@oracle-agent/oracle 0.22.1 → 0.22.3

package/dist/bin/oracle-upgrade.mjs

@@ -1,21 +1,13 @@
 #!/usr/bin/env node
-import Y from"node:os";import S from"node:path";import{fileURLToPath as H}from"node:url";import u from"node:fs";import a from"node:path";import{randomBytes as C}from"node:crypto";import{createRequire as N}from"node:module";var k="oracle-profile-upgrade/v1";function p(e){try{return u.accessSync(e),!0}catch{return!1}}function M(e){return p(e)?u.readdirSync(e,{recursive:!0,withFileTypes:!0}).filter(n=>n.isFile()).map(n=>a.join(n.parentPath||n.path,n.name)).sort().map(n=>[a.relative(e,n),u.readFileSync(n)]):[]}function T(e){let n=M(e);return n.push([".oracle-upgrade-version",Buffer.from(`${k}
-`)]),n.sort(([c],[o])=>c.localeCompare(o))}function W(e,n){let c=M(e);return c.length===n.length&&c.every(([o,s],r)=>o===n[r][0]&&s.equals(n[r][1]))}function P(e){return`${e}.tmp-oracle-upgrade-${process.pid}-${C(6).toString("hex")}`}function O(e){let n=`${e}.bak-oracle-upgrade`;for(let c=1;p(n);c+=1)n=`${e}.bak-oracle-upgrade-${c}`;return n}function F(e,n,c,o){if(!p(e)||!u.statSync(e).isDirectory())return;let s=T(e);if(W(n,s)){o.unchanged.push(n);return}let r=p(n);if((r?o.updated:o.created).push(n),!c)return;u.mkdirSync(a.dirname(n),{recursive:!0});let t=P(n),i=null;u.mkdirSync(t);try{for(let[l,h]of s){let d=a.join(t,l);u.mkdirSync(a.dirname(d),{recursive:!0}),u.writeFileSync(d,h)}r&&(i=O(n),u.renameSync(n,i),o.backups.push({path:i,original:n})),u.renameSync(t,n)}catch(l){throw p(t)&&u.rmSync(t,{recursive:!0,force:!0}),i&&!p(n)&&p(i)&&u.renameSync(i,n),l}}function A(e,n){if(/^mcp_servers:[ \t]*(?!\{\}[ \t]*(?:#.*)?$)\S+/m.test(e))throw new Error(`${n}: mcp_servers must be a block mapping`);let c=[],o=new Map,s=e.split(/\r?\n/),r=0;for(let t=0;t<s.length;t+=1){let i=s[t];if(/^\s*#/.test(i))continue;if(/^\s*\t|^ +\t/.test(i))throw new Error(`${n}:${t+1}: tabs are not supported in YAML indentation`);let l=i.replace(/\s+#.*$/,"");if(!l.trim()||/^\s*(?:---|\.\.\.)\s*$/.test(l))continue;let h=l.replace(/'(?:[^']|'')*'|"(?:[^"\\]|\\.)*"/g,"");for(let d of h)if("[{".includes(d)&&(r+=1),"]}".includes(d)&&(r-=1),r<0)throw new Error(`${n}:${t+1}: unbalanced flow collection`);if(/^\s*[^#\-][^:]*:\s*(?:.*)?$/.test(l)){let d=l.match(/^ */)[0].length,g=l.trimStart().match(/^([^:]+):/)[1].trim();for(;c.length&&c.at(-1).indent>=d;)c.pop();let m=`${c.map($=>$.key).join("/")}|${d}|${g}`;if(o.has(m))throw new Error(`${n}:${t+1}: duplicate mapping key ${g}`);o.set(m,!0),/^[^:]+:\s*(?:#.*)?$/.test(l.trimStart())&&c.push({indent:d,key:g})}else if(!/^\s*-\s+/.test(l)&&r===0)throw new Error(`${n}:${t+1}: unsupported or malformed YAML`)}if(r!==0)throw new Error(`${n}: unbalanced flow collection`);if(/^\s*[^#\n]*:\s*[>|][+-]?\s*$/m.test(e)){let t=E(e,"mcp_servers");if(t&&/:\s*[>|][+-]?\s*$/m.test(t.body))throw new Error(`${n}: block scalars inside mcp_servers are unsupported`)}}function E(e,n){let o=new RegExp(`^${n}:[^\\S\\r\\n]*(?:#.*)?$`,"m").exec(e);if(!o)return null;let s=o.index,r=e.indexOf(`
-`,s)+1;if(!r)return{start:s,end:e.length,bodyStart:e.length,body:""};let t=e.slice(r),i=/^(?=\S[^\r\n]*:)/m.exec(t),l=i?r+i.index:e.length;return{start:s,bodyStart:r,end:l,body:e.slice(r,l)}}function w(e){return JSON.stringify(e)}function _(e,n){let c=n.command==="node"?[n.script]:n.args,o=[`  ${e}:`,`    command: ${w(n.command)}`];return c?.length&&o.push("    args:",...c.map(s=>`      - ${w(s)}`)),o.push("    enabled: true",`    # ${k}`),`${o.join(`
+import B from"node:os";import g from"node:path";import{fileURLToPath as L}from"node:url";import a from"node:fs";import u from"node:path";import{randomBytes as O}from"node:crypto";var w="oracle-profile-upgrade/v1";function m(e){try{return a.accessSync(e),!0}catch{return!1}}function v(e){return m(e)?a.readdirSync(e,{recursive:!0,withFileTypes:!0}).filter(r=>r.isFile()).map(r=>u.join(r.parentPath||r.path,r.name)).sort().map(r=>[u.relative(e,r),a.readFileSync(r)]):[]}function P(e){let r=v(e);return r.push([".oracle-upgrade-version",Buffer.from(`${w}
+`)]),r.sort(([t],[n])=>t.localeCompare(n))}function R(e,r){let t=v(e);return t.length===r.length&&t.every(([n,s],c)=>n===r[c][0]&&s.equals(r[c][1]))}function E(e){return`${e}.tmp-oracle-upgrade-${process.pid}-${O(6).toString("hex")}`}function j(e){let r=`${e}.bak-oracle-upgrade`;for(let t=1;m(r);t+=1)r=`${e}.bak-oracle-upgrade-${t}`;return r}function N(e,r,t,n){if(!m(e)||!a.statSync(e).isDirectory())return;let s=P(e);if(R(r,s)){n.unchanged.push(r);return}let c=m(r);if((c?n.updated:n.created).push(r),!t)return;a.mkdirSync(u.dirname(r),{recursive:!0});let o=E(r),l=null;a.mkdirSync(o);try{for(let[p,h]of s){let i=u.join(o,p);a.mkdirSync(u.dirname(i),{recursive:!0}),a.writeFileSync(i,h)}c&&(l=j(r),a.renameSync(r,l),n.backups.push({path:l,original:r})),a.renameSync(o,r)}catch(p){throw m(o)&&a.rmSync(o,{recursive:!0,force:!0}),l&&!m(r)&&m(l)&&a.renameSync(l,r),p}}function T(e,r){if(/^mcp_servers:[ \t]*(?!\{\}[ \t]*(?:#.*)?$)\S+/m.test(e))throw new Error(`${r}: mcp_servers must be a block mapping`);let t=[],n=new Map,s=e.split(/\r?\n/),c=0;for(let o=0;o<s.length;o+=1){let l=s[o];if(/^\s*#/.test(l))continue;if(/^\s*\t|^ +\t/.test(l))throw new Error(`${r}:${o+1}: tabs are not supported in YAML indentation`);let p=l.replace(/\s+#.*$/,"");if(!p.trim()||/^\s*(?:---|\.\.\.)\s*$/.test(p))continue;let h=p.replace(/'(?:[^']|'')*'|"(?:[^"\\]|\\.)*"/g,"");for(let i of h)if("[{".includes(i)&&(c+=1),"]}".includes(i)&&(c-=1),c<0)throw new Error(`${r}:${o+1}: unbalanced flow collection`);if(/^\s*[^#\-][^:]*:\s*(?:.*)?$/.test(p)){let i=p.match(/^ */)[0].length,d=p.trimStart().match(/^([^:]+):/)[1].trim();for(;t.length&&t.at(-1).indent>=i;)t.pop();let y=`${t.map(_=>_.key).join("/")}|${i}|${d}`;if(n.has(y))throw new Error(`${r}:${o+1}: duplicate mapping key ${d}`);n.set(y,!0),/^[^:]+:\s*(?:#.*)?$/.test(p.trimStart())&&t.push({indent:i,key:d})}else if(!/^\s*-\s+/.test(p)&&c===0)throw new Error(`${r}:${o+1}: unsupported or malformed YAML`)}if(c!==0)throw new Error(`${r}: unbalanced flow collection`);if(/^\s*[^#\n]*:\s*[>|][+-]?\s*$/m.test(e)){let o=F(e,"mcp_servers");if(o&&/:\s*[>|][+-]?\s*$/m.test(o.body))throw new Error(`${r}: block scalars inside mcp_servers are unsupported`)}}function F(e,r){let n=new RegExp(`^${r}:[^\\S\\r\\n]*(?:#.*)?$`,"m").exec(e);if(!n)return null;let s=n.index,c=e.indexOf(`
+`,s)+1;if(!c)return{start:s,end:e.length,bodyStart:e.length,body:""};let o=e.slice(c),l=/^(?=\S[^\r\n]*:)/m.exec(o),p=l?c+l.index:e.length;return{start:s,bodyStart:c,end:p,body:e.slice(c,p)}}function k(e){return JSON.stringify(e)}function b(e,r){let t=r.command==="node"?[r.script]:r.args,n=[`  ${e}:`,`    command: ${k(r.command)}`];return t?.length&&n.push("    args:",...t.map(s=>`      - ${k(s)}`)),n.push("    enabled: true",`    # ${w}`),`${n.join(`
 `)}
-`}function B(e,n){e=e.replace(/^(mcp_servers:)\s*\{\}\s*(#.*)?$/m,(s,r,t)=>`${r}${t?` ${t}`:""}`);let c=E(e,"mcp_servers");if(!c){let s=e.length&&!e.endsWith(`
+`}function q(e,r){e=e.replace(/^(mcp_servers:)\s*\{\}\s*(#.*)?$/m,(s,c,o)=>`${c}${o?` ${o}`:""}`);let t=F(e,"mcp_servers");if(!t){let s=e.length&&!e.endsWith(`
 `)?`
 `:"";return`${e}${s}mcp_servers:
-${[...n].map(([r,t])=>_(r,t)).join("")}`}let o=c.body;for(let[s,r]of n){let t=new RegExp(`^  ${s}:[^\\S\\r\\n]*(?:#.*)?\\r?\\n(?:^(?: {3,}|\\s*$).*\\r?\\n?)*`,"m"),i=_(s,r);o=t.test(o)?o.replace(t,i):`${o}${o&&!o.endsWith(`
+${[...r].map(([c,o])=>b(c,o)).join("")}`}let n=t.body;for(let[s,c]of r){let o=new RegExp(`^  ${s}:[^\\S\\r\\n]*(?:#.*)?\\r?\\n(?:^(?: {3,}|\\s*$).*\\r?\\n?)*`,"m"),l=b(s,c);n=o.test(n)?n.replace(o,l):`${n}${n&&!n.endsWith(`
 `)?`
-`:""}${i}`}return`${e.slice(0,c.bodyStart)}${o}${e.slice(c.end)}`}function L(e,n){e=e.replace(/^(plugins:)\s*\{\}\s*(#.*)?$/m,(t,i,l)=>`${i}${l?` ${l}`:""}`);let c=`    - ${w(n)}
-`,o=E(e,"plugins");if(!o){let t=e.length&&!e.endsWith(`
-`)?`
-`:"";return`${e}${t}plugins:
-  enabled:
-${c}`}let s=o.body,r=/^  enabled:\s*\[([^\]]*)\](.*)$/m.exec(s);if(r){if(!r[1].split(",").map(i=>i.trim().replace(/^["']|["']$/g,"")).includes(n)){let i=r[1].trim()?`${r[1].trimEnd()}, ${w(n)}`:w(n);s=s.replace(r[0],`  enabled: [${i}]${r[2]}`)}}else{let t=/^  enabled:\s*(?:#.*)?\r?\n((?:^ {4}-.*\r?\n?)*)/m.exec(s);t?t[1].split(/\r?\n/).map(l=>l.replace(/^\s*-\s*/,"").trim().replace(/^["']|["']$/g,"")).includes(n)||(s=s.replace(t[0],`${t[0]}${c}`)):s=`${s}${s&&!s.endsWith(`
-`)?`
-`:""}  enabled:
-${c}`}return`${e.slice(0,o.bodyStart)}${s}${e.slice(o.end)}`}function D(e,n,c){let o=p(e);if((o?u.readFileSync(e,"utf8"):null)===n){c.unchanged.push(e);return}if((o?c.updated:c.created).push(e),!c.applied)return;if(u.mkdirSync(a.dirname(e),{recursive:!0}),o){let t=O(e);u.copyFileSync(e,t),c.backups.push({path:t,original:e})}let r=P(e);try{u.writeFileSync(r,n,{mode:o?u.statSync(e).mode:384}),u.renameSync(r,e)}catch(t){throw p(r)&&u.rmSync(r,{force:!0}),t}}function J(e,n){if(n){let[o,...s]=n;return{command:o,args:s}}let c=[a.join(e,"bin","oracle-control-mcp.mjs"),a.join(e,"plugins","oracle-owner-gate","bin","oracle-control-mcp.mjs"),a.join(e,"plugins","oracle-owner-gate","oracle-control-mcp.mjs"),a.join(e,"..","@oracle-agent","operator","bin","oracle-control-mcp.mjs"),a.join(e,"..","..","@oracle-agent","operator","bin","oracle-control-mcp.mjs")];for(let o of c)if(p(o)&&u.statSync(o).isFile())return{command:"node",script:a.resolve(o)};try{let o=N(a.join(e,"package.json")),s=a.dirname(o.resolve("@oracle-agent/operator/package.json")),r=a.join(s,"bin","oracle-control-mcp.mjs");if(p(r)&&u.statSync(r).isFile())return{command:"node",script:a.resolve(r)}}catch{}return null}function q({hermesHome:e,packageRoot:n,only:c=null,apply:o=!1,controlCommand:s=null}){let r=a.join(e,"profiles"),t={ok:!0,applied:o,version:k,hermesHome:e,packageRoot:n,profiles:[],created:[],updated:[],unchanged:[],backups:[]},i=p(r)?u.readdirSync(r,{withFileTypes:!0}).filter(m=>m.isDirectory()).map(m=>m.name).sort():[];if(c&&(i=i.filter(m=>m===c)),c&&i.length===0)throw new Error(`profile not found: ${c}`);t.profiles=i;let l=new Map;for(let m of i){let $=a.join(r,m,"config.yaml"),y=p($)?u.readFileSync($,"utf8"):"";A(y,$),l.set(m,y)}let h=a.join(n,"skills","oracle-action-semantics");if(!p(h))throw new Error(`required Oracle skill is missing: ${h}`);let d=a.join(n,"plugins","oracle-owner-gate"),g=J(n,s),b=a.join(n,"bin","oracle-data-mcp.mjs");if(!p(b))throw new Error(`oracle-data MCP command is missing: ${b}`);for(let m of i){let $=a.join(r,m);F(h,a.join($,"skills","oracle-action-semantics"),o,t),p(d)&&F(d,a.join($,"plugins","oracle-owner-gate"),o,t);let y=new Map([["oracle-data",{command:"node",script:b}]]);g&&y.set("oracle-control",g);let v=B(l.get(m),y);p(d)&&(v=L(v,"oracle-owner-gate")),D(a.join($,"config.yaml"),v,t)}return t}var f=process.argv.slice(2),j=e=>{let n=f.indexOf(e);if(n<0)return null;if(!f[n+1]||f[n+1].startsWith("--"))throw new Error(`${e} requires a value`);return f[n+1]};try{let e=new Set(["--apply","--json","--only","--hermes-home","--package-root","--control-command"]);for(let r=0;r<f.length;r+=1){if(!e.has(f[r]))throw new Error(`unknown option: ${f[r]}`);["--only","--hermes-home","--package-root","--control-command"].includes(f[r])&&(r+=1)}let n=S.resolve(j("--package-root")||S.join(S.dirname(H(import.meta.url)),"..")),c=S.resolve(j("--hermes-home")||process.env.HERMES_HOME||S.join(Y.homedir(),".hermes")),o=j("--control-command"),s=q({hermesHome:c,packageRoot:n,only:j("--only"),apply:f.includes("--apply"),controlCommand:o?o.trim().split(/\s+/):null});if(f.includes("--json"))process.stdout.write(`${JSON.stringify(s,null,2)}
-`);else{console.log(`oracle-upgrade ${s.applied?"applied":"dry run"}: ${s.profiles.length} profile(s)`);for(let r of["created","updated","unchanged","backups"])console.log(`${r}: ${s[r].length}`);s.applied||console.log("Re-run with --apply to make these changes.")}}catch(e){let n={ok:!1,error:e.message};f.includes("--json")?process.stdout.write(`${JSON.stringify(n,null,2)}
+`:""}${l}`}return`${e.slice(0,t.bodyStart)}${n}${e.slice(t.end)}`}function A(e,r,t){let n=m(e);if((n?a.readFileSync(e,"utf8"):null)===r){t.unchanged.push(e);return}if((n?t.updated:t.created).push(e),!t.applied)return;if(a.mkdirSync(u.dirname(e),{recursive:!0}),n){let o=j(e);a.copyFileSync(e,o),t.backups.push({path:o,original:e})}let c=E(e);try{a.writeFileSync(c,r,{mode:n?a.statSync(e).mode:384}),a.renameSync(c,e)}catch(o){throw m(c)&&a.rmSync(c,{force:!0}),o}}function M({hermesHome:e,packageRoot:r,only:t=null,apply:n=!1}){let s=u.join(e,"profiles"),c={ok:!0,applied:n,version:w,hermesHome:e,packageRoot:r,profiles:[],created:[],updated:[],unchanged:[],backups:[]},o=m(s)?a.readdirSync(s,{withFileTypes:!0}).filter(i=>i.isDirectory()).map(i=>i.name).sort():[];if(t&&(o=o.filter(i=>i===t)),t&&o.length===0)throw new Error(`profile not found: ${t}`);c.profiles=o;let l=new Map;for(let i of o){let d=u.join(s,i,"config.yaml"),$=m(d)?a.readFileSync(d,"utf8"):"";T($,d),l.set(i,$)}let p=u.join(r,"skills","oracle-action-semantics");if(!m(p))throw new Error(`required Oracle skill is missing: ${p}`);let h=u.join(r,"bin","oracle-data-mcp.mjs");if(!m(h))throw new Error(`oracle-data MCP command is missing: ${h}`);for(let i of o){let d=u.join(s,i);N(p,u.join(d,"skills","oracle-action-semantics"),n,c);let $=new Map([["oracle-data",{command:"node",script:h}]]),y=q(l.get(i),$);A(u.join(d,"config.yaml"),y,c)}return c}var f=process.argv.slice(2),S=e=>{let r=f.indexOf(e);if(r<0)return null;if(!f[r+1]||f[r+1].startsWith("--"))throw new Error(`${e} requires a value`);return f[r+1]};try{let e=new Set(["--apply","--json","--only","--hermes-home","--package-root"]);for(let s=0;s<f.length;s+=1){if(!e.has(f[s]))throw new Error(`unknown option: ${f[s]}`);["--only","--hermes-home","--package-root"].includes(f[s])&&(s+=1)}let r=g.resolve(S("--package-root")||g.join(g.dirname(L(import.meta.url)),"..")),t=g.resolve(S("--hermes-home")||process.env.HERMES_HOME||g.join(B.homedir(),".hermes")),n=M({hermesHome:t,packageRoot:r,only:S("--only"),apply:f.includes("--apply")});if(f.includes("--json"))process.stdout.write(`${JSON.stringify(n,null,2)}
+`);else{console.log(`oracle-upgrade ${n.applied?"applied":"dry run"}: ${n.profiles.length} profile(s)`);for(let s of["created","updated","unchanged","backups"])console.log(`${s}: ${n[s].length}`);n.applied||console.log("Re-run with --apply to make these changes.")}}catch(e){let r={ok:!1,error:e.message};f.includes("--json")?process.stdout.write(`${JSON.stringify(r,null,2)}
 `):console.error(`oracle-upgrade: ${e.message}`),process.exitCode=1}

package/dist/bin/oracle.mjs

@@ -1,21 +1,9 @@
 #!/usr/bin/env node
-import{realpathSync as K}from"node:fs";import{fileURLToPath as je}from"node:url";import O from"node:fs";import b from"node:path";import{pathToFileURL as ge}from"node:url";import g from"node:fs";import B from"node:os";import i from"node:path";import{fileURLToPath as J}from"node:url";var V=i.dirname(J(import.meta.url)),p=i.resolve(V,"../..");function d(){return process.env.ORACLE_FAKE_HOME||B.homedir()}function S(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function y(){return S()?process.env.ORACLE_CONFIG_DIR||i.join(d(),".config","oracle"):i.join(d(),".config","oracle")}function W(){return i.join(y(),"exec.env")}function C(){return i.join(y(),"desk.json")}function L(){return i.join(y(),"env")}function h({force:e=!1}={}){if(h._done&&!e)return h._result||null;h._done=!0;let n={},r=(a,t)=>{if(t==null)return;let o=String(t).trim();o&&(process.env[a]!=null&&String(process.env[a]).trim()!==""||(process.env[a]=o,n[a]=o))};try{let a=L();if(g.existsSync(a))for(let t of g.readFileSync(a,"utf8").split(/\r?\n/)){let o=t.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!o||o[2].startsWith("#"))continue;let c=o[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),r(o[1],c)}}catch{}try{let a=C();if(g.existsSync(a)){let t=JSON.parse(g.readFileSync(a,"utf8"));t&&typeof t=="object"&&(r("ORACLE_DESK_URL",t.deskUrl||t.dataUrl||t.url),r("ORACLE_DATA_URL",t.dataUrl||t.deskUrl||t.url),r("ORACLE_API_URL",t.apiUrl||t.dataUrl||t.deskUrl),r("ORACLE_PUBLIC_URL",t.publicUrl||t.deskUrl||t.dataUrl),r("ORACLE_EXEC_URL",t.execUrl),r("MAD_DESK_URL",t.deskUrl||t.dataUrl))}}catch{}let s=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return s&&(r("ORACLE_DESK_URL",s),r("ORACLE_DATA_URL",s),r("ORACLE_API_URL",s),r("ORACLE_PUBLIC_URL",s),r("MAD_DESK_URL",s)),h._result=Object.keys(n).length?n:null,h._result}try{h()}catch{}function z(){return process.env.HERMES_HOME?i.resolve(process.env.HERMES_HOME):i.join(d(),".hermes")}function Y(){return i.join(d(),".claude.json")}function Q(e=process.cwd()){return i.join(e,".mcp.json")}function X(){return process.platform==="darwin"?i.join(d(),"Library","Application Support","Claude","claude_desktop_config.json"):i.join(d(),".config","Claude","claude_desktop_config.json")}function Z(){return i.join(d(),".codex","config.toml")}function P(){return i.join(y(),"connectors")}function ee(){return i.join(P(),"chatgpt-openapi.json")}function re(){return i.join(y(),"active-chain.json")}function _(e){let n=[i.join(p,"bin",e),i.join(p,"dist","bin",e),i.join(p,"..","bin",e)];return n.find(r=>g.existsSync(r))||n[0]}function te(e){return g.mkdirSync(e,{recursive:!0}),e}var U={homeDir:d,isPublicDesktop:S,oracleConfigDir:y,oracleExecEnvPath:W,oracleDeskJsonPath:C,oracleEnvFilePath:L,loadDeskRouting:h,hermesRoot:z,activeChainPath:re,claudeCodeUserConfigPath:Y,claudeCodeProjectMcpPath:Q,claudeDesktopConfigPath:X,codexConfigPath:Z,chatgptConnectorDir:P,chatgptOpenApiPath:ee,packageBin:_,ensureDir:te,PACKAGE_ROOT:p};import{execFile as ne}from"node:child_process";import{existsSync as Ue,mkdirSync as Te,readFileSync as oe,realpathSync as De,writeFileSync as $e}from"node:fs";import T from"node:path";import{promisify as se}from"node:util";var He=se(ne);var Me=1440*60*1e3;function D(e,n){let r=t=>String(t).replace(/^v/,"").split("-")[0].split(".").map(o=>Number.parseInt(o,10)||0),s=r(e),a=r(n);for(let t=0;t<Math.max(s.length,a.length);t+=1){let o=s[t]??0,c=a[t]??0;if(o>c)return 1;if(o<c)return-1}return 0}function ae(e){let n=e?.stateDir||T.join(process.env.HOME||".",".oracle");return T.join(n,"update-check.json")}function $(e){try{return JSON.parse(oe(ae(e),"utf8"))}catch{return null}}import f from"node:fs";import u from"node:path";import{spawnSync as ce}from"node:child_process";import{createRequire as ie}from"node:module";import{fileURLToPath as le}from"node:url";var ue=u.dirname(le(import.meta.url)),pe=u.resolve(ue,"../.."),de=Object.freeze(["oracle-vault","oracle-credential","oracle-signer","oracle-runner","oracle-agentic-init","oracle-agentic-doctor","oracle-control-mcp","oracle-operator-caps"]),R=Object.freeze(["vault","credential","signer","runner","sign"]),I=`oracle: signing is unavailable in the public package.
-
-  The public 'oracle' package is prepare-only and never handles keys.
-  Owner-operated signing is private infrastructure and has no public npm install.
-  Review and sign prepared artifacts in your own wallet instead.
-
-  Nothing about your read/research/prepare setup is affected.
-`,fe="hint: run 'oracle sign init' to provision keys, or 'oracle sign doctor --json' for detail.";function N(e){let n={};for(let r of de){let s=[u.join(e,r),u.join(e,`${r}.mjs`),u.join(e,`${r}.js`)];for(let a of s)if(f.existsSync(a)&&f.statSync(a).isFile()){n[r]=a;break}}return n}function me(e){let n=u.dirname(e);for(;n!==u.dirname(n);){let r=u.join(n,"package.json");if(f.existsSync(r))try{let s=JSON.parse(f.readFileSync(r,"utf8"));if(s.name==="@oracle-agent/operator")return{root:n,pkg:s}}catch{}n=u.dirname(n)}return null}function he(e){for(let n of e)try{let r=ie(u.join(n,"package.json")),s;try{let l=r.resolve("@oracle-agent/operator/package.json");s={root:u.dirname(l),pkg:JSON.parse(f.readFileSync(l,"utf8"))}}catch{let l=r.resolve("@oracle-agent/operator");s=me(l)}if(!s)continue;let{root:a,pkg:t}=s,o=t.bin||{},c={};for(let[l,m]of Object.entries(o))c[l]=u.resolve(a,m);let j=N(u.join(a,"bin"));for(let[l,m]of Object.entries(j))c[l]||(c[l]=m);return{ok:!0,binDir:u.join(a,"bin"),version:t.version||"unknown",bins:c,source:`require:${n}`}}catch{}return null}function k(){if(process.env.ORACLE_PUBLIC_DESKTOP==="1")return{ok:!1,source:"public-desktop"};let e=process.env.ORACLE_OPERATOR_BIN_DIR;if(e){let r=u.resolve(e);if(!f.existsSync(r))return{ok:!1};let s=N(r);if(!Object.keys(s).length)return{ok:!1};let a="unknown",t=u.resolve(r,"../package.json");if(f.existsSync(t))try{a=JSON.parse(f.readFileSync(t,"utf8")).version||a}catch{}return{ok:!0,binDir:r,version:a,bins:s,source:"env:ORACLE_OPERATOR_BIN_DIR"}}return he([process.cwd(),pe])||{ok:!1}}function E(e=process.stderr){e.write(I),I.endsWith(`
-`)||e.write(`
-`)}function H(e,n=[],r={}){let s=k();if(!s.ok)return E(r.stderr||process.stderr),3;let a=s.bins[e];if(!a)return(r.stderr||process.stderr).write(`oracle: operator bin '${e}' not found in resolved operator (${s.source})
-`),3;let t=r.stdio||"inherit",o=/\.(mjs|cjs|js)$/.test(a),c=o?process.execPath:a,j=o?[a,...n]:[...n],l=ce(c,j,{stdio:t,env:r.env||process.env,cwd:r.cwd||process.cwd(),encoding:t==="pipe"?"utf8":void 0});if(l.error)return(r.stderr||process.stderr).write(`oracle: failed to spawn ${e}: ${l.error.message}
-`),1;let m=typeof l.status=="number"?l.status:1;return m!==0&&r.appendHintOnError&&(r.stderr||process.stderr).write(fe+`
-`),t==="pipe"?{code:m,stdout:l.stdout||"",stderr:l.stderr||""}:m}var ye="oracle \u2014 self-custody multichain agent control plane",ke=`READ / RESEARCH (no keys, this package)
+import{realpathSync as U}from"node:fs";import{fileURLToPath as re}from"node:url";import h from"node:fs";import g from"node:path";import{pathToFileURL as Y}from"node:url";import d from"node:fs";import P from"node:os";import i from"node:path";import{fileURLToPath as D}from"node:url";var T=i.dirname(D(import.meta.url)),l=i.resolve(T,"../..");function u(){return process.env.ORACLE_FAKE_HOME||P.homedir()}function _(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function f(){return _()?process.env.ORACLE_CONFIG_DIR||i.join(u(),".config","oracle"):i.join(u(),".config","oracle")}function $(){return i.join(f(),"exec.env")}function A(){return i.join(f(),"desk.json")}function C(){return i.join(f(),"env")}function p({force:e=!1}={}){if(p._done&&!e)return p._result||null;p._done=!0;let o={},r=(a,t)=>{if(t==null)return;let n=String(t).trim();n&&(process.env[a]!=null&&String(process.env[a]).trim()!==""||(process.env[a]=n,o[a]=n))};try{let a=C();if(d.existsSync(a))for(let t of d.readFileSync(a,"utf8").split(/\r?\n/)){let n=t.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!n||n[2].startsWith("#"))continue;let c=n[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),r(n[1],c)}}catch{}try{let a=A();if(d.existsSync(a)){let t=JSON.parse(d.readFileSync(a,"utf8"));t&&typeof t=="object"&&(r("ORACLE_DESK_URL",t.deskUrl||t.dataUrl||t.url),r("ORACLE_DATA_URL",t.dataUrl||t.deskUrl||t.url),r("ORACLE_API_URL",t.apiUrl||t.dataUrl||t.deskUrl),r("ORACLE_PUBLIC_URL",t.publicUrl||t.deskUrl||t.dataUrl),r("ORACLE_EXEC_URL",t.execUrl),r("MAD_DESK_URL",t.deskUrl||t.dataUrl))}}catch{}let s=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return s&&(r("ORACLE_DESK_URL",s),r("ORACLE_DATA_URL",s),r("ORACLE_API_URL",s),r("ORACLE_PUBLIC_URL",s),r("MAD_DESK_URL",s)),p._result=Object.keys(o).length?o:null,p._result}try{p()}catch{}function H(){return process.env.HERMES_HOME?i.resolve(process.env.HERMES_HOME):i.join(u(),".hermes")}function I(){return i.join(u(),".claude.json")}function M(e=process.cwd()){return i.join(e,".mcp.json")}function F(){return process.platform==="darwin"?i.join(u(),"Library","Application Support","Claude","claude_desktop_config.json"):i.join(u(),".config","Claude","claude_desktop_config.json")}function N(){return i.join(u(),".codex","config.toml")}function v(){return i.join(f(),"connectors")}function q(){return i.join(v(),"chatgpt-openapi.json")}function K(){return i.join(f(),"active-chain.json")}function y(e){let o=[i.join(l,"bin",e),i.join(l,"dist","bin",e),i.join(l,"..","bin",e)];return o.find(r=>d.existsSync(r))||o[0]}function B(e){return d.mkdirSync(e,{recursive:!0}),e}var E={homeDir:u,isPublicDesktop:_,oracleConfigDir:f,oracleExecEnvPath:$,oracleDeskJsonPath:A,oracleEnvFilePath:C,loadDeskRouting:p,hermesRoot:H,activeChainPath:K,claudeCodeUserConfigPath:I,claudeCodeProjectMcpPath:M,claudeDesktopConfigPath:F,codexConfigPath:N,chatgptConnectorDir:v,chatgptOpenApiPath:q,packageBin:y,ensureDir:B,PACKAGE_ROOT:l};import{execFile as G}from"node:child_process";import{existsSync as de,mkdirSync as fe,readFileSync as V,realpathSync as me,writeFileSync as he}from"node:fs";import j from"node:path";import{promisify as J}from"node:util";var xe=J(G);var ke=1440*60*1e3;function R(e,o){let r=t=>String(t).replace(/^v/,"").split("-")[0].split(".").map(n=>Number.parseInt(n,10)||0),s=r(e),a=r(o);for(let t=0;t<Math.max(s.length,a.length);t+=1){let n=s[t]??0,c=a[t]??0;if(n>c)return 1;if(n<c)return-1}return 0}function W(e){let o=e?.stateDir||j.join(process.env.HOME||".",".oracle");return j.join(o,"update-check.json")}function b(e){try{return JSON.parse(V(W(e),"utf8"))}catch{return null}}var z="oracle \u2014 self-custody multichain agent control plane",Q=`READ / RESEARCH (no keys, this package)
   oracle                      open the native Oracle chat (TTY)
   oracle bootstrap            optional: install an isolated Hermes compatibility runtime
   oracle init                 install agent lanes + read plane (dry-run by default)
-  oracle doctor               check read plane; checks signer too when installed
+  oracle doctor               check the read plane
   oracle eval desk            run desk harness eval (critical tests + parse smoke)
   oracle chat                 premium boxed oracle chat (multi-model)
   oracle model                choose standalone/Hermes provider and any compatible model
@@ -42,26 +30,18 @@ import{realpathSync as K}from"node:fs";import{fileURLToPath as je}from"node:url"
   oracle fees status|check     check Locals Only 0% fee eligibility
   oracle upgrade              upgrade installed agent lanes
 
-SIGNING (dispatches to @oracle-agent/operator on THIS machine; never in this package)
-  oracle sign init|doctor     provision / check the local signer (opt-in)
-  oracle vault ...            encrypt local key files at rest
-  oracle signer / runner      loopback signer daemon / action runner
-  oracle credential ...       OS credential store glue
-
-oracle <noun> --help for details. Keys never leave your machine; this package
-cannot sign \u2014 signing commands run the locally installed operator package.
-`;function G(){try{return JSON.parse(O.readFileSync(b.join(p,"package.json"),"utf8")).version||"0.0.0"}catch{return"0.0.0"}}function ve(){let e=b.join(p,"src","cli","commands");return O.existsSync(e)?e:b.join(p,"dist","cli","commands")}async function v(){let e=ve(),n=new Map;if(!O.existsSync(e))return n;let r=O.readdirSync(e).filter(s=>s.endsWith(".mjs")).sort();for(let s of r){let a=b.join(e,s);try{let o=(await import(ge(a).href+`?t=${Date.now()}`)).default;if(!o||typeof o!="object"||typeof o.run!="function")continue;let c=o.name||s.replace(/\.mjs$/,"");n.set(c,{...o,name:c,__file:a})}catch(t){process.env.ORACLE_CLI_DEBUG&&console.error(`oracle: failed loading command ${s}: ${t.message}`)}}return n}function xe(e,n=$()){return!n?.latest||!e||D(n.latest,e)<=0?"":`
-Update available: ${e} \u2192 ${n.latest}. Run 'oracle update'.
-`}function w(e,n){let r=[];r.push(`${ye} (v${e})`),r.push(""),r.push(ke.trimEnd());let s=[];for(let a of n.values()){if(["help","version"].includes(a.name))continue;!new Set(["init","doctor","chat","model","auth","chain","setup","data","data-mcp","scan","route","prepare","swap","farm","follow","equities","strategy","public","mcp","plugins","harness","upgrade","bootstrap","eval","sign","vault","signer","runner","credential"]).has(a.name)&&a.summary&&s.push(`  oracle ${a.name.padEnd(20)} ${a.summary}`)}return s.length&&(r.push(""),r.push("ADDITIONAL"),r.push(...s)),r.join(`
+oracle <noun> --help for details. This package prepares unsigned actions and
+never handles keys, signs, or broadcasts transactions.
+`;function O(){try{return JSON.parse(h.readFileSync(g.join(l,"package.json"),"utf8")).version||"0.0.0"}catch{return"0.0.0"}}function X(){let e=g.join(l,"src","cli","commands");return h.existsSync(e)?e:g.join(l,"dist","cli","commands")}async function m(){let e=X(),o=new Map;if(!h.existsSync(e))return o;let r=h.readdirSync(e).filter(s=>s.endsWith(".mjs")).sort();for(let s of r){let a=g.join(e,s);try{let n=(await import(Y(a).href+`?t=${Date.now()}`)).default;if(!n||typeof n!="object"||typeof n.run!="function")continue;let c=n.name||s.replace(/\.mjs$/,"");o.set(c,{...n,name:c,__file:a})}catch(t){process.env.ORACLE_CLI_DEBUG&&console.error(`oracle: failed loading command ${s}: ${t.message}`)}}return o}function Z(e,o=b()){return!o?.latest||!e||R(o.latest,e)<=0?"":`
+Update available: ${e} \u2192 ${o.latest}. Run 'oracle update'.
+`}function x(e,o){let r=[];r.push(`${z} (v${e})`),r.push(""),r.push(Q.trimEnd());let s=[];for(let a of o.values()){if(["help","version"].includes(a.name))continue;!new Set(["init","doctor","chat","model","auth","chain","setup","data","data-mcp","scan","route","prepare","swap","farm","follow","equities","strategy","public","mcp","plugins","harness","upgrade","bootstrap","eval"]).has(a.name)&&a.summary&&s.push(`  oracle ${a.name.padEnd(20)} ${a.summary}`)}return s.length&&(r.push(""),r.push("ADDITIONAL"),r.push(...s)),r.join(`
 `)+`
-`+xe(e)}function M(e,n){let r=[...n.keys()].sort(),s=r.length?r.join(", "):"(none loaded yet)";return`oracle: unknown command '${e}'. Known: ${s}
+`+Z(e)}function w(e,o){let r=[...o.keys()].sort(),s=r.length?r.join(", "):"(none loaded yet)";return`oracle: unknown command '${e}'. Known: ${s}
 Try: oracle --help
-`}function x(e){return{argv:e,root:p,bin:_,paths:U,dispatchOperator:H,resolveOperator:k}}async function q(e=[]){let n=G();if(e.includes("--version")||e.includes("-V"))return F();if(e[0]==="--help"||e[0]==="-h"){let o=await v();return process.stdout.write(w(n,o)),0}if(e.length===0){let o=await v();if(Oe(e)){let c=o.get("chat");if(c)return c.run(x([]))}return process.stdout.write(w(n,o)),0}if(be(e[0])){let c=(await v()).get("chat");if(c)return c.run(x(e))}let r=e[0],s=e.slice(1);if(r==="version")return F();if(r==="help"){let o=await v();if(s[0]){let c=o.get(s[0]);return c?(process.stdout.write((c.usage||`oracle ${c.name}`)+`
+`}function k(e){return{argv:e,root:l,bin:y,paths:E}}async function S(e=[]){let o=O();if(e.includes("--version")||e.includes("-V"))return L();if(e[0]==="--help"||e[0]==="-h"){let n=await m();return process.stdout.write(x(o,n)),0}if(e.length===0){let n=await m();if(ee(e)){let c=n.get("chat");if(c)return c.run(k([]))}return process.stdout.write(x(o,n)),0}if(te(e[0])){let c=(await m()).get("chat");if(c)return c.run(k(e))}let r=e[0],s=e.slice(1);if(r==="version")return L();if(r==="help"){let n=await m();if(s[0]){let c=n.get(s[0]);return c?(process.stdout.write((c.usage||`oracle ${c.name}`)+`
 `),c.summary&&process.stdout.write(c.summary+`
-`),0):(process.stderr.write(M(s[0],o)),1)}return process.stdout.write(w(n,o)),0}let a=await v(),t=a.get(r);if(t){if(s[0]==="--help"||s[0]==="-h")return process.stdout.write((t.usage||`oracle ${t.name}`)+`
+`),0):(process.stderr.write(w(s[0],n)),1)}return process.stdout.write(x(o,n)),0}let a=await m(),t=a.get(r);if(t){if(s[0]==="--help"||s[0]==="-h")return process.stdout.write((t.usage||`oracle ${t.name}`)+`
 `),t.summary&&process.stdout.write(t.summary+`
-`),0;if(R.includes(r))try{let o=await t.run(x(s));return typeof o=="number"?o:0}catch(o){return process.stderr.write(`oracle ${r}: ${o?.message||o}
-`),1}try{let o=await t.run(x(s));return typeof o=="number"?o:0}catch(o){return process.stderr.write(`oracle ${r}: ${o?.message||o}
-`),1}}return R.includes(r)?k().ok?(process.stderr.write(`oracle: sign-plane command '${r}' is not available in this build (operator is installed).
-`),1):(E(process.stderr),3):(process.stderr.write(M(r,a)),1)}async function F(){let n=`oracle ${G()}`,r=k();return r.ok&&(n+=`  operator ${r.version}`),process.stdout.write(n+`
-`),0}function Oe(e=[],n={stdin:process.stdin,stdout:process.stdout}){return e.length!==0?!1:process.env.ORACLE_FORCE_CHAT==="1"?!0:n.stdin?.isTTY===!0&&n.stdout?.isTTY===!0}function be(e){return["-m","--model","--provider","-q","--query","-Q","--quiet","-c","--continue","-r","--resume","-s","--skills","-t","--toolsets","--reasoning","--tui","--cli","--yolo","--checkpoints","--source","--max-turns"].includes(String(e||""))}var or=Object.freeze({data:"./desk-server.mjs",public:"./oracle-public-server.mjs","data-mcp":"./oracle-data-mcp.mjs",init:"./oracle-init.mjs",upgrade:"./oracle-upgrade.mjs",scan:"./oracle-scan.mjs",route:"./oracle-route.mjs",equities:"./oracle-equities.mjs"});function _e(){if(!process.argv[1])return!1;try{return K(je(import.meta.url))===K(process.argv[1])}catch{return!1}}async function Re(e=process.argv.slice(2)){return q(e)}if(_e()){let e=await Re();process.exit(typeof e=="number"?e:0)}export{or as COMMANDS,Re as main};
+`),0;try{let n=await t.run(k(s));return typeof n=="number"?n:0}catch(n){return process.stderr.write(`oracle ${r}: ${n?.message||n}
+`),1}}return process.stderr.write(w(r,a)),1}async function L(){let e=O();return process.stdout.write(`oracle ${e}
+`),0}function ee(e=[],o={stdin:process.stdin,stdout:process.stdout}){return e.length!==0?!1:process.env.ORACLE_FORCE_CHAT==="1"?!0:o.stdin?.isTTY===!0&&o.stdout?.isTTY===!0}function te(e){return["-m","--model","--provider","-q","--query","-Q","--quiet","-c","--continue","-r","--resume","-s","--skills","-t","--toolsets","--reasoning","--tui","--cli","--yolo","--checkpoints","--source","--max-turns"].includes(String(e||""))}var Oe=Object.freeze({data:"./desk-server.mjs",public:"./oracle-public-server.mjs","data-mcp":"./oracle-data-mcp.mjs",init:"./oracle-init.mjs",upgrade:"./oracle-upgrade.mjs",scan:"./oracle-scan.mjs",route:"./oracle-route.mjs",equities:"./oracle-equities.mjs"});function ne(){if(!process.argv[1])return!1;try{return U(re(import.meta.url))===U(process.argv[1])}catch{return!1}}async function oe(e=process.argv.slice(2)){return S(e)}if(ne()){let e=await oe();process.exit(typeof e=="number"?e:0)}export{Oe as COMMANDS,oe as main};

package/dist/cli/commands/browser-use-runner.sh

@@ -0,0 +1,13 @@
+#!/bin/sh
+set -eu
+
+mkdir -p "$BH_RUNTIME_DIR" "$BH_TMP_DIR" "$BH_AGENT_WORKSPACE"
+rm -f "$BH_RUNTIME_DIR/bu.sock" "$BH_RUNTIME_DIR/bu.pid" "$BH_RUNTIME_DIR/bu.port"
+socat TCP-LISTEN:9222,bind=127.0.0.1,reuseaddr,fork UNIX-CONNECT:/workspace/runtime/cdp.sock >/dev/null 2>&1 &
+BRIDGE_PID=$!
+cleanup() {
+  kill "$BRIDGE_PID" 2>/dev/null || true
+  rm -f "$BH_RUNTIME_DIR/bu.sock" "$BH_RUNTIME_DIR/bu.pid" "$BH_RUNTIME_DIR/bu.port"
+}
+trap cleanup EXIT INT TERM
+"$ORACLE_BROWSER_USE_PYTHON" /opt/browser-use/bin/browser-use "$@"