof y=="function")&&!N.isProxy(y)?y:null,P=R?Object.getOwnPropertyDescriptor(R,"oversize"):null;if(!(P&&Object.hasOwn(P,"value")&&P.value===!0))try{if(!R)throw new TypeError("unsafe rejection");Object.defineProperties(R,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let f=new Error("HTTP request timed out");throw Object.defineProperties(f,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),f}}throw y}finally{clearTimeout(I),m&&await m.close()}}async function Ie(t,e={}){if(e!=null&&typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP options must be an object");if(e!=null&&N.isProxy(e))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(e!=null){if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP options contain unknown fields");for(let b of Object.getOwnPropertyNames(e)){let w=Object.getOwnPropertyDescriptor(e,b);if(!(b==="toJSON"&&w&&Object.hasOwn(w,"value")&&w.value===void 0)){if(!r.has(b))throw new TypeError("HTTP options contain unknown fields");if(!w||!w.enumerable||!Object.hasOwn(w,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=b=>{if(e==null||!Object.hasOwn(e,b))return;let w=Object.getOwnPropertyDescriptor(e,b);if(!w||!Object.hasOwn(w,"value"))throw new TypeError("HTTP options must contain own data properties");return w.value};if(typeof t!="string"||t.length===0||t.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let a=n("timeoutMs");if(a!==void 0&&(!Number.isInteger(a)||a<1||a>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let i=n("retries");if(i!==void 0&&(!Number.isInteger(i)||i<0||i>10))throw new TypeError("HTTP retries must be a bounded integer");let d=n("redirectPolicy");if(d!==void 0&&d!=="follow"&&d!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let c=n("maxRedirects");if(c!==void 0&&(!Number.isInteger(c)||c<0||c>ee))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ee}`);if(d==="error"&&c!==void 0&&c!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let h=d??"follow",s=h==="error"?0:c??ee;for(let b of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let w=n(b);if(w!==void 0&&typeof w!="boolean")throw new TypeError(`HTTP ${b} must be boolean`)}let p=n("maxResponseBytes");if(p!==void 0&&(!Number.isInteger(p)||p<1||p>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let T=n("signal");if(T!==void 0){if(N.isProxy(T)||!(T instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{W(T)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let b of["importUndici","lookupFn","validateResponse"]){let w=n(b);if(w!==void 0&&typeof w!="function")throw new TypeError(`HTTP ${b} must be a function`)}let l=n("fetchImpl"),u=l||globalThis.fetch;if(typeof u!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let g=a??12e3,m=(o||"GET").toUpperCase(),S=n("headers"),H=wt(S),x=Object.assign(Object.create(null),H);Object.keys(x).some(b=>b.toLowerCase()==="accept")||(x.Accept="application/json");let I=n("body");I!=null&&typeof I!="string"&&(Object.keys(x).find(w=>w.toLowerCase()==="content-type")||(x["Content-Type"]="application/json"),I=yt(I));let G=i??ct,z=n("lookupFn"),y=!l,R=n("untrustedUrl")===!0,P=n("sameOriginRedirectsOnly")===!0,$=n("importUndici"),f=n("validateResponse"),A=T,V=p??null,v=async()=>{let b;for(let w=0;w<=G;w++){A&&ft.call(A);let we=q("http");try{let k=await _t(t,{fetchImpl:u,method:m,headers:x,body:I,timeoutMs:g,lookupFn:z,realFetch:y,untrustedUrl:R,maxResponseBytes:V,sameOriginRedirectsOnly:P,importUndici:$,validateResponse:f,signal:A,redirectPolicy:h,maxRedirects:s});return we?.("succeeded"),k}catch(k){b=k;let F=re=>{if(!k||typeof k!="object"&&typeof k!="function"||N.isProxy(k))return;let J=Object.getOwnPropertyDescriptor(k,re);return J&&Object.hasOwn(J,"value")?J.value:void 0},K=F("status");we?.("failed",K);let Ye=F("oracleTimeout")===!0||F("name")==="AbortError"||F("name")==="TimeoutError"||W(A),We=new Set([408,425,429]),Xe=F("retryable")===!1?!1:K!=null?We.has(K)||it.has(K)&&Se.has(m):!Ye&&Se.has(m);if(w===G||!Xe)throw k;let be=Rt(w,F("retryAfter")),Ke=q("retry"),ge=!1;try{A?await new Promise((re,J)=>{let Te,Y=()=>{clearTimeout(Te),Re.call(A,"abort",Y),J(pt(A)||new DOMException("Aborted","AbortError"))};if(W(A)){Y();return}Te=setTimeout(()=>{Re.call(A,"abort",Y),re()},be),dt.call(A,"abort",Y,{once:!0}),W(A)&&Y()}):await Pt(be),ge=!0}finally{Ke?.(ge?"succeeded":"failed")}}}throw b};if(!(n("dedupe")!==!1&&!A&&_e(m,I)))return v();let _=Ot(m,t,x,{untrustedUrl:R,maxResponseBytes:V,sameOriginRedirectsOnly:P,redirectPolicy:h,maxRedirects:s,timeoutMs:g,retries:G,fetchImpl:Q(u),realFetch:y,lookupFn:Q(z),importUndici:Q($),validateResponse:Q(f)},I),L=ue.get(_);if(L){let b=q("shared");try{let w=await L;return b?.("succeeded"),w}catch(w){throw b?.("failed"),w}}let O=v().finally(()=>ue.delete(_));return ue.set(_,O),O}var ke={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},It=new Map(Object.values(ke).map(t=>[t.chainId,t]));function Ce(t){return It.get(Number(t))||null}function Ne(t,e=process.env){let r=Ce(t);if(!r)return null;for(let n of r.rpcEnv){let o=(e[n]||"").trim();if(o)return o}return null}import{Interface as kt,getAddress as pr}from"ethers";var hr=new kt(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var Ct={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Nt(t,{rpcUrl:e,env:r=process.env}={}){if(e)return e;let n=Ne(t,r);return n||Ct[Number(t)]||null}var Ht=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function $t(t){let e=String(t||""),r=e.toLowerCase();if(e!==e.trim()||!/^[a-zA-Z0-9_]+$/.test(e)||!Ht.test(r))throw new Error(`evm-rpc: ${e} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var X=new Map,He=new Map;function jt(t){let e=new Error(t?.message||JSON.stringify(t));return e.code=t?.code,e}function Lt(t){if(t?.error)throw jt(t.error);return t?.result}function Mt(t,e,r){return`${t}
 ${e}
-${JSON.stringify(r??[])}`}async function It(t,e,r){return xe(t,{method:"POST",body:e,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function ke(t,e,r=[],n={}){let s=String(e||""),i=At(s),c=Pt(t,n);if(!c)throw new Error(`No RPC URL for chainId ${t} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let o=Ne.get(c);if(o!=null)return o}let u=n.dedupe!==!1&&!n.signal?_t(c,s,r):null;if(u&&q.has(u))return q.get(u);let p=(async()=>{let o=await It(c,{jsonrpc:"2.0",id:1,method:e,params:r},n),a=vt(o);return i==="eth_chainid"&&typeof a=="string"&&Ne.set(c,a),a})();return u&&(q.set(u,p),p.finally(()=>{q.get(u)===p&&q.delete(u)}).catch(()=>{})),p}var de=999,fe=1,Nt=8453,Ce="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",kt="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",je="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",Ct="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",jt=".80002105.reverse",pe=/^0x[a-fA-F0-9]{40}$/,$e=new TextEncoder,He=t=>"0x"+Buffer.from(t).toString("hex"),U=t=>He(le($e.encode(t))).slice(0,10),Le=t=>t.toLowerCase().replace(/^0x/,"").padStart(64,"0");function Q(t){let e=new Uint8Array(32);if(t)for(let r of String(t).split(".").reverse()){let n=le($e.encode(r)),s=new Uint8Array(64);s.set(e,0),s.set(n,32),e=le(s)}return He(e)}function he(t){if(!t||t==="0x"||/^0x0*$/.test(t))return"";try{let e=t.slice(2),r=parseInt(e.slice(0,64),16)*2,n=parseInt(e.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let s=e.slice(r+64,r+64+n*2);return Buffer.from(s,"hex").toString("utf8")}catch{return""}}async function D(t,e,r){try{return await ke(t,"eth_call",[{to:e,data:r},"latest"])}catch{return null}}async function $t(t){let e=await D(de,Ce,U("primaryName(address)")+Le(t)),r=he(e);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function Ht(t){let e=await D(de,kt,U("getName(address)")+Le(t)),r=he(e);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function Be(t,e,r){let n=await D(t,r,U("name(bytes32)")+e.slice(2));return he(n)||null}async function Lt(t){let e=Q(`${t.slice(2).toLowerCase()}.addr.reverse`),r=await D(fe,je,U("resolver(bytes32)")+e.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:Be(fe,e,n)}async function Bt(t){let e=Q(t.slice(2).toLowerCase()+jt);return Be(Nt,e,Ct)}var Me=[{source:"hl",fn:$t},{source:"hype",fn:Ht},{source:"ens",fn:Lt},{source:"basename",fn:Bt}];async function Ue(t){if(!pe.test(String(t||"").trim()))return null;let e=String(t).trim();return(await Promise.all(Me.map(async({source:n,fn:s})=>{try{let i=await s(e);return i?{name:i,source:n,address:e}:null}catch{return null}}))).find(Boolean)||null}async function Mt(t){let e=Q(t),r=await D(de,Ce,U("ownerOf(uint256)")+e.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function Ut(t,e,r){let n=Q(e),s=await D(t,r,U("resolver(bytes32)")+n.slice(2));if(!s)return null;let i="0x"+s.slice(-40);if(/^0x0+$/.test(i))return null;let c=await D(t,i,U("addr(bytes32)")+n.slice(2));if(!c)return null;let d="0x"+c.slice(-40);return/^0x0+$/.test(d)?null:d}async function De(t){let e=String(t||"").trim().toLowerCase();if(!e||!e.includes("."))return null;if(e.endsWith(".hl")){let r=await Mt(e);return r?{address:r,source:"hl",name:e}:null}if(e.endsWith(".eth")){let r=await Ut(fe,e,je);return r?{address:r,source:e.endsWith(".base.eth")?"basename":"ens",name:e}:null}return null}var Fe=Me.map(t=>t.source);var ze=`oracle resolve <name-or-address> [--json]
+${JSON.stringify(r??[])}`}async function Bt(t,e,r){return Ie(t,{method:"POST",body:e,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function $e(t,e,r=[],n={}){let o=String(e||""),a=$t(o),i=Nt(t,n);if(!i)throw new Error(`No RPC URL for chainId ${t} (set env from chain registry rpcEnv or pass rpcUrl)`);if(a==="eth_chainid"&&n.cacheChainId!==!1){let s=He.get(i);if(s!=null)return s}let c=n.dedupe!==!1&&!n.signal?Mt(i,o,r):null;if(c&&X.has(c))return X.get(c);let h=(async()=>{let s=await Bt(i,{jsonrpc:"2.0",id:1,method:e,params:r},n),p=Lt(s);return a==="eth_chainid"&&typeof p=="string"&&He.set(i,p),p})();return c&&(X.set(c,h),h.finally(()=>{X.get(c)===h&&X.delete(c)}).catch(()=>{})),h}var pe=999,de=1,Ut=8453,je="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",Dt="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",Le="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",Ft="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",Gt=".80002105.reverse",he=/^0x[a-fA-F0-9]{40}$/,Me=new TextEncoder,Be=t=>"0x"+Buffer.from(t).toString("hex"),U=t=>Be(fe(Me.encode(t))).slice(0,10),Ue=t=>t.toLowerCase().replace(/^0x/,"").padStart(64,"0");function te(t){let e=new Uint8Array(32);if(t)for(let r of String(t).split(".").reverse()){let n=fe(Me.encode(r)),o=new Uint8Array(64);o.set(e,0),o.set(n,32),e=fe(o)}return Be(e)}function me(t){if(!t||t==="0x"||/^0x0*$/.test(t))return"";try{let e=t.slice(2),r=parseInt(e.slice(0,64),16)*2,n=parseInt(e.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let o=e.slice(r+64,r+64+n*2);return Buffer.from(o,"hex").toString("utf8")}catch{return""}}async function D(t,e,r){try{return await $e(t,"eth_call",[{to:e,data:r},"latest"])}catch{return null}}async function zt(t){let e=await D(pe,je,U("primaryName(address)")+Ue(t)),r=me(e);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function Vt(t){let e=await D(pe,Dt,U("getName(address)")+Ue(t)),r=me(e);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function De(t,e,r){let n=await D(t,r,U("name(bytes32)")+e.slice(2));return me(n)||null}async function Jt(t){let e=te(`${t.slice(2).toLowerCase()}.addr.reverse`),r=await D(de,Le,U("resolver(bytes32)")+e.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:De(de,e,n)}async function Yt(t){let e=te(t.slice(2).toLowerCase()+Gt);return De(Ut,e,Ft)}var Fe=[{source:"hl",fn:zt},{source:"hype",fn:Vt},{source:"ens",fn:Jt},{source:"basename",fn:Yt}];async function Ge(t){if(!he.test(String(t||"").trim()))return null;let e=String(t).trim();return(await Promise.all(Fe.map(async({source:n,fn:o})=>{try{let a=await o(e);return a?{name:a,source:n,address:e}:null}catch{return null}}))).find(Boolean)||null}async function Wt(t){let e=te(t),r=await D(pe,je,U("ownerOf(uint256)")+e.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function Xt(t,e,r){let n=te(e),o=await D(t,r,U("resolver(bytes32)")+n.slice(2));if(!o)return null;let a="0x"+o.slice(-40);if(/^0x0+$/.test(a))return null;let i=await D(t,a,U("addr(bytes32)")+n.slice(2));if(!i)return null;let d="0x"+i.slice(-40);return/^0x0+$/.test(d)?null:d}async function ze(t){let e=String(t||"").trim().toLowerCase();if(!e||!e.includes("."))return null;if(e.endsWith(".hl")){let r=await Wt(e);return r?{address:r,source:"hl",name:e}:null}if(e.endsWith(".eth")){let r=await Xt(de,e,Le);return r?{address:r,source:e.endsWith(".base.eth")?"basename":"ens",name:e}:null}return null}var Ve=Fe.map(t=>t.source);var Je=`oracle resolve <name-or-address> [--json]
 
   oracle resolve demi.hl
   oracle resolve vitalik.eth
@@ -10,16 +10,16 @@ ${JSON.stringify(r??[])}`}async function It(t,e,r){return xe(t,{method:"POST",bo
 Reads on-chain name records. No API key: HL Names publishes a paid REST API,
 but the contract answers primaryName(address) for free.
 
-Sources, in priority order: ${Fe.join(", ")}.`;async function Dt(t=[]){let e=t.filter(s=>s!=="--json"),r=t.includes("--json"),n=(e[0]||"").trim();if(!n||n==="--help"||n==="-h")return process.stdout.write(ze+`
-`),n?0:1;try{if(pe.test(n)){let i=await Ue(n);return r?(process.stdout.write(JSON.stringify({address:n,name:i?.name??null,source:i?.source??null})+`
-`),0):i?(process.stdout.write(`${n}
-  ${i.name}  [${i.source}]
+Sources, in priority order: ${Ve.join(", ")}.`;async function Kt(t=[]){let e=t.filter(o=>o!=="--json"),r=t.includes("--json"),n=(e[0]||"").trim();if(!n||n==="--help"||n==="-h")return process.stdout.write(Je+`
+`),n?0:1;try{if(he.test(n)){let a=await Ge(n);return r?(process.stdout.write(JSON.stringify({address:n,name:a?.name??null,source:a?.source??null})+`
+`),0):a?(process.stdout.write(`${n}
+  ${a.name}  [${a.source}]
 `),0):(process.stdout.write(`${n}
   no name record found
-`),0)}let s=await De(n);return r?(process.stdout.write(JSON.stringify({name:n,address:s?.address??null,source:s?.source??null})+`
-`),0):s?(process.stdout.write(`${n}
-  ${s.address}  [${s.source}]
+`),0)}let o=await ze(n);return r?(process.stdout.write(JSON.stringify({name:n,address:o?.address??null,source:o?.source??null})+`
+`),0):o?(process.stdout.write(`${n}
+  ${o.address}  [${o.source}]
 `),0):(process.stdout.write(`${n}
   unresolved (no owner record)
-`),0)}catch(s){return process.stderr.write(`resolve failed: ${s?.message||s}
-`),1}}var cr={name:"resolve",summary:"resolve .hl/.hype/.eth names to addresses and back",usage:ze,async run(t){return Dt(t.argv||[])}};export{cr as default};
+`),0)}catch(o){return process.stderr.write(`resolve failed: ${o?.message||o}
+`),1}}var Tr={name:"resolve",summary:"resolve .hl/.hype/.eth names to addresses and back",usage:Je,async run(t){return Kt(t.argv||[])}};export{Tr as default};

package/dist/cli/commands/session-vault.mjs

@@ -1,4 +1,4 @@
-import{homedir as E}from"node:os";import{join as w}from"node:path";var I=process.env.ORACLE_PUBLIC_DESKTOP==="1",X=I?process.env.ORACLE_CONFIG_DIR||w(E(),".config","oracle"):w(E(),".config","oracle"),xe=I?X:w(E(),".config","mad-desk");var A={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},ge=new Map(Object.values(A).map(e=>[e.chainId,e]));function K(e,t="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${t} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${t} must be a number or decimal string`);return e}throw new Error(`${t} must be a number or decimal string`)}function p(e,t="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${t} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let n=K(e,t);if(n==="")throw new Error(`${t} is required`);if(!/^-?\d+$/.test(n)&&!/^0x[0-9a-fA-F]+$/.test(n))throw new Error(`${t} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(n)}`);try{return BigInt(n)}catch{throw new Error(`${t} must be an integer, got ${JSON.stringify(n)}`)}}var _=Object.freeze({SAFE:"safe",KERNEL_ZERODEV:"kernel-zerodev",BICONOMY_NEXUS:"biconomy-nexus",PERMISSIONLESS_VIEM:"permissionless-viem"}),Ae=Object.freeze(Object.values(_)),_e=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked"}),Ne=1440*60*1e3;var N=["0x000000000022d473030f116ddee9f6b43ac78ba3"],O={4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7","0x1f7d7550b1b028f7571e69a784071f0205fd2efa","0x0bd7d308f8e1639fab988df18a8011f41eacad73","0x5fc5360d0400a0fd4f2af552add042d716f1d168","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x3d4e44eb1374240ce5f1b871ab261cd16335b76a","0x33128a8fc17869897dce68ed026d694621f6fdfd","0x4200000000000000000000000000000000000006","0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5","0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0","0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x61ffe014ba17989e743c5f6cb21bf9697530b21e","0x82af49447d8a07e3bd95bd0d56f35241523fbab1","0xaf88d065e77c8cc2239327c5edb3a432268e5831","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110","0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41","0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6"],1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983","0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2","0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x817997ca8394e26cce3de3a076a4889b27dbf9de","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83","0x779ded0c9e1022225f8e0630b35a9b54be713736","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"]},R={1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983"]};import{encodeFunctionData as V}from"viem";import{keccak256 as C,concat as P,getContractAddress as J}from"viem";import{readFileSync as Z}from"node:fs";import{dirname as Q,join as ee}from"node:path";import{fileURLToPath as te}from"node:url";var S="0x4e59b44847b379578588920ca78fbf26c0b4956c";var L="0x365dc643926d7084c9e2f1ad68eb1a944b3aac8abe83c933aaf40c014579414f",m="0xe776361e49a5ba2c978483b2e2717e45f6fe8577172e6c5e2c1d5b0c7bd34e26",D="0x4360b0c758245b325bea83328c6444f8f4b06355388708bc9ee1dc12092d3c52",ne=Object.freeze({1:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Ethereum Pectra (2025-05-07) activated EIP-7702. https://ethereum.org/roadmap/pectra/7702/"}),10:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC mainnet.optimism.io 2026-08-25: eth_estimateGas type=0x4 \u2192 'EIP-7702 authorization list has invalid fields' (type-4 parsed)."}),56:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC bsc-dataseed.binance.org 2026-08-25: type=0x4 \u2192 'EIP-7702 transaction with empty auth list'."}),137:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Polygon mainnet. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),988:Object.freeze({status:"ready",path:"session-vault",evidence:"No EIP-7702 (type-4 == type-2 21000). Nick factory present. Vault stack."}),999:Object.freeze({status:"ready",path:"session-vault",evidence:"Live RPC: EIP-7702 authorization list not supported. Nick factory present. Vault stack."}),2741:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702-specific RPC behavior; zkSync-family AA. Vault is the portable EVM lock."}),4663:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC rpc.mainnet.chain.robinhood.com 2026-08-25: type-4 empty-auth \u2192 EIP-7702 empty auth list. Nick factory present."}),8453:Object.freeze({status:"draft",path:"eip7702-delegate",evidence:"Foundry 9/9 Prague + committed deployedBytecodeHash. No on-chain module address yet."}),42161:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Arbitrum. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),43114:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702 activation (type-4 ignored as 21000). Nick factory present. Vault stack."})});function x(e){return ne[Number(e)]||null}function M(e){return x(e)?.path==="eip7702-delegate"}function T(e){return x(e)?.path==="session-vault"}function z(e){return M(e)||T(e)}var re=/^0x[0-9a-fA-F]{40}$/;function h(e){let t=String(e||"").trim().toLowerCase();if(!re.test(t))throw new Error("session-chain-plan: owner must be a 20-byte address");return C(P([L,t]))}function y(e){return J({opcode:"CREATE2",from:S,salt:h(e),bytecodeHash:m}).toLowerCase()}var b;function se(){if(b)return b;let e=ee(Q(te(import.meta.url)),"../../contracts/session-delegate/vault-creation.hex"),t=Z(e,"utf8").trim().toLowerCase();if(!t.startsWith("0x")||t.length<10)throw new Error("session-chain-plan: vault creation bytecode missing");if(C(t)!==m)throw new Error("session-chain-plan: vault creation bytecode does not match VAULT_INIT_CODE_HASH");return b=t,b}function $(e){let t=h(e);return P([t,se()])}var ae=/^0x[0-9a-fA-F]{40}$/;var k=!0;var Ye=Object.freeze({});function g(e){let t=Number(e);if(!z(t)){let r=x(t)?.evidence||"no session path";throw new Error(`pinned-session-module: chain ${t} refused \u2014 ${r}`)}return t}function oe(e,t){let n=g(e),r=h(t),s=y(t),a=$(t);return Object.freeze({ok:!0,exec:!1,requiresUserSignature:!0,signingReady:!1,userCanSign:!0,broadcastReady:!1,executionReady:!1,chainId:n,stack:"session-vault",from:String(t).trim().toLowerCase(),to:S,value:"0",data:a,salt:r,saltScheme:"keccak256(oracle.session.vault.v1 || owner)",initCodeHash:m,predictedModule:s,bytecodeHash:D,initialize:Object.freeze({status:"blocked",reason:"recovery address not bound \u2014 name a cold key that is not the owner"}),note:"Unsigned CREATE2. Oracle will not broadcast. Fuse still off."})}var ie=(1n<<128n)-1n,ce=720*60*60*1e3;function de({capWei:e,expiresAtMs:t,nowMs:n=Date.now()}={}){let r=p(e??"0","capWei");if(r<=0n||r===ie)throw new Error("pinned-session-module: cap cannot be zero or limitless");let s=Number(t),a=Number(n);if(!Number.isFinite(s)||!Number.isFinite(a)||s<=a)throw new Error("pinned-session-module: expiry must be in the future");if(s-a>ce)throw new Error("pinned-session-module: expiry cannot exceed 30 days");return Object.freeze({ok:!0,capWei:r.toString(),expiresAtMs:s})}var fe=[{type:"function",name:"initialize",stateMutability:"nonpayable",inputs:[{name:"sessionOwner",type:"address"},{name:"sessionAgent",type:"address"},{name:"sessionRecovery",type:"address"},{name:"sessionGuardian",type:"address"},{name:"sessionExpiry",type:"uint48"},{name:"sessionCapWei",type:"uint128"},{name:"sessionDelay",type:"uint48"},{name:"targets",type:"address[]"}],outputs:[]}];function v(e,t){return e==null||String(e).trim()===""?null:c(e,t)}function U(e={}){let t=g(e.chainId),n=v(e.owner,"owner"),r=v(e.recovery,"recovery"),s=v(e.agent,"agent");if(!n)throw new Error("pinned-session-module: owner is required (the user's wallet)");if(!r)throw new Error("pinned-session-module: recovery is required (the user's spare key, never a house default)");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s&&(s===n||s===r))throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=e.delaySeconds==null?3600:Number(e.delaySeconds);if(!Number.isFinite(a)||a<3600||a>720*3600)throw new Error("pinned-session-module: delay must be 1 hour\u201330 days");let i=oe(t,n),l=e.guardian?c(e.guardian,"guardian"):null,d=[];Array.isArray(e.targets)&&e.targets.length&&(d=e.targets.map(Y=>W(Y,{chainId:t,banned:[n,r,s,l]})));let f={ok:!0,optional:!0,defaultOn:!1,exec:!1,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t,owner:n,recovery:r,agent:s||null,guardian:l,predictedModule:i.predictedModule,deploy:i};if(!s||e.capWei==null||e.expiresAtMs==null)return Object.freeze({...f,initialize:Object.freeze({status:"blocked",reason:"agent, cap, and expiry are required \u2014 no house defaults",targets:d}),note:"Optional. Unsigned. User signs. Fuse off."});if(de({capWei:e.capWei,expiresAtMs:e.expiresAtMs,nowMs:e.nowMs}),d.length===0)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let u=Math.floor(Number(e.expiresAtMs)/1e3),q=V({abi:fe,functionName:"initialize",args:[n,s,r,f.guardian||"0x0000000000000000000000000000000000000000",u,BigInt(e.capWei),a,d]});return Object.freeze({...f,initialize:Object.freeze({status:"ready",exec:!1,requiresUserSignature:!0,userCanSign:!0,to:i.predictedModule,data:q,value:"0",targets:d,capWei:String(e.capWei),expiresAtMs:Number(e.expiresAtMs),delaySeconds:a}),userCanSign:!0,note:"Optional. Unsigned deploy + initialize. User wallet signs. Oracle does not broadcast. Fuse off."})}function c(e,t){let n=String(e||"").trim().toLowerCase();if(!ae.test(n))throw new Error(`pinned-session-module: ${t} must be a 20-byte address`);return n}function W(e,{chainId:t,banned:n=[]}={}){let r=c(e,"target");if(r==="0x0000000000000000000000000000000000000000"||n.map(i=>String(i||"").toLowerCase()).includes(r))throw new Error("pinned-session-module: target cannot be owner, recovery, agent, guardian, or zero");if(new Set([...R[Number(t)]||[],...O[Number(t)]||[],...N].map(i=>String(i).toLowerCase())).has(r))throw new Error("pinned-session-module: swap routers are not native-pay targets");return r}var ue=[{type:"function",name:"execute",stateMutability:"payable",inputs:[{name:"target",type:"address"},{name:"value",type:"uint256"},{name:"data",type:"bytes"}],outputs:[]}];function j(e,t){return`${Number(e)}:${c(t,"owner")}`}function F(e={}){if(!k)throw new Error("pinned-session-module: optional vault spend is off");let t=g(e.chainId),n=c(e.owner,"owner"),r=c(e.recovery,"recovery"),s=c(e.agent,"agent");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s===n||s===r)throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=(e.targets||[]).map(u=>c(u,"target"));if(!a.length)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let i=e.guardian?c(e.guardian,"guardian"):null;for(let u of a)W(u,{chainId:t,banned:[n,r,s,i]});let l=y(n),d=Object.freeze({optIn:!0,chainId:t,owner:n,recovery:r,agent:s,vault:l,targets:Object.freeze([...a])}),f=e.store;return f&&typeof f.set=="function"&&f.set(j(t,n),d),d}function le(e={}){let t=e.store;if(!t||typeof t.get!="function")return null;let n=g(e.chainId),r=c(e.owner,"owner");return t.get(j(n,r))||null}function B(e={}){if(!k)throw new Error("pinned-session-module: optional vault spend is off");let t=le(e);if(!t)throw new Error("pinned-session-module: not opted in");let n=c(e.target,"target");if(!t.targets.includes(n))throw new Error("pinned-session-module: target not permitted");let r=p(e.valueWei??"0","valueWei");if(r<0n)throw new Error("pinned-session-module: valueWei must not be negative");let s=V({abi:ue,functionName:"execute",args:[n,r,"0x"]});return Object.freeze({ok:!0,optIn:!0,exec:!1,requiresUserSignature:!0,userCanSign:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t.chainId,from:t.agent,to:t.vault,value:"0",data:s,target:n,valueWei:r.toString(),note:"Unsigned vault.execute. Agent key signs. Oracle does not broadcast."})}var pe=`oracle session-vault \u2014 optional per-user vault (unsigned)
+import{homedir as g}from"node:os";import{join as E}from"node:path";var O=process.env.ORACLE_PUBLIC_DESKTOP==="1",J=O?process.env.ORACLE_CONFIG_DIR||E(g(),".config","oracle"):E(g(),".config","oracle"),Ee=O?J:E(g(),".config","mad-desk");var C={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Se=new Map(Object.values(C).map(e=>[e.chainId,e]));function Z(e,t="value"){if(typeof e=="number"){if(!Number.isFinite(e))throw new Error(`${t} must be a finite number`);if(Math.abs(e)>Number.MAX_SAFE_INTEGER)throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);if(Number.isInteger(e)&&!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return String(e)}if(typeof e=="string"){if(e!==e.trim())throw new Error(`${t} must be a number or decimal string`);return e}throw new Error(`${t} must be a number or decimal string`)}function b(e,t="amount"){if(typeof e=="bigint")return e;if(typeof e=="number"){if(!Number.isInteger(e))throw new Error(`${t} must be an integer`);if(!Number.isSafeInteger(e))throw new Error(`${t} exceeds safe integer precision \u2014 pass it as a decimal string or BigInt so the exact value is preserved`);return BigInt(e)}let n=Z(e,t);if(n==="")throw new Error(`${t} is required`);if(!/^-?\d+$/.test(n)&&!/^0x[0-9a-fA-F]+$/.test(n))throw new Error(`${t} must be an integer in decimal or 0x-hex form, got ${JSON.stringify(n)}`);try{return BigInt(n)}catch{throw new Error(`${t} must be an integer, got ${JSON.stringify(n)}`)}}var N=Object.freeze({SAFE:"safe",KERNEL_ZERODEV:"kernel-zerodev",BICONOMY_NEXUS:"biconomy-nexus",PERMISSIONLESS_VIEM:"permissionless-viem"}),Ce=Object.freeze(Object.values(N)),Ne=Object.freeze({ACTIVE:"active",EXPIRED:"expired",REVOKED:"revoked"}),Re=1440*60*1e3;var R=["0x000000000022d473030f116ddee9f6b43ac78ba3"],P={4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7","0x1f7d7550b1b028f7571e69a784071f0205fd2efa","0x0bd7d308f8e1639fab988df18a8011f41eacad73","0x5fc5360d0400a0fd4f2af552add042d716f1d168","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x3d4e44eb1374240ce5f1b871ab261cd16335b76a","0x33128a8fc17869897dce68ed026d694621f6fdfd","0x4200000000000000000000000000000000000006","0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0xbe6d8f0d05cc4be24d5167a3ef062215be6d18a5","0x254cf9e1e6e233aa1ac962cb9b05b2cfeaae15b0","0x5e7bb104d84c7cb9b682aac2f3d509f5f406809a","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x61ffe014ba17989e743c5f6cb21bf9697530b21e","0x82af49447d8a07e3bd95bd0d56f35241523fbab1","0xaf88d065e77c8cc2239327c5edb3a432268e5831","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110","0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41","0x7452c558d45f8afc8c83dae62c3f8a5be19c71f6"],1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e","0xc92e8bdf79f0507f65a392b0ab4667716bfe0110"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983","0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2","0x820f5ffc5b525cd4d88cd91acf2c28f16530cc68"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x817997ca8394e26cce3de3a076a4889b27dbf9de","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xeaf7ac0fdf150cdd89340fb762d83848de6a7b83","0x779ded0c9e1022225f8e0630b35a9b54be713736","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"]},L={1:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x4cd00e387622c35bddb9b4c962c136462338bc31","0x6a000f20005980200259b80c5102003040001068","0xae563e3f8219521950555f5962419c8919758ea2","0x45312ea0eff7e09c83cbe249fa1d7598c4c8cd4e"],10:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xe2fa4e1d17725e72dcdafe943ecf45df4b9e285b","0x0dcded3545d565ba3b19e683431381007245d983"],56:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xa72c85c258a81761433b4e8da60505fe3dd551cc"],137:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x0dcded3545d565ba3b19e683431381007245d983"],988:["0x026f252016a7c47cdef1f05a3fc9e20c92a49c37","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1","0x3dea4be5615974f31624404ef288ba3b36dfeb83","0xbc6f7725f08232c151b528bdfcaaf89993ca86ee"],999:["0x0a0758d937d1059c356d4714e57f5df0239bce1a","0xd2002373543ce3527023c75e7518c274a51ce712"],2741:["0x4f8c9056bb8a3616693a76922fa35d53c056e5b3"],4663:["0xcaf681a66d020601342297493863e78c959e5cb2","0xb477751b76cf82d00a686a1232f5fcd772414af3","0xff5cb29241f002ffed2eaa224e3e996d24a6e8d1"],8453:["0x2626664c2603336e57b271c5c0b26f421741e481","0x6ff5693b99212da76ad316178a184ab56d299b43","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0x3f170631ed9821ca51a59d996ab095162438dc10","0x4f37a9d177470499a2dd084621020b023fcffc1f"],42161:["0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45","0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0x888888888889758f76e7103c6cbf23abbf58f946","0xeaedc32a51c510d35ebc11088fd5ff2b47aacf2e","0x2191718cd32d02b8e60badffea33e4b5dd9a0a0d"],43114:["0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae","0xf39ca6ede9bf7820a952b52f3c94af526bab9015","0x0dcded3545d565ba3b19e683431381007245d983"]};import{encodeFunctionData as U}from"viem";import{keccak256 as w,concat as S,getContractAddress as Q,encodeAbiParameters as ee}from"viem";import{readFileSync as te}from"node:fs";import{dirname as ne,join as re}from"node:path";import{fileURLToPath as se}from"node:url";var y="0x4e59b44847b379578588920ca78fbf26c0b4956c";var D="0x365dc643926d7084c9e2f1ad68eb1a944b3aac8abe83c933aaf40c014579414f",v="0x6b557254c043c66fb0309ab9b8886340b5ce447295621ccd1b23862388bede7f",M="0xb7df21935c0b1ffe7da73781087bedfc0df078c47ff9d7187a8d866fd9f0e57a",ae=Object.freeze({1:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Ethereum Pectra (2025-05-07) activated EIP-7702. https://ethereum.org/roadmap/pectra/7702/"}),10:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC mainnet.optimism.io 2026-08-25: eth_estimateGas type=0x4 \u2192 'EIP-7702 authorization list has invalid fields' (type-4 parsed)."}),56:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC bsc-dataseed.binance.org 2026-08-25: type=0x4 \u2192 'EIP-7702 transaction with empty auth list'."}),137:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Polygon mainnet. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),988:Object.freeze({status:"ready",path:"session-vault",evidence:"No EIP-7702 (type-4 == type-2 21000). Nick factory present. Vault stack."}),999:Object.freeze({status:"ready",path:"session-vault",evidence:"Live RPC: EIP-7702 authorization list not supported. Nick factory present. Vault stack."}),2741:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702-specific RPC behavior; zkSync-family AA. Vault is the portable EVM lock."}),4663:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Live RPC rpc.mainnet.chain.robinhood.com 2026-08-25: type-4 empty-auth \u2192 EIP-7702 empty auth list. Nick factory present."}),8453:Object.freeze({status:"draft",path:"eip7702-delegate",evidence:"Foundry 9/9 Prague + committed deployedBytecodeHash. No on-chain module address yet."}),42161:Object.freeze({status:"ready",path:"eip7702-delegate",evidence:"Coinbase Developer Docs: EIP-7702 sponsored delegations on Arbitrum. https://docs.cdp.coinbase.com/wallets/using-wallets/eip-7702"}),43114:Object.freeze({status:"ready",path:"session-vault",evidence:"No 7702 activation (type-4 ignored as 21000). Nick factory present. Vault stack."})});function x(e){return ae[Number(e)]||null}function T(e){return x(e)?.path==="eip7702-delegate"}function z(e){return x(e)?.path==="session-vault"}function $(e){return T(e)||z(e)}var oe=/^0x[0-9a-fA-F]{40}$/;function l(e){let t=String(e||"").trim().toLowerCase();if(!oe.test(t)||/^0x0{40}$/.test(t))throw new Error("session-chain-plan: owner must be a 20-byte address");return w(S([D,t]))}function I(e){return Q({opcode:"CREATE2",from:y,salt:l(e),bytecodeHash:A(e)}).toLowerCase()}var m;function ie(){if(m)return m;let e=re(ne(se(import.meta.url)),"../../contracts/session-delegate/vault-creation.hex"),t=te(e,"utf8").trim().toLowerCase();if(!t.startsWith("0x")||t.length<10)throw new Error("session-chain-plan: vault creation bytecode missing");if(w(t)!==v)throw new Error("session-chain-plan: vault creation bytecode does not match VAULT_CREATION_CODE_HASH");return m=t,m}function V(e){let t=l(e);return S([t,k(e)])}function k(e){return l(e),S([ie(),ee([{type:"address"}],[String(e).trim().toLowerCase()])])}function A(e){return w(k(e))}var ce=/^0x[0-9a-fA-F]{40}$/;var W=!0;var Je=Object.freeze({});function h(e){let t=Number(e);if(!$(t)){let r=x(t)?.evidence||"no session path";throw new Error(`pinned-session-module: chain ${t} refused \u2014 ${r}`)}return t}function de(e,t){let n=h(e),r=l(t),s=I(t),a=V(t);return Object.freeze({ok:!0,exec:!1,requiresUserSignature:!0,signingReady:!1,userCanSign:!0,broadcastReady:!1,executionReady:!1,chainId:n,stack:"session-vault",from:String(t).trim().toLowerCase(),to:y,value:"0",data:a,salt:r,saltScheme:"keccak256(oracle.session.vault.v1 || owner)",creationCodeHash:v,initCodeHash:A(t),predictedModule:s,bytecodeHash:M,initialize:Object.freeze({status:"blocked",reason:"recovery address not bound \u2014 name a cold key that is not the owner"}),note:"Unsigned CREATE2. Oracle will not broadcast. Fuse still off."})}var fe=(1n<<128n)-1n,ue=720*60*60*1e3;function le({capWei:e,expiresAtMs:t,nowMs:n=Date.now()}={}){let r=b(e??"0","capWei");if(r<=0n||r===fe)throw new Error("pinned-session-module: cap cannot be zero or limitless");let s=Number(t),a=Number(n);if(!Number.isFinite(s)||!Number.isFinite(a)||s<=a)throw new Error("pinned-session-module: expiry must be in the future");if(s-a>ue)throw new Error("pinned-session-module: expiry cannot exceed 30 days");return Object.freeze({ok:!0,capWei:r.toString(),expiresAtMs:s})}var pe=[{type:"function",name:"initialize",stateMutability:"nonpayable",inputs:[{name:"sessionOwner",type:"address"},{name:"sessionAgent",type:"address"},{name:"sessionRecovery",type:"address"},{name:"sessionGuardian",type:"address"},{name:"sessionExpiry",type:"uint48"},{name:"sessionCapWei",type:"uint128"},{name:"sessionDelay",type:"uint48"},{name:"targets",type:"address[]"}],outputs:[]}];function _(e,t){return e==null||String(e).trim()===""?null:c(e,t)}function H(e={}){let t=h(e.chainId),n=_(e.owner,"owner"),r=_(e.recovery,"recovery"),s=_(e.agent,"agent");if(!n)throw new Error("pinned-session-module: owner is required (the user's wallet)");if(!r)throw new Error("pinned-session-module: recovery is required (the user's spare key, never a house default)");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s&&(s===n||s===r))throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=e.delaySeconds==null?3600:Number(e.delaySeconds);if(!Number.isFinite(a)||a<3600||a>720*3600)throw new Error("pinned-session-module: delay must be 1 hour\u201330 days");let i=de(t,n),p=e.guardian?c(e.guardian,"guardian"):null,d=[];Array.isArray(e.targets)&&e.targets.length&&(d=e.targets.map(K=>j(K,{chainId:t,banned:[n,r,s,p]})));let f={ok:!0,optional:!0,defaultOn:!1,exec:!1,requiresUserSignature:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t,owner:n,recovery:r,agent:s||null,guardian:p,predictedModule:i.predictedModule,deploy:i};if(!s||e.capWei==null||e.expiresAtMs==null)return Object.freeze({...f,initialize:Object.freeze({status:"blocked",reason:"agent, cap, and expiry are required \u2014 no house defaults",targets:d}),note:"Optional. Unsigned. User signs. Fuse off."});if(le({capWei:e.capWei,expiresAtMs:e.expiresAtMs,nowMs:e.nowMs}),d.length===0)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let u=Math.floor(Number(e.expiresAtMs)/1e3),X=U({abi:pe,functionName:"initialize",args:[n,s,r,f.guardian||"0x0000000000000000000000000000000000000000",u,BigInt(e.capWei),a,d]});return Object.freeze({...f,initialize:Object.freeze({status:"ready",exec:!1,requiresUserSignature:!0,userCanSign:!0,to:i.predictedModule,data:X,value:"0",targets:d,capWei:String(e.capWei),expiresAtMs:Number(e.expiresAtMs),delaySeconds:a}),userCanSign:!0,note:"Optional. Unsigned deploy + initialize. User wallet signs. Oracle does not broadcast. Fuse off."})}function c(e,t){let n=String(e||"").trim().toLowerCase();if(!ce.test(n))throw new Error(`pinned-session-module: ${t} must be a 20-byte address`);return n}function j(e,{chainId:t,banned:n=[]}={}){let r=c(e,"target");if(r==="0x0000000000000000000000000000000000000000"||n.map(i=>String(i||"").toLowerCase()).includes(r))throw new Error("pinned-session-module: target cannot be owner, recovery, agent, guardian, or zero");if(new Set([...L[Number(t)]||[],...P[Number(t)]||[],...R].map(i=>String(i).toLowerCase())).has(r))throw new Error("pinned-session-module: swap routers are not native-pay targets");return r}var be=[{type:"function",name:"execute",stateMutability:"payable",inputs:[{name:"target",type:"address"},{name:"value",type:"uint256"},{name:"data",type:"bytes"}],outputs:[]}];function F(e,t){return`${Number(e)}:${c(t,"owner")}`}function B(e={}){if(!W)throw new Error("pinned-session-module: optional vault spend is off");let t=h(e.chainId),n=c(e.owner,"owner"),r=c(e.recovery,"recovery"),s=c(e.agent,"agent");if(n===r)throw new Error("pinned-session-module: recovery cannot be the owner");if(s===n||s===r)throw new Error("pinned-session-module: agent cannot be owner or recovery");let a=(e.targets||[]).map(u=>c(u,"target"));if(!a.length)throw new Error("pinned-session-module: native pay targets required \u2014 no router default");let i=e.guardian?c(e.guardian,"guardian"):null;for(let u of a)j(u,{chainId:t,banned:[n,r,s,i]});let p=I(n),d=Object.freeze({optIn:!0,chainId:t,owner:n,recovery:r,agent:s,vault:p,targets:Object.freeze([...a])}),f=e.store;return f&&typeof f.set=="function"&&f.set(F(t,n),d),d}function me(e={}){let t=e.store;if(!t||typeof t.get!="function")return null;let n=h(e.chainId),r=c(e.owner,"owner");return t.get(F(n,r))||null}function G(e={}){if(!W)throw new Error("pinned-session-module: optional vault spend is off");let t=me(e);if(!t)throw new Error("pinned-session-module: not opted in");let n=c(e.target,"target");if(!t.targets.includes(n))throw new Error("pinned-session-module: target not permitted");let r=b(e.valueWei??"0","valueWei");if(r<0n)throw new Error("pinned-session-module: valueWei must not be negative");let s=U({abi:be,functionName:"execute",args:[n,r,"0x"]});return Object.freeze({ok:!0,optIn:!0,exec:!1,requiresUserSignature:!0,userCanSign:!0,signingReady:!1,broadcastReady:!1,executionReady:!1,chainId:t.chainId,from:t.agent,to:t.vault,value:"0",data:s,target:n,valueWei:r.toString(),note:"Unsigned vault.execute. Agent key signs. Oracle does not broadcast."})}var xe=`oracle session-vault \u2014 optional per-user vault (unsigned)
 
   oracle session-vault prepare ...
   oracle session-vault spend --chain <id> --owner 0x --recovery 0x --agent 0x \\
@@ -7,9 +7,9 @@ import{homedir as E}from"node:os";import{join as w}from"node:path";var I=process
 prepare: unsigned CREATE2 + initialize. Owner wallet signs.
 spend: unsigned vault.execute. Agent key signs. Skip = Oracle unchanged.
 7702 is not a lock. Oracle does not broadcast.
-`;function o(e,t){let n=e.indexOf(t);return n<0||n+1>=e.length?null:e[n+1]}function H(e,t){let n=[];for(let r=0;r<e.length;r++)e[r]===t&&e[r+1]&&n.push(e[++r]);return n}function G(e,t){return e.exec||e.broadcastReady||e.executionReady?(t.write(`oracle session-vault: refused \u2014 ticket was execution-ready
-`),!0):!1}var Je={name:"session-vault",summary:"optional unsigned vault prepare/spend (no broadcast)",group:"prepare",usage:"oracle session-vault prepare|spend --chain <id> --owner 0x ...",async run(e){let t=e.argv||[],n=process.stdout,r=process.stderr;if(!t.length||t[0]==="--help"||t[0]==="-h"||t[0]==="help")return n.write(pe),0;let s=t.slice(1);try{if(t[0]==="prepare"){let a=U({chainId:Number(o(s,"--chain")),owner:o(s,"--owner"),recovery:o(s,"--recovery"),agent:o(s,"--agent"),capWei:o(s,"--cap-wei"),expiresAtMs:o(s,"--expires-ms")==null?null:Number(o(s,"--expires-ms")),targets:H(s,"--target")});return G(a,r)?1:(n.write(JSON.stringify(a,null,2)+`
-`),0)}if(t[0]==="spend"){let a=new Map;F({chainId:Number(o(s,"--chain")),owner:o(s,"--owner"),recovery:o(s,"--recovery"),agent:o(s,"--agent"),targets:H(s,"--target"),store:a});let i=B({chainId:Number(o(s,"--chain")),owner:o(s,"--owner"),target:o(s,"--pay")||o(s,"--target"),valueWei:o(s,"--value-wei"),store:a});return G(i,r)?1:(n.write(JSON.stringify(i,null,2)+`
+`;function o(e,t){let n=e.indexOf(t);return n<0||n+1>=e.length?null:e[n+1]}function q(e,t){let n=[];for(let r=0;r<e.length;r++)e[r]===t&&e[r+1]&&n.push(e[++r]);return n}function Y(e,t){return e.exec||e.broadcastReady||e.executionReady?(t.write(`oracle session-vault: refused \u2014 ticket was execution-ready
+`),!0):!1}var et={name:"session-vault",summary:"optional unsigned vault prepare/spend (no broadcast)",group:"prepare",usage:"oracle session-vault prepare|spend --chain <id> --owner 0x ...",async run(e){let t=e.argv||[],n=process.stdout,r=process.stderr;if(!t.length||t[0]==="--help"||t[0]==="-h"||t[0]==="help")return n.write(xe),0;let s=t.slice(1);try{if(t[0]==="prepare"){let a=H({chainId:Number(o(s,"--chain")),owner:o(s,"--owner"),recovery:o(s,"--recovery"),agent:o(s,"--agent"),capWei:o(s,"--cap-wei"),expiresAtMs:o(s,"--expires-ms")==null?null:Number(o(s,"--expires-ms")),targets:q(s,"--target")});return Y(a,r)?1:(n.write(JSON.stringify(a,null,2)+`
+`),0)}if(t[0]==="spend"){let a=new Map;B({chainId:Number(o(s,"--chain")),owner:o(s,"--owner"),recovery:o(s,"--recovery"),agent:o(s,"--agent"),targets:q(s,"--target"),store:a});let i=G({chainId:Number(o(s,"--chain")),owner:o(s,"--owner"),target:o(s,"--pay")||o(s,"--target"),valueWei:o(s,"--value-wei"),store:a});return Y(i,r)?1:(n.write(JSON.stringify(i,null,2)+`
 `),0)}return r.write(`oracle session-vault: prepare | spend only. Unsigned. No broadcast.
 `),1}catch(a){return r.write(`oracle session-vault: ${a.message}
-`),1}}};export{Je as default};
+`),1}}};export{et as default};