@oracle-agent/oracle 0.20.3 → 0.22.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -5
- package/SETUP.md +11 -5
- package/dist/assets/profiles/robinhood-agent/SOUL.md +79 -10
- package/dist/assets/profiles/robinhood-agent/memory.json +34 -0
- package/dist/assets/skills/xurl.md +40 -0
- package/dist/bin/desk-server.mjs +19 -18
- package/dist/bin/oracle-data-mcp.mjs +7 -7
- package/dist/bin/oracle-gateway.mjs +17 -17
- package/dist/bin/oracle-public-server.mjs +4 -4
- package/dist/bin/oracle-route.mjs +22 -21
- package/dist/bin/oracle.mjs +21 -18
- package/dist/cli/commands/auth.mjs +14 -14
- package/dist/cli/commands/chain.mjs +13 -13
- package/dist/cli/commands/chat.mjs +138 -36
- package/dist/cli/commands/doctor.mjs +1 -1
- package/dist/cli/commands/harness.mjs +7 -7
- package/dist/cli/commands/init.mjs +3 -3
- package/dist/cli/commands/mcp.mjs +33 -33
- package/dist/cli/commands/model.mjs +143 -41
- package/dist/cli/commands/setup.mjs +47 -30
- package/dist/cli/commands/sign.mjs +2 -34
- package/dist/cli/commands/strategy.mjs +5 -5
- package/dist/cli/commands/update.mjs +27 -0
- package/dist/data/desk-data.mjs +15 -14
- package/dist/gateway/telegram-exact-action-callbacks.mjs +1 -0
- package/dist/index.mjs +31 -18
- package/dist/router/prepare-bridge.mjs +2 -0
- package/dist/strategy/index.mjs +3 -3
- package/package.json +5 -2
- package/public/oracle-splash/downloads/index.html +4 -4
- package/public/oracle-splash/index.html +1 -1
package/dist/bin/oracle.mjs
CHANGED
|
@@ -1,17 +1,17 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{realpathSync as
|
|
2
|
+
import{realpathSync as K}from"node:fs";import{fileURLToPath as je}from"node:url";import O from"node:fs";import b from"node:path";import{pathToFileURL as ge}from"node:url";import g from"node:fs";import B from"node:os";import i from"node:path";import{fileURLToPath as J}from"node:url";var V=i.dirname(J(import.meta.url)),p=i.resolve(V,"../..");function d(){return process.env.ORACLE_FAKE_HOME||B.homedir()}function S(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function y(){return S()?process.env.ORACLE_CONFIG_DIR||i.join(d(),".config","oracle"):i.join(d(),".config","oracle")}function W(){return i.join(y(),"exec.env")}function C(){return i.join(y(),"desk.json")}function L(){return i.join(y(),"env")}function h({force:e=!1}={}){if(h._done&&!e)return h._result||null;h._done=!0;let n={},r=(a,t)=>{if(t==null)return;let o=String(t).trim();o&&(process.env[a]!=null&&String(process.env[a]).trim()!==""||(process.env[a]=o,n[a]=o))};try{let a=L();if(g.existsSync(a))for(let t of g.readFileSync(a,"utf8").split(/\r?\n/)){let o=t.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!o||o[2].startsWith("#"))continue;let c=o[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),r(o[1],c)}}catch{}try{let a=C();if(g.existsSync(a)){let t=JSON.parse(g.readFileSync(a,"utf8"));t&&typeof t=="object"&&(r("ORACLE_DESK_URL",t.deskUrl||t.dataUrl||t.url),r("ORACLE_DATA_URL",t.dataUrl||t.deskUrl||t.url),r("ORACLE_API_URL",t.apiUrl||t.dataUrl||t.deskUrl),r("ORACLE_PUBLIC_URL",t.publicUrl||t.deskUrl||t.dataUrl),r("ORACLE_EXEC_URL",t.execUrl),r("MAD_DESK_URL",t.deskUrl||t.dataUrl))}}catch{}let s=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return s&&(r("ORACLE_DESK_URL",s),r("ORACLE_DATA_URL",s),r("ORACLE_API_URL",s),r("ORACLE_PUBLIC_URL",s),r("MAD_DESK_URL",s)),h._result=Object.keys(n).length?n:null,h._result}try{h()}catch{}function z(){return process.env.HERMES_HOME?i.resolve(process.env.HERMES_HOME):i.join(d(),".hermes")}function Y(){return i.join(d(),".claude.json")}function Q(e=process.cwd()){return i.join(e,".mcp.json")}function X(){return process.platform==="darwin"?i.join(d(),"Library","Application Support","Claude","claude_desktop_config.json"):i.join(d(),".config","Claude","claude_desktop_config.json")}function Z(){return i.join(d(),".codex","config.toml")}function P(){return i.join(y(),"connectors")}function ee(){return i.join(P(),"chatgpt-openapi.json")}function re(){return i.join(y(),"active-chain.json")}function _(e){let n=[i.join(p,"bin",e),i.join(p,"dist","bin",e),i.join(p,"..","bin",e)];return n.find(r=>g.existsSync(r))||n[0]}function te(e){return g.mkdirSync(e,{recursive:!0}),e}var U={homeDir:d,isPublicDesktop:S,oracleConfigDir:y,oracleExecEnvPath:W,oracleDeskJsonPath:C,oracleEnvFilePath:L,loadDeskRouting:h,hermesRoot:z,activeChainPath:re,claudeCodeUserConfigPath:Y,claudeCodeProjectMcpPath:Q,claudeDesktopConfigPath:X,codexConfigPath:Z,chatgptConnectorDir:P,chatgptOpenApiPath:ee,packageBin:_,ensureDir:te,PACKAGE_ROOT:p};import{execFile as ne}from"node:child_process";import{existsSync as Ue,mkdirSync as Te,readFileSync as oe,realpathSync as De,writeFileSync as $e}from"node:fs";import T from"node:path";import{promisify as se}from"node:util";var He=se(ne);var Me=1440*60*1e3;function D(e,n){let r=t=>String(t).replace(/^v/,"").split("-")[0].split(".").map(o=>Number.parseInt(o,10)||0),s=r(e),a=r(n);for(let t=0;t<Math.max(s.length,a.length);t+=1){let o=s[t]??0,c=a[t]??0;if(o>c)return 1;if(o<c)return-1}return 0}function ae(e){let n=e?.stateDir||T.join(process.env.HOME||".",".oracle");return T.join(n,"update-check.json")}function $(e){try{return JSON.parse(oe(ae(e),"utf8"))}catch{return null}}import f from"node:fs";import u from"node:path";import{spawnSync as ce}from"node:child_process";import{createRequire as ie}from"node:module";import{fileURLToPath as le}from"node:url";var ue=u.dirname(le(import.meta.url)),pe=u.resolve(ue,"../.."),de=Object.freeze(["oracle-vault","oracle-credential","oracle-signer","oracle-runner","oracle-agentic-init","oracle-agentic-doctor","oracle-control-mcp","oracle-operator-caps"]),R=Object.freeze(["vault","credential","signer","runner","sign"]),I=`oracle: signing is unavailable in the public package.
|
|
3
3
|
|
|
4
4
|
The public 'oracle' package is prepare-only and never handles keys.
|
|
5
5
|
Owner-operated signing is private infrastructure and has no public npm install.
|
|
6
6
|
Review and sign prepared artifacts in your own wallet instead.
|
|
7
7
|
|
|
8
8
|
Nothing about your read/research/prepare setup is affected.
|
|
9
|
-
`,
|
|
10
|
-
`)||
|
|
11
|
-
`)}function
|
|
12
|
-
`),3;let t=
|
|
13
|
-
`),1;let m=typeof l.status=="number"?l.status:1;return m!==0&&
|
|
14
|
-
`),t==="pipe"?{code:m,stdout:l.stdout||"",stderr:l.stderr||""}:m}var
|
|
9
|
+
`,fe="hint: run 'oracle sign init' to provision keys, or 'oracle sign doctor --json' for detail.";function N(e){let n={};for(let r of de){let s=[u.join(e,r),u.join(e,`${r}.mjs`),u.join(e,`${r}.js`)];for(let a of s)if(f.existsSync(a)&&f.statSync(a).isFile()){n[r]=a;break}}return n}function me(e){let n=u.dirname(e);for(;n!==u.dirname(n);){let r=u.join(n,"package.json");if(f.existsSync(r))try{let s=JSON.parse(f.readFileSync(r,"utf8"));if(s.name==="@oracle-agent/operator")return{root:n,pkg:s}}catch{}n=u.dirname(n)}return null}function he(e){for(let n of e)try{let r=ie(u.join(n,"package.json")),s;try{let l=r.resolve("@oracle-agent/operator/package.json");s={root:u.dirname(l),pkg:JSON.parse(f.readFileSync(l,"utf8"))}}catch{let l=r.resolve("@oracle-agent/operator");s=me(l)}if(!s)continue;let{root:a,pkg:t}=s,o=t.bin||{},c={};for(let[l,m]of Object.entries(o))c[l]=u.resolve(a,m);let j=N(u.join(a,"bin"));for(let[l,m]of Object.entries(j))c[l]||(c[l]=m);return{ok:!0,binDir:u.join(a,"bin"),version:t.version||"unknown",bins:c,source:`require:${n}`}}catch{}return null}function k(){if(process.env.ORACLE_PUBLIC_DESKTOP==="1")return{ok:!1,source:"public-desktop"};let e=process.env.ORACLE_OPERATOR_BIN_DIR;if(e){let r=u.resolve(e);if(!f.existsSync(r))return{ok:!1};let s=N(r);if(!Object.keys(s).length)return{ok:!1};let a="unknown",t=u.resolve(r,"../package.json");if(f.existsSync(t))try{a=JSON.parse(f.readFileSync(t,"utf8")).version||a}catch{}return{ok:!0,binDir:r,version:a,bins:s,source:"env:ORACLE_OPERATOR_BIN_DIR"}}return he([process.cwd(),pe])||{ok:!1}}function E(e=process.stderr){e.write(I),I.endsWith(`
|
|
10
|
+
`)||e.write(`
|
|
11
|
+
`)}function H(e,n=[],r={}){let s=k();if(!s.ok)return E(r.stderr||process.stderr),3;let a=s.bins[e];if(!a)return(r.stderr||process.stderr).write(`oracle: operator bin '${e}' not found in resolved operator (${s.source})
|
|
12
|
+
`),3;let t=r.stdio||"inherit",o=/\.(mjs|cjs|js)$/.test(a),c=o?process.execPath:a,j=o?[a,...n]:[...n],l=ce(c,j,{stdio:t,env:r.env||process.env,cwd:r.cwd||process.cwd(),encoding:t==="pipe"?"utf8":void 0});if(l.error)return(r.stderr||process.stderr).write(`oracle: failed to spawn ${e}: ${l.error.message}
|
|
13
|
+
`),1;let m=typeof l.status=="number"?l.status:1;return m!==0&&r.appendHintOnError&&(r.stderr||process.stderr).write(fe+`
|
|
14
|
+
`),t==="pipe"?{code:m,stdout:l.stdout||"",stderr:l.stderr||""}:m}var ye="oracle \u2014 self-custody multichain agent control plane",ke=`READ / RESEARCH (no keys, this package)
|
|
15
15
|
oracle open the native Oracle chat (TTY)
|
|
16
16
|
oracle bootstrap optional: install an isolated Hermes compatibility runtime
|
|
17
17
|
oracle init install agent lanes + read plane (dry-run by default)
|
|
@@ -21,7 +21,8 @@ import{realpathSync as F}from"node:fs";import{fileURLToPath as he}from"node:url"
|
|
|
21
21
|
oracle model choose standalone/Hermes provider and any compatible model
|
|
22
22
|
oracle auth Claude/Codex/Grok OAuth or securely stored provider API keys
|
|
23
23
|
oracle chain list/select working chains (hyperliquid, base, ...)
|
|
24
|
-
oracle setup
|
|
24
|
+
oracle setup model choose Claude/Codex/Grok standalone OAuth
|
|
25
|
+
oracle setup standalone model + messaging menu
|
|
25
26
|
oracle data serve|call|catalog|health
|
|
26
27
|
oracle data-mcp start the read-only MCP server
|
|
27
28
|
oracle scan chains|head|token|pools|risk|quote|sell
|
|
@@ -49,16 +50,18 @@ SIGNING (dispatches to @oracle-agent/operator on THIS machine; never in this pac
|
|
|
49
50
|
|
|
50
51
|
oracle <noun> --help for details. Keys never leave your machine; this package
|
|
51
52
|
cannot sign \u2014 signing commands run the locally installed operator package.
|
|
52
|
-
`;function
|
|
53
|
+
`;function G(){try{return JSON.parse(O.readFileSync(b.join(p,"package.json"),"utf8")).version||"0.0.0"}catch{return"0.0.0"}}function ve(){let e=b.join(p,"src","cli","commands");return O.existsSync(e)?e:b.join(p,"dist","cli","commands")}async function v(){let e=ve(),n=new Map;if(!O.existsSync(e))return n;let r=O.readdirSync(e).filter(s=>s.endsWith(".mjs")).sort();for(let s of r){let a=b.join(e,s);try{let o=(await import(ge(a).href+`?t=${Date.now()}`)).default;if(!o||typeof o!="object"||typeof o.run!="function")continue;let c=o.name||s.replace(/\.mjs$/,"");n.set(c,{...o,name:c,__file:a})}catch(t){process.env.ORACLE_CLI_DEBUG&&console.error(`oracle: failed loading command ${s}: ${t.message}`)}}return n}function xe(e,n=$()){return!n?.latest||!e||D(n.latest,e)<=0?"":`
|
|
54
|
+
Update available: ${e} \u2192 ${n.latest}. Run 'oracle update'.
|
|
55
|
+
`}function w(e,n){let r=[];r.push(`${ye} (v${e})`),r.push(""),r.push(ke.trimEnd());let s=[];for(let a of n.values()){if(["help","version"].includes(a.name))continue;!new Set(["init","doctor","chat","model","auth","chain","setup","data","data-mcp","scan","route","prepare","swap","farm","follow","equities","strategy","public","mcp","plugins","harness","upgrade","bootstrap","eval","sign","vault","signer","runner","credential"]).has(a.name)&&a.summary&&s.push(` oracle ${a.name.padEnd(20)} ${a.summary}`)}return s.length&&(r.push(""),r.push("ADDITIONAL"),r.push(...s)),r.join(`
|
|
53
56
|
`)+`
|
|
54
|
-
|
|
57
|
+
`+xe(e)}function M(e,n){let r=[...n.keys()].sort(),s=r.length?r.join(", "):"(none loaded yet)";return`oracle: unknown command '${e}'. Known: ${s}
|
|
55
58
|
Try: oracle --help
|
|
56
|
-
`}function
|
|
57
|
-
`),
|
|
58
|
-
`),0):(process.stderr.write(
|
|
59
|
+
`}function x(e){return{argv:e,root:p,bin:_,paths:U,dispatchOperator:H,resolveOperator:k}}async function q(e=[]){let n=G();if(e.includes("--version")||e.includes("-V"))return F();if(e[0]==="--help"||e[0]==="-h"){let o=await v();return process.stdout.write(w(n,o)),0}if(e.length===0){let o=await v();if(Oe(e)){let c=o.get("chat");if(c)return c.run(x([]))}return process.stdout.write(w(n,o)),0}if(be(e[0])){let c=(await v()).get("chat");if(c)return c.run(x(e))}let r=e[0],s=e.slice(1);if(r==="version")return F();if(r==="help"){let o=await v();if(s[0]){let c=o.get(s[0]);return c?(process.stdout.write((c.usage||`oracle ${c.name}`)+`
|
|
60
|
+
`),c.summary&&process.stdout.write(c.summary+`
|
|
61
|
+
`),0):(process.stderr.write(M(s[0],o)),1)}return process.stdout.write(w(n,o)),0}let a=await v(),t=a.get(r);if(t){if(s[0]==="--help"||s[0]==="-h")return process.stdout.write((t.usage||`oracle ${t.name}`)+`
|
|
59
62
|
`),t.summary&&process.stdout.write(t.summary+`
|
|
60
|
-
`),0;if(
|
|
61
|
-
`),1}try{let o=await t.run(
|
|
62
|
-
`),1}}return
|
|
63
|
-
`),1):(
|
|
64
|
-
`),0}function
|
|
63
|
+
`),0;if(R.includes(r))try{let o=await t.run(x(s));return typeof o=="number"?o:0}catch(o){return process.stderr.write(`oracle ${r}: ${o?.message||o}
|
|
64
|
+
`),1}try{let o=await t.run(x(s));return typeof o=="number"?o:0}catch(o){return process.stderr.write(`oracle ${r}: ${o?.message||o}
|
|
65
|
+
`),1}}return R.includes(r)?k().ok?(process.stderr.write(`oracle: sign-plane command '${r}' is not available in this build (operator is installed).
|
|
66
|
+
`),1):(E(process.stderr),3):(process.stderr.write(M(r,a)),1)}async function F(){let n=`oracle ${G()}`,r=k();return r.ok&&(n+=` operator ${r.version}`),process.stdout.write(n+`
|
|
67
|
+
`),0}function Oe(e=[],n={stdin:process.stdin,stdout:process.stdout}){return e.length!==0?!1:process.env.ORACLE_FORCE_CHAT==="1"?!0:n.stdin?.isTTY===!0&&n.stdout?.isTTY===!0}function be(e){return["-m","--model","--provider","-q","--query","-Q","--quiet","-c","--continue","-r","--resume","-s","--skills","-t","--toolsets","--reasoning","--tui","--cli","--yolo","--checkpoints","--source","--max-turns"].includes(String(e||""))}var or=Object.freeze({data:"./desk-server.mjs",public:"./oracle-public-server.mjs","data-mcp":"./oracle-data-mcp.mjs",init:"./oracle-init.mjs",upgrade:"./oracle-upgrade.mjs",scan:"./oracle-scan.mjs",route:"./oracle-route.mjs",equities:"./oracle-equities.mjs"});function _e(){if(!process.argv[1])return!1;try{return K(je(import.meta.url))===K(process.argv[1])}catch{return!1}}async function Re(e=process.argv.slice(2)){return q(e)}if(_e()){let e=await Re();process.exit(typeof e=="number"?e:0)}export{or as COMMANDS,Re as main};
|
|
@@ -1,16 +1,16 @@
|
|
|
1
|
-
import
|
|
2
|
-
`,{mode:384})
|
|
3
|
-
`,{mode:384}),y.renameSync(r,e),process.platform!=="win32"&&y.chmodSync(e,384)}function Ae(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function T(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function R(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=Number(e.expiresAt||e.expires_at||0);if(!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(n)?n:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function Se(e={}){let t=e.file||x.join(b(),"oauth.json"),r=e.metadataFile||x.join(x.dirname(t),"oauth-meta.json"),n=e.linksFile||x.join(x.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),i=e.spawnFn||ke,s=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&Ae(i),p=s?"linux-secret-service":"private-file",u=`${t}.lock`;async function g(f){X(x.dirname(u));let l;for(let c=0;c<400;c+=1)try{l=y.openSync(u,"wx",384);break}catch(a){if(a?.code!=="EEXIST")throw a;try{Date.now()-y.statSync(u).mtimeMs>3e5&&y.unlinkSync(u)}catch{}await new Promise(d=>setTimeout(d,25))}if(l===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await f()}finally{try{y.closeSync(l)}catch{}try{y.unlinkSync(u)}catch{}}}function h(f,l="oauth"){return["application","oracle","kind",l,"provider",f]}function P(f){if(!y.existsSync(n))return null;let c=w(n,{providers:{}}).providers?.[f];if(!Array.isArray(c))return null;let a=[];for(let d of c)if(x.isAbsolute(String(d||"")))try{let m=w(d,{}),v=f==="anthropic-oauth"?m.claudeAiOauth:null;if(!v)continue;let ie=R(v);a.push({...ie,refreshToken:"",source:"external-access-only"})}catch{}return a.length?a.find(d=>!d.expiresAt||d.expiresAt>o()+xe)||a[0]:null}function B(f){let l=A(f);if(s){let d=i("secret-tool",["lookup",...h(l)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!d.error&&d.status===0&&String(d.stdout||"").trim())try{return R(JSON.parse(String(d.stdout).trim()))}catch{}return P(l)}let a=w(t,{providers:{}}).providers?.[l];if(a)try{return R(a)}catch{}return P(l)}function ee(f,l){let c=A(f),a=R(l);if(s){let m=i("secret-tool",["store",`--label=Oracle ${c} OAuth`,...h(c)],{input:JSON.stringify(a),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(m.error||m.status!==0)throw new Error("OS credential store rejected OAuth credential");let v=w(r,{providers:{}});return v.providers||={},v.providers[c]={expiresAt:a.expiresAt,source:a.source},_(r,v),a}let d=w(t,{providers:{}});return d.providers||={},d.providers[c]=a,_(t,d),a}function te(f){let l=A(f);if(s){let d=i("secret-tool",["clear",...h(l)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),m=w(r,{providers:{}});return m.providers&&delete m.providers[l],_(r,m),!d.error&&d.status===0}let c=w(t,{providers:{}}),a=!!c.providers?.[l];return c.providers&&delete c.providers[l],_(t,c),a}function H(f){let l=T(f);if(s){let c=i("secret-tool",["lookup",...h(l,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return c.error||c.status!==0?"":String(c.stdout||"").trim()}return String(w(t,{apiKeys:{}}).apiKeys?.[l]||"").trim()}function re(f,l){let c=T(f),a=String(l||"").trim();if(!a)throw new Error("API key is empty");if(s){let m=i("secret-tool",["store",`--label=Oracle ${c} API key`,...h(c,"api-key")],{input:a,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(m.error||m.status!==0)throw new Error("OS credential store rejected API key");let v=w(r,{providers:{},apiKeys:{}});return v.apiKeys||={},v.apiKeys[c]={configured:!0},_(r,v),!0}let d=w(t,{providers:{},apiKeys:{}});return d.apiKeys||={},d.apiKeys[c]=a,_(t,d),!0}function oe(f){let l=T(f);if(s){let d=i("secret-tool",["clear",...h(l,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),m=w(r,{providers:{},apiKeys:{}});return m.apiKeys&&delete m.apiKeys[l],_(r,m),!d.error&&d.status===0}let c=w(t,{providers:{},apiKeys:{}}),a=!!c.apiKeys?.[l];return c.apiKeys&&delete c.apiKeys[l],_(t,c),a}function ne(){let f={},l={};if(s){let c=w(r,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!B(a),expiresAt:Number(d.expiresAt||0),source:String(d.source||"oracle"),storage:p};for(let a of Object.keys(c.apiKeys||{}))l[a]={configured:!!H(a),storage:p}}else{let c=w(t,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!d?.accessToken,expiresAt:Number(d?.expiresAt||0),source:String(d?.source||"oracle"),storage:p};for(let[a,d]of Object.entries(c.apiKeys||{}))l[a]={configured:!!d,storage:p}}for(let c of Object.keys(C)){if(f[c])continue;let a=P(c);a&&(f[c]={loggedIn:!0,expiresAt:a.expiresAt,source:a.source,storage:"external-access-source"})}return{storage:p,providers:f,apiKeys:l}}return Object.freeze({file:t,storage:p,get:B,set:ee,remove:te,getApiKey:H,setApiKey:re,removeApiKey:oe,status:ne,withLock:g})}var q;function G(){return q||=Se(),q}function K(e){return Buffer.from(e).toString("base64url")}function Ee(){let e=K(F(32));return{verifier:e,challenge:K(we("sha256").update(e).digest()),state:K(F(24))}}function Oe(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&ge(r,n)}function be(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return ve(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function D(e){return new URLSearchParams(e).toString()}async function S(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Ce(e){if(e)return String(await e()).trim();let t=ye.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function z(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return R({accessToken:r,refreshToken:n,expiresAt:_e(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Pe(e){let t=C["anthropic-oauth"],r=e.pkce||Ee(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let i=await Ce(e.inputFn),[s,p]=i.split("#",2);if(!s||!Oe(p,r.state))throw new Error("Claude OAuth state mismatch");let u=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:s,state:p,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return z(await S(u,"Claude OAuth token exchange"),e)}async function Ue(e){let t=C["openai-codex"],r=await S(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),i;for(let p=0;p<Math.ceil(900/o);p+=1){await e.sleepFn(o*1e3);let u=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(u.ok){i=await S(u,"Codex device authorization");break}if(![403,404].includes(u.status))throw new Error(`Codex device authorization failed (HTTP ${u.status})`)}if(!i)throw new Error("Codex device authorization timed out");let s=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:D({grant_type:"authorization_code",code:i.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:i.code_verifier})});return z(await S(s,"Codex OAuth token exchange"),e)}function I(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Re(e){let t=C["xai-oauth"],r=await S(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");I(r.authorization_endpoint);let n=I(r.token_endpoint),o=await S(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:D({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let i=I(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${i}`),e.output(`Code: ${o.user_code}`),e.openFn(i);let s=Math.max(1,Number(o.interval||5)),p=Math.ceil(Math.max(1,Number(o.expires_in||600))/s);for(let u=0;u<p;u+=1){let g=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:D({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(g.ok){let P=await S(g,"xAI OAuth token exchange");return z(P,{...e,discovery:{authorization_endpoint:I(r.authorization_endpoint),token_endpoint:n}})}let h="";try{h=String((await g.json())?.error||"")}catch{}if(h==="slow_down")await e.sleepFn((s+1)*1e3);else if(h==="authorization_pending")await e.sleepFn(s*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${g.status}${h?`, ${h}`:""})`)}throw new Error("xAI device authorization timed out")}async function Z(e,t={}){let r=A(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(i=>setTimeout(i,o))),openFn:t.openFn||be,output:t.output||(o=>process.stdout.write(`${o}
|
|
4
|
-
`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?
|
|
1
|
+
import T from"node:fs";import F from"node:path";import j from"node:fs";import pe from"node:os";import O from"node:path";import{fileURLToPath as le}from"node:url";var fe=O.dirname(le(import.meta.url)),Ve=O.resolve(fe,"../..");function X(){return process.env.ORACLE_FAKE_HOME||pe.homedir()}function he(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function b(){return he()?process.env.ORACLE_CONFIG_DIR||O.join(X(),".config","oracle"):O.join(X(),".config","oracle")}function me(){return O.join(b(),"desk.json")}function we(){return O.join(b(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let t={},r=(n,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,t[n]=s))};try{let n=we();if(j.existsSync(n))for(let i of j.readFileSync(n,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let p=s[2];(p.startsWith('"')&&p.endsWith('"')||p.startsWith("'")&&p.endsWith("'"))&&(p=p.slice(1,-1)),r(s[1],p)}}catch{}try{let n=me();if(j.existsSync(n)){let i=JSON.parse(j.readFileSync(n,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let o=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return o&&(r("ORACLE_DESK_URL",o),r("ORACLE_DATA_URL",o),r("ORACLE_API_URL",o),r("ORACLE_PUBLIC_URL",o),r("MAD_DESK_URL",o)),E._result=Object.keys(t).length?t:null,E._result}try{E()}catch{}function $(e){return j.mkdirSync(e,{recursive:!0}),e}var ge=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"]);function I(e){return String(e||"").trim()||void 0}function ye(e,{required:t=!1}={}){let r=I(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!ge.has(r))throw new Error(`unsupported provider: ${r}`);return r}function ve(e,{required:t=!1}={}){let r=I(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function ke(e){let t=I(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let o=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=o==="localhost"||o==="127.0.0.1"||o==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function L({provider:e,model:t,baseUrl:r}={},{requireModel:o=!1}={}){let n=ye(e),i=ve(t,{required:o});if(n==="custom")return{provider:n,...i?{model:i}:{},baseUrl:ke(r)};if(I(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...i?{model:i}:{}}}var xe=new Set(["auto","standalone","hermes","remote","arch"]);function _e(){return F.join(b(),"model.json")}function P(e){return String(e||"").trim()||void 0}function Ae(e={}){let t=P(e.backend)?.toLowerCase()||"auto",r=L({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),o=P(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),i=P(e.reasoningEffort),s=P(e.computeHost||e.remoteHost),p=P(e.computeUser||e.remoteUser),u=P(e.computePath||e.remotePath);if(!xe.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(o&&!/^[A-Z][A-Z0-9_]*$/.test(o))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...o?{apiKeyEnv:o}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...i?{reasoningEffort:i}:{},...s?{computeHost:s}:{},...p?{computeUser:p}:{},...u?{computePath:u}:{}}}function Z(e){let t=Ae(e),r=_e();$(F.dirname(r)),process.platform!=="win32"&&T.chmodSync(F.dirname(r),448);let o=`${r}.${process.pid}.tmp`;return T.writeFileSync(o,`${JSON.stringify(t,null,2)}
|
|
2
|
+
`,{mode:384}),T.renameSync(o,r),process.platform!=="win32"&&T.chmodSync(r,384),t}import{createHash as Se,randomBytes as N,timingSafeEqual as Ee}from"node:crypto";import g from"node:fs";import k from"node:path";import Oe from"node:readline/promises";import{spawn as be,spawnSync as Pe}from"node:child_process";var R=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.5",protocol:"responses"}}),Ce=12e4;function Re(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function _(e){let t=String(e||"").trim().toLowerCase();for(let[r,o]of Object.entries(R))if(o.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function Y(e){let t=_(e);return{id:t,...R[t]}}function m(e,t={}){if(!g.existsSync(e))return t;try{let r=JSON.parse(g.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${k.basename(e)}`)}}function Q(e){$(e),process.platform!=="win32"&&g.chmodSync(e,448)}function x(e,t){Q(k.dirname(e));let r=`${e}.${process.pid}.${N(4).toString("hex")}.tmp`;g.writeFileSync(r,`${JSON.stringify(t,null,2)}
|
|
3
|
+
`,{mode:384}),g.renameSync(r,e),process.platform!=="win32"&&g.chmodSync(e,384)}function Ue(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function D(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function C(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),o=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function je(e={}){let t=e.file||k.join(b(),"oauth.json"),r=e.metadataFile||k.join(k.dirname(t),"oauth-meta.json"),o=e.linksFile||k.join(k.dirname(t),"oauth-links.json"),n=()=>typeof e.now=="function"?Number(e.now()):Date.now(),i=e.spawnFn||Pe,s=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&Ue(i),p=s?"linux-secret-service":"private-file",u=`${t}.lock`;async function v(f){Q(k.dirname(u));let l;for(let c=0;c<400;c+=1)try{l=g.openSync(u,"wx",384);break}catch(a){if(a?.code!=="EEXIST")throw a;try{Date.now()-g.statSync(u).mtimeMs>3e5&&g.unlinkSync(u)}catch{}await new Promise(d=>setTimeout(d,25))}if(l===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await f()}finally{try{g.closeSync(l)}catch{}try{g.unlinkSync(u)}catch{}}}function w(f,l="oauth"){return["application","oracle","kind",l,"provider",f]}function U(f){if(!g.existsSync(o))return null;let c=m(o,{providers:{}}).providers?.[f];if(!Array.isArray(c))return null;let a=[];for(let d of c)if(k.isAbsolute(String(d||"")))try{let h=m(d,{});if(f==="anthropic-oauth"&&h.claudeAiOauth){let S=C(h.claudeAiOauth);a.push({...S,refreshToken:"",source:"external-access-only"});continue}let y=h.credential_pool&&typeof h.credential_pool=="object"?h.credential_pool:null;if(y){let S=y[f]||y[f.replace(/-oauth$/,"")]||[],ue=Array.isArray(S)?S:S?[S]:[];for(let z of ue)if(!(!z||typeof z!="object"))try{let de=C(z);a.push({...de,refreshToken:"",source:"external-access-only"})}catch{}}}catch{}return a.length?a.find(d=>!d.expiresAt||d.expiresAt>n()+Ce)||a[0]:null}function W(f){let l=_(f);if(s){let d=i("secret-tool",["lookup",...w(l)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!d.error&&d.status===0&&String(d.stdout||"").trim())try{return C(JSON.parse(String(d.stdout).trim()))}catch{}return U(l)}let a=m(t,{providers:{}}).providers?.[l];if(a)try{return C(a)}catch{}return U(l)}function ne(f,l){let c=_(f),a=C(l);if(s){let h=i("secret-tool",["store",`--label=Oracle ${c} OAuth`,...w(c)],{input:JSON.stringify(a),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected OAuth credential");let y=m(r,{providers:{}});return y.providers||={},y.providers[c]={expiresAt:a.expiresAt,source:a.source},x(r,y),a}let d=m(t,{providers:{}});return d.providers||={},d.providers[c]=a,x(t,d),a}function ie(f){let l=_(f);if(s){let d=i("secret-tool",["clear",...w(l)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{}});return h.providers&&delete h.providers[l],x(r,h),!d.error&&d.status===0}let c=m(t,{providers:{}}),a=!!c.providers?.[l];return c.providers&&delete c.providers[l],x(t,c),a}function V(f){let l=D(f);if(s){let c=i("secret-tool",["lookup",...w(l,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return c.error||c.status!==0?"":String(c.stdout||"").trim()}return String(m(t,{apiKeys:{}}).apiKeys?.[l]||"").trim()}function se(f,l){let c=D(f),a=String(l||"").trim();if(!a)throw new Error("API key is empty");if(s){let h=i("secret-tool",["store",`--label=Oracle ${c} API key`,...w(c,"api-key")],{input:a,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected API key");let y=m(r,{providers:{},apiKeys:{}});return y.apiKeys||={},y.apiKeys[c]={configured:!0},x(r,y),!0}let d=m(t,{providers:{},apiKeys:{}});return d.apiKeys||={},d.apiKeys[c]=a,x(t,d),!0}function ce(f){let l=D(f);if(s){let d=i("secret-tool",["clear",...w(l,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{},apiKeys:{}});return h.apiKeys&&delete h.apiKeys[l],x(r,h),!d.error&&d.status===0}let c=m(t,{providers:{},apiKeys:{}}),a=!!c.apiKeys?.[l];return c.apiKeys&&delete c.apiKeys[l],x(t,c),a}function ae(){let f={},l={};if(s){let c=m(r,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!W(a),expiresAt:Number(d.expiresAt||0),source:String(d.source||"oracle"),storage:p};for(let a of Object.keys(c.apiKeys||{}))l[a]={configured:!!V(a),storage:p}}else{let c=m(t,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!d?.accessToken,expiresAt:Number(d?.expiresAt||0),source:String(d?.source||"oracle"),storage:p};for(let[a,d]of Object.entries(c.apiKeys||{}))l[a]={configured:!!d,storage:p}}for(let c of Object.keys(R)){if(f[c])continue;let a=U(c);a&&(f[c]={loggedIn:!0,expiresAt:a.expiresAt,source:a.source,storage:"external-access-source"})}return{storage:p,providers:f,apiKeys:l}}return Object.freeze({file:t,storage:p,get:W,set:ne,remove:ie,getApiKey:V,setApiKey:se,removeApiKey:ce,status:ae,withLock:v})}var G;function ee(){return G||=je(),G}function M(e){return Buffer.from(e).toString("base64url")}function $e(){let e=M(N(32));return{verifier:e,challenge:M(Se("sha256").update(e).digest()),state:M(N(24))}}function Ie(e,t){let r=Buffer.from(String(e||"")),o=Buffer.from(String(t||""));return r.length===o.length&&Ee(r,o)}function Le(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return be(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function B(e){return new URLSearchParams(e).toString()}async function A(e,t){if(!e?.ok){let o="";try{o=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${o?`, ${o}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Te(e){if(e)return String(await e()).trim();let t=Oe.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function H(e,t={}){let r=String(e.access_token||"").trim(),o=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let n=Number(e.expires_in||3600);return C({accessToken:r,refreshToken:o,expiresAt:Re(t)+Math.max(1,n)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Ke(e){let t=R["anthropic-oauth"],r=e.pkce||$e(),o=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),n=`${t.authorizeUrl}?${o}`;e.output(`Open: ${n}`),e.openFn(n);let i=await Te(e.inputFn),[s,p]=i.split("#",2);if(!s||!Ie(p,r.state))throw new Error("Claude OAuth state mismatch");let u=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:s,state:p,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return H(await A(u,"Claude OAuth token exchange"),e)}async function ze(e){let t=R["openai-codex"],r=await A(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let o=`${t.issuer}/codex/device`;e.output(`Open: ${o}`),e.output(`Code: ${r.user_code}`),e.openFn(o);let n=Math.max(3,Number(r.interval||5)),i;for(let p=0;p<Math.ceil(900/n);p+=1){await e.sleepFn(n*1e3);let u=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(u.ok){i=await A(u,"Codex device authorization");break}if(![403,404].includes(u.status))throw new Error(`Codex device authorization failed (HTTP ${u.status})`)}if(!i)throw new Error("Codex device authorization timed out");let s=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:B({grant_type:"authorization_code",code:i.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:i.code_verifier})});return H(await A(s,"Codex OAuth token exchange"),e)}function K(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Fe(e){let t=R["xai-oauth"],r=await A(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");K(r.authorization_endpoint);let o=K(r.token_endpoint),n=await A(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:B({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!n.device_code||!n.user_code||!n.verification_uri)throw new Error("xAI device authorization returned incomplete data");let i=K(n.verification_uri_complete||n.verification_uri);e.output(`Open: ${i}`),e.output(`Code: ${n.user_code}`),e.openFn(i);let s=Math.max(1,Number(n.interval||5)),p=Math.ceil(Math.max(1,Number(n.expires_in||600))/s);for(let u=0;u<p;u+=1){let v=await e.fetchFn(o,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:B({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:n.device_code})});if(v.ok){let U=await A(v,"xAI OAuth token exchange");return H(U,{...e,discovery:{authorization_endpoint:K(r.authorization_endpoint),token_endpoint:o}})}let w="";try{w=String((await v.json())?.error||"")}catch{}if(w==="slow_down")await e.sleepFn((s+1)*1e3);else if(w==="authorization_pending")await e.sleepFn(s*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${v.status}${w?`, ${w}`:""})`)}throw new Error("xAI device authorization timed out")}async function te(e,t={}){let r=_(e),o={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(n=>new Promise(i=>setTimeout(i,n))),openFn:t.openFn||Le,output:t.output||(n=>process.stdout.write(`${n}
|
|
4
|
+
`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Ke(o):r==="openai-codex"?ze(o):Fe(o)}var re=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.5"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},custom:{model:""}});function J(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function De(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function Me(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let o="",n=()=>{process.stdin.off("data",i),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
|
|
5
5
|
`)},i=s=>{let p=String(s);for(let u of p){if(u==="\r"||u===`
|
|
6
|
-
`){
|
|
6
|
+
`){n(),t(o.trim());return}if(u===""){n(),r(new Error("cancelled"));return}u==="\x7F"||u==="\b"?o=o.slice(0,-1):o+=u}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",i)})}function q(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...L({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function oe(e,t,r={}){return Z(q(e,t,r))}function Ne(e){process.stdout.write(`storage: ${e.storage}
|
|
7
7
|
`);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
|
|
8
|
-
`);return}for(let[n
|
|
9
|
-
`)}for(let[n
|
|
10
|
-
`)}function
|
|
11
|
-
`)}var
|
|
12
|
-
`):
|
|
13
|
-
`),0}if(r==="api-key"){let
|
|
14
|
-
`),0}if(r==="logout"){let
|
|
15
|
-
`),0}throw new Error(`unknown auth action: ${r}`)}catch(
|
|
16
|
-
`),1}}};export{
|
|
8
|
+
`);return}for(let[o,n]of t){let i=n.expiresAt?new Date(n.expiresAt).toISOString():"unknown";process.stdout.write(`${o}: ${n.loggedIn?"logged in":"missing"}, expires ${i}
|
|
9
|
+
`)}for(let[o,n]of r)process.stdout.write(`${o}: API key ${n.configured?"configured":"missing"}
|
|
10
|
+
`)}function Be(){return["oracle auth, configure OAuth or API-key authentication",""," oracle auth login claude|codex|grok [--model MODEL] [--no-browser]"," oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]"," PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|custom",` printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`," oracle auth status [--json]"," oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
|
|
11
|
+
`)}var lt={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:Be(),async run(e){let t=[...e.argv],r=t.shift()||"status",o=ee();try{if(r==="status"){let n=o.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(n,null,2)}
|
|
12
|
+
`):Ne(n),0}if(r==="login"){let n=t.find(u=>!u.startsWith("-"));if(!n)throw new Error("usage: oracle auth login claude|codex|grok");let i=Y(n),s=J(t,"--model")||i.model;q(i.id,s);let p=await te(i.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await o.withLock(async()=>{let u=o.get(i.id);o.set(i.id,p);try{oe(i.id,s)}catch(v){throw u?o.set(i.id,u):o.remove(i.id),v}}),process.stdout.write(`${i.id}: logged in, stored in ${o.storage}
|
|
13
|
+
`),0}if(r==="api-key"){let n=String(t.find(u=>!u.startsWith("-"))||"").trim().toLowerCase();if(!n)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(re,n))throw new Error(`unsupported API-key provider: ${n}`);let i=J(t,"--model")||re[n].model,s=J(t,"--base-url");q(n,i,{baseUrl:s});let p=t.includes("--stdin")?await De():await Me();return await o.withLock(async()=>{let u=o.getApiKey(n);o.setApiKey(n,p);try{oe(n,i,{baseUrl:s})}catch(v){throw u?o.setApiKey(n,u):o.removeApiKey(n),v}}),process.stdout.write(`${n}: API key configured in ${o.storage}
|
|
14
|
+
`),0}if(r==="logout"){let n=String(t.find(p=>!p.startsWith("-"))||"").trim().toLowerCase();if(!n)throw new Error("usage: oracle auth logout PROVIDER");let i=!1;try{i=o.remove(_(n))}catch{}let s=o.removeApiKey(n);if(!i&&!s)throw new Error(`${n}: no local credential found`);return process.stdout.write(`${n}: local credential removed
|
|
15
|
+
`),0}throw new Error(`unknown auth action: ${r}`)}catch(n){return process.stderr.write(`oracle auth: ${n.message}
|
|
16
|
+
`),1}}};export{lt as default};
|
|
@@ -1,21 +1,21 @@
|
|
|
1
|
-
import
|
|
1
|
+
import q from"node:readline/promises";import{stdin as F,stdout as M}from"node:process";import O from"node:fs";import R from"node:os";import A from"node:path";var x=Object.freeze([{key:"hyperliquid",aliases:["hl","hyperevm","hype","999"],chainId:999,name:"hyperliquid",kind:"evm",family:"hyperliquid",agent:"hyperliquid-agent",note:"perps \xB7 hip-3/4 \xB7 hyperevm 999",build:!0},{key:"ethereum",aliases:["eth","mainnet","1"],chainId:1,name:"ethereum",kind:"evm",family:"evm",agent:"oracle",note:"l1 \xB7 bridge hub",build:!0},{key:"base",aliases:["8453"],chainId:8453,name:"base",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"arbitrum",aliases:["arb","42161"],chainId:42161,name:"arbitrum",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"optimism",aliases:["op","10"],chainId:10,name:"optimism",kind:"evm",family:"evm",agent:"oracle",note:"op mainnet",build:!0},{key:"polygon",aliases:["matic","137"],chainId:137,name:"polygon",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"bsc",aliases:["bnb","56"],chainId:56,name:"bnb chain",kind:"evm",family:"evm",agent:"oracle",note:"bsc",build:!0},{key:"avalanche",aliases:["avax","43114"],chainId:43114,name:"avalanche",kind:"evm",family:"evm",agent:"oracle",note:"c-chain",build:!0},{key:"abstract",aliases:["abs","2741"],chainId:2741,name:"abstract",kind:"evm",family:"evm",agent:"oracle",note:"open / add agent",build:!0},{key:"stable",aliases:["988"],chainId:988,name:"stable",kind:"evm",family:"stable",agent:"stable-agent",note:"usdt0 gas \xB7 stable agent",build:!0},{key:"robinhood",aliases:["rh","4663"],chainId:4663,name:"robinhood",kind:"evm",family:"robinhood",agent:"robinhood-agent",note:"rh chain 4663",build:!0},{key:"solana",aliases:["sol"],chainId:"SOL",name:"solana",kind:"svm",family:"solana",agent:"solana-agent",note:"jup \xB7 nfts \xB7 dexs",build:!0},{key:"bitcoin",aliases:["btc"],chainId:"BTC",name:"bitcoin",kind:"utxo",family:"bitcoin",agent:"bitcoin-agent",note:"ord \xB7 runes \xB7 l1",build:!0},{key:"polymarket",aliases:["poly","polygon-poly"],chainId:137,name:"polymarket",kind:"venue",family:"polymarket",agent:"polymarket-agent",note:"prediction markets (polygon venue)",build:!1}]);function c(n){return String(n||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}var E=/^[a-z0-9][a-z0-9-]*$/;function U(){let n=process.env.ORACLE_CONFIG_DIR||A.join(R.homedir(),".config","oracle");return A.join(n,"chains.json")}function w(n){if(!n||typeof n!="object")return null;let t=String(n.key??"").trim();if(!t||/[/\\.]/.test(t))return null;let e=c(t);if(!E.test(e))return null;let i=typeof n.chainId=="string"?n.chainId.trim():Number(n.chainId);if(i===""||i===null||i===void 0||typeof i=="number"&&!Number.isFinite(i))return null;let r=typeof n.agent=="string"&&E.test(n.agent.trim())?n.agent.trim():"oracle";return{key:e,aliases:Array.isArray(n.aliases)?n.aliases.map(c).filter(Boolean).slice(0,8):[],chainId:i,name:String(n.name||e).slice(0,60),kind:["evm","svm","utxo","venue"].includes(n.kind)?n.kind:"evm",family:c(n.family)||e,agent:r,note:String(n.note||"user-defined").slice(0,80),build:n.build!==!1,source:"user"}}function D(n=O.readFileSync){try{let t=JSON.parse(n(U(),"utf8")),e=Array.isArray(t?.chains)?t.chains:[],i=[],r=new Set;for(let o of e){let a=w(o);!a||r.has(a.key)||(r.add(a.key),i.push(a))}return i}catch{return[]}}function I(){let n=D();if(n.length===0)return x;let t=new Map(x.map(e=>[e.key,e]));for(let e of n)t.set(e.key,e);return[...t.values()]}function m({buildOnly:n=!1}={}){return I().filter(t=>n?t.build:!0)}function d(n){let t=c(n);if(!t)return null;for(let e of I())if(e.key===t||String(e.chainId).toLowerCase()===t||(e.aliases||[]).map(c).includes(t)||c(e.name)===t)return e;return null}function g({selectedKey:n=null,buildOnly:t=!1}={}){let e=m({buildOnly:t}),i=["oracle chains","","pick a build/trade surface:",""];for(let r of e){let o=n&&n===r.key?"*":" ",a=String(r.chainId).padEnd(6),s=r.key.padEnd(12);i.push(`${o} ${s} ${a} ${r.note}`)}return i.push(""),i.push("usage:"),i.push(" /chain list"),i.push(" /chain hyperliquid select"),i.push(" /chain show current"),i.push(" /chain clear unset"),i.push(" oracle chain use base same from shell"),n&&i.push("",`active: ${n}`),i.join(`
|
|
2
2
|
`)+`
|
|
3
|
-
`}import
|
|
4
|
-
`,{mode:384}),e}function
|
|
5
|
-
`)}function
|
|
6
|
-
`),0):(process.stdout.write(g({selectedKey:
|
|
7
|
-
`),
|
|
3
|
+
`}import f from"node:fs";import H from"node:path";import h from"node:fs";import N from"node:os";import u from"node:path";import{fileURLToPath as P}from"node:url";var $=u.dirname(P(import.meta.url)),ne=u.resolve($,"../..");function k(){return process.env.ORACLE_FAKE_HOME||N.homedir()}function K(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function p(){return K()?process.env.ORACLE_CONFIG_DIR||u.join(k(),".config","oracle"):u.join(k(),".config","oracle")}function T(){return u.join(p(),"desk.json")}function W(){return u.join(p(),"env")}function l({force:n=!1}={}){if(l._done&&!n)return l._result||null;l._done=!0;let t={},e=(r,o)=>{if(o==null)return;let a=String(o).trim();a&&(process.env[r]!=null&&String(process.env[r]).trim()!==""||(process.env[r]=a,t[r]=a))};try{let r=W();if(h.existsSync(r))for(let o of h.readFileSync(r,"utf8").split(/\r?\n/)){let a=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let s=a[2];(s.startsWith('"')&&s.endsWith('"')||s.startsWith("'")&&s.endsWith("'"))&&(s=s.slice(1,-1)),e(a[1],s)}}catch{}try{let r=T();if(h.existsSync(r)){let o=JSON.parse(h.readFileSync(r,"utf8"));o&&typeof o=="object"&&(e("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),e("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),e("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),e("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),e("ORACLE_EXEC_URL",o.execUrl),e("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let i=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return i&&(e("ORACLE_DESK_URL",i),e("ORACLE_DATA_URL",i),e("ORACLE_API_URL",i),e("ORACLE_PUBLIC_URL",i),e("MAD_DESK_URL",i)),l._result=Object.keys(t).length?t:null,l._result}try{l()}catch{}function j(n){return h.mkdirSync(n,{recursive:!0}),n}function v(){return H.join(p(),"active-chain.json")}function y(){let n=v();if(!f.existsSync(n))return null;try{let t=JSON.parse(f.readFileSync(n,"utf8"));if(!t||typeof t!="object"||!t.key)return null;let e=d(t.key);return e?{key:e.key,chainId:e.chainId,name:e.name,agent:e.agent,selectedAt:t.selectedAt||null}:null}catch{return null}}function L(n){let t=d(n);if(!t){let i=new Error(`unknown chain '${n}'`);throw i.code="UNKNOWN_CHAIN",i}j(p());let e={key:t.key,chainId:t.chainId,name:t.name,agent:t.agent,selectedAt:new Date().toISOString()};return f.writeFileSync(v(),JSON.stringify(e,null,2)+`
|
|
4
|
+
`,{mode:384}),e}function S(){let n=v();return f.existsSync(n)&&f.unlinkSync(n),!0}function b(){return["oracle chain \u2014 pick the build/trade surface",""," oracle chain list working chains"," oracle chain list same"," oracle chain show show active chain"," oracle chain use <name> select (hyperliquid, base, solana, ...)"," oracle chain clear unset"," oracle chain --json machine output","","chat:"," /chain"," /chain hyperliquid"," /chain show"," /chain clear"].join(`
|
|
5
|
+
`)}function J(n){let t=y();return n?(process.stdout.write(JSON.stringify({active:t,chains:m()},null,2)+`
|
|
6
|
+
`),0):(process.stdout.write(g({selectedKey:t?.key||null})),0)}function B(n){let t=y();return n?(process.stdout.write(JSON.stringify({active:t},null,2)+`
|
|
7
|
+
`),t?0:1):t?(process.stdout.write(`active: ${t.key} id=${t.chainId} agent=${t.agent}
|
|
8
8
|
`),0):(process.stdout.write(`active: none
|
|
9
9
|
run: oracle chain use hyperliquid
|
|
10
|
-
`),1)}function C(t
|
|
10
|
+
`),1)}function C(n,t){try{let e=L(n);return t?process.stdout.write(JSON.stringify({ok:!0,active:e},null,2)+`
|
|
11
11
|
`):process.stdout.write(`selected ${e.key} (${e.chainId}) \xB7 agent ${e.agent}
|
|
12
12
|
build/trade context pinned for this machine
|
|
13
|
-
`),0}catch(e){if(e?.code==="UNKNOWN_CHAIN")return process.stderr.write(`oracle chain: unknown '${
|
|
13
|
+
`),0}catch(e){if(e?.code==="UNKNOWN_CHAIN")return process.stderr.write(`oracle chain: unknown '${n}'
|
|
14
14
|
`),process.stderr.write(`try: oracle chain list
|
|
15
|
-
`),1;throw e}}var
|
|
16
|
-
`),0;if(["list","ls"].includes(
|
|
15
|
+
`),1;throw e}}var he={name:"chain",summary:"list/select working chains (hyperliquid, base, solana, ...)",group:"read",usage:b(),async run(n){let t=[...n.argv],e=t.includes("--json"),i=t.filter(a=>a!=="--json"),r=(i[0]||"list").toLowerCase(),o=i.slice(1);if(["-h","--help","help"].includes(r))return process.stdout.write(b()+`
|
|
16
|
+
`),0;if(["list","ls"].includes(r))return J(e);if(["show","status","current"].includes(r))return B(e);if(["clear","unset","none"].includes(r))return S(),process.stdout.write(e?`{"ok":true,"active":null}
|
|
17
17
|
`:`active chain cleared
|
|
18
|
-
`),0;if(["use","set","select","pick"].includes(
|
|
19
|
-
`),1)}if(
|
|
18
|
+
`),0;if(["use","set","select","pick"].includes(r)){let a=o.join(" ").trim();return a?C(a,e):(process.stderr.write(`usage: oracle chain use <name>
|
|
19
|
+
`),1)}if(d(r))return C(r,e);if(!i.length&&process.stdin.isTTY){let a=m();process.stdout.write(g({selectedKey:y()?.key}));let s=q.createInterface({input:F,output:M});try{let _=(await s.question("chain> ")).trim();return _?C(_,!1):0}finally{s.close()}}return process.stderr.write(`oracle chain: unknown verb '${r}'
|
|
20
20
|
${b()}
|
|
21
|
-
`),1}};export{
|
|
21
|
+
`),1}};export{he as default};
|