@oracle-agent/oracle 0.13.0 → 0.14.0

package/public/oracle-splash/mesh-graph.svg

@@ -0,0 +1,216 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1400 900" width="1400" height="900">
+  <defs>
+    <style>
+      @import url('https://fonts.googleapis.com/css2?family=Cormorant+Garamond:ital,wght@0,400;0,500;1,400;1,500&amp;family=Outfit:wght@300;400;500&amp;family=IBM+Plex+Mono:wght@400;500&amp;display=swap');
+    </style>
+    <radialGradient id="bg" cx="50%" cy="35%" r="70%">
+      <stop offset="0%" stop-color="#111925"/>
+      <stop offset="45%" stop-color="#0B1018"/>
+      <stop offset="100%" stop-color="#070b10"/>
+    </radialGradient>
+    <radialGradient id="orb1" cx="50%" cy="50%" r="50%">
+      <stop offset="0%" stop-color="#7CC4FF" stop-opacity="0.18"/>
+      <stop offset="55%" stop-color="#7CC4FF" stop-opacity="0.04"/>
+      <stop offset="100%" stop-color="#7CC4FF" stop-opacity="0"/>
+    </radialGradient>
+    <radialGradient id="orb2" cx="50%" cy="50%" r="50%">
+      <stop offset="0%" stop-color="#50D2C1" stop-opacity="0.10"/>
+      <stop offset="100%" stop-color="#50D2C1" stop-opacity="0"/>
+    </radialGradient>
+    <pattern id="grid" width="48" height="48" patternUnits="userSpaceOnUse">
+      <path d="M 48 0 L 0 0 0 48" fill="none" stroke="rgba(124,196,255,0.06)" stroke-width="1"/>
+    </pattern>
+    <linearGradient id="panelStroke" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="rgba(124,196,255,0.28)"/>
+      <stop offset="100%" stop-color="rgba(124,196,255,0.08)"/>
+    </linearGradient>
+    <linearGradient id="cardFill" x1="0%" y1="0%" x2="0%" y2="100%">
+      <stop offset="0%" stop-color="#152031"/>
+      <stop offset="100%" stop-color="#111925"/>
+    </linearGradient>
+    <filter id="softGlow" x="-50%" y="-50%" width="200%" height="200%">
+      <feGaussianBlur stdDeviation="8" result="b"/>
+      <feMerge>
+        <feMergeNode in="b"/>
+        <feMergeNode in="SourceGraphic"/>
+      </feMerge>
+    </filter>
+    <filter id="nodeGlow" x="-40%" y="-40%" width="180%" height="180%">
+      <feGaussianBlur stdDeviation="4" result="b"/>
+      <feMerge>
+        <feMergeNode in="b"/>
+        <feMergeNode in="SourceGraphic"/>
+      </feMerge>
+    </filter>
+    <marker id="ah-blue" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#7CC4FF"/>
+    </marker>
+    <marker id="ah-poly" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#3B82F6"/>
+    </marker>
+    <marker id="ah-hl" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#50D2C1"/>
+    </marker>
+    <marker id="ah-rh" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#d7ff4d"/>
+    </marker>
+    <marker id="ah-sol" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#9945FF"/>
+    </marker>
+    <marker id="ah-btc" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#F0B90B"/>
+    </marker>
+    <marker id="ah-mute" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#5B738F"/>
+    </marker>
+  </defs>
+
+  <!-- page bg -->
+  <rect width="1400" height="900" fill="url(#bg)"/>
+  <rect width="1400" height="900" fill="url(#grid)"/>
+  <ellipse cx="700" cy="420" rx="520" ry="280" fill="url(#orb1)"/>
+  <ellipse cx="980" cy="620" rx="280" ry="180" fill="url(#orb2)"/>
+
+  <!-- ========== brand top-left (oracle) ========== -->
+  <g id="brand">
+    <circle cx="52" cy="48" r="7" fill="#7CC4FF" filter="url(#softGlow)"/>
+    <circle cx="52" cy="48" r="3.2" fill="#0B1018"/>
+    <text x="70" y="54" fill="#E8F1FA" font-family="Outfit, system-ui, sans-serif" font-size="26" font-weight="400" letter-spacing="-0.3">oracle</text>
+    <text x="52" y="78" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.8">MULTI-PROFILE MESH  ·  POWERED BY HERMES</text>
+  </g>
+
+  <!-- right meta -->
+  <text x="1350" y="48" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="end" letter-spacing="1.5">FOR USERS</text>
+  <text x="1350" y="68" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="13" text-anchor="end">graph · customizable · add agents</text>
+
+  <!-- ========== main glass panel ========== -->
+  <rect x="48" y="110" width="1304" height="730" rx="22" fill="#111925" fill-opacity="0.72" stroke="url(#panelStroke)" stroke-width="1.2"/>
+  <!-- panel header bar -->
+  <rect x="48" y="110" width="1304" height="52" rx="22" fill="#152031" fill-opacity="0.9"/>
+  <rect x="48" y="140" width="1304" height="22" fill="#152031" fill-opacity="0.9"/>
+  <text x="72" y="142" fill="#7CC4FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="11" letter-spacing="1.6">FOR USERS</text>
+  <text x="700" y="142" fill="#9BB6D1" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="11" text-anchor="middle" letter-spacing="1.6">MULTI-PROFILE // CUSTOMIZABLE</text>
+  <text x="1328" y="142" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="11" text-anchor="end" letter-spacing="1.4">POWERED BY HERMES</text>
+
+  <!-- pills -->
+  <g font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.2">
+    <rect x="72" y="182" width="128" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="136" y="200" fill="#A7D8FF" text-anchor="middle">MULTI PROFILES</text>
+    <rect x="210" y="182" width="128" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="274" y="200" fill="#A7D8FF" text-anchor="middle">CUSTOMIZABLE</text>
+    <rect x="348" y="182" width="112" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="404" y="200" fill="#A7D8FF" text-anchor="middle">ADD AGENTS</text>
+    <rect x="470" y="182" width="118" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="529" y="200" fill="#A7D8FF" text-anchor="middle">MORE CHAINS</text>
+    <rect x="598" y="182" width="148" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="672" y="200" fill="#A7D8FF" text-anchor="middle">POWERED BY HERMES</text>
+  </g>
+
+  <!-- ========== connectors (behind nodes) ========== -->
+  <!-- input -> oracle -->
+  <line x1="700" y1="310" x2="700" y2="360" stroke="#7CC4FF" stroke-width="2.5" marker-end="url(#ah-blue)" filter="url(#nodeGlow)"/>
+  <line x1="700" y1="310" x2="700" y2="360" stroke="#7CC4FF" stroke-width="10" stroke-opacity="0.12"/>
+
+  <!-- oracle hub fan-out to profiles -->
+  <!-- poly left -->
+  <path d="M620 450 C560 450 420 450 280 520" fill="none" stroke="#3B82F6" stroke-width="2" marker-end="url(#ah-poly)"/>
+  <path d="M620 450 C560 450 420 450 280 520" fill="none" stroke="#3B82F6" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- hl center-left -->
+  <path d="M660 470 C640 500 560 520 500 560" fill="none" stroke="#50D2C1" stroke-width="2" marker-end="url(#ah-hl)"/>
+  <path d="M660 470 C640 500 560 520 500 560" fill="none" stroke="#50D2C1" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- rh center -->
+  <line x1="700" y1="470" x2="700" y2="560" stroke="#d7ff4d" stroke-width="2" marker-end="url(#ah-rh)"/>
+  <line x1="700" y1="470" x2="700" y2="560" stroke="#d7ff4d" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- sol center-right -->
+  <path d="M740 470 C760 500 840 520 900 560" fill="none" stroke="#9945FF" stroke-width="2" marker-end="url(#ah-sol)"/>
+  <path d="M740 470 C760 500 840 520 900 560" fill="none" stroke="#9945FF" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- btc right -->
+  <path d="M780 450 C860 450 1000 450 1120 520" fill="none" stroke="#F0B90B" stroke-width="2" marker-end="url(#ah-btc)"/>
+  <path d="M780 450 C860 450 1000 450 1120 520" fill="none" stroke="#F0B90B" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- builder bottom -->
+  <path d="M700 470 C700 510 700 640 700 680" fill="none" stroke="#5B738F" stroke-width="1.5" stroke-dasharray="4 4" marker-end="url(#ah-mute)"/>
+
+  <!-- ========== 01 INPUT / COMMAND ========== -->
+  <g filter="url(#nodeGlow)">
+    <rect x="575" y="230" width="250" height="80" rx="14" fill="url(#cardFill)" stroke="rgba(124,196,255,0.35)" stroke-width="1.2"/>
+    <text x="700" y="258" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="middle" letter-spacing="1.6">YOU</text>
+    <text x="700" y="282" fill="#E8F1FA" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500" text-anchor="middle">Input / Command</text>
+    <text x="700" y="300" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300" text-anchor="middle">what you type or ask</text>
+  </g>
+
+  <!-- ========== 02 CONTROL PLANE · oracle ========== -->
+  <g filter="url(#nodeGlow)">
+    <rect x="520" y="360" width="360" height="110" rx="16" fill="url(#cardFill)" stroke="rgba(124,196,255,0.45)" stroke-width="1.4"/>
+    <rect x="520" y="360" width="360" height="110" rx="16" fill="rgba(124,196,255,0.04)"/>
+    <text x="700" y="392" fill="#7CC4FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="middle" letter-spacing="1.8">CONTROL PLANE</text>
+    <text x="700" y="424" fill="#E8F1FA" font-family="Cormorant Garamond, Georgia, serif" font-size="34" font-weight="500" font-style="italic" text-anchor="middle">oracle</text>
+    <text x="700" y="450" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300" text-anchor="middle">route  ·  bound  ·  evolve</text>
+  </g>
+
+  <!-- ========== 03 PROFILE CARDS ========== -->
+  <!-- polymarket -->
+  <g>
+    <rect x="80" y="520" width="260" height="130" rx="16" fill="#111925" stroke="rgba(59,130,246,0.45)" stroke-width="1.2"/>
+    <rect x="80" y="520" width="260" height="130" rx="16" fill="rgba(59,130,246,0.06)"/>
+    <text x="100" y="548" fill="#3B82F6" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="100" y="578" fill="#A7D8FF" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">polymarket agent</text>
+    <text x="100" y="600" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">events · arb · markets</text>
+    <rect x="100" y="618" width="100" height="20" rx="10" fill="none" stroke="rgba(59,130,246,0.35)"/>
+    <text x="150" y="632" fill="#7CC4FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Polymarket</text>
+  </g>
+
+  <!-- hyperliquid -->
+  <g>
+    <rect x="370" y="560" width="260" height="130" rx="16" fill="#111925" stroke="rgba(80,210,193,0.45)" stroke-width="1.2"/>
+    <rect x="370" y="560" width="260" height="130" rx="16" fill="rgba(80,210,193,0.06)"/>
+    <text x="390" y="588" fill="#50D2C1" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="390" y="618" fill="#A8F0E6" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">hyperliquid agent</text>
+    <text x="390" y="640" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">perps · hip-3/4 · ta</text>
+    <rect x="390" y="658" width="170" height="20" rx="10" fill="none" stroke="rgba(80,210,193,0.35)"/>
+    <text x="475" y="672" fill="#50D2C1" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Hyperliquid · HyperEVM 999</text>
+  </g>
+
+  <!-- robinhood -->
+  <g>
+    <rect x="660" y="560" width="260" height="130" rx="16" fill="#111925" stroke="rgba(215,255,77,0.40)" stroke-width="1.2"/>
+    <rect x="660" y="560" width="260" height="130" rx="16" fill="rgba(215,255,77,0.05)"/>
+    <text x="680" y="588" fill="#d7ff4d" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="680" y="618" fill="#EAF7B0" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">robinhood agent</text>
+    <text x="680" y="640" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">markets · nfts · names</text>
+    <rect x="680" y="658" width="150" height="20" rx="10" fill="none" stroke="rgba(215,255,77,0.35)"/>
+    <text x="755" y="672" fill="#d7ff4d" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Robinhood Chain 4663</text>
+  </g>
+
+  <!-- solana -->
+  <g>
+    <rect x="950" y="560" width="200" height="130" rx="16" fill="#111925" stroke="rgba(153,69,255,0.45)" stroke-width="1.2"/>
+    <rect x="950" y="560" width="200" height="130" rx="16" fill="rgba(153,69,255,0.06)"/>
+    <text x="970" y="588" fill="#9945FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="970" y="618" fill="#D4B3FF" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">solana agent</text>
+    <text x="970" y="640" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">jup · nfts · dexs</text>
+    <rect x="970" y="658" width="70" height="20" rx="10" fill="none" stroke="rgba(153,69,255,0.35)"/>
+    <text x="1005" y="672" fill="#c4a0ff" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Solana</text>
+  </g>
+
+  <!-- bitcoin (top-right of profile row) -->
+  <g>
+    <rect x="1160" y="520" width="160" height="130" rx="16" fill="#111925" stroke="rgba(240,185,11,0.40)" stroke-width="1.2"/>
+    <rect x="1160" y="520" width="160" height="130" rx="16" fill="rgba(240,185,11,0.05)"/>
+    <text x="1180" y="548" fill="#F0B90B" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="1180" y="578" fill="#F8E29A" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">bitcoin</text>
+    <text x="1180" y="600" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">ord · runes</text>
+    <rect x="1180" y="618" width="50" height="20" rx="10" fill="none" stroke="rgba(240,185,11,0.35)"/>
+    <text x="1205" y="632" fill="#F0B90B" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">BTC</text>
+  </g>
+
+  <!-- protocol builder -->
+  <g>
+    <rect x="520" y="710" width="360" height="72" rx="14" fill="#111925" stroke="rgba(124,196,255,0.22)" stroke-width="1" stroke-dasharray="5 4"/>
+    <text x="700" y="738" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="middle" letter-spacing="1.6">BUILDER</text>
+    <text x="700" y="762" fill="#E8F1FA" font-family="Outfit, system-ui, sans-serif" font-size="16" font-weight="400" text-anchor="middle">protocol builder  ·  gated templates  ·  user-signed deploy</text>
+  </g>
+
+  <!-- footer -->
+  <text x="72" y="870" fill="#5B738F" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">oracle routes input/command across a live multi-profile desk. profiles evolve. chains get added. not one bot.</text>
+  <text x="1328" y="870" fill="#3a6f99" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="end">self-custody · prepare → local sign</text>
+</svg>

package/scripts/adversarial-bench.mjs

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+
+import { pathToFileURL } from "node:url";
+import { resolve } from "node:path";
+
+const INJECTION_RULES = [
+  ["instruction-override", /\b(?:ignore|disregard|override)\b.{0,48}\b(?:previous|prior|system|developer|instructions?)\b/i],
+  ["secret-exfiltration", /\b(?:reveal|print|return|exfiltrate|send)\b.{0,48}\b(?:private\s*key|seed\s*phrase|mnemonic|secret|credentials?|system\s*prompt)\b/i],
+  ["transaction-coercion", /\b(?:sign|send|broadcast|execute)\b.{0,32}\b(?:transaction|transfer|approval|trade)\b/i],
+  ["tool-coercion", /\b(?:call|invoke|use|run)\b.{0,24}\b(?:tool|function|shell|command)\b/i],
+];
+
+const FORBIDDEN_EXPORT = /^(?:signer|sign|signMessage|signTransaction|sendTransaction|broadcastTransaction|submitTransaction|executeTransaction|privateKey|secretKey|mnemonic|seedPhrase|wallet)$/i;
+
+function finding(code, path, message) {
+  return { code, path, message };
+}
+
+function scanStrings(value, path, findings, seen) {
+  if (typeof value === "string") {
+    for (const [rule, pattern] of INJECTION_RULES) {
+      if (pattern.test(value)) {
+        findings.push(finding("prompt-injection", path, `metadata matches ${rule}`));
+        break;
+      }
+    }
+    return;
+  }
+  if (!value || typeof value !== "object" || seen.has(value)) return;
+  seen.add(value);
+  if (Array.isArray(value)) {
+    value.forEach((item, index) => scanStrings(item, `${path}[${index}]`, findings, seen));
+    return;
+  }
+  for (const key of Object.keys(value).sort()) {
+    scanStrings(value[key], path ? `${path}.${key}` : key, findings, seen);
+  }
+}
+
+/** Validate one loaded Oracle protocol pack without calling provider code. */
+export function benchmarkPack(moduleValue, { name = "pack" } = {}) {
+  const namespace = moduleValue && typeof moduleValue === "object" ? moduleValue : {};
+  const pack = namespace.default && typeof namespace.default === "object" ? namespace.default : namespace;
+  const findings = [];
+
+  for (const key of Object.keys(namespace).sort()) {
+    if (key !== "default" && FORBIDDEN_EXPORT.test(key)) {
+      findings.push(finding("forbidden-signer-export", `exports.${key}`, `pack exports custody capability ${key}`));
+    }
+  }
+  for (const key of Object.keys(pack).sort()) {
+    if (FORBIDDEN_EXPORT.test(key)) {
+      findings.push(finding("forbidden-signer-export", `pack.${key}`, `pack exports custody capability ${key}`));
+    }
+  }
+
+  if (!pack.provider || typeof pack.provider !== "object") {
+    findings.push(finding("missing-provider", "pack.provider", "provider metadata is required"));
+  }
+  if (typeof pack.prepare !== "function") {
+    findings.push(finding("missing-prepare", "pack.prepare", "prepare must be a function"));
+  }
+  if (typeof pack.decode !== "function") {
+    findings.push(finding("missing-decoder", "pack.decode", "decode must be a function"));
+  }
+  if (!(Array.isArray(pack.riskRules) || typeof pack.riskRules === "function")) {
+    findings.push(finding("missing-risk-rules", "pack.riskRules", "riskRules must be an array or function"));
+  }
+  if (!pack.tests || typeof pack.tests !== "object" || Array.isArray(pack.tests) || Object.keys(pack.tests).length === 0) {
+    findings.push(finding("missing-tests", "pack.tests", "non-empty tests metadata is required"));
+  }
+
+  // Metadata is untrusted even when nested below token/NFT records. Scan data only;
+  // functions are deliberately never invoked by this local harness.
+  scanStrings(pack.metadata, "pack.metadata", findings, new Set());
+  scanStrings(pack.provider, "pack.provider", findings, new Set());
+
+  findings.sort((a, b) => `${a.code}\0${a.path}\0${a.message}`.localeCompare(`${b.code}\0${b.path}\0${b.message}`));
+  return { name, ok: findings.length === 0, findings };
+}
+
+/** Run a stable summary over already-loaded fixture/module records. */
+export function runAdversarialBenchmark(entries) {
+  const results = entries
+    .map((entry, index) => benchmarkPack(entry.module ?? entry, { name: entry.name ?? `pack-${index + 1}` }))
+    .sort((a, b) => a.name.localeCompare(b.name));
+  return {
+    ok: results.every((result) => result.ok),
+    packs: results.length,
+    passed: results.filter((result) => result.ok).length,
+    failed: results.filter((result) => !result.ok).length,
+    findings: results.reduce((count, result) => count + result.findings.length, 0),
+    results,
+  };
+}
+
+async function main(paths) {
+  if (paths.length === 0) throw new Error("usage: node scripts/adversarial-bench.mjs <pack.mjs> [...]");
+  const entries = [];
+  for (const input of paths) {
+    const absolute = resolve(input);
+    entries.push({ name: input, module: await import(pathToFileURL(absolute).href) });
+  }
+  const summary = runAdversarialBenchmark(entries);
+  process.stdout.write(`${JSON.stringify(summary, null, 2)}\n`);
+  if (!summary.ok) process.exitCode = 1;
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
+  main(process.argv.slice(2)).catch((error) => {
+    process.stdout.write(`${JSON.stringify({ ok: false, error: String(error.message || error) }, null, 2)}\n`);
+    process.exitCode = 2;
+  });
+}

package/scripts/build-dist.mjs

@@ -0,0 +1,119 @@
+#!/usr/bin/env node
+// Bundle the package for publish so `src/` never ships.
+//
+// Every public entry point (package.json "exports" + "bin") becomes its own
+// bundled file under dist/. Runtime dependencies stay external — we are hiding
+// OUR source, not vendoring ethers into the tarball.
+//
+// This is obfuscation, not a security boundary. It raises the cost of lifting
+// the provider/router/scanner work from "npm pack and read it" to "reverse a
+// minified bundle". The real boundary is that the signer never ships at all.
+
+import { build } from "esbuild";
+import { cpSync, readdirSync, readFileSync, writeFileSync, rmSync, mkdirSync, existsSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const DIST = join(ROOT, "dist");
+const pkg = JSON.parse(readFileSync(join(ROOT, "package.json"), "utf8"));
+
+const external = [
+  ...Object.keys(pkg.dependencies || {}),
+  ...Object.keys(pkg.peerDependencies || {}),
+];
+
+// src-relative entry -> dist-relative output, derived from the real manifest so
+// a new export can never silently ship unbundled.
+const entries = new Map();
+for (const [name, target] of Object.entries(pkg.exports || {})) {
+  if (typeof target !== "string" || !target.startsWith("./src/")) continue;
+  entries.set(target.slice(2), distPathFor(target, "exports", name));
+}
+for (const [name, target] of Object.entries(pkg.bin || {})) {
+  if (typeof target !== "string" || !target.startsWith("./bin/")) continue;
+  entries.set(target.slice(2), distPathFor(target, "bin", name));
+}
+
+const commandDir = join(ROOT, "src", "cli", "commands");
+for (const file of readdirSync(commandDir).filter((f) => f.endsWith(".mjs")).sort()) {
+  entries.set(join("src", "cli", "commands", file), join("cli", "commands", file));
+}
+
+function distPathFor(target, kind, name) {
+  const rel = target.replace(/^\.\/(src|bin)\//, "");
+  return kind === "bin" ? join("bin", rel) : rel;
+}
+
+if (existsSync(DIST)) rmSync(DIST, { recursive: true });
+mkdirSync(DIST, { recursive: true });
+
+const results = [];
+for (const [entry, outRel] of entries) {
+  const outfile = join(DIST, outRel);
+  mkdirSync(dirname(outfile), { recursive: true });
+  await build({
+    entryPoints: [join(ROOT, entry)],
+    outfile,
+    bundle: true,
+    platform: "node",
+    target: "node20",
+    format: "esm",
+    minify: true,
+    legalComments: "none",
+    external,
+    logLevel: "error",
+    // The CLI kernel loads user plugin files from disk at runtime; that import
+    // is intentionally dynamic and must stay unresolved.
+    // Bin entries already carry their own shebang in source — esbuild preserves
+    // it, so adding a banner here would emit a second one on line 2 and break
+    // the file. Only add it when the source genuinely lacks one.
+    banner:
+      outRel.startsWith("bin/") && !readFileSync(join(ROOT, entry), "utf8").startsWith("#!")
+        ? { js: "#!/usr/bin/env node" }
+        : undefined,
+  });
+  const bytes = readFileSync(outfile).byteLength;
+  results.push({ entry, outRel, bytes });
+}
+
+// Rewrite the published manifest to point at dist/ and ship no source.
+const out = structuredClone(pkg);
+out.exports = Object.fromEntries(
+  Object.entries(pkg.exports || {}).map(([k, v]) =>
+    typeof v === "string" && v.startsWith("./src/")
+      ? [k, "./dist/" + distPathFor(v, "exports", k)]
+      : [k, v],
+  ),
+);
+out.bin = Object.fromEntries(
+  Object.entries(pkg.bin || {}).map(([k, v]) =>
+    typeof v === "string" && v.startsWith("./bin/")
+      ? [k, "./dist/" + distPathFor(v, "bin", k)]
+      : [k, v],
+  ),
+);
+// Ship the bundle and the user-facing assets. Never src/, scripts/, skills/,
+// profiles/, docs/, examples/ — those are internal surface, not runtime need.
+out.files = ["dist/", "public/", "artifacts/", "README.md", "SETUP.md", "LICENSE", "SECURITY.md"];
+delete out.scripts;
+delete out.devDependencies;
+
+writeFileSync(join(DIST, "package.publish.json"), JSON.stringify(out, null, 2) + "\n");
+
+// Runtime data the bins read from disk. esbuild bundles code, not JSON assets,
+// so `oracle init` shipped without profiles/ and skills/ and crashed on ENOENT.
+// They land under dist/assets/ and src/package-manifest.mjs looks there first.
+const ASSET_DIRS = ["profiles", "skills"];
+for (const name of ASSET_DIRS) {
+  const from = join(ROOT, name);
+  if (!existsSync(from)) continue;
+  cpSync(from, join(DIST, "assets", name), { recursive: true });
+}
+
+const total = results.reduce((a, r) => a + r.bytes, 0);
+console.log(`bundled ${results.length} entry points -> dist/  (${(total / 1024).toFixed(0)} KB)`);
+for (const r of results.slice(0, 6)) {
+  console.log(`  ${r.outRel.padEnd(34)} ${(r.bytes / 1024).toFixed(0)} KB`);
+}
+if (results.length > 6) console.log(`  ... ${results.length - 6} more`);