@oracle-agent/oracle 0.13.0 → 0.13.1

package/public/agent-connect/index.html

@@ -0,0 +1,83 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <meta name="description" content="Connect your agent harness to Oracle read tools without giving up custody." />
+  <title>Oracle Agent Connect</title>
+  <link rel="stylesheet" href="styles.css" />
+</head>
+<body>
+  <main class="shell">
+    <header class="hero">
+      <a class="wordmark" href="/">ORACLE</a>
+      <p class="eyebrow">AGENT CONNECT</p>
+      <h1>Give your agent market context.<br /><span>Keep custody local.</span></h1>
+      <p class="lede">Connect a read-only Oracle API to your preferred harness. The model proposes actions; you review and authorize them through your local operator.</p>
+    </header>
+
+    <section class="card setup" aria-labelledby="connection-title">
+      <div class="section-heading">
+        <span class="step">01</span>
+        <div>
+          <h2 id="connection-title">Your connection</h2>
+          <p>These values stay in this browser and are only used to build the config below.</p>
+        </div>
+      </div>
+      <div class="fields">
+        <label>Agent API URL
+          <input id="api-url" type="url" value="https://api.oracle-agent.dev" spellcheck="false" autocomplete="url" />
+        </label>
+        <label>Read API key
+          <input id="api-key" type="password" placeholder="Your read-only API key" spellcheck="false" autocomplete="off" />
+          <span class="hint">Use only a user-owned, read-only API credential.</span>
+        </label>
+        <label>Public wallet address <span class="optional">optional</span>
+          <input id="wallet-address" type="text" placeholder="0x... or a public Solana address" spellcheck="false" autocomplete="off" />
+          <span class="hint">Used to personalize portfolio reads. No wallet connection or signature.</span>
+        </label>
+      </div>
+    </section>
+
+    <section class="card config" aria-labelledby="config-title">
+      <div class="section-heading">
+        <span class="step">02</span>
+        <div>
+          <h2 id="config-title">Choose your harness</h2>
+          <p>Copy a ready-to-paste cloud/read MCP configuration.</p>
+        </div>
+      </div>
+      <div class="tabs" role="tablist" aria-label="Agent harness">
+        <button role="tab" aria-selected="true" data-harness="hermes">Hermes</button>
+        <button role="tab" aria-selected="false" data-harness="claude">Claude Code</button>
+        <button role="tab" aria-selected="false" data-harness="codex">Codex</button>
+        <button role="tab" aria-selected="false" data-harness="cursor">Cursor</button>
+        <button role="tab" aria-selected="false" data-harness="mcp">Generic MCP</button>
+      </div>
+      <div class="code-wrap">
+        <div class="code-bar">
+          <span id="config-label">Hermes config</span>
+          <button id="copy-button" class="copy" type="button">Copy config</button>
+        </div>
+        <pre><code id="config-output"></code></pre>
+      </div>
+      <p id="copy-status" class="status" aria-live="polite"></p>
+    </section>
+
+    <section class="operator" aria-labelledby="operator-title">
+      <div class="operator-mark" aria-hidden="true">LOCAL</div>
+      <div>
+        <p class="eyebrow">SEPARATE EXECUTION LANE</p>
+        <h2 id="operator-title">Install the local operator to execute</h2>
+        <p>The cloud/read MCP can research, quote, simulate, and prepare. Execution belongs in a separate local process under your policy and approval controls.</p>
+        <div class="command"><code>npx @oracle-agent/oracle init</code><button id="copy-install" type="button">Copy</button></div>
+      </div>
+    </section>
+
+    <footer>
+      <p><strong>Custody stays local.</strong> The model proposes; the owner authorizes. This page never connects a wallet, requests a signature, or sends the values you enter.</p>
+    </footer>
+  </main>
+  <script src="app.js"></script>
+</body>
+</html>

package/public/agent-connect/styles.css

@@ -0,0 +1,70 @@
+:root {
+  color-scheme: dark;
+  --ink: #07110f;
+  --panel: #0d1a17;
+  --panel-high: #12231f;
+  --line: #26443d;
+  --mint: #55e6c1;
+  --paper: #edf8f4;
+  --muted: #9bb8b0;
+}
+
+* { box-sizing: border-box; }
+
+body {
+  margin: 0;
+  background:
+    radial-gradient(circle at 85% 8%, rgba(85, 230, 193, 0.12), transparent 25rem),
+    linear-gradient(rgba(85, 230, 193, 0.025) 1px, transparent 1px),
+    linear-gradient(90deg, rgba(85, 230, 193, 0.025) 1px, transparent 1px),
+    var(--ink);
+  background-size: auto, 48px 48px, 48px 48px, auto;
+  color: var(--paper);
+  font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  min-height: 100vh;
+}
+
+button, input { font: inherit; }
+.shell { width: min(980px, calc(100% - 32px)); margin: auto; padding: 56px 0 32px; }
+.hero { max-width: 780px; margin-bottom: 42px; }
+.wordmark { color: var(--paper); text-decoration: none; font-size: 14px; font-weight: 800; letter-spacing: .28em; }
+.eyebrow { margin: 36px 0 10px; color: var(--mint); font: 700 11px/1.4 ui-monospace, SFMono-Regular, Menlo, monospace; letter-spacing: .18em; }
+h1 { margin: 0; font-size: clamp(40px, 7vw, 76px); line-height: .98; letter-spacing: -.055em; }
+h1 span { color: var(--mint); }
+.lede { max-width: 660px; margin: 24px 0 0; color: var(--muted); font-size: 18px; line-height: 1.65; }
+.card { background: rgba(13, 26, 23, .92); border: 1px solid var(--line); border-radius: 18px; padding: clamp(22px, 4vw, 38px); margin-top: 18px; box-shadow: 0 22px 70px rgba(0, 0, 0, .22); }
+.section-heading { display: flex; align-items: flex-start; gap: 18px; margin-bottom: 28px; }
+.step { display: grid; place-items: center; min-width: 42px; height: 42px; border: 1px solid var(--mint); border-radius: 50%; color: var(--mint); font: 700 12px ui-monospace, monospace; }
+h2 { margin: 0; font-size: 24px; letter-spacing: -.02em; }
+.section-heading p, .operator p { color: var(--muted); margin: 6px 0 0; line-height: 1.55; }
+.fields { display: grid; grid-template-columns: 1fr 1fr; gap: 20px; }
+label { display: flex; flex-direction: column; gap: 9px; color: var(--paper); font-size: 13px; font-weight: 700; }
+label:first-child { grid-column: 1 / -1; }
+.optional { color: var(--muted); font-weight: 400; }
+input { width: 100%; color: var(--paper); background: var(--ink); border: 1px solid var(--line); border-radius: 9px; padding: 13px 14px; outline: none; }
+input:focus { border-color: var(--mint); box-shadow: 0 0 0 3px rgba(85, 230, 193, .1); }
+.hint { color: var(--muted); font-size: 11px; font-weight: 400; line-height: 1.4; }
+.tabs { display: flex; gap: 8px; overflow-x: auto; padding-bottom: 4px; }
+.tabs button { flex: 0 0 auto; color: var(--muted); background: transparent; border: 1px solid var(--line); border-radius: 999px; padding: 9px 15px; cursor: pointer; }
+.tabs button[aria-selected="true"] { color: var(--ink); background: var(--mint); border-color: var(--mint); font-weight: 700; }
+.code-wrap { margin-top: 18px; border: 1px solid var(--line); border-radius: 12px; overflow: hidden; background: var(--ink); }
+.code-bar { display: flex; align-items: center; justify-content: space-between; padding: 10px 14px; border-bottom: 1px solid var(--line); color: var(--muted); font-size: 12px; }
+.copy, .command button { color: var(--mint); background: transparent; border: 0; cursor: pointer; font-weight: 700; }
+pre { min-height: 270px; margin: 0; padding: 20px; overflow: auto; color: #c8f7e9; font: 12px/1.7 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; }
+.status { min-height: 20px; margin: 10px 0 0; color: var(--mint); font-size: 12px; }
+.operator { display: grid; grid-template-columns: 120px 1fr; gap: 30px; margin: 54px 0; padding: 0 20px; align-items: center; }
+.operator .eyebrow { margin: 0 0 8px; }
+.operator-mark { display: grid; place-items: center; aspect-ratio: 1; border: 1px solid var(--mint); border-radius: 50%; color: var(--mint); font: 700 12px ui-monospace, monospace; letter-spacing: .15em; box-shadow: inset 0 0 30px rgba(85, 230, 193, .09); }
+.command { display: flex; justify-content: space-between; max-width: 520px; margin-top: 18px; padding: 13px 16px; background: var(--panel-high); border: 1px solid var(--line); border-radius: 9px; }
+.command code { overflow: auto; }
+footer { border-top: 1px solid var(--line); padding: 25px 0; color: var(--muted); font-size: 13px; line-height: 1.6; }
+footer strong { color: var(--paper); }
+
+@media (max-width: 640px) {
+  .shell { padding-top: 30px; }
+  .fields { grid-template-columns: 1fr; }
+  label:first-child { grid-column: auto; }
+  .operator { grid-template-columns: 1fr; padding: 0; }
+  .operator-mark { width: 88px; }
+  pre { min-height: 320px; }
+}

package/public/index.html

@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8"/>
+<meta http-equiv="refresh" content="0; url=./oracle-splash/"/>
+<link rel="canonical" href="./oracle-splash/"/>
+<title>Oracle</title>
+</head>
+<body>
+<p><a href="./oracle-splash/">Oracle splash</a></p>
+</body>
+</html>

package/public/oracle-console/app.js

@@ -0,0 +1,272 @@
+// Oracle Console. Public frontend, Slice I.
+//
+// Single action UI: connect a wallet, then preview a proposed permission set.
+// This file never installs a grant or session key and never claims on-chain
+// enforcement. It never stores, logs, or transmits a private key, session
+// secret, bearer token, or signer URL.
+//
+// Talks to two BFF routes only:
+//   POST /public/connect/assemble  -> assembleUnsignedGrant(body)
+//   POST /public/grants/active     -> listActiveGrants(body.store, body.opts)
+
+(function () {
+  "use strict";
+
+  const CONNECT_ASSEMBLE_URL = "/public/connect/assemble";
+  const GRANTS_ACTIVE_URL = "/public/grants/active";
+
+  // Demo policy for the connected agent. Read only scopes, bounded caps,
+  // one hour expiry. Nothing here is authorization.
+  const DEMO_AGENT_ADDRESS = "0x1111111111111111111111111111111111111111";
+  const DEMO_CHAIN_ID = 8453;
+  const DEMO_ACTIONS = ["read:balance", "read:positions"];
+  const DEMO_TARGETS = [];
+  const DEMO_MAX_VALUE_WEI = "0";
+  const DEMO_MAX_GAS_WEI = "0";
+  const DEMO_MAX_SLIPPAGE_BPS = 0;
+  const DEMO_TTL_SECONDS = 3600;
+
+  const connectBtn = document.getElementById("connect-btn");
+  const walletState = document.getElementById("wallet-state");
+  const revokeBtn = document.getElementById("revoke-btn");
+  const permissionPanel = document.getElementById("permission-panel");
+  const panelStatus = document.getElementById("panel-status");
+
+  const stepConnect = document.getElementById("step-connect");
+  const stepBound = document.getElementById("step-bound");
+  const stepEnforced = document.getElementById("step-enforced");
+
+  const permChain = document.getElementById("perm-chain");
+  const permActions = document.getElementById("perm-actions");
+  const permTargets = document.getElementById("perm-targets");
+  const permMaxValue = document.getElementById("perm-max-value");
+  const permExpiry = document.getElementById("perm-expiry");
+
+  // In-memory session state only. Never persisted, never logged.
+  let session = {
+    accountAddress: null,
+    grant: null,
+    grantId: null,
+  };
+
+  function setStep(stepEl, state) {
+    stepEl.setAttribute("data-state", state);
+  }
+
+  function resetSteps() {
+    setStep(stepConnect, "pending");
+    setStep(stepBound, "pending");
+    setStep(stepEnforced, "pending");
+  }
+
+  function hasInjectedWallet() {
+    return typeof window !== "undefined" && typeof window.ethereum !== "undefined";
+  }
+
+  async function postJson(url, body) {
+    const res = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(body),
+    });
+    const data = await res.json().catch(() => null);
+    if (!res.ok) {
+      const message = (data && data.error) || `request to ${url} failed with status ${res.status}`;
+      throw new Error(message);
+    }
+    return data;
+  }
+
+  function nowUnixSeconds() {
+    return Math.floor(Date.now() / 1000);
+  }
+
+  function formatExpiry(unixSeconds) {
+    return new Date(unixSeconds * 1000).toISOString();
+  }
+
+  function renderPermissionPanel(grant) {
+    permChain.textContent = String(grant.chainId);
+    permActions.textContent = grant.actions.join(", ");
+    permTargets.textContent = grant.targets.length ? grant.targets.join(", ") : "none, read and simulate only";
+    permMaxValue.textContent = `${grant.maxValueWei} wei`;
+    permExpiry.textContent = formatExpiry(grant.expiresAt);
+    permissionPanel.hidden = false;
+    revokeBtn.disabled = false;
+    panelStatus.textContent = "";
+  }
+
+  async function requestAccount() {
+    const accounts = await window.ethereum.request({ method: "eth_requestAccounts" });
+    if (!accounts || !accounts[0]) {
+      throw new Error("no account returned by wallet");
+    }
+    return accounts[0];
+  }
+
+  async function connectFlow() {
+    if (!hasInjectedWallet()) {
+      walletState.textContent = "Connect a wallet to continue.";
+      return;
+    }
+
+    connectBtn.disabled = true;
+    resetSteps();
+    permissionPanel.hidden = true;
+
+    try {
+      walletState.textContent = "Requesting account.";
+      const accountAddress = await requestAccount();
+      session.accountAddress = accountAddress;
+      setStep(stepConnect, "done");
+      walletState.textContent = `Connected as ${accountAddress}.`;
+
+      setStep(stepBound, "active");
+      const assembled = await postJson(CONNECT_ASSEMBLE_URL, {
+        chainId: DEMO_CHAIN_ID,
+        agentAddress: DEMO_AGENT_ADDRESS,
+        accountAddress: accountAddress,
+        actions: DEMO_ACTIONS,
+        targets: DEMO_TARGETS,
+        maxValueWei: DEMO_MAX_VALUE_WEI,
+        maxGasWei: DEMO_MAX_GAS_WEI,
+        maxSlippageBps: DEMO_MAX_SLIPPAGE_BPS,
+        ttlSeconds: DEMO_TTL_SECONDS,
+        nonce: `console.${nowUnixSeconds()}`,
+        revocationKey: `revoke.console.${nowUnixSeconds()}`,
+      });
+
+      const grant = assembled.payload.grant;
+      const grantId = assembled.payload.grantId;
+      session.grant = grant;
+      session.grantId = grantId;
+      setStep(stepBound, "done");
+      walletState.textContent = "Permission set reviewed. Building local preview.";
+
+      setStep(stepEnforced, "active");
+      await refreshActiveGrants();
+      setStep(stepEnforced, "done");
+      walletState.textContent = "Permission preview ready. No session was installed.";
+    } catch (err) {
+      walletState.textContent = `Connect failed: ${err.message}`;
+    } finally {
+      connectBtn.disabled = false;
+    }
+  }
+
+  async function refreshActiveGrants() {
+    if (!session.grant || !session.accountAddress) return;
+
+    const store = [
+      {
+        grant: session.grant,
+        revoked: false,
+      },
+    ];
+
+    const result = await postJson(GRANTS_ACTIVE_URL, {
+      store: store,
+      opts: {
+        now: nowUnixSeconds(),
+        accountAddress: session.accountAddress,
+        agentAddress: DEMO_AGENT_ADDRESS,
+        chainId: DEMO_CHAIN_ID,
+      },
+    });
+
+    const active = Array.isArray(result) ? result : result.active || [];
+    const match = active.find((entry) => entry.id === session.grantId);
+
+    if (match) {
+      renderPermissionPanel(match.grant);
+    } else {
+      permissionPanel.hidden = false;
+      revokeBtn.disabled = true;
+      panelStatus.textContent = "This permission preview is no longer active.";
+    }
+  }
+
+  function clearPreviewFlow() {
+    if (!session.grant) return;
+    revokeBtn.disabled = true;
+    session.grant = null;
+    session.grantId = null;
+    permissionPanel.hidden = true;
+    resetSteps();
+    setStep(stepConnect, "done");
+    walletState.textContent = "Permission preview cleared. No on-chain revocation was required.";
+  }
+
+  connectBtn.addEventListener("click", () => {
+    connectFlow();
+  });
+
+  revokeBtn.addEventListener("click", () => {
+    clearPreviewFlow();
+  });
+
+  // ── Bitcoin multi-wallet lane (actual BTC L1) ───────────────────────────
+  const btcConnectBtn = document.getElementById("btc-connect-btn");
+  const btcWalletState = document.getElementById("btc-wallet-state");
+  const btcPanel = document.getElementById("btc-panel");
+  const btcWalletLabel = document.getElementById("btc-wallet-label");
+  const btcAddressEl = document.getElementById("btc-address");
+  const btcDetectedEl = document.getElementById("btc-detected");
+  const btcPanelStatus = document.getElementById("btc-panel-status");
+
+  let btcSession = null;
+
+  function refreshBtcDetected() {
+    const api = window.OracleBitcoinWallets;
+    if (!api) {
+      if (btcDetectedEl) btcDetectedEl.textContent = "wallet adapter missing";
+      return [];
+    }
+    const detected = api.listDetected();
+    if (btcDetectedEl) {
+      btcDetectedEl.textContent = detected.length
+        ? detected.map((d) => d.label).join(", ")
+        : "none - install Xverse / UniSat / Leather / OKX / Phantom / Magic Eden";
+    }
+    return detected;
+  }
+
+  async function btcConnectFlow() {
+    const api = window.OracleBitcoinWallets;
+    if (!api) {
+      btcWalletState.textContent = "Bitcoin wallet adapter failed to load.";
+      return;
+    }
+    btcConnectBtn.disabled = true;
+    btcWalletState.textContent = "Requesting Bitcoin wallet.";
+    try {
+      btcSession = await api.connect();
+      btcWalletState.textContent = `BTC connected: ${btcSession.walletLabel}`;
+      btcWalletLabel.textContent = btcSession.walletLabel;
+      btcAddressEl.textContent = btcSession.address;
+      btcPanel.hidden = false;
+      btcPanelStatus.textContent =
+        "Connected. Signing stays in your wallet (signPsbt). Oracle only reads + broadcasts user-signed hex.";
+      refreshBtcDetected();
+    } catch (err) {
+      btcWalletState.textContent = `BTC connect failed: ${err.message}`;
+      btcPanelStatus.textContent = err.message;
+    } finally {
+      btcConnectBtn.disabled = false;
+    }
+  }
+
+  if (btcConnectBtn) {
+    btcConnectBtn.addEventListener("click", () => {
+      btcConnectFlow();
+    });
+    refreshBtcDetected();
+    if (!refreshBtcDetected().length) {
+      btcWalletState.textContent = "No Bitcoin wallet detected yet.";
+    }
+  }
+
+  if (!hasInjectedWallet()) {
+    walletState.textContent = "Connect an EVM wallet to continue.";
+  }
+})();

package/public/oracle-console/bitcoin-wallets.js

@@ -0,0 +1,206 @@
+// Multi-wallet Bitcoin connector for Oracle Console.
+// Injected providers only - no npm wallet SDK required in the static console.
+// Supported: Xverse, UniSat, Leather, OKX, Phantom, Magic Eden, generic.
+// Signing: PSBT stays in the wallet. Oracle never sees private keys.
+
+(function (root) {
+  "use strict";
+
+  const WALLETS = [
+    {
+      id: "unisat",
+      label: "UniSat",
+      detect: () => window.unisat,
+      async connect(provider) {
+        const accounts = await provider.requestAccounts();
+        const address = accounts && accounts[0];
+        if (!address) throw new Error("UniSat returned no address");
+        const network = (await provider.getNetwork?.()) || "livenet";
+        return { address, network, provider };
+      },
+      async signPsbt(provider, psbtHex, options = {}) {
+        return provider.signPsbt(psbtHex, options);
+      },
+      async pushPsbt(provider, psbtHex) {
+        if (typeof provider.pushPsbt === "function") return provider.pushPsbt(psbtHex);
+        throw new Error("UniSat pushPsbt unavailable - use Oracle broadcast with raw hex");
+      },
+    },
+    {
+      id: "okx",
+      label: "OKX",
+      detect: () => window.okxwallet && window.okxwallet.bitcoin,
+      async connect(provider) {
+        const result = await provider.connect();
+        const address = result?.address || result?.addresses?.[0] || (Array.isArray(result) && result[0]);
+        if (!address) throw new Error("OKX returned no address");
+        return { address, network: result?.network || "livenet", provider };
+      },
+      async signPsbt(provider, psbtHex, options = {}) {
+        return provider.signPsbt(psbtHex, options);
+      },
+      async pushPsbt(provider, psbtHex) {
+        if (typeof provider.pushPsbt === "function") return provider.pushPsbt(psbtHex);
+        throw new Error("OKX pushPsbt unavailable - use Oracle broadcast with raw hex");
+      },
+    },
+    {
+      id: "xverse",
+      label: "Xverse",
+      detect: () =>
+        window.XverseProviders?.BitcoinProvider ||
+        window.BitcoinProvider ||
+        (window.xverse && window.xverse.bitcoin),
+      async connect(provider) {
+        // Sats Connect request shape when provider.request exists
+        if (typeof provider.request === "function") {
+          const res = await provider.request("getAccounts", {
+            purposes: ["payment", "ordinals"],
+            message: "Connect to Oracle",
+          });
+          const arr = res?.result || res;
+          const payment = Array.isArray(arr) ? arr.find((a) => a.purpose === "payment") || arr[0] : null;
+          const address = payment?.address || payment;
+          if (!address) throw new Error("Xverse returned no address");
+          return { address, network: payment?.network || "Mainnet", provider };
+        }
+        if (typeof provider.connect === "function") {
+          const res = await provider.connect("Oracle");
+          const address = res?.addresses?.payment?.address || res?.paymentAddress || res?.address;
+          if (!address) throw new Error("Xverse returned no address");
+          return { address, network: res?.network || "Mainnet", provider };
+        }
+        throw new Error("Xverse provider has no connect/request method");
+      },
+      async signPsbt(provider, psbtBase64, options = {}) {
+        if (typeof provider.request === "function") {
+          const res = await provider.request("signPsbt", {
+            psbt: psbtBase64,
+            allowedSignHash: options.allowedSignHash,
+            signInputs: options.signInputs,
+            broadcast: false,
+          });
+          return res?.result?.psbt || res?.psbt || res;
+        }
+        if (typeof provider.signPsbt === "function") {
+          return provider.signPsbt(psbtBase64, options);
+        }
+        throw new Error("Xverse signPsbt unavailable");
+      },
+      async pushPsbt() {
+        throw new Error("Xverse: finalize in wallet or broadcast raw hex via Oracle");
+      },
+    },
+    {
+      id: "leather",
+      label: "Leather",
+      detect: () => window.LeatherProvider || window.HiroWalletProvider || window.btc,
+      async connect(provider) {
+        if (typeof provider.request === "function") {
+          const res = await provider.request("getAddresses");
+          const addrs = res?.result?.addresses || res?.addresses || [];
+          const payment = addrs.find((a) => a.type === "p2wpkh" || a.symbol === "BTC") || addrs[0];
+          const address = payment?.address;
+          if (!address) throw new Error("Leather returned no address");
+          return { address, network: payment?.network || "mainnet", provider };
+        }
+        throw new Error("Leather provider has no request method");
+      },
+      async signPsbt(provider, psbtBase64, options = {}) {
+        const res = await provider.request("signPsbt", {
+          hex: options.hex || undefined,
+          base64: psbtBase64,
+          broadcast: false,
+          ...options,
+        });
+        return res?.result?.hex || res?.result?.base64 || res?.hex || res;
+      },
+      async pushPsbt() {
+        throw new Error("Leather: broadcast raw hex via Oracle");
+      },
+    },
+    {
+      id: "phantom",
+      label: "Phantom",
+      detect: () => window.phantom && window.phantom.bitcoin,
+      async connect(provider) {
+        const res = await provider.requestAccounts();
+        const address = res?.[0]?.address || res?.[0];
+        if (!address) throw new Error("Phantom returned no BTC address");
+        return { address, network: "mainnet", provider };
+      },
+      async signPsbt(provider, psbtHex, options = {}) {
+        const res = await provider.signPSBT(Buffer.from(psbtHex, "hex"), options);
+        return res;
+      },
+      async pushPsbt() {
+        throw new Error("Phantom: broadcast raw hex via Oracle");
+      },
+    },
+    {
+      id: "magic-eden",
+      label: "Magic Eden",
+      detect: () => window.magicEden && window.magicEden.bitcoin,
+      async connect(provider) {
+        const res = await provider.connect();
+        const address = res?.address || res?.ordinals?.address || res?.payment?.address;
+        if (!address) throw new Error("Magic Eden returned no address");
+        return { address, network: "mainnet", provider };
+      },
+      async signPsbt(provider, psbt, options = {}) {
+        return provider.signPsbt(psbt, options);
+      },
+      async pushPsbt() {
+        throw new Error("Magic Eden: broadcast raw hex via Oracle");
+      },
+    },
+  ];
+
+  function listDetected() {
+    return WALLETS.filter((w) => {
+      try {
+        return !!w.detect();
+      } catch {
+        return false;
+      }
+    }).map((w) => ({ id: w.id, label: w.label }));
+  }
+
+  async function connect(preferredId) {
+    const detected = WALLETS.filter((w) => {
+      try {
+        return !!w.detect();
+      } catch {
+        return false;
+      }
+    });
+    if (!detected.length) {
+      throw new Error(
+        "No Bitcoin wallet detected. Install Xverse, UniSat, Leather, OKX, Phantom, or Magic Eden."
+      );
+    }
+    const wallet = (preferredId && detected.find((w) => w.id === preferredId)) || detected[0];
+    const provider = wallet.detect();
+    const session = await wallet.connect(provider);
+    return {
+      walletId: wallet.id,
+      walletLabel: wallet.label,
+      address: session.address,
+      network: session.network,
+      provider: session.provider,
+      wallet,
+    };
+  }
+
+  async function signPsbt(session, psbt, options = {}) {
+    if (!session?.wallet || !session?.provider) throw new Error("Bitcoin wallet not connected");
+    return session.wallet.signPsbt(session.provider, psbt, options);
+  }
+
+  root.OracleBitcoinWallets = {
+    listDetected,
+    connect,
+    signPsbt,
+    supported: WALLETS.map((w) => ({ id: w.id, label: w.label })),
+  };
+})(typeof window !== "undefined" ? window : globalThis);