@oracle-agent/oracle 0.35.7 → 0.35.8

package/dist/cli/commands/receipt.mjs

@@ -1,5 +1,15 @@
-var B=(t,n,r)=>()=>{if(r)throw r[0];try{return t&&(n=t(t=0)),n}catch(i){throw r=[i],i}};import p from"node:fs";import le from"node:os";import u from"node:path";import{fileURLToPath as de}from"node:url";function P(){return process.env.ORACLE_FAKE_HOME||le.homedir()}function pe(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function x(){return pe()?process.env.ORACLE_CONFIG_DIR||u.join(P(),".config","oracle"):u.join(P(),".config","oracle")}function me(){return u.join(x(),"desk.json")}function we(){return u.join(x(),"env")}function c({force:t=!1}={}){if(c._done&&!t)return c._result||null;c._done=!0;let n={},r=(o,e)=>{if(e==null)return;let a=String(e).trim();a&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=a,n[o]=a))};try{let o=we();if(p.existsSync(o))for(let e of p.readFileSync(o,"utf8").split(/\r?\n/)){let a=e.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let s=a[2];(s.startsWith('"')&&s.endsWith('"')||s.startsWith("'")&&s.endsWith("'"))&&(s=s.slice(1,-1)),r(a[1],s)}}catch{}try{let o=me();if(p.existsSync(o)){let e=JSON.parse(p.readFileSync(o,"utf8"));e&&typeof e=="object"&&(r("ORACLE_DESK_URL",e.deskUrl||e.dataUrl||e.url),r("ORACLE_DATA_URL",e.dataUrl||e.deskUrl||e.url),r("ORACLE_API_URL",e.apiUrl||e.dataUrl||e.deskUrl),r("ORACLE_PUBLIC_URL",e.publicUrl||e.deskUrl||e.dataUrl),r("ORACLE_EXEC_URL",e.execUrl),r("MAD_DESK_URL",e.deskUrl||e.dataUrl))}}catch{}let i=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return i&&(r("ORACLE_DESK_URL",i),r("ORACLE_DATA_URL",i),r("ORACLE_API_URL",i),r("ORACLE_PUBLIC_URL",i),r("MAD_DESK_URL",i)),c._result=Object.keys(n).length?n:null,c._result}var fe,Ma,R=B(()=>{fe=u.dirname(de(import.meta.url)),Ma=u.resolve(fe,"../..");try{c()}catch{}});var S={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},ge=new Map(Object.values(S).map(t=>[t.chainId,t]));function l(t){let n=t?.transactionHash||t?.hash||t?.txid||null;return n?{happened:!0,hash:String(n),note:null}:{happened:!1,hash:null,note:"no transaction hash \u2014 the action did not succeed"}}import{Interface as E,keccak256 as Hi}from"ethers";import{Transaction as Gi}from"@scure/btc-signer";import{ed25519 as Ki}from"@noble/curves/ed25519.js";import{base58 as Dn}from"@scure/base";import{Interface as O}from"ethers";import{Interface as D,MaxUint256 as Ze,isAddress as et,keccak256 as tt,toUtf8Bytes as rt}from"ethers";import{Interface as q,isAddress as Re}from"ethers";import{isAddress as Oe}from"ethers";var qe=new q(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as M,isAddress as je}from"ethers";var He=new M(["function approve(address spender,uint256 amount) returns (bool)"]),Je=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});var ct=new D(["function approve(address spender,uint256 amount) returns (bool)"]);var lt=300*1e3,dt=(()=>{let t=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(t)&&t>0?t:1800*1e3})();import{Address as ht,NETWORK as gt,OutScript as yt,RawTx as bt,SigHash as Et,TEST_NETWORK as xt,Transaction as St}from"@scure/btc-signer";import{createHash as U}from"node:crypto";import{base58 as kt}from"@scure/base";import{getCompiledTransactionMessageDecoder as Ot}from"@solana/transaction-messages";var A=t=>U("sha256").update(`global:${t}`).digest().subarray(0,8).toString("hex"),Ct=new Map([[A("route"),{name:"route",prefixBytes:0}],[A("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]);var Ft=64*1024;var Vt=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Kt=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"});var Qt="0x"+"00".repeat(32);var W=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),nr=Object.freeze(W.map(t=>t[0]));import{TypedDataEncoder as Rr,getAddress as Br}from"ethers";import{TypedDataEncoder as cr,getAddress as ur,isAddress as lr}from"ethers";var J=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),G=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as xr,getAddress as Sr,isAddress as Ar}from"ethers";var pr=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var V=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Nr=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var K=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Lr=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var qr=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]);var te=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var tn=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0});var re=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),rn=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),nn=new O(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),on=new O(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),an=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var ne=Object.freeze([...te]),sn=Object.freeze({...re});import{ed25519 as An}from"@noble/curves/ed25519.js";import{base58 as In}from"@scure/base";import{RawTx as Tn,SigHash as On,Transaction as Cn}from"@scure/btc-signer";import{Transaction as Ln,keccak256 as _n,verifyTypedData as Pn}from"ethers";import{encode as ln}from"@msgpack/msgpack";import{keccak256 as fn,verifyTypedData as pn}from"ethers";var mn=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),wn=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Qn=Object.freeze({N:1<<17,r:8,p:1}),Zn=256*1024*1024,eo=16*1024;var ro=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}});import{homedir as y}from"node:os";import{join as b}from"node:path";var N=process.env.ORACLE_PUBLIC_DESKTOP==="1",ae=N?process.env.ORACLE_CONFIG_DIR||b(y(),".config","oracle"):b(y(),".config","oracle"),ao=N?ae:b(y(),".config","mad-desk");var fo="0".repeat(64),po=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"});var mo=Promise.resolve();import{Wallet as vo}from"ethers";import{base58 as ko}from"@scure/base";import{ed25519 as Oo}from"@noble/curves/ed25519.js";import{NETWORK as No,TEST_NETWORK as Lo,WIF as _o,p2wpkh as Po}from"@scure/btc-signer";import{pubECDSA as Bo}from"@scure/btc-signer/utils.js";var qo=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Mo=Object.freeze(["binance","bybit","okx","coinbase"]),Do=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),jo=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Uo=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),zo=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),Wo=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),Ho=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),Jo=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),Go=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Vo=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"});var ue=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),_=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"});var oi=256*1024;var Sa=new E(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Aa=new E(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),va=new E(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"]);var Pa=Object.freeze([{type:"function",function:{name:"vault_status",description:"Read local Oracle vault/signer readiness. Never returns key material.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_status",description:"Ping the loopback signer. Fails closed if it is not running.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_pending",description:"List pending local-signer artifacts. Read-only. Does not approve, sign, or broadcast.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"signer_queue",description:"Queue a prepared unsigned artifact on the loopback signer. Does not broadcast.",parameters:{type:"object",properties:{artifact:{type:"object"}},required:["artifact"],additionalProperties:!1}}},{type:"function",function:{name:"signer_ack",description:"Execute one pending artifact through the armed local signer (same path as Telegram Allow). Fails if the signer is not running or disarmed. Never holds keys.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_deny",description:"Drop one pending local-signer artifact. Nothing signed.",parameters:{type:"object",properties:{id:{type:"string"},digest:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"signer_execute",description:"Broadcast one already-confirmed local artifact. Requires a one-use confirmationNonce from the local signer TTY confirm. Cannot mint confirmation itself.",parameters:{type:"object",properties:{artifact:{type:"object"},confirmationNonce:{type:"string",minLength:32,maxLength:128}},required:["artifact","confirmationNonce"],additionalProperties:!1}}},{type:"function",function:{name:"signer_disarm",description:"Global kill switch. Stops the local signer from broadcasting.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"receipt_report",description:"Receipt or it did not happen. Requires transactionHash/hash/txid.",parameters:{type:"object",properties:{receipt:{type:"object"},transactionHash:{type:"string"},hash:{type:"string"},txid:{type:"string"}},additionalProperties:!1}}},{type:"function",function:{name:"watch_create",description:"Create an alert-only watch. Never execute.",parameters:{type:"object",properties:{chain:{type:"string"},token:{type:"string"},condition:{type:"string"},note:{type:"string"}},required:["chain","token","condition"],additionalProperties:!1}}},{type:"function",function:{name:"watch_list",description:"List local alert-only watches.",parameters:{type:"object",properties:{},additionalProperties:!1}}},{type:"function",function:{name:"portfolio_snapshot",description:"How to read the one portfolio snapshot. knownUsd is incomplete if a provider is missing.",parameters:{type:"object",properties:{},additionalProperties:!1}}}]);R();var ts={name:"receipt",summary:"say whether an on-chain action happened (hash or it did not)",group:"read",usage:"oracle receipt --hash <txid> | oracle receipt --json '<receipt>'",async run(t){let n=t.argv||[],r={},i=n.indexOf("--hash"),o=n.indexOf("--json");if(i>=0)r={transactionHash:n[i+1]};else if(o>=0)try{r=JSON.parse(n[o+1]||"{}")}catch(a){return process.stderr.write(`receipt: bad json: ${a.message}
-`),1}let e=l(r);return n.includes("--quiet")?process.stdout.write(`${JSON.stringify(e)}
-`):e.happened?process.stdout.write(`happened  ${e.hash}
-`):process.stdout.write(`did not happen  ${e.note}
-`),e.happened?0:2}};export{ts as default};
+import{wordlists as Be}from"ethers";var Ke=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),Ve=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],Ge=new Set([12,15,18,21,24]);function We(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return Ge.has(t.length)&&t.every(n=>Be.en.getWordIndex(n)>=0)}var qe=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,Ye=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,Je=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function Xe(e){let t=he(e);return Je.has(t)||Ye.test(t)}var F=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function he(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function Ze(e){let t=he(e);return[...Ke].some(n=>t.includes(n))}function Qe(e,t,n){if(typeof t=="string"){if(Ve.some(o=>o.test(t))||We(t))throw new F(n);if(qe.test(t)&&!Xe(e))throw new F(n)}}function Y(e,t="$",n=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return Qe(n,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((r,s)=>Y(r,`${t}[${s}]`,n));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let r of Object.keys(e).sort()){let s=`${t}.${r}`;if(Ze(r))throw new F(s);e[r]!==void 0&&(o[r]=Y(e[r],s,r))}return o}function me(e){return Y(e)}var Jt=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),Xt=Object.freeze(["read","simulate"]);var Zt=1440*60;var T=class extends Error{constructor(t,n){super(`secret material must never appear in a public API object (at ${t}, rule: ${n})`),this.name="SecretLeakError",this.path=t,this.rule=n}},et=/(private[_-]?key|secret|bearer|keystore|mnemonic|seed[_-]?phrase|passphrase|password|api[_-]?key|access[_-]?token|auth[_-]?token|session[_-]?token|signer[_-]?url|signature)/i,tt=Object.freeze(["privkey","wif","xprv","seed"]);function J(e){let t=String(e),n=t.toLowerCase().replace(/[\s._-]+/g,"");return et.test(t)||tt.includes(n)}var ye=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),be=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);function nt(e){return e.replace(/"([A-Za-z0-9_-]+)"\s*:\s*"(?:0x)?([0-9a-fA-F]{64})"/g,(t,n)=>be.includes(String(n).toLowerCase().replace(/[_-]/g,""))?`"${n}":"<hex64>"`:t)}function ge(e){let t;try{t=JSON.stringify(e)}catch(r){throw new T("$",`unserializable-payload: ${String(r?.message||r)}`)}if(t===void 0)return"null";let n=nt(t);for(let{rule:r,re:s}of ye)if(s.test(n))throw new T("$<serialized>",r);if(/(?:^|[^0-9a-fA-Fx])0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/.test(n))throw new T("$<serialized>","raw-32-byte-hex-embedded");return JSON.parse(t,(r,s)=>{if(r&&J(r))throw new T(`$<serialized>.${r}`,"forbidden-key-name");return s}),t}function O(e,t="$",n=new Set,o=""){if(e==null)return e;if(typeof e=="string"){let r=be.includes(String(o).toLowerCase().replace(/[_-]/g,""));for(let{rule:s,re:a}of ye)if(!(r&&s.startsWith("raw-32-byte-hex"))&&a.test(e))throw new T(t,s);return e}if(typeof e!="object"||n.has(e)||(n.add(e),ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e;if(e instanceof Map){for(let[r,s]of e.entries()){if(typeof r=="string"&&J(r))throw new T(`${t}[${JSON.stringify(r)}]`,"forbidden-key-name");O(r,`${t}[key]`,n),O(s,`${t}[${String(r)}]`,n)}return e}if(e instanceof Set){let r=0;for(let s of e.values())O(s,`${t}[${r++}]`,n);return e}if(Array.isArray(e))return e.forEach((r,s)=>O(r,`${t}[${s}]`,n)),e;for(let[r,s]of Object.entries(e)){if(J(r))throw new T(`${t}.${r}`,"forbidden-key-name");O(s,`${t}.${r}`,n,r)}return e}var rt=/[\u0000-\u001f\u007f]/;function X(e,t){if(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`${t} must be a plain object`);return e}function Z(e,t="control input"){try{O(e,t),ge(e)}catch(n){throw new TypeError(`${t} contains secret or custody material: ${n.message}`)}return e}function j(e,{required:t=[],optional:n=[]}={},o="object"){X(e,o);let r=new Set([...t,...n]),s=Object.keys(e).filter(a=>!r.has(a));if(s.length)throw new TypeError(`${o} has unknown field ${s[0]}`);for(let a of t)if(!Object.hasOwn(e,a))throw new TypeError(`${o}.${a} is required`);return e}function Q(e,t,n=200,{lower:o=!1}={}){if(typeof e!="string"||!e.trim()||e.length>n||rt.test(e))throw new TypeError(`${t} must be non-empty control-free text up to ${n} characters`);let r=e.trim();return o?r.toLowerCase():r}function z(e,t,n=80){let o=Q(e,t,n,{lower:!0});if(!/^[a-z0-9][a-z0-9._:-]*$/.test(o))throw new TypeError(`${t} must be a lowercase identifier`);return o}function G(e,t,{positive:n=!1}={}){if(!Number.isSafeInteger(e)||e<0||n&&e===0)throw new TypeError(`${t} must be a ${n?"positive":"non-negative"} safe integer`);return e}function I(e){if(e&&typeof e=="object"&&!Object.isFrozen(e)){for(let t of Object.values(e))I(t);Object.freeze(e)}return e}var ot=Object.freeze(["confirmations","finalizedTag","checkpoint"]),k=Object.freeze({UNKNOWN:"UNKNOWN",INCLUDED:"INCLUDED",FINAL:"FINAL"}),st=Object.freeze(["LIVE","STALE","UNKNOWN","UNAVAILABLE"]);function we({family:e,chainId:t},n="chain"){let o=z(e,`${n}.family`,40),r;if(o==="evm"){if(typeof t=="number")r=String(G(t,`${n}.chainId`,{positive:!0}));else if(r=Q(t,`${n}.chainId`,40),!/^[1-9][0-9]*$/.test(r))throw new TypeError(`${n}.chainId must be a positive decimal EVM chain id`)}else r=z(t,`${n}.chainId`,80);return{family:o,chainId:r}}function it(e,t="chain"){return j(e,{required:["family","chainId"]},t),I(we(e,t))}function Ee(e,t="finality rule"){Z(e,t),X(e,t);let n=e.rule;if(!ot.includes(n))throw new TypeError(`${t}.rule must be confirmations, finalizedTag, or checkpoint`);let o=n==="confirmations"?"confirmations":n;j(e,{required:["family","chainId","rule",o]},t);let r=we(e,t);return n==="confirmations"?{...r,rule:n,confirmations:G(e.confirmations,`${t}.confirmations`,{positive:!0})}:{...r,rule:n,[o]:z(e[o],`${t}.${o}`,80)}}function ee(e){if(!Array.isArray(e))throw new TypeError("finality policy rules must be an array");let t=e.map((o,r)=>Ee(o,`finality policy rule ${r}`)),n=new Set;for(let o of t){let r=`${o.family}\0${o.chainId}`;if(n.has(r))throw new TypeError(`duplicate finality rule for ${o.family}:${o.chainId}`);n.add(r)}return I({policyVersion:1,rules:t})}function at(e){if(j(e,{required:["policyVersion","rules"]},"finality policy"),e.policyVersion!==1||!Array.isArray(e.rules))throw new TypeError("unsupported finality policy");return ee(e.rules)}function Ae(e,t){let n=it(t,"finality query"),r=at(e).rules.find(s=>s.family===n.family&&s.chainId===n.chainId);return r?I({status:"KNOWN",...n,rule:r}):I({status:k.UNKNOWN,reason:"MISSING_FINALITY_RULE",...n,rule:null})}function ct(e,t){if(e==null)return null;Z(e,"finality evidence");let n=t.rule==="confirmations"?"confirmations":t.rule;if(j(e,{required:["status"],optional:[n]},"finality evidence"),!st.includes(e.status))throw new TypeError("finality evidence.status is unknown");let o={status:e.status};return e[n]!=null&&(o[n]=t.rule==="confirmations"?G(e.confirmations,"finality evidence.confirmations",{positive:!0}):z(e[n],`finality evidence.${n}`,80)),o}function Se(e,t){if(!e||e.status===k.UNKNOWN||e.rule==null)return I({status:k.UNKNOWN,final:!1,reason:"MISSING_FINALITY_RULE"});let n=Ee(e.rule??e,"resolved finality rule"),o=ct(t,n);if(o==null)return I({status:k.UNKNOWN,final:!1,reason:"MISSING_FINALITY_EVIDENCE"});if(o.status!=="LIVE")return I({status:k.UNKNOWN,final:!1,reason:`${o.status}_EVIDENCE`});let r=!1;return n.rule==="confirmations"?r=o.confirmations!=null&&o.confirmations>=n.confirmations:n.rule==="finalizedTag"?r=o.finalizedTag===n.finalizedTag:r=o.checkpoint===n.checkpoint,I({status:r?k.FINAL:k.INCLUDED,final:r,reason:r?"PINNED_RULE_SATISFIED":"PINNED_RULE_NOT_SATISFIED",rule:n})}var lt=1,gn=Object.freeze(["SUCCESS","FAIL","UNKNOWN"]),b=(...e)=>e.find(t=>t!=null),D=e=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.getPrototypeOf(e)===Object.prototype;function ft(e){if(e===!0||e===1||e==="1")return"SUCCESS";if(e===!1||e===0||e==="0")return"FAIL";if(typeof e!="string")return"UNKNOWN";let t=e.trim().toUpperCase();return["SUCCESS","SUCCEEDED","OK","EXECUTED"].includes(t)?"SUCCESS":["FAIL","FAILED","FAILURE","REVERTED","REJECTED"].includes(t)?"FAIL":"UNKNOWN"}function xe(e){return typeof e=="string"&&["FAIL","FAILED","FAILURE","ORPHAN","ORPHANED","REVERTED"].includes(e.trim().toUpperCase())}function ne(e){return e==null?e:Array.isArray(e)?e.map(ne):D(e)?Object.fromEntries(Object.keys(e).sort().map(t=>[t,ne(e[t])])):String(e)}function ut(e,t,n,o){let r=b(e.finalityEvidence,o?.finality,e.evidence),s=b(e.finalityPolicy,e.policy);try{return s==null&&D(e.finalityRule)&&(s=ee([{family:t,chainId:n,...e.finalityRule}])),s==null||t==null||n==null?{status:"UNKNOWN",final:!1,reason:"MISSING_FINALITY_RULE"}:Se(Ae(s,{family:t,chainId:n}),r)}catch{return{status:"UNKNOWN",final:!1,reason:"MALFORMED_FINALITY_EVIDENCE"}}}function A(e,t,n){n!=null&&(e[t]=n)}function dt(e){return e==null?null:String(e).trim().toLowerCase()}function te(...e){let t=e.map(dt).filter(Boolean);return t.length<=1||t.every(n=>n===t[0])}function W(e={}){if(!D(e))throw new TypeError("verified receipt: input object required");let t=me(e),n=b(t.actionReceipt,t.receipt),o=D(n)?n:t,r=b(t.observation,t.chainObservation,t.observedReceipt),s=D(r),a=b(t.txHash,o.txHash,o.transactionHash,r?.txHash,r?.transactionHash),p=b(t.family,o.family,o.chain?.family,r?.family,r?.chain?.family),d=b(t.chainId,o.chainId,o.chain?.chainId,r?.chainId,r?.chain?.chainId),f=!te(t.txHash,o.txHash,o.transactionHash,r?.txHash,r?.transactionHash)||!te(t.family,o.family,o.chain?.family,r?.family,r?.chain?.family)||!te(t.chainId,o.chainId,o.chain?.chainId,r?.chainId,r?.chain?.chainId),u=ut(t,p,d,s&&!f?r:null),i=ft(b(r?.receiptStatus,r?.executionStatus,r?.status)),c=b(t.reconciliationStatus,t.reconciliation?.status,r?.reconciliationStatus),l=b(t.finalityState,t.finalityEvidence?.status,t.evidence?.status,r?.finalityState),g="UNKNOWN";xe(c)||!f&&(s&&i==="FAIL"||xe(l))?g="FAIL":!f&&a&&s&&i==="SUCCESS"&&["INCLUDED","FINAL"].includes(u.status)&&(g="SUCCESS");let h={verifiedReceiptVersion:lt,status:g};f&&(h.reason="REFERENCE_MISMATCH"),A(h,"txHash",a),A(h,"chain",b(t.chain,o.chain,r?.chain)),A(h,"family",p),A(h,"chainId",d),A(h,"block",b(r?.block,t.block)),A(h,"blockState",b(r?.blockState,r?.inclusionState)),h.finalityState=u.status,A(h,"confirmations",b(r?.confirmations,r?.finality?.confirmations,t.finalityEvidence?.confirmations,t.evidence?.confirmations)),A(h,"observedAt",b(r?.observedAt,t.observedAt)),A(h,"route",b(t.route,o.route)),A(h,"prepareHash",b(t.prepareHash,o.prepareHash)),A(h,"policyOutcome",b(t.policyOutcome,o.policyOutcome,o.policyChecks));let y=b(t.balanceChanges,r?.balanceChanges,r?.balances,o.balanceChanges,o.balances);return y!=null&&(h.balanceChanges=ne(y)),A(h,"createdAt",b(t.createdAt,o.createdAt)),A(h,"submittedAt",b(t.submittedAt,o.submittedAt)),A(h,"finalizedAt",b(t.finalizedAt,r?.finalizedAt)),A(h,"timestamps",b(t.timestamps,o.timestamps,r?.timestamps)),I(h)}import{createHash as Ne}from"node:crypto";import L from"node:net";import pt from"node:dns";var ht=new Set(["localhost","metadata.google.internal","metadata.goog"]);function q(e){let t=String(e).toLowerCase().split("%")[0];if((t.match(/::/g)||[]).length>1)return null;let n=u=>{if(!u)return[];let i=u.split(":"),c=i.at(-1);if(c?.includes(".")){let l=c.split(".").map(Number);if(l.length!==4||l.some(g=>!Number.isInteger(g)||g<0||g>255))return null;i.splice(i.length-1,1,(l[0]<<8|l[1]).toString(16),(l[2]<<8|l[3]).toString(16))}return i.some(l=>!/^[0-9a-f]{1,4}$/.test(l))?null:i.map(l=>Number.parseInt(l,16))},[o,r]=t.split("::"),s=n(o),a=n(r);if(!s||!a)return null;let p=t.includes("::"),d=8-s.length-a.length;if(!p&&d!==0||p&&d<1)return null;let f=[...s,...Array(Math.max(0,d)).fill(0),...a];return f.length!==8?null:Uint8Array.from(f.flatMap(u=>[u>>8,u&255]))}function re(e,t,n){let o=Math.floor(n/8),r=n%8;for(let a=0;a<o;a+=1)if(e[a]!==t[a])return!1;if(!r)return!0;let s=255<<8-r;return(e[o]&s)===(t[o]&s)}function oe(e){if(L.isIPv4(e)){let t=e.split(".").map(Number);return!(t[0]===0||t[0]===10||t[0]===127||t[0]>=224||t[0]===100&&t[1]>=64&&t[1]<=127||t[0]===169&&t[1]===254||t[0]===172&&t[1]>=16&&t[1]<=31||t[0]===192&&(t[1]===0||t[1]===2||t[1]===168)||t[0]===192&&t[1]===88&&t[2]===99||t[0]===198&&(t[1]===18||t[1]===19||t[1]===51)||t[0]===203&&t[1]===0&&t[2]===113)}if(L.isIPv6(e)){let t=q(e);if(!t)return!1;let n=q("::ffff:0:0");return re(t,n,96)?oe([...t.slice(12)].join(".")):re(t,q("2000::"),3)?![["2001::",23],["2001:db8::",32],["2001:10::",28],["2001:2::",48],["2002::",16],["3fff::",20]].some(([r,s])=>re(t,q(r),s)):!1}return!1}function mt(e){let t;try{t=new URL(String(e))}catch{return{ok:!1,error:`not a valid URL: ${String(e).slice(0,120)}`}}if(t.protocol!=="http:"&&t.protocol!=="https:")return{ok:!1,error:`refused protocol ${t.protocol} (only http/https)`};let n=t.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,"");if(ht.has(n)||n.endsWith(".localhost")||n.endsWith(".internal"))return{ok:!1,error:`refused internal host ${n}`};let o=L.isIP(n);return o!==0&&!oe(n)?{ok:!1,error:`refused private address ${n}`}:{ok:!0,url:t,host:n,isLiteralIp:o!==0}}async function se(e,{lookupFn:t=pt.promises.lookup}={}){let n=mt(e);if(!n.ok)return n;if(n.isLiteralIp)return{ok:!0,url:n.url,addresses:[{address:n.host,family:L.isIPv6(n.host)?6:4}]};let o;try{o=await t(n.host,{all:!0,verbatim:!0})}catch{return{ok:!1,error:`refused: ${n.host} did not resolve`}}return!Array.isArray(o)||o.length===0||o.some(r=>!oe(r.address))?{ok:!1,error:`refused: ${n.host} resolves to a non-public address`}:{ok:!0,url:n.url,addresses:o}}async function ie({requireUndici:e=!1,importUndici:t=()=>import("undici")}={}){let n,o;try{let i=await t();n=i.Agent,o=i.fetch}catch(i){if(e)throw new Error(`egress-guard: untrustedUrl pinning requires the undici package, which failed to load: ${i?.message||i}`);return null}if(typeof n!="function"||typeof o!="function"){if(e)throw new Error("egress-guard: untrustedUrl pinning requires undici's Agent and fetch exports, which were not found on the imported module");return null}let r=i=>String(i).toLowerCase().replace(/^\[|\]$/g,"").replace(/\.+$/,""),s=new Map,a=i=>(Array.isArray(i)?i:[i]).map(c=>typeof c=="string"?{address:c}:c).filter(c=>c&&c.address).map(c=>({address:c.address,family:c.family||(L.isIPv6(c.address)?6:4)})),p=(i,c,l)=>{s.set(r(i),a(typeof c=="string"?[{address:c,family:l}]:c))},d=i=>{let c=r(i);if(L.isIP(c))return[{address:c,family:L.isIPv6(c)?6:4}];let l=s.get(c);if(!l||!l.length)throw new Error(`refused: unpinned host ${i} during pinned fetch`);return l},f=new n({connect:{lookup(i,c,l){let g;try{g=d(i)}catch(h){return l(h)}return c?.all?l(null,g):l(null,g[0].address,g[0].family)}}}),u=yt((i,c={})=>o(i,{...c,dispatcher:f}),p);return{dispatcher:f,fetch:u,pin:p,resolve:d,async close(){try{await f.destroy()}catch{}}}}var ae=Symbol.for("oracle.egressGuard.pinCapableFetch");function yt(e,t){if(typeof e!="function")throw new Error("markPinCapableFetch: fetchImpl must be a function");if(typeof t!="function")throw new Error("markPinCapableFetch: pin must be a function");return e[ae]=Object.freeze({pin:t}),e}function ce(e){return typeof e=="function"&&typeof e[ae]?.pin=="function"}function Ie(e,t,n){if(!ce(e))throw new Error("pinFetchToAddresses: fetchImpl is not pin-capable");e[ae].pin(t,n)}var bt=new Set([408,425,429,500,502,503,504]),$e=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),gt=2,Re=4e3,ke=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],wt=new Set([301,302,303,307,308]),_e=3,Et=64*1024;function At(e){let t=String(e||"").toLowerCase();return ke.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function St(e){let t={};for(let[n,o]of Object.entries(e||{}))At(n)||(t[n]=o);return t}function xt(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function It(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var le=new Map,Nt=/(?:^|_)(send|submit|broadcast|sign|requestAirdrop)(?=[A-Z_]|$)/i,$t=new Set(["allMids","l2Book","outcomeMeta","spotClearinghouseState","userFills","meta","metaAndAssetCtxs","perpDexs","candleSnapshot","fundingHistory","openOrders","frontendOpenOrders","clearinghouseState","spotMeta","validatorSummaries","delegatorSummary","delegations","delegatorRewards","delegatorHistory","maxBuilderFee"]);function Te(e){let t=String(e?.method||"");return t?!Nt.test(t):!1}function Rt(e,t){if(e==="GET"&&t==null)return!0;if(e!=="POST"||t==null)return!1;let n=t;if(typeof t=="string")try{n=JSON.parse(t)}catch{return!1}return Array.isArray(n)?n.length>0&&n.every(Te):!n||typeof n!="object"?!1:n.jsonrpc&&n.method?Te(n):typeof n.type=="string"&&$t.has(n.type)&&n.action==null&&n.signature==null&&n.nonce==null}function _t(e,t,n,o={},r=null){let s={};for(let[c,l]of Object.entries(n||{}))s[c.toLowerCase()]=l;let a=Object.keys(s).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),d=[...new Set([...ke,...a])].sort().map(c=>`${c}=${s[c]??""}`).join(`
+`),f=Ne("sha256").update(d).digest("hex").slice(0,32),u=`${o.untrustedUrl?"untrusted":"trusted"}:${o.maxResponseBytes??"unbounded"}`,i=r==null?"-":Ne("sha256").update(String(r)).digest("hex").slice(0,32);return`${e} ${t} ${u} ${f} ${i}`}function Tt(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,Re):Math.min(250*2**e,Re)+Math.floor(Math.random()*100)}var Ct=e=>new Promise(t=>setTimeout(t,e));function M(e,t={}){let n=new Error(e);return n.retryable=!1,Object.assign(n,t),n}function fe(e,t,n){return M(`HTTP response from ${e} exceeded maxResponseBytes ${n} (${t})`,{oversize:!0})}function v(e){try{let t=e?.body?.cancel?.();t&&typeof t.then=="function"&&t.catch(()=>{})}catch{}}function Ot(e){return e?e.byteLength??e.length??0:0}async function Ce(e,t,{url:n,truncate:o=!1,onOversize:r}={}){if(t==null)return await e.text();let s=Number(e.headers?.get?.("content-length"));if(Number.isFinite(s)&&s>t&&(v(e),!o))throw fe(n,`content-length ${s}`,t);let a=e.body?.getReader?.();if(!a){let i=await e.text(),c=Buffer.byteLength(i,"utf8");if(c>t){if(!o)throw fe(n,`body ${c} bytes`,t);return Buffer.from(i,"utf8").subarray(0,t).toString("utf8")}return i}let p=[],d=0,f=!1;try{for(;;){let{value:i,done:c}=await a.read();if(c)break;if(i&&(p.push(Buffer.from(i)),d+=Ot(i),d>t)){f=!0;break}}}finally{if(f)try{await a.cancel()}catch{}try{a.releaseLock?.()}catch{}}if(f&&(typeof r=="function"&&r(),!o))throw fe(n,`streamed ${d} bytes`,t);let u=Buffer.concat(p);return(f?u.subarray(0,t):u).toString("utf8")}function Oe(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}async function kt(e,{fetchImpl:t,method:n,headers:o,body:r,timeoutMs:s,lookupFn:a,realFetch:p,untrustedUrl:d=!1,maxResponseBytes:f=null,importUndici:u,validateResponse:i,signal:c}){let l=new AbortController,g=setTimeout(()=>l.abort(),s),h=c?typeof AbortSignal.any=="function"?AbortSignal.any([c,l.signal]):c:l.signal,y=null,R=t,P=a?{lookupFn:a}:{};if(d&&!p&&!ce(R))throw M(`HTTP refused ${e}: untrustedUrl requires a pin-capable fetchImpl (see markPinCapableFetch in egress-guard.mjs) or no fetchImpl override so Oracle can pin the connection itself`);let H=async(w,{status:S=null}={})=>{let E=await se(w,P);if(!E.ok)throw M(S==null?`HTTP refused ${w}: ${E.error}`:`HTTP redirect to ${w} ${E.error}`,S==null?{}:{status:S});let m=new URL(w).hostname;if(p){if(y&&(await y.close(),y=null),!y)try{y=await ie({requireUndici:!0,...u?{importUndici:u}:{}})}catch(x){throw M(S==null?`HTTP refused ${w}: ${x?.message||x}`:`HTTP redirect to ${w} refused: ${x?.message||x}`,S==null?{}:{status:S})}y.pin(m,E.addresses),R=y.fetch}else Ie(R,m,E.addresses);return E};try{let w=String(e),S={...o||{}};d&&await H(w);for(let E=0;E<=_e;E+=1){let m=await R(w,{method:n,headers:S,body:r,signal:h,redirect:"manual"});if(wt.has(m.status)){if(n!=="GET"&&n!=="HEAD"){let $=await Ce(m,f??Et,{url:w,truncate:!0}),_=new Error(`HTTP ${m.status} ${n} ${w} redirected non-idempotent request`);throw _.status=m.status,_.body=Oe($)??$.slice(0,300),_}if(E===_e)throw v(m),new Error(`HTTP redirect loop for ${e}`);let N=m.headers?.get?.("location"),C;try{C=xt(N,w)}catch($){throw v(m),$}let U=!It(C,w);if(v(m),U&&(S=St(S)),d)await H(C,{status:m.status});else if(U){let $=await se(C,P);if(!$.ok){let _=new Error(`HTTP redirect from ${w} ${$.error}`);throw _.status=m.status,_.retryable=!1,_}p&&$.addresses?.length&&(y||(y=await ie(u?{importUndici:u}:{})),y&&(y.pin(new URL(C).hostname,$.addresses),R=y.fetch))}w=C;continue}if(typeof i=="function")try{await i(m,{url:w})}catch(N){throw v(m),M(N?.message||String(N))}let x=await Ce(m,f,{url:w,onOversize:()=>l.abort()}),V=Oe(x);if(!m.ok){let N=new Error(`HTTP ${m.status} ${n} ${w}`);throw N.status=m.status,N.retryAfter=m.headers?.get?.("retry-after")??null,N.body=V??x.slice(0,300),N}return V??x}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(g),y&&await y.close()}}async function Le(e,t={}){let n=t.fetchImpl||globalThis.fetch;if(typeof n!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let o=t.timeoutMs??12e3,r=(t.method||"GET").toUpperCase(),s={Accept:"application/json",...t.headers||{}},a=t.body;a!=null&&typeof a!="string"&&(s["Content-Type"]=s["Content-Type"]||"application/json",a=JSON.stringify(a));let p=Number.isInteger(t.retries)?Math.max(t.retries,0):gt,d=t.lookupFn,f=!t.fetchImpl,u=t.untrustedUrl===!0,i=t.importUndici,c=t.validateResponse,l=t.signal,g=Number(t.maxResponseBytes),h=Number.isFinite(g)&&g>0?Math.floor(g):null,y=async()=>{let S;for(let E=0;E<=p;E++){l?.throwIfAborted?.();try{return await kt(e,{fetchImpl:n,method:r,headers:s,body:a,timeoutMs:o,lookupFn:d,realFetch:f,untrustedUrl:u,maxResponseBytes:h,importUndici:i,validateResponse:c,signal:l})}catch(m){S=m;let x=m?.status,V=m?.name==="AbortError"||m?.name==="TimeoutError"||l?.aborted,N=new Set([408,425,429]),C=m?.retryable===!1?!1:x!=null?N.has(x)||bt.has(x)&&$e.has(r):!V&&$e.has(r);if(E===p||!C)throw m;let U=Tt(E,m?.retryAfter);l?await new Promise(($,_)=>{let ve=setTimeout($,U);l.addEventListener("abort",()=>{clearTimeout(ve),_(l.reason||new DOMException("Aborted","AbortError"))},{once:!0})}):await Ct(U)}}throw S};if(!(t.dedupe!==!1&&!l&&Rt(r,a)))return y();let P=_t(r,e,s,{untrustedUrl:u,maxResponseBytes:h},a),H=le.get(P);if(H)return H;let w=y().finally(()=>le.delete(P));return le.set(P,w),w}var Pe={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Lt=new Map(Object.values(Pe).map(e=>[e.chainId,e]));function He(e){return Lt.get(Number(e))||null}function Ue(e,t=process.env){let n=He(e);if(!n)return null;for(let o of n.rpcEnv){let r=(t[o]||"").trim();if(r)return r}return null}import{Interface as Pt,getAddress as Ht}from"ethers";var On=new Pt(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function ue(e,t){try{return Ht(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}function Ut(e){let t=String(e||"").trim();if(!/^0x[0-9a-fA-F]{64}$/.test(t))throw new Error("txHash must be a 32-byte hex transaction hash");return t.toLowerCase()}function de(e){return e==null?null:Number.parseInt(String(e),16)}var Ft={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function jt(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let o=Ue(e,n);return o||Ft[Number(e)]||null}var zt=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Dt(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!zt.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}var B=new Map,Fe=new Map;function Mt(e){let t=new Error(e?.message||JSON.stringify(e));return t.code=e?.code,t}function vt(e){if(e?.error)throw Mt(e.error);return e?.result}function Bt(e,t,n){return`${e}
+${t}
+${JSON.stringify(n??[])}`}async function Kt(e,t,n){return Le(e,{method:"POST",body:t,fetchImpl:n.fetchImpl,timeoutMs:n.timeoutMs??12e3,signal:n.signal})}async function pe(e,t,n=[],o={}){let r=String(t||""),s=Dt(r),a=jt(e,o);if(!a)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);if(s==="eth_chainid"&&o.cacheChainId!==!1){let u=Fe.get(a);if(u!=null)return u}let d=o.dedupe!==!1&&!o.signal?Bt(a,r,n):null;if(d&&B.has(d))return B.get(d);let f=(async()=>{let u=await Kt(a,{jsonrpc:"2.0",id:1,method:t,params:n},o),i=vt(u);return s==="eth_chainid"&&typeof i=="string"&&Fe.set(a,i),i})();return d&&(B.set(d,f),f.finally(()=>{B.get(d)===f&&B.delete(d)}).catch(()=>{})),f}async function je(e={},t={}){let n=Number(e.chainId??t.chainId??1),o=Ut(e.txHash||e.hash||e.transactionHash),r=await pe(n,"eth_getTransactionReceipt",[o],t);if(!r)return{ok:!1,chainId:n,txHash:o,status:"pending",receipt:null,reason:"receipt pending"};let s=de(r.status),a=s===1,p=s===1?"success":s===0?"reverted":"unknown",d=a?null:p==="reverted"?"transaction reverted":"unknown receipt status",f=e.expectedTo?ue(e.expectedTo,"expectedTo"):null,u=r.to?ue(r.to,"receipt.to"):null;return f&&u!==f&&(a=!1,d=`to mismatch: expected ${f}, got ${u||"null"}`),{ok:a,chainId:n,txHash:o,status:p,reason:d,statusCode:s,to:u,from:r.from?ue(r.from,"receipt.from"):null,blockNumber:de(r.blockNumber),transactionIndex:de(r.transactionIndex),logs:Array.isArray(r.logs)?r.logs:[],receipt:r}}var Vt=/^0x[0-9a-f]{64}$/;function Gt(e){if(e==null)return null;let t=typeof e=="number"?e:Number.parseInt(String(e),16);return Number.isSafeInteger(t)?t:null}async function Wt({txHash:e,chainId:t,rpcUrl:n},o={}){let r=String(e||"").trim().toLowerCase();if(!Vt.test(r))throw new TypeError("observe receipt: txHash must be a 32-byte hash");let s=Number(t);if(!Number.isSafeInteger(s)||s<=0)throw new TypeError("observe receipt: chainId required");let a=o.transactionReceipt||je,p=o.rpcCall||pe,d={...o.rpcOptions||{},...n?{rpcUrl:n}:{}},f;try{f=await a({txHash:r,chainId:s},d)}catch(l){return{observation:null,reason:`RPC_UNAVAILABLE: ${l.message}`}}if(!f||f.receipt==null)return{observation:null,reason:f?.reason||"receipt pending"};let u=null,i=f.blockNumber;if(Number.isSafeInteger(i))try{let l=Gt(await p(s,"eth_blockNumber",[],d));l!=null&&l>=i&&(u=l-i+1)}catch{}let c={txHash:r,family:"evm",chainId:String(s),receiptStatus:f.status==="success"?"SUCCESS":f.status==="reverted"?"FAIL":"UNKNOWN",block:i==null?void 0:String(i),observedAt:new Date().toISOString(),finality:{status:"LIVE",...u==null?{}:{confirmations:u}}};return u!=null&&(c.confirmations=u),{observation:c,reason:null}}async function ze({txHash:e,chainId:t,confirmations:n=1,rpcUrl:o},r={}){let{observation:s,reason:a}=await Wt({txHash:e,chainId:t,rpcUrl:o},r),p=W({txHash:String(e).trim().toLowerCase(),family:"evm",chainId:String(Number(t)),finalityRule:{rule:"confirmations",confirmations:n},...s?{observation:s}:{}});return{receipt:p,observed:!!s,final:p.finalityState==="FINAL",requiredConfirmations:n,reason:a}}var De={SUCCESS:0,FAIL:2,UNKNOWN:3};function K(e,t){let n=e.find(r=>r.startsWith(`--${t}=`));if(n)return n.split("=").slice(1).join("=");let o=e.indexOf(`--${t}`);return o>=0?e[o+1]:void 0}function Me(e,{observed:t,reason:n,final:o,requiredConfirmations:r}){let s=[`${e.status}  ${e.txHash||"no hash"}`];return e.reason&&s.push(`  reason        ${e.reason}`),s.push(`  finality      ${e.finalityState}${o?"":` (below pinned depth ${r})`}`),e.confirmations!=null&&s.push(`  confirmations ${e.confirmations}`),e.block!=null&&s.push(`  block         ${e.block}`),e.chainId!=null&&s.push(`  chain         ${e.family||"evm"}:${e.chainId}`),!t&&n&&s.push(`  not observed  ${n}`),e.status==="UNKNOWN"&&s.push("  UNKNOWN is not success. No observed chain state means the action is unproven."),`${s.join(`
+`)}
+`}var jn={name:"receipt",summary:"verify an on-chain action against observed chain state (never trust a bare hash)",group:"read",usage:"oracle receipt --hash <txid> --chain <chainId> [--confirmations N] [--rpc-url URL] [--json] [--quiet]",async run(e){let t=e.argv||[],n=t.includes("--quiet"),o=t.indexOf("--json"),r=o>=0?t[o+1]:void 0;if(r&&!r.startsWith("--")){let h;try{h=JSON.parse(r)}catch(R){return process.stderr.write(`receipt: bad json: ${R.message}
+`),1}let y;try{y=W(h)}catch(R){return process.stderr.write(`receipt: ${R.message}
+`),1}return process.stdout.write(n?`${JSON.stringify(y)}
+`:Me(y,{observed:!0,reason:null})),De[y.status]}let s=K(t,"hash");if(!s)return process.stderr.write(`receipt: --hash required
+usage: ${this.usage}
+`),1;let a=K(t,"chain")??K(t,"chainId");if(!a)return process.stderr.write(`receipt: --chain <chainId> required to observe chain state
+`),1;let p=K(t,"confirmations"),d=p==null?1:Number(p);if(!Number.isSafeInteger(d)||d<=0)return process.stderr.write(`receipt: --confirmations must be a positive integer
+`),1;let f;try{f=await ze({txHash:s,chainId:a,confirmations:d,rpcUrl:K(t,"rpc-url")})}catch(h){return process.stderr.write(`receipt: ${h.message}
+`),1}let{receipt:u,observed:i,reason:c,final:l,requiredConfirmations:g}=f;return process.stdout.write(n?`${JSON.stringify({...u,observed:i,final:l,requiredConfirmations:g,...c?{notObserved:c}:{}})}
+`:Me(u,{observed:i,reason:c,final:l,requiredConfirmations:g})),De[u.status]}};export{jn as default};

package/dist/cli/commands/sign.mjs

@@ -1,7 +1,7 @@
-var ve=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t=[r],r}};import I from"node:fs";import Ie from"node:os";import E from"node:path";import{fileURLToPath as ke}from"node:url";function K(){return process.env.ORACLE_FAKE_HOME||Ie.homedir()}function Oe(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function k(){return Oe()?process.env.ORACLE_CONFIG_DIR||E.join(K(),".config","oracle"):E.join(K(),".config","oracle")}function Ce(){return E.join(k(),"desk.json")}function Ne(){return E.join(k(),"env")}function b({force:e=!1}={}){if(b._done&&!e)return b._result||null;b._done=!0;let n={},t=(i,o)=>{if(o==null)return;let a=String(o).trim();a&&(process.env[i]!=null&&String(process.env[i]).trim()!==""||(process.env[i]=a,n[i]=a))};try{let i=Ne();if(I.existsSync(i))for(let o of I.readFileSync(i,"utf8").split(/\r?\n/)){let a=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let c=a[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),t(a[1],c)}}catch{}try{let i=Ce();if(I.existsSync(i)){let o=JSON.parse(I.readFileSync(i,"utf8"));o&&typeof o=="object"&&(t("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),t("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),t("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),t("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),t("ORACLE_EXEC_URL",o.execUrl),t("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(t("ORACLE_DESK_URL",r),t("ORACLE_DATA_URL",r),t("ORACLE_API_URL",r),t("ORACLE_PUBLIC_URL",r),t("MAD_DESK_URL",r)),b._result=Object.keys(n).length?n:null,b._result}var Te,Rt,X=ve(()=>{Te=E.dirname(ke(import.meta.url)),Rt=E.resolve(Te,"../..");try{b()}catch{}});X();import m from"node:fs";import V from"node:path";import{createCipheriv as Le,createDecipheriv as Be,randomBytes as O,scryptSync as Pe}from"node:crypto";import s from"node:fs";import w from"node:path";var Y="ORACLE-LOCAL-VAULT",Q=1,A=Object.freeze({N:1<<17,r:8,p:1}),_e=256*1024*1024,$e=16*1024;function T(e,n,t,{max:r=n}={}){if(typeof e!="string"||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`local-vault: invalid ${t} encoding`);let i=Buffer.from(e,"base64");if(i.toString("base64")!==e||i.length<n||i.length>r)throw new Error(`local-vault: invalid ${t} length`);return i}function Z(e,n,t=A){let r=String(e??"");if(r.length<12)throw new Error("local-vault: passphrase must be at least 12 characters");return Pe(r,n,32,{...t,maxmem:_e})}function ee(e,n,t={}){let r=Buffer.isBuffer(e)?Buffer.from(e):Buffer.from(String(e));if(!r.length)throw new Error("local-vault: refusing empty key material");let i=O(32),o=O(12),a={magic:Y,version:Q,kdf:{name:"scrypt",...A,salt:i.toString("base64")},cipher:{name:"aes-256-gcm",iv:o.toString("base64")},meta:{address:t.address?String(t.address).toLowerCase():null,addresses:t.addresses||void 0,kind:t.kind||"evm",createdAt:new Date().toISOString()}},c=Z(n,i);try{let l=Le("aes-256-gcm",c,o);l.setAAD(Buffer.from(JSON.stringify(a)));let u=Buffer.concat([l.update(r),l.final()]);return{...a,ciphertext:u.toString("base64"),tag:l.getAuthTag().toString("base64")}}finally{c.fill(0),r.fill(0)}}function _(e,n){if(e?.magic!==Y||e?.version!==Q)throw new Error("local-vault: unsupported vault file");if(e?.kdf?.name!=="scrypt"||e?.cipher?.name!=="aes-256-gcm")throw new Error("local-vault: unsupported cryptography");if(e.kdf.N!==A.N||e.kdf.r!==A.r||e.kdf.p!==A.p)throw new Error("local-vault: unsupported KDF parameters");if(Object.keys(e.kdf).sort().join(",")!=="N,name,p,r,salt"||Object.keys(e.cipher).sort().join(",")!=="iv,name")throw new Error("local-vault: unexpected cryptography field");if(!e.meta||Object.keys(e.meta).some(d=>!["address","addresses","kind","createdAt"].includes(d))||String(e.meta.kind||"").length>16||String(e.meta.address||"").length>128||JSON.stringify(e.meta.addresses||{}).length>1024||!Number.isFinite(Date.parse(e.meta.createdAt)))throw new Error("local-vault: invalid metadata");let t=["magic","version","kdf","cipher","meta","ciphertext","tag"];if(Object.keys(e).some(d=>!t.includes(d)))throw new Error("local-vault: unexpected vault field");let r=T(e.kdf.salt,32,"salt"),i=T(e.cipher.iv,12,"iv"),o=T(e.tag,16,"tag"),a=T(e.ciphertext,1,"ciphertext",{max:$e}),{ciphertext:c,tag:l,...u}=e,f=Z(n,r);try{let d=Be("aes-256-gcm",f,i);return d.setAAD(Buffer.from(JSON.stringify(u))),d.setAuthTag(o),Buffer.concat([d.update(a),d.final()])}catch{throw new Error("local-vault: wrong passphrase or tampered vault")}finally{f.fill(0)}}function Re(e){if(!e.isFile())throw new Error("local-vault: secret source must be a regular file");if(e.uid!==process.getuid?.())throw new Error("local-vault: secret source must be owned by this user");if(e.nlink!==1)throw new Error("local-vault: refusing hard-linked secret source");if((e.mode&63)!==0)throw new Error("local-vault: secret source must be owner-only (0600)")}function te(e){let n=w.dirname(e),t=s.lstatSync(n);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("local-vault: unsafe destination directory");if(t.uid!==process.getuid?.())throw new Error("local-vault: destination directory must be owned by this user");if((t.mode&63)!==0)throw new Error("local-vault: destination directory must be owner-only (0700)");try{let r=s.lstatSync(e);if(r.isSymbolicLink())throw new Error("local-vault: refusing symlink destination");if(!r.isFile()||r.uid!==process.getuid?.()||r.nlink!==1)throw new Error("local-vault: unsafe destination file");if(r.dev!==t.dev)throw new Error("local-vault: destination device mismatch")}catch(r){if(r.code!=="ENOENT")throw r}}function h(e){let n;try{n=s.openSync(e,s.constants.O_RDONLY|s.constants.O_NOFOLLOW)}catch(t){throw t.code==="ELOOP"?new Error("local-vault: refusing symlink"):t}try{let t=s.fstatSync(n);if(Re(t),t.size>1024*1024)throw new Error("local-vault: secret source changed or is too large");let r=s.lstatSync(e);if(r.isSymbolicLink()||r.dev!==t.dev||r.ino!==t.ino)throw new Error("local-vault: secret source changed or is too large");return s.readFileSync(n,"utf8").replace(/[\r\n]+$/,"")}finally{s.closeSync(n)}}function $(e){return JSON.parse(h(e))}function re(e,n){s.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),te(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`),r;try{r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384),s.writeFileSync(r,JSON.stringify(n,null,2)+`
-`),s.fsyncSync(r),s.closeSync(r),r=void 0;let i=s.openSync(t,s.constants.O_RDONLY|s.constants.O_NOFOLLOW),o;try{o=s.fstatSync(i)}finally{s.closeSync(i)}let a=s.lstatSync(w.dirname(e));if(o.nlink!==1||o.dev!==a.dev||o.uid!==process.getuid?.())throw new Error("local-vault: unsafe temporary file");s.renameSync(t,e),s.chmodSync(e,384);let c=s.openSync(w.dirname(e),"r");try{s.fsyncSync(c)}finally{s.closeSync(c)}}catch(i){if(r!==void 0)try{s.closeSync(r)}catch{}try{s.unlinkSync(t)}catch{}throw i}return e}function y(e,n){s.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),te(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`);try{let r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384);try{s.writeFileSync(r,String(n)),s.fsyncSync(r)}finally{s.closeSync(r)}s.renameSync(t,e),s.chmodSync(e,384);let i=s.openSync(w.dirname(e),"r");try{s.fsyncSync(i)}finally{s.closeSync(i)}}catch(r){try{s.unlinkSync(t)}catch{}throw r}}import p from"node:path";import St from"node:os";import{createHash as At,randomBytes as rs}from"node:crypto";import{Interface as G,keccak256 as os}from"ethers";import{Transaction as as}from"@scure/btc-signer";import{ed25519 as cs}from"@noble/curves/ed25519.js";import{base58 as ci}from"@scure/base";import{Interface as ce}from"ethers";import{Interface as je,MaxUint256 as Er,isAddress as xr,keccak256 as Sr,toUtf8Bytes as Ar}from"ethers";import{Interface as qe,isAddress as tr}from"ethers";import{isAddress as Kt}from"ethers";var ir=new qe(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as De,isAddress as cr}from"ethers";var fr=new De(["function approve(address spender,uint256 amount) returns (bool)"]),pr=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});var Cr=new je(["function approve(address spender,uint256 amount) returns (bool)"]);var Lr=300*1e3,Br=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();import{Address as Fr,NETWORK as Mr,OutScript as qr,RawTx as Dr,SigHash as jr,TEST_NETWORK as Ur,Transaction as zr}from"@scure/btc-signer";import{createHash as ze}from"node:crypto";import{base58 as Gr}from"@scure/base";import{getCompiledTransactionMessageDecoder as Kr}from"@solana/transaction-messages";var ne=e=>ze("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Xr=new Map([[ne("route"),{name:"route",prefixBytes:0}],[ne("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]);var on=64*1024;var hn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),gn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"});var En="0x"+"00".repeat(32);var He=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),In=Object.freeze(He.map(e=>e[0]));import{TypedDataEncoder as ro,getAddress as no}from"ethers";import{TypedDataEncoder as Nn,getAddress as Ln,isAddress as Bn}from"ethers";var Ge=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Ve=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as zn,getAddress as Wn,isAddress as Hn}from"ethers";var $n=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var Ke=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Qn=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var Xe=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Zn=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var ao=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]);var rt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var vo=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0});var nt=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Io=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),ko=new ce(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),To=new ce(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Oo=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var ot=Object.freeze([...rt]),Co=Object.freeze({...nt});import{ed25519 as Ho}from"@noble/curves/ed25519.js";import{base58 as Go}from"@scure/base";import{RawTx as Ko,SigHash as Xo,Transaction as Yo}from"@scure/btc-signer";import{Transaction as Zo,keccak256 as ei,verifyTypedData as ti}from"ethers";import{encode as Bo}from"@msgpack/msgpack";import{keccak256 as _o,verifyTypedData as $o}from"ethers";var Ro=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Fo=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var Ei=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}});import{createHmac as ct,randomBytes as _i,timingSafeEqual as ut}from"node:crypto";import lt from"node:fs";import x from"node:path";import{homedir as D}from"node:os";import{join as j}from"node:path";var le=process.env.ORACLE_PUBLIC_DESKTOP==="1",st=le?process.env.ORACLE_CONFIG_DIR||j(D(),".config","oracle"):j(D(),".config","oracle"),vi=le?st:j(D(),".config","mad-desk");var Ci="0".repeat(64),Ni=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"});function N(e){return e==null?"null":typeof e!="object"?JSON.stringify(e):Array.isArray(e)?"["+e.map(N).join(",")+"]":"{"+Object.keys(e).sort().map(t=>JSON.stringify(t)+":"+N(e[t])).join(",")+"}"}var Li=Promise.resolve();function dt(e,n){if(!e)throw new Error("ledger: separate freshness anchor required");let t=a=>{try{return lt.realpathSync(a)}catch{return x.resolve(a)}},r=t(x.dirname(x.resolve(e))),i=t(x.dirname(x.resolve(n))),o=(a,c)=>c===a||c.startsWith(a+x.sep);if(o(r,i)||o(i,r))throw new Error("ledger: separate freshness anchor required")}var U=(e,n)=>ct("sha256",n).update(N(e)).digest("hex"),ft=(e,n)=>{let t=Buffer.from(String(e)),r=Buffer.from(String(n));return t.length===r.length&&ut(t,r)};function pt(e,n,{sequence:t}={}){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("policy: object required");let r=t===void 0?e:{...e,policySequence:Number(t)};return{policy:r,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:U(r,n)}}}function de(e,n){if(!e)throw new Error("policy: sequence anchor required");let t;try{t=h(e)}catch{return{sequence:0,present:!1}}let r;try{r=JSON.parse(t)}catch{throw new Error("policy: sequence anchor is unreadable")}if(!ft(r?.integrity?.mac,U(r?.marker,n)))throw new Error("policy: sequence anchor integrity failed");return{sequence:Number(r?.marker?.policySequence||0),policyMac:r?.marker?.policyMac??null,present:!0,ledgerInitialized:r?.marker?.ledgerInitialized===!0}}function mt(e,n,t,r=null,{ledgerInitialized:i}={}){if(r==null||!String(r))throw new Error("policy: sequence anchor must bind the sealed policy MAC");let o=i===!0;if(i===void 0)try{let c=de(e,t);o=c.present&&c.ledgerInitialized===!0}catch{o=!1}let a={policySequence:Number(n),policyMac:String(r)};o&&(a.ledgerInitialized=!0),y(e,JSON.stringify({marker:a,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:U(a,t)}})+`
-`)}function fe(e,n,t,{sequenceAnchorFile:r}={}){let i=h(n);if(!r)throw new Error("policy: sequence anchor required");let o=de(r,i);dt(r,e);let a=Number(o.sequence||0)+1,c=pt(t,i,{sequence:a});mt(r,a,i,c?.integrity?.mac??null),y(e,JSON.stringify(c,null,2)+`
-`)}import{Wallet as z}from"ethers";import{base58 as W}from"@scure/base";import{ed25519 as he}from"@noble/curves/ed25519.js";import{NETWORK as ge,TEST_NETWORK as ye,WIF as wt,p2wpkh as pe}from"@scure/btc-signer";import{pubECDSA as ht}from"@scure/btc-signer/utils.js";var L=e=>{let n=String(e||"").trim().replace(/^0x/i,"");return!/^[0-9a-fA-F]+$/.test(n)||n.length%2?null:Buffer.from(n,"hex")},gt=e=>{let n=String(e||"").trim();if(!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(n))return null;let t=Buffer.from(n,"base64");return t.toString("base64")===n?t:null},me=e=>{let n=String(e||"").trim();try{let t=Buffer.from(W.decode(n));return W.encode(t)===n?t:null}catch{return null}},H=e=>{if(!(e instanceof Uint8Array))throw new Error("sol: key bytes required");if(e.length!==32&&e.length!==64)throw new Error("sol: expected 32-byte private key material");let n=Buffer.from(e.subarray(0,32));if(e.length===64){let t=Buffer.from(e.subarray(32,64)),r=Buffer.from(he.getPublicKey(n));if(!t.equals(r))throw new Error("sol: supplied public key does not match seed")}return n},we=e=>!(e instanceof Uint8Array)||e.length!==32&&e.length!==64?null:Buffer.from(e.subarray(0,32)),g=(e,n)=>{if(n==="sol")return H(e);if(!(e instanceof Uint8Array))throw new Error(`${n}: key bytes required`);if(e.length===32)return Buffer.from(e);if(e.length===64)return Buffer.from(e.subarray(0,32));throw new Error(`${n}: expected 32-byte private key material`)},yt=(e,n)=>{if(!Array.isArray(e))throw new Error(`${n}: expected byte array`);let t=Buffer.alloc(e.length);for(let r=0;r<e.length;r++){let i=e[r];if(typeof i!="number"||!Number.isSafeInteger(i)||i<0||i>255)throw new Error(`${n}: expected integer bytes in 0..255`);t[r]=i}return g(t,n)};function S(e,n){let t=String(n||"").trim();if(e==="evm")return new z(t).privateKey;if(e==="btc")for(let o of[ge,ye])try{return Buffer.from(wt(o).decode(t))}catch{}if(e==="sol"){if(/^hex:/i.test(t)){let u=L(t.slice(4));if(!u)throw new Error("sol: invalid explicit hex private key");return g(u,"sol")}if(/^base58:/i.test(t)){let u=me(t.slice(7));if(!we(u))throw new Error("sol: invalid explicit base58 private key");return H(u)}if(/^0x/i.test(t)){let u=L(t);if(!u)throw new Error("sol: invalid explicit hex private key");return g(u,"sol")}let o=L(t),a=o&&(o.length===32||o.length===64)?g(o,"sol"):null,c=me(t),l=we(c);if(a&&l&&!a.equals(l))throw new Error("sol: ambiguous private key format; prefix with hex: or base58:");if(l)return H(c);if(o)return g(o,"sol")}let r=L(t);if(r)return e==="evm"?new z(`0x${r.toString("hex")}`).privateKey:g(r,e);let i=gt(t);if(i)return g(i,e);if(t.startsWith("[")||t.startsWith("{")){let o=JSON.parse(t);if(Array.isArray(o))return yt(o,e);let a=o.privateKey??o.secretKey??o.key;if(a)return S(e,Array.isArray(a)?JSON.stringify(a):String(a))}throw new Error(`${e}: unsupported private key format`)}function v(e,n){if(e==="evm"){let t=new z(String(n));return{kind:e,secret:t.privateKey,addresses:[t.address.toLowerCase()]}}if(e==="btc"){let t=g(n,"btc"),r=ht(t);return{kind:e,secret:t.toString("hex"),addresses:[pe(r,ge).address,pe(r,ye).address]}}if(e==="sol"){let t=g(n,"sol");return{kind:e,secret:t.toString("hex"),addresses:[W.encode(he.getPublicKey(t))]}}throw new Error(`unsupported signer kind ${e}`)}function J(e,n={}){let t=Buffer.isBuffer(e)?e.toString("utf8"):String(e||"");if(String(n.kind||"")!=="multichain")return{[n.kind||"evm"]:v(n.kind||"evm",S(n.kind||"evm",t))};let r=JSON.parse(t),i={};for(let o of["evm","btc","sol"])r[o]&&(i[o]=v(o,S(o,r[o])));if(r.cex!==void 0){if(!r.cex||typeof r.cex!="object"||Array.isArray(r.cex))throw new Error("local-vault: cex credential records invalid");i.cex={};for(let[o,a]of Object.entries(r.cex)){if(!/^[A-Za-z0-9._-]{1,64}$/.test(o)||!a||typeof a!="object")throw new Error("local-vault: cex credential record invalid");if(!/^(?:binance|bybit|okx|coinbase)$/.test(a.venue)||!/^[A-Za-z0-9._-]{1,64}$/.test(a.accountId||""))throw new Error("local-vault: cex credential binding invalid");let c=(u,f=!0)=>{let d=a[u];if(!(!f&&d===void 0)){if(!Array.isArray(d)||d.length<4||d.some(P=>!Number.isInteger(P)||P<0||P>255))throw new Error("local-vault: cex credential bytes invalid");return Buffer.from(d)}},l=a.apiSecretEncoding;if(l!==(a.venue==="coinbase"?"base64":"raw"))throw new Error("local-vault: explicit cex secret encoding refused");i.cex[o]=Object.freeze({venue:a.venue,accountId:a.accountId,apiKeyBytes:c("apiKeyBytes"),apiSecretBytes:c("apiSecretBytes"),apiSecretEncoding:l,passphraseBytes:c("passphraseBytes",!1)})}if(!Object.keys(i.cex).length)throw new Error("local-vault: empty cex credential records refused");Object.freeze(i.cex)}if(!Object.keys(i).length)throw new Error("local-vault: multichain vault is empty");return i}function be(e){let n={};for(let t of["evm","btc","sol"])e[t]&&(n[t]=t==="evm"?e[t].secret:`0x${e[t].secret}`);return e.cex&&(n.cex=Object.fromEntries(Object.entries(e.cex).map(([t,r])=>[t,{venue:r.venue,accountId:r.accountId,apiKeyBytes:[...r.apiKeyBytes],apiSecretBytes:[...r.apiSecretBytes],apiSecretEncoding:r.apiSecretEncoding,...r.passphraseBytes?{passphraseBytes:[...r.passphraseBytes]}:{}}]))),Buffer.from(JSON.stringify(n))}function Ee(e){let n={};for(let[t,r]of Object.entries(e))r?.addresses&&(n[t]=r.addresses);return{kind:"multichain",address:null,addresses:n}}var Xi=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Yi=Object.freeze(["binance","bybit","okx","coinbase"]),Qi=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),Zi=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),ea=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),ta=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),ra=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),na=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),oa=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),ia=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),aa=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"});var xt=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),xe=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"});var ha=256*1024;var $s=new G(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Rs=new G(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),Fs=new G(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"]);function Se(e){let n=process.env.ORACLE_SIGNER_STATE_DIR||p.join(process.env.XDG_STATE_HOME||p.join(St.homedir(),".local","state"),"oracle"),t=At("sha256").update(p.resolve(e)).digest("hex").slice(0,16);return{vault:p.join(e,"vault.json"),policy:p.join(e,"signer-policy.json"),policyKey:p.join(e,"policy-integrity-key"),policyAnchor:p.join(n,`signer-policy-${t}.high-water`),ledger:p.join(e,"signer-ledger.json"),ledgerAnchor:p.join(n,`signer-ledger-${t}.high-water`),cexOrders:p.join(e,"cex-orders.json"),cexOrdersAnchor:p.join(n,`cex-orders-${t}.high-water`),token:p.join(e,"signer-token"),lock:p.join(n,`signer-${t}.lock`)}}import{randomBytes as vt}from"node:crypto";import{Wallet as It}from"ethers";var Ae=`oracle sign init|import|policy|status|lock|doctor
+var Ie=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t=[r],r}};import I from"node:fs";import ke from"node:os";import b from"node:path";import{fileURLToPath as Te}from"node:url";function K(){return process.env.ORACLE_FAKE_HOME||ke.homedir()}function Ce(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function k(){return Ce()?process.env.ORACLE_CONFIG_DIR||b.join(K(),".config","oracle"):b.join(K(),".config","oracle")}function Ne(){return b.join(k(),"desk.json")}function Le(){return b.join(k(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let n={},t=(i,o)=>{if(o==null)return;let a=String(o).trim();a&&(process.env[i]!=null&&String(process.env[i]).trim()!==""||(process.env[i]=a,n[i]=a))};try{let i=Le();if(I.existsSync(i))for(let o of I.readFileSync(i,"utf8").split(/\r?\n/)){let a=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let c=a[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),t(a[1],c)}}catch{}try{let i=Ne();if(I.existsSync(i)){let o=JSON.parse(I.readFileSync(i,"utf8"));o&&typeof o=="object"&&(t("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),t("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),t("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),t("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),t("ORACLE_EXEC_URL",o.execUrl),t("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(t("ORACLE_DESK_URL",r),t("ORACLE_DATA_URL",r),t("ORACLE_API_URL",r),t("ORACLE_PUBLIC_URL",r),t("MAD_DESK_URL",r)),E._result=Object.keys(n).length?n:null,E._result}var Oe,_t,X=Ie(()=>{Oe=b.dirname(Te(import.meta.url)),_t=b.resolve(Oe,"../..");try{E()}catch{}});X();import m from"node:fs";import V from"node:path";import{createCipheriv as $e,createDecipheriv as Be,randomBytes as O,scryptSync as Re}from"node:crypto";import s from"node:fs";import w from"node:path";var Y="ORACLE-LOCAL-VAULT",Q=1,A=Object.freeze({N:1<<17,r:8,p:1}),Pe=256*1024*1024,_e=16*1024;function T(e,n,t,{max:r=n}={}){if(typeof e!="string"||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`local-vault: invalid ${t} encoding`);let i=Buffer.from(e,"base64");if(i.toString("base64")!==e||i.length<n||i.length>r)throw new Error(`local-vault: invalid ${t} length`);return i}function Z(e,n,t=A){let r=String(e??"");if(r.length<12)throw new Error("local-vault: passphrase must be at least 12 characters");return Re(r,n,32,{...t,maxmem:Pe})}function ee(e,n,t={}){let r=Buffer.isBuffer(e)?Buffer.from(e):Buffer.from(String(e));if(!r.length)throw new Error("local-vault: refusing empty key material");let i=O(32),o=O(12),a={magic:Y,version:Q,kdf:{name:"scrypt",...A,salt:i.toString("base64")},cipher:{name:"aes-256-gcm",iv:o.toString("base64")},meta:{address:t.address?String(t.address).toLowerCase():null,addresses:t.addresses||void 0,kind:t.kind||"evm",createdAt:new Date().toISOString()}},c=Z(n,i);try{let l=$e("aes-256-gcm",c,o);l.setAAD(Buffer.from(JSON.stringify(a)));let u=Buffer.concat([l.update(r),l.final()]);return{...a,ciphertext:u.toString("base64"),tag:l.getAuthTag().toString("base64")}}finally{c.fill(0),r.fill(0)}}function P(e,n){if(e?.magic!==Y||e?.version!==Q)throw new Error("local-vault: unsupported vault file");if(e?.kdf?.name!=="scrypt"||e?.cipher?.name!=="aes-256-gcm")throw new Error("local-vault: unsupported cryptography");if(e.kdf.N!==A.N||e.kdf.r!==A.r||e.kdf.p!==A.p)throw new Error("local-vault: unsupported KDF parameters");if(Object.keys(e.kdf).sort().join(",")!=="N,name,p,r,salt"||Object.keys(e.cipher).sort().join(",")!=="iv,name")throw new Error("local-vault: unexpected cryptography field");if(!e.meta||Object.keys(e.meta).some(d=>!["address","addresses","kind","createdAt"].includes(d))||String(e.meta.kind||"").length>16||String(e.meta.address||"").length>128||JSON.stringify(e.meta.addresses||{}).length>1024||!Number.isFinite(Date.parse(e.meta.createdAt)))throw new Error("local-vault: invalid metadata");let t=["magic","version","kdf","cipher","meta","ciphertext","tag"];if(Object.keys(e).some(d=>!t.includes(d)))throw new Error("local-vault: unexpected vault field");let r=T(e.kdf.salt,32,"salt"),i=T(e.cipher.iv,12,"iv"),o=T(e.tag,16,"tag"),a=T(e.ciphertext,1,"ciphertext",{max:_e}),{ciphertext:c,tag:l,...u}=e,f=Z(n,r);try{let d=Be("aes-256-gcm",f,i);return d.setAAD(Buffer.from(JSON.stringify(u))),d.setAuthTag(o),Buffer.concat([d.update(a),d.final()])}catch{throw new Error("local-vault: wrong passphrase or tampered vault")}finally{f.fill(0)}}function Fe(e){if(!e.isFile())throw new Error("local-vault: secret source must be a regular file");if(e.uid!==process.getuid?.())throw new Error("local-vault: secret source must be owned by this user");if(e.nlink!==1)throw new Error("local-vault: refusing hard-linked secret source");if((e.mode&63)!==0)throw new Error("local-vault: secret source must be owner-only (0600)")}function te(e){let n=w.dirname(e),t=s.lstatSync(n);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("local-vault: unsafe destination directory");if(t.uid!==process.getuid?.())throw new Error("local-vault: destination directory must be owned by this user");if((t.mode&63)!==0)throw new Error("local-vault: destination directory must be owner-only (0700)");try{let r=s.lstatSync(e);if(r.isSymbolicLink())throw new Error("local-vault: refusing symlink destination");if(!r.isFile()||r.uid!==process.getuid?.()||r.nlink!==1)throw new Error("local-vault: unsafe destination file");if(r.dev!==t.dev)throw new Error("local-vault: destination device mismatch")}catch(r){if(r.code!=="ENOENT")throw r}}function h(e){let n;try{n=s.openSync(e,s.constants.O_RDONLY|s.constants.O_NOFOLLOW)}catch(t){throw t.code==="ELOOP"?new Error("local-vault: refusing symlink"):t}try{let t=s.fstatSync(n);if(Fe(t),t.size>1024*1024)throw new Error("local-vault: secret source changed or is too large");let r=s.lstatSync(e);if(r.isSymbolicLink()||r.dev!==t.dev||r.ino!==t.ino)throw new Error("local-vault: secret source changed or is too large");return s.readFileSync(n,"utf8").replace(/[\r\n]+$/,"")}finally{s.closeSync(n)}}function _(e){return JSON.parse(h(e))}function re(e,n){s.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),te(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`),r;try{r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384),s.writeFileSync(r,JSON.stringify(n,null,2)+`
+`),s.fsyncSync(r),s.closeSync(r),r=void 0;let i=s.openSync(t,s.constants.O_RDONLY|s.constants.O_NOFOLLOW),o;try{o=s.fstatSync(i)}finally{s.closeSync(i)}let a=s.lstatSync(w.dirname(e));if(o.nlink!==1||o.dev!==a.dev||o.uid!==process.getuid?.())throw new Error("local-vault: unsafe temporary file");s.renameSync(t,e),s.chmodSync(e,384);let c=s.openSync(w.dirname(e),"r");try{s.fsyncSync(c)}finally{s.closeSync(c)}}catch(i){if(r!==void 0)try{s.closeSync(r)}catch{}try{s.unlinkSync(t)}catch{}throw i}return e}function y(e,n){s.mkdirSync(w.dirname(e),{recursive:!0,mode:448}),te(e);let t=w.join(w.dirname(e),`.${w.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`);try{let r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384);try{s.writeFileSync(r,String(n)),s.fsyncSync(r)}finally{s.closeSync(r)}s.renameSync(t,e),s.chmodSync(e,384);let i=s.openSync(w.dirname(e),"r");try{s.fsyncSync(i)}finally{s.closeSync(i)}}catch(r){try{s.unlinkSync(t)}catch{}throw r}}import p from"node:path";import St from"node:os";import{createHash as At,randomBytes as cs}from"node:crypto";import{Interface as G,keccak256 as ls}from"ethers";import{Transaction as fs}from"@scure/btc-signer";import{ed25519 as ms}from"@noble/curves/ed25519.js";import{base58 as ci}from"@scure/base";import{Interface as ue}from"ethers";import{Interface as Ue,MaxUint256 as br,isAddress as xr,keccak256 as Sr,toUtf8Bytes as Ar}from"ethers";import{Interface as qe,isAddress as tr}from"ethers";import{isAddress as Kt}from"ethers";var ir=new qe(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as je,isAddress as cr}from"ethers";var fr=new je(["function approve(address spender,uint256 amount) returns (bool)"]),pr=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});var Cr=new Ue(["function approve(address spender,uint256 amount) returns (bool)"]);var Lr=300*1e3,$r=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();import{Address as Fr,NETWORK as Dr,OutScript as Mr,RawTx as qr,SigHash as jr,TEST_NETWORK as Ur,Transaction as zr}from"@scure/btc-signer";import{createHash as ze}from"node:crypto";import{base58 as Gr}from"@scure/base";import{getCompiledTransactionMessageDecoder as Kr}from"@solana/transaction-messages";var oe=e=>ze("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Xr=new Map([[oe("route"),{name:"route",prefixBytes:0}],[oe("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]);var on=64*1024;var hn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),gn=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"});var bn="0x"+"00".repeat(32);var He=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),In=Object.freeze(He.map(e=>e[0]));import{TypedDataEncoder as ro,getAddress as no}from"ethers";import{TypedDataEncoder as Nn,getAddress as Ln,isAddress as $n}from"ethers";var Ge=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),Ve=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as zn,getAddress as Wn,isAddress as Hn}from"ethers";var Pn=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var Ke=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),Qn=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var Xe=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),Zn=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var ao=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]);var rt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var vo=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0});var nt=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Io=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),ko=new ue(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),To=new ue(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Oo=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var ot=Object.freeze([...rt]),Co=Object.freeze({...nt});import{ed25519 as Ho}from"@noble/curves/ed25519.js";import{base58 as Go}from"@scure/base";import{RawTx as Ko,SigHash as Xo,Transaction as Yo}from"@scure/btc-signer";import{Transaction as Zo,keccak256 as ei,verifyTypedData as ti}from"ethers";import{encode as $o}from"@msgpack/msgpack";import{keccak256 as Ro,verifyTypedData as Po}from"ethers";var _o=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Fo=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});var bi=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}});import{createHmac as ct,randomBytes as Ri,timingSafeEqual as ut}from"node:crypto";import lt from"node:fs";import x from"node:path";import{homedir as q}from"node:os";import{join as j}from"node:path";var de=process.env.ORACLE_PUBLIC_DESKTOP==="1",st=de?process.env.ORACLE_CONFIG_DIR||j(q(),".config","oracle"):j(q(),".config","oracle"),vi=de?st:j(q(),".config","mad-desk");var Ci="0".repeat(64),Ni=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"});function L(e){return e==null?"null":typeof e!="object"?JSON.stringify(e):Array.isArray(e)?"["+e.map(L).join(",")+"]":"{"+Object.keys(e).sort().map(t=>JSON.stringify(t)+":"+L(e[t])).join(",")+"}"}var Li=Promise.resolve();function dt(e,n){if(!e)throw new Error("ledger: separate freshness anchor required");let t=a=>{try{return lt.realpathSync(a)}catch{return x.resolve(a)}},r=t(x.dirname(x.resolve(e))),i=t(x.dirname(x.resolve(n))),o=(a,c)=>c===a||c.startsWith(a+x.sep);if(o(r,i)||o(i,r))throw new Error("ledger: separate freshness anchor required")}var U=(e,n)=>ct("sha256",n).update(L(e)).digest("hex"),ft=(e,n)=>{let t=Buffer.from(String(e)),r=Buffer.from(String(n));return t.length===r.length&&ut(t,r)};function pt(e,n,{sequence:t}={}){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("policy: object required");let r=t===void 0?e:{...e,policySequence:Number(t)};return{policy:r,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:U(r,n)}}}function fe(e,n){if(!e)throw new Error("policy: sequence anchor required");let t;try{t=h(e)}catch{return{sequence:0,present:!1}}let r;try{r=JSON.parse(t)}catch{throw new Error("policy: sequence anchor is unreadable")}if(!ft(r?.integrity?.mac,U(r?.marker,n)))throw new Error("policy: sequence anchor integrity failed");return{sequence:Number(r?.marker?.policySequence||0),policyMac:r?.marker?.policyMac??null,present:!0,ledgerInitialized:r?.marker?.ledgerInitialized===!0}}function mt(e,n,t,r=null,{ledgerInitialized:i}={}){if(r==null||!String(r))throw new Error("policy: sequence anchor must bind the sealed policy MAC");let o=i===!0;if(i===void 0)try{let c=fe(e,t);o=c.present&&c.ledgerInitialized===!0}catch{o=!1}let a={policySequence:Number(n),policyMac:String(r)};o&&(a.ledgerInitialized=!0),y(e,JSON.stringify({marker:a,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:U(a,t)}})+`
+`)}function pe(e,n,t,{sequenceAnchorFile:r}={}){let i=h(n);if(!r)throw new Error("policy: sequence anchor required");let o=fe(r,i);dt(r,e);let a=Number(o.sequence||0)+1,c=pt(t,i,{sequence:a});mt(r,a,i,c?.integrity?.mac??null),y(e,JSON.stringify(c,null,2)+`
+`)}import{Wallet as z}from"ethers";import{base58 as W}from"@scure/base";import{ed25519 as ge}from"@noble/curves/ed25519.js";import{NETWORK as ye,TEST_NETWORK as Ee,WIF as wt,p2wpkh as me}from"@scure/btc-signer";import{pubECDSA as ht}from"@scure/btc-signer/utils.js";var $=e=>{let n=String(e||"").trim().replace(/^0x/i,"");return!/^[0-9a-fA-F]+$/.test(n)||n.length%2?null:Buffer.from(n,"hex")},gt=e=>{let n=String(e||"").trim();if(!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(n))return null;let t=Buffer.from(n,"base64");return t.toString("base64")===n?t:null},we=e=>{let n=String(e||"").trim();try{let t=Buffer.from(W.decode(n));return W.encode(t)===n?t:null}catch{return null}},H=e=>{if(!(e instanceof Uint8Array))throw new Error("sol: key bytes required");if(e.length!==32&&e.length!==64)throw new Error("sol: expected 32-byte private key material");let n=Buffer.from(e.subarray(0,32));if(e.length===64){let t=Buffer.from(e.subarray(32,64)),r=Buffer.from(ge.getPublicKey(n));if(!t.equals(r))throw new Error("sol: supplied public key does not match seed")}return n},he=e=>!(e instanceof Uint8Array)||e.length!==32&&e.length!==64?null:Buffer.from(e.subarray(0,32)),g=(e,n)=>{if(n==="sol")return H(e);if(!(e instanceof Uint8Array))throw new Error(`${n}: key bytes required`);if(e.length===32)return Buffer.from(e);if(e.length===64)return Buffer.from(e.subarray(0,32));throw new Error(`${n}: expected 32-byte private key material`)},yt=(e,n)=>{if(!Array.isArray(e))throw new Error(`${n}: expected byte array`);let t=Buffer.alloc(e.length);for(let r=0;r<e.length;r++){let i=e[r];if(typeof i!="number"||!Number.isSafeInteger(i)||i<0||i>255)throw new Error(`${n}: expected integer bytes in 0..255`);t[r]=i}return g(t,n)};function S(e,n){let t=String(n||"").trim();if(e==="evm")return new z(t).privateKey;if(e==="btc")for(let o of[ye,Ee])try{return Buffer.from(wt(o).decode(t))}catch{}if(e==="sol"){if(/^hex:/i.test(t)){let u=$(t.slice(4));if(!u)throw new Error("sol: invalid explicit hex private key");return g(u,"sol")}if(/^base58:/i.test(t)){let u=we(t.slice(7));if(!he(u))throw new Error("sol: invalid explicit base58 private key");return H(u)}if(/^0x/i.test(t)){let u=$(t);if(!u)throw new Error("sol: invalid explicit hex private key");return g(u,"sol")}let o=$(t),a=o&&(o.length===32||o.length===64)?g(o,"sol"):null,c=we(t),l=he(c);if(a&&l&&!a.equals(l))throw new Error("sol: ambiguous private key format; prefix with hex: or base58:");if(l)return H(c);if(o)return g(o,"sol")}let r=$(t);if(r)return e==="evm"?new z(`0x${r.toString("hex")}`).privateKey:g(r,e);let i=gt(t);if(i)return g(i,e);if(t.startsWith("[")||t.startsWith("{")){let o=JSON.parse(t);if(Array.isArray(o))return yt(o,e);let a=o.privateKey??o.secretKey??o.key;if(a)return S(e,Array.isArray(a)?JSON.stringify(a):String(a))}throw new Error(`${e}: unsupported private key format`)}function v(e,n){if(e==="evm"){let t=new z(String(n));return{kind:e,secret:t.privateKey,addresses:[t.address.toLowerCase()]}}if(e==="btc"){let t=g(n,"btc"),r=ht(t);return{kind:e,secret:t.toString("hex"),addresses:[me(r,ye).address,me(r,Ee).address]}}if(e==="sol"){let t=g(n,"sol");return{kind:e,secret:t.toString("hex"),addresses:[W.encode(ge.getPublicKey(t))]}}throw new Error(`unsupported signer kind ${e}`)}function J(e,n={}){let t=Buffer.isBuffer(e)?e.toString("utf8"):String(e||"");if(String(n.kind||"")!=="multichain")return{[n.kind||"evm"]:v(n.kind||"evm",S(n.kind||"evm",t))};let r=JSON.parse(t),i={};for(let o of["evm","btc","sol"])r[o]&&(i[o]=v(o,S(o,r[o])));if(r.cex!==void 0){if(!r.cex||typeof r.cex!="object"||Array.isArray(r.cex))throw new Error("local-vault: cex credential records invalid");i.cex={};for(let[o,a]of Object.entries(r.cex)){if(!/^[A-Za-z0-9._-]{1,64}$/.test(o)||!a||typeof a!="object")throw new Error("local-vault: cex credential record invalid");if(!/^(?:binance|bybit|okx|coinbase)$/.test(a.venue)||!/^[A-Za-z0-9._-]{1,64}$/.test(a.accountId||""))throw new Error("local-vault: cex credential binding invalid");let c=(u,f=!0)=>{let d=a[u];if(!(!f&&d===void 0)){if(!Array.isArray(d)||d.length<4||d.some(R=>!Number.isInteger(R)||R<0||R>255))throw new Error("local-vault: cex credential bytes invalid");return Buffer.from(d)}},l=a.apiSecretEncoding;if(l!==(a.venue==="coinbase"?"base64":"raw"))throw new Error("local-vault: explicit cex secret encoding refused");i.cex[o]=Object.freeze({venue:a.venue,accountId:a.accountId,apiKeyBytes:c("apiKeyBytes"),apiSecretBytes:c("apiSecretBytes"),apiSecretEncoding:l,passphraseBytes:c("passphraseBytes",!1)})}if(!Object.keys(i.cex).length)throw new Error("local-vault: empty cex credential records refused");Object.freeze(i.cex)}if(!Object.keys(i).length)throw new Error("local-vault: multichain vault is empty");return i}function be(e){let n={};for(let t of["evm","btc","sol"])e[t]&&(n[t]=t==="evm"?e[t].secret:`0x${e[t].secret}`);return e.cex&&(n.cex=Object.fromEntries(Object.entries(e.cex).map(([t,r])=>[t,{venue:r.venue,accountId:r.accountId,apiKeyBytes:[...r.apiKeyBytes],apiSecretBytes:[...r.apiSecretBytes],apiSecretEncoding:r.apiSecretEncoding,...r.passphraseBytes?{passphraseBytes:[...r.passphraseBytes]}:{}}]))),Buffer.from(JSON.stringify(n))}function xe(e){let n={};for(let[t,r]of Object.entries(e))r?.addresses&&(n[t]=r.addresses);return{kind:"multichain",address:null,addresses:n}}var ta=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),ra=Object.freeze(["binance","bybit","okx","coinbase"]),na=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),oa=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),ia=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),aa=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),sa=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),ca=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),ua=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),la=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),da=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"});var xt=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),Se=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"});var xa=256*1024;var Us=new G(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),zs=new G(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),Ws=new G(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"]);function Ae(e){let n=process.env.ORACLE_SIGNER_STATE_DIR||p.join(process.env.XDG_STATE_HOME||p.join(St.homedir(),".local","state"),"oracle"),t=At("sha256").update(p.resolve(e)).digest("hex").slice(0,16);return{vault:p.join(e,"vault.json"),policy:p.join(e,"signer-policy.json"),policyKey:p.join(e,"policy-integrity-key"),policyAnchor:p.join(n,`signer-policy-${t}.high-water`),ledger:p.join(e,"signer-ledger.json"),ledgerAnchor:p.join(n,`signer-ledger-${t}.high-water`),cexOrders:p.join(e,"cex-orders.json"),cexOrdersAnchor:p.join(n,`cex-orders-${t}.high-water`),token:p.join(e,"signer-token"),lock:p.join(n,`signer-${t}.lock`)}}import{randomBytes as vt}from"node:crypto";import{Wallet as It}from"ethers";var ve=`oracle sign init|import|policy|status|lock|doctor
 
   oracle sign init [--passphrase-file <0600 file>]
   oracle sign import --kind evm|btc|sol --key-file <0600 file> [--passphrase-file <0600 file>]
@@ -12,13 +12,13 @@ var ve=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t
 
 Secrets are accepted only from a hidden TTY or protected owner-only files.
 They are never accepted as argument values or inherited environment variables.`,B=(e,n)=>{let t=e.indexOf(n);return t>=0?e[t+1]:null},kt=e=>{let n=String(B(e,"--kind")||"evm").toLowerCase();if(!["evm","btc","sol"].includes(n))throw new Error("import requires --kind evm|btc|sol");return n};async function Tt(e,n={}){if(n.readHidden)return n.readHidden(e);if(!process.stdin.isTTY)throw new Error("passphrase requires a TTY or --passphrase-file");return process.stderr.write(e),process.stdin.setRawMode(!0),process.stdin.resume(),new Promise((t,r)=>{let i="",o=c=>{for(let l of c){if(l===3){a(),r(new Error("cancelled"));return}if(l===13||l===10){a(),process.stderr.write(`
-`),t(i);return}l===127?i=i.slice(0,-1):i+=String.fromCharCode(l)}},a=()=>{process.stdin.off("data",o),process.stdin.setRawMode(!1),process.stdin.pause()};process.stdin.on("data",o)})}async function Ot(e,n){let t=B(e,"--passphrase-file");return t?h(t):Tt("Vault passphrase: ",n)}function Ct(e){return e.addresses.join(", ")}async function Nt(e=[],n={}){let t=n.out||process.stdout,r=e[0],i=n.configDir||k(),o=Se(V.join(i,"signer"));if(!r||r==="help")return t.write(Ae+`
+`),t(i);return}l===127?i=i.slice(0,-1):i+=String.fromCharCode(l)}},a=()=>{process.stdin.off("data",o),process.stdin.setRawMode(!1),process.stdin.pause()};process.stdin.on("data",o)})}async function Ot(e,n){let t=B(e,"--passphrase-file");return t?h(t):Tt("Vault passphrase: ",n)}function Ct(e){return e.addresses.join(", ")}async function Nt(e=[],n={}){let t=n.out||process.stdout,r=e[0],i=n.configDir||k(),o=Ae(V.join(i,"signer"));if(!r||r==="help")return t.write(ve+`
 `),0;if(r==="status")return t.write(JSON.stringify({initialized:m.existsSync(o.vault),policyConfigured:m.existsSync(o.policy),armed:m.existsSync(o.vault)&&!m.existsSync(o.lock),disarmed:m.existsSync(o.lock)})+`
 `),0;if(r==="lock")return m.mkdirSync(V.dirname(o.lock),{recursive:!0,mode:448}),y(o.lock,`locked
 `),t.write(`Local signer locked.
 `),0;if(r==="doctor"){let u=[];return m.existsSync(o.vault)||u.push("vault missing"),m.existsSync(o.policy)||u.push("policy missing (empty allowlists fail closed)"),t.write(u.length?`Signer not ready: ${u.join("; ")}
 `:`Signer files ready; vault remains locked until a short-lived signer session starts.
-`),u.length?1:0}if(r==="policy"){if(!m.existsSync(o.vault)||!m.existsSync(o.policyKey))throw new Error("initialize the local signer before sealing policy");let u=B(e,"--policy-file");if(!u)throw new Error("policy requires --policy-file <0600 JSON file>");let f;try{f=JSON.parse(h(u))}catch{throw new Error("policy file must contain valid JSON")}for(let d of["surfaces","actions","chains","destinations","owners"])if(!Array.isArray(f[d])||f[d].length===0)throw new Error(`policy: ${d} allowlist is empty`);return fe(o.policy,o.policyKey,f,{sequenceAnchorFile:o.policyAnchor}),t.write(`Signer policy sealed with local integrity and freshness protection.
-`),0}if(r!=="init"&&r!=="import")throw new Error(`unknown subcommand '${r}'`);let a=await Ot(e,n),c={};if(m.existsSync(o.vault)){if(r==="init")throw new Error("local signer vault already exists");let u=$(o.vault),f=_(u,a);try{c=J(f,u.meta)}finally{f.fill(0)}}if(r==="init"){let u=It.createRandom();c.evm=v("evm",S("evm",u.privateKey))}else{let u=kt(e),f=B(e,"--key-file");if(!f)throw new Error("import requires --key-file <0600 file>");c[u]=v(u,S(u,h(f)))}m.mkdirSync(V.dirname(o.vault),{recursive:!0,mode:448}),re(o.vault,ee(be(c),a,Ee(c))),m.existsSync(o.policyKey)||y(o.policyKey,vt(32).toString("hex")+`
+`),u.length?1:0}if(r==="policy"){if(!m.existsSync(o.vault)||!m.existsSync(o.policyKey))throw new Error("initialize the local signer before sealing policy");let u=B(e,"--policy-file");if(!u)throw new Error("policy requires --policy-file <0600 JSON file>");let f;try{f=JSON.parse(h(u))}catch{throw new Error("policy file must contain valid JSON")}for(let d of["surfaces","actions","chains","destinations","owners"])if(!Array.isArray(f[d])||f[d].length===0)throw new Error(`policy: ${d} allowlist is empty`);return pe(o.policy,o.policyKey,f,{sequenceAnchorFile:o.policyAnchor}),t.write(`Signer policy sealed with local integrity and freshness protection.
+`),0}if(r!=="init"&&r!=="import")throw new Error(`unknown subcommand '${r}'`);let a=await Ot(e,n),c={};if(m.existsSync(o.vault)){if(r==="init")throw new Error("local signer vault already exists");let u=_(o.vault),f=P(u,a);try{c=J(f,u.meta)}finally{f.fill(0)}}if(r==="init"){let u=It.createRandom();c.evm=v("evm",S("evm",u.privateKey))}else{let u=kt(e),f=B(e,"--key-file");if(!f)throw new Error("import requires --key-file <0600 file>");c[u]=v(u,S(u,h(f)))}m.mkdirSync(V.dirname(o.vault),{recursive:!0,mode:448}),re(o.vault,ee(be(c),a,xe(c))),m.existsSync(o.policyKey)||y(o.policyKey,vt(32).toString("hex")+`
 `);let l=Object.entries(c).map(([u,f])=>`${u}:${Ct(f)}`).join(" ");return t.write(`Encrypted local vault initialized for ${l}. Configure sealed policy rails before starting a signer session.
-`),0}var Vs={name:"sign",summary:"manage the encrypted self-hosted signing vault",usage:Ae,run:e=>Nt(e.argv||[])};export{Vs as default,Nt as run};
+`),0}var tc={name:"sign",summary:"manage the encrypted self-hosted signing vault",usage:ve,run:e=>Nt(e.argv||[])};export{tc as default,Nt as run};