@oracle-agent/oracle 0.21.0 → 0.22.1

package/dist/bin/oracle-gateway.mjs

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
-var B=Object.defineProperty;var O=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,r)=>(typeof require<"u"?require:t)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var u=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(o){throw r=[o],o}};var g=(e,t)=>{for(var r in t)B(e,r,{get:t[r],enumerable:!0})};import _ from"node:fs";import H from"node:os";import m from"node:path";import{fileURLToPath as J}from"node:url";function A(){return process.env.ORACLE_FAKE_HOME||H.homedir()}function z(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function y(){return z()?process.env.ORACLE_CONFIG_DIR||m.join(A(),".config","oracle"):m.join(A(),".config","oracle")}function Z(){return m.join(y(),"desk.json")}function Q(){return m.join(y(),"env")}function f({force:e=!1}={}){if(f._done&&!e)return f._result||null;f._done=!0;let t={},r=(a,n)=>{if(n==null)return;let s=String(n).trim();s&&(process.env[a]!=null&&String(process.env[a]).trim()!==""||(process.env[a]=s,t[a]=s))};try{let a=Q();if(_.existsSync(a))for(let n of _.readFileSync(a,"utf8").split(/\r?\n/)){let s=n.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let i=s[2];(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r(s[1],i)}}catch{}try{let a=Z();if(_.existsSync(a)){let n=JSON.parse(_.readFileSync(a,"utf8"));n&&typeof n=="object"&&(r("ORACLE_DESK_URL",n.deskUrl||n.dataUrl||n.url),r("ORACLE_DATA_URL",n.dataUrl||n.deskUrl||n.url),r("ORACLE_API_URL",n.apiUrl||n.dataUrl||n.deskUrl),r("ORACLE_PUBLIC_URL",n.publicUrl||n.deskUrl||n.dataUrl),r("ORACLE_EXEC_URL",n.execUrl),r("MAD_DESK_URL",n.deskUrl||n.dataUrl))}}catch{}let o=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return o&&(r("ORACLE_DESK_URL",o),r("ORACLE_DATA_URL",o),r("ORACLE_API_URL",o),r("ORACLE_PUBLIC_URL",o),r("MAD_DESK_URL",o)),f._result=Object.keys(t).length?t:null,f._result}var Y,Ue,L=u(()=>{Y=m.dirname(J(import.meta.url)),Ue=m.resolve(Y,"../..");try{f()}catch{}});import b from"node:fs";import V from"node:path";function re(){return V.join(y(),"model.json")}function d(e){return String(e||"").trim()||void 0}function te(e={}){let t=d(e.backend)?.toLowerCase()||"auto",r=d(e.provider)?.toLowerCase(),o=d(e.model),a=d(e.baseUrl)?.replace(/\/+$/,""),n=d(e.apiKeyEnv),s=Number.parseInt(String(e.contextLength||""),10),i=d(e.reasoningEffort),c=d(e.computeHost||e.remoteHost),p=d(e.computeUser||e.remoteUser),l=d(e.computePath||e.remotePath);if(!X.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(r&&!ee.has(r))throw new Error(`unsupported provider: ${r}`);if(a&&r!=="custom")throw new Error("baseUrl is only supported for the custom provider");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(r==="custom"&&!a)throw new Error("custom provider requires baseUrl");if(t==="standalone"&&!o)throw new Error("standalone backend requires a model");if(t==="remote"&&!c)throw new Error("remote backend requires computeHost");return{backend:t,...r?{provider:r}:{},...o?{model:o}:{},...a?{baseUrl:a}:{},...n?{apiKeyEnv:n}:{},...Number.isFinite(s)&&s>0?{contextLength:s}:{},...i?{reasoningEffort:i}:{},...c?{computeHost:c}:{},...p?{computeUser:p}:{},...l?{computePath:l}:{}}}function v(){let e=re();if(!b.existsSync(e))return null;try{return te(JSON.parse(b.readFileSync(e,"utf8")))}catch{return null}}var X,ee,x=u(()=>{L();X=new Set(["auto","standalone","hermes","remote","arch"]),ee=new Set(["openrouter","openai","xai","deepseek","gemini","custom","anthropic-oauth","openai-codex","xai-oauth"])});import{spawn as oe}from"node:child_process";import{join as j}from"node:path";import{homedir as k}from"node:os";function se(e,t=process.env){let r=String(t[`ORACLE_OWNER_${String(e).toUpperCase()}`]||""),o=String(t.ORACLE_OWNER_IDS||"");return new Set(`${r},${o}`.split(",").map(a=>a.trim()).filter(Boolean))}function C({platform:e,senderId:t},r=process.env){let o=String(t||"").trim();return o?se(e,r).has(o):!1}function ie(e={}){return!!(e.forwarded||e.forward_from||e.forward_from_chat||e.forward_origin||e.forward_sender_name||e.forward_date)}function ce({readConfig:e=v}={}){let t=e();return t?t.backend==="hermes"?{ok:!1,error:"model config delegates to hermes; the gateway runs Oracle's native loop. Set a standalone backend: oracle model --backend standalone"}:t.model?{ok:!0,provider:t.provider,model:t.model}:{ok:!1,error:"model config has no model \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}:{ok:!1,error:"gateway has no model configured \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}}async function w({platform:e,chatId:t,senderId:r,text:o,userName:a,meta:n={}}){if(!C({platform:e,senderId:r}))return process.stderr.write(`gateway: denied non-owner sender ${e}:${String(r||"unknown")}
-`),R;if(ie(n))return process.stderr.write(`gateway: dropped forwarded message on ${e}
-`),null;let s=o.toLowerCase().trim();return/\b(buy|sell|swap|bridge|send|transfer|balance|portfolio|watch|quote|price)\b/.test(s)?pe({platform:e,chatId:t,senderId:r,text:o,userName:a}):de({platform:e,chatId:t,senderId:r,text:o,userName:a})}function U(e,{timeout:t=12e4}={}){return new Promise(r=>{let o=oe(process.execPath,[ae,...e],{stdio:["ignore","pipe","pipe"],timeout:t,env:{...process.env,ORACLE_CONFIG_DIR:ne}}),a="",n="";o.stdout.on("data",s=>a+=s.toString()),o.stderr.on("data",s=>n+=s.toString()),o.on("close",s=>r({code:s,out:a.trim(),err:n.trim()}))})}async function pe({text:e}){let t=await U(["route","swap","--text",e],{timeout:3e4});if(t.code===0&&t.out)try{return le(JSON.parse(t.out))}catch{return t.out}return`Trade routing failed. Try: \`${e}\` again.`}async function de({text:e}){let t=ce();if(!t.ok)return`Oracle is not configured yet: ${t.error}`;let r=await U(["chat","-q",e]);return r.code===0&&r.out?r.out:r.err||"Oracle could not answer that. Try again."}function le(e){return e.error?`\u274C ${e.error}`:e.tx?`\u2705 Trade prepared: \`${e.tx.slice(0,20)}...\`
-Sign and broadcast from your own wallet.`:e.quote?`\u{1F4B1} ${e.quote}`:e.portfolio?`\u{1F4CA} ${e.portfolio}`:JSON.stringify(e,null,2)}var ne,ae,R,h=u(()=>{x();ne=process.env.ORACLE_CONFIG_DIR||j(k(),".config","oracle"),ae=process.env.ORACLE_CLI_ENTRY||j(k(),".local","share","oracle-stable","node_modules","@oracle-agent","oracle","bin","oracle.mjs");R="Oracle is self-hostable. Install your own instance: npm install -g @oracle-agent/oracle"});var D={};g(D,{telegram:()=>ue});async function ue(e){let{Bot:t}=await import("grammy"),r=new t(e.token);return r.command("start",o=>{let a=String(o.from?.id||o.chat.id);return C({platform:"telegram",senderId:a})?o.reply("Oracle ready. Ask me anything \u2014 swap, bridge, portfolio, watch."):o.reply(R)}),r.on("message:text",async o=>{let a=String(o.chat.id),n=String(o.from?.id||a),s=o.message.text;try{o.replyWithChatAction("typing").catch(()=>{});let i=await w({platform:"telegram",chatId:a,senderId:n,text:s,userName:o.from?.username||o.from?.first_name||"user",meta:{forward_origin:o.message.forward_origin,forward_from:o.message.forward_from,forward_from_chat:o.message.forward_from_chat,forward_sender_name:o.message.forward_sender_name,forward_date:o.message.forward_date}});i&&await o.reply(i,{parse_mode:"Markdown"})}catch(i){process.stderr.write(`telegram-gateway: ${i.message}
-`),await o.reply("Something went wrong. Try again.").catch(()=>{})}}),r.start(),{platform:"telegram",bot:r}}var P=u(()=>{h()});var I={};g(I,{discord:()=>fe});async function fe(e){let{Client:t,GatewayIntentBits:r}=await import("discord.js"),o=new t({intents:[r.Guilds,r.GuildMessages,r.MessageContent,r.DirectMessages]});return o.on("messageCreate",async a=>{if(a.author.bot)return;let n=a.channel.id,s=a.author.id,i=a.content;try{let c=!a.guild,p=a.mentions.has(o.user.id);if(!c&&!p)return;a.channel.sendTyping().catch(()=>{});let l=await w({platform:"discord",chatId:n,senderId:s,text:i.replace(`<@${o.user.id}>`,"").trim(),userName:a.author.username,meta:{forwarded:a.reference?.type===1||Array.isArray(a.messageSnapshots)&&a.messageSnapshots.length>0}});l&&await a.reply(l).catch(()=>{})}catch(c){process.stderr.write(`discord-gateway: ${c.message}
-`)}}),await o.login(e.token),{platform:"discord",client:o}}var N=u(()=>{h()});var $={};g($,{whatsapp:()=>ge});import{join as S}from"node:path";import{homedir as me}from"node:os";import{spawnSync as we}from"node:child_process";function he(){try{return O.resolve("whatsapp-web.js"),O.resolve("qrcode-terminal"),!0}catch{return process.stderr.write(`whatsapp-gateway: installing dependencies...
-`),we("npm",["install","whatsapp-web.js","qrcode-terminal"],{cwd:S(T,"gateway"),stdio:"inherit",timeout:6e4}).status===0}}async function ge(e){if(!he())return process.stderr.write(`whatsapp-gateway: failed to install dependencies
-`),{platform:"whatsapp",status:"failed"};let{Client:t,LocalAuth:r}=await import("whatsapp-web.js"),{generate:o}=await import("qrcode-terminal"),a=new t({authStrategy:new r({dataPath:S(T,".wwebjs_auth")}),puppeteer:{headless:!0,args:["--no-sandbox"]}});return a.on("qr",n=>{process.stderr.write(`
+var Z=Object.defineProperty;var O=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,r)=>(typeof require<"u"?require:t)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var l=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var g=(e,t)=>{for(var r in t)Z(e,r,{get:t[r],enumerable:!0})};import y from"node:fs";import re from"node:os";import u from"node:path";import{fileURLToPath as te}from"node:url";function L(){return process.env.ORACLE_FAKE_HOME||re.homedir()}function ne(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function _(){return ne()?process.env.ORACLE_CONFIG_DIR||u.join(L(),".config","oracle"):u.join(L(),".config","oracle")}function ae(){return u.join(_(),"desk.json")}function ie(){return u.join(_(),"env")}function p({force:e=!1}={}){if(p._done&&!e)return p._result||null;p._done=!0;let t={},r=(o,a)=>{if(a==null)return;let i=String(a).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=ie();if(y.existsSync(o))for(let a of y.readFileSync(o,"utf8").split(/\r?\n/)){let i=a.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let s=i[2];(s.startsWith('"')&&s.endsWith('"')||s.startsWith("'")&&s.endsWith("'"))&&(s=s.slice(1,-1)),r(i[1],s)}}catch{}try{let o=ae();if(y.existsSync(o)){let a=JSON.parse(y.readFileSync(o,"utf8"));a&&typeof a=="object"&&(r("ORACLE_DESK_URL",a.deskUrl||a.dataUrl||a.url),r("ORACLE_DATA_URL",a.dataUrl||a.deskUrl||a.url),r("ORACLE_API_URL",a.apiUrl||a.dataUrl||a.deskUrl),r("ORACLE_PUBLIC_URL",a.publicUrl||a.deskUrl||a.dataUrl),r("ORACLE_EXEC_URL",a.execUrl),r("MAD_DESK_URL",a.deskUrl||a.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),p._result=Object.keys(t).length?t:null,p._result}var oe,Be,k=l(()=>{oe=u.dirname(te(import.meta.url)),Be=u.resolve(oe,"../..");try{p()}catch{}});function E(e){return String(e||"").trim()||void 0}function ce(e,{required:t=!1}={}){let r=E(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!se.has(r))throw new Error(`unsupported provider: ${r}`);return r}function le(e,{required:t=!1}={}){let r=E(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function de(e){let t=E(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function v({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=ce(e),a=le(t,{required:n});if(o==="custom")return{provider:o,...a?{model:a}:{},baseUrl:de(r)};if(E(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...a?{model:a}:{}}}var se,U=l(()=>{se=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"])});import D from"node:fs";import pe from"node:path";function fe(){return pe.join(_(),"model.json")}function f(e){return String(e||"").trim()||void 0}function me(e={}){let t=f(e.backend)?.toLowerCase()||"auto",r=v({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=f(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),a=f(e.reasoningEffort),i=f(e.computeHost||e.remoteHost),s=f(e.computeUser||e.remoteUser),c=f(e.computePath||e.remotePath);if(!ue.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!i)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...a?{reasoningEffort:a}:{},...i?{computeHost:i}:{},...s?{computeUser:s}:{},...c?{computePath:c}:{}}}function T(){let e=fe();if(!D.existsSync(e))return null;try{return me(JSON.parse(D.readFileSync(e,"utf8")))}catch{return null}}var ue,P=l(()=>{k();U();ue=new Set(["auto","standalone","hermes","remote","arch"])});import{spawn as we}from"node:child_process";import{join as j}from"node:path";import{homedir as I}from"node:os";function ye(e,t=process.env){let r=String(t[`ORACLE_OWNER_${String(e).toUpperCase()}`]||""),n=String(t.ORACLE_OWNER_IDS||"");return new Set(`${r},${n}`.split(",").map(o=>o.trim()).filter(Boolean))}function C({platform:e,senderId:t},r=process.env){let n=String(t||"").trim();return n?ye(e,r).has(n):!1}function _e(e={}){return!!(e.forwarded||e.forward_from||e.forward_from_chat||e.forward_origin||e.forward_sender_name||e.forward_date)}function Ee({readConfig:e=T}={}){let t=e();return t?t.backend==="hermes"?{ok:!1,error:"model config delegates to hermes; the gateway runs Oracle's native loop. Set a standalone backend: oracle model --backend standalone"}:t.model?{ok:!0,provider:t.provider,model:t.model}:{ok:!1,error:"model config has no model \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}:{ok:!1,error:"gateway has no model configured \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}}async function m({platform:e,chatId:t,senderId:r,text:n,userName:o,meta:a={}}){if(!C({platform:e,senderId:r}))return process.stderr.write(`gateway: denied non-owner sender ${e}:${String(r||"unknown")}
+`),R;if(_e(a))return process.stderr.write(`gateway: dropped forwarded message on ${e}
+`),null;let i=n.toLowerCase().trim();return/\b(buy|sell|swap|bridge|send|transfer|balance|portfolio|watch|quote|price)\b/.test(i)?Ce({platform:e,chatId:t,senderId:r,text:n,userName:o}):be({platform:e,chatId:t,senderId:r,text:n,userName:o})}function N(e,{timeout:t=12e4}={}){return new Promise(r=>{let n=we(process.execPath,[ge,...e],{stdio:["ignore","pipe","pipe"],timeout:t,env:{...process.env,ORACLE_CONFIG_DIR:he}}),o="",a="";n.stdout.on("data",i=>o+=i.toString()),n.stderr.on("data",i=>a+=i.toString()),n.on("close",i=>r({code:i,out:o.trim(),err:a.trim()}))})}async function Ce({text:e}){let t=await N(["route","swap","--text",e],{timeout:3e4});if(t.code===0&&t.out)try{return Oe(JSON.parse(t.out))}catch{return t.out}return`Trade routing failed. Try: \`${e}\` again.`}async function be({text:e}){let t=Ee();if(!t.ok)return`Oracle is not configured yet: ${t.error}`;let r=await N(["chat","-q",e]);return r.code===0&&r.out?r.out:r.err||"Oracle could not answer that. Try again."}function Oe(e){return e.error?`\u274C ${e.error}`:e.tx?`\u2705 Trade prepared: \`${e.tx.slice(0,20)}...\`
+Sign and broadcast from your own wallet.`:e.quote?`\u{1F4B1} ${e.quote}`:e.portfolio?`\u{1F4CA} ${e.portfolio}`:JSON.stringify(e,null,2)}var he,ge,R,w=l(()=>{P();he=process.env.ORACLE_CONFIG_DIR||j(I(),".config","oracle"),ge=process.env.ORACLE_CLI_ENTRY||j(I(),".local","share","oracle-stable","node_modules","@oracle-agent","oracle","bin","oracle.mjs");R="Oracle is self-hostable. Install your own instance: npm install -g @oracle-agent/oracle"});var M={};g(M,{registerTelegramActionCallbacks:()=>$,telegram:()=>Re});function $(e,t,{isOwner:r=C}={}){return!t||typeof t.handle!="function"?!1:(e.on("callback_query:data",async n=>{let o=String(n.callbackQuery?.data||"");if(!o.startsWith("oa1:"))return;let a=String(n.from?.id||""),i=String(n.chat?.id||"");if(!r({platform:"telegram",senderId:a})){await n.answerCallbackQuery({text:"\u26D4 You are not authorized to use execution controls."});return}try{let s=await t.handle({callbackData:o,platform:"telegram",senderId:a,chatId:i});if(s.phase==="pending_confirmation"){await n.answerCallbackQuery({text:"Prepared \u2014 confirm the exact action."}),await n.reply("Prepared exact action. Confirm within its bounded TTL.",{reply_markup:{inline_keyboard:[[{text:"Confirm exact action",callback_data:s.callbackData}]]}});return}if(s.phase==="active"){await n.answerCallbackQuery({text:"Exact action confirmed."}),await n.reply(`Action confirmed: ${s.actionId}`);return}throw new Error("unexpected exact-action callback state")}catch(s){await n.answerCallbackQuery({text:`\u274C ${String(s.message||s).slice(0,180)}`})}}),!0)}async function Re(e,{actionCallbacks:t}={}){let{Bot:r}=await import("grammy"),n=new r(e.token);return n.command("start",o=>{let a=String(o.from?.id||o.chat.id);return C({platform:"telegram",senderId:a})?o.reply("Oracle ready. Ask me anything \u2014 swap, bridge, portfolio, watch."):o.reply(R)}),n.on("message:text",async o=>{let a=String(o.chat.id),i=String(o.from?.id||a),s=o.message.text;try{o.replyWithChatAction("typing").catch(()=>{});let c=await m({platform:"telegram",chatId:a,senderId:i,text:s,userName:o.from?.username||o.from?.first_name||"user",meta:{forward_origin:o.message.forward_origin,forward_from:o.message.forward_from,forward_from_chat:o.message.forward_from_chat,forward_sender_name:o.message.forward_sender_name,forward_date:o.message.forward_date}});c&&await o.reply(c,{parse_mode:"Markdown"})}catch(c){process.stderr.write(`telegram-gateway: ${c.message}
+`),await o.reply("Something went wrong. Try again.").catch(()=>{})}}),$(n,t),n.start(),{platform:"telegram",bot:n}}var F=l(()=>{w()});var q={};g(q,{discord:()=>Se});async function Se(e){let{Client:t,GatewayIntentBits:r}=await import("discord.js"),n=new t({intents:[r.Guilds,r.GuildMessages,r.MessageContent,r.DirectMessages]});return n.on("messageCreate",async o=>{if(o.author.bot)return;let a=o.channel.id,i=o.author.id,s=o.content;try{let c=!o.guild,d=o.mentions.has(n.user.id);if(!c&&!d)return;o.channel.sendTyping().catch(()=>{});let h=await m({platform:"discord",chatId:a,senderId:i,text:s.replace(`<@${n.user.id}>`,"").trim(),userName:o.author.username,meta:{forwarded:o.reference?.type===1||Array.isArray(o.messageSnapshots)&&o.messageSnapshots.length>0}});h&&await o.reply(h).catch(()=>{})}catch(c){process.stderr.write(`discord-gateway: ${c.message}
+`)}}),await n.login(e.token),{platform:"discord",client:n}}var G=l(()=>{w()});var z={};g(z,{whatsapp:()=>ke});import{join as S}from"node:path";import{homedir as Ae}from"node:os";import{spawnSync as xe}from"node:child_process";function Le(){try{return O.resolve("whatsapp-web.js"),O.resolve("qrcode-terminal"),!0}catch{return process.stderr.write(`whatsapp-gateway: installing dependencies...
+`),xe("npm",["install","whatsapp-web.js","qrcode-terminal"],{cwd:S(W,"gateway"),stdio:"inherit",timeout:6e4}).status===0}}async function ke(e){if(!Le())return process.stderr.write(`whatsapp-gateway: failed to install dependencies
+`),{platform:"whatsapp",status:"failed"};let{Client:t,LocalAuth:r}=await import("whatsapp-web.js"),{generate:n}=await import("qrcode-terminal"),o=new t({authStrategy:new r({dataPath:S(W,".wwebjs_auth")}),puppeteer:{headless:!0,args:["--no-sandbox"]}});return o.on("qr",a=>{process.stderr.write(`
 WhatsApp: scan this QR code in WhatsApp \u2192 Linked Devices:
 
-`),o(n,{small:!0}),process.stderr.write(`
-`)}),a.on("ready",()=>{process.stderr.write(`whatsapp-gateway: connected
-`)}),a.on("message",async n=>{if(n.fromMe)return;let s=n.from,i=n.author||n.from,c=n.body;try{let p=await w({platform:"whatsapp",chatId:s,senderId:i,text:c,userName:n._data?.notifyName||"user",meta:{forwarded:n.isForwarded||n._data?.isForwarded,forward_date:n._data?.forwardingScore?!0:void 0}});if(p){let l=p.replace(/\*\*/g,"*").replace(/```[\s\S]*?```/g,"[code]").replace(/`/g,"");await n.reply(l)}}catch(p){process.stderr.write(`whatsapp-gateway: ${p.message}
-`)}}),await a.initialize(),{platform:"whatsapp",client:a}}var T,F=u(()=>{h();T=process.env.ORACLE_CONFIG_DIR||S(me(),".config","oracle")});var M={};g(M,{signal_:()=>_e});async function _e(e){return process.stderr.write(`signal-gateway: requires signal-cli binary
+`),n(a,{small:!0}),process.stderr.write(`
+`)}),o.on("ready",()=>{process.stderr.write(`whatsapp-gateway: connected
+`)}),o.on("message",async a=>{if(a.fromMe)return;let i=a.from,s=a.author||a.from,c=a.body;try{let d=await m({platform:"whatsapp",chatId:i,senderId:s,text:c,userName:a._data?.notifyName||"user",meta:{forwarded:a.isForwarded||a._data?.isForwarded,forward_date:a._data?.forwardingScore?!0:void 0}});if(d){let h=d.replace(/\*\*/g,"*").replace(/```[\s\S]*?```/g,"[code]").replace(/`/g,"");await a.reply(h)}}catch(d){process.stderr.write(`whatsapp-gateway: ${d.message}
+`)}}),await o.initialize(),{platform:"whatsapp",client:o}}var W,H=l(()=>{w();W=process.env.ORACLE_CONFIG_DIR||S(Ae(),".config","oracle")});var B={};g(B,{signal_:()=>ve});async function ve(e){return process.stderr.write(`signal-gateway: requires signal-cli binary
 `),process.stderr.write(`signal-gateway: not built yet \u2014 use Telegram or Discord for now
-`),{platform:"signal",status:"stub"}}var G=u(()=>{h()});import{createServer as ye}from"node:http";import{env as W}from"node:process";import{join as K}from"node:path";import{homedir as Ee}from"node:os";import{readFileSync as Oe,existsSync as Ce}from"node:fs";var Re=W.ORACLE_CONFIG_DIR||K(Ee(),".config","oracle"),q=K(Re,"gateway.json");function Se(){return Ce(q)?JSON.parse(Oe(q,"utf8")):{platforms:{}}}var Ae=Object.freeze({telegram:"grammy",discord:"discord.js",whatsapp:"whatsapp-web.js"});async function E(e,t,r,o){try{o.push(await t(r))}catch(a){let n=Ae[e];if(n&&/Cannot find (module|package)|ERR_MODULE_NOT_FOUND/.test(String(a.message))){process.stderr.write(`oracle-gateway: ${e} needs an optional dependency. Install it first:
-  npm install -g ${n}
-`);return}process.stderr.write(`oracle-gateway: ${e} failed to start: ${a.message}
-`)}}async function Le(){let e=Se(),t=[];e.platforms?.telegram&&await E("telegram",async r=>(await Promise.resolve().then(()=>(P(),D))).telegram(r.platforms.telegram),e,t),e.platforms?.discord&&await E("discord",async r=>(await Promise.resolve().then(()=>(N(),I))).discord(r.platforms.discord),e,t),e.platforms?.whatsapp&&await E("whatsapp",async r=>(await Promise.resolve().then(()=>(F(),$))).whatsapp(r.platforms.whatsapp),e,t),e.platforms?.signal&&await E("signal",async r=>(await Promise.resolve().then(()=>(G(),M))).signal_(r.platforms.signal),e,t),t.length===0&&process.stderr.write(`oracle-gateway: no platforms configured. Run 'oracle setup telegram' first.
+`),{platform:"signal",status:"stub"}}var K=l(()=>{w()});import{createServer as Ue}from"node:http";import{env as A}from"node:process";import{join as Q}from"node:path";import{homedir as De}from"node:os";import{readFileSync as Te,existsSync as Pe}from"node:fs";import{pathToFileURL as V}from"node:url";import{isAbsolute as X,resolve as ee}from"node:path";async function x({modulePath:e,configDir:t,importer:r=n=>import(n)}={}){let n=String(e||"").trim();if(n&&!X(n))throw new Error("Telegram exact-action module path must be absolute");let o=n?[V(ee(n)).href]:["@oracle-agent/agent/telegram-exact-action-callbacks"];for(let a of o)try{let i=await r(a),s=i.createTelegramExactActionCallbacks||i.default;if(typeof s!="function")throw new Error("module does not export createTelegramExactActionCallbacks");let c=await s({configDir:t});if(!c||typeof c.handle!="function")throw new Error("factory did not return an exact-action handler");return c}catch(i){if(n)throw new Error(`Telegram exact-action module failed: ${i.message}`);if(!/ERR_MODULE_NOT_FOUND|Cannot find (module|package)|not defined by "exports"/i.test(String(i?.code||i?.message)))throw i}return null}var Y=A.ORACLE_CONFIG_DIR||Q(De(),".config","oracle"),J=Q(Y,"gateway.json");function je(){return Pe(J)?JSON.parse(Te(J,"utf8")):{platforms:{}}}var Ie=Object.freeze({telegram:"grammy",discord:"discord.js",whatsapp:"whatsapp-web.js"});async function b(e,t,r,n){try{n.push(await t(r))}catch(o){let a=Ie[e];if(a&&/Cannot find (module|package)|ERR_MODULE_NOT_FOUND/.test(String(o.message))){process.stderr.write(`oracle-gateway: ${e} needs an optional dependency. Install it first:
+  npm install -g ${a}
+`);return}process.stderr.write(`oracle-gateway: ${e} failed to start: ${o.message}
+`)}}async function Ne(){let e=je(),t=[];if(e.platforms?.telegram){let r=await x({modulePath:A.ORACLE_TELEGRAM_ACTION_MODULE||e.platforms.telegram.actionModule,configDir:Y});await b("telegram",async n=>(await Promise.resolve().then(()=>(F(),M))).telegram(n.platforms.telegram,{actionCallbacks:r}),e,t)}e.platforms?.discord&&await b("discord",async r=>(await Promise.resolve().then(()=>(G(),q))).discord(r.platforms.discord),e,t),e.platforms?.whatsapp&&await b("whatsapp",async r=>(await Promise.resolve().then(()=>(H(),z))).whatsapp(r.platforms.whatsapp),e,t),e.platforms?.signal&&await b("signal",async r=>(await Promise.resolve().then(()=>(K(),B))).signal_(r.platforms.signal),e,t),t.length===0&&process.stderr.write(`oracle-gateway: no platforms configured. Run 'oracle setup telegram' first.
 `),process.stderr.write(`oracle-gateway: ${t.length} platform(s) connected
-`),ye((r,o)=>{o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"ok",platforms:Object.keys(e.platforms||{})}))}).listen(W.ORACLE_GATEWAY_PORT||9270,"127.0.0.1")}Le().catch(e=>{process.stderr.write(`oracle-gateway: ${e.message}
+`),Ue((r,n)=>{n.writeHead(200,{"Content-Type":"application/json"}),n.end(JSON.stringify({status:"ok",platforms:Object.keys(e.platforms||{})}))}).listen(A.ORACLE_GATEWAY_PORT||9270,"127.0.0.1")}Ne().catch(e=>{process.stderr.write(`oracle-gateway: ${e.message}
 `),process.exit(1)});

package/dist/bin/oracle.mjs

@@ -21,7 +21,8 @@ import{realpathSync as K}from"node:fs";import{fileURLToPath as je}from"node:url"
   oracle model                choose standalone/Hermes provider and any compatible model
   oracle auth                 Claude/Codex/Grok OAuth or securely stored provider API keys
   oracle chain                list/select working chains (hyperliquid, base, ...)
-  oracle setup                telegram/discord/slack messaging menu
+  oracle setup model          choose Claude/Codex/Grok standalone OAuth
+  oracle setup                standalone model + messaging menu
   oracle data serve|call|catalog|health
   oracle data-mcp             start the read-only MCP server
   oracle scan chains|head|token|pools|risk|quote|sell
@@ -49,18 +50,18 @@ SIGNING (dispatches to @oracle-agent/operator on THIS machine; never in this pac
 
 oracle <noun> --help for details. Keys never leave your machine; this package
 cannot sign \u2014 signing commands run the locally installed operator package.
-`;function q(){try{return JSON.parse(O.readFileSync(b.join(p,"package.json"),"utf8")).version||"0.0.0"}catch{return"0.0.0"}}function ve(){let e=b.join(p,"src","cli","commands");return O.existsSync(e)?e:b.join(p,"dist","cli","commands")}async function v(){let e=ve(),n=new Map;if(!O.existsSync(e))return n;let r=O.readdirSync(e).filter(s=>s.endsWith(".mjs")).sort();for(let s of r){let a=b.join(e,s);try{let o=(await import(ge(a).href+`?t=${Date.now()}`)).default;if(!o||typeof o!="object"||typeof o.run!="function")continue;let c=o.name||s.replace(/\.mjs$/,"");n.set(c,{...o,name:c,__file:a})}catch(t){process.env.ORACLE_CLI_DEBUG&&console.error(`oracle: failed loading command ${s}: ${t.message}`)}}return n}function xe(e,n=$()){return!n?.latest||!e||D(n.latest,e)<=0?"":`
+`;function G(){try{return JSON.parse(O.readFileSync(b.join(p,"package.json"),"utf8")).version||"0.0.0"}catch{return"0.0.0"}}function ve(){let e=b.join(p,"src","cli","commands");return O.existsSync(e)?e:b.join(p,"dist","cli","commands")}async function v(){let e=ve(),n=new Map;if(!O.existsSync(e))return n;let r=O.readdirSync(e).filter(s=>s.endsWith(".mjs")).sort();for(let s of r){let a=b.join(e,s);try{let o=(await import(ge(a).href+`?t=${Date.now()}`)).default;if(!o||typeof o!="object"||typeof o.run!="function")continue;let c=o.name||s.replace(/\.mjs$/,"");n.set(c,{...o,name:c,__file:a})}catch(t){process.env.ORACLE_CLI_DEBUG&&console.error(`oracle: failed loading command ${s}: ${t.message}`)}}return n}function xe(e,n=$()){return!n?.latest||!e||D(n.latest,e)<=0?"":`
 Update available: ${e} \u2192 ${n.latest}. Run 'oracle update'.
-`}function w(e,n){let r=[];r.push(`${ye} (v${e})`),r.push(""),r.push(ke.trimEnd());let s=[];for(let a of n.values()){if(["help","version"].includes(a.name))continue;!new Set(["init","doctor","chat","model","chain","setup","data","data-mcp","scan","route","prepare","swap","farm","follow","equities","strategy","public","mcp","plugins","harness","upgrade","bootstrap","eval","sign","vault","signer","runner","credential"]).has(a.name)&&a.summary&&s.push(`  oracle ${a.name.padEnd(20)} ${a.summary}`)}return s.length&&(r.push(""),r.push("ADDITIONAL"),r.push(...s)),r.join(`
+`}function w(e,n){let r=[];r.push(`${ye} (v${e})`),r.push(""),r.push(ke.trimEnd());let s=[];for(let a of n.values()){if(["help","version"].includes(a.name))continue;!new Set(["init","doctor","chat","model","auth","chain","setup","data","data-mcp","scan","route","prepare","swap","farm","follow","equities","strategy","public","mcp","plugins","harness","upgrade","bootstrap","eval","sign","vault","signer","runner","credential"]).has(a.name)&&a.summary&&s.push(`  oracle ${a.name.padEnd(20)} ${a.summary}`)}return s.length&&(r.push(""),r.push("ADDITIONAL"),r.push(...s)),r.join(`
 `)+`
 `+xe(e)}function M(e,n){let r=[...n.keys()].sort(),s=r.length?r.join(", "):"(none loaded yet)";return`oracle: unknown command '${e}'. Known: ${s}
 Try: oracle --help
-`}function x(e){return{argv:e,root:p,bin:_,paths:U,dispatchOperator:H,resolveOperator:k}}async function G(e=[]){let n=q();if(e.includes("--version")||e.includes("-V"))return F();if(e[0]==="--help"||e[0]==="-h"){let o=await v();return process.stdout.write(w(n,o)),0}if(e.length===0){let o=await v();if(Oe(e)){let c=o.get("chat");if(c)return c.run(x([]))}return process.stdout.write(w(n,o)),0}if(be(e[0])){let c=(await v()).get("chat");if(c)return c.run(x(e))}let r=e[0],s=e.slice(1);if(r==="version")return F();if(r==="help"){let o=await v();if(s[0]){let c=o.get(s[0]);return c?(process.stdout.write((c.usage||`oracle ${c.name}`)+`
+`}function x(e){return{argv:e,root:p,bin:_,paths:U,dispatchOperator:H,resolveOperator:k}}async function q(e=[]){let n=G();if(e.includes("--version")||e.includes("-V"))return F();if(e[0]==="--help"||e[0]==="-h"){let o=await v();return process.stdout.write(w(n,o)),0}if(e.length===0){let o=await v();if(Oe(e)){let c=o.get("chat");if(c)return c.run(x([]))}return process.stdout.write(w(n,o)),0}if(be(e[0])){let c=(await v()).get("chat");if(c)return c.run(x(e))}let r=e[0],s=e.slice(1);if(r==="version")return F();if(r==="help"){let o=await v();if(s[0]){let c=o.get(s[0]);return c?(process.stdout.write((c.usage||`oracle ${c.name}`)+`
 `),c.summary&&process.stdout.write(c.summary+`
 `),0):(process.stderr.write(M(s[0],o)),1)}return process.stdout.write(w(n,o)),0}let a=await v(),t=a.get(r);if(t){if(s[0]==="--help"||s[0]==="-h")return process.stdout.write((t.usage||`oracle ${t.name}`)+`
 `),t.summary&&process.stdout.write(t.summary+`
 `),0;if(R.includes(r))try{let o=await t.run(x(s));return typeof o=="number"?o:0}catch(o){return process.stderr.write(`oracle ${r}: ${o?.message||o}
 `),1}try{let o=await t.run(x(s));return typeof o=="number"?o:0}catch(o){return process.stderr.write(`oracle ${r}: ${o?.message||o}
 `),1}}return R.includes(r)?k().ok?(process.stderr.write(`oracle: sign-plane command '${r}' is not available in this build (operator is installed).
-`),1):(E(process.stderr),3):(process.stderr.write(M(r,a)),1)}async function F(){let n=`oracle ${q()}`,r=k();return r.ok&&(n+=`  operator ${r.version}`),process.stdout.write(n+`
-`),0}function Oe(e=[],n={stdin:process.stdin,stdout:process.stdout}){return e.length!==0?!1:process.env.ORACLE_FORCE_CHAT==="1"?!0:n.stdin?.isTTY===!0&&n.stdout?.isTTY===!0}function be(e){return["-m","--model","--provider","-q","--query","-Q","--quiet","-c","--continue","-r","--resume","-s","--skills","-t","--toolsets","--reasoning","--tui","--cli","--yolo","--checkpoints","--source","--max-turns"].includes(String(e||""))}var or=Object.freeze({data:"./desk-server.mjs",public:"./oracle-public-server.mjs","data-mcp":"./oracle-data-mcp.mjs",init:"./oracle-init.mjs",upgrade:"./oracle-upgrade.mjs",scan:"./oracle-scan.mjs",route:"./oracle-route.mjs",equities:"./oracle-equities.mjs"});function _e(){if(!process.argv[1])return!1;try{return K(je(import.meta.url))===K(process.argv[1])}catch{return!1}}async function Re(e=process.argv.slice(2)){return G(e)}if(_e()){let e=await Re();process.exit(typeof e=="number"?e:0)}export{or as COMMANDS,Re as main};
+`),1):(E(process.stderr),3):(process.stderr.write(M(r,a)),1)}async function F(){let n=`oracle ${G()}`,r=k();return r.ok&&(n+=`  operator ${r.version}`),process.stdout.write(n+`
+`),0}function Oe(e=[],n={stdin:process.stdin,stdout:process.stdout}){return e.length!==0?!1:process.env.ORACLE_FORCE_CHAT==="1"?!0:n.stdin?.isTTY===!0&&n.stdout?.isTTY===!0}function be(e){return["-m","--model","--provider","-q","--query","-Q","--quiet","-c","--continue","-r","--resume","-s","--skills","-t","--toolsets","--reasoning","--tui","--cli","--yolo","--checkpoints","--source","--max-turns"].includes(String(e||""))}var or=Object.freeze({data:"./desk-server.mjs",public:"./oracle-public-server.mjs","data-mcp":"./oracle-data-mcp.mjs",init:"./oracle-init.mjs",upgrade:"./oracle-upgrade.mjs",scan:"./oracle-scan.mjs",route:"./oracle-route.mjs",equities:"./oracle-equities.mjs"});function _e(){if(!process.argv[1])return!1;try{return K(je(import.meta.url))===K(process.argv[1])}catch{return!1}}async function Re(e=process.argv.slice(2)){return q(e)}if(_e()){let e=await Re();process.exit(typeof e=="number"?e:0)}export{or as COMMANDS,Re as main};

package/dist/cli/commands/auth.mjs

@@ -1,16 +1,16 @@
-import $ from"node:fs";import L from"node:path";import U from"node:fs";import se from"node:os";import O from"node:path";import{fileURLToPath as ce}from"node:url";var ae=O.dirname(ce(import.meta.url)),ze=O.resolve(ae,"../..");function J(){return process.env.ORACLE_FAKE_HOME||se.homedir()}function ue(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function b(){return ue()?process.env.ORACLE_CONFIG_DIR||O.join(J(),".config","oracle"):O.join(J(),".config","oracle")}function de(){return O.join(b(),"desk.json")}function pe(){return O.join(b(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let t={},r=(o,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=s,t[o]=s))};try{let o=pe();if(U.existsSync(o))for(let i of U.readFileSync(o,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let p=s[2];(p.startsWith('"')&&p.endsWith('"')||p.startsWith("'")&&p.endsWith("'"))&&(p=p.slice(1,-1)),r(s[1],p)}}catch{}try{let o=de();if(U.existsSync(o)){let i=JSON.parse(U.readFileSync(o,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),E._result=Object.keys(t).length?t:null,E._result}try{E()}catch{}function j(e){return U.mkdirSync(e,{recursive:!0}),e}var le=new Set(["auto","standalone","hermes","remote","arch"]),fe=new Set(["openrouter","openai","xai","deepseek","gemini","custom","anthropic-oauth","openai-codex","xai-oauth"]);function he(){return L.join(b(),"model.json")}function k(e){return String(e||"").trim()||void 0}function me(e={}){let t=k(e.backend)?.toLowerCase()||"auto",r=k(e.provider)?.toLowerCase(),n=k(e.model),o=k(e.baseUrl)?.replace(/\/+$/,""),i=k(e.apiKeyEnv),s=Number.parseInt(String(e.contextLength||""),10),p=k(e.reasoningEffort),u=k(e.computeHost||e.remoteHost),g=k(e.computeUser||e.remoteUser),h=k(e.computePath||e.remotePath);if(!le.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(r&&!fe.has(r))throw new Error(`unsupported provider: ${r}`);if(o&&r!=="custom")throw new Error("baseUrl is only supported for the custom provider");if(i&&!/^[A-Z][A-Z0-9_]*$/.test(i))throw new Error("api key env must be an uppercase environment variable name");if(r==="custom"&&!o)throw new Error("custom provider requires baseUrl");if(t==="standalone"&&!n)throw new Error("standalone backend requires a model");if(t==="remote"&&!u)throw new Error("remote backend requires computeHost");return{backend:t,...r?{provider:r}:{},...n?{model:n}:{},...o?{baseUrl:o}:{},...i?{apiKeyEnv:i}:{},...Number.isFinite(s)&&s>0?{contextLength:s}:{},...p?{reasoningEffort:p}:{},...u?{computeHost:u}:{},...g?{computeUser:g}:{},...h?{computePath:h}:{}}}function W(e){let t=me(e),r=he();j(L.dirname(r)),process.platform!=="win32"&&$.chmodSync(L.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return $.writeFileSync(n,`${JSON.stringify(t,null,2)}
-`,{mode:384}),$.renameSync(n,r),process.platform!=="win32"&&$.chmodSync(r,384),t}import{createHash as we,randomBytes as F,timingSafeEqual as ge}from"node:crypto";import y from"node:fs";import x from"node:path";import ye from"node:readline/promises";import{spawn as ve,spawnSync as ke}from"node:child_process";var C=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.5",protocol:"responses"}}),xe=12e4;function _e(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function A(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(C))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function V(e){let t=A(e);return{id:t,...C[t]}}function w(e,t={}){if(!y.existsSync(e))return t;try{let r=JSON.parse(y.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${x.basename(e)}`)}}function X(e){j(e),process.platform!=="win32"&&y.chmodSync(e,448)}function _(e,t){X(x.dirname(e));let r=`${e}.${process.pid}.${F(4).toString("hex")}.tmp`;y.writeFileSync(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),y.renameSync(r,e),process.platform!=="win32"&&y.chmodSync(e,384)}function Ae(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function T(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function R(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=Number(e.expiresAt||e.expires_at||0);if(!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(n)?n:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function Se(e={}){let t=e.file||x.join(b(),"oauth.json"),r=e.metadataFile||x.join(x.dirname(t),"oauth-meta.json"),n=e.linksFile||x.join(x.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),i=e.spawnFn||ke,s=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&Ae(i),p=s?"linux-secret-service":"private-file",u=`${t}.lock`;async function g(f){X(x.dirname(u));let l;for(let c=0;c<400;c+=1)try{l=y.openSync(u,"wx",384);break}catch(a){if(a?.code!=="EEXIST")throw a;try{Date.now()-y.statSync(u).mtimeMs>3e5&&y.unlinkSync(u)}catch{}await new Promise(d=>setTimeout(d,25))}if(l===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await f()}finally{try{y.closeSync(l)}catch{}try{y.unlinkSync(u)}catch{}}}function h(f,l="oauth"){return["application","oracle","kind",l,"provider",f]}function P(f){if(!y.existsSync(n))return null;let c=w(n,{providers:{}}).providers?.[f];if(!Array.isArray(c))return null;let a=[];for(let d of c)if(x.isAbsolute(String(d||"")))try{let m=w(d,{}),v=f==="anthropic-oauth"?m.claudeAiOauth:null;if(!v)continue;let ie=R(v);a.push({...ie,refreshToken:"",source:"external-access-only"})}catch{}return a.length?a.find(d=>!d.expiresAt||d.expiresAt>o()+xe)||a[0]:null}function B(f){let l=A(f);if(s){let d=i("secret-tool",["lookup",...h(l)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!d.error&&d.status===0&&String(d.stdout||"").trim())try{return R(JSON.parse(String(d.stdout).trim()))}catch{}return P(l)}let a=w(t,{providers:{}}).providers?.[l];if(a)try{return R(a)}catch{}return P(l)}function ee(f,l){let c=A(f),a=R(l);if(s){let m=i("secret-tool",["store",`--label=Oracle ${c} OAuth`,...h(c)],{input:JSON.stringify(a),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(m.error||m.status!==0)throw new Error("OS credential store rejected OAuth credential");let v=w(r,{providers:{}});return v.providers||={},v.providers[c]={expiresAt:a.expiresAt,source:a.source},_(r,v),a}let d=w(t,{providers:{}});return d.providers||={},d.providers[c]=a,_(t,d),a}function te(f){let l=A(f);if(s){let d=i("secret-tool",["clear",...h(l)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),m=w(r,{providers:{}});return m.providers&&delete m.providers[l],_(r,m),!d.error&&d.status===0}let c=w(t,{providers:{}}),a=!!c.providers?.[l];return c.providers&&delete c.providers[l],_(t,c),a}function H(f){let l=T(f);if(s){let c=i("secret-tool",["lookup",...h(l,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return c.error||c.status!==0?"":String(c.stdout||"").trim()}return String(w(t,{apiKeys:{}}).apiKeys?.[l]||"").trim()}function re(f,l){let c=T(f),a=String(l||"").trim();if(!a)throw new Error("API key is empty");if(s){let m=i("secret-tool",["store",`--label=Oracle ${c} API key`,...h(c,"api-key")],{input:a,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(m.error||m.status!==0)throw new Error("OS credential store rejected API key");let v=w(r,{providers:{},apiKeys:{}});return v.apiKeys||={},v.apiKeys[c]={configured:!0},_(r,v),!0}let d=w(t,{providers:{},apiKeys:{}});return d.apiKeys||={},d.apiKeys[c]=a,_(t,d),!0}function oe(f){let l=T(f);if(s){let d=i("secret-tool",["clear",...h(l,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),m=w(r,{providers:{},apiKeys:{}});return m.apiKeys&&delete m.apiKeys[l],_(r,m),!d.error&&d.status===0}let c=w(t,{providers:{},apiKeys:{}}),a=!!c.apiKeys?.[l];return c.apiKeys&&delete c.apiKeys[l],_(t,c),a}function ne(){let f={},l={};if(s){let c=w(r,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!B(a),expiresAt:Number(d.expiresAt||0),source:String(d.source||"oracle"),storage:p};for(let a of Object.keys(c.apiKeys||{}))l[a]={configured:!!H(a),storage:p}}else{let c=w(t,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!d?.accessToken,expiresAt:Number(d?.expiresAt||0),source:String(d?.source||"oracle"),storage:p};for(let[a,d]of Object.entries(c.apiKeys||{}))l[a]={configured:!!d,storage:p}}for(let c of Object.keys(C)){if(f[c])continue;let a=P(c);a&&(f[c]={loggedIn:!0,expiresAt:a.expiresAt,source:a.source,storage:"external-access-source"})}return{storage:p,providers:f,apiKeys:l}}return Object.freeze({file:t,storage:p,get:B,set:ee,remove:te,getApiKey:H,setApiKey:re,removeApiKey:oe,status:ne,withLock:g})}var q;function G(){return q||=Se(),q}function K(e){return Buffer.from(e).toString("base64url")}function Ee(){let e=K(F(32));return{verifier:e,challenge:K(we("sha256").update(e).digest()),state:K(F(24))}}function Oe(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&ge(r,n)}function be(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return ve(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function D(e){return new URLSearchParams(e).toString()}async function S(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Ce(e){if(e)return String(await e()).trim();let t=ye.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function z(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return R({accessToken:r,refreshToken:n,expiresAt:_e(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Pe(e){let t=C["anthropic-oauth"],r=e.pkce||Ee(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let i=await Ce(e.inputFn),[s,p]=i.split("#",2);if(!s||!Oe(p,r.state))throw new Error("Claude OAuth state mismatch");let u=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:s,state:p,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return z(await S(u,"Claude OAuth token exchange"),e)}async function Ue(e){let t=C["openai-codex"],r=await S(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),i;for(let p=0;p<Math.ceil(900/o);p+=1){await e.sleepFn(o*1e3);let u=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(u.ok){i=await S(u,"Codex device authorization");break}if(![403,404].includes(u.status))throw new Error(`Codex device authorization failed (HTTP ${u.status})`)}if(!i)throw new Error("Codex device authorization timed out");let s=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:D({grant_type:"authorization_code",code:i.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:i.code_verifier})});return z(await S(s,"Codex OAuth token exchange"),e)}function I(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Re(e){let t=C["xai-oauth"],r=await S(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");I(r.authorization_endpoint);let n=I(r.token_endpoint),o=await S(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:D({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let i=I(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${i}`),e.output(`Code: ${o.user_code}`),e.openFn(i);let s=Math.max(1,Number(o.interval||5)),p=Math.ceil(Math.max(1,Number(o.expires_in||600))/s);for(let u=0;u<p;u+=1){let g=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:D({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(g.ok){let P=await S(g,"xAI OAuth token exchange");return z(P,{...e,discovery:{authorization_endpoint:I(r.authorization_endpoint),token_endpoint:n}})}let h="";try{h=String((await g.json())?.error||"")}catch{}if(h==="slow_down")await e.sleepFn((s+1)*1e3);else if(h==="authorization_pending")await e.sleepFn(s*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${g.status}${h?`, ${h}`:""})`)}throw new Error("xAI device authorization timed out")}async function Z(e,t={}){let r=A(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(i=>setTimeout(i,o))),openFn:t.openFn||be,output:t.output||(o=>process.stdout.write(`${o}
-`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Pe(n):r==="openai-codex"?Ue(n):Re(n)}var Y=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},xai:{model:"grok-4.5"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},custom:{model:""}});function M(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function je(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function $e(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",i),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
+import T from"node:fs";import F from"node:path";import j from"node:fs";import pe from"node:os";import O from"node:path";import{fileURLToPath as le}from"node:url";var fe=O.dirname(le(import.meta.url)),Ve=O.resolve(fe,"../..");function X(){return process.env.ORACLE_FAKE_HOME||pe.homedir()}function he(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function b(){return he()?process.env.ORACLE_CONFIG_DIR||O.join(X(),".config","oracle"):O.join(X(),".config","oracle")}function me(){return O.join(b(),"desk.json")}function we(){return O.join(b(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let t={},r=(n,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,t[n]=s))};try{let n=we();if(j.existsSync(n))for(let i of j.readFileSync(n,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let p=s[2];(p.startsWith('"')&&p.endsWith('"')||p.startsWith("'")&&p.endsWith("'"))&&(p=p.slice(1,-1)),r(s[1],p)}}catch{}try{let n=me();if(j.existsSync(n)){let i=JSON.parse(j.readFileSync(n,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let o=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return o&&(r("ORACLE_DESK_URL",o),r("ORACLE_DATA_URL",o),r("ORACLE_API_URL",o),r("ORACLE_PUBLIC_URL",o),r("MAD_DESK_URL",o)),E._result=Object.keys(t).length?t:null,E._result}try{E()}catch{}function $(e){return j.mkdirSync(e,{recursive:!0}),e}var ge=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"]);function I(e){return String(e||"").trim()||void 0}function ye(e,{required:t=!1}={}){let r=I(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!ge.has(r))throw new Error(`unsupported provider: ${r}`);return r}function ve(e,{required:t=!1}={}){let r=I(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function ke(e){let t=I(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let o=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=o==="localhost"||o==="127.0.0.1"||o==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function L({provider:e,model:t,baseUrl:r}={},{requireModel:o=!1}={}){let n=ye(e),i=ve(t,{required:o});if(n==="custom")return{provider:n,...i?{model:i}:{},baseUrl:ke(r)};if(I(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...i?{model:i}:{}}}var xe=new Set(["auto","standalone","hermes","remote","arch"]);function _e(){return F.join(b(),"model.json")}function P(e){return String(e||"").trim()||void 0}function Ae(e={}){let t=P(e.backend)?.toLowerCase()||"auto",r=L({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),o=P(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),i=P(e.reasoningEffort),s=P(e.computeHost||e.remoteHost),p=P(e.computeUser||e.remoteUser),u=P(e.computePath||e.remotePath);if(!xe.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(o&&!/^[A-Z][A-Z0-9_]*$/.test(o))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...o?{apiKeyEnv:o}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...i?{reasoningEffort:i}:{},...s?{computeHost:s}:{},...p?{computeUser:p}:{},...u?{computePath:u}:{}}}function Z(e){let t=Ae(e),r=_e();$(F.dirname(r)),process.platform!=="win32"&&T.chmodSync(F.dirname(r),448);let o=`${r}.${process.pid}.tmp`;return T.writeFileSync(o,`${JSON.stringify(t,null,2)}
+`,{mode:384}),T.renameSync(o,r),process.platform!=="win32"&&T.chmodSync(r,384),t}import{createHash as Se,randomBytes as N,timingSafeEqual as Ee}from"node:crypto";import g from"node:fs";import k from"node:path";import Oe from"node:readline/promises";import{spawn as be,spawnSync as Pe}from"node:child_process";var R=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.5",protocol:"responses"}}),Ce=12e4;function Re(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function _(e){let t=String(e||"").trim().toLowerCase();for(let[r,o]of Object.entries(R))if(o.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function Y(e){let t=_(e);return{id:t,...R[t]}}function m(e,t={}){if(!g.existsSync(e))return t;try{let r=JSON.parse(g.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${k.basename(e)}`)}}function Q(e){$(e),process.platform!=="win32"&&g.chmodSync(e,448)}function x(e,t){Q(k.dirname(e));let r=`${e}.${process.pid}.${N(4).toString("hex")}.tmp`;g.writeFileSync(r,`${JSON.stringify(t,null,2)}
+`,{mode:384}),g.renameSync(r,e),process.platform!=="win32"&&g.chmodSync(e,384)}function Ue(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function D(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function C(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),o=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function je(e={}){let t=e.file||k.join(b(),"oauth.json"),r=e.metadataFile||k.join(k.dirname(t),"oauth-meta.json"),o=e.linksFile||k.join(k.dirname(t),"oauth-links.json"),n=()=>typeof e.now=="function"?Number(e.now()):Date.now(),i=e.spawnFn||Pe,s=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&Ue(i),p=s?"linux-secret-service":"private-file",u=`${t}.lock`;async function v(f){Q(k.dirname(u));let l;for(let c=0;c<400;c+=1)try{l=g.openSync(u,"wx",384);break}catch(a){if(a?.code!=="EEXIST")throw a;try{Date.now()-g.statSync(u).mtimeMs>3e5&&g.unlinkSync(u)}catch{}await new Promise(d=>setTimeout(d,25))}if(l===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await f()}finally{try{g.closeSync(l)}catch{}try{g.unlinkSync(u)}catch{}}}function w(f,l="oauth"){return["application","oracle","kind",l,"provider",f]}function U(f){if(!g.existsSync(o))return null;let c=m(o,{providers:{}}).providers?.[f];if(!Array.isArray(c))return null;let a=[];for(let d of c)if(k.isAbsolute(String(d||"")))try{let h=m(d,{});if(f==="anthropic-oauth"&&h.claudeAiOauth){let S=C(h.claudeAiOauth);a.push({...S,refreshToken:"",source:"external-access-only"});continue}let y=h.credential_pool&&typeof h.credential_pool=="object"?h.credential_pool:null;if(y){let S=y[f]||y[f.replace(/-oauth$/,"")]||[],ue=Array.isArray(S)?S:S?[S]:[];for(let z of ue)if(!(!z||typeof z!="object"))try{let de=C(z);a.push({...de,refreshToken:"",source:"external-access-only"})}catch{}}}catch{}return a.length?a.find(d=>!d.expiresAt||d.expiresAt>n()+Ce)||a[0]:null}function W(f){let l=_(f);if(s){let d=i("secret-tool",["lookup",...w(l)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!d.error&&d.status===0&&String(d.stdout||"").trim())try{return C(JSON.parse(String(d.stdout).trim()))}catch{}return U(l)}let a=m(t,{providers:{}}).providers?.[l];if(a)try{return C(a)}catch{}return U(l)}function ne(f,l){let c=_(f),a=C(l);if(s){let h=i("secret-tool",["store",`--label=Oracle ${c} OAuth`,...w(c)],{input:JSON.stringify(a),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected OAuth credential");let y=m(r,{providers:{}});return y.providers||={},y.providers[c]={expiresAt:a.expiresAt,source:a.source},x(r,y),a}let d=m(t,{providers:{}});return d.providers||={},d.providers[c]=a,x(t,d),a}function ie(f){let l=_(f);if(s){let d=i("secret-tool",["clear",...w(l)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{}});return h.providers&&delete h.providers[l],x(r,h),!d.error&&d.status===0}let c=m(t,{providers:{}}),a=!!c.providers?.[l];return c.providers&&delete c.providers[l],x(t,c),a}function V(f){let l=D(f);if(s){let c=i("secret-tool",["lookup",...w(l,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return c.error||c.status!==0?"":String(c.stdout||"").trim()}return String(m(t,{apiKeys:{}}).apiKeys?.[l]||"").trim()}function se(f,l){let c=D(f),a=String(l||"").trim();if(!a)throw new Error("API key is empty");if(s){let h=i("secret-tool",["store",`--label=Oracle ${c} API key`,...w(c,"api-key")],{input:a,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected API key");let y=m(r,{providers:{},apiKeys:{}});return y.apiKeys||={},y.apiKeys[c]={configured:!0},x(r,y),!0}let d=m(t,{providers:{},apiKeys:{}});return d.apiKeys||={},d.apiKeys[c]=a,x(t,d),!0}function ce(f){let l=D(f);if(s){let d=i("secret-tool",["clear",...w(l,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{},apiKeys:{}});return h.apiKeys&&delete h.apiKeys[l],x(r,h),!d.error&&d.status===0}let c=m(t,{providers:{},apiKeys:{}}),a=!!c.apiKeys?.[l];return c.apiKeys&&delete c.apiKeys[l],x(t,c),a}function ae(){let f={},l={};if(s){let c=m(r,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!W(a),expiresAt:Number(d.expiresAt||0),source:String(d.source||"oracle"),storage:p};for(let a of Object.keys(c.apiKeys||{}))l[a]={configured:!!V(a),storage:p}}else{let c=m(t,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!d?.accessToken,expiresAt:Number(d?.expiresAt||0),source:String(d?.source||"oracle"),storage:p};for(let[a,d]of Object.entries(c.apiKeys||{}))l[a]={configured:!!d,storage:p}}for(let c of Object.keys(R)){if(f[c])continue;let a=U(c);a&&(f[c]={loggedIn:!0,expiresAt:a.expiresAt,source:a.source,storage:"external-access-source"})}return{storage:p,providers:f,apiKeys:l}}return Object.freeze({file:t,storage:p,get:W,set:ne,remove:ie,getApiKey:V,setApiKey:se,removeApiKey:ce,status:ae,withLock:v})}var G;function ee(){return G||=je(),G}function M(e){return Buffer.from(e).toString("base64url")}function $e(){let e=M(N(32));return{verifier:e,challenge:M(Se("sha256").update(e).digest()),state:M(N(24))}}function Ie(e,t){let r=Buffer.from(String(e||"")),o=Buffer.from(String(t||""));return r.length===o.length&&Ee(r,o)}function Le(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return be(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function B(e){return new URLSearchParams(e).toString()}async function A(e,t){if(!e?.ok){let o="";try{o=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${o?`, ${o}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Te(e){if(e)return String(await e()).trim();let t=Oe.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function H(e,t={}){let r=String(e.access_token||"").trim(),o=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let n=Number(e.expires_in||3600);return C({accessToken:r,refreshToken:o,expiresAt:Re(t)+Math.max(1,n)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Ke(e){let t=R["anthropic-oauth"],r=e.pkce||$e(),o=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),n=`${t.authorizeUrl}?${o}`;e.output(`Open: ${n}`),e.openFn(n);let i=await Te(e.inputFn),[s,p]=i.split("#",2);if(!s||!Ie(p,r.state))throw new Error("Claude OAuth state mismatch");let u=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:s,state:p,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return H(await A(u,"Claude OAuth token exchange"),e)}async function ze(e){let t=R["openai-codex"],r=await A(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let o=`${t.issuer}/codex/device`;e.output(`Open: ${o}`),e.output(`Code: ${r.user_code}`),e.openFn(o);let n=Math.max(3,Number(r.interval||5)),i;for(let p=0;p<Math.ceil(900/n);p+=1){await e.sleepFn(n*1e3);let u=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(u.ok){i=await A(u,"Codex device authorization");break}if(![403,404].includes(u.status))throw new Error(`Codex device authorization failed (HTTP ${u.status})`)}if(!i)throw new Error("Codex device authorization timed out");let s=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:B({grant_type:"authorization_code",code:i.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:i.code_verifier})});return H(await A(s,"Codex OAuth token exchange"),e)}function K(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Fe(e){let t=R["xai-oauth"],r=await A(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");K(r.authorization_endpoint);let o=K(r.token_endpoint),n=await A(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:B({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!n.device_code||!n.user_code||!n.verification_uri)throw new Error("xAI device authorization returned incomplete data");let i=K(n.verification_uri_complete||n.verification_uri);e.output(`Open: ${i}`),e.output(`Code: ${n.user_code}`),e.openFn(i);let s=Math.max(1,Number(n.interval||5)),p=Math.ceil(Math.max(1,Number(n.expires_in||600))/s);for(let u=0;u<p;u+=1){let v=await e.fetchFn(o,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:B({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:n.device_code})});if(v.ok){let U=await A(v,"xAI OAuth token exchange");return H(U,{...e,discovery:{authorization_endpoint:K(r.authorization_endpoint),token_endpoint:o}})}let w="";try{w=String((await v.json())?.error||"")}catch{}if(w==="slow_down")await e.sleepFn((s+1)*1e3);else if(w==="authorization_pending")await e.sleepFn(s*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${v.status}${w?`, ${w}`:""})`)}throw new Error("xAI device authorization timed out")}async function te(e,t={}){let r=_(e),o={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(n=>new Promise(i=>setTimeout(i,n))),openFn:t.openFn||Le,output:t.output||(n=>process.stdout.write(`${n}
+`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Ke(o):r==="openai-codex"?ze(o):Fe(o)}var re=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.5"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},custom:{model:""}});function J(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function De(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function Me(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let o="",n=()=>{process.stdin.off("data",i),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
 `)},i=s=>{let p=String(s);for(let u of p){if(u==="\r"||u===`
-`){o(),t(n.trim());return}if(u===""){o(),r(new Error("cancelled"));return}u==="\x7F"||u==="\b"?n=n.slice(0,-1):n+=u}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",i)})}function N(e,t,{baseUrl:r=""}={}){if(!t)throw new Error(`${e} provider requires --model`);let n={backend:"standalone",provider:e,model:t};if(e==="custom"){if(!r)throw new Error("custom provider requires --base-url");n.baseUrl=r}return n}function Q(e,t,r={}){return W(N(e,t,r))}function Ie(e){process.stdout.write(`storage: ${e.storage}
+`){n(),t(o.trim());return}if(u===""){n(),r(new Error("cancelled"));return}u==="\x7F"||u==="\b"?o=o.slice(0,-1):o+=u}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",i)})}function q(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...L({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function oe(e,t,r={}){return Z(q(e,t,r))}function Ne(e){process.stdout.write(`storage: ${e.storage}
 `);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
-`);return}for(let[n,o]of t){let i=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${n}: ${o.loggedIn?"logged in":"missing"}, expires ${i}
-`)}for(let[n,o]of r)process.stdout.write(`${n}: API key ${o.configured?"configured":"missing"}
-`)}function Le(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
-`)}var tt={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:Le(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=G();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
-`):Ie(o),0}if(r==="login"){let o=t.find(u=>!u.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let i=V(o),s=M(t,"--model")||i.model;N(i.id,s);let p=await Z(i.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let u=n.get(i.id);n.set(i.id,p);try{Q(i.id,s)}catch(g){throw u?n.set(i.id,u):n.remove(i.id),g}}),process.stdout.write(`${i.id}: logged in, stored in ${n.storage}
-`),0}if(r==="api-key"){let o=String(t.find(u=>!u.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(Y,o))throw new Error(`unsupported API-key provider: ${o}`);let i=M(t,"--model")||Y[o].model,s=M(t,"--base-url");N(o,i,{baseUrl:s});let p=t.includes("--stdin")?await je():await $e();return await n.withLock(async()=>{let u=n.getApiKey(o);n.setApiKey(o,p);try{Q(o,i,{baseUrl:s})}catch(g){throw u?n.setApiKey(o,u):n.removeApiKey(o),g}}),process.stdout.write(`${o}: API key configured in ${n.storage}
-`),0}if(r==="logout"){let o=String(t.find(p=>!p.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let i=!1;try{i=n.remove(A(o))}catch{}let s=n.removeApiKey(o);if(!i&&!s)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
-`),0}throw new Error(`unknown auth action: ${r}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
-`),1}}};export{tt as default};
+`);return}for(let[o,n]of t){let i=n.expiresAt?new Date(n.expiresAt).toISOString():"unknown";process.stdout.write(`${o}: ${n.loggedIn?"logged in":"missing"}, expires ${i}
+`)}for(let[o,n]of r)process.stdout.write(`${o}: API key ${n.configured?"configured":"missing"}
+`)}function Be(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]","    PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|custom",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
+`)}var lt={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:Be(),async run(e){let t=[...e.argv],r=t.shift()||"status",o=ee();try{if(r==="status"){let n=o.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(n,null,2)}
+`):Ne(n),0}if(r==="login"){let n=t.find(u=>!u.startsWith("-"));if(!n)throw new Error("usage: oracle auth login claude|codex|grok");let i=Y(n),s=J(t,"--model")||i.model;q(i.id,s);let p=await te(i.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await o.withLock(async()=>{let u=o.get(i.id);o.set(i.id,p);try{oe(i.id,s)}catch(v){throw u?o.set(i.id,u):o.remove(i.id),v}}),process.stdout.write(`${i.id}: logged in, stored in ${o.storage}
+`),0}if(r==="api-key"){let n=String(t.find(u=>!u.startsWith("-"))||"").trim().toLowerCase();if(!n)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(re,n))throw new Error(`unsupported API-key provider: ${n}`);let i=J(t,"--model")||re[n].model,s=J(t,"--base-url");q(n,i,{baseUrl:s});let p=t.includes("--stdin")?await De():await Me();return await o.withLock(async()=>{let u=o.getApiKey(n);o.setApiKey(n,p);try{oe(n,i,{baseUrl:s})}catch(v){throw u?o.setApiKey(n,u):o.removeApiKey(n),v}}),process.stdout.write(`${n}: API key configured in ${o.storage}
+`),0}if(r==="logout"){let n=String(t.find(p=>!p.startsWith("-"))||"").trim().toLowerCase();if(!n)throw new Error("usage: oracle auth logout PROVIDER");let i=!1;try{i=o.remove(_(n))}catch{}let s=o.removeApiKey(n);if(!i&&!s)throw new Error(`${n}: no local credential found`);return process.stdout.write(`${n}: local credential removed
+`),0}throw new Error(`unknown auth action: ${r}`)}catch(n){return process.stderr.write(`oracle auth: ${n.message}
+`),1}}};export{lt as default};

package/dist/cli/commands/chain.mjs

@@ -1,7 +1,7 @@
 import q from"node:readline/promises";import{stdin as F,stdout as M}from"node:process";import O from"node:fs";import R from"node:os";import A from"node:path";var x=Object.freeze([{key:"hyperliquid",aliases:["hl","hyperevm","hype","999"],chainId:999,name:"hyperliquid",kind:"evm",family:"hyperliquid",agent:"hyperliquid-agent",note:"perps \xB7 hip-3/4 \xB7 hyperevm 999",build:!0},{key:"ethereum",aliases:["eth","mainnet","1"],chainId:1,name:"ethereum",kind:"evm",family:"evm",agent:"oracle",note:"l1 \xB7 bridge hub",build:!0},{key:"base",aliases:["8453"],chainId:8453,name:"base",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"arbitrum",aliases:["arb","42161"],chainId:42161,name:"arbitrum",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"optimism",aliases:["op","10"],chainId:10,name:"optimism",kind:"evm",family:"evm",agent:"oracle",note:"op mainnet",build:!0},{key:"polygon",aliases:["matic","137"],chainId:137,name:"polygon",kind:"evm",family:"evm",agent:"oracle",note:"evm l2",build:!0},{key:"bsc",aliases:["bnb","56"],chainId:56,name:"bnb chain",kind:"evm",family:"evm",agent:"oracle",note:"bsc",build:!0},{key:"avalanche",aliases:["avax","43114"],chainId:43114,name:"avalanche",kind:"evm",family:"evm",agent:"oracle",note:"c-chain",build:!0},{key:"abstract",aliases:["abs","2741"],chainId:2741,name:"abstract",kind:"evm",family:"evm",agent:"oracle",note:"open / add agent",build:!0},{key:"stable",aliases:["988"],chainId:988,name:"stable",kind:"evm",family:"stable",agent:"stable-agent",note:"usdt0 gas \xB7 stable agent",build:!0},{key:"robinhood",aliases:["rh","4663"],chainId:4663,name:"robinhood",kind:"evm",family:"robinhood",agent:"robinhood-agent",note:"rh chain 4663",build:!0},{key:"solana",aliases:["sol"],chainId:"SOL",name:"solana",kind:"svm",family:"solana",agent:"solana-agent",note:"jup \xB7 nfts \xB7 dexs",build:!0},{key:"bitcoin",aliases:["btc"],chainId:"BTC",name:"bitcoin",kind:"utxo",family:"bitcoin",agent:"bitcoin-agent",note:"ord \xB7 runes \xB7 l1",build:!0},{key:"polymarket",aliases:["poly","polygon-poly"],chainId:137,name:"polymarket",kind:"venue",family:"polymarket",agent:"polymarket-agent",note:"prediction markets (polygon venue)",build:!1}]);function c(n){return String(n||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}var E=/^[a-z0-9][a-z0-9-]*$/;function U(){let n=process.env.ORACLE_CONFIG_DIR||A.join(R.homedir(),".config","oracle");return A.join(n,"chains.json")}function w(n){if(!n||typeof n!="object")return null;let t=String(n.key??"").trim();if(!t||/[/\\.]/.test(t))return null;let e=c(t);if(!E.test(e))return null;let i=typeof n.chainId=="string"?n.chainId.trim():Number(n.chainId);if(i===""||i===null||i===void 0||typeof i=="number"&&!Number.isFinite(i))return null;let r=typeof n.agent=="string"&&E.test(n.agent.trim())?n.agent.trim():"oracle";return{key:e,aliases:Array.isArray(n.aliases)?n.aliases.map(c).filter(Boolean).slice(0,8):[],chainId:i,name:String(n.name||e).slice(0,60),kind:["evm","svm","utxo","venue"].includes(n.kind)?n.kind:"evm",family:c(n.family)||e,agent:r,note:String(n.note||"user-defined").slice(0,80),build:n.build!==!1,source:"user"}}function D(n=O.readFileSync){try{let t=JSON.parse(n(U(),"utf8")),e=Array.isArray(t?.chains)?t.chains:[],i=[],r=new Set;for(let o of e){let a=w(o);!a||r.has(a.key)||(r.add(a.key),i.push(a))}return i}catch{return[]}}function I(){let n=D();if(n.length===0)return x;let t=new Map(x.map(e=>[e.key,e]));for(let e of n)t.set(e.key,e);return[...t.values()]}function m({buildOnly:n=!1}={}){return I().filter(t=>n?t.build:!0)}function d(n){let t=c(n);if(!t)return null;for(let e of I())if(e.key===t||String(e.chainId).toLowerCase()===t||(e.aliases||[]).map(c).includes(t)||c(e.name)===t)return e;return null}function g({selectedKey:n=null,buildOnly:t=!1}={}){let e=m({buildOnly:t}),i=["oracle chains","","pick a build/trade surface:",""];for(let r of e){let o=n&&n===r.key?"*":" ",a=String(r.chainId).padEnd(6),s=r.key.padEnd(12);i.push(`${o} ${s} ${a}  ${r.note}`)}return i.push(""),i.push("usage:"),i.push("  /chain                 list"),i.push("  /chain hyperliquid     select"),i.push("  /chain show            current"),i.push("  /chain clear           unset"),i.push("  oracle chain use base  same from shell"),n&&i.push("",`active: ${n}`),i.join(`
 `)+`
 `}import f from"node:fs";import H from"node:path";import h from"node:fs";import N from"node:os";import u from"node:path";import{fileURLToPath as P}from"node:url";var $=u.dirname(P(import.meta.url)),ne=u.resolve($,"../..");function k(){return process.env.ORACLE_FAKE_HOME||N.homedir()}function K(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function p(){return K()?process.env.ORACLE_CONFIG_DIR||u.join(k(),".config","oracle"):u.join(k(),".config","oracle")}function T(){return u.join(p(),"desk.json")}function W(){return u.join(p(),"env")}function l({force:n=!1}={}){if(l._done&&!n)return l._result||null;l._done=!0;let t={},e=(r,o)=>{if(o==null)return;let a=String(o).trim();a&&(process.env[r]!=null&&String(process.env[r]).trim()!==""||(process.env[r]=a,t[r]=a))};try{let r=W();if(h.existsSync(r))for(let o of h.readFileSync(r,"utf8").split(/\r?\n/)){let a=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let s=a[2];(s.startsWith('"')&&s.endsWith('"')||s.startsWith("'")&&s.endsWith("'"))&&(s=s.slice(1,-1)),e(a[1],s)}}catch{}try{let r=T();if(h.existsSync(r)){let o=JSON.parse(h.readFileSync(r,"utf8"));o&&typeof o=="object"&&(e("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),e("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),e("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),e("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),e("ORACLE_EXEC_URL",o.execUrl),e("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let i=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return i&&(e("ORACLE_DESK_URL",i),e("ORACLE_DATA_URL",i),e("ORACLE_API_URL",i),e("ORACLE_PUBLIC_URL",i),e("MAD_DESK_URL",i)),l._result=Object.keys(t).length?t:null,l._result}try{l()}catch{}function j(n){return h.mkdirSync(n,{recursive:!0}),n}function v(){return H.join(p(),"active-chain.json")}function y(){let n=v();if(!f.existsSync(n))return null;try{let t=JSON.parse(f.readFileSync(n,"utf8"));if(!t||typeof t!="object"||!t.key)return null;let e=d(t.key);return e?{key:e.key,chainId:e.chainId,name:e.name,agent:e.agent,selectedAt:t.selectedAt||null}:null}catch{return null}}function L(n){let t=d(n);if(!t){let i=new Error(`unknown chain '${n}'`);throw i.code="UNKNOWN_CHAIN",i}j(p());let e={key:t.key,chainId:t.chainId,name:t.name,agent:t.agent,selectedAt:new Date().toISOString()};return f.writeFileSync(v(),JSON.stringify(e,null,2)+`
-`,{mode:384}),e}function S(){let n=v();return f.existsSync(n)&&f.unlinkSync(n),!0}function b(){return["oracle chain \u2014 pick the build/trade surface","","  oracle chain                 list working chains","  oracle chain list            same","  oracle chain show            show active chain","  oracle chain use <name>      select (hyperliquid, base, solana, ...)","  oracle chain clear           unset","  oracle chain --json          machine output","","chat:","  /chain","  /chain hyperliquid","  /chain show"].join(`
+`,{mode:384}),e}function S(){let n=v();return f.existsSync(n)&&f.unlinkSync(n),!0}function b(){return["oracle chain \u2014 pick the build/trade surface","","  oracle chain                 list working chains","  oracle chain list            same","  oracle chain show            show active chain","  oracle chain use <name>      select (hyperliquid, base, solana, ...)","  oracle chain clear           unset","  oracle chain --json          machine output","","chat:","  /chain","  /chain hyperliquid","  /chain show","  /chain clear"].join(`
 `)}function J(n){let t=y();return n?(process.stdout.write(JSON.stringify({active:t,chains:m()},null,2)+`
 `),0):(process.stdout.write(g({selectedKey:t?.key||null})),0)}function B(n){let t=y();return n?(process.stdout.write(JSON.stringify({active:t},null,2)+`
 `),t?0:1):t?(process.stdout.write(`active: ${t.key}  id=${t.chainId}  agent=${t.agent}