@oracle-agent/oracle 0.11.0 → 0.13.0

package/scripts/check-doc-drift.mjs

@@ -1,123 +0,0 @@
-#!/usr/bin/env node
-// Release gate: shipped prose must not contradict shipped behavior.
-//
-// Why this exists. The 2026-08-01 four-model audit found the same stale claim
-// in 20 places across both packages: docs said the unattended signer was
-// limited to `hl` and `poly` long after six bounded surfaces had shipped. The
-// worst instances were not READMEs — they were `profiles/oracle/SOUL.md` and
-// `skills/oracle-action-semantics/SKILL.md`, which are read by the MODEL. An
-// agent told that EVM daemon execution is impossible reasons incorrectly about
-// its own authority, and no test suite can see a false sentence.
-//
-// This scans every doc surface that ships in the tarball, including model-facing
-// SOUL and skill text, which is exactly where drift hides longest.
-
-import { readFileSync, existsSync, readdirSync, statSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import path from "node:path";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const pkg = JSON.parse(readFileSync(path.join(root, "package.json"), "utf8"));
-const failures = [];
-
-// Claims that shipped in a real release and are now false.
-const STALE_CLAIMS = [
-  { re: /limited\s+to\s+`?hl`?\s+and\s+`?poly`?/i, why: "says the unattended signer is limited to hl+poly" },
-  { re: /only\s+`?hl`?\s+and\s+`?poly`?\s+are\s+enabled/i, why: "says only hl+poly are daemon-enabled" },
-  { re: /daemon\s+surfaces\s+remain\s+`?hl`?\s+and\s+`?poly`?/i, why: "freezes the surface list at hl+poly" },
-  { re: /policy-bounded\s+`?hl`?\s+and\s+`?poly`?\s+only/i, why: "restricts the daemon to hl+poly" },
-  { re: /agent-facing\s+daemon\s+supports\s+only\s+policy-bounded\s+Hyperliquid\s+and\s+Polymarket\s+execution/i, why: "says the agent-facing daemon supports only Hyperliquid+Polymarket" },
-  { re: /`?evm`?,?\s+`?btc`?,?\s+and\s+`?sol`?\s+fail\s+closed\s+at\s+the\s+daemon/i, why: "claims evm/btc/sol are refused at the daemon" },
-  { re: /EVM,\s*BTC,?\s*and\s+Solana\s+are\s+not\s+daemon\s+surfaces/i, why: "denies evm/btc/sol are daemon surfaces" },
-  { re: /companion\s+daemon\s+is\s+`?hl`?\s*\/\s*`?poly`?[- ]only/i, why: "describes the companion daemon as hl/poly-only" },
-  { re: /daemon\s+supports\s+only\s+policy-bounded\s+Hyperliquid\s+and\s+Polymarket/i, why: "describes the daemon as Hyperliquid/Polymarket-only" },
-  { re: /unattended\s+signer\s+remains\s+`?hl`?\s*\/\s*`?poly`?/i, why: "freezes the generic signer at hl/poly" },
-  { re: /supports\s+autonomous\s+Hyperliquid\s+and\s+Polymarket\s+execution/i, why: "describes the daemon as Hyperliquid/Polymarket-only" },
-  { re: /\(HL\s*\+\s*Poly,\s*capped\)/i, why: "documents autosign as hl/poly-only" },
-  { re: /policy-bounded\s+HL\s*\/\s*Polymarket\s+exec/i, why: "documents the signer daemon as hl/poly-only" },
-  { re: /policy-bounded\s+daemon\s+surfaces:\s*hl\s*\|\s*poly\s*$/i, why: "documents only two of six daemon surfaces" },
-  { re: /ORACLE_SIGNER_SURFACES=hl,poly\s*$/i, why: "quickstart freezes ORACLE_SIGNER_SURFACES at hl,poly" },
-  { re: /ORACLE_AUTONOMOUS_TRADING=1.*(?:or\s+run\s+the\s+signer\s+daemon|same(?:-tier)?).*oracle-signer/i, why: "frames direct exec and oracle-signer as equivalent agent paths" },
-  { re: /(?:or\s+run\s+the\s+signer\s+daemon|same(?:-tier)?).*oracle-signer.*ORACLE_AUTONOMOUS_TRADING=1/i, why: "frames direct exec and oracle-signer as equivalent agent paths" },
-  { re: /ORACLE_AUTONOMOUS=1/i, why: "names the dead autonomous env var instead of ORACLE_AUTONOMOUS_TRADING" },
-];
-
-// Version pins that go stale the moment a release ships. The audit found the
-// quickstart advertising 0.3.6/0.6.1 inside a 0.4.0 tarball, so a copy-paste
-// install handed users an older wall set.
-function checkVersionPins(rel, text) {
-  const lines = text.split("\n");
-  lines.forEach((line, i) => {
-    const pin = line.match(/@oracle-agent\/oracle@(\d+\.\d+\.\d+)/);
-    if (pin && pin[1] !== pkg.version) {
-      failures.push(
-        `${rel}:${i + 1} pins @oracle-agent/oracle@${pin[1]} but this package is ${pkg.version}\n    ${line.trim().slice(0, 120)}`,
-      );
-    }
-    const latest = line.match(/Latest:.*oracle\s+`(\d+\.\d+\.\d+)`/i);
-    if (latest && latest[1] !== pkg.version) {
-      failures.push(
-        `${rel}:${i + 1} advertises oracle ${latest[1]} as latest but this package is ${pkg.version}\n    ${line.trim().slice(0, 120)}`,
-      );
-    }
-    // The 2026-08-03 grok lane found `Source tree: **oracle \`0.5.0\`**` and a
-    // `Published npm: **oracle \`0.4.2\`**` line surviving inside a 0.10.0
-    // tarball. Both shapes sailed past the two matchers above, so a stranger
-    // reading the shipped README saw a version five releases stale. Match any
-    // prose that states an oracle version, not just the two blessed prefixes.
-    const stated = line.match(/oracle\s+`(\d+\.\d+\.\d+)`/i);
-    if (stated && stated[1] !== pkg.version) {
-      failures.push(
-        `${rel}:${i + 1} states oracle ${stated[1]} but this package is ${pkg.version}\n    ${line.trim().slice(0, 120)}`,
-      );
-    }
-  });
-}
-
-// Every markdown surface that ships to a user or a model.
-function docFiles() {
-  const out = [];
-  for (const rel of ["README.md", "SETUP.md", "SECURITY.md"]) {
-    if (existsSync(path.join(root, rel))) out.push(rel);
-  }
-  for (const dir of ["docs", "profiles", "skills"]) {
-    const abs = path.join(root, dir);
-    if (!existsSync(abs)) continue;
-    const walk = (d) => {
-      for (const entry of readdirSync(d)) {
-        const full = path.join(d, entry);
-        if (statSync(full).isDirectory()) walk(full);
-        else if (entry.endsWith(".md")) out.push(path.relative(root, full));
-      }
-    };
-    walk(abs);
-  }
-  return out;
-}
-
-const files = docFiles();
-for (const rel of files) {
-  const text = readFileSync(path.join(root, rel), "utf8");
-  text.split("\n").forEach((line, i) => {
-    for (const claim of STALE_CLAIMS) {
-      if (claim.re.test(line)) {
-        failures.push(`${rel}:${i + 1} ${claim.why}\n    ${line.trim().slice(0, 140)}`);
-      }
-    }
-  });
-  checkVersionPins(rel, text);
-}
-
-console.log(`package version: ${pkg.version}`);
-console.log(`doc surfaces scanned: ${files.length} (README/SETUP/SECURITY + docs/ + profiles/ + skills/)`);
-console.log("");
-
-if (failures.length) {
-  console.error(`FAIL — ${failures.length} doc/code drift finding(s):\n`);
-  for (const f of failures) console.error(`  ${f}\n`);
-  console.error("Shipped prose contradicts shipped behavior. Model-facing SOUL/skill text counts:");
-  console.error("an agent that reads a false capability claim reasons wrongly about its own authority.");
-  process.exit(1);
-}
-
-console.log("PASS — no stale capability claims or version pins in shipped docs");

package/scripts/check-test-count.mjs

@@ -1,105 +0,0 @@
-#!/usr/bin/env node
-// Test-count drift gate.
-//
-// Two agents push to this branch. Each one runs the suite in its own tree and
-// reports a number. Those numbers drift: round 7 landed a commit message
-// claiming "707 tests, 0 failing" when the tree at that commit actually ran
-// 729. Nobody lied — the claim was just written against a stale checkout, and
-// git history keeps it forever.
-//
-// So the count is committed alongside the code. Add or remove a test and the
-// build fails until the baseline is updated in the SAME commit, which puts the
-// delta in the diff where review can see it. A stale claim becomes a red build
-// instead of a permanent wrong number in the log.
-//
-//   node scripts/check-test-count.mjs            verify against the baseline
-//   node scripts/check-test-count.mjs --update   rewrite it (intentional change)
-
-import { spawnSync } from "node:child_process";
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { dirname, join, resolve } from "node:path";
-
-const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const BASELINE = join(ROOT, "test-baseline.json");
-const UPDATE = process.argv.includes("--update");
-
-// Run the suite exactly the way `npm test` does, so the gate can never pass
-// against a different set of files or env than the suite CI actually runs.
-const pkg = JSON.parse(readFileSync(join(ROOT, "package.json"), "utf8"));
-const testCmd = pkg.scripts?.test;
-if (!testCmd) {
-  console.error("check-test-count: package.json has no test script");
-  process.exit(1);
-}
-
-const run = spawnSync("sh", ["-c", testCmd], {
-  cwd: ROOT,
-  encoding: "utf8",
-  maxBuffer: 64 * 1024 * 1024,
-});
-
-const output = `${run.stdout || ""}${run.stderr || ""}`;
-
-// node --test emits two different summary formats. Interactive (TTY) gives the
-// spec reporter's "ℹ tests 729". Non-interactive — which is every CI run —
-// gives TAP: "# tests 729". Parsing only the first shape passed locally and
-// failed in CI, which is the same stale-measurement class this gate exists to
-// catch, so match both anchored to line start. A test NAME containing
-// "tests 999" lives on an "ok N - ..." line and cannot reach either pattern.
-function summaryValue(label) {
-  const m = output.match(new RegExp(`^\\s*(?:ℹ|i|#)\\s+${label}\\s+(\\d+)\\s*$`, "m"));
-  return m ? Number(m[1]) : null;
-}
-
-const actual = {
-  tests: summaryValue("tests"),
-  pass: summaryValue("pass"),
-  fail: summaryValue("fail"),
-  skipped: summaryValue("skipped"),
-};
-
-if (actual.tests == null || actual.pass == null || actual.fail == null) {
-  console.error("check-test-count: could not parse the node --test summary.");
-  console.error(output.slice(-2000));
-  process.exit(1);
-}
-
-// A red suite is the suite step's job to report, but never let a failing run
-// silently rewrite the baseline.
-if (actual.fail > 0) {
-  console.error(`check-test-count: suite is RED (${actual.fail} failing) — refusing to gate or update.`);
-  console.error(output.slice(-4000));
-  process.exit(1);
-}
-
-if (UPDATE) {
-  writeFileSync(BASELINE, `${JSON.stringify(actual, null, 2)}\n`);
-  console.log(`check-test-count: baseline updated -> ${JSON.stringify(actual)}`);
-  console.log("Commit test-baseline.json in the same commit as the test change.");
-  process.exit(0);
-}
-
-if (!existsSync(BASELINE)) {
-  console.error(`check-test-count: ${BASELINE} is missing. Create it with --update.`);
-  process.exit(1);
-}
-
-const expected = JSON.parse(readFileSync(BASELINE, "utf8"));
-const drifted = ["tests", "pass", "fail", "skipped"].filter(
-  (k) => Number(expected[k]) !== Number(actual[k]),
-);
-
-if (drifted.length) {
-  console.error("check-test-count: TEST COUNT DRIFT");
-  console.error(`  expected  ${JSON.stringify(expected)}`);
-  console.error(`  actual    ${JSON.stringify(actual)}`);
-  console.error(`  differs   ${drifted.join(", ")}`);
-  console.error("");
-  console.error("If this change is intentional, run:");
-  console.error("  npm run test:count:update");
-  console.error("and commit test-baseline.json alongside the test change.");
-  process.exit(1);
-}
-
-console.log(`check-test-count: PASS — ${JSON.stringify(actual)} matches the committed baseline`);

package/scripts/e2e-hl-markets.mjs

@@ -1,21 +0,0 @@
-import { data as desk } from "../src/data/desk-data.mjs";
-
-const board = await desk.call("hl-markets", "markets", {});
-console.log(`markets: ${board.count} live perps`);
-console.log(`total OI:  $${(board.totals.openInterestUsd / 1e9).toFixed(2)}B`);
-console.log(`24h vol:   $${(board.totals.dayNtlVolumeUsd / 1e9).toFixed(2)}B`);
-
-const btc = board.markets.find((m) => m.coin === "BTC");
-console.log(`\nBTC  mark=$${btc.markPx}  24h=${btc.change24hPct?.toFixed(2)}%  OI=$${(btc.openInterestUsd / 1e6).toFixed(1)}M  fundingAPR=${btc.fundingRateAprPct?.toFixed(2)}%  maxLev=${btc.maxLeverage}x`);
-
-const lb = await desk.call("hl-markets", "leaderboards", { limit: 3 });
-console.log(`\ntop gainers:  ${lb.gainers.map((m) => `${m.coin} ${m.change24hPct.toFixed(1)}%`).join(", ")}`);
-console.log(`top losers:   ${lb.losers.map((m) => `${m.coin} ${m.change24hPct.toFixed(1)}%`).join(", ")}`);
-console.log(`by volume:    ${lb.byVolume.map((m) => `${m.coin} $${(m.dayNtlVolumeUsd / 1e6).toFixed(0)}M`).join(", ")}`);
-console.log(`funding high: ${lb.fundingHighest.map((m) => `${m.coin} ${m.fundingRateAprPct.toFixed(1)}%`).join(", ")}`);
-
-const hype = await desk.call("hl-markets", "coin", { coin: "HYPE", interval: "1h" });
-console.log(`\nHYPE mark=$${hype.market.markPx}  spread=${hype.book.spreadBps?.toFixed(2)}bps  candles=${hype.candles.count}`);
-
-const spot = await desk.call("hl-markets", "spot", {});
-console.log(`spot: ${spot.tokenCount} tokens / ${spot.pairCount} pairs`);

package/scripts/e2e-hl-perps.mjs

@@ -1,48 +0,0 @@
-import { data as desk } from "../src/data/desk-data.mjs";
-
-const info = await desk.call("hl-perps", "assetInfo", { coin: "BTC" });
-console.log(`BTC assetId=${info.assetId} szDecimals=${info.szDecimals} maxLev=${info.maxLeverage}x mark=$${info.markPx}`);
-
-// 1. LIMIT BUY
-const lim = await desk.call("hl-perps", "prepareOrder", {
-  coin: "BTC", side: "buy", type: "limit", price: "60000.123456789", size: "0.0123456", tif: "Gtc",
-});
-console.log(`\nLIMIT BUY  px=${lim.price} sz=${lim.size} notional=$${lim.notionalUsd?.toFixed(2)} tif=${JSON.stringify(lim.action.orders[0].t)}`);
-console.log(`  signingReady=${lim.signingReady} broadcastReady=${lim.broadcastReady} requiresUserSig=${lim.requiresUserSignature}`);
-
-// 2. MARKET BUY with slippage cap
-const mkt = await desk.call("hl-perps", "prepareOrder", {
-  coin: "ETH", side: "buy", type: "market", size: "0.5", maxSlippageBps: 50,
-});
-console.log(`\nMARKET BUY ETH  aggressive px=${mkt.price} sz=${mkt.size} tif=${mkt.action.orders[0].t.limit.tif}`);
-
-// 3. slippage cap enforced
-try {
-  await desk.call("hl-perps", "prepareOrder", { coin: "ETH", side: "buy", type: "market", size: "1", maxSlippageBps: 500 });
-  console.log("  !! 500bps ACCEPTED — cap broken");
-} catch (e) { console.log(`  500bps rejected: ${e.message.slice(0, 60)}`); }
-
-// 4. LEVERAGE
-const lev = await desk.call("hl-perps", "prepareLeverage", { coin: "BTC", leverage: 25, marginMode: "isolated" });
-console.log(`\nLEVERAGE  ${lev.leverage}x ${lev.marginMode}  isCross=${lev.action.isCross}`);
-console.log(`  warning: ${lev.liquidationWarning}`);
-
-try {
-  await desk.call("hl-perps", "prepareLeverage", { coin: "BTC", leverage: 999 });
-  console.log("  !! 999x ACCEPTED — cap broken");
-} catch (e) { console.log(`  999x rejected: ${e.message.slice(0, 70)}`); }
-
-// 5. BRACKET: entry + TP + SL
-const br = await desk.call("hl-perps", "prepareBracket", {
-  coin: "BTC", side: "buy", type: "limit", price: "60000", size: "0.01",
-  takeProfitPx: "72000", stopLossPx: "57000",
-});
-console.log(`\nBRACKET  legs=${br.legs} entry=${br.entry.price} tp=${br.takeProfitPx} sl=${br.stopLossPx} grouping=${br.action.grouping}`);
-console.log(`  tp reduceOnly=${br.action.orders[1].r} trigger=${JSON.stringify(br.action.orders[1].t.trigger)}`);
-console.log(`  sl reduceOnly=${br.action.orders[2].r} trigger=${JSON.stringify(br.action.orders[2].t.trigger)}`);
-
-// 6. CANCEL
-const c = await desk.call("hl-perps", "prepareCancel", { coin: "BTC", orderId: 12345 });
-console.log(`\nCANCEL  oid=${c.orderId} action=${JSON.stringify(c.action)}`);
-
-console.log("\nNo submit function exists in hl-perps — every result is user-signed.");

package/scripts/e2e-hypercore-staking.mjs

@@ -1,128 +0,0 @@
-import { data as desk } from "../src/data/desk-data.mjs";
-import {
-  hlPrepareStakeDeposit,
-  hlPrepareStakeWithdraw,
-  hlPrepareDelegate,
-  hypeToWei,
-  weiToHype,
-} from "../src/data/providers/hl-staking.mjs";
-
-const USER = process.env.ORACLE_E2E_EVM_ADDRESS || "0x0000000000000000000000000000000000000001";
-const results = [];
-function log(lane, status, detail) {
-  results.push({ lane, status });
-  console.log(`${status === "ok" ? "OK  " : "FAIL"} ${lane} :: ${detail}`);
-}
-async function run(lane, fn) {
-  try {
-    log(lane, "ok", await fn());
-  } catch (e) {
-    log(lane, "fail", String(e?.message || e).slice(0, 150));
-  }
-}
-
-console.log("== HYPERCORE STAKING ==");
-
-let validator = null;
-await run("hl.staking.validators", async () => {
-  const v = await desk.hl.staking.validators();
-  const active = v.validators.filter((x) => x.isActive && !x.isJailed);
-  validator = active[0]?.validator || v.validators[0]?.validator;
-  return `validators=${v.count} activeUnjailed=${active.length} first=${(validator || "").slice(0, 10)}..`;
-});
-
-await run("hl.staking.health", async () => {
-  const h = await desk.hl.staking.health();
-  if (!h.ok) throw new Error("staking lane unhealthy");
-  return `ok validators=${h.validators} chain=${h.chain}`;
-});
-
-await run("hl.staking.delegatorSummary", async () => {
-  const s = await desk.hl.staking.summary(USER);
-  return `delegated=${s.delegatedWei} undelegated=${s.undelegatedWei} pendingWithdrawals=${s.nPendingWithdrawals}`;
-});
-
-await run("hl.staking.delegations", async () => {
-  const d = await desk.hl.staking.delegations(USER);
-  return `count=${d.count}`;
-});
-
-await run("hl.staking.rewards", async () => {
-  const r = await desk.hl.staking.rewards(USER);
-  return `rewards=${r.rewards.length}`;
-});
-
-await run("hl.staking.preflight", async () => {
-  const p = await desk.hl.staking.preflight(USER);
-  return `undelegated=${p.stakingBalanceUndelegated} queueDays=${p.unstakingQueueDays} lockupDays=${p.validatorLockupDays}`;
-});
-
-await run("hl.staking.units", async () => {
-  const w = hypeToWei("1.5");
-  if (w !== "150000000") throw new Error(`1.5 HYPE -> ${w}, expected 150000000`);
-  if (weiToHype("150000000") !== "1.5") throw new Error("roundtrip failed");
-  return `1.5 HYPE = ${w} wei roundtrip ok`;
-});
-
-await run("hl.staking.prepareStake", async () => {
-  const p = hlPrepareStakeDeposit({ amountHype: "2.5", maxHype: "10" });
-  if (p.action.type !== "cDeposit") throw new Error("wrong action type");
-  if (p.broadcastReady !== false || p.signingReady !== false) throw new Error("leaked readiness");
-  if (!p.requiresUserSignature) throw new Error("must require user signature");
-  return `cDeposit wei=${p.action.wei} primaryType=${p.typedData.primaryType} broadcastReady=false`;
-});
-
-await run("hl.staking.prepareStake.capBreach", async () => {
-  try {
-    hlPrepareStakeDeposit({ amountHype: "50", maxHype: "10" });
-  } catch (e) {
-    return `rejected over-cap: ${String(e.message).slice(0, 70)}`;
-  }
-  throw new Error("cap was NOT enforced");
-});
-
-await run("hl.staking.prepareDelegate", async () => {
-  if (!validator) throw new Error("no validator resolved");
-  const p = hlPrepareDelegate({ validator, amountHype: "2.5", isUndelegate: false, maxHype: "10" });
-  if (p.action.type !== "tokenDelegate" || p.action.isUndelegate !== false) throw new Error("wrong action");
-  return `tokenDelegate validator=${p.action.validator.slice(0, 10)}.. wei=${p.action.wei} isUndelegate=false`;
-});
-
-await run("hl.staking.prepareUndelegate", async () => {
-  const p = hlPrepareDelegate({ validator, amountHype: "2.5", isUndelegate: true });
-  if (p.action.isUndelegate !== true) throw new Error("undelegate flag lost");
-  return `tokenDelegate isUndelegate=true kind=${p.kind}`;
-});
-
-await run("hl.staking.prepareUnstake", async () => {
-  const p = hlPrepareStakeWithdraw({ amountHype: "2.5" });
-  if (p.action.type !== "cWithdraw") throw new Error("wrong action type");
-  if (!p.notes.join(" ").includes("7 day")) throw new Error("missing unstaking queue warning");
-  return `cWithdraw wei=${p.action.wei} queue warning present`;
-});
-
-await run("hl.staking.badAmount", async () => {
-  try {
-    hlPrepareStakeDeposit({ amountHype: "0" });
-  } catch (e) {
-    return `rejected zero amount`;
-  }
-  throw new Error("zero amount accepted");
-});
-
-await run("hl.staking.badValidator", async () => {
-  try {
-    hlPrepareDelegate({ validator: "not-an-address", amountHype: "1" });
-  } catch (e) {
-    return `rejected bad validator`;
-  }
-  throw new Error("bad validator accepted");
-});
-
-const failed = results.filter((r) => r.status === "fail");
-console.log(`\nlanes=${results.length} ok=${results.length - failed.length} failed=${failed.length}`);
-if (failed.length) {
-  console.log(`FAILED: ${failed.map((f) => f.lane).join(", ")}`);
-  process.exit(1);
-}
-console.log("HYPERCORE STAKING OK: reads live, stake/unstake/delegate prepare-only, caps enforced.");

package/scripts/e2e-solana-bitcoin.mjs

@@ -1,183 +0,0 @@
-// Oracle end-to-end LIVE lane probe: Solana + Bitcoin.
-// Read/quote/prepare/simulate only. No signing. No broadcast. No keys required.
-//
-// Run: node scripts/e2e-solana-bitcoin.mjs
-// Exit 0 = every mandatory lane answered live. Optional keyed lanes are reported, not failed.
-
-import { data as desk } from "../src/data/desk-data.mjs";
-import { jupiterQuote, jupiterPrepareSwap, SOL_MINT, USDC_MINT } from "../src/data/providers/jupiter.mjs";
-import { solanaSimulateTransaction } from "../src/data/providers/solana-rpc.mjs";
-import { magicEdenSolStats, magicEdenSolListings, magicEdenSolPrepareBuy } from "../src/data/providers/magiceden-sol.mjs";
-
-const PROBE_WALLET = process.env.ORACLE_E2E_SOL_PUBKEY || "DtM6A1ivwvFeT14f7ggTAGvpUTZA5LeutV3rLe8wR6U3";
-const PROBE_BTC = process.env.ORACLE_E2E_BTC_ADDRESS || "bc1qar0srrr7xfkvy5l643lydnw9re59gtzzwf5mdq";
-
-const results = [];
-function record(lane, status, detail) {
-  results.push({ lane, status, detail });
-  const tag = status === "ok" ? "OK  " : status === "keyed" ? "KEY " : "FAIL";
-  console.log(`${tag} ${lane} :: ${detail}`);
-}
-
-async function run(lane, fn, { optional = false } = {}) {
-  try {
-    const detail = await fn();
-    record(lane, "ok", detail);
-    return true;
-  } catch (error) {
-    const message = String(error?.message || error).slice(0, 140);
-    record(lane, optional ? "keyed" : "fail", message);
-    return optional;
-  }
-}
-
-console.log("== SOLANA ==");
-
-await run("solana.rpc.health", async () => {
-  const health = await desk.solana.health();
-  if (!health?.ok) throw new Error(`rpc unhealthy ${JSON.stringify(health).slice(0, 80)}`);
-  return `cluster ok slot lane live`;
-});
-
-await run("solana.rpc.balance", async () => {
-  const bal = await desk.solana.balance(PROBE_WALLET);
-  return `lamports=${bal?.lamports ?? bal?.value ?? "n/a"}`;
-});
-
-await run("solana.rpc.tokenAccounts", async () => {
-  const accounts = await desk.solana.tokenAccounts({ owner: PROBE_WALLET });
-  return `accounts=${accounts?.accounts?.length ?? 0}`;
-});
-
-let jupQuote = null;
-await run("solana.jupiter.quote(SOL->USDC)", async () => {
-  jupQuote = await jupiterQuote({ inputMint: SOL_MINT, outputMint: USDC_MINT, amount: "10000000", slippageBps: 50 });
-  const g = jupQuote.solanaGuard;
-  if (jupQuote.executionReady !== false) throw new Error("quote must not be executionReady");
-  if (g.slippageBps > 100) throw new Error("slippage cap breached");
-  return `out=${jupQuote.quote.outAmount} bps=${g.slippageBps} expires=${g.expiresAtMs - g.quotedAtMs}ms execReady=false`;
-});
-
-await run("solana.jupiter.slippageCap", async () => {
-  try {
-    await jupiterQuote({ inputMint: SOL_MINT, outputMint: USDC_MINT, amount: "10000000", slippageBps: 500 });
-  } catch (error) {
-    return `rejected 500bps: ${String(error.message).slice(0, 60)}`;
-  }
-  throw new Error("500 bps was NOT rejected");
-});
-
-let jupPrepared = null;
-await run("solana.jupiter.prepareSwap", async () => {
-  jupPrepared = await jupiterPrepareSwap({
-    quoteResponse: jupQuote.quote,
-    userPublicKey: PROBE_WALLET,
-  });
-  if (jupPrepared.signingReady !== false || jupPrepared.broadcastReady !== false) throw new Error("prepare leaked signing/broadcast readiness");
-  if (!jupPrepared.requiresUserSignature) throw new Error("prepare must require user signature");
-  return `tx=${jupPrepared.swapTransaction.length}b64 requiresUserSig=true signingReady=false broadcastReady=false`;
-});
-
-await run("solana.rpc.simulate(preparedSwap)", async () => {
-  const sim = await solanaSimulateTransaction({ transaction: jupPrepared.swapTransaction, sigVerify: false });
-  const err = sim?.err ?? sim?.value?.err ?? sim?.raw?.value?.err ?? null;
-  const units = sim?.unitsConsumed ?? sim?.value?.unitsConsumed ?? sim?.raw?.value?.unitsConsumed ?? null;
-  return `err=${JSON.stringify(err)} unitsConsumed=${units}`;
-});
-
-await run("solana.nft.magiceden.stats", async () => {
-  const stats = await magicEdenSolStats({ symbol: "mad_lads" });
-  if (!(stats.floorPriceSol > 0)) throw new Error("no floor");
-  return `floor=${stats.floorPriceSol} SOL listed=${stats.listedCount}`;
-});
-
-let meListing = null;
-await run("solana.nft.magiceden.listings", async () => {
-  const out = await magicEdenSolListings({ symbol: "mad_lads", limit: 1 });
-  meListing = out.listings[0];
-  if (!meListing?.tokenMint) throw new Error("no listing");
-  return `mint=${meListing.tokenMint.slice(0, 8)}.. price=${meListing.priceSol} SOL seller=${meListing.seller.slice(0, 6)}..`;
-});
-
-await run(
-  "solana.nft.magiceden.prepareBuy",
-  async () => {
-    const prep = await magicEdenSolPrepareBuy({
-      buyer: PROBE_WALLET,
-      seller: meListing.seller,
-      auctionHouse: meListing.auctionHouse,
-      tokenMint: meListing.tokenMint,
-      tokenATA: meListing.tokenATA,
-      priceSol: meListing.priceSol,
-    });
-    if (prep.broadcastReady !== false) throw new Error("prepare leaked broadcast readiness");
-    return `tx prepared bytes=${String(prep.transaction || "").length} requiresUserSig=${prep.requiresUserSignature}`;
-  },
-  { optional: true }
-);
-
-console.log("== BITCOIN ==");
-
-await run("bitcoin.esplora.health", async () => {
-  const h = await desk.bitcoin.health();
-  if (!h?.ok) throw new Error("esplora unhealthy");
-  return `ok tip lane live`;
-});
-
-await run("bitcoin.esplora.tipHeight", async () => {
-  const t = await desk.bitcoin.tipHeight();
-  const height = t?.height ?? t?.tipHeight ?? t;
-  if (!Number(height)) throw new Error("no tip height");
-  return `tip=${height}`;
-});
-
-await run("bitcoin.esplora.fees", async () => {
-  const f = await desk.bitcoin.fees();
-  const fast = f?.fastestFee ?? f?.fees?.fastestFee ?? f?.["1"] ?? null;
-  return `fastest=${JSON.stringify(fast)}`;
-});
-
-await run("bitcoin.esplora.address", async () => {
-  const a = await desk.bitcoin.address(PROBE_BTC);
-  const funded = a?.chainStats?.fundedTxoSum ?? a?.balanceSats ?? a?.raw?.chain_stats?.funded_txo_sum ?? null;
-  return `fundedSats=${funded}`;
-});
-
-await run("bitcoin.esplora.utxos", async () => {
-  const u = await desk.bitcoin.utxos(PROBE_BTC);
-  const n = u?.utxos?.length ?? u?.length ?? 0;
-  return `utxos=${n}`;
-});
-
-await run("bitcoin.meta.health", async () => {
-  const h = await desk.bitcoin.metaHealth();
-  return `ok=${h?.ok} tier=${h?.tier ?? h?.mode ?? "keyless"}`;
-});
-
-await run(
-  "bitcoin.meta.inscriptionInfo",
-  async () => {
-    const info = await desk.bitcoin.inscriptions(PROBE_BTC);
-    return `inscriptions=${info?.inscriptions?.length ?? "unknown"}`;
-  },
-  { optional: true }
-);
-
-await run(
-  "bitcoin.satflow.health",
-  async () => {
-    const h = await desk.bitcoin.satflowHealth();
-    if (!h?.ok) throw new Error(`satflow ${JSON.stringify(h).slice(0, 90)}`);
-    return `ok`;
-  },
-  { optional: true }
-);
-
-const failed = results.filter((r) => r.status === "fail");
-const keyed = results.filter((r) => r.status === "keyed");
-console.log(`\nlanes=${results.length} ok=${results.length - failed.length - keyed.length} keyed=${keyed.length} failed=${failed.length}`);
-if (failed.length) {
-  console.log(`FAILED: ${failed.map((f) => f.lane).join(", ")}`);
-  process.exit(1);
-}
-console.log("E2E OK: every mandatory Solana + Bitcoin lane answered live, prepare-only posture held.");

package/scripts/protocol-template-gate.mjs

@@ -1,15 +0,0 @@
-#!/usr/bin/env node
-import { listProtocolTemplates, runProtocolTemplateGate } from "../src/protocol-templates/gate.mjs";
-
-const id = process.argv[2];
-if (!id || id === "list") {
-  console.log(JSON.stringify(listProtocolTemplates(), null, 2));
-  process.exit(0);
-}
-try {
-  const r = runProtocolTemplateGate(id, { allowSkipStatic: process.env.REQUIRE_SLITHER !== "1" });
-  console.log(JSON.stringify(r, null, 2));
-} catch (e) {
-  console.error(String(e.message || e));
-  process.exit(1);
-}

package/scripts/public-api-scan.mjs

@@ -1,23 +0,0 @@
-#!/usr/bin/env node
-import fs from "node:fs/promises";
-import path from "node:path";
-import { scanPublicApis } from "../src/data/public-api-scan.mjs";
-
-const args = process.argv.slice(2);
-const value = (flag) => {
-  const i = args.indexOf(flag);
-  return i >= 0 ? args[i + 1] : null;
-};
-const outPath = value("--out");
-const timeoutMs = Number(value("--timeout-ms") || 12_000);
-const providers = value("--providers")?.split(",").map((x) => x.trim()).filter(Boolean);
-
-const report = await scanPublicApis({ providers, timeoutMs });
-const json = `${JSON.stringify(report, null, 2)}\n`;
-if (outPath) {
-  const target = path.resolve(outPath);
-  await fs.mkdir(path.dirname(target), { recursive: true });
-  await fs.writeFile(target, json, "utf8");
-  console.error(`wrote ${target}`);
-}
-process.stdout.write(json);