@oracle-agent/oracle 0.20.0 → 0.20.3

package/dist/cli/commands/sign.mjs

@@ -1,25 +1,37 @@
-var _={name:"sign",summary:"provision / check / import local signer keys",group:"sign",usage:"oracle sign <init|doctor|import> ...",async run(e){let o=e.argv[0];if(o==="init")return e.dispatchOperator("oracle-agentic-init",e.argv.slice(1),{appendHintOnError:!0});if(o==="doctor")return e.dispatchOperator("oracle-agentic-doctor",e.argv.slice(1),{appendHintOnError:!0});if(o==="import"){let{createInterface:g}=await import("node:readline"),{writeFileSync:n,mkdirSync:u,existsSync:l,unlinkSync:c,readFileSync:f,statSync:y}=await import("node:fs"),{join:i,parse:t}=await import("node:path"),{homedir:m,platform:$}=await import("node:os"),p=process.env.ORACLE_CONFIG_DIR||i(m(),".config","oracle"),v=i(p,"keys"),r=i(v,"evm.json"),s=e.argv.includes("--keyfile")?e.argv[e.argv.indexOf("--keyfile")+1]:null;if(s){if(!l(s))return process.stderr.write(`oracle sign: ${s} not found
-`),1;let a=f(s,"utf8").trim(),d=a.startsWith("{")&&JSON.parse(a).key||a;if(!d.startsWith("0x")||d.length<64)return process.stderr.write(`oracle sign: invalid private key in file
-`),1;if(l(r))return process.stderr.write(`oracle sign: ${r} already exists
-`),1;u(v,{recursive:!0,mode:448}),n(r,JSON.stringify({key:d},null,2)+`
-`,{mode:384}),process.stderr.write(`Saved to ${r} (0600)
-`);try{try{n(s,Buffer.alloc(y(s).size,0))}catch{}c(s)}catch{}let h=i(p,"exec.env");return n(h,`ORACLE_EXEC_ENABLED=1
-`,"utf8"),process.stderr.write(`Armed: ${h}
-`),await S(p,r),0}let E=g({input:process.stdin,output:process.stderr}),O=a=>new Promise(d=>E.question(a,d));process.stderr.write(`
+var D=Object.defineProperty;var J=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var B=(e,t)=>{for(var r in t)D(e,r,{get:t[r],enumerable:!0})};var I={};B(I,{OPERATOR_BIN_NAMES:()=>h,OPERATOR_NOT_INSTALLED_MESSAGE:()=>w,SIGN_HINT:()=>S,SIGN_NOUNS:()=>N,default:()=>U,dispatchOperator:()=>$,printOperatorNotInstalled:()=>_,resolveOperator:()=>j});import g from"node:fs";import a from"node:path";import{spawnSync as H}from"node:child_process";import{createRequire as M}from"node:module";import{fileURLToPath as q}from"node:url";function A(e){let t={};for(let r of h){let n=[a.join(e,r),a.join(e,`${r}.mjs`),a.join(e,`${r}.js`)];for(let o of n)if(g.existsSync(o)&&g.statSync(o).isFile()){t[r]=o;break}}return t}function W(e){let t=a.dirname(e);for(;t!==a.dirname(t);){let r=a.join(t,"package.json");if(g.existsSync(r))try{let n=JSON.parse(g.readFileSync(r,"utf8"));if(n.name==="@oracle-agent/operator")return{root:t,pkg:n}}catch{}t=a.dirname(t)}return null}function z(e){for(let t of e)try{let r=M(a.join(t,"package.json")),n;try{let s=r.resolve("@oracle-agent/operator/package.json");n={root:a.dirname(s),pkg:JSON.parse(g.readFileSync(s,"utf8"))}}catch{let s=r.resolve("@oracle-agent/operator");n=W(s)}if(!n)continue;let{root:o,pkg:i}=n,p=i.bin||{},l={};for(let[s,c]of Object.entries(p))l[s]=a.resolve(o,c);let f=A(a.join(o,"bin"));for(let[s,c]of Object.entries(f))l[s]||(l[s]=c);return{ok:!0,binDir:a.join(o,"bin"),version:i.version||"unknown",bins:l,source:`require:${t}`}}catch{}return null}function j(){if(process.env.ORACLE_PUBLIC_DESKTOP==="1")return{ok:!1,source:"public-desktop"};let e=process.env.ORACLE_OPERATOR_BIN_DIR;if(e){let r=a.resolve(e);if(!g.existsSync(r))return{ok:!1};let n=A(r);if(!Object.keys(n).length)return{ok:!1};let o="unknown",i=a.resolve(r,"../package.json");if(g.existsSync(i))try{o=JSON.parse(g.readFileSync(i,"utf8")).version||o}catch{}return{ok:!0,binDir:r,version:o,bins:n,source:"env:ORACLE_OPERATOR_BIN_DIR"}}return z([process.cwd(),K])||{ok:!1}}function _(e=process.stderr){e.write(w),w.endsWith(`
+`)||e.write(`
+`)}function $(e,t=[],r={}){let n=j();if(!n.ok)return _(r.stderr||process.stderr),3;let o=n.bins[e];if(!o)return(r.stderr||process.stderr).write(`oracle: operator bin '${e}' not found in resolved operator (${n.source})
+`),3;let i=r.stdio||"inherit",p=/\.(mjs|cjs|js)$/.test(o),l=p?process.execPath:o,f=p?[o,...t]:[...t],s=H(l,f,{stdio:i,env:r.env||process.env,cwd:r.cwd||process.cwd(),encoding:i==="pipe"?"utf8":void 0});if(s.error)return(r.stderr||process.stderr).write(`oracle: failed to spawn ${e}: ${s.error.message}
+`),1;let c=typeof s.status=="number"?s.status:1;return c!==0&&r.appendHintOnError&&(r.stderr||process.stderr).write(S+`
+`),i==="pipe"?{code:c,stdout:s.stdout||"",stderr:s.stderr||""}:c}var G,K,h,N,w,S,U,P=J(()=>{G=a.dirname(q(import.meta.url)),K=a.resolve(G,"../.."),h=Object.freeze(["oracle-vault","oracle-credential","oracle-signer","oracle-runner","oracle-agentic-init","oracle-agentic-doctor","oracle-control-mcp","oracle-operator-caps"]),N=Object.freeze(["vault","credential","signer","runner","sign"]),w=`oracle: signing is unavailable in the public package.
+
+  The public 'oracle' package is prepare-only and never handles keys.
+  Owner-operated signing is private infrastructure and has no public npm install.
+  Review and sign prepared artifacts in your own wallet instead.
+
+  Nothing about your read/research/prepare setup is affected.
+`,S="hint: run 'oracle sign init' to provision keys, or 'oracle sign doctor --json' for detail.";U={resolveOperator:j,dispatchOperator:$,printOperatorNotInstalled:_,OPERATOR_NOT_INSTALLED_MESSAGE:w,SIGN_HINT:S,SIGN_NOUNS:N,OPERATOR_BIN_NAMES:h}});var ne={name:"sign",summary:"check signer status (key handling requires the operator package)",group:"sign",usage:"oracle sign <init|doctor|import> ...",async run(e){let t=e.argv[0];if(t==="init")return e.dispatchOperator("oracle-agentic-init",e.argv.slice(1),{appendHintOnError:!0});if(t==="doctor")return e.dispatchOperator("oracle-agentic-doctor",e.argv.slice(1),{appendHintOnError:!0});if(t==="import"){let{resolveOperator:r,printOperatorNotInstalled:n}=await Promise.resolve().then(()=>(P(),I));if(!r().ok)return n(e.stderr||process.stderr),3;let{createInterface:o}=await import("node:readline"),{writeFileSync:i,mkdirSync:p,existsSync:l,unlinkSync:f,readFileSync:s,statSync:c}=await import("node:fs"),{join:d,parse:V}=await import("node:path"),{homedir:F,platform:Y}=await import("node:os"),v=process.env.ORACLE_CONFIG_DIR||d(F(),".config","oracle"),O=d(v,"keys"),u=d(O,"evm.json"),m=e.argv.includes("--keyfile")?e.argv[e.argv.indexOf("--keyfile")+1]:null;if(m){if(!l(m))return process.stderr.write(`oracle sign: ${m} not found
+`),1;let y=s(m,"utf8").trim(),k=y.startsWith("{")&&JSON.parse(y).key||y;if(!k.startsWith("0x")||k.length<64)return process.stderr.write(`oracle sign: invalid private key in file
+`),1;if(l(u))return process.stderr.write(`oracle sign: ${u} already exists
+`),1;p(O,{recursive:!0,mode:448}),i(u,JSON.stringify({key:k},null,2)+`
+`,{mode:384}),process.stderr.write(`Saved to ${u} (0600)
+`);try{try{i(m,Buffer.alloc(c(m).size,0))}catch{}f(m)}catch{}let R=d(v,"exec.env");return i(R,`ORACLE_EXEC_ENABLED=1
+`,"utf8"),process.stderr.write(`Armed: ${R}
+`),await L(v,u),0}let b=o({input:process.stdin,output:process.stderr}),C=y=>new Promise(k=>b.question(y,k));process.stderr.write(`
 Your key stays local \u2014 Oracle never sends it anywhere.
 `),process.stderr.write(`Paste your EVM private key (0x...):
-> `);let x=await O("");E.close();let w=x.trim();if(!w.startsWith("0x")||w.length<64)return process.stderr.write(`oracle sign: invalid private key \u2014 must be 0x-prefixed hex
-`),1;if(l(r))return process.stderr.write(`oracle sign: ${r} already exists \u2014 remove it first or use 'oracle sign doctor'
-`),1;u(v,{recursive:!0,mode:448}),n(r,JSON.stringify({key:w},null,2)+`
-`,{mode:384}),process.stderr.write(`Saved to ${r} (0600)
-`);let k=i(p,"exec.env");return n(k,`ORACLE_EXEC_ENABLED=1
-`,"utf8"),process.stderr.write(`Armed: ${k}
-`),await S(p,r),0}return process.stderr.write(`usage: oracle sign <init|doctor|import> ...
+> `);let T=await C("");b.close();let E=T.trim();if(!E.startsWith("0x")||E.length<64)return process.stderr.write(`oracle sign: invalid private key \u2014 must be 0x-prefixed hex
+`),1;if(l(u))return process.stderr.write(`oracle sign: ${u} already exists \u2014 remove it first or use 'oracle sign doctor'
+`),1;p(O,{recursive:!0,mode:448}),i(u,JSON.stringify({key:E},null,2)+`
+`,{mode:384}),process.stderr.write(`Saved to ${u} (0600)
+`);let x=d(v,"exec.env");return i(x,`ORACLE_EXEC_ENABLED=1
+`,"utf8"),process.stderr.write(`Armed: ${x}
+`),await L(v,u),0}return process.stderr.write(`usage: oracle sign <init|doctor|import> ...
   oracle sign init      provision keys + policy (interactive)
   oracle sign import    import an existing EVM private key
   oracle sign doctor    check local signer readiness
-`),1}};async function S(e,o){let{readFileSync:g,writeFileSync:n,existsSync:u}=await import("node:fs"),{join:l}=await import("node:path"),c=l(e,"signer.env"),f=u(c)?g(c,"utf8").split(`
-`):[],y=new Map(f.filter(t=>t.includes("=")).map(t=>t.split("=",2)));for(let t of["EVM_KEY_FILE","HL_KEY_FILE"])y.set(t,o);let i=[...y.entries()].map(([t,m])=>`${t}=${m}`).join(`
+`),1}};async function L(e,t){let{readFileSync:r,writeFileSync:n,existsSync:o}=await import("node:fs"),{join:i}=await import("node:path"),p=i(e,"signer.env"),l=o(p)?r(p,"utf8").split(`
+`):[],f=new Map(l.filter(c=>c.includes("=")).map(c=>c.split("=",2)));for(let c of["EVM_KEY_FILE","HL_KEY_FILE"])f.set(c,t);let s=[...f.entries()].map(([c,d])=>`${c}=${d}`).join(`
 `)+`
-`;n(c,i,"utf8"),process.stderr.write(`Wired ${o} into ${c}
-`)}export{_ as default};
+`;n(p,s,"utf8"),process.stderr.write(`Wired ${t} into ${p}
+`)}export{ne as default};