@oracle-agent/oracle 0.12.0 → 0.13.0

package/dist/bin/oracle-scan.mjs

@@ -1,18 +0,0 @@
-#!/usr/bin/env node
-import{createHash as fe}from"node:crypto";var ve=new Set([408,425,429,500,502,503,504]),j=new Set(["GET","HEAD","OPTIONS","PUT","DELETE"]),be=2,K=4e3,z=["authorization","x-api-key","x-tensor-api-key","0x-api-key","api-key","cookie","proxy-authorization"],ge=new Set([301,302,303,307,308]),W=3;function ye(e){let t=String(e||"").toLowerCase();return z.includes(t)||/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(t)}function we(e){let t={};for(let[n,r]of Object.entries(e||{}))ye(n)||(t[n]=r);return t}function Ee(e,t){if(!e)throw new Error(`HTTP redirect from ${t} missing Location`);let n=new URL(String(e),String(t));if(n.protocol!=="http:"&&n.protocol!=="https:")throw new Error(`HTTP redirect from ${t} used unsupported protocol ${n.protocol}`);return n.toString()}function Se(e,t){return new URL(String(e)).origin===new URL(String(t)).origin}var O=new Map;function Ie(e,t,n){let r={};for(let[c,l]of Object.entries(n||{}))r[c.toLowerCase()]=l;let a=Object.keys(r).filter(c=>/(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(c)),i=[...new Set([...z,...a])].sort().map(c=>`${c}=${r[c]??""}`).join(`
-`),s=fe("sha256").update(i).digest("hex").slice(0,32);return`${e} ${t} ${s}`}function xe(e,t){let n=Number(t);return Number.isFinite(n)&&n>0?Math.min(n*1e3,K):Math.min(250*2**e,K)+Math.floor(Math.random()*100)}var Ce=e=>new Promise(t=>setTimeout(t,e));async function Ae(e,{fetchImpl:t,method:n,headers:r,body:a,timeoutMs:o}){let i=new AbortController,s=setTimeout(()=>i.abort(),o);try{let c=String(e),l={...r||{}};for(let d=0;d<=W;d+=1){let u=await t(c,{method:n,headers:l,body:a,signal:i.signal,redirect:"manual"}),m=await u.text(),h=null;if(m)try{h=JSON.parse(m)}catch{h=null}if(ge.has(u.status)){if(n!=="GET"&&n!=="HEAD"){let b=new Error(`HTTP ${u.status} ${n} ${c} redirected non-idempotent request`);throw b.status=u.status,b.body=h??m.slice(0,300),b}if(d===W)throw new Error(`HTTP redirect loop for ${e}`);let p=Ee(u.headers?.get?.("location"),c);Se(p,c)||(l=we(l)),c=p;continue}if(!u.ok){let p=new Error(`HTTP ${u.status} ${n} ${c}`);throw p.status=u.status,p.retryAfter=u.headers?.get?.("retry-after")??null,p.body=h??m.slice(0,300),p}return h??m}throw new Error(`HTTP redirect loop for ${e}`)}finally{clearTimeout(s)}}async function q(e,t={}){let n=t.fetchImpl||globalThis.fetch;if(typeof n!="function")throw new Error("fetch unavailable \u2014 pass opts.fetchImpl");let r=t.timeoutMs??12e3,a=(t.method||"GET").toUpperCase(),o={Accept:"application/json",...t.headers||{}},i=t.body;i!=null&&typeof i!="string"&&(o["Content-Type"]=o["Content-Type"]||"application/json",i=JSON.stringify(i));let s=Number.isInteger(t.retries)?Math.max(t.retries,0):be,c=async()=>{let h;for(let p=0;p<=s;p++)try{return await Ae(e,{fetchImpl:n,method:a,headers:o,body:i,timeoutMs:r})}catch(b){h=b;let y=b?.status,A=b?.name==="AbortError",N=new Set([408,425,429]),B=y!=null?N.has(y)||ve.has(y)&&j.has(a):!A&&j.has(a);if(p===s||!B)throw b;await Ce(xe(p,b?.retryAfter))}throw h};if(!(t.dedupe!==!1&&a==="GET"&&i==null))return c();let d=Ie(a,e,o),u=O.get(d);if(u)return u;let m=c().finally(()=>O.delete(d));return O.set(d,m),m}var G={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},Ne=new Map(Object.values(G).map(e=>[e.chainId,e]));function Y(e){return Ne.get(Number(e))||null}function Q(e,t=process.env){let n=Y(e);if(!n)return null;for(let r of n.rpcEnv){let a=(t[r]||"").trim();if(a)return a}return null}import{Interface as ke,getAddress as _e}from"ethers";var X=new ke(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"]);function J(e,t){try{return _e(e).toLowerCase()}catch{throw new Error(`${t} must be a valid EVM address`)}}var Re={1:"https://ethereum.publicnode.com",137:"https://polygon-bor-rpc.publicnode.com",42161:"https://arbitrum-one-rpc.publicnode.com",8453:"https://base-rpc.publicnode.com",10:"https://optimism-rpc.publicnode.com",988:"https://rpc.stable.xyz",56:"https://bsc-rpc.publicnode.com",43114:"https://avalanche-c-chain-rpc.publicnode.com",999:"https://rpc.hyperliquid.xyz/evm",2741:"https://api.mainnet.abs.xyz",4663:"https://rpc.mainnet.chain.robinhood.com"};function Ue(e,{rpcUrl:t,env:n=process.env}={}){if(t)return t;let r=Q(e,n);return r||Re[Number(e)]||null}var qe=/^(?:eth_(?:call|blocknumber|chainid|get[a-z0-9]+|feehistory|gasprice|maxpriorityfeepergas|syncing|protocolversion|estimategas|createaccesslist)|net_(?:version|listening|peercount)|web3_(?:clientversion|sha3))$/;function Le(e){let t=String(e||""),n=t.toLowerCase();if(t!==t.trim()||!/^[a-zA-Z0-9_]+$/.test(t)||!qe.test(n))throw new Error(`evm-rpc: ${t} refused \u2014 @oracle-agent/oracle is prepare-only (read RPC only; no broadcast/sign)`);return n}async function E(e,t,n=[],r={}){let a=String(t||"");Le(a);let o=Ue(e,r);if(!o)throw new Error(`No RPC URL for chainId ${e} (set env from chain registry rpcEnv or pass rpcUrl)`);let s=await q(o,{method:"POST",body:{jsonrpc:"2.0",id:1,method:t,params:n},fetchImpl:r.fetchImpl,timeoutMs:r.timeoutMs??12e3});if(s?.error){let c=new Error(s.error.message||JSON.stringify(s.error));throw c.code=s.error.code,c}return s.result}async function Z(e,t={}){let n=await E(e,"eth_blockNumber",[],t);return parseInt(n,16)}async function ee(e,t,n={}){if(!t)throw new Error("rpcGetBalance requires address");let r=await E(e,"eth_getBalance",[t,"latest"],n);return{chainId:Number(e),address:t,balanceWei:BigInt(r).toString(),balanceHex:r}}async function te(e={},t={}){let n=Number(e.chainId??t.chainId??1),r=J(e.token||e.tokenAddress,"token"),a=J(e.account||e.owner||e.address,"account"),o=X.encodeFunctionData("balanceOf",[a]),i=await E(n,"eth_call",[{to:r,data:o},e.blockTag||"latest"],t),s=X.decodeFunctionResult("balanceOf",i),c=BigInt(s[0]);return{chainId:n,token:r,account:a,balance:c.toString(),balanceHex:`0x${c.toString(16)}`,blockTag:e.blockTag||"latest"}}var Te="https://api.dexscreener.com";function $e(e={}){return(e.baseUrl||process.env.DEXSCREENER_API_URL||Te).replace(/\/$/,"")}async function ne(e,t={}){if(!e)throw new Error("tokenAddress required");return q(`${$e(t)}/latest/dex/tokens/${e}`,{fetchImpl:t.fetchImpl,timeoutMs:t.timeoutMs??12e3})}var k=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),v=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),f=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"}),Be=/^0x[0-9a-fA-F]{40}$/;function Oe(e={}){let t=[],n=[];if(!e||typeof e!="object")return{ok:!1,errors:["definition must be an object"],warnings:n};if((!Number.isInteger(e.chainId)||e.chainId<=0)&&t.push("chainId must be a positive integer"),(typeof e.key!="string"||!/^[a-z][a-z0-9-]*$/.test(e.key||""))&&t.push('key must be a lowercase slug (e.g. "base")'),(typeof e.name!="string"||!e.name.trim())&&t.push("name is required"),!Array.isArray(e.rpcEnv)||e.rpcEnv.length===0)t.push("rpcEnv must list at least one environment variable name");else for(let a of e.rpcEnv)(typeof a!="string"||!/^[A-Z][A-Z0-9_]*$/.test(a))&&t.push(`rpcEnv entry "${a}" should be an UPPER_SNAKE env var name`);if(e.nativeCurrency){let a=e.nativeCurrency;(typeof a.symbol!="string"||!a.symbol)&&t.push("nativeCurrency.symbol is required when nativeCurrency is set"),Number.isInteger(a.decimals)||t.push("nativeCurrency.decimals must be an integer")}for(let[a,o]of(e.venues||[]).entries()){let i=`venues[${a}]`;if(!o||typeof o!="object"){t.push(`${i} must be an object`);continue}Be.test(o.address||"")||t.push(`${i}.address is not a valid 20-byte address`),/^0x0{40}$/.test(o.address||"")&&t.push(`${i}.address is the zero address -- placeholder left in place?`),o.kind||t.push(`${i}.kind is required (router|quoter|factory|...)`),o.verified?(o.verified.method||t.push(`${i}.verified.method is required`),o.verified.source||t.push(`${i}.verified.source is required`),o.verified.date||n.push(`${i}.verified.date missing -- add one so staleness is visible`)):t.push(`${i} must record verification: { verified: { method, source, date } }. An unverified venue stays blocked.`)}let r=e.capabilities||{};for(let a of Object.keys(r))k.includes(a)?typeof r[a]!="function"&&t.push(`capability "${a}" must be a function`):t.push(`unknown capability "${a}"`);return Object.keys(r).length===0&&n.push("scanner implements no capabilities -- it can only be registered, not used"),r.prepareUnsignedTx&&!r.quote&&n.push("prepareUnsignedTx without quote: no priced expectation to validate the built tx against"),r.prepareUnsignedTx&&!r.sellSimulation&&n.push("prepareUnsignedTx without sellSimulation: cannot prove an asset is exitable before buying"),{ok:t.length===0,errors:t,warnings:n}}function Pe(e){let{ok:t,errors:n,warnings:r}=Oe(e);if(!t)throw new Error(`invalid scanner for ${e?.key??"<unknown>"}:
-  - ${n.join(`
-  - `)}`);let a=e.capabilities||{},o=k.filter(s=>typeof a[s]=="function"),i={key:e.key,chainId:e.chainId,name:e.name,rpcEnv:[...e.rpcEnv],nativeCurrency:e.nativeCurrency?{...e.nativeCurrency}:null,explorer:e.explorer||null,venues:(e.venues||[]).map(s=>({...s})),warnings:r,capabilities(){return{chainId:e.chainId,key:e.key,supported:[...o],unsupported:k.filter(s=>!o.includes(s))}},supports(s){return o.includes(s)}};for(let s of k)o.includes(s)?i[s]=async(...c)=>a[s](...c,{scanner:i}):i[s]=async()=>{throw new Error(`${e.key} (chain ${e.chainId}) does not implement "${s}". Supported: ${o.join(", ")||"none"}. An unimplemented capability is absent, not assumed -- implement it or treat this chain as fail-closed for that operation.`)};return Object.freeze(i)}var _=new Map;function re(e){let t=Pe(e);return _.set(t.chainId,t),t}function P(e){return _.get(Number(e))||null}function L(){return[..._.values()]}function oe(){let e={};for(let t of _.values())e[t.chainId]={key:t.key,name:t.name,...t.capabilities(),venueCount:t.venues.length,failClosed:t.venues.length===0};return{generatedAt:new Date().toISOString(),chainCount:_.size,capabilities:[...k],chains:e}}var V={getAmountsOut:"d06ca61f",swapExactTokensForTokens:"38ed1739",swapExactETHForTokens:"7ff36ab5"},w=e=>BigInt(e).toString(16).padStart(64,"0"),R=e=>e.slice(2).toLowerCase().padStart(64,"0");function Fe(e,t){return`0x${V.getAmountsOut}`+w(e)+w(64)+w(t.length)+t.map(R).join("")}function Ve(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length<128)return null;let n=Number(BigInt(`0x${t.slice(64,128)}`));if(!Number.isFinite(n)||n<1||n>16)return null;let r=[];for(let a=0;a<n;a++){let o=128+a*64;if(t.length<o+64)return null;r.push(BigInt(`0x${t.slice(o,o+64)}`))}return r}function F(e,t="router"){return(e?.venues||[]).find(r=>r.kind===t)?.address??null}var D=100;function De(e,t){let n=Number(t);if(!Number.isFinite(n)||n<0)throw new Error("slippageBps must be a non-negative number");if(n>D)throw new Error(`slippageBps ${n} exceeds the ${D} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(n))/10000n}function ae(e){let{chainId:t,wrappedNative:n}=e;async function r(a,o,i,s){let c=await E(t,"eth_call",[{to:a,data:Fe(o,i)},"latest"],s);return Ve(c?.result??c)}return{async quote({tokenIn:a,tokenOut:o,amountIn:i,path:s},c={}){let l=F(c.scanner);if(!l)return{chainId:t,evidence:v.UNAVAILABLE,reason:"no verified router configured for this chain; quoting stays fail-closed rather than guessing a venue address"};let d=s||[a,o];if(d.some(m=>!/^0x[0-9a-fA-F]{40}$/.test(m||"")))throw new Error("quote requires valid 20-byte addresses");let u=await r(l,i,d,c);return u?{chainId:t,router:l,path:d,amountIn:String(i),amountOut:u[u.length-1].toString(),hops:d.length-1,evidence:v.LIVE,note:"exact-input quote at current reserves; not a guaranteed fill"}:{chainId:t,router:l,path:d,evidence:v.UNKNOWN,reason:"router returned no amounts -- no pool for this path, or the call reverted"}},async sellSimulation({token:a,amountIn:o,base:i},s={}){let c=F(s.scanner),l=i||n;if(!c||!l)return{chainId:t,token:a,verdict:f.UNKNOWN,evidence:v.UNAVAILABLE,reason:c?"no wrappedNative configured for this chain, so no base asset to round-trip against":"no verified router configured for this chain"};let d=await r(c,o,[l,a],s);if(!d)return{chainId:t,token:a,verdict:f.FAIL,evidence:v.LIVE,leg:"buy",reason:"buy leg returned no amounts -- no route in"};let u=d[d.length-1];if(u===0n)return{chainId:t,token:a,verdict:f.FAIL,evidence:v.LIVE,leg:"buy",reason:"buy leg quotes zero output"};let m=await r(c,u,[a,l],s);if(!m)return{chainId:t,token:a,verdict:f.FAIL,evidence:v.LIVE,leg:"sell",bought:u.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let h=m[m.length-1],p=Number(h*10000n/BigInt(o)),b=f.PASS,y="round trip completes with expected fee/impact loss";return p<5e3?(b=f.FAIL,y=`round trip returns only ${(p/100).toFixed(2)}% -- punitive tax or no real liquidity`):p<9e3&&(b=f.CAUTION,y=`round trip returns ${(p/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,token:a,base:l,router:c,verdict:b,reason:y,amountIn:String(o),bought:u.toString(),returned:h.toString(),retentionBps:p,evidence:v.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:a,tokenOut:o,amountIn:i,recipient:s,slippageBps:c=50,deadlineSeconds:l=900,path:d},u={}){let m=u.scanner,h=F(m);if(!h)throw new Error(`chain ${t} has no verified router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!/^0x[0-9a-fA-F]{40}$/.test(s||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let p=d||[a,o],b=await this.quote({tokenIn:a,tokenOut:o,amountIn:i,path:p},u);if(b.evidence!==v.LIVE)throw new Error(`cannot prepare without a live quote (${b.evidence}: ${b.reason??"no reason given"})`);let y=De(b.amountOut,c);if(y<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let A=BigInt(Math.floor(Date.now()/1e3)+Number(l)),N=n&&p[0].toLowerCase()===n.toLowerCase()&&u.useNative,B=N?`0x${V.swapExactETHForTokens}`+w(y)+w(128)+R(s)+w(A)+w(p.length)+p.map(R).join(""):`0x${V.swapExactTokensForTokens}`+w(i)+w(y)+w(160)+R(s)+w(A)+w(p.length)+p.map(R).join("");return{unsigned:!0,signedBy:"user-wallet",chainId:t,tx:{to:h,data:B,value:N?`0x${BigInt(i).toString(16)}`:"0x0"},guard:{quotedOut:b.amountOut,minOut:y.toString(),slippageBps:c,maxSlippageBps:D,deadline:A.toString()},requires:N?[]:[{step:"approve",token:p[0],spender:h,amount:String(i)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var He=[100,500,3e3,1e4],ie={quoteExactInputSingle:"c6a5026a",exactInputSingle:"04e45aaf"},I=e=>BigInt(e).toString(16).padStart(64,"0"),U=e=>e.slice(2).toLowerCase().padStart(64,"0"),se=/^0x[0-9a-fA-F]{40}$/,M=100;function Me(e,t){let n=Number(t);if(!Number.isFinite(n)||n<0)throw new Error("slippageBps must be a non-negative number");if(n>M)throw new Error(`slippageBps ${n} exceeds the ${M} bps ceiling. Block and requote or split the order -- do not widen the guard to force a fill.`);return BigInt(e)*BigInt(1e4-Math.floor(n))/10000n}function H(e,t){return(e?.venues||[]).find(n=>n.kind===t)?.address??null}function ce(e){let{chainId:t,wrappedNative:n}=e;async function r({quoter:o,tokenIn:i,tokenOut:s,amountIn:c,fee:l},d){let u=`0x${ie.quoteExactInputSingle}`+U(i)+U(s)+I(c)+I(l)+I(0),m=await E(t,"eth_call",[{to:o,data:u},"latest"],d).catch(()=>null),h=m?.result??m;if(!h||h==="0x"||h.length<66)return null;let p=BigInt(`0x${h.slice(2,66)}`);return p>0n?p:null}async function a({quoter:o,tokenIn:i,tokenOut:s,amountIn:c},l){let d=[],u=null;for(let m of He){let h=await r({quoter:o,tokenIn:i,tokenOut:s,amountIn:c,fee:m},l);d.push({fee:m,amountOut:h?h.toString():null}),h&&(!u||h>u.amountOut)&&(u={fee:m,amountOut:h})}return{best:u,tried:d}}return{async quote({tokenIn:o,tokenOut:i,amountIn:s},c={}){let l=H(c.scanner,"quoter");if(!l)return{chainId:t,evidence:v.UNAVAILABLE,reason:"no verified quoter configured for this chain; quoting stays fail-closed rather than guessing a venue address"};for(let m of[o,i])if(!se.test(m||""))throw new Error("quote requires valid 20-byte addresses");let{best:d,tried:u}=await a({quoter:l,tokenIn:o,tokenOut:i,amountIn:s},c);return d?{chainId:t,venue:"uniswap-v3",quoter:l,tokenIn:o,tokenOut:i,amountIn:String(s),amountOut:d.amountOut.toString(),fee:d.fee,triedFeeTiers:u,evidence:v.LIVE,note:"exact-input single-hop quote at current tick; not a guaranteed fill"}:{chainId:t,quoter:l,tokenIn:o,tokenOut:i,triedFeeTiers:u,evidence:v.UNKNOWN,reason:"no fee tier returned a quote -- no V3 pool for this pair, or no liquidity"}},async sellSimulation({token:o,amountIn:i,base:s},c={}){let l=H(c.scanner,"quoter"),d=s||n;if(!l||!d)return{chainId:t,token:o,verdict:f.UNKNOWN,evidence:v.UNAVAILABLE,reason:l?"no wrappedNative configured, so there is no base asset to round-trip against":"no verified quoter configured for this chain"};let u=await a({quoter:l,tokenIn:d,tokenOut:o,amountIn:i},c);if(!u.best)return{chainId:t,token:o,verdict:f.FAIL,evidence:v.LIVE,leg:"buy",reason:"no V3 pool priced the buy leg on any fee tier"};let m=await a({quoter:l,tokenIn:o,tokenOut:d,amountIn:u.best.amountOut},c);if(!m.best)return{chainId:t,token:o,verdict:f.FAIL,evidence:v.LIVE,leg:"sell",bought:u.best.amountOut.toString(),reason:"SELL LEG FAILED while the buy leg quoted fine. This is the honeypot signature: do not trade."};let h=m.best.amountOut,p=Number(h*10000n/BigInt(i)),b=f.PASS,y="round trip completes with expected fee/impact loss";return p<5e3?(b=f.FAIL,y=`round trip returns only ${(p/100).toFixed(2)}% -- punitive tax or no real liquidity`):p<9e3&&(b=f.CAUTION,y=`round trip returns ${(p/100).toFixed(2)}% -- transfer tax or thin liquidity at this size`),{chainId:t,venue:"uniswap-v3",token:o,base:d,verdict:b,reason:y,amountIn:String(i),bought:u.best.amountOut.toString(),returned:h.toString(),retentionBps:p,buyFee:u.best.fee,sellFee:m.best.fee,evidence:v.LIVE,note:"Quote-level round trip. It does not prove transfer hooks absent at execution time."}},async prepareUnsignedTx({tokenIn:o,tokenOut:i,amountIn:s,recipient:c,slippageBps:l=50,fee:d},u={}){let m=H(u.scanner,"router");if(!m)throw new Error(`chain ${t} has no verified V3 router; preparing a swap stays fail-closed. Add a venue with recorded provenance first (see docs/adding-a-chain.md).`);if(!se.test(c||""))throw new Error("prepareUnsignedTx requires a valid recipient address");let h=await this.quote({tokenIn:o,tokenOut:i,amountIn:s},u);if(h.evidence!==v.LIVE)throw new Error(`cannot prepare without a live quote (${h.evidence}: ${h.reason??"no reason given"})`);let p=d??h.fee,b=Me(h.amountOut,l);if(b<=0n)throw new Error("computed minOut is zero -- refusing to prepare");let y=`0x${ie.exactInputSingle}`+U(o)+U(i)+I(p)+U(c)+I(s)+I(b)+I(0);return{unsigned:!0,signedBy:"user-wallet",chainId:t,venue:"uniswap-v3",tx:{to:m,data:y,value:"0x0"},guard:{quotedOut:h.amountOut,minOut:b.toString(),slippageBps:l,maxSlippageBps:M,fee:p},requires:[{step:"approve",token:o,spender:m,amount:String(s)}],note:"UNSIGNED. Re-verify the guard against a fresh quote immediately before signing -- a quote-time minimum is not a minimum at broadcast time."}}}}var T={decimals:"0x313ce567",symbol:"0x95d89b41",name:"0x06fdde03",totalSupply:"0x18160ddd",owner:"0x8da5cb5b"};function ue(e){if(!e||e==="0x")return null;try{return BigInt(e)}catch{return null}}function le(e){if(!e||e==="0x")return null;let t=e.slice(2);if(t.length>=128){let r=Number(BigInt(`0x${t.slice(64,128)}`));if(r>0&&r<=256&&t.length>=128+r*2){let a=t.slice(128,128+r*2),o=Buffer.from(a,"hex").toString("utf8").replace(/\0+$/,"");if(o)return o}}return Buffer.from(t.slice(0,64),"hex").toString("utf8").replace(/\0+$/,"")||null}function je(e){let{chainId:t}=e;async function n(r,a,o){return E(t,"eth_call",[{to:r,data:a},"latest"],o)}return{async blockNumber(r={}){let a=await Z(t,r);return{chainId:t,blockNumber:a?.blockNumber??a,evidence:v.LIVE}},async nativeBalance(r,a={}){let o=await ee(t,r,a);return{chainId:t,address:r,wei:o?.wei??o?.balance??null,symbol:e.nativeCurrency?.symbol??null,decimals:e.nativeCurrency?.decimals??18,evidence:v.LIVE}},async tokenBalance({token:r,owner:a},o={}){let i=await te({chainId:t,token:r,owner:a},o);return{chainId:t,token:r,owner:a,raw:i?.balance??i,evidence:v.LIVE}},async resolveToken(r,a={}){if(!/^0x[0-9a-fA-F]{40}$/.test(r||""))return{chainId:t,token:r,evidence:v.UNKNOWN,error:"resolveToken needs a 20-byte address; symbol lookup is a market-data concern"};let[o,i,s,c]=await Promise.all([n(r,T.decimals,a).catch(()=>null),n(r,T.symbol,a).catch(()=>null),n(r,T.name,a).catch(()=>null),n(r,T.totalSupply,a).catch(()=>null)]),l=ue(o?.result??o),d=l!==null||i?.result||s?.result;return{chainId:t,address:r,decimals:l===null?null:Number(l),symbol:le(i?.result??i),name:le(s?.result??s),totalSupply:(ue(c?.result??c)??null)?.toString()??null,evidence:d?v.LIVE:v.UNKNOWN,warning:d?void 0:"no ERC-20 metadata returned -- may not be a token contract"}},async resolvePools(r,a={}){let o=e.dexscreenerSlug;if(!o)return{chainId:t,token:r,pools:[],evidence:v.UNAVAILABLE,reason:"no dexscreenerSlug configured for this chain; pool discovery is unavailable rather than guessed"};let i=await ne(r,a).catch(()=>null),c=(i?.pairs||i?.data?.pairs||[]).filter(l=>String(l.chainId).toLowerCase()===String(o).toLowerCase()).map(l=>({pair:l.pairAddress,dex:l.dexId,base:l.baseToken?.address,quote:l.quoteToken?.address,liquidityUsd:l.liquidity?.usd??null,priceUsd:l.priceUsd??null,volume24hUsd:l.volume?.h24??null,createdAt:l.pairCreatedAt??null})).sort((l,d)=>(d.liquidityUsd??0)-(l.liquidityUsd??0));return{chainId:t,token:r,pools:c,evidence:c.length?v.LIVE:v.UNKNOWN}},async scanBlocks({fromBlock:r,toBlock:a,address:o,topics:i,chunkSize:s=2e3}={},c={}){if(!Number.isInteger(r)||!Number.isInteger(a))throw new Error("scanBlocks requires integer fromBlock and toBlock");if(a<r)throw new Error("toBlock must be >= fromBlock");let l=[],d=[];for(let u=r;u<=a;u+=s){let m=Math.min(u+s-1,a);d.push([u,m])}for(let[u,m]of d){let h={fromBlock:`0x${u.toString(16)}`,toBlock:`0x${m.toString(16)}`};o&&(h.address=o),i&&(h.topics=i);let p=await E(t,"eth_getLogs",[h],c).catch(b=>({error:String(b?.message||b)}));if(p?.error)return{chainId:t,fromBlock:r,toBlock:a,logs:l,complete:!1,failedAt:[u,m],error:p.error,evidence:v.UNKNOWN};for(let b of p?.result??p??[])l.push(b)}return{chainId:t,fromBlock:r,toBlock:a,logs:l,complete:!0,chunks:d.length,evidence:v.LIVE}},async scoreRisk(r,a={}){let o=[],i=f.PASS,s=d=>{let u={[f.PASS]:0,[f.CAUTION]:1,[f.UNKNOWN]:2,[f.FAIL]:3};u[d]>u[i]&&(i=d)},c=await this.resolveToken(r,a);c.evidence!==v.LIVE?(o.push({check:"erc20-metadata",result:f.UNKNOWN,detail:c.warning}),s(f.UNKNOWN)):o.push({check:"erc20-metadata",result:f.PASS,detail:`${c.symbol} / ${c.decimals}d`});let l=await this.resolvePools(r,a);if(l.evidence===v.UNAVAILABLE)o.push({check:"liquidity",result:f.UNKNOWN,detail:l.reason}),s(f.UNKNOWN);else if(!l.pools.length)o.push({check:"liquidity",result:f.FAIL,detail:"no pool with liquidity found"}),s(f.FAIL);else{let d=l.pools[0],u=d.liquidityUsd??0;u<5e3?(o.push({check:"liquidity",result:f.CAUTION,detail:`top pool only $${u}`}),s(f.CAUTION)):o.push({check:"liquidity",result:f.PASS,detail:`$${u} on ${d.dex}`}),d.createdAt&&Date.now()-d.createdAt<24*3600*1e3&&(o.push({check:"age",result:f.CAUTION,detail:"pool under 24h old"}),s(f.CAUTION))}if(typeof this.sellSimulation=="function"){let d=await this.sellSimulation({token:r,amountIn:(10n**16n).toString()},a).catch(u=>({verdict:f.UNKNOWN,reason:String(u?.message||u)}));o.push({check:"sellability",result:d.verdict,detail:d.retentionBps!=null?`round trip returns ${(d.retentionBps/100).toFixed(2)}% -- ${d.reason}`:d.reason}),s(d.verdict)}else o.push({check:"sellability",result:f.UNKNOWN,detail:"no verified router on this chain, so a round-trip sell simulation cannot run. Treat as unproven -- a buy path is not an exit path."}),s(f.UNKNOWN);return{chainId:t,token:r,verdict:i,checks:o,note:"Structural checks only. UNKNOWN is not PASS. A token is not tradeable until a sell simulation succeeds."}}}}function de(e){let n={...je(e)},r=new Set((e.venues||[]).map(o=>o.kind));e.venueKind==="uniswap-v3"&&r.has("quoter")&&r.has("router")?Object.assign(n,ce({chainId:e.chainId,wrappedNative:e.wrappedNative})):e.venueKind==="uniswap-v2"&&r.has("router")&&Object.assign(n,ae({chainId:e.chainId,wrappedNative:e.wrappedNative}));let a={};for(let[o,i]of Object.entries(n))a[o]=i.bind(n);return{key:e.key,chainId:e.chainId,name:e.name,rpcEnv:e.rpcEnv,nativeCurrency:e.nativeCurrency,explorer:e.explorer,venues:e.venues||[],capabilities:a}}var Ke=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venues:[]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venues:[]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venues:[]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);function pe(){return Ke.map(e=>re(de(e)))}pe();var[he,...me]=process.argv.slice(2),$=me.includes("--json"),g=me.filter(e=>e!=="--json");function C(e){e||S("missing <chain>");let t=P(Number(e));if(t)return t;let n=L().find(r=>r.key===String(e).toLowerCase());if(n)return n;S(`unknown chain "${e}". Known: ${L().map(r=>`${r.key}(${r.chainId})`).join(", ")}`)}function S(e){console.error(`error: ${e}`),process.exit(1)}function x(e){process.stdout.write(`${JSON.stringify(e,null,2)}
-`)}function We(e,t){let n=String(t?.message||t);return/rpc|fetch|ECONN|timeout|provider/i.test(n)?`${n}
-
-This chain reads its RPC from: ${e.rpcEnv.join(" or ")}
-Set one, e.g.:  export ${e.rpcEnv[0]}=https://...`:n}try{switch(he){case"chains":{let e=oe();if($){x(e);break}console.log(`${e.chainCount} chains registered
-`);let t=Object.entries(e.chains).map(([r,a])=>({chain:`${a.key} (${r})`,caps:a.supported.length,routing:a.failClosed?"fail-closed (no verified venue)":`${a.venueCount} venue(s)`})),n=Math.max(...t.map(r=>r.chain.length));for(let r of t)console.log(`  ${r.chain.padEnd(n)}  ${String(r.caps).padStart(2)} caps   ${r.routing}`);console.log(`
-Every chain is read/research capable. Routing value requires a verified
-venue -- see CONTRIBUTING.md for the verification rule.`);break}case"head":{let e=C(g[0]);x(await e.blockNumber());break}case"token":{let e=C(g[0]);g[1]||S("usage: oracle-scan token <chain> <address>"),x(await e.resolveToken(g[1]));break}case"pools":{let e=C(g[0]);g[1]||S("usage: oracle-scan pools <chain> <address>");let t=await e.resolvePools(g[1]);if($){x(t);break}console.log(`evidence: ${t.evidence}`),t.reason&&console.log(`reason:   ${t.reason}`);for(let n of t.pools.slice(0,10)){let r=n.liquidityUsd==null?"?":`$${Math.round(n.liquidityUsd).toLocaleString()}`;console.log(`  ${n.dex.padEnd(12)} ${r.padStart(14)}  ${n.pair}`)}t.pools.length||console.log("  (no pools with liquidity found)");break}case"risk":{let e=C(g[0]);g[1]||S("usage: oracle-scan risk <chain> <address>");let t=await e.scoreRisk(g[1]);if($){x(t);break}console.log(`verdict: ${t.verdict}
-`);for(let n of t.checks)console.log(`  ${n.result.padEnd(8)} ${n.check.padEnd(16)} ${n.detail??""}`);console.log(`
-${t.note}`);break}case"quote":{let e=C(g[0]);(!g[1]||!g[2])&&S("usage: oracle-scan quote <chain> <tokenIn> <tokenOut> [amountIn]"),e.supports("quote")||S(`${e.key} has no verified router, so quoting stays fail-closed.
-Add a venue with recorded provenance -- see docs/adding-a-chain.md.`);let t=g[3]||(10n**18n).toString();x(await e.quote({tokenIn:g[1],tokenOut:g[2],amountIn:t}));break}case"sell":{let e=C(g[0]);g[1]||S("usage: oracle-scan sell <chain> <token> [amountIn]"),e.supports("sellSimulation")||S(`${e.key} has no verified router, so sell simulation is unavailable.
-Without it, treat every token on this chain as unproven for exit.`);let t=g[2]||(10n**16n).toString(),n=await e.sellSimulation({token:g[1],amountIn:t});if($){x(n);break}console.log(`verdict:   ${n.verdict}`),console.log(`reason:    ${n.reason??""}`),n.retentionBps!=null&&console.log(`retention: ${(n.retentionBps/100).toFixed(2)}%`),n.leg&&console.log(`failed at: ${n.leg} leg`),n.note&&console.log(`
-${n.note}`);break}default:console.log(["oracle-scan -- chain scanner CLI","","  oracle-scan chains                              coverage matrix","  oracle-scan head  <chain>                       current block","  oracle-scan token <chain> <address>             ERC-20 identity","  oracle-scan pools <chain> <address>             pools by liquidity","  oracle-scan risk  <chain> <address>             structural risk checks","  oracle-scan quote <chain> <tIn> <tOut> [amt]    live exact-input quote","  oracle-scan sell  <chain> <token> [amt]         round-trip: can you exit?","","  <chain> is an id (8453) or key (base).  --json for machine output.","  quote/sell need a chain with a verified router (see: oracle-scan chains)."].join(`
-`)),process.exit(he?1:0)}}catch(e){let t=g[0]?P(Number(g[0]))||L().find(n=>n.key===g[0]):null;S(t?We(t,e):String(e?.message||e))}

package/dist/bin/oracle-upgrade.mjs

@@ -1,21 +0,0 @@
-#!/usr/bin/env node
-import Y from"node:os";import S from"node:path";import{fileURLToPath as H}from"node:url";import u from"node:fs";import a from"node:path";import{randomBytes as C}from"node:crypto";import{createRequire as N}from"node:module";var k="oracle-profile-upgrade/v1";function p(e){try{return u.accessSync(e),!0}catch{return!1}}function M(e){return p(e)?u.readdirSync(e,{recursive:!0,withFileTypes:!0}).filter(n=>n.isFile()).map(n=>a.join(n.parentPath||n.path,n.name)).sort().map(n=>[a.relative(e,n),u.readFileSync(n)]):[]}function T(e){let n=M(e);return n.push([".oracle-upgrade-version",Buffer.from(`${k}
-`)]),n.sort(([c],[o])=>c.localeCompare(o))}function W(e,n){let c=M(e);return c.length===n.length&&c.every(([o,s],r)=>o===n[r][0]&&s.equals(n[r][1]))}function P(e){return`${e}.tmp-oracle-upgrade-${process.pid}-${C(6).toString("hex")}`}function O(e){let n=`${e}.bak-oracle-upgrade`;for(let c=1;p(n);c+=1)n=`${e}.bak-oracle-upgrade-${c}`;return n}function F(e,n,c,o){if(!p(e)||!u.statSync(e).isDirectory())return;let s=T(e);if(W(n,s)){o.unchanged.push(n);return}let r=p(n);if((r?o.updated:o.created).push(n),!c)return;u.mkdirSync(a.dirname(n),{recursive:!0});let t=P(n),i=null;u.mkdirSync(t);try{for(let[l,h]of s){let d=a.join(t,l);u.mkdirSync(a.dirname(d),{recursive:!0}),u.writeFileSync(d,h)}r&&(i=O(n),u.renameSync(n,i),o.backups.push({path:i,original:n})),u.renameSync(t,n)}catch(l){throw p(t)&&u.rmSync(t,{recursive:!0,force:!0}),i&&!p(n)&&p(i)&&u.renameSync(i,n),l}}function A(e,n){if(/^mcp_servers:[ \t]*(?!\{\}[ \t]*(?:#.*)?$)\S+/m.test(e))throw new Error(`${n}: mcp_servers must be a block mapping`);let c=[],o=new Map,s=e.split(/\r?\n/),r=0;for(let t=0;t<s.length;t+=1){let i=s[t];if(/^\s*#/.test(i))continue;if(/^\s*\t|^ +\t/.test(i))throw new Error(`${n}:${t+1}: tabs are not supported in YAML indentation`);let l=i.replace(/\s+#.*$/,"");if(!l.trim()||/^\s*(?:---|\.\.\.)\s*$/.test(l))continue;let h=l.replace(/'(?:[^']|'')*'|"(?:[^"\\]|\\.)*"/g,"");for(let d of h)if("[{".includes(d)&&(r+=1),"]}".includes(d)&&(r-=1),r<0)throw new Error(`${n}:${t+1}: unbalanced flow collection`);if(/^\s*[^#\-][^:]*:\s*(?:.*)?$/.test(l)){let d=l.match(/^ */)[0].length,g=l.trimStart().match(/^([^:]+):/)[1].trim();for(;c.length&&c.at(-1).indent>=d;)c.pop();let m=`${c.map($=>$.key).join("/")}|${d}|${g}`;if(o.has(m))throw new Error(`${n}:${t+1}: duplicate mapping key ${g}`);o.set(m,!0),/^[^:]+:\s*(?:#.*)?$/.test(l.trimStart())&&c.push({indent:d,key:g})}else if(!/^\s*-\s+/.test(l)&&r===0)throw new Error(`${n}:${t+1}: unsupported or malformed YAML`)}if(r!==0)throw new Error(`${n}: unbalanced flow collection`);if(/^\s*[^#\n]*:\s*[>|][+-]?\s*$/m.test(e)){let t=E(e,"mcp_servers");if(t&&/:\s*[>|][+-]?\s*$/m.test(t.body))throw new Error(`${n}: block scalars inside mcp_servers are unsupported`)}}function E(e,n){let o=new RegExp(`^${n}:[^\\S\\r\\n]*(?:#.*)?$`,"m").exec(e);if(!o)return null;let s=o.index,r=e.indexOf(`
-`,s)+1;if(!r)return{start:s,end:e.length,bodyStart:e.length,body:""};let t=e.slice(r),i=/^(?=\S[^\r\n]*:)/m.exec(t),l=i?r+i.index:e.length;return{start:s,bodyStart:r,end:l,body:e.slice(r,l)}}function w(e){return JSON.stringify(e)}function _(e,n){let c=n.command==="node"?[n.script]:n.args,o=[`  ${e}:`,`    command: ${w(n.command)}`];return c?.length&&o.push("    args:",...c.map(s=>`      - ${w(s)}`)),o.push("    enabled: true",`    # ${k}`),`${o.join(`
-`)}
-`}function B(e,n){e=e.replace(/^(mcp_servers:)\s*\{\}\s*(#.*)?$/m,(s,r,t)=>`${r}${t?` ${t}`:""}`);let c=E(e,"mcp_servers");if(!c){let s=e.length&&!e.endsWith(`
-`)?`
-`:"";return`${e}${s}mcp_servers:
-${[...n].map(([r,t])=>_(r,t)).join("")}`}let o=c.body;for(let[s,r]of n){let t=new RegExp(`^  ${s}:[^\\S\\r\\n]*(?:#.*)?\\r?\\n(?:^(?: {3,}|\\s*$).*\\r?\\n?)*`,"m"),i=_(s,r);o=t.test(o)?o.replace(t,i):`${o}${o&&!o.endsWith(`
-`)?`
-`:""}${i}`}return`${e.slice(0,c.bodyStart)}${o}${e.slice(c.end)}`}function L(e,n){e=e.replace(/^(plugins:)\s*\{\}\s*(#.*)?$/m,(t,i,l)=>`${i}${l?` ${l}`:""}`);let c=`    - ${w(n)}
-`,o=E(e,"plugins");if(!o){let t=e.length&&!e.endsWith(`
-`)?`
-`:"";return`${e}${t}plugins:
-  enabled:
-${c}`}let s=o.body,r=/^  enabled:\s*\[([^\]]*)\](.*)$/m.exec(s);if(r){if(!r[1].split(",").map(i=>i.trim().replace(/^["']|["']$/g,"")).includes(n)){let i=r[1].trim()?`${r[1].trimEnd()}, ${w(n)}`:w(n);s=s.replace(r[0],`  enabled: [${i}]${r[2]}`)}}else{let t=/^  enabled:\s*(?:#.*)?\r?\n((?:^ {4}-.*\r?\n?)*)/m.exec(s);t?t[1].split(/\r?\n/).map(l=>l.replace(/^\s*-\s*/,"").trim().replace(/^["']|["']$/g,"")).includes(n)||(s=s.replace(t[0],`${t[0]}${c}`)):s=`${s}${s&&!s.endsWith(`
-`)?`
-`:""}  enabled:
-${c}`}return`${e.slice(0,o.bodyStart)}${s}${e.slice(o.end)}`}function D(e,n,c){let o=p(e);if((o?u.readFileSync(e,"utf8"):null)===n){c.unchanged.push(e);return}if((o?c.updated:c.created).push(e),!c.applied)return;if(u.mkdirSync(a.dirname(e),{recursive:!0}),o){let t=O(e);u.copyFileSync(e,t),c.backups.push({path:t,original:e})}let r=P(e);try{u.writeFileSync(r,n,{mode:o?u.statSync(e).mode:384}),u.renameSync(r,e)}catch(t){throw p(r)&&u.rmSync(r,{force:!0}),t}}function J(e,n){if(n){let[o,...s]=n;return{command:o,args:s}}let c=[a.join(e,"bin","oracle-control-mcp.mjs"),a.join(e,"plugins","oracle-owner-gate","bin","oracle-control-mcp.mjs"),a.join(e,"plugins","oracle-owner-gate","oracle-control-mcp.mjs"),a.join(e,"..","@oracle-agent","operator","bin","oracle-control-mcp.mjs"),a.join(e,"..","..","@oracle-agent","operator","bin","oracle-control-mcp.mjs")];for(let o of c)if(p(o)&&u.statSync(o).isFile())return{command:"node",script:a.resolve(o)};try{let o=N(a.join(e,"package.json")),s=a.dirname(o.resolve("@oracle-agent/operator/package.json")),r=a.join(s,"bin","oracle-control-mcp.mjs");if(p(r)&&u.statSync(r).isFile())return{command:"node",script:a.resolve(r)}}catch{}return null}function q({hermesHome:e,packageRoot:n,only:c=null,apply:o=!1,controlCommand:s=null}){let r=a.join(e,"profiles"),t={ok:!0,applied:o,version:k,hermesHome:e,packageRoot:n,profiles:[],created:[],updated:[],unchanged:[],backups:[]},i=p(r)?u.readdirSync(r,{withFileTypes:!0}).filter(m=>m.isDirectory()).map(m=>m.name).sort():[];if(c&&(i=i.filter(m=>m===c)),c&&i.length===0)throw new Error(`profile not found: ${c}`);t.profiles=i;let l=new Map;for(let m of i){let $=a.join(r,m,"config.yaml"),y=p($)?u.readFileSync($,"utf8"):"";A(y,$),l.set(m,y)}let h=a.join(n,"skills","oracle-action-semantics");if(!p(h))throw new Error(`required Oracle skill is missing: ${h}`);let d=a.join(n,"plugins","oracle-owner-gate"),g=J(n,s),b=a.join(n,"bin","oracle-data-mcp.mjs");if(!p(b))throw new Error(`oracle-data MCP command is missing: ${b}`);for(let m of i){let $=a.join(r,m);F(h,a.join($,"skills","oracle-action-semantics"),o,t),p(d)&&F(d,a.join($,"plugins","oracle-owner-gate"),o,t);let y=new Map([["oracle-data",{command:"node",script:b}]]);g&&y.set("oracle-control",g);let v=B(l.get(m),y);p(d)&&(v=L(v,"oracle-owner-gate")),D(a.join($,"config.yaml"),v,t)}return t}var f=process.argv.slice(2),j=e=>{let n=f.indexOf(e);if(n<0)return null;if(!f[n+1]||f[n+1].startsWith("--"))throw new Error(`${e} requires a value`);return f[n+1]};try{let e=new Set(["--apply","--json","--only","--hermes-home","--package-root","--control-command"]);for(let r=0;r<f.length;r+=1){if(!e.has(f[r]))throw new Error(`unknown option: ${f[r]}`);["--only","--hermes-home","--package-root","--control-command"].includes(f[r])&&(r+=1)}let n=S.resolve(j("--package-root")||S.join(S.dirname(H(import.meta.url)),"..")),c=S.resolve(j("--hermes-home")||process.env.HERMES_HOME||S.join(Y.homedir(),".hermes")),o=j("--control-command"),s=q({hermesHome:c,packageRoot:n,only:j("--only"),apply:f.includes("--apply"),controlCommand:o?o.trim().split(/\s+/):null});if(f.includes("--json"))process.stdout.write(`${JSON.stringify(s,null,2)}
-`);else{console.log(`oracle-upgrade ${s.applied?"applied":"dry run"}: ${s.profiles.length} profile(s)`);for(let r of["created","updated","unchanged","backups"])console.log(`${r}: ${s[r].length}`);s.applied||console.log("Re-run with --apply to make these changes.")}}catch(e){let n={ok:!1,error:e.message};f.includes("--json")?process.stdout.write(`${JSON.stringify(n,null,2)}
-`):console.error(`oracle-upgrade: ${e.message}`),process.exitCode=1}

package/dist/bin/oracle.mjs

@@ -1,68 +0,0 @@
-#!/usr/bin/env node
-import{realpathSync as K}from"node:fs";import{fileURLToPath as Ie}from"node:url";import O from"node:fs";import v from"node:path";import{pathToFileURL as Le}from"node:url";import V from"node:fs";import W from"node:os";import u from"node:path";import{fileURLToPath as Q}from"node:url";var X=u.dirname(Q(import.meta.url)),h=u.resolve(X,"../..");function m(){return process.env.ORACLE_FAKE_HOME||W.homedir()}function g(){return u.join(m(),".config","oracle")}function S(){return u.join(g(),"exec.env")}function Z(){return process.env.HERMES_HOME?u.resolve(process.env.HERMES_HOME):u.join(m(),".hermes")}function ee(){return u.join(m(),".claude.json")}function re(e=process.cwd()){return u.join(e,".mcp.json")}function te(){return process.platform==="darwin"?u.join(m(),"Library","Application Support","Claude","claude_desktop_config.json"):u.join(m(),".config","Claude","claude_desktop_config.json")}function ne(){return u.join(m(),".codex","config.toml")}function _(){return u.join(g(),"connectors")}function oe(){return u.join(_(),"chatgpt-openapi.json")}function se(){return u.join(g(),"active-chain.json")}function ae(e){return u.join(h,"bin",e)}function ce(e){return V.mkdirSync(e,{recursive:!0}),e}var N={homeDir:m,oracleConfigDir:g,oracleExecEnvPath:S,hermesRoot:Z,activeChainPath:se,claudeCodeUserConfigPath:ee,claudeCodeProjectMcpPath:re,claudeDesktopConfigPath:te,codexConfigPath:ne,chatgptConnectorDir:_,chatgptOpenApiPath:oe,packageBin:ae,ensureDir:ce,PACKAGE_ROOT:h};import{readFileSync as T,writeFileSync as me,existsSync as D,mkdirSync as he}from"node:fs";import P from"node:path";import{Contract as ie,JsonRpcProvider as le,verifyMessage as Ye}from"ethers";var k="0x62FCFAf7573AD8B41a0FBF347AfEb85e06599A75",ue=999,pe="https://rpc.hyperliquid.xyz/evm",de=["function balanceOf(address owner) view returns (uint256)"],ze=300*1e3,Ke=720*60*1e3,fe=/^0x[a-fA-F0-9]{40}$/;function b(e){return fe.test(String(e||""))}async function L(e,{contract:t=k,rpc:r=pe,chainId:n=ue}={}){let o=new le(r,n,{staticNetwork:!0}),c=new ie(t,de,o);return BigInt(await c.balanceOf(e))}var ge=Object.freeze(new Set(["help","version","gate","init","doctor","bootstrap","upgrade","auth","model"])),we=600*1e3;function $(){return P.join(g(),"gate-cache.json")}function ye(e=Date.now(),t=$()){try{if(!D(t))return null;let r=JSON.parse(T(t,"utf8"));return!r||typeof r!="object"||!Number.isFinite(r.checkedAt)||e-r.checkedAt>we||!b(r.address)?null:r}catch{return null}}function xe(e,t=$()){try{he(P.dirname(t),{recursive:!0}),me(t,JSON.stringify(e),{mode:384})}catch{}}function Oe(e=S()){if(!D(e))return null;try{let t=T(e,"utf8");for(let r of t.split(`
-`)){let n=r.match(/^\s*(?:export\s+)?ORACLE_EVM_ADDRESS\s*=\s*(.+?)\s*$/);if(!n)continue;let o=n[1].trim().replace(/^["']|["']$/g,"");if(b(o))return o}}catch{return null}return null}var R=`oracle: this build is for Locals Only holders.
-
-  Oracle checks the agent wallet it created for you, or a wallet you imported.
-  Hold a Locals Only NFT in that wallet to unlock the CLI.
-
-    contract  ${k}
-    chain     HyperEVM (999)
-
-  Check status:   oracle gate status
-  Check a wallet: oracle gate check <address>
-`,ve=`oracle: no wallet configured yet.
-
-  Run 'oracle init' to create an agent wallet or import your own, then Oracle
-  can verify your Locals Only holding.
-`;async function x(e,{now:t=Date.now(),address:r=Oe(),balanceOf:n=L,cache:o=ye(t),persist:c=xe,env:a=process.env}={}){if(ge.has(e))return{allow:!0,reason:"ungated"};if(a.ORACLE_GATE_BYPASS==="1")return{allow:!0,reason:"bypass"};if(!r)return{allow:!1,reason:"no-wallet",message:ve};if(o&&o.address.toLowerCase()===r.toLowerCase())return o.holder?{allow:!0,reason:"cached-holder"}:{allow:!1,reason:"cached-denied",message:R};let s;try{s=await n(r)}catch(l){return{allow:!0,reason:"unverifiable",warning:`oracle: could not verify Locals Only holding (${l.message}); continuing.
-`}}let p=BigInt(s)>0n;return c({address:r.toLowerCase(),holder:p,balance:String(s),checkedAt:t}),p?{allow:!0,reason:"holder"}:{allow:!1,reason:"denied",message:R}}import d from"node:fs";import i from"node:path";import{spawnSync as M}from"node:child_process";import{createRequire as Se}from"node:module";import{fileURLToPath as ke}from"node:url";var be=i.dirname(ke(import.meta.url)),Ae=i.resolve(be,"../.."),H=Object.freeze(["oracle-vault","oracle-credential","oracle-signer","oracle-runner","oracle-agentic-init","oracle-agentic-doctor","oracle-control-mcp","oracle-operator-caps"]),F=Object.freeze(["vault","credential","signer","runner","sign"]),I=`oracle: signing is unavailable in the public package.
-
-  The public 'oracle' package is prepare-only and never handles keys.
-  Owner-operated signing is private infrastructure and has no public npm install.
-  Review and sign prepared artifacts in your own wallet instead.
-
-  Nothing about your read/research/prepare setup is affected.
-`,Ee="hint: run 'oracle sign init' to provision keys, or 'oracle sign doctor --json' for detail.";function B(e){let r=(process.env.PATH||"").split(i.delimiter).filter(Boolean),n=process.platform==="win32"?["",".cmd",".exe",".bat"]:[""];for(let o of r)for(let c of n){let a=i.join(o,e+c);try{if(d.existsSync(a)&&d.statSync(a).isFile())return a}catch{}}return null}function G(e){let t={};for(let r of H){let n=[i.join(e,r),i.join(e,`${r}.mjs`),i.join(e,`${r}.js`)];for(let o of n)if(d.existsSync(o)&&d.statSync(o).isFile()){t[r]=o;break}}return t}function je(e){let t=i.dirname(e);for(;t!==i.dirname(t);){let r=i.join(t,"package.json");if(d.existsSync(r))try{let n=JSON.parse(d.readFileSync(r,"utf8"));if(n.name==="@oracle-agent/operator")return{root:t,pkg:n}}catch{}t=i.dirname(t)}return null}function Ce(e){for(let t of e)try{let r=Se(i.join(t,"package.json")),n;try{let l=r.resolve("@oracle-agent/operator/package.json");n={root:i.dirname(l),pkg:JSON.parse(d.readFileSync(l,"utf8"))}}catch{let l=r.resolve("@oracle-agent/operator");n=je(l)}if(!n)continue;let{root:o,pkg:c}=n,a=c.bin||{},s={};for(let[l,f]of Object.entries(a))s[l]=i.resolve(o,f);let p=G(i.join(o,"bin"));for(let[l,f]of Object.entries(p))s[l]||(s[l]=f);return{ok:!0,binDir:i.join(o,"bin"),version:c.version||"unknown",bins:s,source:`require:${t}`}}catch{}return null}function _e(){let e=B("oracle-operator-caps");if(!e)return null;let t=M(e,[],{encoding:"utf8",timeout:5e3,env:process.env});if(t.status!==0||!t.stdout)return null;try{let r=JSON.parse(t.stdout);return!r||typeof r!="object"||!r.bins?null:{ok:!0,binDir:i.dirname(Object.values(r.bins)[0]||e),version:r.version||"unknown",bins:r.bins,source:"caps-path",controlMcp:r.controlMcp}}catch{return null}}function Ne(){let e={};for(let t of H){let r=B(t);r&&(e[t]=r)}return Object.keys(e).length?{ok:!0,binDir:i.dirname(Object.values(e)[0]),version:"unknown",bins:e,source:"path-probe"}:null}function w(){let e=process.env.ORACLE_OPERATOR_BIN_DIR;if(e){let r=i.resolve(e);if(!d.existsSync(r))return{ok:!1};let n=G(r);if(!Object.keys(n).length)return{ok:!1};let o="unknown",c=i.resolve(r,"../package.json");if(d.existsSync(c))try{o=JSON.parse(d.readFileSync(c,"utf8")).version||o}catch{}return{ok:!0,binDir:r,version:o,bins:n,source:"env:ORACLE_OPERATOR_BIN_DIR"}}return Ce([process.cwd(),Ae])||_e()||Ne()||{ok:!1}}function A(e=process.stderr){e.write(I),I.endsWith(`
-`)||e.write(`
-`)}function J(e,t=[],r={}){let n=w();if(!n.ok)return A(r.stderr||process.stderr),3;let o=n.bins[e];if(!o)return(r.stderr||process.stderr).write(`oracle: operator bin '${e}' not found in resolved operator (${n.source})
-`),3;let c=r.stdio||"inherit",a=/\.(mjs|cjs|js)$/.test(o),s=a?process.execPath:o,p=a?[o,...t]:[...t],l=M(s,p,{stdio:c,env:r.env||process.env,cwd:r.cwd||process.cwd(),encoding:c==="pipe"?"utf8":void 0});if(l.error)return(r.stderr||process.stderr).write(`oracle: failed to spawn ${e}: ${l.error.message}
-`),1;let f=typeof l.status=="number"?l.status:1;return f!==0&&r.appendHintOnError&&(r.stderr||process.stderr).write(Ee+`
-`),c==="pipe"?{code:f,stdout:l.stdout||"",stderr:l.stderr||""}:f}var Re="oracle \u2014 self-custody multichain agent control plane",Te=`READ / RESEARCH (no keys, this package)
-  oracle                      open the native Oracle chat (TTY)
-  oracle bootstrap            optional: install an isolated Hermes compatibility runtime
-  oracle init                 install agent lanes + read plane (dry-run by default)
-  oracle doctor               check read plane; checks signer too when installed
-  oracle chat                 premium boxed oracle chat (multi-model)
-  oracle model                choose standalone/Hermes provider and any compatible model
-  oracle auth                 Claude/Codex/Grok OAuth or securely stored provider API keys
-  oracle chain                list/select working chains (hyperliquid, base, ...)
-  oracle setup                telegram/discord/slack messaging menu
-  oracle data serve|call|catalog|health
-  oracle data-mcp             start the read-only MCP server
-  oracle scan chains|head|token|pools|risk|quote|sell
-  oracle route swap|bridge|prepare|prepare-bridge
-  oracle prepare              build an unsigned swap (alias of route prepare)
-  oracle public serve         secret-free public HTTP surface
-  oracle mcp install <t>      wire Oracle into claude-code|claude-desktop|codex|chatgpt
-  oracle upgrade              upgrade installed agent lanes
-
-SIGNING (dispatches to @oracle-agent/operator on THIS machine; never in this package)
-  oracle sign init|doctor     provision / check the local signer (opt-in)
-  oracle vault ...            encrypt local key files at rest
-  oracle signer / runner      loopback signer daemon / action runner
-  oracle credential ...       OS credential store glue
-
-oracle <noun> --help for details. Keys never leave your machine; this package
-cannot sign \u2014 signing commands run the locally installed operator package.
-`;function Y(){try{return JSON.parse(O.readFileSync(v.join(h,"package.json"),"utf8")).version||"0.0.0"}catch{return"0.0.0"}}function De(){let e=v.join(h,"src","cli","commands");return O.existsSync(e)?e:v.join(h,"dist","cli","commands")}async function y(){let e=De(),t=new Map;if(!O.existsSync(e))return t;let r=O.readdirSync(e).filter(n=>n.endsWith(".mjs")).sort();for(let n of r){let o=v.join(e,n);try{let a=(await import(Le(o).href+`?t=${Date.now()}`)).default;if(!a||typeof a!="object"||typeof a.run!="function")continue;let s=a.name||n.replace(/\.mjs$/,"");t.set(s,{...a,name:s,__file:o})}catch(c){process.env.ORACLE_CLI_DEBUG&&console.error(`oracle: failed loading command ${n}: ${c.message}`)}}return t}function E(e,t){let r=[];r.push(`${Re} (v${e})`),r.push(""),r.push(Te.trimEnd());let n=[];for(let o of t.values()){if(["help","version"].includes(o.name))continue;!new Set(["init","doctor","chat","model","chain","setup","data","data-mcp","scan","route","prepare","public","mcp","upgrade","bootstrap","sign","vault","signer","runner","credential"]).has(o.name)&&o.summary&&n.push(`  oracle ${o.name.padEnd(20)} ${o.summary}`)}return n.length&&(r.push(""),r.push("ADDITIONAL"),r.push(...n)),r.join(`
-`)+`
-`}function q(e,t){let r=[...t.keys()].sort(),n=r.length?r.join(", "):"(none loaded yet)";return`oracle: unknown command '${e}'. Known: ${n}
-Try: oracle --help
-`}function j(e){return{argv:e,root:h,paths:N,dispatchOperator:J,resolveOperator:w}}async function z(e=[]){let t=Y();if(e.includes("--version")||e.includes("-V"))return U();if(e[0]==="--help"||e[0]==="-h"){let a=await y();return process.stdout.write(E(t,a)),0}if(e.length===0){let a=await y();if(Pe(e)){let s=await x("chat");if(!s.allow)return process.stderr.write(s.message),77;s.warning&&process.stderr.write(s.warning);let p=a.get("chat");if(p)return p.run(j([]))}return process.stdout.write(E(t,a)),0}if($e(e[0])){let a=await y(),s=await x("chat");if(!s.allow)return process.stderr.write(s.message),77;s.warning&&process.stderr.write(s.warning);let p=a.get("chat");if(p)return p.run(j(e))}let r=e[0],n=e.slice(1);if(r==="version")return U();if(r==="help"){let a=await y();if(n[0]){let s=a.get(n[0]);return s?(process.stdout.write((s.usage||`oracle ${s.name}`)+`
-`),s.summary&&process.stdout.write(s.summary+`
-`),0):(process.stderr.write(q(n[0],a)),1)}return process.stdout.write(E(t,a)),0}let o=await y(),c=o.get(r);if(c){if(n[0]==="--help"||n[0]==="-h")return process.stdout.write((c.usage||`oracle ${c.name}`)+`
-`),c.summary&&process.stdout.write(c.summary+`
-`),0;let a=await x(r);if(!a.allow)return process.stderr.write(a.message),77;a.warning&&process.stderr.write(a.warning);try{let s=await c.run(j(n));return typeof s=="number"?s:0}catch(s){return process.stderr.write(`oracle ${r}: ${s?.message||s}
-`),1}}return F.includes(r)?w().ok?(process.stderr.write(`oracle: sign-plane command '${r}' is not available in this build (operator is installed).
-`),1):(A(process.stderr),3):(process.stderr.write(q(r,o)),1)}async function U(){let t=`oracle ${Y()}`,r=w();return r.ok&&(t+=`  operator ${r.version}`),process.stdout.write(t+`
-`),0}function Pe(e=[],t={stdin:process.stdin,stdout:process.stdout}){return e.length!==0?!1:process.env.ORACLE_FORCE_CHAT==="1"?!0:t.stdin?.isTTY===!0&&t.stdout?.isTTY===!0}function $e(e){return["-m","--model","--provider","-q","--query","-Q","--quiet","-c","--continue","-r","--resume","-s","--skills","-t","--toolsets","--reasoning","--tui","--cli","--yolo","--checkpoints","--source","--max-turns"].includes(String(e||""))}var wr=Object.freeze({data:"./desk-server.mjs",public:"./oracle-public-server.mjs","data-mcp":"./oracle-data-mcp.mjs",init:"./oracle-init.mjs",upgrade:"./oracle-upgrade.mjs",scan:"./oracle-scan.mjs",route:"./oracle-route.mjs"});function Me(){if(!process.argv[1])return!1;try{return K(Ie(import.meta.url))===K(process.argv[1])}catch{return!1}}async function He(e=process.argv.slice(2)){return z(e)}if(Me()){let e=await He();process.exit(typeof e=="number"?e:0)}export{wr as COMMANDS,He as main};

package/dist/chains.mjs

@@ -1 +0,0 @@
-var R={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},i=new Map(Object.values(R).map(e=>[e.chainId,e]));function c(e){return i.get(Number(e))||null}function m({key:e,chainId:r,name:t,rpcEnv:a=[]}){if(!e)throw new Error("registerChain requires a key");if(!Number.isInteger(Number(r)))throw new Error("registerChain requires a numeric chainId");let n={chainId:Number(r),name:t||e,rpcEnv:a,evm:!0};return R[e]=n,i.set(n.chainId,n),n}function _(e,r=process.env){let t=c(e);if(!t)return null;for(let a of t.rpcEnv){let n=(r[a]||"").trim();if(n)return n}return null}function u(e){return i.has(Number(e))}export{R as CHAINS,c as chainById,u as isSupportedChain,m as registerChain,_ as rpcUrlFor};

package/dist/cli/commands/auth.mjs

@@ -1,16 +0,0 @@
-import $ from"node:fs";import T from"node:path";import Q from"node:fs";import ee from"node:os";import I from"node:path";import{fileURLToPath as te}from"node:url";var re=I.dirname(te(import.meta.url)),Ce=I.resolve(re,"../..");function oe(){return process.env.ORACLE_FAKE_HOME||ee.homedir()}function E(){return I.join(oe(),".config","oracle")}function b(e){return Q.mkdirSync(e,{recursive:!0}),e}var ne=new Set(["auto","standalone","hermes"]),ie=new Set(["openrouter","openai","xai","deepseek","gemini","custom","anthropic-oauth","openai-codex","xai-oauth"]);function se(){return T.join(E(),"model.json")}function A(e){return String(e||"").trim()||void 0}function ce(e={}){let t=A(e.backend)?.toLowerCase()||"auto",r=A(e.provider)?.toLowerCase(),n=A(e.model),o=A(e.baseUrl)?.replace(/\/+$/,""),i=A(e.apiKeyEnv),p=Number.parseInt(String(e.contextLength||""),10),l=A(e.reasoningEffort);if(!ne.has(t))throw new Error(`unsupported backend: ${t}`);if(r&&!ie.has(r))throw new Error(`unsupported provider: ${r}`);if(o&&r!=="custom")throw new Error("baseUrl is only supported for the custom provider");if(i&&!/^[A-Z][A-Z0-9_]*$/.test(i))throw new Error("api key env must be an uppercase environment variable name");if(r==="custom"&&!o)throw new Error("custom provider requires baseUrl");if(t==="standalone"&&!n)throw new Error("standalone backend requires a model");return{backend:t,...r?{provider:r}:{},...n?{model:n}:{},...o?{baseUrl:o}:{},...i?{apiKeyEnv:i}:{},...Number.isFinite(p)&&p>0?{contextLength:p}:{},...l?{reasoningEffort:l}:{}}}function N(e){let t=ce(e),r=se();b(T.dirname(r)),process.platform!=="win32"&&$.chmodSync(T.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return $.writeFileSync(n,`${JSON.stringify(t,null,2)}
-`,{mode:384}),$.renameSync(n,r),process.platform!=="win32"&&$.chmodSync(r,384),t}import{createHash as ae,randomBytes as R,timingSafeEqual as ue}from"node:crypto";import g from"node:fs";import _ from"node:path";import de from"node:readline/promises";import{spawn as pe,spawnSync as le}from"node:child_process";var O=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.5",protocol:"responses"}});function fe(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function x(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(O))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function J(e){let t=x(e);return{id:t,...O[t]}}function m(e,t={}){if(!g.existsSync(e))return t;try{let r=JSON.parse(g.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${_.basename(e)}`)}}function H(e){b(e),process.platform!=="win32"&&g.chmodSync(e,448)}function y(e,t){H(_.dirname(e));let r=`${e}.${process.pid}.${R(4).toString("hex")}.tmp`;g.writeFileSync(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),g.renameSync(r,e),process.platform!=="win32"&&g.chmodSync(e,384)}function he(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function K(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function j(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=Number(e.expiresAt||e.expires_at||0);if(!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(n)?n:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function me(e={}){let t=e.file||_.join(E(),"oauth.json"),r=e.metadataFile||_.join(_.dirname(t),"oauth-meta.json"),n=e.spawnFn||le,o=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&he(n),i=o?"linux-secret-service":"private-file",p=`${t}.lock`;async function l(f){H(_.dirname(p));let u;for(let c=0;c<400;c+=1)try{u=g.openSync(p,"wx",384);break}catch(a){if(a?.code!=="EEXIST")throw a;try{Date.now()-g.statSync(p).mtimeMs>3e5&&g.unlinkSync(p)}catch{}await new Promise(d=>setTimeout(d,25))}if(u===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await f()}finally{try{g.closeSync(u)}catch{}try{g.unlinkSync(p)}catch{}}}function s(f,u="oauth"){return["application","oracle","kind",u,"provider",f]}function w(f){let u=x(f);if(o){let d=n("secret-tool",["lookup",...s(u)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(d.error||d.status!==0||!String(d.stdout||"").trim())return null;try{return j(JSON.parse(String(d.stdout).trim()))}catch{return null}}let a=m(t,{providers:{}}).providers?.[u];if(!a)return null;try{return j(a)}catch{return null}}function v(f,u){let c=x(f),a=j(u);if(o){let h=n("secret-tool",["store",`--label=Oracle ${c} OAuth`,...s(c)],{input:JSON.stringify(a),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected OAuth credential");let k=m(r,{providers:{}});return k.providers||={},k.providers[c]={expiresAt:a.expiresAt,source:a.source},y(r,k),a}let d=m(t,{providers:{}});return d.providers||={},d.providers[c]=a,y(t,d),a}function C(f){let u=x(f);if(o){let d=n("secret-tool",["clear",...s(u)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{}});return h.providers&&delete h.providers[u],y(r,h),!d.error&&d.status===0}let c=m(t,{providers:{}}),a=!!c.providers?.[u];return c.providers&&delete c.providers[u],y(t,c),a}function M(f){let u=K(f);if(o){let c=n("secret-tool",["lookup",...s(u,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return c.error||c.status!==0?"":String(c.stdout||"").trim()}return String(m(t,{apiKeys:{}}).apiKeys?.[u]||"").trim()}function G(f,u){let c=K(f),a=String(u||"").trim();if(!a)throw new Error("API key is empty");if(o){let h=n("secret-tool",["store",`--label=Oracle ${c} API key`,...s(c,"api-key")],{input:a,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected API key");let k=m(r,{providers:{},apiKeys:{}});return k.apiKeys||={},k.apiKeys[c]={configured:!0},y(r,k),!0}let d=m(t,{providers:{},apiKeys:{}});return d.apiKeys||={},d.apiKeys[c]=a,y(t,d),!0}function Z(f){let u=K(f);if(o){let d=n("secret-tool",["clear",...s(u,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{},apiKeys:{}});return h.apiKeys&&delete h.apiKeys[u],y(r,h),!d.error&&d.status===0}let c=m(t,{providers:{},apiKeys:{}}),a=!!c.apiKeys?.[u];return c.apiKeys&&delete c.apiKeys[u],y(t,c),a}function Y(){let f={},u={};if(o){let c=m(r,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!w(a),expiresAt:Number(d.expiresAt||0),source:String(d.source||"oracle"),storage:i};for(let a of Object.keys(c.apiKeys||{}))u[a]={configured:!!M(a),storage:i}}else{let c=m(t,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!d?.accessToken,expiresAt:Number(d?.expiresAt||0),source:String(d?.source||"oracle"),storage:i};for(let[a,d]of Object.entries(c.apiKeys||{}))u[a]={configured:!!d,storage:i}}return{storage:i,providers:f,apiKeys:u}}return Object.freeze({file:t,storage:i,get:w,set:v,remove:C,getApiKey:M,setApiKey:G,removeApiKey:Z,status:Y,withLock:l})}var B;function q(){return B||=me(),B}function F(e){return Buffer.from(e).toString("base64url")}function we(){let e=F(R(32));return{verifier:e,challenge:F(ae("sha256").update(e).digest()),state:F(R(24))}}function ge(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&ue(r,n)}function ye(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return pe(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function z(e){return new URLSearchParams(e).toString()}async function S(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function ve(e){if(e)return String(await e()).trim();let t=de.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function U(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return j({accessToken:r,refreshToken:n,expiresAt:fe(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function ke(e){let t=O["anthropic-oauth"],r=e.pkce||we(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let i=await ve(e.inputFn),[p,l]=i.split("#",2);if(!p||!ge(l,r.state))throw new Error("Claude OAuth state mismatch");let s=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:p,state:l,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return U(await S(s,"Claude OAuth token exchange"),e)}async function xe(e){let t=O["openai-codex"],r=await S(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),i;for(let l=0;l<Math.ceil(900/o);l+=1){await e.sleepFn(o*1e3);let s=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(s.ok){i=await S(s,"Codex device authorization");break}if(![403,404].includes(s.status))throw new Error(`Codex device authorization failed (HTTP ${s.status})`)}if(!i)throw new Error("Codex device authorization timed out");let p=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:z({grant_type:"authorization_code",code:i.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:i.code_verifier})});return U(await S(p,"Codex OAuth token exchange"),e)}function P(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Se(e){let t=O["xai-oauth"],r=await S(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");P(r.authorization_endpoint);let n=P(r.token_endpoint),o=await S(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:z({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let i=P(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${i}`),e.output(`Code: ${o.user_code}`),e.openFn(i);let p=Math.max(1,Number(o.interval||5)),l=Math.ceil(Math.max(1,Number(o.expires_in||600))/p);for(let s=0;s<l;s+=1){let w=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:z({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(w.ok){let C=await S(w,"xAI OAuth token exchange");return U(C,{...e,discovery:{authorization_endpoint:P(r.authorization_endpoint),token_endpoint:n}})}let v="";try{v=String((await w.json())?.error||"")}catch{}if(v==="slow_down")await e.sleepFn((p+1)*1e3);else if(v==="authorization_pending")await e.sleepFn(p*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${w.status}${v?`, ${v}`:""})`)}throw new Error("xAI device authorization timed out")}async function V(e,t={}){let r=x(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(i=>setTimeout(i,o))),openFn:t.openFn||ye,output:t.output||(o=>process.stdout.write(`${o}
-`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?ke(n):r==="openai-codex"?xe(n):Se(n)}var W=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},xai:{model:"grok-4.5"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},custom:{model:""}});function D(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function Ae(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function _e(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",i),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
-`)},i=p=>{let l=String(p);for(let s of l){if(s==="\r"||s===`
-`){o(),t(n.trim());return}if(s===""){o(),r(new Error("cancelled"));return}s==="\x7F"||s==="\b"?n=n.slice(0,-1):n+=s}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",i)})}function L(e,t,{baseUrl:r=""}={}){if(!t)throw new Error(`${e} provider requires --model`);let n={backend:"standalone",provider:e,model:t};if(e==="custom"){if(!r)throw new Error("custom provider requires --base-url");n.baseUrl=r}return n}function X(e,t,r={}){return N(L(e,t,r))}function Oe(e){process.stdout.write(`storage: ${e.storage}
-`);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
-`);return}for(let[n,o]of t){let i=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${n}: ${o.loggedIn?"logged in":"missing"}, expires ${i}
-`)}for(let[n,o]of r)process.stdout.write(`${n}: API key ${o.configured?"configured":"missing"}
-`)}function Ee(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
-`)}var qe={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:Ee(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=q();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
-`):Oe(o),0}if(r==="login"){let o=t.find(s=>!s.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let i=J(o),p=D(t,"--model")||i.model;L(i.id,p);let l=await V(i.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let s=n.get(i.id);n.set(i.id,l);try{X(i.id,p)}catch(w){throw s?n.set(i.id,s):n.remove(i.id),w}}),process.stdout.write(`${i.id}: logged in, stored in ${n.storage}
-`),0}if(r==="api-key"){let o=String(t.find(s=>!s.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(W,o))throw new Error(`unsupported API-key provider: ${o}`);let i=D(t,"--model")||W[o].model,p=D(t,"--base-url");L(o,i,{baseUrl:p});let l=t.includes("--stdin")?await Ae():await _e();return await n.withLock(async()=>{let s=n.getApiKey(o);n.setApiKey(o,l);try{X(o,i,{baseUrl:p})}catch(w){throw s?n.setApiKey(o,s):n.removeApiKey(o),w}}),process.stdout.write(`${o}: API key configured in ${n.storage}
-`),0}if(r==="logout"){let o=String(t.find(l=>!l.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let i=!1;try{i=n.remove(x(o))}catch{}let p=n.removeApiKey(o);if(!i&&!p)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
-`),0}throw new Error(`unknown auth action: ${r}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
-`),1}}};export{qe as default};

package/dist/cli/commands/bootstrap.mjs

@@ -1,18 +0,0 @@
-import i from"node:fs";import a from"node:path";import{createHash as L}from"node:crypto";import{spawnSync as m}from"node:child_process";import U from"node:fs";import V from"node:os";import S from"node:path";import{fileURLToPath as D}from"node:url";var B=S.dirname(D(import.meta.url)),ee=S.resolve(B,"../..");function g(){return process.env.ORACLE_FAKE_HOME||V.homedir()}function O(){return S.join(g(),".config","oracle")}function w(n){return U.mkdirSync(n,{recursive:!0}),n}var T="0.19.0",P=`hermes-agent==${T}`,$=[3,11],k=[3,14],v="3.13",_="0.12.1",j=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${_}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${_}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function Y(n,{windows:e=process.platform==="win32"}={}){let t=Buffer.isBuffer(n)?n:Buffer.from(n),o=e?j.windows:j.posix,s=L("sha256").update(t).digest("hex"),r=t.toString("utf8");return s===o.sha256&&r.length>=1e3&&r.includes(_)}function p(){return a.join(O(),"runtime")}function b(){return a.join(p(),"venv")}function H(n){let e=process.platform==="win32"?"Scripts":"bin",t=process.platform==="win32"?`${n}.exe`:n;return a.join(b(),e,t)}function y(){return H("hermes")}function F(){let n=H("python3");return i.existsSync(n)?n:H("python")}function x(){return a.join(p(),"uv",process.platform==="win32"?"uv.exe":"uv")}function h(n){let e=process.platform==="win32"&&!a.extname(n)?["",".exe",".cmd",".bat"]:[""];for(let t of(process.env.PATH||"").split(a.delimiter))if(t)for(let o of e){let s=a.join(t,`${n}${o}`);try{if(i.existsSync(s))return s}catch{}}return null}function z(n){let e=/Python (\d+)\.(\d+)\.(\d+)/.exec(n||"");return e?[Number(e[1]),Number(e[2]),Number(e[3])]:null}function K(n){if(!n)return!1;let[e,t]=n;return!(e<$[0]||e===$[0]&&t<$[1]||e>k[0]||e===k[0]&&t>=k[1])}function A(){let n=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let e of n){let t=a.isAbsolute(e)?i.existsSync(e)?e:null:h(e);if(!t)continue;let o=m(t,["--version"],{encoding:"utf8",timeout:15e3}),s=z(`${o.stdout||""}${o.stderr||""}`);if(K(s))return{bin:t,version:s.join("."),source:"host"}}return null}function I(){return process.env.ORACLE_UV_BIN||h("uv")||(i.existsSync(a.join(g(),".local","bin","uv"))?a.join(g(),".local","bin","uv"):null)||(i.existsSync(x())?x():null)}function X(n,e){let t=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return m(process.execPath,["-e",t,n,e],{encoding:"utf8",timeout:2*6e4})}function G({quiet:n=!1}={}){let e=I();if(e)return{ok:!0,bin:e,reused:!0};w(p());let t=process.platform==="win32",o=a.join(p(),t?"uv-install.ps1":"uv-install.sh"),s=t?j.windows:j.posix,r=X(s.url,o);if(r.status!==0)return{ok:!1,reason:`could not download the uv installer (${r.status})`,stderr:(r.stderr||"").slice(-800)};let c=i.readFileSync(o);if(!Y(c,{windows:t}))return{ok:!1,reason:`uv ${_} installer checksum mismatch`};let f=a.dirname(x());w(f);let d=t?h("powershell.exe")||h("powershell"):h("sh")||"/bin/sh";if(!d)return{ok:!1,reason:t?"PowerShell not found":"sh not found"};let l=m(d,t?["-NoProfile","-ExecutionPolicy","Bypass","-File",o]:[o],{stdio:n?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:f,UV_NO_MODIFY_PATH:"1"}});return l.status!==0||!i.existsSync(x())?{ok:!1,reason:`uv install failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}:{ok:!0,bin:x(),reused:!1}}function R({quiet:n=!1}={}){let e=G({quiet:n});if(!e.ok)return e;let t=e.bin,o={...process.env,UV_PYTHON_INSTALL_DIR:a.join(p(),"python"),UV_CACHE_DIR:a.join(p(),"cache")},s=m(t,["python","install","--no-bin",v],{stdio:n?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:o});if(s.status!==0)return{ok:!1,reason:`uv python install ${v} failed (${s.status})`,stderr:(s.stderr||"").slice(-800)};let r=m(t,["python","find",v],{encoding:"utf8",timeout:6e4,env:o}),c=(r.stdout||"").trim().split(/\r?\n/)[0];return r.status!==0||!c||!i.existsSync(c)?{ok:!1,reason:`uv could not locate python ${v}`}:{ok:!0,bin:c,version:v,source:"uv"}}function J(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let n=h("hermes");if(n)return{ok:!0,bin:n,source:"path"};let e=y();return i.existsSync(e)?{ok:!0,bin:e,source:"managed"}:{ok:!1,bin:null,source:null}}function C(){let n=J(),e=A();return{hermes:n,managedVenv:b(),managedInstalled:i.existsSync(y()),hostPython:e,uv:I()}}function E(n,e,{quiet:t}){return m(n,e,{stdio:t?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function N({quiet:n=!1,upgrade:e=!1}={}){let t=A();if(!t){let u=R({quiet:n});if(u.ok)t={bin:u.bin,version:u.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${u.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}w(p());let o=b();if(i.existsSync(y())&&!e)return{ok:!0,bin:y(),reused:!0};if(!i.existsSync(a.join(o,"pyvenv.cfg"))){let u=E(t.bin,["-m","venv",o],{quiet:n});if(u.status!==0&&t.source!=="uv"){i.rmSync(o,{recursive:!0,force:!0});let l=R({quiet:n});if(l.ok)t={bin:l.bin,version:l.version,source:"uv"},u=E(t.bin,["-m","venv",o],{quiet:n});else return{ok:!1,reason:`python -m venv failed (${u.status}) and uv fallback failed: ${l.reason}`,stderr:(u.stderr||"").slice(-800)}}if(u.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}}let r=F();if(!i.existsSync(r))return{ok:!1,reason:`venv python missing at ${r}`};let c=["-m","pip","install","--disable-pip-version-check"];e&&c.push("--upgrade"),c.push(P);let f=E(r,c,{quiet:n});if(f.status!==0)return{ok:!1,reason:`pip install ${P} failed (${f.status})`,stderr:(f.stderr||"").slice(-1200)};let d=y();return i.existsSync(d)?{ok:!0,bin:d,reused:!1,python:t.version}:{ok:!1,reason:`hermes entrypoint not found after install (${d})`}}function M(){return["oracle bootstrap - optionally install an isolated Hermes compatibility runtime","","  oracle bootstrap            install into ~/.config/oracle/runtime/venv","  oracle bootstrap --upgrade  upgrade the managed runtime","  oracle bootstrap --status   show what runtime oracle would use","  oracle bootstrap --json     machine-readable status","","notes:","  a hermes on PATH always wins; bootstrap never touches system python","  read/prepare commands (chain, scan, route, data) never need this"].join(`
-`)}var ce={name:"bootstrap",summary:"optionally install a Hermes compatibility runtime",group:"read",usage:M(),async run(n){let e=n.argv;if(e.includes("-h")||e.includes("--help"))return process.stdout.write(M()+`
-`),0;let t=e.includes("--json"),o=C();if(e.includes("--status")||t)return t?(process.stdout.write(JSON.stringify(o,null,2)+`
-`),0):(process.stdout.write([`hermes:        ${o.hermes.ok?`${o.hermes.bin} (${o.hermes.source})`:"not installed"}`,`managed venv:  ${o.managedVenv}`,`managed built: ${o.managedInstalled?"yes":"no"}`,`host python:   ${o.hostPython?`${o.hostPython.bin} (${o.hostPython.version})`:"none supported (need 3.11-3.13)"}`,`uv:            ${o.uv||"not installed (oracle will install it locally)"}`,""].join(`
-`)),0);let s=e.includes("--upgrade");if(o.hermes.ok&&o.hermes.source==="path"&&!s)return process.stdout.write(`hermes already on PATH: ${o.hermes.bin}
-nothing to do. run: oracle
-`),0;process.stdout.write(`installing ${P} into ${b()}
-`+(o.hostPython?`using python ${o.hostPython.version} (${o.hostPython.bin})
-`:`provisioning an isolated python 3.13 with uv
-`)+`this takes a few minutes on first run
-
-`);let r=N({upgrade:s});return r.ok?(process.stdout.write(r.reused?`runtime already present: ${r.bin}
-`:`
-runtime ready: ${r.bin}
-run: oracle
-`),0):(process.stderr.write(`oracle bootstrap failed: ${r.reason}
-`),r.stderr&&process.stderr.write(`${r.stderr}
-`),1)}};export{ce as default};

package/dist/cli/commands/chain.mjs

@@ -1,21 +0,0 @@
-import _ from"node:readline/promises";import{stdin as N,stdout as $}from"node:process";var b=Object.freeze([{key:"hyperliquid",aliases:["hl","hyperevm","hype","999"],chainId:999,name:"hyperliquid",kind:"evm",family:"hyperliquid",agent:"hyperliquid-agent",note:"perps \xB7 hip-3/4 \xB7 hyperevm 999",build:!0},{key:"ethereum",aliases:["eth","mainnet","1"],chainId:1,name:"ethereum",kind:"evm",family:"evm",agent:"oracle",note:"l1 \xB7 bridge hub",build:!0},{key:"base",aliases:["8453"],chainId:8453,name:"base",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"arbitrum",aliases:["arb","42161"],chainId:42161,name:"arbitrum",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"optimism",aliases:["op","10"],chainId:10,name:"optimism",kind:"evm",family:"evm",agent:"oracle",note:"op mainnet",build:!0},{key:"polygon",aliases:["matic","137"],chainId:137,name:"polygon",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"bsc",aliases:["bnb","56"],chainId:56,name:"bnb chain",kind:"evm",family:"evm",agent:"oracle",note:"bsc",build:!0},{key:"avalanche",aliases:["avax","43114"],chainId:43114,name:"avalanche",kind:"evm",family:"evm",agent:"oracle",note:"c-chain",build:!0},{key:"abstract",aliases:["abs","2741"],chainId:2741,name:"abstract",kind:"evm",family:"evm",agent:"oracle",note:"open / add agent",build:!0},{key:"stable",aliases:["988"],chainId:988,name:"stable",kind:"evm",family:"stable",agent:"stable-agent",note:"usdt0 gas \xB7 stable agent",build:!0},{key:"robinhood",aliases:["rh","4663"],chainId:4663,name:"robinhood",kind:"evm",family:"robinhood",agent:"robinhood-agent",note:"rh chain 4663",build:!0},{key:"solana",aliases:["sol"],chainId:"SOL",name:"solana",kind:"svm",family:"solana",agent:"solana-agent",note:"jup \xB7 nfts \xB7 dexs",build:!0},{key:"bitcoin",aliases:["btc"],chainId:"BTC",name:"bitcoin",kind:"utxo",family:"bitcoin",agent:"bitcoin-agent",note:"ord \xB7 runes \xB7 l1",build:!0},{key:"polymarket",aliases:["poly","polygon-poly"],chainId:137,name:"polymarket",kind:"venue",family:"polymarket",agent:"polymarket-agent",note:"prediction markets (polygon venue)",build:!1}]);function d(t){return String(t||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}function u({buildOnly:t=!1}={}){return b.filter(e=>t?e.build:!0)}function o(t){let e=d(t);if(!e)return null;for(let n of b)if(n.key===e||String(n.chainId).toLowerCase()===e||(n.aliases||[]).map(d).includes(e)||d(n.name)===e)return n;return null}function p({selectedKey:t=null,buildOnly:e=!1}={}){let n=u({buildOnly:e}),i=["oracle chains","","pick a build/trade surface:",""];for(let r of n){let h=t&&t===r.key?"*":" ",a=String(r.chainId).padEnd(6),s=r.key.padEnd(12);i.push(`${h} ${s} ${a}  ${r.note}`)}return i.push(""),i.push("usage:"),i.push("  /chain                 list"),i.push("  /chain hyperliquid     select"),i.push("  /chain show            current"),i.push("  /chain clear           unset"),i.push("  oracle chain use base  same from shell"),t&&i.push("",`active: ${t}`),i.join(`
-`)+`
-`}import c from"node:fs";import O from"node:path";import j from"node:fs";import A from"node:os";import m from"node:path";import{fileURLToPath as E}from"node:url";var S=m.dirname(E(import.meta.url)),W=m.resolve(S,"../..");function C(){return process.env.ORACLE_FAKE_HOME||A.homedir()}function f(){return m.join(C(),".config","oracle")}function w(t){return j.mkdirSync(t,{recursive:!0}),t}function y(){return O.join(f(),"active-chain.json")}function l(){let t=y();if(!c.existsSync(t))return null;try{let e=JSON.parse(c.readFileSync(t,"utf8"));if(!e||typeof e!="object"||!e.key)return null;let n=o(e.key);return n?{key:n.key,chainId:n.chainId,name:n.name,agent:n.agent,selectedAt:e.selectedAt||null}:null}catch{return null}}function x(t){let e=o(t);if(!e){let i=new Error(`unknown chain '${t}'`);throw i.code="UNKNOWN_CHAIN",i}w(f());let n={key:e.key,chainId:e.chainId,name:e.name,agent:e.agent,selectedAt:new Date().toISOString()};return c.writeFileSync(y(),JSON.stringify(n,null,2)+`
-`,{mode:384}),n}function I(){let t=y();return c.existsSync(t)&&c.unlinkSync(t),!0}function g(){return["oracle chain \u2014 pick the build/trade surface","","  oracle chain                 list working chains","  oracle chain list            same","  oracle chain show            show active chain","  oracle chain use <name>      select (hyperliquid, base, solana, ...)","  oracle chain clear           unset","  oracle chain --json          machine output","","chat:","  /chain","  /chain hyperliquid","  /chain show"].join(`
-`)}function L(t){let e=l();return t?(process.stdout.write(JSON.stringify({active:e,chains:u()},null,2)+`
-`),0):(process.stdout.write(p({selectedKey:e?.key||null})),0)}function H(t){let e=l();return t?(process.stdout.write(JSON.stringify({active:e},null,2)+`
-`),e?0:1):e?(process.stdout.write(`active: ${e.key}  id=${e.chainId}  agent=${e.agent}
-`),0):(process.stdout.write(`active: none
-run: oracle chain use hyperliquid
-`),1)}function k(t,e){try{let n=x(t);return e?process.stdout.write(JSON.stringify({ok:!0,active:n},null,2)+`
-`):process.stdout.write(`selected ${n.key} (${n.chainId}) \xB7 agent ${n.agent}
-build/trade context pinned for this machine
-`),0}catch(n){if(n?.code==="UNKNOWN_CHAIN")return process.stderr.write(`oracle chain: unknown '${t}'
-`),process.stderr.write(`try: oracle chain list
-`),1;throw n}}var Q={name:"chain",summary:"list/select working chains (hyperliquid, base, solana, ...)",group:"read",usage:g(),async run(t){let e=[...t.argv],n=e.includes("--json"),i=e.filter(a=>a!=="--json"),r=(i[0]||"list").toLowerCase(),h=i.slice(1);if(["-h","--help","help"].includes(r))return process.stdout.write(g()+`
-`),0;if(["list","ls"].includes(r))return L(n);if(["show","status","current"].includes(r))return H(n);if(["clear","unset","none"].includes(r))return I(),process.stdout.write(n?`{"ok":true,"active":null}
-`:`active chain cleared
-`),0;if(["use","set","select","pick"].includes(r)){let a=h.join(" ").trim();return a?k(a,n):(process.stderr.write(`usage: oracle chain use <name>
-`),1)}if(o(r))return k(r,n);if(!i.length&&process.stdin.isTTY){let a=u();process.stdout.write(p({selectedKey:l()?.key}));let s=_.createInterface({input:N,output:$});try{let v=(await s.question("chain> ")).trim();return v?k(v,!1):0}finally{s.close()}}return process.stderr.write(`oracle chain: unknown verb '${r}'
-${g()}
-`),1}};export{Q as default};