Lines 1-53javascript
2var xn=Object.defineProperty;var f=(e,t)=>()=>(e&&(t=e(e=0)),t);var A=(e,t)=>{for(var n in t)xn(e,n,{get:t[n],enumerable:!0})};import{homedir as bn}from"os";import{join as Se}from"path";import{readFileSync as wn}from"fs";import{fileURLToPath as Sn}from"url";import{dirname as An}from"path";import{EVM_RPC_URLS as G,SOLANA_RPC_URLS as Pn}from"@dexterai/x402/utils";function ot(e){return e?Cn[e]??6:6}function M(e){return e?Tn:_n}function Rn(){try{let e=An(Sn(import.meta.url));return JSON.parse(wn(Se(e,"..","package.json"),"utf-8")).version||"0.0.0"}catch{return"0.0.0"}}var k,E,_n,Tn,L,nt,rt,Cn,Ae,s ...
3`,{mode:384}),n}var te,wr,ue=f(()=>{"use strict";P();te=br(k,"settings.json"),wr=5});import{existsSync as Sr,mkdirSync as Ar,readFileSync as Pr,appendFileSync as _r}from"fs";import{join as Tr}from"path";function z(e,t){if(!(!Number.isFinite(e)||e<=0))try{Ar(k,{recursive:!0,mode:448});let n={ts:Date.now(),usdc:e,url:t};_r(Ue,JSON.stringify(n)+`
4`,{mode:384})}catch{}}function W(e=Date.now()){if(!Sr(Ue))return 0;let t=0;try{let n=Pr(Ue,"utf-8").split(`
5`);for(let r of n)if(r.trim())try{let o=JSON.parse(r);typeof o.ts=="number"&&typeof o.usdc=="number"&&o.usdc>0&&e-o.ts<=Cr&&(t+=o.usdc)}catch{}}catch{return 0}return t}var Ue,Cr,pe=f(()=>{"use strict";P();Ue=Tr(k,"spend-ledger.jsonl"),Cr=1440*60*1e3});import{chmodSync as Rr,existsSync as kr,mkdirSync as Er,readFileSync as Ur,renameSync as Or,writeFileSync as Dr}from"fs";import{join as Ir}from"path";function At(e){return Ir(e??k,Nr)}function K(e){let t=At(e);if(!kr(t))return[];try{let n=JSON.parse(Ur(t,"utf-8"));return Array.isArray(n.tabs)?n.tabs:[]}catch{return[]}}function Oe(e,t){Er(t??k,{re ...
6`,{mode:384}),Rr(s,384),Or(s,o)}function Pt(e,t){let n=K(t).filter(r=>r.counterparty!==e.counterparty);n.push(e),Oe(n,t)}function me(e,t){return K(t).find(n=>n.counterparty===
7`)[0].slice(0,120):String(x);n(`(RPC hiccup while polling \u2014 still waiting: ${q})`)}await new Promise(q=>setTimeout(q,s));continue}if(v&&v.live){N(c,{status:"active",vaultPda:v.vaultPda,params:v.params,sessionPda:v.sessionPda,activatedAt:new Date().toISOString()},r),n(""),n("\u2500\u2500 Tab open \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"),n(`Limi ...
8</head>`),t}catch{return null}}function bo(e){return`<!DOCTYPE html>
9<html lang="en"><head><meta charset="UTF-8"><title>${e}</title>
11 body { font-family: system-ui, sans-serif; padding: 16px; margin: 0;
12 background: #1a1a2e; color: #e0e0e0; }
13 pre { white-space: pre-wrap; word-break: break-word; font-size: 13px;
14 background: #16213e; padding: 12px; border-radius: 8px; overflow: auto; }
15 h3 { margin: 0 0 8px; color: #a78bfa; font-size: 14px; }
18<pre id="output">Waiting for tool output\u2026</pre>
20 window.__isMcpApp = true;
21 window.addEventListener('message', function(e) {
23 if (!d || d.jsonrpc !== '2.0') return;
24 if (d.method === 'ui/notifications/tool-result') {
25 var sc = d.params && d.params.structuredContent;
26 var text = d.params && d.params.content;
27 var data = sc || (text && text[0] && text[0].text);
28 try { data = typeof data === 'string' ? JSON.parse(data) : data; } catch(ex) {}
29 document.getElementById('output').textContent = JSON.stringify(data, null, 2);
32 window.parent.postMessage({ jsonrpc: '2.0', id: 1, method: 'ui/initialize',
33 params: { protocolVersion: '2025-03-26', capabilities: {} } }, '*');
34</script></body></html>`}function Lt(e){for(let t of vo){let n=xo(t.file)??bo(t.name);lo(e,t.name,t.uri,{description:t.description},async()=>({contents:[{uri:t.uri,mimeType:uo,text:n,_meta:{ui:{csp:{resourceDomains:["https://dexter.cash","https://cdn.dexscreener.com","https://raw.githubusercontent.com","https://metadata.jup.ag"],connectDomains:["https://x402.dexter.cash","https://dexter.cash","https://agents.moonpay.com"]}}}}]}))}}var go,ho,yo,vo,Mt=f(()=>{"use strict";je();go=mo(fo(import.meta.url)),ho=$t(go,"..","widgets"),yo="https://dexter.cash/mcp/app-assets",vo=[{id:_.search.replace("ui: ...
35`)}function Vt(e,t){let n=Kt(e,t);if(n.manual)return{ok:!1,message:[`${R[e].name} uses a TOML config that the installer does not edit automatically.`,`Add this block to ${n.configPath}:`,"",Fo(n.entry)].join(`
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/index.jsView on unpkg · L1 36`)};He(Ye(n.configPath),{recursive:!0});let r={};if(X(n.configPath)){let s=Uo(n.configPath,"utf-8");try{r=JSON.parse(s)}catch{console.error(`Warning: ${n.configPath} contains invalid JSON. Backing up and creating fresh.`),ze(n.configPath,n.configPath+".bak"),r={}}Object.keys
37`),{ok:!0,message:`Installed into ${R[e].name} (${n.configPath})`}}function Wo(){let e=No(import.meta.url),t=Ye(e);for(let n=0;n<6;n++){if(X(D(t,
38`),{ok:!0,message:`Full plugin installed into Cursor (${X(D(n,"skills"))?Do(D(n,"skills"),{withFileTypes:!0}).filter(i=>i.isDirectory()).length:0} skills, rules, agent, commands) at ${n}`}}async function jt(e,t){let{execFile:n}=await import("child_process");return new Promise(r=>{n(e,t,{timeout:3e4},(o,s,a)=>{r(o?{ok:!1,output:(a||s||o.message).trim()}:{ok:!0,output:(s||"").trim()})})})}async function Vo(){if(!(await jt("claude",["plugins","marketplace","add",Ge])).ok)return{ok:!1,message:["Could not run the Claude Code CLI automatically.","","Run these commands manually to install the OpenDex ...
39`)};let t=await jt("claude",["plugins","install",Je]);return t.ok?{ok:!0,message:`Plugin installed via Claude Code CLI (marketplace: ${Ge})`}:{ok:!1,message:[`Marketplace added, but plugin install failed: ${t.output}`,"","Try running manually:",` claude plugins install ${Je}`].join(`
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
40`)}}async function jo(){let e=Object.keys(R),t=await Mo({message:"Choose a client to install OpenDexter into",options:e.map(n=>({value:n,label:R[n].name,hint:R[n].description}))});if(typeof t!="string"||!R[t])throw new Error("No client selected.");return
41`),"Funding"),Qe(["1. Run `opendexter wallet` to confirm your addresses and balances.","2. Run `opendexter search <what-you-need>` to browse the marketplace.","3. Run `opendexter check <url>` on any result before your first paid call.","4. Run `opendexter fetch <url>` once your wallet is funded."].join(`
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L33 42`),"First-use path");let s="";o>0?s="Treasury funded. Start with a real marketplace search for the task you actually want to complete.":s="Fund a rail, then start with `opendexter search <what-you-need>`.",Go(s)}var Ht=f(()=>{"use strict";I();Ze();qe();P()});var zt={};A(zt,{cliAccess:()=>Xo});import{accessWithWalletProof as Yo}from"@dexterai/x402-mcp-tools";async function Xo(e,t){try{let n=await w({quiet:!0}),r=n?H(n):null,o=await Yo({url:e,method:t.method,body:t.body,preferredNetwork:t.network},r);console.log(JSON.stringify(o,null,2))}catch(n){console.log(JSON.stringify({error:n.message||Stri ...
43Audition \u2014 ${o.origin??e}`),console.log(` ${s.registered??0}/${s.total??0} paid routes tested`+(s.avgScore!=null?` \xB7 average score ${s.avgScore}/100`:""));for(let a of o.routes??[]){if(a.auditOutcome==="incomplete"||a.score==null){console.
44 [skipped] ${a.url}`),console.log(` Audition did not complete \u2014 ${a.incompleteReason??"no score produced"}.`),console.log(" This is an OpenDexter-side issue, not your API. Retry shortly.");continue}if(console.log(`
45 [${a.score}] ${a.url}`),typeof a.previousScore=="number"&&typeof a.delta=="number"){let i=a.delta>0?`+${a.delta}`:`${a.delta}`,c=a.delta>0?"\u25B2":a.delta<0?"\u25BC":"\u25A0";console.log(` ${c} ${a.previousScore} \u2192 ${a.score} (${i} since last audition)`)}a.verdict&&console.log(` ${a.verdict}`),a.fixInstructions&&console.log(` fix: ${a.fixInstructions}`),a.synthesizedSkill&&console.log(" \u2713 agent-callable Skill synthesized"),a.shareUrl&&console.log(` share: ${a.shareUrl}`)}console.log("")}catch(r){let o={error:"audition_failed",message:r?.message??String(r)} ...
46 Creating your Dexter wallet...
48`),n=!0,e=0),e>0&&o.write(`\x1B[${e}A`);let s=[],a=tn("Solana (dex...)",r.solana);a&&s.push(a);let i=tn("EVM (0x402DD...)",r.evm);i&&s.push(i);for(let c of s)o.write(`\x1B[2K${c}
49`);e=s.length,r.solana.found&&r.evm.found&&(o.write(`
50`),o.write(` Deposit USDC to either address to start.
52`))}}var rn=f(()=>{"use strict"});import{Worker as os}from"worker_threads";import{cpus as ss}from"os";import{fileURLToPath as as}from"url";import{dirname as is,join as cs}from"path";function on(e){let t=e.prefix.replace(/^0x/i,""
53`),"Email + captcha");let a=await h.text({message:"One-time code from email",validate:d=>d&&/^\d{4,8}$/.test(d.trim())?void 0:"Expected 4-8 digit code"});if(typeof a!="string")return;let i=h.spinner();i.start("Exchanging code for session\u2026");try{let d=await ks({email:r.trim(),code:a.trim()});t.saveSession(d),i.stop("Session saved.")}catch(d){i.stop("Verification failed."),h.cancel(d?.message||String(d)),process.exitCode=1;return}let c=h.spinner();c.start("Confirming session\u2026");let l=await t.getOperations();if(!l){c.stop("Session resume failed (refresh token may already be invalid)."), ...
Long lines were clipped for display.