@oracle-agent/oracle 0.14.1 → 0.15.0

package/scripts/secret-scan.mjs

@@ -1,169 +0,0 @@
-#!/usr/bin/env node
-// Pre-publication secret scan. Fails CLOSED: any hit is an error.
-//
-// Checks the working tree and every blob reachable from HEAD. Set
-// ORACLE_SCAN_ALL_REFS=1 for an explicit audit of every fetched ref.
-
-import { execFileSync } from "node:child_process";
-import { validateMnemonic } from "@scure/bip39";
-import { wordlist } from "@scure/bip39/wordlists/english";
-
-const ROOT = execFileSync("git", ["rev-parse", "--show-toplevel"], { cwd: process.cwd(), encoding: "utf8" }).trim();
-
-// Live values that must never appear. Sourced from the environment at scan
-// time so the scanner itself contains no secrets.
-function liveSecrets() {
-  const out = [];
-  const push = (label, value) => {
-    const v = String(value || "").trim();
-    if (v.length >= 8) out.push({ label, value: v });
-  };
-  for (const k of Object.keys(process.env)) {
-    if (/(_KEY|_SECRET|_TOKEN|_PASSPHRASE|_WIF|PRIVATE_KEY)$/i.test(k)) {
-      push(`env:${k}`, process.env[k]);
-    }
-  }
-  return out;
-}
-
-function isBip39Mnemonic(match) {
-  const words = match[0].trim().toLowerCase().split(/\s+/);
-  if (words.length !== 12 && words.length !== 24) return false;
-  return validateMnemonic(words.join(" "), wordlist);
-}
-
-const PATTERNS = [
-  { name: "private key (hex 64)", re: /\b(?:0x)?[0-9a-fA-F]{64}\b/, refine: (m, line) =>
-      /priv|secret|wif|seed|mnemonic|signer|wallet/i.test(line) && !/hash|digest|sha256|txid|commit|blob|sha1|0x0{40,}/i.test(line) },
-  { name: "BTC WIF", re: /\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/ },
-  { name: "BIP39 seed phrase", re: /\b(?:[a-z]{3,8} ){11}(?:[a-z]{3,8})\b|\b(?:[a-z]{3,8} ){23}(?:[a-z]{3,8})\b/i, refine: isBip39Mnemonic },
-  { name: "AWS access key", re: /\bAKIA[0-9A-Z]{16}\b/ },
-  { name: "OpenAI key", re: /\bsk-[A-Za-z0-9_-]{20,}\b/ },
-  { name: "Anthropic key", re: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/ },
-  { name: "GitHub token", re: /\bgh[pousr]_[A-Za-z0-9]{36,}\b/ },
-  { name: "Slack token", re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/ },
-  { name: "Telegram bot token", re: /\b\d{8,10}:[A-Za-z0-9_-]{35}\b/ },
-  { name: "PEM private key", re: /-----BEGIN (?:RSA |EC |OPENSSH |PGP )?PRIVATE KEY-----/ },
-  { name: "Solana keypair array", re: /\[\s*(?:\d{1,3}\s*,\s*){63}\d{1,3}\s*\]/ },
-];
-
-// Paths whose matches are known-safe test fixtures.
-const ALLOWED_PATHS = [
-  /^scripts\/secret-scan\.mjs$/,
-  /^package-lock\.json$/,
-];
-
-// Literal strings that are documented, synthetic, or public by nature.
-const ALLOWED_VALUES = [
-  "0x0123456789012345678901234567890123456789012345678901234567890123", // HL SDK public test vector
-  "L1aW4aubDFB7yfras2S1mN3bqg9nwySY8nkoLmJebSLD5BWv3ENZ",
-  "/-----BEGIN[A-Z ]*PRIVATE KEY-----/",
-  '{ value: "-----BEGIN EC PRIVATE KEY-----" }',
-  "0x0000000000000000000000000000000000000000",
-];
-
-const PUBLIC_EMAIL_RE = /^(?:[0-9]+\+)?[a-z0-9_.-]+\[?bot\]?@users\.noreply\.github\.com$|^oracle@users\.noreply\.github\.com$|^noreply@github\.com$/i;
-const PRIVATE_EMAIL_RE = /@(gmail|icloud|me|yahoo|outlook|hotmail|protonmail)\.com$|@(local|gmk)$|^fleet@|^agent@/i;
-const HISTORY_SCOPE = process.env.ORACLE_SCAN_ALL_REFS === "1" ? "--all" : "HEAD";
-
-function sh(cmd, args) {
-  return execFileSync(cmd, args, { cwd: ROOT, encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
-}
-
-function redactSample(kind) {
-  return kind.startsWith("LIVE SECRET") ? "[REDACTED — real credential]" : "[REDACTED]";
-}
-
-function scanText(text, origin, findings) {
-  const lines = text.split("\n");
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    if (line.length > 4000) continue;
-    for (const p of PATTERNS) {
-      const m = p.re.exec(line);
-      if (!m) continue;
-      if (ALLOWED_VALUES.some((v) => line.includes(v))) continue;
-      if (p.refine && !p.refine(m, line)) continue;
-      findings.push({ origin, line: i + 1, kind: p.name, sample: redactSample(p.name) });
-    }
-    for (const s of LIVE) {
-      if (line.includes(s.value)) {
-        findings.push({ origin, line: i + 1, kind: `LIVE SECRET ${s.label}`, sample: redactSample("LIVE SECRET") });
-      }
-    }
-  }
-}
-
-function parseEmail(identity) {
-  const match = /<([^<>\s]+)>$/.exec(identity.trim());
-  return match ? match[1].toLowerCase() : "";
-}
-
-function scanIdentities(findings) {
-  const identities = new Set(sh("git", ["log", HISTORY_SCOPE, "--format=%an <%ae>|%cn <%ce>"]).split(/[\n|]/).filter(Boolean));
-  for (const identity of identities) {
-    const email = parseEmail(identity);
-    if (!email) continue;
-    if (PRIVATE_EMAIL_RE.test(email) || !PUBLIC_EMAIL_RE.test(email)) {
-      findings.push({ origin: "git-history", line: 0, kind: "non-public git identity", sample: "[REDACTED]" });
-    }
-  }
-  return identities;
-}
-
-const LIVE = liveSecrets();
-const findings = [];
-
-// --- 1. working tree (tracked files only) ---
-const tracked = sh("git", ["ls-files"]).split("\n").filter(Boolean);
-for (const rel of tracked) {
-  if (ALLOWED_PATHS.some((r) => r.test(rel))) continue;
-  let content;
-  try {
-    content = sh("git", ["show", `:${rel}`]);
-  } catch {
-    continue; // binary or unreadable
-  }
-  if (content.includes("\u0000")) continue;
-  scanText(content, rel, findings);
-}
-
-// --- 2. every blob in history ---
-const revs = sh("git", ["rev-list", HISTORY_SCOPE]).split("\n").filter(Boolean);
-const seen = new Set();
-let historyBlobs = 0;
-for (const rev of revs) {
-  const entries = sh("git", ["ls-tree", "-r", rev]).split("\n").filter(Boolean);
-  for (const entry of entries) {
-    const [meta, path] = entry.split("\t");
-    const sha = meta.split(/\s+/)[2];
-    if (!sha || seen.has(sha)) continue;
-    seen.add(sha);
-    if (ALLOWED_PATHS.some((r) => r.test(path))) continue;
-    let content;
-    try {
-      content = sh("git", ["cat-file", "-p", sha]);
-    } catch {
-      continue;
-    }
-    if (content.includes("\u0000")) continue;
-    historyBlobs++;
-    scanText(content, `history:${rev.slice(0, 8)}:${path}`, findings);
-  }
-}
-
-// --- 3. author identity leakage ---
-const identities = scanIdentities(findings);
-
-console.log(`scanned ${tracked.length} tracked files, ${historyBlobs} historical blobs, ${revs.length} commits`);
-console.log(`live env secrets checked: ${LIVE.length}`);
-console.log(`git identities checked: ${identities.size}`);
-
-if (findings.length) {
-  console.error(`\nFAIL — ${findings.length} finding(s):`);
-  for (const f of findings.slice(0, 40)) {
-    console.error(`  ${f.origin}:${f.line}  [${f.kind}]  ${f.sample}`);
-  }
-  process.exit(1);
-}
-console.log("\nPASS — no secrets found in tree or history");

package/scripts/smoke-dist-bins.mjs

@@ -1,89 +0,0 @@
-#!/usr/bin/env node
-// Spawn every published bin from the STAGED layout and fail on a startup crash.
-//
-// This gate exists because 0.12.0 shipped two bins that died at module load:
-// `oracle-data` read dist/package.json and `oracle init` read dist/profiles/,
-// neither of which exists once the package is staged. Nothing caught it because
-// verify-dist only compares export names, and every local run resolved the
-// source tree where ../package.json happens to be real. Only the staged layout
-// reproduces what a user installs, so the smoke has to run there.
-//
-//   node scripts/smoke-dist-bins.mjs <stage-dir>
-
-import { spawnSync } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
-import { join, resolve } from "node:path";
-
-const stage = resolve(process.argv[2] || ".publish-stage");
-const manifest = JSON.parse(readFileSync(join(stage, "package.json"), "utf8"));
-
-// Servers block forever on purpose; a bounded run that reaches "listening"
-// without crashing is the pass condition for those.
-const SERVER_BINS = new Set(["oracle-data", "oracle-public"]);
-const ARGS = { "oracle-upgrade": ["--json"] };
-const FATAL = /ENOENT|Cannot find module|ERR_MODULE_NOT_FOUND|is not a function|is not defined/;
-
-let failed = 0;
-for (const [name, target] of Object.entries(manifest.bin || {})) {
-  const entry = join(stage, target);
-  if (!existsSync(entry)) {
-    console.log(`  FAIL ${name.padEnd(18)} missing entry ${target}`);
-    failed += 1;
-    continue;
-  }
-  const args = ARGS[name] || ["--help"];
-  const run = spawnSync(process.execPath, [entry, ...args], {
-    encoding: "utf8",
-    timeout: SERVER_BINS.has(name) ? 6000 : 30000,
-    env: {
-      ...process.env,
-      // A server that binds a live port would collide with a real one.
-      ORACLE_DATA_PORT: "8791",
-      ORACLE_PUBLIC_PORT: "8792",
-    },
-  });
-  const output = `${run.stdout || ""}${run.stderr || ""}`;
-  const crashed = FATAL.test(output);
-  const died = !SERVER_BINS.has(name) && run.status === null && !run.error?.code?.includes("TIMEDOUT");
-  if (crashed || died) {
-    const first = output.split("\n").filter(Boolean).slice(0, 4).join(" | ").slice(0, 200);
-    console.log(`  FAIL ${name.padEnd(18)} ${first}`);
-    failed += 1;
-    continue;
-  }
-  console.log(`  OK   ${name.padEnd(18)} started clean`);
-}
-
-// Spawning each bin directly is NOT enough. The `oracle` dispatcher resolves
-// sibling bins through its own path helper, and that helper computed
-// `<root>/bin/` — correct in the source tree, absent in the bundle. So
-// `oracle-init` started clean while `oracle init` died with MODULE_NOT_FOUND
-// for every installer. Exercise the routed form too.
-const DISPATCHED = [
-  ["init", ["init"], /Cannot find module|MODULE_NOT_FOUND/],
-  ["scan", ["scan", "chains"], /Cannot find module|MODULE_NOT_FOUND/],
-  ["route", ["route"], /Cannot find module|MODULE_NOT_FOUND/],
-  ["upgrade", ["upgrade", "--json"], /Cannot find module|MODULE_NOT_FOUND/],
-  ["fees", ["fees", "status"], /Cannot find module|MODULE_NOT_FOUND/],
-];
-const dispatcher = join(stage, (manifest.bin || {}).oracle || "");
-for (const [label, argv, fatal] of DISPATCHED) {
-  const run = spawnSync(process.execPath, [dispatcher, ...argv], {
-    encoding: "utf8",
-    timeout: 45_000,
-    env: {
-      ...process.env,
-      ORACLE_FAKE_HOME: join(stage, ".smoke-home"),
-    },
-  });
-  const output = `${run.stdout || ""}${run.stderr || ""}`;
-  if (fatal.test(output)) {
-    console.log(`  FAIL oracle ${label.padEnd(11)} ${output.split("\n").filter(Boolean).slice(0, 3).join(" | ").slice(0, 200)}`);
-    failed += 1;
-    continue;
-  }
-  console.log(`  OK   oracle ${label.padEnd(11)} dispatched clean`);
-}
-
-console.log(`\n${Object.keys(manifest.bin || {}).length} bins + ${DISPATCHED.length} dispatched commands, ${failed} broken`);
-process.exitCode = failed ? 1 : 0;

package/scripts/verify-dist.mjs

@@ -1,29 +0,0 @@
-// Smoke-test the bundled dist against the real package surface.
-import { readFileSync } from "node:fs";
-
-const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url)));
-const rows = [];
-
-for (const [name, target] of Object.entries(pkg.exports || {})) {
-  if (typeof target !== "string" || !target.startsWith("./src/")) continue;
-  const distPath = "../dist/" + target.replace(/^\.\/src\//, "");
-  try {
-    const srcMod = await import(new URL(target.replace("./", "../"), import.meta.url).href);
-    const dstMod = await import(new URL(distPath, import.meta.url).href);
-    const s = Object.keys(srcMod).sort();
-    const d = Object.keys(dstMod).sort();
-    const missing = s.filter((k) => !d.includes(k));
-    rows.push({ name, src: s.length, dist: d.length, missing });
-  } catch (e) {
-    rows.push({ name, error: String(e.message).slice(0, 80) });
-  }
-}
-
-let bad = 0;
-for (const r of rows) {
-  if (r.error) { bad++; console.log(`  FAIL ${r.name.padEnd(20)} ${r.error}`); continue; }
-  if (r.missing.length) { bad++; console.log(`  FAIL ${r.name.padEnd(20)} missing: ${r.missing.join(",")}`); continue; }
-  console.log(`  OK   ${r.name.padEnd(20)} ${r.dist} exports match`);
-}
-console.log(`\n${rows.length} entry points, ${bad} broken`);
-process.exitCode = bad ? 1 : 0;

package/scripts/verify-v3-venues.mjs

@@ -1,233 +0,0 @@
-#!/usr/bin/env node
-// Functionally verify Uniswap V3 venue addresses on every chain.
-//
-// Codesize alone is NOT verification -- an unrelated contract also has bytecode, and
-// on Base the canonical mainnet addresses returned 2109 bytes for two different
-// contracts, which is exactly the kind of false positive a size check waves through.
-//
-// The real test is behavioural: ask the candidate quoter to price a pair we already
-// know the answer to. A contract that returns a sane WETH->USDC quote at a standard
-// fee tier IS a working V3 quoter, regardless of what any doc claims.
-//
-// Output is a provenance record per chain, ready to paste into chains.config.mjs.
-
-import { rpcCall } from "../src/data/providers/evm-rpc.mjs";
-
-// Candidates. Most chains share the canonical deployment; Base, BSC and Avalanche
-// have their own. All of these are CANDIDATES until the probe passes.
-const CANONICAL_QUOTER = "0x61fFE014bA17989E743c5F6cB21bF9697530B21e";
-const CANONICAL_ROUTER = "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45";
-
-const CANDIDATES = {
-  1: {
-    name: "ethereum",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2", // WETH
-    tokenOut: "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48", // USDC
-    decIn: 18,
-    decOut: 6,
-  },
-  10: {
-    name: "optimism",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0x4200000000000000000000000000000000000006",
-    tokenOut: "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
-    decIn: 18,
-    decOut: 6,
-  },
-  56: {
-    name: "bsc",
-    quoter: "0x78D78E420Da98ad378D7799bE8f4AF69033EB077",
-    router: "0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",
-    tokenIn: "0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c", // WBNB
-    tokenOut: "0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d", // USDC (18dp on BSC)
-    decIn: 18,
-    decOut: 18,
-  },
-  137: {
-    name: "polygon",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270", // WMATIC
-    tokenOut: "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359", // USDC native
-    decIn: 18,
-    decOut: 6,
-  },
-  8453: {
-    name: "base",
-    quoter: "0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",
-    router: "0x2626664c2603336E57B271c5C0b26F421741e481",
-    tokenIn: "0x4200000000000000000000000000000000000006",
-    tokenOut: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
-    decIn: 18,
-    decOut: 6,
-  },
-  42161: {
-    name: "arbitrum",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",
-    tokenOut: "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
-    decIn: 18,
-    decOut: 6,
-  },
-  // HyperEVM 999 is a FORK deployment (HyperSwap), not the canonical Uniswap
-  // addresses -- which is exactly why it sat fail-closed: it was never in this
-  // map, so it was never tested, and "untested" printed the same as "broken".
-  999: {
-    name: "hyperevm",
-    quoter: "0x03A918028f22D9E1473B7959C927AD7425A45C7C",
-    router: "0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",
-    tokenIn: "0x5555555555555555555555555555555555555555", // WHYPE
-    tokenOut: "0xB8CE59FC3717ada4C02eaDF9682A9e934F625ebb", // USDT0
-    decIn: 18,
-    decOut: 6,
-  },
-  // Stable 988 is a CANONICAL deployment (Official Uniswap v3 Deployments List,
-  // 2026-05-12) but was never in this map either. Pair is thin, so amountIn is
-  // sized up: 1 TOAST rounds to zero out, 10000 does not.
-  988: {
-    name: "stable",
-    quoter: "0xb070179E7032CdA868b53e6C1742F80c9e940d1A",
-    router: "0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",
-    tokenIn: "0x817997Ca8394E26CCE3dE3A076a4889b27DbF9dE", // WgUSDT
-    tokenOut: "0xd9c2E67afbc787ba9C7a886dd09947c127D3cC0d", // LEVCAT
-    decIn: 18,
-    decOut: 18,
-    feeTiers: [100],
-    // Deepest live pool on this chain (liquidity 1.41e24). An earlier candidate
-    // (TOAST/USDT0) drained from 1.4e19 to 0 mid-verification, so pick on depth.
-  },
-  // Abstract 2741 is a ZK-stack chain: canonical Uniswap addresses do not exist
-  // here (codesize 0), which is why probing them made it look like Abstract had
-  // no V3 at all. These are the real deployment, found from live swap traffic.
-  2741: {
-    name: "abstract",
-    quoter: "0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",
-    router: "0x7712FA47387542819d4E35A23f8116C90C18767C",
-    tokenIn: "0x3439153EB7AF838Ad19d56E1571FBD09333C2809", // WETH
-    tokenOut: "0x84A71ccD554Cc1b02749b35d22F684CC8ec987e1", // USDC.e
-    decIn: 18,
-    decOut: 6,
-    feeTiers: [500],
-  },
-  43114: {
-    name: "avalanche",
-    quoter: "0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",
-    router: "0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",
-    tokenIn: "0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7", // WAVAX
-    tokenOut: "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E", // USDC
-    decIn: 18,
-    decOut: 6,
-  },
-};
-
-const FEE_TIERS = [500, 3000, 10000];
-
-const word = (v) => BigInt(v).toString(16).padStart(64, "0");
-const addrWord = (a) => a.slice(2).toLowerCase().padStart(64, "0");
-
-// QuoterV2.quoteExactInputSingle((address,address,uint256,uint24,uint160))
-// selector 0xc6a5026a -- struct is encoded inline as 5 words.
-function encodeQuote({ tokenIn, tokenOut, amountIn, fee }) {
-  return (
-    "0xc6a5026a" +
-    addrWord(tokenIn) +
-    addrWord(tokenOut) +
-    word(amountIn) +
-    word(fee) +
-    word(0) // sqrtPriceLimitX96 = 0 (no limit)
-  );
-}
-
-async function codesize(chainId, address) {
-  const r = await rpcCall(chainId, "eth_getCode", [address, "latest"]).catch(() => null);
-  const raw = r?.result ?? r;
-  return raw && raw !== "0x" ? (raw.length - 2) / 2 : 0;
-}
-
-async function probe(chainId, cfg) {
-  const result = {
-    chainId: Number(chainId),
-    name: cfg.name,
-    quoter: cfg.quoter,
-    router: cfg.router,
-    quoterCodesize: 0,
-    routerCodesize: 0,
-    workingFeeTier: null,
-    quotedOut: null,
-    humanPrice: null,
-    verdict: "FAIL",
-    reason: "",
-  };
-
-  result.quoterCodesize = await codesize(chainId, cfg.quoter);
-  result.routerCodesize = await codesize(chainId, cfg.router);
-
-  if (!result.quoterCodesize || !result.routerCodesize) {
-    result.reason = "no bytecode at candidate address on this chain";
-    return result;
-  }
-
-  // Behavioural probe: does it actually price a pair we can sanity-check?
-  const units = cfg.amountIn ?? 1n;
-  const amountIn = units * 10n ** BigInt(cfg.decIn);
-  for (const fee of cfg.feeTiers ?? FEE_TIERS) {
-    const data = encodeQuote({
-      tokenIn: cfg.tokenIn,
-      tokenOut: cfg.tokenOut,
-      amountIn,
-      fee,
-    });
-    const r = await rpcCall(chainId, "eth_call", [{ to: cfg.quoter, data }, "latest"]).catch(
-      () => null,
-    );
-    const raw = r?.result ?? r;
-    if (!raw || raw === "0x" || raw.length < 66) continue;
-
-    const out = BigInt(`0x${raw.slice(2, 66)}`);
-    if (out === 0n) continue;
-
-    result.workingFeeTier = fee;
-    result.quotedOut = out.toString();
-    result.humanPrice = Number(out) / 10 ** cfg.decOut;
-    break;
-  }
-
-  if (result.workingFeeTier == null) {
-    result.reason = "bytecode present but no fee tier returned a quote -- not a working V3 quoter";
-    return result;
-  }
-
-  // Sanity band. A working quoter on a major pair should land in a plausible range;
-  // a wildly wrong number means we are talking to the wrong contract or decoding it
-  // wrong, and either way it must not be allowlisted.
-  if (result.humanPrice <= 0 || !Number.isFinite(result.humanPrice)) {
-    result.reason = `implausible quote ${result.humanPrice}`;
-    return result;
-  }
-
-  result.verdict = "PASS";
-  result.reason =
-    `quoteExactInputSingle at fee ${result.workingFeeTier} returned ` +
-    `${result.humanPrice} for 1 unit in -- a live, working V3 quote`;
-  return result;
-}
-
-const out = [];
-for (const [chainId, cfg] of Object.entries(CANDIDATES)) {
-  const r = await probe(chainId, cfg);
-  out.push(r);
-  const line =
-    `${r.name.padEnd(10)} ${r.verdict.padEnd(5)} ` +
-    `quoter=${String(r.quoterCodesize).padStart(6)} router=${String(r.routerCodesize).padStart(6)} ` +
-    (r.workingFeeTier ? `fee=${String(r.workingFeeTier).padStart(5)} price=${r.humanPrice}` : r.reason);
-  console.log(line);
-}
-
-console.log(`\n${out.filter((r) => r.verdict === "PASS").length}/${out.length} chains verified`);
-if (process.argv.includes("--json")) {
-  console.log(JSON.stringify(out, null, 2));
-}

package/skins/oracle.yaml

@@ -1,56 +0,0 @@
-name: oracle
-description: filled lowercase oracle in the classic boxed layout
-colors:
-  banner_border: "#455867"
-  banner_title: "#B8F0FF"
-  banner_accent: "#91C2D7"
-  banner_dim: "#60717F"
-  banner_text: "#EAF2F8"
-  ui_accent: "#B8F0FF"
-  ui_label: "#A5D9EB"
-  ui_ok: "#7EE7B5"
-  ui_error: "#FF7B7B"
-  ui_warn: "#F0C674"
-  prompt: "#B8F0FF"
-  input_rule: "#455867"
-  response_border: "#91C2D7"
-  status_bar_bg: "#11161B"
-  status_bar_text: "#91A2B1"
-  status_bar_strong: "#EAF2F8"
-  status_bar_dim: "#60717F"
-  status_bar_good: "#7EE7B5"
-  status_bar_warn: "#F0C674"
-  status_bar_bad: "#FF9B71"
-  status_bar_critical: "#FF7B7B"
-  session_label: "#B8F0FF"
-  session_border: "#455867"
-  voice_status_bg: "#11161B"
-  selection_bg: "#23313B"
-  completion_menu_bg: "#11161B"
-  completion_menu_current_bg: "#23313B"
-  completion_menu_meta_bg: "#11161B"
-  completion_menu_meta_current_bg: "#23313B"
-spinner:
-  waiting_faces: ["·", "··", "···"]
-  thinking_faces: ["◇", "◈", "◆", "◈"]
-  thinking_verbs: ["thinking", "reading", "checking", "routing"]
-  wings: [["", ""]]
-branding:
-  agent_name: "oracle"
-  welcome: ""
-  goodbye: "exit"
-  response_label: " oracle "
-  prompt_symbol: "›"
-  help_header: "oracle"
-tool_prefix: "│"
-banner_logo: |
-  [bold #B8F0FF]                                       ████[/]
-  [bold #B8F0FF]                                      ░░███[/]
-  [bold #ACDEEF]  ██████  ████████   ██████    ██████  ░███   ██████[/]
-  [bold #A5D9EB] ███░░███░░███░░███ ░░░░░███  ███░░███ ░███  ███░░███[/]
-  [bold #9FCBDD]░███ ░███ ░███ ░░░   ███████ ░███ ░░░  ░███ ░███████[/]
-  [bold #9FCBDD]░███ ░███ ░███      ███░░███ ░███  ███ ░███ ░███░░░[/]
-  [bold #ACDEEF]░░██████  █████    ░░████████░░██████  █████░░██████[/]
-  [bold #B8F0FF] ░░░░░░  ░░░░░      ░░░░░░░░  ░░░░░░  ░░░░░  ░░░░░░[/]
-banner_hero: |
-  [bold #EAF2F8]THE FUTURE IS AGENTIC[/]