@oracle-agent/oracle 0.35.45 → 0.35.47
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent-sessions.mjs +19 -19
- package/dist/artifacts/token-dashboard.mjs +1 -0
- package/dist/assets/graphics/oracle_card.py +60 -0
- package/dist/assets/graphics/pnl-samples.mjs +22 -0
- package/dist/assets/skills/oracle-desk-product/SKILL.md +1 -1
- package/dist/assets/skills/web-research.md +6 -2
- package/dist/automation-plan.d.mts +63 -0
- package/dist/automation-plan.mjs +1 -0
- package/dist/bin/desk-server.mjs +34 -31
- package/dist/bin/oracle-data-mcp.mjs +20 -19
- package/dist/bin/oracle-gateway.mjs +49 -48
- package/dist/bin/oracle-investigate.mjs +4 -4
- package/dist/bin/oracle-launch-radar-shadow.mjs +6 -6
- package/dist/bin/oracle-mev-arb-shadow.mjs +6 -6
- package/dist/bin/oracle-mev-shadow.mjs +6 -6
- package/dist/bin/oracle-public-server.mjs +5 -5
- package/dist/bin/oracle-route.mjs +16 -16
- package/dist/bin/oracle-scan.mjs +6 -6
- package/dist/bin/oracle-telegram-mcp.mjs +13 -12
- package/dist/chains.mjs +1 -1
- package/dist/cli/commands/account.mjs +11 -11
- package/dist/cli/commands/agent-session.mjs +21 -21
- package/dist/cli/commands/chat.mjs +216 -214
- package/dist/cli/commands/data.mjs +38 -35
- package/dist/cli/commands/doctor.mjs +5 -5
- package/dist/cli/commands/eval.mjs +147 -143
- package/dist/cli/commands/farm.mjs +6 -6
- package/dist/cli/commands/follow.mjs +48 -37
- package/dist/cli/commands/mint.mjs +12 -11
- package/dist/cli/commands/model.mjs +219 -217
- package/dist/cli/commands/quickstart.mjs +6 -6
- package/dist/cli/commands/receipt.mjs +5 -5
- package/dist/cli/commands/resolve.mjs +5 -5
- package/dist/cli/commands/session-vault.mjs +3 -3
- package/dist/cli/commands/snipe.mjs +9 -9
- package/dist/cli/commands/swap.mjs +11 -11
- package/dist/cli/commands/telegram.mjs +11 -10
- package/dist/cli/commands/venues.mjs +2 -2
- package/dist/data/chart-artifact.mjs +2 -0
- package/dist/data/desk-data.mjs +32 -29
- package/dist/data/holder-table.mjs +3 -0
- package/dist/data/market-tape.mjs +1 -0
- package/dist/data/names.mjs +3 -3
- package/dist/data/providers/farming.mjs +2 -2
- package/dist/data/providers/lp-destination-discovery.mjs +4 -4
- package/dist/index.mjs +50 -47
- package/dist/investigator/index.mjs +2 -2
- package/dist/launch-radar/index.mjs +5 -5
- package/dist/lp/index.mjs +5 -0
- package/dist/nft/universal-mint-router.mjs +4 -4
- package/dist/notifications/contract-watchman.mjs +4 -0
- package/dist/notifications/index.mjs +7 -7
- package/dist/router/index.mjs +3 -3
- package/dist/router/prepare-bridge.mjs +2 -2
- package/dist/router/prepare-route.mjs +3 -3
- package/dist/scanner/index.mjs +3 -3
- package/dist/strategy/index.mjs +5 -3
- package/dist/telegram/chart-card.mjs +5 -0
- package/dist/telegram/market-commands.mjs +2 -0
- package/dist/tui/standalone-client.mjs +77 -76
- package/package.json +10 -1
- package/public/oracle-splash/docs/browser-and-web/index.html +3 -3
- package/public/oracle-splash/docs/connectors/index.html +3 -3
- package/public/oracle-splash/docs/getting-started/index.html +2 -2
- package/public/oracle-splash/docs/index.html +3 -3
- package/public/oracle-splash/docs/reference/index.html +2 -2
- package/public/oracle-splash/docs/security/index.html +2 -2
- package/public/oracle-splash/docs/using-oracle/index.html +2 -2
- package/server.json +2 -2
|
@@ -1,10 +1,15 @@
|
|
|
1
|
-
var Ze="0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef",_e={1:["https://mainnet.gateway.tenderly.co","https://eth.drpc.org","https://rpc.flashbots.net"],8453:["https://base.gateway.tenderly.co","https://mainnet.base.org","https://base.drpc.org"],42161:["https://arbitrum.gateway.tenderly.co","https://arb1.arbitrum.io/rpc","https://arbitrum.drpc.org"]},Ut=1e4,Dt=e=>new Promise(t=>setTimeout(t,e)),Qe=e=>"0x"+BigInt(e).toString(16),Bt=e=>"0x"+"0".repeat(24)+e.slice(2).toLowerCase(),et=e=>"0x"+e.slice(26).toLowerCase(),zt=/timeout|timed out|too many requests|rate.?limit|429|502|503|504|internal error|temporarily|aborted|fetch failed|ECONNRESET|socket hang up/i,Gt=/too many|exceeds|limited to|not supported on free plan|response too large|range must not exceed|narrow your filter/i,V=class extends Error{constructor(t,{transient:r=!1,tooBig:n=!1,http:o=0}={}){super(t),this.transient=r,this.tooBig=n,this.http=o}};async function Wt(e,t,r,n){let o=new AbortController,i=setTimeout(()=>o.abort(),n),s,u;try{s=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:t,params:r}),signal:o.signal}),u=await s.text()}catch(d){throw new V(`${t} network: ${d.message}`,{transient:!0})}finally{clearTimeout(i)}let a;try{a=JSON.parse(u)}catch{throw new V(`${t} non-JSON http=${s.status}: ${u.slice(0,80)}`,{transient:s.status>=500||s.status===429,http:s.status})}if(a.error){let d=a.error.message||"rpc error";throw new V(`${t} rpc: ${d}`,{transient:zt.test(d),tooBig:Gt.test(d),http:s.status})}if(s.status!==200)throw new V(`${t} http=${s.status}: ${u.slice(0,80)}`,{transient:s.status>=500||s.status===429,http:s.status});return a.result}async function tt(e,t,r,{retries:n,timeoutMs:o,onWarn:i}){let s;for(let u of e){for(let a=0;a<=n;a++)try{return{result:await Wt(u,t,r,o),url:u}}catch(d){if(s=d,d.tooBig)throw d;if(!d.transient||a===n)break;let l=Math.min(2e3*2**a,8e3)+Math.random()*250;i?.(`retry ${u} (${d.message.slice(0,70)}) in ${Math.round(l)}ms`),await Dt(l)}i?.(`endpoint exhausted: ${u} -> ${s?.message.slice(0,70)}`)}throw s??new V("no endpoints available")}async function Oe(e,t,r,n,o,i){let s=[{...t,fromBlock:Qe(r),toBlock:Qe(n)}];try{let{result:a}=await tt(e,"eth_getLogs",s,o);Array.isArray(a)&&i.push(...a);return}catch(a){if(!a.tooBig||n<=r)throw a;o.onWarn?.(`splitting ${r}-${n} (${a.message.slice(0,60)})`)}let u=r+Math.floor((n-r)/2);await Promise.all([Oe(e,t,r,u,o,i),Oe(e,t,u+1,n,o,i)])}async function ke(e,t={}){if(!/^0x[0-9a-fA-F]{40}$/.test(e||""))throw new Error(`invalid address: ${e}`);let{chains:r=[1,8453,42161],lookback:n=1e5,fromBlock:o,toBlock:i,chunkSize:s=Ut,tokens:u,direction:a="both",retries:d=3,timeoutMs:l=2e4,concurrency:h=4,endpoints:p=_e,onWarn:f}=t,c={retries:d,timeoutMs:l,onWarn:f},y=Bt(e),w=[],S=[],R={},N=new Set;return await Promise.all(r.map(async x=>{let C=p[x];if(!C?.length){S.push({chainId:x,stage:"config",error:"no endpoints configured"});return}try{let L=i;if(L==null){let{result:g}=await tt(C,"eth_blockNumber",[],c);L=parseInt(g,16)}let b=Math.max(0,o??L-n+1),E=Math.max(b,L);R[x]={fromBlock:b,toBlock:E,blocks:E-b+1};let k=[];for(let g=b;g<=E;g+=s)k.push([g,Math.min(g+s-1,E)]);let I=[],m=u?.length?{address:u}:{};(a==="in"||a==="both")&&I.push({...m,topics:[Ze,null,y]}),(a==="out"||a==="both")&&I.push({...m,topics:[Ze,y,null]});let A=[];for(let g of I)for(let H of k)A.push([g,H]);let v=[],$=0,q=Array.from({length:Math.min(h,A.length)},async()=>{for(;$<A.length;){let[g,[H,_]]=A[$++];try{await Oe(C,g,H,_,c,v)}catch(T){S.push({chainId:x,stage:"getLogs",range:[H,_],error:T.message})}}});await Promise.all(q);for(let g of v){if(!g?.topics||g.topics.length<3)continue;let H=parseInt(g.logIndex,16),_=`${x}|${g.transactionHash}|${H}`;N.has(_)||(N.add(_),w.push({chainId:x,token:g.address.toLowerCase(),from:et(g.topics[1]),to:et(g.topics[2]),value:BigInt(g.data==="0x"?"0x0":g.data).toString(),blockNumber:parseInt(g.blockNumber,16),txHash:g.transactionHash,logIndex:H}))}}catch(L){S.push({chainId:x,stage:"range",error:L.message})}})),w.sort((x,C)=>C.blockNumber-x.blockNumber||C.logIndex-x.logIndex),{events:w,errors:S,ranges:R}}import{keccak_256 as je}from"@noble/hashes/sha3.js";import{createHash as tr}from"node:crypto";import{types as G}from"node:util";import{AsyncLocalStorage as qt}from"node:async_hooks";var Vt=new qt,Jt=["http","retry","shared"],Kt=512;function fe(e){let t=Vt.getStore();if(!t||t.closed||!Jt.includes(e))return null;if(t.spans.length>=Kt)return t.droppedSpans++,null;let r={stage:e,startMs:t.now()-t.start,durationMs:null,outcome:"pending",status:null};return t.spans.push(r),(n,o=null)=>{t.closed||r.durationMs!==null||(r.durationMs=Math.max(0,t.now()-t.start-r.startMs),r.outcome=n==="succeeded"?"succeeded":"failed",r.status=Number.isInteger(o)&&o>=100&&o<=599?o:null)}}import J from"node:net";import Yt from"node:dns";var Xt=new Set(["localhost","metadata.google.internal","metadata.goog"]);function pe(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=l=>{if(!l)return[];let h=l.split(":"),p=h.at(-1);if(p?.includes(".")){let f=p.split(".").map(Number);if(f.length!==4||f.some(c=>!Number.isInteger(c)||c<0||c>255))return null;h.splice(h.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return h.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:h.map(f=>Number.parseInt(f,16))},[n,o]=t.split("::"),i=r(n),s=r(o);if(!i||!s)return null;let u=t.includes("::"),a=8-i.length-s.length;if(!u&&a!==0||u&&a<1)return null;let d=[...i,...Array(Math.max(0,a)).fill(0),...s];return d.length!==8?null:Uint8Array.from(d.flatMap(l=>[l>>8,l&255]))}function $e(e,t,r){let n=Math.floor(r/8),o=r%8;for(let s=0;s<n;s+=1)if(e[s]!==t[s])return!1;if(!o)return!0;let i=255<<8-o;return(e[n]&i)===(t[n]&i)}function Re(e){if(J.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(J.isIPv6(e)){let t=pe(e);if(!t)return!1;let r=pe("::ffff:0:0");return $e(t,r,96)?Re([...t.slice(12)].join(".")):$e(t,pe("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,i])=>$e(t,pe(o),i)):!1}return!1}function Zt(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(Xt.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=J.isIP(r);return n!==0&&!Re(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function Ne(e,{lookupFn:t=Yt.promises.lookup}={}){let r=Zt(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:J.isIPv6(r.host)?6:4}]};let n;if(process.env.ORACLE_HOSTED_EGRESS_PROXY)return{ok:!0,url:r.url,addresses:[]};try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!Re(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}function Qt(e=process.env){let t=e.ORACLE_HOSTED_EGRESS_PROXY||"";if(!t)return null;let r;try{r=new URL(t)}catch{throw new Error("egress-guard: ORACLE_HOSTED_EGRESS_PROXY is not a URL")}if(r.protocol!=="http:"||!["127.0.0.1","::1","localhost","[::1]"].includes(r.hostname)||!r.port||r.username||r.password)throw new Error("egress-guard: egress proxy must be an exact loopback http origin");let n=e.ORACLE_HOSTED_EGRESS_TOKEN||"";if(!/^[A-Za-z0-9_-]{43}$/.test(n))throw new Error("egress-guard: egress proxy token is missing");return{uri:r.origin,token:n}}async function Ie({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n,o;try{o=await t(),r=o.Agent,n=o.fetch}catch(f){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${f?.message||f}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let i=f=>String(f).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),s=new Map,u=f=>(Array.isArray(f)?f:[f]).map(c=>typeof c=="string"?{address:c}:c).filter(c=>c&&c.address).map(c=>({address:c.address,family:c.family||(J.isIPv6(c.address)?6:4)})),a=(f,c,y)=>{s.set(i(f),u(typeof c=="string"?[{address:c,family:y}]:c))},d=f=>{let c=i(f);if(J.isIP(c))return[{address:c,family:J.isIPv6(c)?6:4}];let y=s.get(c);if(!y||!y.length)throw new Error(`refused: unpinned host ${f} during pinned fetch`);return y},l=Qt(),h=l&&typeof o.ProxyAgent=="function"?new o.ProxyAgent({uri:l.uri,token:`Bearer ${l.token}`,connectTimeout:1e4}):new r({connect:{lookup(f,c,y){let w;try{w=d(f)}catch(S){return y(S)}return c?.all?y(null,w):y(null,w[0].address,w[0].family)}}}),p=er((f,c={})=>n(f,{...c,dispatcher:h}),a);return{dispatcher:h,fetch:p,pin:a,resolve:d,async close(){try{await h.destroy()}catch{}}}}var Pe=Symbol.for("oracle.egressGuard.pinCapableFetch");function er(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[Pe]=Object.freeze({pin:t}),e}function Ce(e){return typeof e=="function"&&typeof e[Pe]?.pin=="function"}function rt(e,t,r){if(!Ce(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[Pe].pin(t,r)}var rr=new Set([408,425,429,500,502,503,504]),nt=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),nr=2,ot=4e3,or=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,sr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,ir=AbortSignal.prototype.throwIfAborted,ar=EventTarget.prototype.addEventListener,st=EventTarget.prototype.removeEventListener,it=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,oe=e=>e?or.call(e):!1,cr=e=>e?sr.call(e):void 0,lr=new Set([301,302,303,307,308]),me=3,bo=64*1024,z=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function P(e){return W(`HTTP JSON body refused: ${e}`)}function ur(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof G[t]=="function"&&G[t](e))}function dr(e){let t=[],r=0,n=0,o=0,i=0,s=new WeakSet,u=l=>{if(r+=Buffer.byteLength(l,"utf8"),r>z.bytes)throw P("serialized byte limit exceeded");t.push(l)},a=l=>{if(Buffer.byteLength(l,"utf8")>z.bytes)throw P("serialized byte limit exceeded");return JSON.stringify(l)},d=(l,h)=>{if(n+=1,n>z.nodes)throw P("node limit exceeded");if(h>z.depth)throw P("depth limit exceeded");if(l===null){u("null");return}if(typeof l=="string"){u(a(l));return}if(typeof l=="boolean"){u(l?"true":"false");return}if(typeof l=="number"){if(!Number.isFinite(l))throw P("non-finite number");u(Object.is(l,-0)?"0":String(l));return}if(typeof l!="object")throw P("unsupported non-JSON value");if(G.isProxy(l))throw P("proxy value");if(ur(l))throw P("unsupported exotic object");if(s.has(l))throw P("cyclic value");s.add(l);try{if(Object.getOwnPropertySymbols(l).length>0)throw P("symbol-keyed fields are unsupported");if(Array.isArray(l)){let c=Object.getPrototypeOf(l),y=0;for(;c!==null;){if(G.isProxy(c))throw P("proxy array prototype");if(y+=1,y>z.depth)throw P("array prototype depth limit exceeded");c=Object.getPrototypeOf(c)}if(l.length>z.arrayLength)throw P("array length limit exceeded");for(let S=0;S<l.length;S+=1){let R=Object.getOwnPropertyDescriptor(l,String(S));if(!R||!Object.hasOwn(R,"value")||R.enumerable!==!0)throw P("array entries must be dense enumerable own data")}let w=0;for(let S in l){if(i+=1,i>z.fields)throw P("enumeration limit exceeded");if(Object.hasOwn(l,S)&&(w+=1,w>l.length))throw P("named array fields are unsupported")}if(w!==l.length)throw P("array entries must be dense enumerable own data");u("[");for(let S=0;S<l.length;S+=1)S&&u(","),d(Object.getOwnPropertyDescriptor(l,String(S)).value,h+1);u("]");return}let p=Object.getPrototypeOf(l);if(p!==Object.prototype&&p!==null)throw P("non-plain object");let f=[];for(let c in l){if(i+=1,i>z.fields)throw P("enumeration limit exceeded");if(!Object.hasOwn(l,c))continue;if(o+=1,o>z.fields)throw P("field limit exceeded");let y=Object.getOwnPropertyDescriptor(l,c);if(!y||!Object.hasOwn(y,"value")||y.enumerable!==!0)throw P("object fields must be enumerable own data");f.push([c,y.value])}u("{");for(let c=0;c<f.length;c+=1)c&&u(","),u(a(f[c][0])),u(":"),d(f[c][1],h+1);u("}")}finally{s.delete(l)}};return d(e,0),t.join("")}function fr(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(G.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let i=Object.getOwnPropertyDescriptor(e,n);if(!i||!Object.hasOwn(i,"value"))throw new TypeError("HTTP headers must contain own data properties");let s=i.value;if(s==null||["object","function","symbol"].includes(typeof s))throw new TypeError("HTTP header values must be scalar");t[n]=String(s)}return t}function pr(){return Object.assign(Object.create(null),{Accept:"application/json"})}function hr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function mr(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var Le=new Map,at=new WeakMap,ct=1;function he(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=at.get(e);return t||(t=ct,ct+=1,at.set(e,t)),`reference:${t}`}var yr=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),wr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function lt(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?yr.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function ut(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(lt);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return lt(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&wr.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function br(e,t,r,n={},o=null){let i=tr("sha256"),s=(a,d)=>{let l=String(d);i.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),i.update("=").update(String(Buffer.byteLength(l,"utf8"))).update(":").update(l).update(`
|
|
2
|
-
`)};s("method",e),s("url",t),Object.keys(r||{}).map((a,d)=>({name:a.toLowerCase(),order:d,value:String(r[a])})).sort((a,d)=>a.name.localeCompare(d.name)||a.order-d.order).forEach((a,d)=>{s(`header-name-${d}`,a.name),s(`header-value-${d}`,a.value)}),s("body",o??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])s(`context-${a}`,n[a]??"-");return i.digest("hex")}function gr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,ot):Math.min(250*2**e,ot)+Math.floor(Math.random()*100)}var xr=e=>new Promise(t=>setTimeout(t,e));function W(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function He(e,t,r){return W(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function K(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Sr(e){return e?e.byteLength??e.length??0:0}async function Er(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let i=Number(e.headers?.get?.("content-length"));if(Number.isFinite(i)&&i>t&&(K(e),!n))throw He(r,`content-length ${i}`,t);let s=e.body?.getReader?.();if(!s){let h=await e.text(),p=Buffer.byteLength(h,"utf8");if(p>t){if(!n)throw He(r,`body ${p} bytes`,t);return Buffer.from(h,"utf8").subarray(0,t).toString("utf8")}return h}let u=[],a=0,d=!1;try{for(;;){let{value:h,done:p}=await s.read();if(p)break;if(h&&(u.push(Buffer.from(h)),a+=Sr(h),a>t)){d=!0;break}}}finally{if(d)try{await s.cancel()}catch{}try{s.releaseLock?.()}catch{}}if(d&&(typeof o=="function"&&o(),!n))throw He(r,`streamed ${a} bytes`,t);let l=Buffer.concat(u);return(d?l.subarray(0,t):l).toString("utf8")}function Ar(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function Tr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:i,lookupFn:s,realFetch:u,untrustedUrl:a=!1,maxResponseBytes:d=null,sameOriginRedirectsOnly:l=!1,importUndici:h,validateResponse:p,signal:f,redirectPolicy:c="follow",maxRedirects:y=me}){let w=null,S=t,R=s?{lookupFn:s}:{};if(a&&!u&&!Ce(S))throw W(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let N=new AbortController,x=setTimeout(()=>N.abort(),i),C=f?it?it([f,N.signal]):f:N.signal,L=async(b,{status:E=null}={})=>{let k=await Ne(b,R);if(!k.ok)throw W(E==null?`HTTP refused ${b}: ${k.error}`:`HTTP redirect to ${b} ${k.error}`,E==null?{}:{status:E});let I=new URL(b).hostname;if(u){if(w&&(await w.close(),w=null),!w)try{w=await Ie({requireUndici:!0,...h?{importUndici:h}:{}})}catch(m){throw W(E==null?`HTTP refused ${b}: ${m?.message||m}`:`HTTP redirect to ${b} refused: ${m?.message||m}`,E==null?{}:{status:E})}w.pin(I,k.addresses),S=w.fetch}else rt(S,I,k.addresses);return k};try{let b=String(e),E=Object.assign(Object.create(null),n||{});a&&await L(b);for(let k=0;k<=y;k+=1){let I=Object.assign(Object.create(null),{method:r,headers:E,body:o,signal:C,redirect:"manual",dispatcher:void 0}),m=await S(b,I);if((c==="error"||y===0)&&m.status>=300&&m.status<400)throw K(m),W(`HTTP ${m.status} ${r} redirect refused`,{status:m.status,redirectRefused:!0});if(lr.has(m.status)){let $=l===!0&&r==="POST"&&[307,308].includes(m.status)&&ut(r,o);if(r!=="GET"&&r!=="HEAD"&&!$){K(m);let _=new Error(`HTTP ${m.status} ${r} ${b} redirected non-idempotent request`);throw _.status=m.status,_}if(k===y)throw K(m),W(`HTTP ${m.status} ${r} redirect budget exhausted`,{status:m.status,redirectRefused:!0});let q=m.headers?.get?.("location"),g;try{g=hr(q,b)}catch(_){throw K(m),_}let H=!mr(g,b);if(K(m),H&&r==="POST"){let _=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw _.status=m.status,_}if(H&&l){let _=new Error(`HTTP ${m.status} ${r} cross-origin redirect refused`);throw _.status=m.status,_.retryable=!1,_}if(H&&(E=pr(E)),a)await L(g,{status:m.status});else if(H){let _=await Ne(g,R);if(!_.ok){let T=new Error(`HTTP redirect from ${b} ${_.error}`);throw T.status=m.status,T.retryable=!1,T}u&&_.addresses?.length&&(w||(w=await Ie(h?{importUndici:h}:{})),w&&(w.pin(new URL(g).hostname,_.addresses),S=w.fetch))}b=g;continue}if(typeof p=="function")try{await p(m,{url:b})}catch($){throw K(m),W($?.message||String($))}let A=await Er(m,d,{url:b,onOversize:()=>N.abort()}),v=Ar(A);if(!m.ok){let $=new Error(`HTTP ${m.status} ${r} ${b}`);throw $.status=m.status,$.retryAfter=m.headers?.get?.("retry-after")??null,$.body=v??A.slice(0,300),$}return v??A}throw new Error(`HTTP redirect loop for ${e}`)}catch(b){if(N.signal.aborted&&!oe(f)){let E=b&&(typeof b=="object"||typeof b=="function")&&!G.isProxy(b)?b:null,k=E?Object.getOwnPropertyDescriptor(E,"oversize"):null;if(!(k&&Object.hasOwn(k,"value")&&k.value===!0))try{if(!E)throw new TypeError("unsafe rejection");Object.defineProperties(E,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let m=new Error("HTTP request timed out");throw Object.defineProperties(m,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),m}}throw b}finally{clearTimeout(x),w&&await w.close()}}async function ye(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&G.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let T of Object.getOwnPropertyNames(t)){let O=Object.getOwnPropertyDescriptor(t,T);if(!(T==="toJSON"&&O&&Object.hasOwn(O,"value")&&O.value===void 0)){if(!r.has(T))throw new TypeError("HTTP options contain unknown fields");if(!O||!O.enumerable||!Object.hasOwn(O,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=T=>{if(t==null||!Object.hasOwn(t,T))return;let O=Object.getOwnPropertyDescriptor(t,T);if(!O||!Object.hasOwn(O,"value"))throw new TypeError("HTTP options must contain own data properties");return O.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let i=n("timeoutMs");if(i!==void 0&&(!Number.isInteger(i)||i<1||i>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let s=n("retries");if(s!==void 0&&(!Number.isInteger(s)||s<0||s>10))throw new TypeError("HTTP retries must be a bounded integer");let u=n("redirectPolicy");if(u!==void 0&&u!=="follow"&&u!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>me))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${me}`);if(u==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let d=u??"follow",l=d==="error"?0:a??me;for(let T of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let O=n(T);if(O!==void 0&&typeof O!="boolean")throw new TypeError(`HTTP ${T} must be boolean`)}let h=n("maxResponseBytes");if(h!==void 0&&(!Number.isInteger(h)||h<1||h>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let p=n("signal");if(p!==void 0){if(G.isProxy(p)||!(p instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{oe(p)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let T of["importUndici","lookupFn","validateResponse"]){let O=n(T);if(O!==void 0&&typeof O!="function")throw new TypeError(`HTTP ${T} must be a function`)}let f=n("fetchImpl"),c=f||globalThis.fetch;if(typeof c!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let y=i??12e3,w=(o||"GET").toUpperCase(),S=n("headers"),R=fr(S),N=Object.assign(Object.create(null),R);Object.keys(N).some(T=>T.toLowerCase()==="accept")||(N.Accept="application/json");let x=n("body");x!=null&&typeof x!="string"&&(Object.keys(N).find(O=>O.toLowerCase()==="content-type")||(N["Content-Type"]="application/json"),x=dr(x));let C=s??nr,L=n("lookupFn"),b=!f,E=n("untrustedUrl")===!0,k=n("sameOriginRedirectsOnly")===!0,I=n("importUndici"),m=n("validateResponse"),A=p,v=h??null,$=async()=>{let T;for(let O=0;O<=C;O++){A&&ir.call(A);let Je=fe("http");try{let B=await Tr(e,{fetchImpl:c,method:w,headers:N,body:x,timeoutMs:y,lookupFn:L,realFetch:b,untrustedUrl:E,maxResponseBytes:v,sameOriginRedirectsOnly:k,importUndici:I,validateResponse:m,signal:A,redirectPolicy:d,maxRedirects:l});return Je?.("succeeded"),B}catch(B){T=B;let Q=Te=>{if(!B||typeof B!="object"&&typeof B!="function"||G.isProxy(B))return;let re=Object.getOwnPropertyDescriptor(B,Te);return re&&Object.hasOwn(re,"value")?re.value:void 0},de=Q("status");Je?.("failed",de);let jt=Q("oracleTimeout")===!0||Q("name")==="AbortError"||Q("name")==="TimeoutError"||oe(A),vt=new Set([408,425,429]),Mt=Q("retryable")===!1?!1:de!=null?vt.has(de)||rr.has(de)&&nt.has(w):!jt&&nt.has(w);if(O===C||!Mt)throw B;let Ke=gr(O,Q("retryAfter")),Ft=fe("retry"),Ye=!1;try{A?await new Promise((Te,re)=>{let Xe,ne=()=>{clearTimeout(Xe),st.call(A,"abort",ne),re(cr(A)||new DOMException("Aborted","AbortError"))};if(oe(A)){ne();return}Xe=setTimeout(()=>{st.call(A,"abort",ne),Te()},Ke),ar.call(A,"abort",ne,{once:!0}),oe(A)&&ne()}):await xr(Ke),Ye=!0}finally{Ft?.(Ye?"succeeded":"failed")}}}throw T};if(!(n("dedupe")!==!1&&!A&&ut(w,x)))return $();let g=br(w,e,N,{untrustedUrl:E,maxResponseBytes:v,sameOriginRedirectsOnly:k,redirectPolicy:d,maxRedirects:l,timeoutMs:y,retries:C,fetchImpl:he(c),realFetch:b,lookupFn:he(L),importUndici:he(I),validateResponse:he(m)},x),H=Le.get(g);if(H){let T=fe("shared");try{let O=await H;return T?.("succeeded"),O}catch(O){throw T?.("failed"),O}}let _=$().finally(()=>Le.delete(g));return Le.set(g,_),_}var dt={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Or=new Map(Object.values(dt).map(e=>[e.chainId,e]));function ft(e){return Or.get(Number(e))||null}function pt(e,t=process.env){let r=ft(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}import{Interface as _r,getAddress as Oo}from"ethers";var _o=new _r(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var kr={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function $r(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=pt(e,r);return n||kr[Number(e)]||null}var Rr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Nr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Rr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var se=new Map,ht=new Map;function Ir(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Pr(e){if(e?.error)throw Ir(e.error);return e?.result}function Cr(e,t,r){return`${e}
|
|
1
|
+
import{createHash as Sr}from"node:crypto";import{types as G}from"node:util";import{AsyncLocalStorage as fr}from"node:async_hooks";var pr=new fr,hr=["http","retry","shared"],mr=512;function Se(e){let t=pr.getStore();if(!t||t.closed||!hr.includes(e))return null;if(t.spans.length>=mr)return t.droppedSpans++,null;let r={stage:e,startMs:t.now()-t.start,durationMs:null,outcome:"pending",status:null};return t.spans.push(r),(n,o=null)=>{t.closed||r.durationMs!==null||(r.durationMs=Math.max(0,t.now()-t.start-r.startMs),r.outcome=n==="succeeded"?"succeeded":"failed",r.status=Number.isInteger(o)&&o>=100&&o<=599?o:null)}}import X from"node:net";import br from"node:dns";var yr=new Set(["localhost","metadata.google.internal","metadata.goog"]);function Ee(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let r=c=>{if(!c)return[];let h=c.split(":"),d=h.at(-1);if(d?.includes(".")){let f=d.split(".").map(Number);if(f.length!==4||f.some(p=>!Number.isInteger(p)||p<0||p>255))return null;h.splice(h.length-1,1,(f[0]<<8|f[1]).toString(16),(f[2]<<8|f[3]).toString(16))}return h.some(f=>!/^[0-9a-f]{1,4}$/.test(f))?null:h.map(f=>Number.parseInt(f,16))},[n,o]=t.split("::"),s=r(n),i=r(o);if(!s||!i)return null;let l=t.includes("::"),a=8-s.length-i.length;if(!l&&a!==0||l&&a<1)return null;let u=[...s,...Array(Math.max(0,a)).fill(0),...i];return u.length!==8?null:Uint8Array.from(u.flatMap(c=>[c>>8,c&255]))}function Fe(e,t,r){let n=Math.floor(r/8),o=r%8;for(let i=0;i<n;i+=1)if(e[i]!==t[i])return!1;if(!o)return!0;let s=255<<8-o;return(e[n]&s)===(t[n]&s)}function Pe(e){if(X.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(X.isIPv6(e)){let t=Ee(e);if(!t)return!1;let r=Ee("::ffff:0:0");return Fe(t,r,96)?Pe([...t.slice(12)].join(".")):Fe(t,Ee("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([o,s])=>Fe(t,Ee(o),s)):!1}return!1}function gr(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let r=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(yr.has(r)||r.endsWith(".localhost")||r.endsWith(".internal"))return{ok:!1,error:`refused internal host ${r}`};let n=X.isIP(r);return n!==0&&!Pe(r)?{ok:!1,error:`refused private address ${r}`}:{ok:!0,url:t,host:r,isLiteralIp:n!==0}}async function Be(e,{lookupFn:t=br.promises.lookup}={}){let r=gr(e);if(!r.ok)return r;if(r.isLiteralIp)return{ok:!0,url:r.url,addresses:[{address:r.host,family:X.isIPv6(r.host)?6:4}]};let n;if(process.env.ORACLE_HOSTED_EGRESS_PROXY)return{ok:!0,url:r.url,addresses:[]};try{n=await t(r.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${r.host} did not resolve`}}return!Array.isArray(n)||n.length===0||n.some(o=>!Pe(o.address))?{ok:!1,error:`refused: ${r.host} resolves to a non-public address`}:{ok:!0,url:r.url,addresses:n}}function wr(e=process.env){let t=e.ORACLE_HOSTED_EGRESS_PROXY||"";if(!t)return null;let r;try{r=new URL(t)}catch{throw new Error("egress-guard: ORACLE_HOSTED_EGRESS_PROXY is not a URL")}if(r.protocol!=="http:"||!["127.0.0.1","::1","localhost","[::1]"].includes(r.hostname)||!r.port||r.username||r.password)throw new Error("egress-guard: egress proxy must be an exact loopback http origin");let n=e.ORACLE_HOSTED_EGRESS_TOKEN||"";if(!/^[A-Za-z0-9_-]{43}$/.test(n))throw new Error("egress-guard: egress proxy token is missing");return{uri:r.origin,token:n}}async function De({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let r,n,o;try{o=await t(),r=o.Agent,n=o.fetch}catch(f){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${f?.message||f}`);return null}if(typeof r!="function"||typeof n!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let s=f=>String(f).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),i=new Map,l=f=>(Array.isArray(f)?f:[f]).map(p=>typeof p=="string"?{address:p}:p).filter(p=>p&&p.address).map(p=>({address:p.address,family:p.family||(X.isIPv6(p.address)?6:4)})),a=(f,p,m)=>{i.set(s(f),l(typeof p=="string"?[{address:p,family:m}]:p))},u=f=>{let p=s(f);if(X.isIP(p))return[{address:p,family:X.isIPv6(p)?6:4}];let m=i.get(p);if(!m||!m.length)throw new Error(`refused: unpinned host ${f} during pinned fetch`);return m},c=wr(),h=c&&typeof o.ProxyAgent=="function"?new o.ProxyAgent({uri:c.uri,token:`Bearer ${c.token}`,connectTimeout:1e4}):new r({connect:{lookup(f,p,m){let x;try{x=u(f)}catch(b){return m(b)}return p?.all?m(null,x):m(null,x[0].address,x[0].family)}}}),d=xr((f,p={})=>n(f,{...p,dispatcher:h}),a);return{dispatcher:h,fetch:d,pin:a,resolve:u,async close(){try{await h.destroy()}catch{}}}}var je=Symbol.for("oracle.egressGuard.pinCapableFetch");function xr(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[je]=Object.freeze({pin:t}),e}function qe(e){return typeof e=="function"&&typeof e[je]?.pin=="function"}function mt(e,t,r){if(!qe(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[je].pin(t,r)}var Er=new Set([408,425,429,500,502,503,504]),bt=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),Ar=2,yt=4e3,vr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,Nr=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,Tr=AbortSignal.prototype.throwIfAborted,Cr=EventTarget.prototype.addEventListener,gt=EventTarget.prototype.removeEventListener,wt=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null,de=e=>e?vr.call(e):!1,kr=e=>e?Nr.call(e):void 0,Ir=new Set([301,302,303,307,308]),ve=3,is=64*1024,W=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});function _(e){return Y(`HTTP JSON body refused: ${e}`)}function Or(e){return["isArgumentsObject","isArrayBuffer","isAnyArrayBuffer","isArrayBufferView","isBoxedPrimitive","isDataView","isDate","isExternal","isGeneratorObject","isKeyObject","isCryptoKey","isMap","isMapIterator","isModuleNamespaceObject","isNativeError","isPromise","isRegExp","isSet","isSetIterator","isTypedArray","isWeakMap","isWeakSet"].some(t=>typeof G[t]=="function"&&G[t](e))}function _r(e){let t=[],r=0,n=0,o=0,s=0,i=new WeakSet,l=c=>{if(r+=Buffer.byteLength(c,"utf8"),r>W.bytes)throw _("serialized byte limit exceeded");t.push(c)},a=c=>{if(Buffer.byteLength(c,"utf8")>W.bytes)throw _("serialized byte limit exceeded");return JSON.stringify(c)},u=(c,h)=>{if(n+=1,n>W.nodes)throw _("node limit exceeded");if(h>W.depth)throw _("depth limit exceeded");if(c===null){l("null");return}if(typeof c=="string"){l(a(c));return}if(typeof c=="boolean"){l(c?"true":"false");return}if(typeof c=="number"){if(!Number.isFinite(c))throw _("non-finite number");l(Object.is(c,-0)?"0":String(c));return}if(typeof c!="object")throw _("unsupported non-JSON value");if(G.isProxy(c))throw _("proxy value");if(Or(c))throw _("unsupported exotic object");if(i.has(c))throw _("cyclic value");i.add(c);try{if(Object.getOwnPropertySymbols(c).length>0)throw _("symbol-keyed fields are unsupported");if(Array.isArray(c)){let p=Object.getPrototypeOf(c),m=0;for(;p!==null;){if(G.isProxy(p))throw _("proxy array prototype");if(m+=1,m>W.depth)throw _("array prototype depth limit exceeded");p=Object.getPrototypeOf(p)}if(c.length>W.arrayLength)throw _("array length limit exceeded");for(let b=0;b<c.length;b+=1){let y=Object.getOwnPropertyDescriptor(c,String(b));if(!y||!Object.hasOwn(y,"value")||y.enumerable!==!0)throw _("array entries must be dense enumerable own data")}let x=0;for(let b in c){if(s+=1,s>W.fields)throw _("enumeration limit exceeded");if(Object.hasOwn(c,b)&&(x+=1,x>c.length))throw _("named array fields are unsupported")}if(x!==c.length)throw _("array entries must be dense enumerable own data");l("[");for(let b=0;b<c.length;b+=1)b&&l(","),u(Object.getOwnPropertyDescriptor(c,String(b)).value,h+1);l("]");return}let d=Object.getPrototypeOf(c);if(d!==Object.prototype&&d!==null)throw _("non-plain object");let f=[];for(let p in c){if(s+=1,s>W.fields)throw _("enumeration limit exceeded");if(!Object.hasOwn(c,p))continue;if(o+=1,o>W.fields)throw _("field limit exceeded");let m=Object.getOwnPropertyDescriptor(c,p);if(!m||!Object.hasOwn(m,"value")||m.enumerable!==!0)throw _("object fields must be enumerable own data");f.push([p,m.value])}l("{");for(let p=0;p<f.length;p+=1)p&&l(","),l(a(f[p][0])),l(":"),u(f[p][1],h+1);l("}")}finally{i.delete(c)}};return u(e,0),t.join("")}function $r(e){let t=Object.create(null);if(e==null)return t;if(typeof e!="object"&&typeof e!="function")throw new TypeError("HTTP headers must be an object");if(G.isProxy(e))throw new TypeError("HTTP headers must not be a proxy");if(Object.getOwnPropertySymbols(e).length>0)throw new TypeError("HTTP headers must not contain symbol fields");let r=new Set;for(let n of Object.keys(e)){if(!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u.test(n))throw new TypeError("HTTP header names must be valid tokens");let o=n.toLowerCase();if(r.has(o))throw new TypeError("HTTP headers contain a duplicate canonical name");r.add(o);let s=Object.getOwnPropertyDescriptor(e,n);if(!s||!Object.hasOwn(s,"value"))throw new TypeError("HTTP headers must contain own data properties");let i=s.value;if(i==null||["object","function","symbol"].includes(typeof i))throw new TypeError("HTTP header values must be scalar");t[n]=String(i)}return t}function Rr(){return Object.assign(Object.create(null),{Accept:"application/json"})}function Lr(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let r=new URL(String(e),String(t));if(r.protocol!=="http:"&&r.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${r.protocol}`);return r.toString()}function Ur(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var He=new Map,xt=new WeakMap,St=1;function Ae(e){if((typeof e!="object"||e===null)&&typeof e!="function")return`${typeof e}:${String(e)}`;let t=xt.get(e);return t||(t=St,St+=1,xt.set(e,t)),`reference:${t}`}var Fr=new Set(["eth_blockNumber","eth_call","eth_chainId","eth_estimateGas","getHealth","minimumLedgerSlot","net_version","simulateTransaction","web3_clientVersion"]),Pr=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Et(e){if(!e||typeof e!="object"||Array.isArray(e)||!Object.hasOwn(e,"jsonrpc")||!Object.hasOwn(e,"method")||e.jsonrpc!=="2.0")return!1;let t=typeof e.method=="string"?e.method:"";return t?Fr.has(t)||/^get[A-Z0-9_]/u.test(t)||/^is[A-Z0-9_]/u.test(t)||/^eth_get[A-Z0-9_]/u.test(t):!1}function At(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let r=t;if(typeof t=="string")try{r=JSON.parse(t)}catch{return!1}if(Array.isArray(r))return r.length>0&&r.every(Et);if(!r||typeof r!="object")return!1;if(Object.hasOwn(r,"jsonrpc")||Object.hasOwn(r,"method"))return Et(r);let n=Object.hasOwn(r,"type")?r.type:null;return typeof n=="string"&&Pr.has(n)&&(!Object.hasOwn(r,"action")||r.action==null)&&(!Object.hasOwn(r,"signature")||r.signature==null)&&(!Object.hasOwn(r,"nonce")||r.nonce==null)}function Br(e,t,r,n={},o=null){let s=Sr("sha256"),i=(a,u)=>{let c=String(u);s.update(String(Buffer.byteLength(a,"utf8"))).update(":").update(a),s.update("=").update(String(Buffer.byteLength(c,"utf8"))).update(":").update(c).update(`
|
|
2
|
+
`)};i("method",e),i("url",t),Object.keys(r||{}).map((a,u)=>({name:a.toLowerCase(),order:u,value:String(r[a])})).sort((a,u)=>a.name.localeCompare(u.name)||a.order-u.order).forEach((a,u)=>{i(`header-name-${u}`,a.name),i(`header-value-${u}`,a.value)}),i("body",o??"-");for(let a of["untrustedUrl","maxResponseBytes","sameOriginRedirectsOnly","redirectPolicy","maxRedirects","timeoutMs","retries","fetchImpl","realFetch","lookupFn","importUndici","validateResponse"])i(`context-${a}`,n[a]??"-");return s.digest("hex")}function Dr(e,t){let r=Number(t);return Number.isFinite(r)&&r>0?Math.min(r*1e3,yt):Math.min(250*2**e,yt)+Math.floor(Math.random()*100)}var jr=e=>new Promise(t=>setTimeout(t,e));function Y(e,t={}){let r=new Error(e);return r.retryable=!1,Object.assign(r,t),r}function Me(e,t,r){return Y(`HTTP response from ${e} exceeded maxResponseBytes ${r} (${t})`,{oversize:!0})}function Z(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function qr(e){return e?e.byteLength??e.length??0:0}async function Hr(e,t,{url:r,truncate:n=!1,onOversize:o}={}){if(t==null)return await e.text();let s=Number(e.headers?.get?.("content-length"));if(Number.isFinite(s)&&s>t&&(Z(e),!n))throw Me(r,`content-length ${s}`,t);let i=e.body?.getReader?.();if(!i){let h=await e.text(),d=Buffer.byteLength(h,"utf8");if(d>t){if(!n)throw Me(r,`body ${d} bytes`,t);return Buffer.from(h,"utf8").subarray(0,t).toString("utf8")}return h}let l=[],a=0,u=!1;try{for(;;){let{value:h,done:d}=await i.read();if(d)break;if(h&&(l.push(Buffer.from(h)),a+=qr(h),a>t)){u=!0;break}}}finally{if(u)try{await i.cancel()}catch{}try{i.releaseLock?.()}catch{}}if(u&&(typeof o=="function"&&o(),!n))throw Me(r,`streamed ${a} bytes`,t);let c=Buffer.concat(l);return(u?c.subarray(0,t):c).toString("utf8")}function Mr(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function zr(e,{fetchImpl:t,method:r,headers:n,body:o,timeoutMs:s,lookupFn:i,realFetch:l,untrustedUrl:a=!1,maxResponseBytes:u=null,sameOriginRedirectsOnly:c=!1,importUndici:h,validateResponse:d,signal:f,redirectPolicy:p="follow",maxRedirects:m=ve}){let x=null,b=t,y=i?{lookupFn:i}:{};if(a&&!l&&!qe(b))throw Y(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let v=new AbortController,O=setTimeout(()=>v.abort(),s),k=f?wt?wt([f,v.signal]):f:v.signal,R=async(E,{status:T=null}={})=>{let N=await Be(E,y);if(!N.ok)throw Y(T==null?`HTTP refused ${E}: ${N.error}`:`HTTP redirect to ${E} ${N.error}`,T==null?{}:{status:T});let L=new URL(E).hostname;if(l){if(x&&(await x.close(),x=null),!x)try{x=await De({requireUndici:!0,...h?{importUndici:h}:{}})}catch(w){throw Y(T==null?`HTTP refused ${E}: ${w?.message||w}`:`HTTP redirect to ${E} refused: ${w?.message||w}`,T==null?{}:{status:T})}x.pin(L,N.addresses),b=x.fetch}else mt(b,L,N.addresses);return N};try{let E=String(e),T=Object.assign(Object.create(null),n||{});a&&await R(E);for(let N=0;N<=m;N+=1){let L=Object.assign(Object.create(null),{method:r,headers:T,body:o,signal:k,redirect:"manual",dispatcher:void 0}),w=await b(E,L);if((p==="error"||m===0)&&w.status>=300&&w.status<400)throw Z(w),Y(`HTTP ${w.status} ${r} redirect refused`,{status:w.status,redirectRefused:!0});if(Ir.has(w.status)){let $=c===!0&&r==="POST"&&[307,308].includes(w.status)&&At(r,o);if(r!=="GET"&&r!=="HEAD"&&!$){Z(w);let g=new Error(`HTTP ${w.status} ${r} ${E} redirected non-idempotent request`);throw g.status=w.status,g}if(N===m)throw Z(w),Y(`HTTP ${w.status} ${r} redirect budget exhausted`,{status:w.status,redirectRefused:!0});let P=w.headers?.get?.("location"),C;try{C=Lr(P,E)}catch(g){throw Z(w),g}let U=!Ur(C,E);if(Z(w),U&&r==="POST"){let g=new Error(`HTTP ${w.status} ${r} cross-origin redirect refused`);throw g.status=w.status,g}if(U&&c){let g=new Error(`HTTP ${w.status} ${r} cross-origin redirect refused`);throw g.status=w.status,g.retryable=!1,g}if(U&&(T=Rr(T)),a)await R(C,{status:w.status});else if(U){let g=await Be(C,y);if(!g.ok){let A=new Error(`HTTP redirect from ${E} ${g.error}`);throw A.status=w.status,A.retryable=!1,A}l&&g.addresses?.length&&(x||(x=await De(h?{importUndici:h}:{})),x&&(x.pin(new URL(C).hostname,g.addresses),b=x.fetch))}E=C;continue}if(typeof d=="function")try{await d(w,{url:E})}catch($){throw Z(w),Y($?.message||String($))}let I=await Hr(w,u,{url:E,onOversize:()=>v.abort()}),q=Mr(I);if(!w.ok){let $=new Error(`HTTP ${w.status} ${r} ${E}`);throw $.status=w.status,$.retryAfter=w.headers?.get?.("retry-after")??null,$.body=q??I.slice(0,300),$}return q??I}throw new Error(`HTTP redirect loop for ${e}`)}catch(E){if(v.signal.aborted&&!de(f)){let T=E&&(typeof E=="object"||typeof E=="function")&&!G.isProxy(E)?E:null,N=T?Object.getOwnPropertyDescriptor(T,"oversize"):null;if(!(N&&Object.hasOwn(N,"value")&&N.value===!0))try{if(!T)throw new TypeError("unsafe rejection");Object.defineProperties(T,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}})}catch{let w=new Error("HTTP request timed out");throw Object.defineProperties(w,{oracleTimeout:{value:!0,enumerable:!1},retryable:{value:!1,enumerable:!1}}),w}}throw E}finally{clearTimeout(O),x&&await x.close()}}async function fe(e,t={}){if(t!=null&&typeof t!="object"&&typeof t!="function")throw new TypeError("HTTP options must be an object");if(t!=null&&G.isProxy(t))throw new TypeError("HTTP options must not be a proxy");let r=new Set(["body","dedupe","fetchImpl","headers","importUndici","lookupFn","maxRedirects","maxResponseBytes","method","redirectPolicy","retries","sameOriginRedirectsOnly","signal","timeoutMs","untrustedUrl","validateResponse"]);if(t!=null){if(Object.getOwnPropertySymbols(t).length>0)throw new TypeError("HTTP options contain unknown fields");for(let A of Object.getOwnPropertyNames(t)){let S=Object.getOwnPropertyDescriptor(t,A);if(!(A==="toJSON"&&S&&Object.hasOwn(S,"value")&&S.value===void 0)){if(!r.has(A))throw new TypeError("HTTP options contain unknown fields");if(!S||!S.enumerable||!Object.hasOwn(S,"value"))throw new TypeError("HTTP options must contain enumerable own data properties")}}}let n=A=>{if(t==null||!Object.hasOwn(t,A))return;let S=Object.getOwnPropertyDescriptor(t,A);if(!S||!Object.hasOwn(S,"value"))throw new TypeError("HTTP options must contain own data properties");return S.value};if(typeof e!="string"||e.length===0||e.length>8192)throw new TypeError("HTTP URL must be a bounded string");let o=n("method");if(o!==void 0&&(typeof o!="string"||!/^[A-Za-z]+$/u.test(o)))throw new TypeError("HTTP method must be a string token");let s=n("timeoutMs");if(s!==void 0&&(!Number.isInteger(s)||s<1||s>12e4))throw new TypeError("HTTP timeoutMs must be a bounded integer");let i=n("retries");if(i!==void 0&&(!Number.isInteger(i)||i<0||i>10))throw new TypeError("HTTP retries must be a bounded integer");let l=n("redirectPolicy");if(l!==void 0&&l!=="follow"&&l!=="error")throw new TypeError('HTTP redirectPolicy must be "follow" or "error"');let a=n("maxRedirects");if(a!==void 0&&(!Number.isInteger(a)||a<0||a>ve))throw new TypeError(`HTTP maxRedirects must be an integer from 0 through ${ve}`);if(l==="error"&&a!==void 0&&a!==0)throw new TypeError('HTTP redirectPolicy "error" requires maxRedirects 0 when supplied');let u=l??"follow",c=u==="error"?0:a??ve;for(let A of["dedupe","untrustedUrl","sameOriginRedirectsOnly"]){let S=n(A);if(S!==void 0&&typeof S!="boolean")throw new TypeError(`HTTP ${A} must be boolean`)}let h=n("maxResponseBytes");if(h!==void 0&&(!Number.isInteger(h)||h<1||h>64*1024*1024))throw new TypeError("HTTP maxResponseBytes must be a bounded integer");let d=n("signal");if(d!==void 0){if(G.isProxy(d)||!(d instanceof AbortSignal))throw new TypeError("HTTP signal must be a native AbortSignal");try{de(d)}catch{throw new TypeError("HTTP signal must be a native AbortSignal")}}for(let A of["importUndici","lookupFn","validateResponse"]){let S=n(A);if(S!==void 0&&typeof S!="function")throw new TypeError(`HTTP ${A} must be a function`)}let f=n("fetchImpl"),p=f||globalThis.fetch;if(typeof p!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let m=s??12e3,x=(o||"GET").toUpperCase(),b=n("headers"),y=$r(b),v=Object.assign(Object.create(null),y);Object.keys(v).some(A=>A.toLowerCase()==="accept")||(v.Accept="application/json");let O=n("body");O!=null&&typeof O!="string"&&(Object.keys(v).find(S=>S.toLowerCase()==="content-type")||(v["Content-Type"]="application/json"),O=_r(O));let k=i??Ar,R=n("lookupFn"),E=!f,T=n("untrustedUrl")===!0,N=n("sameOriginRedirectsOnly")===!0,L=n("importUndici"),w=n("validateResponse"),I=d,q=h??null,$=async()=>{let A;for(let S=0;S<=k;S++){I&&Tr.call(I);let J=Se("http");try{let D=await zr(e,{fetchImpl:p,method:x,headers:v,body:O,timeoutMs:m,lookupFn:R,realFetch:E,untrustedUrl:T,maxResponseBytes:q,sameOriginRedirectsOnly:N,importUndici:L,validateResponse:w,signal:I,redirectPolicy:u,maxRedirects:c});return J?.("succeeded"),D}catch(D){A=D;let j=Ue=>{if(!D||typeof D!="object"&&typeof D!="function"||G.isProxy(D))return;let le=Object.getOwnPropertyDescriptor(D,Ue);return le&&Object.hasOwn(le,"value")?le.value:void 0},K=j("status");J?.("failed",K);let Q=j("oracleTimeout")===!0||j("name")==="AbortError"||j("name")==="TimeoutError"||de(I),Le=new Set([408,425,429]),ur=j("retryable")===!1?!1:K!=null?Le.has(K)||Er.has(K)&&bt.has(x):!Q&&bt.has(x);if(S===k||!ur)throw D;let ft=Dr(S,j("retryAfter")),dr=Se("retry"),pt=!1;try{I?await new Promise((Ue,le)=>{let ht,ue=()=>{clearTimeout(ht),gt.call(I,"abort",ue),le(kr(I)||new DOMException("Aborted","AbortError"))};if(de(I)){ue();return}ht=setTimeout(()=>{gt.call(I,"abort",ue),Ue()},ft),Cr.call(I,"abort",ue,{once:!0}),de(I)&&ue()}):await jr(ft),pt=!0}finally{dr?.(pt?"succeeded":"failed")}}}throw A};if(!(n("dedupe")!==!1&&!I&&At(x,O)))return $();let C=Br(x,e,v,{untrustedUrl:T,maxResponseBytes:q,sameOriginRedirectsOnly:N,redirectPolicy:u,maxRedirects:c,timeoutMs:m,retries:k,fetchImpl:Ae(p),realFetch:E,lookupFn:Ae(R),importUndici:Ae(L),validateResponse:Ae(w)},O),U=He.get(C);if(U){let A=Se("shared");try{let S=await U;return A?.("succeeded"),S}catch(S){throw A?.("failed"),S}}let g=$().finally(()=>He.delete(C));return He.set(C,g),g}var ze={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}};var Vr=new Map(Object.values(ze).map(e=>[e.chainId,e]));function vt(e){return Vr.get(Number(e))||null}function Nt(e,t=process.env){let r=vt(e);if(!r)return null;for(let n of r.rpcEnv){let o=(t[n]||"").trim();if(o)return o}return null}import{Interface as Wr,getAddress as ms}from"ethers";var bs=new Wr(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);var Ve={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Gr(e,{rpcUrl:t,env:r=process.env}={}){if(t)return t;let n=Nt(e,r);return n||Ve[Number(e)]||null}var Kr=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Yr(e){let t=String(e||""),r=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!Kr.test(r))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return r}var pe=new Map,Tt=new Map;function Jr(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function Qr(e){if(e?.error)throw Jr(e.error);return e?.result}function Xr(e,t,r){return`${e}
|
|
3
3
|
${t}
|
|
4
|
-
${JSON.stringify(r??[])}`}async function Lr(e,t,r){return ye(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function we(e,t,r=[],n={}){let o=String(t||""),i=Nr(o),s=$r(e,n);if(!s)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(i==="eth_chainid"&&n.cacheChainId!==!1){let l=ht.get(s);if(l!=null)return l}let a=n.dedupe!==!1&&!n.signal?Cr(s,o,r):null;if(a&&se.has(a))return se.get(a);let d=(async()=>{let l=await Lr(s,{jsonrpc:"2.0",id:1,method:t,params:r},n),h=Pr(l);return i==="eth_chainid"&&typeof h=="string"&&ht.set(s,h),h})();return a&&(se.set(a,d),d.finally(()=>{se.get(a)===d&&se.delete(a)}).catch(()=>{})),d}var Me=999,ve=1,Hr=8453,mt="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",jr="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",yt="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",vr="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",Mr=".80002105.reverse",wt=/^0x[a-fA-F0-9]{40}$/,bt=new TextEncoder,gt=e=>"0x"+Buffer.from(e).toString("hex"),Y=e=>gt(je(bt.encode(e))).slice(0,10),xt=e=>e.toLowerCase().replace(/^0x/,"").padStart(64,"0");function be(e){let t=new Uint8Array(32);if(e)for(let r of String(e).split(".").reverse()){let n=je(bt.encode(r)),o=new Uint8Array(64);o.set(t,0),o.set(n,32),t=je(o)}return gt(t)}function Fe(e){if(!e||e==="0x"||/^0x0*$/.test(e))return"";try{let t=e.slice(2),r=parseInt(t.slice(0,64),16)*2,n=parseInt(t.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let o=t.slice(r+64,r+64+n*2);return Buffer.from(o,"hex").toString("utf8")}catch{return""}}async function X(e,t,r){try{return await we(e,"eth_call",[{to:t,data:r},"latest"])}catch{return null}}async function Fr(e){let t=await X(Me,mt,Y("primaryName(address)")+xt(e)),r=Fe(t);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function Ur(e){let t=await X(Me,jr,Y("getName(address)")+xt(e)),r=Fe(t);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function St(e,t,r){let n=await X(e,r,Y("name(bytes32)")+t.slice(2));return Fe(n)||null}async function Dr(e){let t=be(`${e.slice(2).toLowerCase()}.addr.reverse`),r=await X(ve,yt,Y("resolver(bytes32)")+t.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:St(ve,t,n)}async function Br(e){let t=be(e.slice(2).toLowerCase()+Mr);return St(Hr,t,vr)}var zr=[{source:"hl",fn:Fr},{source:"hype",fn:Ur},{source:"ens",fn:Dr},{source:"basename",fn:Br}];async function Gr(e){let t=be(e),r=await X(Me,mt,Y("ownerOf(uint256)")+t.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function Wr(e,t,r){let n=be(t),o=await X(e,r,Y("resolver(bytes32)")+n.slice(2));if(!o)return null;let i="0x"+o.slice(-40);if(/^0x0+$/.test(i))return null;let s=await X(e,i,Y("addr(bytes32)")+n.slice(2));if(!s)return null;let u="0x"+s.slice(-40);return/^0x0+$/.test(u)?null:u}async function Et(e){let t=String(e||"").trim().toLowerCase();if(!t||!t.includes("."))return null;if(t.endsWith(".hl")){let r=await Gr(t);return r?{address:r,source:"hl",name:t}:null}if(t.endsWith(".eth")){let r=await Wr(ve,t,yt);return r?{address:r,source:t.endsWith(".base.eth")?"basename":"ens",name:t}:null}return null}var No=zr.map(e=>e.source);var qr="protective-monitors",Vr="read-only",Co=Object.freeze(["depeg","oracleDeviation","exploitFeed","goplus","liquidationLadder"]),Jr="https://hermes.pyth.network",Kr="https://coins.llama.fi",Yr="https://api.llama.fi/hacks",Xr="https://api.gopluslabs.io/api/v1/token_security",Zr="https://api.v3.aave.com/user",Qr=Object.freeze({USDT:"2b89b9dc8fdf9f34709a5b106b472f0f39bb6ca9ce04b0fd7f2e971688e2e53b",USDC:"eaa020c61cc479712813461ce153894a96a6c00b21ed0cfc2798d1f9a9e9c94a"}),en=Object.freeze({USDT:"coingecko:tether",USDC:"coingecko:usd-coin",DAI:"coingecko:dai"}),tn=Object.freeze(["is_honeypot","is_proxy","is_mintable","owner_change_balance","hidden_owner","selfdestruct","cannot_buy","cannot_sell_all","is_blacklisted"]),At=Object.freeze({liquidatable:0,danger:1,critical:2,warning:3,healthy:4}),rn=/^0x[0-9a-fA-F]{40}$/,nn=/^[0-9a-fA-F]{64}$/;function ie(e,t={}){return{ok:!0,provider:qr,op:e,alertOnly:!0,execution:Vr,exec:!1,...t}}function j(e,t){throw new Error(`protective-monitors: ${e}${t?` ${t}`:""}`)}async function ae(e,t={}){return typeof t.http=="function"?t.http(e,t):typeof t.httpJson=="function"?t.httpJson(e,t):ye(e,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,retries:t.retries??0})}function ge(e){return String(e||"USDT").trim().toUpperCase().replace(/\/USD$/,"")}function on(e={}){if(e.feedId){let n=String(e.feedId).replace(/^0x/i,"");return nn.test(n)||j("feedId must be a 32-byte hex id"),n.toLowerCase()}let t=ge(e.symbol),r=Qr[t];return r||j("unknown symbol",t),r}function sn(e={}){if(e.llamaCoin)return String(e.llamaCoin);let t=ge(e.symbol);return en[t]||`coingecko:${t.toLowerCase()}`}function Tt(e,t){let r=Number(e.thresholdBps??t);return(!Number.isFinite(r)||r<0)&&j("thresholdBps must be a non-negative number"),r}function an(e){let t=Array.isArray(e?.parsed)?e.parsed[0]:e?.price?e:null,r=Number(t?.price?.price),n=Number(t?.price?.expo);return(!Number.isFinite(r)||!Number.isFinite(n))&&j("no pyth price returned"),n<0?r/10**-n:r*10**n}function cn(e,t){let r=e?.coins?.[t]||e?.coins?.[String(t).toLowerCase()],n=Number(r?.price);return Number.isFinite(n)?n:null}function ln(e,t={}){let r=String(t.pythBaseUrl||Jr).replace(/\/$/,""),n=new URL(`${r}/v2/updates/price/latest`);return n.searchParams.append("ids[]",e),n.searchParams.set("parsed","true"),n.toString()}function un(e,t={}){return`${String(t.llamaCoinsBaseUrl||Kr).replace(/\/$/,"")}/prices/current/${encodeURIComponent(e)}`}async function Ot(e,t){let r=on(e),n=await ae(ln(r,t),t),o=an(n);return o>0||j("pyth price must be positive"),{id:r,price:o}}async function _t(e,t){let r=sn(e),n=await ae(un(r,t),t);return{coin:r,price:cn(n,r)}}async function dn(e={},t={}){let r=Number(e.peg??1);(!Number.isFinite(r)||r<=0)&&j("peg must be a positive number");let n=Tt(e,50),o=await Ot(e,t),i=Math.round(Math.abs(o.price-r)*1e4),s={required:!1,llamaPrice:null};try{let u=await _t(e,t);s={required:!1,llamaPrice:u.price,llamaCoin:u.coin}}catch{s={required:!1,llamaPrice:null}}return ie("depeg",{symbol:ge(e.symbol),feedId:o.id,price:o.price,peg:r,thresholdBps:n,deviationBps:i,alert:i>n,crossCheck:s})}async function fn(e={},t={}){let r=Tt(e,100),n=await Ot(e,t),o=await _t(e,t);o.price>0||j("llama price required for oracleDeviation");let i=(n.price+o.price)/2,s=Math.round(Math.abs(n.price-o.price)/i*1e4);return ie("oracleDeviation",{symbol:ge(e.symbol),pythPrice:n.price,llamaPrice:o.price,mid:i,thresholdBps:r,deviationBps:s,alert:s>r})}function pn(e,t){return String(e.id||e.defillamaId||e.slug||`hack-${t}`)}function hn(e,t){return{id:pn(e,t),name:String(e.name||e.protocol||"unknown"),classification:e.classification?String(e.classification):null,technique:e.technique?String(e.technique):null,amount:Number.isFinite(Number(e.amount))?Number(e.amount):null,chain:Array.isArray(e.chain)?e.chain.map(String):e.chain?[String(e.chain)]:[],source:e.source?String(e.source):null}}function mn(e){return(String(e).match(/<item\b[\s\S]*?<\/item>/gi)||[]).map((r,n)=>{let o=i=>{let s=r.match(new RegExp(`<${i}[^>]*>([\\s\\S]*?)</${i}>`,"i"));return s?s[1].replace(/<!\[CDATA\[|\]\]>/g,"").trim():""};return{id:o("guid")||o("link")||o("title")||`rss-${n}`,name:o("title")||"unknown",classification:"rss",technique:null,amount:null,chain:[],source:o("link")||null}})}function kt(e){if(typeof e=="string"){let t=e.trim();if(t.startsWith("<"))return mn(t);try{return kt(JSON.parse(t))}catch{j("exploitFeed payload is not JSON or RSS")}}return Array.isArray(e)?e:Array.isArray(e?.hacks)?e.hacks:Array.isArray(e?.items)?e.items:[]}function yn(e){return e.map((t,r)=>({item:t,index:r})).sort((t,r)=>{let n=String(t.item.id).localeCompare(String(r.item.id));return n!==0?n:t.index-r.index}).map(t=>t.item)}async function wn(e={},t={}){let r=Yr,n=e.payload??await ae(r,t),o=yn(kt(n).map(hn));return ie("exploitFeed",{count:o.length,fingerprint:o.map(i=>i.id).join("|"),items:o,alert:o.length>0})}function bn(e){return e===!0||e===1||e==="1"}function gn(e,t){let r=e?.result&&typeof e.result=="object"?e.result:e,n=String(t).toLowerCase();if(r&&typeof r=="object"){for(let[o,i]of Object.entries(r))if(String(o).toLowerCase()===n&&i&&typeof i=="object")return{address:o,token:i}}return null}async function Ue(e={},t={}){e.asSoleGate===!0&&j("goplus is a second opinion and must never be a sole gate");let r=String(e.address||e.token||"").trim();rn.test(r)||j("goplus requires an EVM token address");let n=Number(e.chainId??1);(!Number.isInteger(n)||n<=0)&&j("chainId must be a positive integer");let i=`${String(t.goplusBaseUrl||Xr).replace(/\/$/,"")}/${n}?contract_addresses=${r}`,s=e.payload??await ae(i,t),u=gn(s,r);u||j("goplus returned no result for",r);let a=tn.filter(d=>bn(u.token[d]));return ie("goplus",{chainId:n,address:r.toLowerCase(),role:"second-opinion",secondOpinion:!0,soleGate:!1,neverSoleGate:!0,token:{address:u.address,name:u.token.token_name||null,symbol:u.token.token_symbol||null},findings:a,alert:a.length>0,note:"second opinion only \u2014 never the sole gate"})}function xn(e){let t=Number(e);return(!Number.isFinite(t)||t<0)&&j("healthFactor must be a non-negative number"),t<1?"liquidatable":t<1.05?"danger":t<1.2?"critical":t<1.5?"warning":"healthy"}function Sn(e,t){let r=Number(e.healthFactor??e.hf);Number.isFinite(r)||j("position healthFactor required");let n=xn(r);return{id:String(e.id||e.protocol||`pos-${t}`),protocol:String(e.protocol||"unknown"),healthFactor:r,collateralUsd:e.collateralUsd!=null?Number(e.collateralUsd):null,debtUsd:e.debtUsd!=null?Number(e.debtUsd):null,rung:n}}async function En(e={},t={}){let r=null;if(Array.isArray(e.positions))r=e;else if(Array.isArray(e))r={positions:e};else{let s=String(e.user||"").trim();s||j("liquidationLadder requires user or positions");let u=String(t.aaveUrl||`${Zr}/${s}`);r=await ae(u,t)}let o=(Array.isArray(r?.positions)?r.positions:[]).map(Sn),i=o.reduce((s,u)=>s?At[u.rung]<At[s]?u.rung:s:u.rung,null);return ie("liquidationLadder",{user:r?.user||e.user||null,chainId:r?.chainId??e.chainId??null,ladder:o,worstRung:i,alert:o.some(s=>s.rung!=="healthy")})}var Lo=Object.freeze({depeg:dn,oracleDeviation:fn,exploitFeed:wn,goplus:Ue,liquidationLadder:En});import ee from"node:fs";import Mn from"node:os";import Se from"node:path";import{randomUUID as Fn}from"node:crypto";var jo=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),vo=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),U=(e,t=0,r=1)=>Math.min(r,Math.max(t,e)),M=e=>Number.isFinite(Number(e))?Number(e):null,An=e=>Math.round(e*1e4)/1e4;function F(e,t,r,n=!0){!n||r===null||!Number.isFinite(r)||e.push({feature:t,value:An(r)})}function Tn(e,t){let r=M(e.repeatBuys??e.repeat_buys??e.buyCount),n=M(e.walletWinRate??e.winRate);F(t,"repeat_buys",r===null?null:U((r-1)/4)*.38),F(t,"wallet_win_rate",n===null?null:(U(n)-.5)*.5)}function On(e,t){let r=M(e.ageHours??e.poolAgeHours),n=M(e.liquidityUsd??e.liquidity),o=e.liquidityLocked??e.locked;F(t,"pool_age",r===null?null:r<24?-.42:U(r/720)*.12),F(t,"liquidity",n===null?null:(U(Math.log10(Math.max(1,n))/7)-.5)*.28),F(t,"liquidity_lock",o==null?null:o?.12:-.28)}function _n(e,t){let r=M(e.floorChange??e.floorChangePct),n=M(e.sales??e.saleCount);F(t,"floor_change",r===null?null:U(r,-1,1)*.35),F(t,"sales_depth",n===null?null:U(n/50)*.18)}function kn(e,t){let r=M(e.flowImbalance??e.imbalance),n=M(e.fundingRate??e.funding);F(t,"flow_imbalance",r===null?null:U(r,-1,1)*.42),F(t,"funding",n===null?null:-U(n*100,-1,1)*.12)}function $n(e,t){let r=M(e.marketProbability??e.marketPrice??e.probability),n=M(e.fairProbability??e.referenceProbability??e.fairValue);F(t,"probability_mispricing",r===null||n===null?null:U(n-r,-1,1)*.65);let o=M(e.liquidityUsd??e.liquidity);F(t,"market_liquidity",o===null?null:U(Math.log10(Math.max(1,o))/6)*.12)}var Mo=Object.freeze({wallet:Tn,pool:On,nft_floor:_n,hl_flow:kn,prediction_market:$n});import{createHash as Cn}from"node:crypto";var Uo=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Do=Object.freeze(["read","simulate"]);var Bo=1440*60;var ce=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},Rn=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,Nn=Object.freeze(["privkey","wif","xprv","seed"]);function $t(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return Rn.test(t)||Nn.includes(r)}var In=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Pn=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function Z(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=Pn.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:i,re:s}of In)if(!(o&&i.startsWith("raw-32-byte-hex"))&&s.test(e))throw new ce(t,i);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,i]of e.entries()){if(typeof o=="string"&&$t(o))throw new ce(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");Z(o,`${t}[key]`,r),Z(i,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let i of e.values())Z(i,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,i)=>Z(o,`${t}[${i}]`,r)),e;for(let[o,i]of Object.entries(e)){if($t(o))throw new ce(`${t}.${o}`,"forbidden-key-name");Z(i,`${t}.${o}`,r,o)}return e}var De=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),es=Object.freeze(Object.fromEntries(De.map((e,t)=>[e,Object.freeze(t+1<De.length?[De[t+1]]:[])])));function Be(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(Be).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${Be(e[t])}`).join(",")}}`}function Ln(e){return e===void 0?null:JSON.parse(JSON.stringify(e))}function ze(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))ze(t)}return e}function Hn(e,t="fact"){try{Z(e,t)}catch{throw new Error(`${t} contains custody material and is forbidden`)}}function jn(e){return Cn("sha256").update(Be(e)).digest("hex")}function vn({tradeId:e,state:t,fact:r,asOf:n,previousHash:o,external:i}){let s={tradeId:e,state:t,asOf:n,previousHash:o??null,external:i===!0,fact:Ln(r)};return ze({...s,hash:jn(s)})}function Rt({tradeId:e,intent:t,asOf:r=0}={}){if(!e||typeof e!="string")throw new Error("tradeId is required");if(!t||typeof t!="object"||Array.isArray(t))throw new Error("intent fact is required");Hn(t,"intent");let n=vn({tradeId:e,state:"intent",fact:t,asOf:r,previousHash:null,external:!1});return ze({tradeId:e,state:"intent",events:[n],headHash:n.hash,custody:"none",execution:"prepare-only"})}function Nt(e,t={}){if(!e||typeof e!="object")throw new TypeError("signal required");if(e.noTrade===!0)throw new Error("NO_TRADE signal cannot open a trade lifecycle");if(e.executionAllowed===!0)throw new Error("executionAllowed must be false on public plane");let r=String(t.tradeId||`sig-${e.id||"unknown"}`).slice(0,128),n={source:"signal_score",signalId:e.id,signalType:e.type,score:e.score,confidence:e.confidence,flags:e.flags||[],promote:"research_only",execution:"prepare-only",custody:"none",note:"Cold signal \u2192 prepare intent only. Owner wallet must sign any later tx.",...t.intentExtra&&typeof t.intentExtra=="object"?t.intentExtra:{}},o=Rt({tradeId:r,intent:n,asOf:t.asOf??Date.now()});return{tradeId:r,intent:n,lifecycle:o,recommendation:"PREPARE_RESEARCH_ONLY"}}var Ct=1,Ge=5e3,Un=Object.freeze({1:new Set(["0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","0xdac17f958d2ee523a2206206994597c13d831ec","0x6b175474e89094c44da98b954eedeac495271d0","0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2"]),8453:new Set(["0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0x4200000000000000000000000000000000000006"]),42161:new Set(["0xaf88d065e77c8cc2239327c5edb3a432268e5831","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x82af49447d8a07e3bd95bd0d56f35241523fbab1"])}),Dn=/^0x[0-9a-fA-F]{40}$/,Bn=/^0x[0-9a-fA-F]{64}$/,zn=/^(?:0|[1-9]\d*)(?:\.\d{1,2})?$/;function D(e,t){let r=String(e||"").trim();if(!Dn.test(r))throw new TypeError(`${t} must be a 0x-prefixed EVM address`);return r.toLowerCase()}function Lt(e,t){let r=Un[Number(e)];if(!r)return!1;try{return r.has(D(t,"token"))}catch{return!1}}function le(e,t="usd"){let r=typeof e=="number"?String(e):e;if(typeof r!="string"||!zn.test(r))throw new TypeError(`${t} must be a non-negative decimal string with at most 2 decimal places`);let[n,o=""]=r.split("."),i=(o+"00").slice(0,2);return BigInt(n)*100n+BigInt(i)}function ue(e){let t=BigInt(e);if(t<0n)throw new RangeError("centsToUsd: cents must be non-negative");let r=t/100n,n=t%100n;return`${r.toString()}.${n.toString().padStart(2,"0")}`}function Gn({dailyCapUsd:e,spentTodayUsd:t,proportionalUsd:r=null}){let n=le(e,"dailyCapUsd"),o=le(t,"spentTodayUsd"),i=n-o;if(i<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"daily-cap-exhausted"};if(r==null)return{sizeCents:i,sizeUsd:ue(i),basis:"cap-only"};let s=le(r,"proportionalUsd");if(s<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"sized-to-zero"};let u=s<i?s:i;return{sizeCents:u,sizeUsd:ue(u),basis:u===i?"cap-limited":"proportional"}}function Wn(e={}){let t=String(e.txHash||"").trim().toLowerCase();if(!Bn.test(t))throw new TypeError("event.txHash must be a 32-byte tx hash");let r=D(e.token,"event.token"),n=D(e.from,"event.from"),o=D(e.to,"event.to"),i=e.txFrom==null?null:D(e.txFrom,"event.txFrom");return{txHash:t,token:r,from:n,to:o,txFrom:i,chainId:Number(e.chainId),blockNumber:Number.isFinite(Number(e.blockNumber))?Number(e.blockNumber):null,logIndex:Number.isFinite(Number(e.logIndex))?Number(e.logIndex):null,valueUsd:e.valueUsd==null?null:String(e.valueUsd)}}function qn(e,{followedWallet:t}={}){let r=D(t,"followedWallet");return e.txFrom?e.txFrom!==r?{included:!1,reason:"not-initiated-by-followed-wallet"}:Lt(e.chainId,e.token)?{included:!1,reason:"quote-asset-transfer"}:e.to===r?{included:!0,side:"buy"}:e.from===r?{included:!0,side:"sell"}:{included:!1,reason:"wallet-not-a-party"}:{included:!1,reason:"tx-from-unknown"}}function Vn({chainId:e,txHash:t,noTrade:r}){return{id:`follow-mirror:${e}:${t}`,type:"wallet_mirror",score:r?0:1,confidence:r?0:1,noTrade:r,executionAllowed:!1,flags:r?["FOLLOW_MIRROR","NO_TRADE"]:["FOLLOW_MIRROR"]}}function xe({chainId:e,txHash:t,token:r,side:n,sizeUsd:o,sizeBasis:i,followedWallet:s,refuseReason:u=null}={}){let a=Vn({chainId:e,txHash:t,noTrade:u!=null});try{let d=Nt(a,{tradeId:`follow-mirror-${e}-${t}`,intentExtra:{source:"follow_mirror",chain:e,followedWallet:s,token:r,side:n,sizeUsd:o,sizeBasis:i,txHash:t,executionAllowed:!1,backendSigner:!1,note:"Wallet-follow mirror. Cold, prepare-only. Owner wallet must sign any later tx."}});return{ok:!0,requiresWalletSignature:!0,backendSigner:!1,executionAllowed:!1,tradeId:d.tradeId,chain:e,token:r,side:n,sizeUsd:o,sizeBasis:i,txHash:t,followedWallet:s,recommendation:d.recommendation,lifecycle:d.lifecycle,intent:d.intent}}catch(d){return{ok:!1,reason:u||String(d?.message||d)}}}function Jn(e=[],{followedWallet:t,dailyCapUsd:r,spentTodayUsd:n="0",seenTxHashes:o=new Set,honeypotResults:i={}}={}){if(!Array.isArray(e))throw new TypeError("rawEvents must be an array");let s=D(t,"followedWallet"),u=new Set(o),a=le(n,"spentTodayUsd"),d=le(r,"dailyCapUsd"),l=[],h=[],p=[];for(let f of e){let c;try{c=Wn(f)}catch(x){p.push({txHash:f?.txHash??null,reason:`malformed-event: ${x.message}`});continue}if(u.has(c.txHash)){p.push({txHash:c.txHash,reason:"duplicate-tx"});continue}let y=qn(c,{followedWallet:s});if(!y.included){p.push({txHash:c.txHash,reason:y.reason});continue}let w=i[c.token];if(w?.flagged){u.add(c.txHash);let x=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:"0.00",sizeBasis:"refused",followedWallet:s,refuseReason:`token flagged: ${w.reason||"security check flagged this token"}`});h.push({txHash:c.txHash,token:c.token,side:y.side,reason:x.reason});continue}if(d-a<=0n){u.add(c.txHash);let x=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:"0.00",sizeBasis:"refused",followedWallet:s,refuseReason:"daily-cap-exhausted"});h.push({txHash:c.txHash,token:c.token,side:y.side,reason:x.reason});continue}let R=Gn({dailyCapUsd:ue(d),spentTodayUsd:ue(a),proportionalUsd:c.valueUsd});if(R.sizeCents<=0n){u.add(c.txHash);let x=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:"0.00",sizeBasis:R.basis,followedWallet:s,refuseReason:R.basis});h.push({txHash:c.txHash,token:c.token,side:y.side,reason:x.reason});continue}let N=xe({chainId:c.chainId,txHash:c.txHash,token:c.token,side:y.side,sizeUsd:R.sizeUsd,sizeBasis:R.basis,followedWallet:s});u.add(c.txHash),N.ok?(l.push(N),a+=R.sizeCents):h.push({txHash:c.txHash,token:c.token,side:y.side,reason:N.reason})}return{intents:l,refusals:h,skipped:p,seenTxHashes:u,spentTodayUsd:ue(a)}}function We(e=process.env){let t=e.ORACLE_CONFIG_DIR||Se.join(Mn.homedir(),".config","oracle");return Se.join(t,"follow-mirror.json")}function It(){return{version:Ct,targets:{}}}function Pt(e,t){return`${String(e).toLowerCase()}:${D(t,"address")}`}function Ee(e){try{let t=ee.readFileSync(e,"utf8"),r=JSON.parse(t);return!r||typeof r!="object"||r.version!==Ct||!r.targets||typeof r.targets!="object"?It():r}catch{return It()}}function Kn(e,t){let r=Se.dirname(e);ee.mkdirSync(r,{recursive:!0,mode:448});let n=Se.join(r,`.follow-mirror.${process.pid}.${Date.now()}.${Fn()}.tmp`);try{ee.writeFileSync(n,`${JSON.stringify(t)}
|
|
5
|
-
`,{mode:384,flag:"wx"}),
|
|
4
|
+
${JSON.stringify(r??[])}`}async function Zr(e,t,r){return fe(e,{method:"POST",body:t,fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3,signal:r.signal})}async function ee(e,t,r=[],n={}){let o=String(t||""),s=Yr(o),i=Gr(e,n);if(!i)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(s==="eth_chainid"&&n.cacheChainId!==!1){let c=Tt.get(i);if(c!=null)return c}let a=n.dedupe!==!1&&!n.signal?Xr(i,o,r):null;if(a&&pe.has(a))return pe.get(a);let u=(async()=>{let c=await Zr(i,{jsonrpc:"2.0",id:1,method:t,params:r},n),h=Qr(c);return s==="eth_chainid"&&typeof h=="string"&&Tt.set(i,h),h})();return a&&(pe.set(a,u),u.finally(()=>{pe.get(a)===u&&pe.delete(a)}).catch(()=>{})),u}var Ss=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"});var As=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),We=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),Ge=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var he=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",stableQuoteAssets:["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xdAC17F958D2ee523a2206206994597C13D831ec7"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85","0x94b008aA00579c1307B0EF2c499aD98a8ce58e58"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",stableQuoteAssets:["0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d","0x55d398326f99059fF775485246999027B3197955"],venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",stableQuoteAssets:["0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","0xc2132D05D31c914a87C6611C10748AEb04B58e8F"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",stableQuoteAssets:["0x5fc5360d0400a0fd4f2af552add042d716f1d168"],venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",stableQuoteAssets:["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",stableQuoteAssets:["0xaf88d065e77c8cC2239327C5EDb3A432268e5831","0xFd086bC7CD5C481DCC9C85ebE478A1C0b69FCbb9"],venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",stableQuoteAssets:["0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E"],venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);var H="unknown",Ct=/^0x[0-9a-fA-F]{64}$/,Te=/^0x[0-9a-fA-F]{40}$/;function Ne(e){if(e==null)return null;try{return BigInt(e)}catch{return null}}function kt(e,{timeoutMs:t=2e4,fetchImpl:r=globalThis.fetch}={}){return async function(o,s=[]){let i=new AbortController,l=setTimeout(()=>i.abort(),t);try{let u=await(await r(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:o,params:s}),signal:i.signal})).json();if(u.error)throw new Error(`${o} rpc: ${u.error.message||"rpc error"}`);return u.result}finally{clearTimeout(l)}}}async function tn(e,t){let r={txHash:e,txFrom:null,txTo:null,nativeValueWei:H,gasWei:H,gasUsed:H,effectiveGasPrice:H,status:H,error:null},n=[];try{let o=await t("eth_getTransactionByHash",[e]);if(o){let s=Ne(o.value);s!=null&&(r.nativeValueWei=s.toString()),typeof o.from=="string"&&Te.test(o.from)&&(r.txFrom=o.from.toLowerCase()),typeof o.to=="string"&&Te.test(o.to)&&(r.txTo=o.to.toLowerCase())}else n.push("eth_getTransactionByHash: null (not found / pruned)")}catch(o){n.push(`eth_getTransactionByHash: ${o?.message||o}`)}try{let o=await t("eth_getTransactionReceipt",[e]);if(o){let s=Ne(o.gasUsed),i=Ne(o.effectiveGasPrice??o.gasPrice);if(s!=null&&(r.gasUsed=s.toString()),i!=null&&(r.effectiveGasPrice=i.toString()),s!=null&&i!=null&&(r.gasWei=(s*i).toString()),o.status!=null){let l=Ne(o.status);r.status=l==null?H:l===1n?"success":"reverted"}!r.txFrom&&typeof o.from=="string"&&Te.test(o.from)&&(r.txFrom=o.from.toLowerCase())}else n.push("eth_getTransactionReceipt: null (pending / pruned)")}catch(o){n.push(`eth_getTransactionReceipt: ${o?.message||o}`)}return n.length&&(r.error=n.join("; ")),r}async function Ke(e,t={}){let{rpc:r,concurrency:n=4,cap:o=200,cache:s=new Map,wallet:i}=t;if(typeof r!="function")throw new TypeError("enrichNativeLeg: opts.rpc(method, params) is required");if(!Array.isArray(e))throw new TypeError("enrichNativeLeg: events must be an array");let l=typeof i=="string"&&Te.test(i)?i.toLowerCase():null,a=[],u=[],c=new Set;for(let b of e){let y=String(b?.txHash||"").toLowerCase();!Ct.test(y)||c.has(y)||(c.add(y),u.push(y))}let h=u.filter(b=>!s.has(b)),d=Math.max(0,h.length-o),f=h.slice(0,o);for(let b of h.slice(o))a.push({txHash:b,stage:"cap",error:`per-call cap ${o} exceeded`});let p=0,m=Array.from({length:Math.max(1,Math.min(n,f.length))},async()=>{for(;p<f.length;){let b=f[p++];try{let y=await tn(b,r);s.set(b,y),y.error&&a.push({txHash:b,stage:"nativeLeg",error:y.error})}catch(y){let v={txHash:b,nativeValueWei:H,gasWei:H,error:String(y?.message||y)};s.set(b,v),a.push({txHash:b,stage:"nativeLeg",error:v.error})}}});return await Promise.all(m),{events:e.map(b=>{let y=String(b?.txHash||"").toLowerCase(),v=s.get(y);if(!v){let k=Ct.test(y)?`per-call cap ${o} exceeded`:"invalid txHash";return{...b,nativeValueWei:H,gasWei:H,nativeLeg:{error:k}}}let O={...b,txFrom:b.txFrom??v.txFrom??null,nativeValueWei:v.nativeValueWei,gasWei:v.gasWei,nativeLeg:v.error?{...v,error:v.error}:{...v,error:null}};return l&&String(b.from||"").toLowerCase()===l&&(O.nativeReceived=H),O}),errors:a,looked:f.length,capped:d}}var It="0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef",Rt=Object.freeze({1:Object.freeze(["https://mainnet.gateway.tenderly.co","https://eth.drpc.org","https://rpc.flashbots.net"]),8453:Object.freeze(["https://base.gateway.tenderly.co","https://mainnet.base.org","https://base.drpc.org"]),42161:Object.freeze(["https://arbitrum.gateway.tenderly.co","https://arb1.arbitrum.io/rpc","https://arbitrum.drpc.org"]),4663:Object.freeze(["https://rpc.mainnet.chain.robinhood.com"])}),rn=/publicnode/i;function Ot(e){return rn.test(String(e||""))}var nn=e=>typeof e=="string"&&/^https:\/\//.test(e),Je=new Map(he.filter(e=>Number.isInteger(Number(e?.chainId))&&Number(e.chainId)>0).map(e=>[Number(e.chainId),e]));function on(){return[...new Set([...Je.keys(),...Object.keys(Rt).map(Number)])].sort((t,r)=>t-r)}function Lt(e,{env:t=null,curated:r=Rt,fallbacks:n=Ve}={}){let o=Number(e),s=[],i=[],l=(d,f)=>{!nn(d)||s.includes(d)||(s.push(d),i.push(f))};if(t&&typeof t=="object"){let d=Je.get(o);for(let f of Array.isArray(d?.rpcEnv)?d.rpcEnv:[]){let p=String(t[f]||"").trim();p&&l(p,`env:${f}`)}}let a=r?.[o],u=Array.isArray(a)&&a.length>0;if(u)for(let d of a)l(d,"curated");let c=n?.[o];c&&!(u&&Ot(c))&&l(c,"public-fallback");let h=s.length>0&&s.every(Ot);return{chainId:o,urls:s,curated:u,shallow:h,source:i}}var me=Object.freeze(Object.fromEntries(on().map(e=>[e,Object.freeze(Lt(e).urls)]).filter(([,e])=>e.length>0)));function sn(e=me){return Object.keys(e).map(Number).filter(t=>Number.isInteger(t)&&t>0&&e[t]?.length).sort((t,r)=>t-r)}var an=1e4,cn=e=>new Promise(t=>setTimeout(t,e)),_t=e=>"0x"+BigInt(e).toString(16),ln=e=>"0x"+"0".repeat(24)+e.slice(2).toLowerCase(),$t=e=>"0x"+e.slice(26).toLowerCase(),un=/timeout|timed out|too many requests|rate.?limit|429|502|503|504|internal error|temporarily|aborted|fetch failed|ECONNRESET|socket hang up/i,dn=/too many|exceeds|limited to|not supported on free plan|response too large|range must not exceed|narrow your filter/i,te=class extends Error{constructor(t,{transient:r=!1,tooBig:n=!1,http:o=0}={}){super(t),this.transient=r,this.tooBig=n,this.http=o}};async function fn(e,t,r,n){let o=new AbortController,s=setTimeout(()=>o.abort(),n),i,l;try{i=await fetch(e,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:t,params:r}),signal:o.signal}),l=await i.text()}catch(u){throw new te(`${t} network: ${u.message}`,{transient:!0})}finally{clearTimeout(s)}let a;try{a=JSON.parse(l)}catch{throw new te(`${t} non-JSON http=${i.status}: ${l.slice(0,80)}`,{transient:i.status>=500||i.status===429,http:i.status})}if(a.error){let u=a.error.message||"rpc error";throw new te(`${t} rpc: ${u}`,{transient:un.test(u),tooBig:dn.test(u),http:i.status})}if(i.status!==200)throw new te(`${t} http=${i.status}: ${l.slice(0,80)}`,{transient:i.status>=500||i.status===429,http:i.status});return a.result}async function Ut(e,t,r,{retries:n,timeoutMs:o,onWarn:s}){let i;for(let l of e){for(let a=0;a<=n;a++)try{return{result:await fn(l,t,r,o),url:l}}catch(u){if(i=u,u.tooBig)throw u;if(!u.transient||a===n)break;let c=Math.min(2e3*2**a,8e3)+Math.random()*250;s?.(`retry ${l} (${u.message.slice(0,70)}) in ${Math.round(c)}ms`),await cn(c)}s?.(`endpoint exhausted: ${l} -> ${i?.message.slice(0,70)}`)}throw i??new te("no endpoints available")}async function Ye(e,t,r,n,o,s){let i=[{...t,fromBlock:_t(r),toBlock:_t(n)}];try{let{result:a}=await Ut(e,"eth_getLogs",i,o);Array.isArray(a)&&s.push(...a);return}catch(a){if(!a.tooBig||n<=r)throw a;o.onWarn?.(`splitting ${r}-${n} (${a.message.slice(0,60)})`)}let l=r+Math.floor((n-r)/2);await Promise.all([Ye(e,t,r,l,o,s),Ye(e,t,l+1,n,o,s)])}async function Qe(e,t={}){if(!/^0x[0-9a-fA-F]{40}$/.test(e||""))throw new Error(`invalid address: ${e}`);let{chains:r=sn(t.endpoints??me),lookback:n=1e5,fromBlock:o,toBlock:s,chunkSize:i=an,tokens:l,direction:a="both",retries:u=3,timeoutMs:c=2e4,concurrency:h=4,endpoints:d=null,env:f=process.env,onWarn:p}=t,m={retries:u,timeoutMs:c,onWarn:p},x=ln(e),b=[],y=[],v={},O=new Set;return await Promise.all(r.map(async k=>{let R,E=!1;if(d&&typeof d=="object")R=d[k];else{let T=Lt(k,{env:f});R=T.urls,E=T.shallow}if(!R?.length){y.push({chainId:k,stage:"config",error:"no endpoints configured"});return}E&&p?.(`chain ${k}: only shallow (~128 block) public endpoints; deep lookback will fail \u2014 set ${(Je.get(Number(k))?.rpcEnv||[]).join("/")||"an archive RPC"} for archive depth`);try{let T=s;if(T==null){let{result:g}=await Ut(R,"eth_blockNumber",[],m);T=parseInt(g,16)}let N=Math.max(0,o??T-n+1),L=Math.max(N,T);v[k]={fromBlock:N,toBlock:L,blocks:L-N+1,shallow:E};let w=[];for(let g=N;g<=L;g+=i)w.push([g,Math.min(g+i-1,L)]);let I=[],q=l?.length?{address:l}:{};(a==="in"||a==="both")&&I.push({...q,topics:[It,null,x]}),(a==="out"||a==="both")&&I.push({...q,topics:[It,x,null]});let $=[];for(let g of I)for(let A of w)$.push([g,A]);let P=[],C=0,U=Array.from({length:Math.min(h,$.length)},async()=>{for(;C<$.length;){let[g,[A,S]]=$[C++];try{await Ye(R,g,A,S,m,P)}catch(J){y.push({chainId:k,stage:"getLogs",range:[A,S],error:J.message})}}});await Promise.all(U);for(let g of P){if(!g?.topics||g.topics.length<3)continue;let A=parseInt(g.logIndex,16),S=`${k}|${g.transactionHash}|${A}`;O.has(S)||(O.add(S),b.push({chainId:k,token:g.address.toLowerCase(),from:$t(g.topics[1]),to:$t(g.topics[2]),value:BigInt(g.data==="0x"?"0x0":g.data).toString(),blockNumber:parseInt(g.blockNumber,16),txHash:g.transactionHash,logIndex:A}))}}catch(T){y.push({chainId:k,stage:"range",error:T.message})}})),b.sort((k,R)=>R.blockNumber-k.blockNumber||R.logIndex-k.logIndex),{events:b,errors:y,ranges:v}}import{keccak_256 as Xe}from"@noble/hashes/sha3.js";var et=999,Ze=1,pn=8453,Ft="0x1d9d87eBc14e71490bB87f1C39F65BDB979f3cb7",hn="0x4d5e4ed4D5e4A160Fa136853597cDc2eBBe66494",Pt="0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e",mn="0xC6d566A56A1aFf6508b41f6c90ff131615583BCD",bn=".80002105.reverse",tt=/^0x[a-fA-F0-9]{40}$/,Bt=new TextEncoder,Dt=e=>"0x"+Buffer.from(e).toString("hex"),re=e=>Dt(Xe(Bt.encode(e))).slice(0,10),jt=e=>e.toLowerCase().replace(/^0x/,"").padStart(64,"0");function Ce(e){let t=new Uint8Array(32);if(e)for(let r of String(e).split(".").reverse()){let n=Xe(Bt.encode(r)),o=new Uint8Array(64);o.set(t,0),o.set(n,32),t=Xe(o)}return Dt(t)}function rt(e){if(!e||e==="0x"||/^0x0*$/.test(e))return"";try{let t=e.slice(2),r=parseInt(t.slice(0,64),16)*2,n=parseInt(t.slice(r,r+64),16);if(!Number.isFinite(n)||n<=0)return"";let o=t.slice(r+64,r+64+n*2);return Buffer.from(o,"hex").toString("utf8")}catch{return""}}async function ne(e,t,r){try{return await ee(e,"eth_call",[{to:t,data:r},"latest"])}catch{return null}}async function yn(e){let t=await ne(et,Ft,re("primaryName(address)")+jt(e)),r=rt(t);return r?r.endsWith(".hl")?r:`${r}.hl`:null}async function gn(e){let t=await ne(et,hn,re("getName(address)")+jt(e)),r=rt(t);return r?r.endsWith(".hype")?r:`${r}.hype`:null}async function qt(e,t,r){let n=await ne(e,r,re("name(bytes32)")+t.slice(2));return rt(n)||null}async function wn(e){let t=Ce(`${e.slice(2).toLowerCase()}.addr.reverse`),r=await ne(Ze,Pt,re("resolver(bytes32)")+t.slice(2));if(!r)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:qt(Ze,t,n)}async function xn(e){let t=Ce(e.slice(2).toLowerCase()+bn);return qt(pn,t,mn)}var Sn=[{source:"hl",fn:yn},{source:"hype",fn:gn},{source:"ens",fn:wn},{source:"basename",fn:xn}];async function En(e){let t=Ce(e),r=await ne(et,Ft,re("ownerOf(uint256)")+t.slice(2));if(!r||r.length<66)return null;let n="0x"+r.slice(-40);return/^0x0+$/.test(n)?null:n}async function An(e,t,r){let n=Ce(t),o=await ne(e,r,re("resolver(bytes32)")+n.slice(2));if(!o)return null;let s="0x"+o.slice(-40);if(/^0x0+$/.test(s))return null;let i=await ne(e,s,re("addr(bytes32)")+n.slice(2));if(!i)return null;let l="0x"+i.slice(-40);return/^0x0+$/.test(l)?null:l}async function Ht(e){let t=String(e||"").trim().toLowerCase();if(!t||!t.includes("."))return null;if(t.endsWith(".hl")){let r=await En(t);return r?{address:r,source:"hl",name:t}:null}if(t.endsWith(".eth")){let r=await An(Ze,t,Pt);return r?{address:r,source:t.endsWith(".base.eth")?"basename":"ens",name:t}:null}return null}var li=Sn.map(e=>e.source);var vn="protective-monitors",Nn="read-only",fi=Object.freeze(["depeg","oracleDeviation","exploitFeed","goplus","liquidationLadder"]),Tn="https://hermes.pyth.network",Cn="https://coins.llama.fi",kn="https://api.llama.fi/hacks",In="https://api.gopluslabs.io/api/v1/token_security",On="https://api.v3.aave.com/user",_n=Object.freeze({USDT:"2b89b9dc8fdf9f34709a5b106b472f0f39bb6ca9ce04b0fd7f2e971688e2e53b",USDC:"eaa020c61cc479712813461ce153894a96a6c00b21ed0cfc2798d1f9a9e9c94a"}),$n=Object.freeze({USDT:"coingecko:tether",USDC:"coingecko:usd-coin",DAI:"coingecko:dai"}),Rn=Object.freeze(["is_honeypot","is_proxy","is_mintable","owner_change_balance","hidden_owner","selfdestruct","cannot_buy","cannot_sell_all","is_blacklisted"]),Mt=Object.freeze({liquidatable:0,danger:1,critical:2,warning:3,healthy:4}),Ln=/^0x[0-9a-fA-F]{40}$/,Un=/^[0-9a-fA-F]{64}$/;function be(e,t={}){return{ok:!0,provider:vn,op:e,alertOnly:!0,execution:Nn,exec:!1,...t}}function F(e,t){throw new Error(`protective-monitors: ${e}${t?` ${t}`:""}`)}async function ye(e,t={}){return typeof t.http=="function"?t.http(e,t):typeof t.httpJson=="function"?t.httpJson(e,t):fe(e,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3,retries:t.retries??0})}function ke(e){return String(e||"USDT").trim().toUpperCase().replace(/\/USD$/,"")}function Fn(e={}){if(e.feedId){let n=String(e.feedId).replace(/^0x/i,"");return Un.test(n)||F("feedId must be a 32-byte hex id"),n.toLowerCase()}let t=ke(e.symbol),r=_n[t];return r||F("unknown symbol",t),r}function Pn(e={}){if(e.llamaCoin)return String(e.llamaCoin);let t=ke(e.symbol);return $n[t]||`coingecko:${t.toLowerCase()}`}function zt(e,t){let r=Number(e.thresholdBps??t);return(!Number.isFinite(r)||r<0)&&F("thresholdBps must be a non-negative number"),r}function Bn(e){let t=Array.isArray(e?.parsed)?e.parsed[0]:e?.price?e:null,r=Number(t?.price?.price),n=Number(t?.price?.expo);return(!Number.isFinite(r)||!Number.isFinite(n))&&F("no pyth price returned"),n<0?r/10**-n:r*10**n}function Dn(e,t){let r=e?.coins?.[t]||e?.coins?.[String(t).toLowerCase()],n=Number(r?.price);return Number.isFinite(n)?n:null}function jn(e,t={}){let r=String(t.pythBaseUrl||Tn).replace(/\/$/,""),n=new URL(`${r}/v2/updates/price/latest`);return n.searchParams.append("ids[]",e),n.searchParams.set("parsed","true"),n.toString()}function qn(e,t={}){return`${String(t.llamaCoinsBaseUrl||Cn).replace(/\/$/,"")}/prices/current/${encodeURIComponent(e)}`}async function Vt(e,t){let r=Fn(e),n=await ye(jn(r,t),t),o=Bn(n);return o>0||F("pyth price must be positive"),{id:r,price:o}}async function Wt(e,t){let r=Pn(e),n=await ye(qn(r,t),t);return{coin:r,price:Dn(n,r)}}async function Hn(e={},t={}){let r=Number(e.peg??1);(!Number.isFinite(r)||r<=0)&&F("peg must be a positive number");let n=zt(e,50),o=await Vt(e,t),s=Math.round(Math.abs(o.price-r)*1e4),i={required:!1,llamaPrice:null};try{let l=await Wt(e,t);i={required:!1,llamaPrice:l.price,llamaCoin:l.coin}}catch{i={required:!1,llamaPrice:null}}return be("depeg",{symbol:ke(e.symbol),feedId:o.id,price:o.price,peg:r,thresholdBps:n,deviationBps:s,alert:s>n,crossCheck:i})}async function Mn(e={},t={}){let r=zt(e,100),n=await Vt(e,t),o=await Wt(e,t);o.price>0||F("llama price required for oracleDeviation");let s=(n.price+o.price)/2,i=Math.round(Math.abs(n.price-o.price)/s*1e4);return be("oracleDeviation",{symbol:ke(e.symbol),pythPrice:n.price,llamaPrice:o.price,mid:s,thresholdBps:r,deviationBps:i,alert:i>r})}function zn(e,t){return String(e.id||e.defillamaId||e.slug||`hack-${t}`)}function Vn(e,t){return{id:zn(e,t),name:String(e.name||e.protocol||"unknown"),classification:e.classification?String(e.classification):null,technique:e.technique?String(e.technique):null,amount:Number.isFinite(Number(e.amount))?Number(e.amount):null,chain:Array.isArray(e.chain)?e.chain.map(String):e.chain?[String(e.chain)]:[],source:e.source?String(e.source):null}}function Wn(e){return(String(e).match(/<item\b[\s\S]*?<\/item>/gi)||[]).map((r,n)=>{let o=s=>{let i=r.match(new RegExp(`<${s}[^>]*>([\\s\\S]*?)</${s}>`,"i"));return i?i[1].replace(/<!\[CDATA\[|\]\]>/g,"").trim():""};return{id:o("guid")||o("link")||o("title")||`rss-${n}`,name:o("title")||"unknown",classification:"rss",technique:null,amount:null,chain:[],source:o("link")||null}})}function Gt(e){if(typeof e=="string"){let t=e.trim();if(t.startsWith("<"))return Wn(t);try{return Gt(JSON.parse(t))}catch{F("exploitFeed payload is not JSON or RSS")}}return Array.isArray(e)?e:Array.isArray(e?.hacks)?e.hacks:Array.isArray(e?.items)?e.items:[]}function Gn(e){return e.map((t,r)=>({item:t,index:r})).sort((t,r)=>{let n=String(t.item.id).localeCompare(String(r.item.id));return n!==0?n:t.index-r.index}).map(t=>t.item)}async function Kn(e={},t={}){let r=kn,n=e.payload??await ye(r,t),o=Gn(Gt(n).map(Vn));return be("exploitFeed",{count:o.length,fingerprint:o.map(s=>s.id).join("|"),items:o,alert:o.length>0})}function Yn(e){return e===!0||e===1||e==="1"}function Jn(e,t){let r=e?.result&&typeof e.result=="object"?e.result:e,n=String(t).toLowerCase();if(r&&typeof r=="object"){for(let[o,s]of Object.entries(r))if(String(o).toLowerCase()===n&&s&&typeof s=="object")return{address:o,token:s}}return null}async function nt(e={},t={}){e.asSoleGate===!0&&F("goplus is a second opinion and must never be a sole gate");let r=String(e.address||e.token||"").trim();Ln.test(r)||F("goplus requires an EVM token address");let n=Number(e.chainId??1);(!Number.isInteger(n)||n<=0)&&F("chainId must be a positive integer");let s=`${String(t.goplusBaseUrl||In).replace(/\/$/,"")}/${n}?contract_addresses=${r}`,i=e.payload??await ye(s,t),l=Jn(i,r);l||F("goplus returned no result for",r);let a=Rn.filter(u=>Yn(l.token[u]));return be("goplus",{chainId:n,address:r.toLowerCase(),role:"second-opinion",secondOpinion:!0,soleGate:!1,neverSoleGate:!0,token:{address:l.address,name:l.token.token_name||null,symbol:l.token.token_symbol||null},findings:a,alert:a.length>0,note:"second opinion only \u2014 never the sole gate"})}function Qn(e){let t=Number(e);return(!Number.isFinite(t)||t<0)&&F("healthFactor must be a non-negative number"),t<1?"liquidatable":t<1.05?"danger":t<1.2?"critical":t<1.5?"warning":"healthy"}function Xn(e,t){let r=Number(e.healthFactor??e.hf);Number.isFinite(r)||F("position healthFactor required");let n=Qn(r);return{id:String(e.id||e.protocol||`pos-${t}`),protocol:String(e.protocol||"unknown"),healthFactor:r,collateralUsd:e.collateralUsd!=null?Number(e.collateralUsd):null,debtUsd:e.debtUsd!=null?Number(e.debtUsd):null,rung:n}}async function Zn(e={},t={}){let r=null;if(Array.isArray(e.positions))r=e;else if(Array.isArray(e))r={positions:e};else{let i=String(e.user||"").trim();i||F("liquidationLadder requires user or positions");let l=String(t.aaveUrl||`${On}/${i}`);r=await ye(l,t)}let o=(Array.isArray(r?.positions)?r.positions:[]).map(Xn),s=o.reduce((i,l)=>i?Mt[l.rung]<Mt[i]?l.rung:i:l.rung,null);return be("liquidationLadder",{user:r?.user||e.user||null,chainId:r?.chainId??e.chainId??null,ladder:o,worstRung:s,alert:o.some(i=>i.rung!=="healthy")})}var pi=Object.freeze({depeg:Hn,oracleDeviation:Mn,exploitFeed:Kn,goplus:nt,liquidationLadder:Zn});import se from"node:fs";import bo from"node:os";import Oe from"node:path";import{randomUUID as yo}from"node:crypto";var mi=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),bi=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),V=(e,t=0,r=1)=>Math.min(r,Math.max(t,e)),M=e=>Number.isFinite(Number(e))?Number(e):null,eo=e=>Math.round(e*1e4)/1e4;function z(e,t,r,n=!0){!n||r===null||!Number.isFinite(r)||e.push({feature:t,value:eo(r)})}function to(e,t){let r=M(e.repeatBuys??e.repeat_buys??e.buyCount),n=M(e.walletWinRate??e.winRate);z(t,"repeat_buys",r===null?null:V((r-1)/4)*.38),z(t,"wallet_win_rate",n===null?null:(V(n)-.5)*.5)}function ro(e,t){let r=M(e.ageHours??e.poolAgeHours),n=M(e.liquidityUsd??e.liquidity),o=e.liquidityLocked??e.locked;z(t,"pool_age",r===null?null:r<24?-.42:V(r/720)*.12),z(t,"liquidity",n===null?null:(V(Math.log10(Math.max(1,n))/7)-.5)*.28),z(t,"liquidity_lock",o==null?null:o?.12:-.28)}function no(e,t){let r=M(e.floorChange??e.floorChangePct),n=M(e.sales??e.saleCount);z(t,"floor_change",r===null?null:V(r,-1,1)*.35),z(t,"sales_depth",n===null?null:V(n/50)*.18)}function oo(e,t){let r=M(e.flowImbalance??e.imbalance),n=M(e.fundingRate??e.funding);z(t,"flow_imbalance",r===null?null:V(r,-1,1)*.42),z(t,"funding",n===null?null:-V(n*100,-1,1)*.12)}function so(e,t){let r=M(e.marketProbability??e.marketPrice??e.probability),n=M(e.fairProbability??e.referenceProbability??e.fairValue);z(t,"probability_mispricing",r===null||n===null?null:V(n-r,-1,1)*.65);let o=M(e.liquidityUsd??e.liquidity);z(t,"market_liquidity",o===null?null:V(Math.log10(Math.max(1,o))/6)*.12)}var yi=Object.freeze({wallet:to,pool:ro,nft_floor:no,hl_flow:oo,prediction_market:so});import{createHash as uo}from"node:crypto";var wi=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),xi=Object.freeze(["read","simulate"]);var Si=1440*60;var ge=class extends Error{constructor(t,r){super(`secret material must never appear in a public API object (at ${t}, rule: ${r})`),this.name="SecretLeakError",this.path=t,this.rule=r}},io=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,ao=Object.freeze(["privkey","wif","xprv","seed"]);function Kt(e){let t=String(e),r=t.toLowerCase().replace(/[\s._-]+/g,"");return io.test(t)||ao.includes(r)}var co=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),lo=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function oe(e,t="$",r=new Set,n=""){if(e==null)return e;if(typeof e=="string"){let o=lo.includes(String(n).toLowerCase().replace(/[_-]/g,""));for(let{rule:s,re:i}of co)if(!(o&&s.startsWith("raw-32-byte-hex"))&&i.test(e))throw new ge(t,s);return e}if(typeof e!="object"||r.has(e)||(r.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[o,s]of e.entries()){if(typeof o=="string"&&Kt(o))throw new ge(`${t}[${JSON.stringify(o)}]`,"forbidden-key-name");oe(o,`${t}[key]`,r),oe(s,`${t}[${String(o)}]`,r)}return e}if(e instanceof Set){let o=0;for(let s of e.values())oe(s,`${t}[${o++}]`,r);return e}if(Array.isArray(e))return e.forEach((o,s)=>oe(o,`${t}[${s}]`,r)),e;for(let[o,s]of Object.entries(e)){if(Kt(o))throw new ge(`${t}.${o}`,"forbidden-key-name");oe(s,`${t}.${o}`,r,o)}return e}var ot=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),Ri=Object.freeze(Object.fromEntries(ot.map((e,t)=>[e,Object.freeze(t+1<ot.length?[ot[t+1]]:[])])));function st(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(st).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${st(e[t])}`).join(",")}}`}function fo(e){return e===void 0?null:JSON.parse(JSON.stringify(e))}function it(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){Object.freeze(e);for(let t of Object.values(e))it(t)}return e}function po(e,t="fact"){try{oe(e,t)}catch{throw new Error(`${t} contains custody material and is forbidden`)}}function ho(e){return uo("sha256").update(st(e)).digest("hex")}function mo({tradeId:e,state:t,fact:r,asOf:n,previousHash:o,external:s}){let i={tradeId:e,state:t,asOf:n,previousHash:o??null,external:s===!0,fact:fo(r)};return it({...i,hash:ho(i)})}function Yt({tradeId:e,intent:t,asOf:r=0}={}){if(!e||typeof e!="string")throw new Error("tradeId is required");if(!t||typeof t!="object"||Array.isArray(t))throw new Error("intent fact is required");po(t,"intent");let n=mo({tradeId:e,state:"intent",fact:t,asOf:r,previousHash:null,external:!1});return it({tradeId:e,state:"intent",events:[n],headHash:n.hash,custody:"none",execution:"prepare-only"})}function Jt(e,t={}){if(!e||typeof e!="object")throw new TypeError("signal required");if(e.noTrade===!0)throw new Error("NO_TRADE signal cannot open a trade lifecycle");if(e.executionAllowed===!0)throw new Error("executionAllowed must be false on public plane");let r=String(t.tradeId||`sig-${e.id||"unknown"}`).slice(0,128),n={source:"signal_score",signalId:e.id,signalType:e.type,score:e.score,confidence:e.confidence,flags:e.flags||[],promote:"research_only",execution:"prepare-only",custody:"none",note:"Cold signal \u2192 prepare intent only. Owner wallet must sign any later tx.",...t.intentExtra&&typeof t.intentExtra=="object"?t.intentExtra:{}},o=Yt({tradeId:r,intent:n,asOf:t.asOf??Date.now()});return{tradeId:r,intent:n,lifecycle:o,recommendation:"PREPARE_RESEARCH_ONLY"}}var Zt=1,at=5e3,go=Object.freeze({1:new Set(["0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","0xdac17f958d2ee523a2206206994597c13d831ec7","0x6b175474e89094c44da98b954eedeac495271d0f","0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2"]),8453:new Set(["0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","0x4200000000000000000000000000000000000006"]),42161:new Set(["0xaf88d065e77c8cc2239327c5edb3a432268e5831","0xfd086bc7cd5c481dcc9c85ebe478a1c0b69fcbb9","0x82af49447d8a07e3bd95bd0d56f35241523fbab1"]),4663:new Set(["0x5fc5360d0400a0fd4f2af552add042d716f1d168"])}),wo=/^0x[0-9a-fA-F]{40}$/,xo=/^0x[0-9a-fA-F]{64}$/,So=/^(?:0|[1-9]\d*)(?:\.\d{1,2})?$/,Eo=/^(?:0|[1-9]\d*)(?:\.\d+)?$/;function B(e,t){let r=String(e||"").trim();if(!wo.test(r))throw new TypeError(`${t} must be a 0x-prefixed EVM address`);return r.toLowerCase()}var Ao=(()=>{let e=new Map;for(let t of he){let r=Number(t?.chainId);if(!Number.isInteger(r)||r<=0)continue;let n=new Set;for(let o of Array.isArray(t.stableQuoteAssets)?t.stableQuoteAssets:[])try{n.add(B(o,"stableQuoteAsset"))}catch{}if(t.wrappedNative)try{n.add(B(t.wrappedNative,"wrappedNative"))}catch{}e.set(r,n)}return e})();function er(e,t){let r=Number(e);if(!Number.isInteger(r)||r<=0)return!1;let n;try{n=B(t,"token")}catch{return!1}let o=go[r];if(o&&o.has(n))return!0;let s=Ao.get(r);return!!(s&&s.has(n))}function we(e,t="usd"){let r=typeof e=="number"?String(e):e;if(typeof r!="string"||!So.test(r))throw new TypeError(`${t} must be a non-negative decimal string with at most 2 decimal places`);let[n,o=""]=r.split("."),s=(o+"00").slice(0,2);return BigInt(n)*100n+BigInt(s)}function ie(e){let t=BigInt(e);if(t<0n)throw new RangeError("centsToUsd: cents must be non-negative");let r=t/100n,n=t%100n;return`${r.toString()}.${n.toString().padStart(2,"0")}`}function vo({dailyCapUsd:e,spentTodayUsd:t,proportionalUsd:r=null}){let n=we(e,"dailyCapUsd"),o=we(t,"spentTodayUsd"),s=n-o;if(s<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"daily-cap-exhausted"};if(r==null)return{sizeCents:s,sizeUsd:ie(s),basis:"cap-only"};let i=we(r,"proportionalUsd");if(i<=0n)return{sizeCents:0n,sizeUsd:"0.00",basis:"sized-to-zero"};let l=i<s?i:s;return{sizeCents:l,sizeUsd:ie(l),basis:l===s?"cap-limited":"proportional"}}function No({amount:e,decimals:t,poolPriceUsd:r}){let n=BigInt(e);if(n<0n)throw new RangeError("amount must be non-negative");let o=Number(t);if(!Number.isInteger(o)||o<0||o>77)throw new TypeError("decimals must be an integer 0..77");let s=typeof r=="number"?String(r):String(r??"").trim();if(!Eo.test(s))throw new TypeError("poolPriceUsd must be a non-negative decimal string");let[i,l=""]=s.split("."),a=BigInt(i+l),u=n*a*100n/10n**BigInt(o+l.length);return{usd:ie(u),estimated:!0,priced:"pool-estimate"}}function To(e,{estimated:t=!1,priced:r=null}={}){return`${t===!0||r==="pool-estimate"?"~":""}$${e}`}function Co(e=null){let t=new Map;async function r(n,o){let s;try{s=B(o,"address")}catch{return"unknown"}let i=`${Number(n)}:${s}`;if(t.has(i))return t.get(i);let l="unknown";if(typeof e=="function")try{let a=await e(Number(n),s);a===!0?l="contract":a===!1&&(l="eoa")}catch{l="unknown"}return l!=="unknown"&&t.set(i,l),l}return Object.freeze({resolve:r,cache:t})}function ko(e={}){let t=String(e.txHash||"").trim().toLowerCase();if(!xo.test(t))throw new TypeError("event.txHash must be a 32-byte tx hash");let r=B(e.token,"event.token"),n=B(e.from,"event.from"),o=B(e.to,"event.to"),s=e.txFrom==null?null:B(e.txFrom,"event.txFrom");return{txHash:t,token:r,from:n,to:o,txFrom:s,chainId:Number(e.chainId),blockNumber:Number.isFinite(Number(e.blockNumber))?Number(e.blockNumber):null,logIndex:Number.isFinite(Number(e.logIndex))?Number(e.logIndex):null,value:e.value==null?null:String(e.value),valueUsd:e.valueUsd==null?null:String(e.valueUsd),priced:e.priced==="pool-estimate"?"pool-estimate":"event",counterpartyKind:e.counterpartyKind==="contract"||e.counterpartyKind==="eoa"?e.counterpartyKind:"unknown"}}function Io(e,t){return e.to===t?e.from:e.from===t?e.to:null}function Oo(e,{followedWallet:t,counterpartyKind:r}={}){let n=B(t,"followedWallet");if(!e.txFrom)return{included:!1,reason:"tx-from-unknown"};if(e.txFrom!==n)return{included:!1,reason:"not-initiated-by-followed-wallet"};if(er(e.chainId,e.token))return{included:!1,reason:"quote-asset-transfer"};let o=e.to===n?"buy":e.from===n?"sell":null;if(!o)return{included:!1,reason:"wallet-not-a-party"};let s=r==="contract"||r==="eoa"?r:e.counterpartyKind==="contract"||e.counterpartyKind==="eoa"?e.counterpartyKind:"unknown";if(s==="contract")return{included:!0,side:o,origin:"curve",priced:"pool-estimate",counterpartyKind:s};if(s==="eoa")return{included:!1,reason:"eoa-transfer",origin:"transfer",counterpartyKind:s};let i=e.valueUsd!=null&&e.priced==="event"?"swap":"transfer";return{included:!0,side:o,origin:i,priced:e.priced==="pool-estimate"?"pool-estimate":"event",counterpartyKind:"unknown"}}function _o({chainId:e,txHash:t,noTrade:r}){return{id:`follow-mirror:${e}:${t}`,type:"wallet_mirror",score:r?0:1,confidence:r?0:1,noTrade:r,executionAllowed:!1,flags:r?["FOLLOW_MIRROR","NO_TRADE"]:["FOLLOW_MIRROR"]}}function Ie({chainId:e,txHash:t,token:r,side:n,sizeUsd:o,sizeBasis:s,followedWallet:i,origin:l="transfer",priced:a="event",refuseReason:u=null}={}){let c=_o({chainId:e,txHash:t,noTrade:u!=null}),h=a==="pool-estimate",d=To(o,{estimated:h});try{let f=Jt(c,{tradeId:`follow-mirror-${e}-${t}`,intentExtra:{source:"follow_mirror",chain:e,followedWallet:i,token:r,side:n,origin:l,priced:a,estimated:h,sizeUsd:o,sizeUsdDisplay:d,sizeBasis:s,txHash:t,executionAllowed:!1,backendSigner:!1,note:h?"Wallet-follow mirror of a launchpad-curve trade. USD size is a pool-price ESTIMATE (~). Cold, prepare-only. Owner wallet must sign any later tx.":"Wallet-follow mirror. Cold, prepare-only. Owner wallet must sign any later tx."}});return{ok:!0,requiresWalletSignature:!0,backendSigner:!1,executionAllowed:!1,tradeId:f.tradeId,chain:e,token:r,side:n,origin:l,priced:a,estimated:h,sizeUsd:o,sizeUsdDisplay:d,sizeBasis:s,txHash:t,followedWallet:i,recommendation:f.recommendation,lifecycle:f.lifecycle,intent:f.intent}}catch(f){return{ok:!1,reason:u||String(f?.message||f)}}}function $o(e,t,r){if(!r)return"unknown";let n=e[`${t}:${r}`]??e[r];return n==="contract"||n==="eoa"?n:"unknown"}function Ro(e=[],{followedWallet:t,dailyCapUsd:r,spentTodayUsd:n="0",seenTxHashes:o=new Set,honeypotResults:s={},counterpartyKinds:i={}}={}){if(!Array.isArray(e))throw new TypeError("rawEvents must be an array");let l=B(t,"followedWallet"),a=new Set(o),u=we(n,"spentTodayUsd"),c=we(r,"dailyCapUsd"),h=[],d=[],f=[];for(let p of e){let m;try{m=ko(p)}catch(N){f.push({txHash:p?.txHash??null,reason:`malformed-event: ${N.message}`});continue}if(a.has(m.txHash)){f.push({txHash:m.txHash,reason:"duplicate-tx"});continue}let x=Io(m,l),b=m.counterpartyKind!=="unknown"?m.counterpartyKind:$o(i,m.chainId,x),y=Oo(m,{followedWallet:l,counterpartyKind:b});if(!y.included){f.push({txHash:m.txHash,reason:y.reason});continue}let v={chainId:m.chainId,txHash:m.txHash,token:m.token,side:y.side,origin:y.origin,priced:y.priced,followedWallet:l},O=N=>({txHash:m.txHash,token:m.token,side:y.side,origin:y.origin,priced:y.priced,reason:N}),k=s[m.token];if(k?.flagged){a.add(m.txHash);let N=Ie({...v,sizeUsd:"0.00",sizeBasis:"refused",refuseReason:`token flagged: ${k.reason||"security check flagged this token"}`});d.push(O(N.reason));continue}if(c-u<=0n){a.add(m.txHash);let N=Ie({...v,sizeUsd:"0.00",sizeBasis:"refused",refuseReason:"daily-cap-exhausted"});d.push(O(N.reason));continue}let E=vo({dailyCapUsd:ie(c),spentTodayUsd:ie(u),proportionalUsd:m.valueUsd});if(E.sizeCents<=0n){a.add(m.txHash);let N=Ie({...v,sizeUsd:"0.00",sizeBasis:E.basis,refuseReason:E.basis});d.push(O(N.reason));continue}let T=Ie({...v,sizeUsd:E.sizeUsd,sizeBasis:E.basis});a.add(m.txHash),T.ok?(h.push(T),u+=E.sizeCents):d.push(O(T.reason))}return{intents:h,refusals:d,skipped:f,seenTxHashes:a,spentTodayUsd:ie(u)}}function ct(e=process.env){let t=e.ORACLE_CONFIG_DIR||Oe.join(bo.homedir(),".config","oracle");return Oe.join(t,"follow-mirror.json")}function Qt(){return{version:Zt,targets:{}}}function Xt(e,t){return`${String(e).toLowerCase()}:${B(t,"address")}`}function _e(e){try{let t=se.readFileSync(e,"utf8"),r=JSON.parse(t);return!r||typeof r!="object"||r.version!==Zt||!r.targets||typeof r.targets!="object"?Qt():r}catch{return Qt()}}function Lo(e,t){let r=Oe.dirname(e);se.mkdirSync(r,{recursive:!0,mode:448});let n=Oe.join(r,`.follow-mirror.${process.pid}.${Date.now()}.${yo()}.tmp`);try{se.writeFileSync(n,`${JSON.stringify(t)}
|
|
5
|
+
`,{mode:384,flag:"wx"}),se.renameSync(n,e);try{se.chmodSync(e,384)}catch{}}catch(o){try{se.unlinkSync(n)}catch{}throw o}}function Uo(e){return new Date(e).toISOString().slice(0,10)}function Fo(e,t,r){let n=e.targets[t],o=new Set(Array.isArray(n?.seenTxHashes)?n.seenTxHashes:[]),s=typeof n?.days?.[r]=="string"?n.days[r]:"0";return{seenTxHashes:o,spentTodayUsd:s}}function Po(e,t,{seenTxHashes:r,spentTodayUsd:n,day:o,newIntents:s,newRefusals:i}){let l=e.targets[t]||{seenTxHashes:[],days:{},intents:[],refusals:[]},a=[...r].slice(-at),u=[...l.intents||[],...s].slice(-at),c=[...l.refusals||[],...i].slice(-at);e.targets[t]={seenTxHashes:a,days:{...l.days||{},[o]:n},intents:u,refusals:c}}function lt({now:e=()=>Date.now(),fetchWallet:t,fetchTxFrom:r,checkHoneypot:n,estimateUsdValue:o=async()=>null,isContract:s=null,poolPriceUsd:i=async()=>null,tokenDecimals:l=async()=>18,storePath:a=ct()}={}){if(typeof t!="function")throw new TypeError("createFollowMirror requires fetchWallet");if(typeof r!="function")throw new TypeError("createFollowMirror requires fetchTxFrom");if(typeof n!="function")throw new TypeError("createFollowMirror requires checkHoneypot");let u=Co(s);async function c({address:d,chain:f,chainId:p,dailyCapUsd:m,lookback:x}={}){let b=B(d,"address"),y=Number(p);if(!Number.isInteger(y)||y<=0)throw new TypeError("observe requires a numeric chainId");let v=e(),O=Uo(v),k=Xt(f||y,b),R=_e(a),{seenTxHashes:E,spentTodayUsd:T}=Fo(R,k,O),N=await t(b,{chains:[y],lookback:x}),L=Array.isArray(N?.events)?N.events:[],w=[],I={},q=new Set,$={};for(let C of L){let U=null;try{U=await r(y,C.txHash)}catch{U=null}let g=null,A="event";try{g=await o({...C,chainId:y,txFrom:U})}catch{g=null}let S=String(C.token||"").toLowerCase(),J=String(C.from||"").toLowerCase(),D=String(C.to||"").toLowerCase(),j="unknown";if(U===b&&!er(y,S)&&S){let K=D===b?J:J===b?D:null;if(K&&(j=await u.resolve(y,K),$[`${y}:${K}`]=j),j==="contract"&&g==null&&C.value!=null)try{let Q=await i(y,S);if(Q!=null){let Le=await l(y,S);g=No({amount:C.value,decimals:Le??18,poolPriceUsd:Q}).usd,A="pool-estimate"}}catch{g=null}else j==="contract"&&(A="pool-estimate");if(!q.has(S)){q.add(S);try{I[S]=await n(y,S)}catch(Q){I[S]={flagged:!0,reason:`security check unavailable: ${String(Q?.message||Q).slice(0,160)}`}}}}w.push({...C,chainId:y,txFrom:U,valueUsd:g,priced:A,counterpartyKind:j})}let P=Ro(w,{followedWallet:b,dailyCapUsd:String(m),spentTodayUsd:T,seenTxHashes:E,honeypotResults:I,counterpartyKinds:$});return Po(R,k,{seenTxHashes:P.seenTxHashes,spentTodayUsd:P.spentTodayUsd,day:O,newIntents:P.intents.map(C=>({tradeId:C.tradeId,txHash:C.txHash,token:C.token,side:C.side,origin:C.origin,priced:C.priced,sizeUsd:C.sizeUsd,sizeUsdDisplay:C.sizeUsdDisplay,createdAt:v})),newRefusals:P.refusals.map(C=>({...C,createdAt:v}))}),Lo(a,R),{ok:!0,cold:!0,executionAllowed:!1,chain:f||y,chainId:y,address:b,observed:L.length,intents:P.intents,refusals:P.refusals,skipped:P.skipped,spentTodayUsd:P.spentTodayUsd,dailyCapUsd:String(m),errors:N?.errors||[]}}function h({address:d,chain:f}={}){let p=B(d,"address"),m=_e(a),x=Xt(f,p),b=m.targets[x]||{intents:[],refusals:[],days:{}};return{ok:!0,address:p,chain:f,intents:b.intents||[],refusals:b.refusals||[],days:b.days||{}}}return Object.freeze({observe:c,status:h,storePath:a})}import xe from"node:fs";import Bo from"node:os";import Re from"node:path";import{randomUUID as Do}from"node:crypto";var sr=1,tr=500,rr=Object.freeze(["tap","cli","signal"]),jo=/^0x[0-9a-fA-F]{40}$/,qo=64;function ir(e=process.env){let t=e.ORACLE_CONFIG_DIR||Re.join(Bo.homedir(),".config","oracle");return Re.join(t,"follow-list.json")}function $e(e){let t=String(e||"").trim();if(!jo.test(t))throw new TypeError("address must be a 0x-prefixed 40-hex EVM address");return t.toLowerCase()}function nr(e){return e==null?null:String(e).replace(/[\u0000-\u001f\u007f]/g,"").trim().slice(0,qo)||null}function or(){return{version:sr,entries:{}}}function Ho(e){try{let t=JSON.parse(xe.readFileSync(e,"utf8"));return!t||t.version!==sr||!t.entries||typeof t.entries!="object"?or():t}catch{return or()}}function ut(e,t){let r=Re.dirname(e);xe.mkdirSync(r,{recursive:!0,mode:448});let n=Re.join(r,`.follow-list.${process.pid}.${Date.now()}.${Do()}.tmp`);try{xe.writeFileSync(n,`${JSON.stringify(t)}
|
|
6
|
+
`,{mode:384,flag:"wx"}),xe.renameSync(n,e)}finally{try{xe.unlinkSync(n)}catch{}}}function ar({path:e,denylist:t=new Set,now:r=Date.now}={}){if(!e)throw new TypeError("createFollowStore requires { path }");let n=new Set([...t].map(c=>String(c).toLowerCase()));function o(){return Ho(e)}function s(){let c=o();return Object.values(c.entries).sort((h,d)=>d.addedAt-h.addedAt)}function i(c){let h;try{h=$e(c)}catch{return!1}return!!o().entries[h]}function l({address:c,chainId:h=null,label:d=null,source:f="tap"}={}){let p=$e(c);if(!rr.includes(f))throw new TypeError(`source must be one of ${rr.join(", ")}`);if(n.has(p))return{added:!1,reason:"denylisted",address:p};let m=o();if(m.entries[p])return{added:!1,reason:"already-following",address:p,entry:m.entries[p]};if(Object.keys(m.entries).length>=tr)return{added:!1,reason:"store-full",address:p,max:tr};let x=h==null?null:Number(h);if(x!=null&&(!Number.isInteger(x)||x<=0))throw new TypeError("chainId must be a positive integer");let b={address:p,chainId:x,label:nr(d),source:f,addedAt:r()};return m.entries[p]=b,ut(e,m),{added:!0,address:p,entry:b}}function a(c){let h=$e(c),d=o();return d.entries[h]?(delete d.entries[h],ut(e,d),{removed:!0,address:h}):{removed:!1,reason:"not-following",address:h}}function u(c,h){let d=$e(c),f=o();return f.entries[d]?(f.entries[d].label=nr(h),ut(e,f),{ok:!0,address:d,entry:f.entries[d]}):{ok:!1,reason:"not-following",address:d}}return Object.freeze({path:e,list:s,has:i,add:l,remove:a,setLabel:u})}var ae={1:"ethereum",8453:"base",42161:"arbitrum"},cr=Object.fromEntries(Object.entries(ae).map(([e,t])=>[t,Number(e)])),Mo=new Set(["is_honeypot","cannot_sell_all","cannot_buy","is_blacklisted","selfdestruct","owner_change_balance"]),lr=`oracle follow <name-or-address> [--chain <name>] [--blocks <n>] [--gas] [--json]
|
|
6
7
|
oracle follow <name-or-address> --chain <name> --mirror --max-usd <n> [--json]
|
|
7
8
|
oracle follow status [<name-or-address>] [--chain <name>] [--json]
|
|
9
|
+
oracle follow add <address> [--chain <name>] [--label <text>] [--json]
|
|
10
|
+
oracle follow rm <address> [--json]
|
|
11
|
+
oracle follow ls [--json]
|
|
12
|
+
oracle follow label <address> <text> [--json]
|
|
8
13
|
|
|
9
14
|
oracle follow vitalik.eth
|
|
10
15
|
oracle follow demi.hl --chain base
|
|
@@ -30,39 +35,45 @@ completed (network down, no data) is treated as flagged, never as clean.
|
|
|
30
35
|
oracle follow status lists prepared mirror intents and refusals already on
|
|
31
36
|
disk, without polling the chain again.
|
|
32
37
|
|
|
33
|
-
|
|
38
|
+
oracle follow add / rm / ls / label manage the persistent follow list
|
|
39
|
+
(~/.config/oracle/follow-list.json) that Telegram one-tap Follow and alert
|
|
40
|
+
cards read. Labels only; never keys. add is idempotent.
|
|
41
|
+
|
|
42
|
+
Chains: ${Object.values(ae).join(", ")}. Default: ethereum.
|
|
34
43
|
Lookback defaults to 40000 blocks. Endpoints are keyless.
|
|
35
44
|
|
|
36
45
|
Note publicnode-class RPCs are deliberately excluded: they retain only ~128
|
|
37
|
-
blocks, so they return an empty result instead of an error.`;function
|
|
38
|
-
`),1;let{address:
|
|
39
|
-
`),1;let
|
|
40
|
-
`),0;let h=a?`${a} ${
|
|
41
|
-
`),process.stdout.write(` ${
|
|
42
|
-
`),
|
|
43
|
-
`);for(let
|
|
44
|
-
`);for(let
|
|
45
|
-
`);for(let
|
|
46
|
-
`);return 0}async function
|
|
47
|
-
`),1;let
|
|
48
|
-
`),0;process.stdout.write(`${
|
|
49
|
-
`),!
|
|
50
|
-
`);for(let f of
|
|
51
|
-
`);for(let f of
|
|
52
|
-
`);return 0}let
|
|
53
|
-
`),0;if(!
|
|
54
|
-
`),0;for(let[a,
|
|
55
|
-
`);return 0}async function
|
|
56
|
-
`)
|
|
57
|
-
`),1;let
|
|
58
|
-
`),1;
|
|
59
|
-
`),1;
|
|
60
|
-
`)
|
|
61
|
-
`),
|
|
62
|
-
`)
|
|
63
|
-
`),
|
|
64
|
-
`)
|
|
65
|
-
`)
|
|
66
|
-
`);for(let
|
|
67
|
-
`)
|
|
68
|
-
`)
|
|
46
|
+
blocks, so they return an empty result instead of an error.`;function ce(e,t){let r=e.indexOf(t);return r>=0?e[r+1]:void 0}function zo(e){let t=String(e??"");return t.length>22?`${t.slice(0,19)}...`:t}async function Vo(e,t){let n=(await ee(e,"eth_getTransactionByHash",[t]))?.from;return typeof n!="string"||!/^0x[0-9a-fA-F]{40}$/.test(n)?null:n.toLowerCase()}async function Wo(e,t){try{let n=((await nt({address:t,chainId:e},{})).findings||[]).filter(o=>Mo.has(o));return n.length>0?{flagged:!0,reason:`goplus: ${n.join(", ")}`}:{flagged:!1,reason:null}}catch(r){return{flagged:!0,reason:`goplus check unavailable: ${String(r?.message||r).slice(0,160)}`}}}async function dt(e){if(tt.test(e))return{address:e,resolvedFrom:null};let t=await Ht(e);return t?.address?{address:t.address,resolvedFrom:e}:{address:null,resolvedFrom:null}}async function Go(e,{query:t,chainArg:r,chainId:n,lookbackBlocks:o,asJson:s}){let i=ce(e,"--max-usd");if(!i||!/^\d+(?:\.\d{1,2})?$/.test(i))return process.stderr.write(`follow --mirror: --max-usd must be a positive decimal (at most 2 decimal places), got "${i??""}"
|
|
47
|
+
`),1;let{address:l,resolvedFrom:a}=await dt(t);if(!l)return process.stderr.write(`follow: could not resolve "${t}" to an address
|
|
48
|
+
`),1;let c=await lt({fetchWallet:Qe,fetchTxFrom:Vo,checkHoneypot:Wo}).observe({address:l,chain:ae[n]||String(n),chainId:n,dailyCapUsd:i,lookback:o});if(s)return process.stdout.write(`${JSON.stringify({resolvedFrom:a,...c})}
|
|
49
|
+
`),0;let h=a?`${a} ${l}`:l;process.stdout.write(`${h}
|
|
50
|
+
`),process.stdout.write(` ${c.chain} \xB7 observed ${c.observed} transfer${c.observed===1?"":"s"} \xB7 spent ${c.spentTodayUsd}/${c.dailyCapUsd} today
|
|
51
|
+
`),c.intents.length||process.stdout.write(` no new prepared mirror intents this run
|
|
52
|
+
`);for(let d of c.intents)process.stdout.write(` PREPARED ${d.side} ${d.token} $${d.sizeUsd} tx ${d.txHash}
|
|
53
|
+
`);for(let d of c.refusals)process.stdout.write(` REFUSED ${d.side} ${d.token} ${d.reason} tx ${d.txHash}
|
|
54
|
+
`);for(let d of c.errors||[])process.stderr.write(` error: ${d.stage||"rpc"}: ${d.error}
|
|
55
|
+
`);return 0}async function Ko(e,t){let r=(ce(e,"--chain")||"").toLowerCase(),o=(e.filter((a,u)=>a==="--json"||a==="status"||a==="--chain"&&e[u+1]!=null||e[u-1]==="--chain"?!1:!a.startsWith("--"))[0]||"").trim();if(o){let{address:a,resolvedFrom:u}=await dt(o);if(!a)return process.stderr.write(`follow status: could not resolve "${o}" to an address
|
|
56
|
+
`),1;let c=lt({fetchWallet:async()=>({events:[],errors:[]}),fetchTxFrom:async()=>null,checkHoneypot:async()=>({flagged:!1})}),h=r||"ethereum",d=c.status({address:a,chain:h});if(t)return process.stdout.write(`${JSON.stringify({resolvedFrom:u,...d})}
|
|
57
|
+
`),0;process.stdout.write(`${u?`${u} ${a}`:a} (${h})
|
|
58
|
+
`),!d.intents.length&&!d.refusals.length&&process.stdout.write(` no prepared mirror intents on disk for this target
|
|
59
|
+
`);for(let f of d.intents)process.stdout.write(` PREPARED ${f.side} ${f.token} $${f.sizeUsd} tx ${f.txHash}
|
|
60
|
+
`);for(let f of d.refusals)process.stdout.write(` REFUSED ${f.side} ${f.token} ${f.reason} tx ${f.txHash}
|
|
61
|
+
`);return 0}let s=ct(),i=_e(s),l=Object.entries(i.targets||{});if(t)return process.stdout.write(`${JSON.stringify({storePath:s,targets:Object.fromEntries(l)})}
|
|
62
|
+
`),0;if(!l.length)return process.stdout.write(`no follow --mirror targets on disk yet
|
|
63
|
+
`),0;for(let[a,u]of l)process.stdout.write(`${a} ${(u.intents||[]).length} prepared, ${(u.refusals||[]).length} refused
|
|
64
|
+
`);return 0}async function Yo(e,t,r,n){let o=ar({path:ir()}),s=(a,u)=>n?JSON.stringify(a):u;if(e==="ls"){let a=o.list();return n?JSON.stringify({count:a.length,entries:a}):a.length?a.map(u=>`${u.address}${u.chainId?` chain ${u.chainId}`:""}${u.label?` \xB7 ${u.label}`:""} (${u.source})`).join(`
|
|
65
|
+
`):"Following nobody. oracle follow add <address>"}let i=(t[0]||"").trim();if(!tt.test(i))throw new Error(`oracle follow ${e}: expected a 0x address`);if(e==="add"){let a=(ce(r,"--chain")||"").toLowerCase(),u=a&&(cr[a]||Number(a))||null,c=o.add({address:i,chainId:u,label:ce(r,"--label")||null,source:"cli"});return s(c,c.added?`Following ${c.address}`:`Not added: ${c.reason}`)}if(e==="rm"){let a=o.remove(i);return s(a,a.removed?`Unfollowed ${a.address}`:`Not removed: ${a.reason}`)}let l=o.setLabel(i,t.slice(1).join(" "));return s(l,l.ok?`Labelled ${l.address} as ${l.entry.label??"(none)"}`:`Not labelled: ${l.reason}`)}async function Jo(e=[]){let t=e.includes("--json"),r=e.includes("--mirror"),n=[];for(let u=0;u<e.length;u+=1){let c=e[u];if(!(c==="--json"||c==="--mirror"||c==="--gas")){if(c==="--chain"||c==="--blocks"||c==="--max-usd"||c==="--label"){u+=1;continue}n.push(c)}}if(n[0]==="status")return Ko(e,t);if(["add","rm","ls","label"].includes(n[0]))return Yo(n[0],n.slice(1),e,t);let o=(n[0]||"").trim();if(!o||o==="--help"||o==="-h")return process.stdout.write(`${lr}
|
|
66
|
+
`),o?0:1;let s=(ce(e,"--chain")||"ethereum").toLowerCase(),i=cr[s]??Number(s);if(!me[i])return process.stderr.write(`follow: unsupported chain "${s}". Supported: ${Object.values(ae).join(", ")}
|
|
67
|
+
`),1;let l=ce(e,"--blocks"),a=l?Number(l):4e4;if(!Number.isFinite(a)||a<=0)return process.stderr.write(`follow: --blocks must be a positive number, got "${l}"
|
|
68
|
+
`),1;try{if(r)return await Go(e,{query:o,chainArg:s,chainId:i,lookbackBlocks:a,asJson:t});let{address:u,resolvedFrom:c}=await dt(o);if(!u)return process.stderr.write(`follow: could not resolve "${o}" to an address
|
|
69
|
+
`),1;let h=await Qe(u,{chains:[i],lookback:a,onWarn:t?void 0:p=>process.stderr.write(` warn: ${p}
|
|
70
|
+
`)}),d=h.events||[];if(e.includes("--gas")&&d.length){let p=(me[i]||[])[0];p?d=(await Ke(d,{rpc:kt(p),wallet:u})).events||d:t||process.stderr.write(` warn: --gas: no endpoint for chain ${i}; native leg left unknown
|
|
71
|
+
`)}if(t)return process.stdout.write(`${JSON.stringify({address:u,resolvedFrom:c,chain:ae[i]||String(i),lookbackBlocks:a,count:d.length,errors:h.errors||[],events:d})}
|
|
72
|
+
`),0;let f=c?`${c} ${u}`:u;process.stdout.write(`${f}
|
|
73
|
+
`),process.stdout.write(` ${ae[i]||i} \xB7 last ${a} blocks \xB7 ${d.length} transfer${d.length===1?"":"s"}
|
|
74
|
+
`),d.length||process.stdout.write(` no ERC20 transfers in this window
|
|
75
|
+
`);for(let p of d.slice(0,25)){let m=p.to?.toLowerCase()===u.toLowerCase()?"in ":"out";process.stdout.write(` ${m} blk ${p.blockNumber} token ${p.token} ${zo(p.value)}
|
|
76
|
+
`)}d.length>25&&process.stdout.write(` ... ${d.length-25} more (use --json for all)
|
|
77
|
+
`);for(let p of h.errors||[])process.stderr.write(` error: ${p.stage||"rpc"}: ${p.error}
|
|
78
|
+
`);return 0}catch(u){return process.stderr.write(`follow failed: ${u?.message||u}
|
|
79
|
+
`),1}}var oa={name:"follow",summary:"read a wallet's recent ERC20 transfer activity, or --mirror it to prepared intents",group:"read",usage:lr,async run(e){return Jo(e.argv||[])}};export{oa as default};
|