safehands-pharos 1.4.0 → 2.6.0

package/dist/lib/preparedTxStore.js

@@ -0,0 +1,90 @@
+import { keccak256, stringToHex } from "viem";
+import { randomUUID } from "crypto";
+import { readJsonFile, stateFile, writeJsonFileAtomic } from "./persistentJsonStore.js";
+const STORE_PATH = stateFile("prepared_transactions.json", "SAFEHANDS_PREPARED_TX_STORE_PATH");
+const EXPIRATION_MS = Number(process.env.SAFEHANDS_PREPARED_TX_TTL_MS || 60 * 60 * 1000);
+let state = loadState();
+function loadState() {
+    const loaded = readJsonFile(STORE_PATH, { records: {} });
+    cleanupExpired(loaded, Date.now(), false);
+    return loaded;
+}
+function persist() {
+    writeJsonFileAtomic(STORE_PATH, state);
+}
+function cleanupExpired(target = state, now = Date.now(), shouldPersist = true) {
+    let changed = false;
+    for (const [id, record] of Object.entries(target.records)) {
+        if (record.expiresAt < now) {
+            delete target.records[id];
+            changed = true;
+        }
+    }
+    if (changed && shouldPersist)
+        persist();
+}
+// Bound the store so an anonymous flood of /wallet/prepare writes cannot grow
+// it without limit between TTL sweeps. Evicts oldest-created first. (Public-scale
+// deployments should back this with Redis/Postgres rather than a JSON file.)
+const MAX_PREPARED_TX_RECORDS = Number(process.env.SAFEHANDS_PREPARED_TX_MAX || 5000);
+function enforceStoreCap() {
+    const ids = Object.keys(state.records);
+    if (ids.length <= MAX_PREPARED_TX_RECORDS)
+        return;
+    const excess = ids.length - MAX_PREPARED_TX_RECORDS;
+    const oldest = ids
+        .map((id) => ({ id, createdAt: state.records[id].createdAt ?? 0 }))
+        .sort((a, b) => a.createdAt - b.createdAt)
+        .slice(0, excess);
+    for (const { id } of oldest)
+        delete state.records[id];
+}
+export function generatePreparedTransactionHash(from, to, data, value, chainId, decision) {
+    const payload = `${from.toLowerCase()}:${to.toLowerCase()}:${data.toLowerCase()}:${value}:${chainId}:${decision}`;
+    return keccak256(stringToHex(payload));
+}
+export function savePreparedTx(from, to, data, value, chainId, decision, policyVersion, policyPreset) {
+    cleanupExpired();
+    const id = randomUUID();
+    const hash = generatePreparedTransactionHash(from, to, data, value, chainId, decision);
+    const now = Date.now();
+    const record = {
+        id,
+        hash,
+        from: from.toLowerCase(),
+        to: to.toLowerCase(),
+        dataHash: keccak256(data),
+        value,
+        chainId,
+        decision,
+        policyVersion,
+        policyPreset,
+        expiresAt: now + EXPIRATION_MS,
+        usedAt: null,
+        createdAt: now,
+        updatedAt: now,
+    };
+    state.records[id] = record;
+    enforceStoreCap();
+    persist();
+    return record;
+}
+export function getPreparedTx(id) {
+    // Reload on read so a restarted process or another single-node lifecycle write
+    // is visible without requiring a full application restart.
+    state = loadState();
+    const record = state.records[id];
+    return record ?? null;
+}
+export function markPreparedTxUsed(id) {
+    state = loadState();
+    const record = state.records[id];
+    if (record && !record.usedAt) {
+        const now = Date.now();
+        record.usedAt = now;
+        record.updatedAt = now;
+        persist();
+    }
+}
+setInterval(() => cleanupExpired(), 5 * 60 * 1000).unref();
+//# sourceMappingURL=preparedTxStore.js.map

package/dist/lib/preparedTxStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preparedTxStore.js","sourceRoot":"","sources":["../../src/lib/preparedTxStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAuBxF,MAAM,UAAU,GAAG,SAAS,CAAC,4BAA4B,EAAE,kCAAkC,CAAC,CAAC;AAC/F,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAEzF,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;AAExB,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,YAAY,CAAkB,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1E,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO;IACd,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,SAA0B,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,GAAG,IAAI;IAC7F,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,IAAI,aAAa;QAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,kFAAkF;AAClF,6EAA6E;AAC7E,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,CAAC;AAEtF,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,IAAI,uBAAuB;QAAE,OAAO;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,uBAAuB,CAAC;IACpD,MAAM,MAAM,GAAG,GAAG;SACf,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC;SAClE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;SACzC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpB,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,IAAY,EACZ,EAAU,EACV,IAAY,EACZ,KAAa,EACb,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;IAClH,OAAO,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,EAAU,EACV,IAAY,EACZ,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,aAA4B,EAC5B,YAA2B;IAE3B,cAAc,EAAE,CAAC;IACjB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,MAAM,GAA8B;QACxC,EAAE;QACF,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;QACxB,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE;QACpB,QAAQ,EAAE,SAAS,CAAC,IAAqB,CAAC;QAC1C,KAAK;QACL,OAAO;QACP,QAAQ;QACR,aAAa;QACb,YAAY;QACZ,SAAS,EAAE,GAAG,GAAG,aAAa;QAC9B,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;IAC3B,eAAe,EAAE,CAAC;IAClB,OAAO,EAAE,CAAC;IACV,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,+EAA+E;IAC/E,2DAA2D;IAC3D,KAAK,GAAG,SAAS,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,KAAK,GAAG,SAAS,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;QACpB,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,WAAW,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC"}

package/dist/lib/price/chainlinkPushProvider.d.ts

@@ -0,0 +1,34 @@
+import type { ContractReader, PriceFeedConfig, PriceProvider, ProviderQuote } from "./types.js";
+export declare const CHAINLINK_PUSH_FEED_ABI: readonly [{
+    readonly name: "latestAnswer";
+    readonly type: "function";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [];
+    readonly outputs: readonly [{
+        readonly type: "int256";
+    }];
+}, {
+    readonly name: "latestTimestamp";
+    readonly type: "function";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [];
+    readonly outputs: readonly [{
+        readonly type: "uint256";
+    }];
+}, {
+    readonly name: "getFeedId";
+    readonly type: "function";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [];
+    readonly outputs: readonly [{
+        readonly type: "bytes32";
+    }];
+}];
+export declare class ChainlinkPushProvider implements PriceProvider {
+    readonly kind: "chainlink-push";
+    readonly label = "Chainlink Push Engine feed on Pharos";
+    private readonly reader;
+    constructor(reader?: ContractReader);
+    fetchQuote(feed: PriceFeedConfig): Promise<ProviderQuote>;
+}
+//# sourceMappingURL=chainlinkPushProvider.d.ts.map

package/dist/lib/price/chainlinkPushProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chainlinkPushProvider.d.ts","sourceRoot":"","sources":["../../../src/lib/price/chainlinkPushProvider.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhG,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;EAMlC,CAAC;AAEH,qBAAa,qBAAsB,YAAW,aAAa;IACzD,QAAQ,CAAC,IAAI,EAAG,gBAAgB,CAAU;IAC1C,QAAQ,CAAC,KAAK,0CAA0C;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;gBAE5B,MAAM,CAAC,EAAE,cAAc;IAI7B,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;CAchE"}

package/dist/lib/price/chainlinkPushProvider.js

@@ -0,0 +1,36 @@
+// ─── Chainlink Push Engine Provider ────────────────────────────────────
+// Reads latestAnswer/latestTimestamp live from Chainlink Push Engine feed
+// contracts on Pharos via viem eth_call.
+// ────────────────────────────────────────────────────────────────────────
+import { parseAbi } from "viem";
+import { publicClient } from "../pharosClient.js";
+export const CHAINLINK_PUSH_FEED_ABI = parseAbi([
+    "function latestAnswer() view returns (int256)",
+    "function latestTimestamp() view returns (uint256)",
+    // Declared for verification tooling only — never called per price request;
+    // feed identity is static registry config.
+    "function getFeedId() view returns (bytes32)",
+]);
+export class ChainlinkPushProvider {
+    kind = "chainlink-push";
+    label = "Chainlink Push Engine feed on Pharos";
+    reader;
+    constructor(reader) {
+        this.reader = reader ?? publicClient;
+    }
+    async fetchQuote(feed) {
+        // Sequential on purpose: the public Pharos RPC rate-limits parallel eth_call bursts.
+        const answer = (await this.reader.readContract({
+            address: feed.feedAddress,
+            abi: CHAINLINK_PUSH_FEED_ABI,
+            functionName: "latestAnswer",
+        }));
+        const updatedAt = (await this.reader.readContract({
+            address: feed.feedAddress,
+            abi: CHAINLINK_PUSH_FEED_ABI,
+            functionName: "latestTimestamp",
+        }));
+        return { answer, updatedAtUnix: Number(updatedAt) };
+    }
+}
+//# sourceMappingURL=chainlinkPushProvider.js.map

package/dist/lib/price/chainlinkPushProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chainlinkPushProvider.js","sourceRoot":"","sources":["../../../src/lib/price/chainlinkPushProvider.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,yCAAyC;AACzC,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC9C,+CAA+C;IAC/C,mDAAmD;IACnD,2EAA2E;IAC3E,2CAA2C;IAC3C,6CAA6C;CAC9C,CAAC,CAAC;AAEH,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,gBAAyB,CAAC;IACjC,KAAK,GAAG,sCAAsC,CAAC;IACvC,MAAM,CAAiB;IAExC,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAK,YAA0C,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAqB;QACpC,qFAAqF;QACrF,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7C,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,cAAc;SAC7B,CAAC,CAAW,CAAC;QACd,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAChD,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,iBAAiB;SAChC,CAAC,CAAW,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IACtD,CAAC;CACF"}

package/dist/lib/price/feedRegistry.d.ts

@@ -0,0 +1,26 @@
+import type { PriceFeedConfig } from "./types.js";
+/**
+ * Pacific Mainnet (1672) Chainlink Push Engine feeds — derived from the
+ * canonical ecosystem registry (src/data/ecosystemRegistry.data.ts) so the
+ * price resolver and the Anvita hosted-skill assets share one feed set.
+ */
+export declare const PACIFIC_MAINNET_PRICE_FEEDS: Record<string, PriceFeedConfig>;
+/** No published Push Engine feed addresses for Atlantic testnet — fail closed. */
+export declare const ATLANTIC_TESTNET_PRICE_FEEDS: Record<string, PriceFeedConfig>;
+/**
+ * Wrapped/native aliases → canonical feed key. WBTC is NOT aliased to BTC:
+ * a dedicated WBTC/USD feed exists on Pacific Mainnet.
+ */
+export declare const PRICE_FEED_ALIASES: Record<string, string>;
+export declare function activePriceFeeds(): Record<string, PriceFeedConfig>;
+export interface FeedLookup {
+    requested: string;
+    canonical: string;
+    aliased: boolean;
+    feed: PriceFeedConfig;
+}
+/** Case-insensitive symbol → feed lookup with alias mapping; null if not configured for the active network. */
+export declare function resolveFeedSymbol(symbol: string): FeedLookup | null;
+/** Symbols the active network can price (canonical feeds + configured aliases). */
+export declare function pricedSymbolsForActiveNetwork(): string[];
+//# sourceMappingURL=feedRegistry.d.ts.map

package/dist/lib/price/feedRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedRegistry.d.ts","sourceRoot":"","sources":["../../../src/lib/price/feedRegistry.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAiBlD;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAOpE,CAAC;AAEL,kFAAkF;AAClF,eAAO,MAAM,4BAA4B,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAM,CAAC;AAEhF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMrD,CAAC;AAEF,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAElE;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,eAAe,CAAC;CACvB;AAED,+GAA+G;AAC/G,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAMnE;AAED,mFAAmF;AACnF,wBAAgB,6BAA6B,IAAI,MAAM,EAAE,CAMxD"}

package/dist/lib/price/feedRegistry.js

@@ -0,0 +1,67 @@
+// ─── Price Feed Registry ───────────────────────────────────────────────
+// Network-keyed oracle feed configuration. Feed addresses/decimals/heartbeats
+// are static config; prices are ALWAYS read live from the feed contracts.
+// ────────────────────────────────────────────────────────────────────────
+import { getActiveNetwork } from "../networks.js";
+import { ECOSYSTEM_REGISTRY_ITEMS } from "../../data/ecosystemRegistry.data.js";
+const CHAINLINK_PUSH_DOCS = "Chainlink Push Engine Feeds on Pharos Pacific Mainnet (docs.pharos.xyz)";
+function pushFeed(base, feedAddress) {
+    return {
+        pair: `${base}/USD`,
+        base,
+        quote: "USD",
+        feedAddress,
+        decimals: 18,
+        heartbeatSeconds: 3600,
+        provider: "chainlink-push",
+        docsSource: CHAINLINK_PUSH_DOCS,
+    };
+}
+/**
+ * Pacific Mainnet (1672) Chainlink Push Engine feeds — derived from the
+ * canonical ecosystem registry (src/data/ecosystemRegistry.data.ts) so the
+ * price resolver and the Anvita hosted-skill assets share one feed set.
+ */
+export const PACIFIC_MAINNET_PRICE_FEEDS = (() => {
+    const item = ECOSYSTEM_REGISTRY_ITEMS.find((i) => i.id === "oracle:pacific-mainnet:chainlink-push-feeds");
+    const feeds = {};
+    for (const c of item?.contracts ?? []) {
+        if (c.symbol)
+            feeds[c.symbol] = pushFeed(c.symbol, c.address);
+    }
+    return feeds;
+})();
+/** No published Push Engine feed addresses for Atlantic testnet — fail closed. */
+export const ATLANTIC_TESTNET_PRICE_FEEDS = {};
+/**
+ * Wrapped/native aliases → canonical feed key. WBTC is NOT aliased to BTC:
+ * a dedicated WBTC/USD feed exists on Pacific Mainnet.
+ */
+export const PRICE_FEED_ALIASES = {
+    WPROS: "PROS",
+    WETH: "ETH",
+    // Pharos is the network/ecosystem; PROS is the token. Priced via the PROS/USD
+    // feed. Matches supported-assets.json + the Anvita engine.
+    PHAROS: "PROS",
+};
+export function activePriceFeeds() {
+    return getActiveNetwork().isMainnet ? PACIFIC_MAINNET_PRICE_FEEDS : ATLANTIC_TESTNET_PRICE_FEEDS;
+}
+/** Case-insensitive symbol → feed lookup with alias mapping; null if not configured for the active network. */
+export function resolveFeedSymbol(symbol) {
+    const requested = symbol.trim().toUpperCase();
+    const canonical = PRICE_FEED_ALIASES[requested] ?? requested;
+    const feed = activePriceFeeds()[canonical];
+    if (!feed)
+        return null;
+    return { requested, canonical, aliased: canonical !== requested, feed };
+}
+/** Symbols the active network can price (canonical feeds + configured aliases). */
+export function pricedSymbolsForActiveNetwork() {
+    const canonical = Object.keys(activePriceFeeds());
+    const aliases = Object.entries(PRICE_FEED_ALIASES)
+        .filter(([, target]) => canonical.includes(target))
+        .map(([alias]) => alias);
+    return [...canonical, ...aliases].sort();
+}
+//# sourceMappingURL=feedRegistry.js.map

package/dist/lib/price/feedRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedRegistry.js","sourceRoot":"","sources":["../../../src/lib/price/feedRegistry.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAGhF,MAAM,mBAAmB,GAAG,yEAAyE,CAAC;AAEtG,SAAS,QAAQ,CAAC,IAAY,EAAE,WAA0B;IACxD,OAAO;QACL,IAAI,EAAE,GAAG,IAAI,MAAM;QACnB,IAAI;QACJ,KAAK,EAAE,KAAK;QACZ,WAAW;QACX,QAAQ,EAAE,EAAE;QACZ,gBAAgB,EAAE,IAAI;QACtB,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,mBAAmB;KAChC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAoC,CAAC,GAAG,EAAE;IAChF,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,6CAA6C,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAoC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,EAAE,CAAC;AAEL,kFAAkF;AAClF,MAAM,CAAC,MAAM,4BAA4B,GAAoC,EAAE,CAAC;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,KAAK,EAAE,MAAM;IACb,IAAI,EAAE,KAAK;IACX,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,EAAE,MAAM;CACf,CAAC;AAEF,MAAM,UAAU,gBAAgB;IAC9B,OAAO,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,4BAA4B,CAAC;AACnG,CAAC;AASD,+GAA+G;AAC/G,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;IAC7D,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,6BAA6B;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAClD,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC"}

package/dist/lib/price/priceResolver.d.ts

@@ -0,0 +1,35 @@
+import type { PriceFeedProviderKind, PriceProvider, PriceResolverResult } from "./types.js";
+export declare const PRICE_CACHE_TTL_MS = 45000;
+export declare const DEGRADED_CACHE_MAX_AGE_MS = 300000;
+export interface ResolvePriceOptions {
+    cacheTtlMs?: number;
+    /** Set false to disable rpc_degraded_cache serves and strictly fail on RPC errors. */
+    allowDegradedCache?: boolean;
+}
+export declare class PriceResolver {
+    private readonly providers;
+    private readonly now;
+    private readonly cache;
+    private readonly inflight;
+    constructor(providers: Partial<Record<PriceFeedProviderKind, PriceProvider>>, now?: () => number);
+    clearCache(): void;
+    resolvePriceUsd(symbol: string, opts?: ResolvePriceOptions): Promise<PriceResolverResult>;
+    /**
+     * Serve a cached resolution if it is within maxAgeMs AND the original oracle
+     * timestamp is still within the feed heartbeat. Returns null otherwise.
+     */
+    private serveFromCache;
+    private fetchLive;
+    private invalid;
+}
+/**
+ * Process-wide singleton wired to the live publicClient. Only implemented
+ * providers are registered — the Supra pull provider is a stub
+ * (src/lib/price/supraProvider.ts) and is deliberately NOT registered; a feed
+ * configured for "supra-pull" fails closed with a structured
+ * PRICE_SOURCE_UNAVAILABLE ("no provider registered") instead of advertising an
+ * unimplemented source.
+ */
+export declare const priceResolver: PriceResolver;
+export declare function resolvePriceUsd(symbol: string, opts?: ResolvePriceOptions): Promise<PriceResolverResult>;
+//# sourceMappingURL=priceResolver.d.ts.map

package/dist/lib/price/priceResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"priceResolver.d.ts","sourceRoot":"","sources":["../../../src/lib/price/priceResolver.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAEV,qBAAqB,EACrB,aAAa,EAEb,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,kBAAkB,QAAS,CAAC;AACzC,eAAO,MAAM,yBAAyB,SAAU,CAAC;AAQjD,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAqDD,qBAAa,aAAa;IAKtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG;IALtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;gBAGzD,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC,EAChE,GAAG,GAAE,MAAM,MAAiB;IAG/C,UAAU,IAAI,IAAI;IAIZ,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwC/F;;;OAGG;IACH,OAAO,CAAC,cAAc;YAwBR,SAAS;IAiGvB,OAAO,CAAC,OAAO;CAYhB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,eAExB,CAAC;AAEH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAExG"}

package/dist/lib/price/priceResolver.js

@@ -0,0 +1,246 @@
+// ─── PriceResolver ─────────────────────────────────────────────────────
+// Canonical USD price resolution: live oracle reads + validation + bounded
+// per-feed cache + structured error classification. Never fabricates prices;
+// never assumes stablecoins equal exactly 1 USD.
+//
+// Cache semantics:
+// - Fresh serve: entry younger than the TTL AND the oracle timestamp still
+//   within heartbeat → sourceStatus "ok", confidence "high".
+// - Degraded serve (RPC failed transiently): allowed ONLY after a previous
+//   successful oracle read, cache age <= 5 minutes, AND the oracle timestamp
+//   still within heartbeat → sourceStatus "rpc_degraded_cache",
+//   confidence "degraded". feedStale is never set just because a value came
+//   from cache — it means heartbeat violation only.
+// - Otherwise: structured PRICE_SOURCE_* failure with no price.
+// ────────────────────────────────────────────────────────────────────────
+import { formatUnits, BaseError, HttpRequestError, RpcRequestError, TimeoutError } from "viem";
+import { getActiveNetwork } from "../networks.js";
+import { CHAIN_ID } from "../constants.js";
+import { resolveFeedSymbol, pricedSymbolsForActiveNetwork } from "./feedRegistry.js";
+import { ChainlinkPushProvider } from "./chainlinkPushProvider.js";
+export const PRICE_CACHE_TTL_MS = 45_000; // fresh-serve window (mandated 30–60s)
+export const DEGRADED_CACHE_MAX_AGE_MS = 300_000; // hard bound for rpc_degraded_cache serves
+const MAX_FUTURE_SKEW_SECONDS = 300;
+function classifyPriceSourceError(err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const lower = message.toLowerCase();
+    // viem readContract failures arrive as ContractFunctionExecutionError wrapping
+    // the transport error; walk the chain, but also match the top-level message —
+    // the fallback transport can rewrap and viem embeds status text in `details`.
+    const walked = err instanceof BaseError
+        ? err.walk((e) => e instanceof HttpRequestError || e instanceof RpcRequestError || e instanceof TimeoutError)
+        : undefined;
+    const httpStatus = walked instanceof HttpRequestError ? walked.status : undefined;
+    const rpcCode = walked instanceof RpcRequestError ? walked.code : undefined;
+    const rateLimited = httpStatus === 429 ||
+        rpcCode === -32005 || // JSON-RPC "limit exceeded" (EIP-1474)
+        rpcCode === -32016 || // provider-specific throttle code
+        /\b429\b/.test(lower) ||
+        lower.includes("rate limit") ||
+        lower.includes("rate-limit") ||
+        lower.includes("too many requests") ||
+        lower.includes("compute unit") ||
+        lower.includes("cu limit") ||
+        lower.includes("capacity exceeded") ||
+        lower.includes("request limit") ||
+        lower.includes("quota");
+    if (rateLimited) {
+        return { code: "PRICE_SOURCE_RATE_LIMITED", retryable: true, message };
+    }
+    if (lower.includes("supra_provider_not_implemented")) {
+        return { code: "PRICE_SOURCE_UNAVAILABLE", retryable: false, message };
+    }
+    // Zero-data/revert at the feed address means a wrong or absent contract —
+    // a configuration problem, not a transient outage.
+    if (lower.includes("returned no data") || lower.includes("zero data") || lower.includes("reverted")) {
+        return { code: "PRICE_SOURCE_INVALID", retryable: false, message };
+    }
+    // Timeouts, aborts, network failures, 5xx → transient unavailability.
+    return { code: "PRICE_SOURCE_UNAVAILABLE", retryable: true, message };
+}
+export class PriceResolver {
+    providers;
+    now;
+    cache = new Map();
+    inflight = new Map();
+    constructor(providers, now = Date.now) {
+        this.providers = providers;
+        this.now = now;
+    }
+    clearCache() {
+        this.cache.clear();
+    }
+    async resolvePriceUsd(symbol, opts) {
+        const lookup = resolveFeedSymbol(symbol);
+        if (!lookup) {
+            const network = getActiveNetwork().name;
+            const configured = pricedSymbolsForActiveNetwork();
+            return {
+                ok: false,
+                error: {
+                    code: "PRICE_FEED_NOT_CONFIGURED",
+                    message: `${symbol} has no price feed configured for ${network} (${CHAIN_ID}). Configured symbols: ${configured.length > 0 ? configured.join(", ") : "none"}. No fallback price was fabricated.`,
+                    retryable: false,
+                    provider: "none",
+                },
+            };
+        }
+        const key = `${getActiveNetwork().name}:${lookup.feed.pair}`;
+        const ttlMs = opts?.cacheTtlMs ?? PRICE_CACHE_TTL_MS;
+        const fresh = this.serveFromCache(key, lookup, ttlMs, "ok");
+        if (fresh)
+            return { ok: true, resolution: fresh };
+        const inflight = this.inflight.get(key);
+        if (inflight) {
+            const shared = await inflight;
+            if (shared.ok) {
+                return { ok: true, resolution: { ...shared.resolution, token: lookup.requested } };
+            }
+            return shared;
+        }
+        const pending = this.fetchLive(key, lookup, opts).finally(() => {
+            this.inflight.delete(key);
+        });
+        this.inflight.set(key, pending);
+        return pending;
+    }
+    /**
+     * Serve a cached resolution if it is within maxAgeMs AND the original oracle
+     * timestamp is still within the feed heartbeat. Returns null otherwise.
+     */
+    serveFromCache(key, lookup, maxAgeMs, mode) {
+        const entry = this.cache.get(key);
+        if (!entry)
+            return null;
+        const nowMs = this.now();
+        const cacheAgeMs = nowMs - entry.fetchedAtMs;
+        if (cacheAgeMs < 0 || cacheAgeMs > maxAgeMs)
+            return null;
+        const feedAgeSeconds = Math.max(0, Math.floor(nowMs / 1000) - entry.resolution.updatedAtUnix);
+        if (feedAgeSeconds > lookup.feed.heartbeatSeconds)
+            return null;
+        return {
+            ...entry.resolution,
+            token: lookup.requested,
+            cached: true,
+            cacheAgeSeconds: Math.floor(cacheAgeMs / 1000),
+            feedAgeSeconds,
+            sourceStatus: mode,
+            confidence: mode === "ok" ? "high" : "degraded",
+        };
+    }
+    async fetchLive(key, lookup, opts) {
+        const feed = lookup.feed;
+        const provider = this.providers[feed.provider];
+        if (!provider) {
+            return {
+                ok: false,
+                error: {
+                    code: "PRICE_SOURCE_UNAVAILABLE",
+                    message: `No ${feed.provider} provider is registered for ${feed.pair}.`,
+                    retryable: false,
+                    provider: feed.provider,
+                    pair: feed.pair,
+                },
+            };
+        }
+        try {
+            const quote = await provider.fetchQuote(feed);
+            const nowSec = Math.floor(this.now() / 1000);
+            if (quote.answer <= 0n) {
+                return this.invalid(feed, `latestAnswer ${quote.answer} is not a positive value`);
+            }
+            if (!Number.isFinite(quote.updatedAtUnix) ||
+                quote.updatedAtUnix <= 0 ||
+                quote.updatedAtUnix > nowSec + MAX_FUTURE_SKEW_SECONDS) {
+                return this.invalid(feed, `latestTimestamp ${quote.updatedAtUnix} is zero or implausible`);
+            }
+            const feedAgeSeconds = Math.max(0, nowSec - quote.updatedAtUnix);
+            if (feedAgeSeconds > feed.heartbeatSeconds) {
+                return {
+                    ok: false,
+                    error: {
+                        code: "PRICE_SOURCE_STALE",
+                        message: `${feed.pair} feed is stale: feed age ${feedAgeSeconds}s exceeds heartbeat ${feed.heartbeatSeconds}s (feed ${feed.feedAddress}).`,
+                        retryable: true,
+                        provider: feed.provider,
+                        pair: feed.pair,
+                    },
+                };
+            }
+            const priceUsd = formatUnits(quote.answer, feed.decimals);
+            const priceUsdNumber = Number(priceUsd);
+            if (!Number.isFinite(priceUsdNumber) || priceUsdNumber <= 0) {
+                return this.invalid(feed, `latestAnswer did not decode to a finite positive price (${priceUsd})`);
+            }
+            const resolution = {
+                token: lookup.requested,
+                canonicalSymbol: lookup.canonical,
+                pair: feed.pair,
+                priceUsd,
+                priceUsdNumber,
+                provider: feed.provider,
+                source: provider.label,
+                sourceStatus: "ok",
+                confidence: "high",
+                timestamp: new Date(quote.updatedAtUnix * 1000).toISOString(),
+                updatedAtUnix: quote.updatedAtUnix,
+                feedAgeSeconds,
+                feedStale: false,
+                cached: false,
+                cacheAgeSeconds: null,
+                feedAddress: feed.feedAddress,
+                heartbeatSeconds: feed.heartbeatSeconds,
+                network: getActiveNetwork().name,
+                chainId: CHAIN_ID,
+            };
+            this.cache.set(key, { resolution, fetchedAtMs: this.now() });
+            return { ok: true, resolution };
+        }
+        catch (err) {
+            const classified = classifyPriceSourceError(err);
+            if (classified.retryable && opts?.allowDegradedCache !== false) {
+                const degraded = this.serveFromCache(key, lookup, DEGRADED_CACHE_MAX_AGE_MS, "rpc_degraded_cache");
+                if (degraded)
+                    return { ok: true, resolution: degraded };
+            }
+            return {
+                ok: false,
+                error: {
+                    code: classified.code,
+                    message: classified.message,
+                    retryable: classified.retryable,
+                    provider: feed.provider,
+                    pair: feed.pair,
+                },
+            };
+        }
+    }
+    invalid(feed, detail) {
+        return {
+            ok: false,
+            error: {
+                code: "PRICE_SOURCE_INVALID",
+                message: `${feed.pair} feed returned invalid data: ${detail} (feed ${feed.feedAddress}).`,
+                retryable: false,
+                provider: feed.provider,
+                pair: feed.pair,
+            },
+        };
+    }
+}
+/**
+ * Process-wide singleton wired to the live publicClient. Only implemented
+ * providers are registered — the Supra pull provider is a stub
+ * (src/lib/price/supraProvider.ts) and is deliberately NOT registered; a feed
+ * configured for "supra-pull" fails closed with a structured
+ * PRICE_SOURCE_UNAVAILABLE ("no provider registered") instead of advertising an
+ * unimplemented source.
+ */
+export const priceResolver = new PriceResolver({
+    "chainlink-push": new ChainlinkPushProvider(),
+});
+export function resolvePriceUsd(symbol, opts) {
+    return priceResolver.resolvePriceUsd(symbol, opts);
+}
+//# sourceMappingURL=priceResolver.js.map

package/dist/lib/price/priceResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"priceResolver.js","sourceRoot":"","sources":["../../../src/lib/price/priceResolver.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,iDAAiD;AACjD,EAAE;AACF,mBAAmB;AACnB,2EAA2E;AAC3E,6DAA6D;AAC7D,2EAA2E;AAC3E,6EAA6E;AAC7E,gEAAgE;AAChE,4EAA4E;AAC5E,oDAAoD;AACpD,gEAAgE;AAChE,2EAA2E;AAE3E,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,6BAA6B,EAAmB,MAAM,mBAAmB,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AASnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,CAAC,uCAAuC;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC,CAAC,2CAA2C;AAC7F,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAmBpC,SAAS,wBAAwB,CAAC,GAAY;IAC5C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEpC,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,MAAM,GACV,GAAG,YAAY,SAAS;QACtB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,gBAAgB,IAAI,CAAC,YAAY,eAAe,IAAI,CAAC,YAAY,YAAY,CAAC;QAC7G,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,UAAU,GAAG,MAAM,YAAY,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,OAAO,GAAG,MAAM,YAAY,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5E,MAAM,WAAW,GACf,UAAU,KAAK,GAAG;QAClB,OAAO,KAAK,CAAC,KAAK,IAAI,uCAAuC;QAC7D,OAAO,KAAK,CAAC,KAAK,IAAI,kCAAkC;QACxD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC9B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC/B,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACzE,CAAC;IAED,0EAA0E;IAC1E,mDAAmD;IACnD,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpG,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACrE,CAAC;IAED,sEAAsE;IACtE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,OAAO,aAAa;IAKL;IACA;IALF,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IAE5E,YACmB,SAAgE,EAChE,MAAoB,IAAI,CAAC,GAAG;QAD5B,cAAS,GAAT,SAAS,CAAuD;QAChE,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAA0B;QAC9D,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC,IAAI,CAAC;YACxC,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAC;YACnD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,GAAG,MAAM,qCAAqC,OAAO,KAAK,QAAQ,0BACzE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAClD,qCAAqC;oBACrC,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE,MAAM;iBACjB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,gBAAgB,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,EAAE,UAAU,IAAI,kBAAkB,CAAC;QAErD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAElD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;YAC9B,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YACrF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC7D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,cAAc,CACpB,GAAW,EACX,MAAkB,EAClB,QAAgB,EAChB,IAAiC;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC;QAC7C,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC9F,IAAI,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO;YACL,GAAG,KAAK,CAAC,UAAU;YACnB,KAAK,EAAE,MAAM,CAAC,SAAS;YACvB,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YAC9C,cAAc;YACd,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU;SAChD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,GAAW,EACX,MAAkB,EAClB,IAA0B;QAE1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,MAAM,IAAI,CAAC,QAAQ,+BAA+B,IAAI,CAAC,IAAI,GAAG;oBACvE,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAE7C,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,KAAK,CAAC,MAAM,0BAA0B,CAAC,CAAC;YACpF,CAAC;YACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;gBACrC,KAAK,CAAC,aAAa,IAAI,CAAC;gBACxB,KAAK,CAAC,aAAa,GAAG,MAAM,GAAG,uBAAuB,EACtD,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,KAAK,CAAC,aAAa,yBAAyB,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;YACjE,IAAI,cAAc,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,4BAA4B,cAAc,uBAAuB,IAAI,CAAC,gBAAgB,WAAW,IAAI,CAAC,WAAW,IAAI;wBAC1I,SAAS,EAAE,IAAI;wBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;qBAChB;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;gBAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,2DAA2D,QAAQ,GAAG,CAAC,CAAC;YACpG,CAAC;YAED,MAAM,UAAU,GAAoB;gBAClC,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,eAAe,EAAE,MAAM,CAAC,SAAS;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ;gBACR,cAAc;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,QAAQ,CAAC,KAAK;gBACtB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;gBAC7D,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,cAAc;gBACd,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,KAAK;gBACb,eAAe,EAAE,IAAI;gBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,OAAO,EAAE,gBAAgB,EAAE,CAAC,IAAI;gBAChC,OAAO,EAAE,QAAQ;aAClB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,UAAU,CAAC,SAAS,IAAI,IAAI,EAAE,kBAAkB,KAAK,KAAK,EAAE,CAAC;gBAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;gBACnG,IAAI,QAAQ;oBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;YAC1D,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAAwB,EAAE,MAAc;QACtD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,gCAAgC,MAAM,UAAU,IAAI,CAAC,WAAW,IAAI;gBACzF,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;IAC7C,gBAAgB,EAAE,IAAI,qBAAqB,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,IAA0B;IACxE,OAAO,aAAa,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/dist/lib/price/supraProvider.d.ts

@@ -0,0 +1,9 @@
+import type { PriceFeedConfig, PriceProvider, ProviderQuote } from "./types.js";
+export declare const SUPRA_DORA_STORAGE_ADDRESS: "0x58e158c74DF7Ad6396C0dcbadc4878faC9e93d57";
+export declare const SUPRA_DORA_PULL_ADDRESS: "0x16f70cAD28dd621b0072B5A8a8c392970E87C3dD";
+export declare class SupraPullProvider implements PriceProvider {
+    readonly kind: "supra-pull";
+    readonly label = "Supra DORA pull oracle on Pharos (not yet enabled)";
+    fetchQuote(_feed: PriceFeedConfig): Promise<ProviderQuote>;
+}
+//# sourceMappingURL=supraProvider.d.ts.map

package/dist/lib/price/supraProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supraProvider.d.ts","sourceRoot":"","sources":["../../../src/lib/price/supraProvider.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhF,eAAO,MAAM,0BAA0B,EAAG,4CAAqD,CAAC;AAChG,eAAO,MAAM,uBAAuB,EAAG,4CAAqD,CAAC;AAE7F,qBAAa,iBAAkB,YAAW,aAAa;IACrD,QAAQ,CAAC,IAAI,EAAG,YAAY,CAAU;IACtC,QAAQ,CAAC,KAAK,wDAAwD;IAEhE,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;CAKjE"}

package/dist/lib/price/supraProvider.js

@@ -0,0 +1,17 @@
+// ─── Supra DORA Provider (placeholder) ─────────────────────────────────
+// Supra DORA Pull Oracle is deployed on Pharos, but exact feed IDs / pull
+// payload schema / timestamp semantics are not yet confirmed, so this provider
+// is intentionally a stub. The PriceResolver treats it as an unavailable
+// source; no price is ever fabricated.
+// ────────────────────────────────────────────────────────────────────────
+// Pacific Mainnet deployment (recorded for future Phase 2 wiring).
+export const SUPRA_DORA_STORAGE_ADDRESS = "0x58e158c74DF7Ad6396C0dcbadc4878faC9e93d57";
+export const SUPRA_DORA_PULL_ADDRESS = "0x16f70cAD28dd621b0072B5A8a8c392970E87C3dD";
+export class SupraPullProvider {
+    kind = "supra-pull";
+    label = "Supra DORA pull oracle on Pharos (not yet enabled)";
+    async fetchQuote(_feed) {
+        throw new Error("SUPRA_PROVIDER_NOT_IMPLEMENTED: Supra DORA pull provider is a stub until feed IDs and payload schema are confirmed.");
+    }
+}
+//# sourceMappingURL=supraProvider.js.map

package/dist/lib/price/supraProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supraProvider.js","sourceRoot":"","sources":["../../../src/lib/price/supraProvider.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,yEAAyE;AACzE,uCAAuC;AACvC,2EAA2E;AAI3E,mEAAmE;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,4CAAqD,CAAC;AAChG,MAAM,CAAC,MAAM,uBAAuB,GAAG,4CAAqD,CAAC;AAE7F,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,YAAqB,CAAC;IAC7B,KAAK,GAAG,oDAAoD,CAAC;IAEtE,KAAK,CAAC,UAAU,CAAC,KAAsB;QACrC,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;IACJ,CAAC;CACF"}