@oracle-agent/oracle 0.22.15 → 0.22.16

package/dist/cli/commands/arm.mjs

@@ -0,0 +1,17 @@
+var o=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};var u=o(()=>{});var C=o(()=>{});var f=o(()=>{});var s=o(()=>{C();f()});var H=o(()=>{});var wt,bt,l=o(()=>{wt=300*1e3,bt=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});import{Contract as xt,JsonRpcProvider as At}from"ethers";var J=o(()=>{});var It,_=o(()=>{J();It=Object.freeze({swap:5,bridge:5,perps:0,nft:0})});var Z=o(()=>{u();s();H();l();_()});var ee=o(()=>{u();s();l();_()});var j=o(()=>{});var te=o(()=>{u();s();j();l()});var Qt,re=o(()=>{Qt=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"})});import{TypedDataEncoder as nr,getAddress as or,isAddress as ar}from"ethers";var pr,fr,mr,hr,ne=o(()=>{u();s();re();H();l();pr=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),fr=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),mr=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),hr=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]})});var T,br,L=o(()=>{T={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},br=new Map(Object.values(T).map(e=>[e.chainId,e]))});import{Interface as ke,getAddress as yr}from"ethers";var Sr,x=o(()=>{u();L();Sr=new ke(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"])});var Cr,R=o(()=>{u();Cr=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"})});import{Interface as se,getAddress as _r,isAddress as Or}from"ethers";var Fr,Dr,W=o(()=>{x();R();s();l();Fr=new se(["function quoteExactInputSingle((address tokenIn, address tokenOut, uint256 amountIn, uint24 fee, uint160 sqrtPriceLimitX96) params) returns (uint256 amountOut, uint160 sqrtPriceX96After, uint32 initializedTicksCrossed, uint256 gasEstimate)","function quoteExactInput(bytes path, uint256 amountIn) returns (uint256 amountOut, uint160[] sqrtPriceX96AfterList, uint32[] initializedTicksCrossedList, uint256 gasEstimate)"]),Dr=new se(["function exactInputSingle((address tokenIn,address tokenOut,uint24 fee,address recipient,uint256 amountIn,uint256 amountOutMinimum,uint160 sqrtPriceLimitX96) params) payable returns (uint256 amountOut)","function multicall(uint256 deadline,bytes[] data) payable returns (bytes[] results)"])});import{AbiCoder as _e,Interface as ce,getAddress as Pr,isAddress as qr,keccak256 as Mr}from"ethers";var Gr,Kr,zr,ue=o(()=>{x();R();s();l();Gr=_e.defaultAbiCoder(),Kr=new ce(["function quoteExactInputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountOut, uint256 gasEstimate)"]),zr=new ce(["function execute(bytes commands,bytes[] inputs,uint256 deadline) payable"])});var We=1<<17;var Ge=256*1024*1024;import c from"node:fs";import X from"node:fs";import he from"node:os";import p from"node:path";function Y(e=process.env){return e.ORACLE_CONFIG_DIR?p.resolve(e.ORACLE_CONFIG_DIR):e.ORACLE_FAKE_HOME?p.join(p.resolve(e.ORACLE_FAKE_HOME),".config","oracle"):p.join(he.homedir(),".config","oracle")}function F(e=process.env){let t=Y(e);X.mkdirSync(t,{recursive:!0,mode:448});try{X.chmodSync(t,448)}catch{}return t}function D(e=process.env){return p.join(F(e),"keys","default.vault")}function $(e=process.env){return p.join(F(e),"local-session.json")}function g(e=process.env){return p.join(F(e),"local-arm.json")}var rt=1800*1e3;function P(e){return JSON.parse(c.readFileSync(e,"utf8"))}function Ae(e,t){c.writeFileSync(e,JSON.stringify(t,null,2)+`
+`,{mode:384});try{c.chmodSync(e,384)}catch{}}function I(e=process.env){let t=e.ORACLE_VAULT_PATH||D(e),n=$(e),r=g(e),a=!1,w=null;try{c.existsSync(t)&&(a=!0,w=JSON.parse(c.readFileSync(t,"utf8"))?.meta||null)}catch{a=c.existsSync(t)}let y=!1,d=null,i=null;try{if(c.existsSync(n)){let b=P(n);b?.expiresAt&&Date.parse(b.expiresAt)>Date.now()&&b?.vaultPath&&(y=!0,d=b.expiresAt,i=b.address||null)}}catch{y=!1}let S=!1,v=null;try{c.existsSync(r)&&(v=P(r),S=v?.armed===!0,S&&v.expiresAt&&Date.parse(v.expiresAt)<=Date.now()&&(S=!1))}catch{S=!1}return{vaultPath:t,vaultExists:a,vaultMeta:w,unlocked:y,sessionExpiresAt:d,address:i,armed:S,arm:v,plane:"local-self-custody",note:"Keys never leave this machine. Public HTTP plane stays prepare-only."}}function U(e,t,n){for(let r of n)if(e[r]!=null)return(Array.isArray(e[r])?e[r]:String(e[r]).split(",")).map(w=>String(w).trim()).filter(Boolean);for(let r of n)if(Array.isArray(t[r]))return t[r];return[]}function N(e={},t=process.env){let n=c.existsSync(g(t))?P(g(t)):{},r={armed:e.armed===!0,maxSpendEth:e.maxSpendEth!=null?String(e.maxSpendEth):n.maxSpendEth||null,chains:Array.isArray(e.chains)?e.chains.map(String):Array.isArray(n.chains)?n.chains:[],maxSlippageBps:e.maxSlippageBps!=null?Number(e.maxSlippageBps):n.maxSlippageBps??500,destinations:U(e,n,["destinations","destinationAllowlist"]),spenders:U(e,n,["spenders","operators","spenderAllowlist"]),selectors:U(e,n,["selectors","selectorAllowlist"]),maxSpendWei:e.maxSpendWei!=null?String(e.maxSpendWei):n.maxSpendWei||null,ttlMinutes:e.ttlMinutes!=null?Number(e.ttlMinutes):n.ttlMinutes??30,armedAt:null,expiresAt:null};return r.armed&&(r.armedAt=new Date().toISOString(),r.expiresAt=new Date(Date.now()+Math.max(1,r.ttlMinutes)*6e4).toISOString()),Ae(g(t),r),r}import{Wallet as Ya,JsonRpcProvider as Ja,getAddress as Qa,isAddress as Za,parseUnits as ei}from"ethers";var ot=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),q=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),M=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var ye=Object.freeze({FULL:"FULL",NO_GAS:"NO_GAS",FAILED:"FAILED"});Z();ee();te();u();s();j();l();ne();W();ue();u();var gn=Object.freeze({across:["across"],relay:["relaychain","relay"],lifi:["jumper-(li.fi-powered)","lifi"],stargate:["stargate-v2","stargate-v1","stargate"],hop:["hop-protocol","hop"],debridge:["debridge"],synapse:["synapse"],connext:["connext"],cbridge:["celer-bridge","celer-cbridge","cbridge"],celer:["celer-bridge","celer-cbridge","cbridge"],squid:["squid"],symbiosis:["symbiosis"],wormhole:["wormhole"],mayan:["mayan"],allbridge:["allbridge"],thorchain:["thorchain"]});_();l();var Dn=Object.freeze({TRANSACTION:"unsigned-transaction",TYPED_DATA_ORDER:"typed-data-order"});var $n=new Set(["0x0000000000000000000000000000000000000000","0x000000000000000000000000000000000000dead","0x0000000000000000000000000000000000000001","0x00000000000000000000000000000000000a1ce5"].map(e=>e.toLowerCase()));x();R();x();x();var so=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);W();L();import{homedir as G}from"node:os";import{join as K}from"node:path";var le=process.env.ORACLE_PUBLIC_DESKTOP==="1",Le=le?process.env.ORACLE_CONFIG_DIR||K(G(),".config","oracle"):K(G(),".config","oracle"),yo=le?Le:K(G(),".config","mad-desk");s();import{Interface as $e,MaxUint256 as Yo,isAddress as Jo,keccak256 as Qo,toUtf8Bytes as Zo}from"ethers";import{Interface as Fe,isAddress as To}from"ethers";s();C();f();import{isAddress as Io}from"ethers";C();f();var Fo=new Fe(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as De,isAddress as Uo}from"ethers";C();f();var Vo=new De(["function approve(address spender,uint256 amount) returns (bool)"]),Ho=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});f();var aa=new $e(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Ue,isAddress as ca}from"ethers";f();var da=new Ue(["function setApprovalForAll(address operator,bool approved)"]);import{Interface as Pe,MaxUint256 as ma,isAddress as ha}from"ethers";var wa=new Pe(["function transfer(address to,uint256 amount) returns (bool)","function transferFrom(address from,address to,uint256 amount) returns (bool)"]);import{isAddress as Ha}from"ethers";import{Wallet as li,JsonRpcProvider as di,getAddress as pi,isAddress as fi,parseUnits as mi}from"ethers";L();var me=`oracle arm [--max <eth>] [--chain base[,eth]] [--slip-bps 500] [--ttl-min 30]
+  [--destination 0xRouter[,0xRouter2]] [--spender 0xSpender[,0xOperator]] [--selector 0x095ea7b3]
+oracle arm --off
+
+Arm the LOCAL vault session for capped snipes on this machine.
+Does nothing on the public cloud plane.
+
+  oracle arm --max 0.05 --chain base --slip-bps 500 --ttl-min 30
+  oracle arm --off
+`;function A(e,t){let n=e.find(a=>a.startsWith(`--${t}=`));if(n)return n.split("=").slice(1).join("=");let r=e.indexOf(`--${t}`);return r>=0&&e[r+1]&&!e[r+1].startsWith("--")?e[r+1]:null}function z(e,t){for(let n of t){let r=A(e,n);if(r!=null)return String(r).split(",").map(a=>a.trim()).filter(Boolean)}return[]}var Ui={name:"arm",summary:"arm local vault spend policy for snipes",group:"local",usage:me,async run(e){let t=e.argv||[];if(t.includes("--help")||t.includes("-h"))return process.stdout.write(me+`
+`),0;if(t.includes("--off")||t.includes("--disarm")){let i=N({armed:!1});return process.stdout.write(`disarmed
+`),0}let n=A(t,"max")||A(t,"max-spend");if(!n){let i=I();return i.armed?(process.stdout.write(`armed max=${i.arm?.maxSpendEth} chains=${(i.arm?.chains||[]).join(",")} exp=${i.arm?.expiresAt}
+`),0):(process.stderr.write(`error: --max <eth> required to arm (or --off to disarm)
+`),1)}let r=A(t,"chain")||"base",a=String(r).split(",").map(i=>i.trim()).filter(Boolean),w=Number(A(t,"slip-bps")||500),y=Number(A(t,"ttl-min")||30),d=N({armed:!0,maxSpendEth:n,chains:a,maxSlippageBps:w,destinations:z(t,["destination","dest","to"]),spenders:z(t,["spender","operator"]),selectors:z(t,["selector","method"]),ttlMinutes:y});return process.stdout.write(`armed max=${d.maxSpendEth} eth chains=${d.chains.join(",")} slip=${d.maxSlippageBps}bps until ${d.expiresAt}
+`),process.stdout.write(`snipe: oracle snipe 0xCA... --chain base --execute
+`),0}};export{Ui as default};

package/dist/cli/commands/chat.mjs

@@ -267,7 +267,7 @@ Connection: close\r
 `)){let[i,a]=s.trim().split(/\s+/).map(Number);!i||!a||(r.has(a)||r.set(a,[]),r.get(a).push(i))}let n=[],o=s=>{for(let i of r.get(s)||[])o(i),n.push(i)};return o(e),[...n,e].map(s=>({pid:s,startTime:Ot(s)}))}function Gd(e,t){for(let r of e||[])if(!(!r.startTime||Ot(r.pid)!==r.startTime))try{process.kill(r.pid,t)}catch{}}function Tt(e,t="SIGTERM",r=!1){if(e){if(!r){try{e.kill(t)}catch{}return}if(process.platform==="win32"){try{st("taskkill",["/PID",String(e.pid),"/T",...t==="SIGKILL"?["/F"]:[]],{stdio:"ignore",windowsHide:!0})}catch{}ar(e,"cancel");return}if(!e._oracleKillTargets){if(!e._oracleStartTime||Ot(e.pid)!==e._oracleStartTime){ar(e,"cancel");return}e._oracleKillTargets=lr(e.pid)}if(ar(e,"cancel"),e._oracleProcessGroup&&Ot(e.pid)===e._oracleStartTime)try{process.kill(-e.pid,t)}catch{}Gd(e._oracleKillTargets,t)}}var wy=Object.freeze({spawn:Nn,kill:Tt});function zi(e,t){return!e||e.exitCode!=null||e.signalCode!=null?Promise.resolve(!0):new Promise(r=>{let n=!1,o=a=>{n||(n=!0,clearTimeout(i),e.removeListener?.("exit",s),e.removeListener?.("close",s),r(a))},s=()=>o(!0),i=setTimeout(()=>o(!1),t);e.once?.("exit",s),e.once?.("close",s)})}async function ae(e){let t=F.get(e);if(t){if(t.stopPromise)return t.stopPromise;t.stopPromise=(async()=>{t.idleTimer&&clearTimeout(t.idleTimer),t.proxyRelay?.close?.(),je(t.proxy);let r=zi(t.child,1e3);if(Tt(t.child,"SIGTERM",t.owned),!await r){let n=zi(t.child,3e3);if(Tt(t.child,"SIGKILL",t.owned),!await n)throw Object.assign(new Error("managed Chromium process tree did not reap"),{code:"EREAP"})}F.get(e)===t&&F.delete(e)})();try{await t.stopPromise}catch(r){throw F.get(e)===t&&(t.stopPromise=null),r}}}function Rn(e){let t=F.get(e);if(t){if(t.idleTimer&&clearTimeout(t.idleTimer),t.activeRuns>0){t.idleTimer=null;return}t.idleTimer=setTimeout(()=>{ae(e).catch(()=>{})},t.idleTimeoutMs||Yi),typeof t.idleTimer.unref=="function"&&t.idleTimer.unref()}}function Wd(){for(let e of ot.values())e.controller.abort();for(let e of[...F.keys()])ae(e).catch(()=>{})}async function ea(e){let t=[];for(let n of ot.values())n.ownerTaskId===e&&(n.controller.abort(),t.push(n.promise));await Promise.allSettled(t);let r=[];for(let[n,o]of F.entries())o.ownerTaskId===e&&r.push(ae(n));await Promise.all(r)}function Vd(e){let t=F.get(e);t&&(t.activeRuns=(t.activeRuns||0)+1,t.idleTimer&&clearTimeout(t.idleTimer),t.idleTimer=null)}function Xd(e){let t=F.get(e);t&&(t.activeRuns=Math.max(0,(t.activeRuns||0)-1),Rn(e))}function ce(){return{ok:!1,error:"managed Chromium launch aborted"}}async function ta(e,t){if(t?.aborted)throw Object.assign(new Error("aborted"),{code:"ABORT_ERR"});await new Promise((r,n)=>{let o=!1,s=l=>{o||(o=!0,t?.removeEventListener("abort",a),l())},i=setTimeout(()=>s(r),e),a=()=>{clearTimeout(i),s(()=>n(Object.assign(new Error("aborted"),{code:"ABORT_ERR"})))};t?.addEventListener("abort",a,{once:!0}),i.unref?.()})}async function Yd(e,t,r,n){if(r.readDevToolsEndpointFn)return r.readDevToolsEndpointFn(e,t,n);let o=$.join(e,"DevToolsActivePort"),s=Date.now()+(Number(r.launchTimeoutMs)||15e3);for(;Date.now()<s;){if(n?.aborted||t.exitCode!=null||t.signalCode!=null||t.killed)return null;try{let[i,a]=M.readFileSync(o,"utf8").trim().split(/\r?\n/),l=Number(i);if(Number.isInteger(l)&&l>0&&l<=65535&&/^\/devtools\/browser\/[A-Za-z0-9-]+$/.test(a||""))return{port:l,wsPath:a}}catch{}try{await ta(50,n)}catch{return null}}return null}function qi(e,t){if(!e?.pid||process.platform!=="linux")return!0;try{let r=M.readFileSync(`/proc/${e.pid}/cmdline`,"utf8").split("\0");return lr(e.pid).some(({pid:o})=>{try{let s=M.readFileSync(`/proc/${o}/cmdline`,"utf8").split("\0");return s.includes("--remote-debugging-port=9224")&&s.includes(`--user-data-dir=${t}`)}catch{return!1}})}catch{return!1}}function Jd(e,t){if(!e?.pid||!Number.isInteger(t))return!1;if(process.platform==="linux")try{let r=t.toString(16).toUpperCase().padStart(4,"0"),n=new Set;for(let o of["/proc/net/tcp","/proc/net/tcp6"])for(let s of M.readFileSync(o,"utf8").split(`
 `).slice(1)){let i=s.trim().split(/\s+/);if(i.length<10||i[3]!=="0A")continue;let[a,l]=String(i[1]||"").split(":");(a==="0100007F"||a==="00000000000000000000000001000000")&&l===r&&n.add(i[9])}if(!n.size)return!1;for(let o of lr(e.pid)){let s=[];try{s=M.readdirSync(`/proc/${o.pid}/fd`)}catch{continue}for(let i of s)try{let a=M.readlinkSync(`/proc/${o.pid}/fd/${i}`),l=/^socket:\[(\d+)\]$/.exec(a);if(l&&n.has(l[1]))return!0}catch{}}return!1}catch{return!1}if(process.platform==="darwin"){let r=st("lsof",["-nP","-a","-p",String(e.pid),`-iTCP:${t}`,"-sTCP:LISTEN","-t"],{encoding:"utf8",timeout:2e3});return r.status===0&&String(r.stdout||"").trim().split(/\s+/).includes(String(e.pid))}if(process.platform==="win32"){let r=st("netstat.exe",["-ano","-p","tcp"],{encoding:"utf8",timeout:2e3,windowsHide:!0});return String(r.stdout||"").split(`
 `).some(n=>{let o=n.trim().split(/\s+/);return o[0]==="TCP"&&o[1]?.endsWith(`:${t}`)&&o[3]==="LISTENING"&&o[4]===String(e.pid)})}return!1}function Zd(e,t){if(process.platform!=="linux"||!e?.pid||!t)return!1;try{let r=lr(e.pid),n=`/sandbox/runtime/${$.basename(t)}`,o=new Set;for(let s of r){let i;try{i=M.readFileSync(`/proc/${s.pid}/net/unix`,"utf8")}catch{continue}for(let a of i.split(`
-`)){let l=a.trim().split(/\s+/),u=l.at(-1);if(u!==t&&u!==n)continue;let c=l[6];/^\d+$/.test(c||"")&&o.add(c)}}if(!o.size)return!1;for(let s of r){let i=[];try{i=M.readdirSync(`/proc/${s.pid}/fd`)}catch{continue}for(let a of i)try{let l=/^socket:\[(\d+)\]$/.exec(M.readlinkSync(`/proc/${s.pid}/fd/${a}`));if(l&&o.has(l[1]))return!0}catch{}}}catch{}return!1}function Qd(e,t,r){return new Promise((n,o)=>{let s=vn.request({socketPath:e,path:t,method:"GET",signal:r,headers:{host:"127.0.0.1:9224"}},i=>{let a="";i.setEncoding("utf8"),i.on("data",l=>{a.length<64e3&&(a+=l)}),i.on("end",()=>{if((i.statusCode||500)>=400)return o(new Error(`CDP returned ${i.statusCode}`));try{n(JSON.parse(a))}catch(l){o(l)}})});s.once("error",o),s.end()})}async function ep(e,t,r,n=15e3){let o=Date.now()+n;for(;Date.now()<o;){if(r?.aborted||t.exitCode!=null||t.signalCode!=null||t.killed)return null;try{if(!Zd(t,e))throw new Error("CDP socket is not owned");let s=await Qd(e,"/json/version",r);if(/^ws:\/\/(?:127\.0\.0\.1|0\.0\.0\.0|localhost):9224\/devtools\/browser\/[A-Za-z0-9-]+$/.test(s?.webSocketDebuggerUrl||""))return s}catch{}try{await ta(50,r)}catch{return null}}return null}async function tp(e,t,r={}){if(String(e.ORACLE_BROWSER_CDP_URL||"").trim())return{ok:!1,error:"ORACLE_BROWSER_CDP_URL is unsupported: Oracle must launch Chromium with its mandatory SSRF proxy"};let o=Zi(r.taskId||"default"),s=ot.get(o);if(s)return s.promise;let i=F.get(o);if(i?.child&&i.child.exitCode==null&&i.child.signalCode==null&&!i.child.killed)return Rn(o),{ok:!0,cdpUrl:i.cdpUrl,cdpSocket:i.cdpSocket,managed:!0,key:o};let a=new AbortController,l=r.ownerTaskId||r.taskId||"default",u=()=>a.abort();r.signal?.addEventListener("abort",u,{once:!0}),r.signal?.aborted&&a.abort();let c={controller:a,ownerTaskId:l,promise:null};c.promise=(async()=>{let d=String(r.executablePath||e.ORACLE_CHROMIUM_PATH||"").trim()||Ui(e);if(!d||!$.isAbsolute(d)||!cr(d))return{ok:!1,error:"Browser Use needs Chromium. Set ORACLE_CHROMIUM_PATH to an absolute executable path."};let p;try{p=await(r.startProxyFn||Kd)(r.proxyOptions)}catch{return a.signal.aborted?ce():{ok:!1,error:"mandatory Oracle browser SSRF proxy failed to start"}}if(a.signal.aborted)return je(p),ce();let f;try{f=await(r.startProxyRelayFn||((S,v)=>Ji(S,v,"proxy")))(p.url,t.BH_RUNTIME_DIR)}catch{return je(p),a.signal.aborted?ce():{ok:!1,error:"isolated Chromium proxy relay failed to start"}}if(a.signal.aborted)return f.close(),je(p),ce();let m=M.mkdtempSync($.join(t.HOME,"chromium-profile-"));M.chmodSync(m,448);let h=$.join(t.BH_RUNTIME_DIR,`chromium-cdp-${Gi(12).toString("hex")}.sock`);try{M.rmSync(h,{force:!0})}catch{}let E=["--headless=new","--remote-debugging-port=9224","--remote-debugging-address=0.0.0.0",`--user-data-dir=${m}`,"--disable-dev-shm-usage","--disable-extensions","--disable-background-networking","--disable-sync","--disable-translate","--proxy-server=http://0.0.0.0:9223","--proxy-bypass-list=<-loopback>","--mute-audio","--no-first-run","--no-default-browser-check","about:blank"],y=Ud(d,m,t,E,f.socketPath,h,e);if(!y.ok)return f.close(),je(p),y;let w=Nn(y.command,y.argv,{env:t,cwd:t.BH_AGENT_WORKSPACE,mode:"ignore",processGroup:!0,spawnFn:r.browserSpawnFn,spawnOptions:{env:t,stdio:"ignore",detached:!1,windowsHide:!0}}),b=w.child;if(!b||typeof b.once!="function")return f.close(),je(p),{ok:!1,error:"failed to create managed Chromium process"};let g={child:b,cdpUrl:null,cdpSocket:h,proxy:p,proxyRelay:f,owned:w.owned,activeRuns:0,idleTimeoutMs:Number(r.idleTimeoutMs)||Yi,ownerTaskId:l,launching:!0};F.set(o,g),Bi||(Bi=!0,process.once("exit",Wd)),b.once("exit",()=>{F.get(o)?.child===b&&ae(o).catch(()=>{})});let _=null;if(r.readDevToolsEndpointFn){let S=await Yd(m,b,r,a.signal);if(!S||a.signal.aborted||F.get(o)!==g||!qi(b,y.profileArg))return F.get(o)===g?await ae(o):(Tt(b,"SIGTERM",w.owned),f.close(),je(p)),a.signal.aborted?ce():{ok:!1,error:"managed Chromium did not expose an owned CDP endpoint"};if(!(r.verifyCdpOwnerFn||Jd)(b,S.port))return F.get(o)===g&&await ae(o),{ok:!1,error:"managed Chromium CDP listener is not owned by the launched process tree"};_=`http://127.0.0.1:${S.port}`;try{let C=await(r.fetchImpl||fetch)(`${_}/json/version`,{signal:AbortSignal.timeout(1e3)});if((C?.ok&&typeof C.json=="function"?await C.json():null)?.webSocketDebuggerUrl!==`ws://127.0.0.1:${S.port}${S.wsPath}`)throw new Error("CDP identity mismatch")}catch{return F.get(o)===g&&await ae(o),{ok:!1,error:"managed Chromium CDP identity verification failed"}}}else{if(!await ep(h,b,a.signal,Number(r.launchTimeoutMs)||15e3))return F.get(o)===g&&await ae(o),a.signal.aborted?ce():{ok:!1,error:"managed Chromium did not expose an owned private CDP socket"};if(a.signal.aborted||F.get(o)!==g)return F.get(o)===g&&await ae(o),ce();if(!qi(b,y.profileArg))return F.get(o)===g&&await ae(o),{ok:!1,error:"private CDP socket is not bound to the launched Chromium process tree"}}return a.signal.aborted||F.get(o)!==g?(F.get(o)===g&&await ae(o),ce()):(g.cdpUrl=_,g.launching=!1,Rn(o),{ok:!0,cdpUrl:_,cdpSocket:h,managed:!0,key:o})})(),ot.set(o,c);try{return await c.promise}finally{r.signal?.removeEventListener("abort",u),ot.get(o)===c&&ot.delete(o)}}function Ki(e){let t=Number(e),r=Number.isFinite(t)?Math.trunc(t):Cn;return Math.max(Rd,Math.min(Xi,r))*1e3}function rp(e,t,r={}){return new Promise(n=>{if(r.signal?.aborted){n({error:Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"})});return}let o,s=!1;try{let h=Nn(e,t,{cwd:r.cwd,env:r.env,mode:"pipe",input:r.input,spawnFn:r.spawnFn,spawnOptions:{cwd:r.cwd,env:r.env,windowsHide:!0,stdio:["pipe","pipe","pipe"]}});o=h.child,s=h.owned}catch(h){n({error:h});return}if(!o||typeof o.once!="function"){n({error:new Error("CLI spawn did not return a ChildProcess")});return}let i="",a="",l=!1,u,c,d=null,p=h=>{l||(l=!0,u&&clearTimeout(u),c&&clearTimeout(c),r.signal?.removeEventListener("abort",m),n(h))},f=h=>{d||(d=h,Tt(o,"SIGKILL",s),c=setTimeout(()=>p({error:Object.assign(new Error("browser_exec process tree did not reap"),{code:"EREAP"}),stdout:i,stderr:a}),3e3),c.unref?.())},m=()=>f(Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"}));o.stdout?.on("data",h=>{i.length<On&&(i+=String(h).slice(0,On-i.length))}),o.stderr?.on("data",h=>{a.length<Tn&&(a+=String(h).slice(0,Tn-a.length))}),o.once("error",h=>p({error:h,stdout:i,stderr:a})),o.once("close",(h,E)=>p(d?{error:d,stdout:i,stderr:a}:{status:h,signal:E,stdout:i,stderr:a})),u=setTimeout(()=>f(Object.assign(new Error("timed out"),{code:"ETIMEDOUT"})),r.timeout),u.unref?.(),r.signal?.aborted?m():r.signal?.addEventListener("abort",m,{once:!0}),o.stdin?.end(r.input)})}async function ra(e={},t={}){let r=t.env||process.env;if(!In(r))return{ok:!1,error:"browser_exec is disabled. Set ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use. Oracle runs an AST-bounded browser-helper subset, not terminal-equivalent Python."};if(t.signal?.aborted)return ce();let n=String(e.code||""),o=String(e.session||"").trim();if(o&&!Td.test(o))return{ok:!1,error:"session must be 1-64 letters, digits, dashes, or underscores"};let s=Bd(n,{env:r,python:t.python,spawnFn:t.validatorSpawnFn});if(!s.ok)return s;let i=Pd(r);if(!i.ok)return i;let a=`${t.taskId||"default"}--${o||"default"}`,l=qd(r,a);l.BU_NAME=`oracle-${Ln("sha256").update(a).digest("hex").slice(0,12)}`;let u={...t,taskId:a,ownerTaskId:t.taskId||"default",cli:i},c=t.ensureBrowserFn?await t.ensureBrowserFn(r,l,u):await tp(r,l,u);if(!c?.ok)return c||{ok:!1,error:"Browser Use backend failed to initialize"};if(t.signal?.aborted)return ce();l.BU_CDP_URL="http://0.0.0.0:9222";let d;if(c.cdpSocket)d={socketPath:c.cdpSocket,close(){}};else try{d=await(t.startCdpRelayFn||jd)(c.cdpUrl,l.BH_RUNTIME_DIR)}catch{return{ok:!1,error:"isolated CDP relay failed to start"}}if(t.signal?.aborted)return d.close(),ce();let p=Md(i,l,d.socketPath,r);if(!p.ok)return d.close(),p;c.key&&Vd(c.key);let f;try{f=await rp(p.command,p.argv,{spawnFn:t.cliSpawnFn,input:n,timeout:Ki(e.timeout_s),cwd:l.BH_AGENT_WORKSPACE,env:l,signal:t.signal})}finally{d.close(),c.key&&Xd(c.key)}if(f.error){let y=f.error.code==="ETIMEDOUT"?`browser_exec timed out after ${Ki(e.timeout_s)/1e3}s`:`browser_exec failed to launch: ${f.error.message||f.error}`;return{ok:!1,error:L(y,{force:!0})}}let m=typeof f.status=="number"?f.status:1,h=L(String(f.stdout||"").slice(0,On),{force:!0}),E=L(String(f.stderr||"").slice(0,Tn),{force:!0});return{ok:m===0,status:m,stdout:h,stderr:E||void 0,workspace:l.BH_AGENT_WORKSPACE,session:o||void 0}}var na=Object.freeze([{type:"function",function:{name:"browser_exec",description:"Drive Browser Use CLI 3.0 with several browser actions in one persistent call. Oracle accepts only AST-bounded helper Python: literal-public-URL new_tab/goto_url, wait_for_load, page_info, literal fill_input, literal click_at_xy, ensure_real_tab, and print. No variables, imports, attributes, filesystem, subprocess, arbitrary JavaScript, raw CDP, or dynamic URLs. Requires ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use.",parameters:{type:"object",properties:{code:{type:"string",description:"Bounded Python using approved pre-imported Browser Use helpers. Begin with a short comment describing the step."},session:{type:"string",description:"Optional persistent session name: 1-64 letters, digits, dashes, or underscores."},timeout_s:{type:"integer",description:`Timeout in seconds (default ${Cn}, maximum ${Xi}).`,default:Cn}},required:["code"],additionalProperties:!1}}}]);import{spawnSync as np}from"node:child_process";import oa from"node:fs";import $n from"node:path";var sa=45e3,op=4e4,sp=Object.freeze(["whoami","user","read","search","timeline","mentions","bookmarks","likes","following","followers","dms","auth"]),ip=Object.freeze(["post","reply","quote","delete","like","unlike","repost","unrepost","bookmark","unbookmark","follow","unfollow","block","unblock","mute","unmute","dm"]),ia=Object.freeze(["--verbose","-v","--trace","-t","--bearer-token","--consumer-key","--consumer-secret","--access-token","--token-secret","--client-id","--client-secret"]);function ap(e=process.env){let t=String(e.ORACLE_XURL_ENABLED||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function aa(e=process.env){let t=String(e.ORACLE_XURL_ALLOW_WRITE||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function cp(e=process.env){let t=String(e.ORACLE_XURL_BIN||"").trim();if(t)return $n.isAbsolute(t)?oa.existsSync(t)?{ok:!0,bin:t}:{ok:!1,error:`ORACLE_XURL_BIN not found: ${t}`}:{ok:!1,error:"ORACLE_XURL_BIN must be absolute"};let r=String(e.PATH||process.env.PATH||"");for(let n of r.split($n.delimiter)){if(!n)continue;let o=$n.join(n,"xurl");try{if(oa.existsSync(o))return{ok:!0,bin:o}}catch{}}return{ok:!1,error:"xurl binary not found on PATH. Install: curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash"}}function lp(e=process.env){let t=e.HOME||process.env.HOME||"";return{PATH:e.PATH||process.env.PATH||"/usr/bin:/bin",HOME:t,USER:e.USER||process.env.USER||"",LANG:e.LANG||process.env.LANG||"C.UTF-8",LC_ALL:e.LC_ALL||process.env.LC_ALL||"C.UTF-8",XDG_CONFIG_HOME:e.XDG_CONFIG_HOME||process.env.XDG_CONFIG_HOME||"",XDG_DATA_HOME:e.XDG_DATA_HOME||process.env.XDG_DATA_HOME||"",NO_COLOR:"1"}}function up(e){for(let t of e){let r=String(t);if(ia.includes(r))return r;if(ia.some(n=>n.startsWith("--")&&r.startsWith(`${n}=`)))return r.split("=")[0]}return null}function fp(e={},t=process.env){let r;if(Array.isArray(e.argv))r=e.argv.map(l=>String(l));else{let l=String(e.command||e.cmd||"").trim();if(!l)return{ok:!1,error:"command is required (e.g. whoami, search, read, post)"};let u=Array.isArray(e.args)?e.args.map(c=>String(c)):typeof e.query=="string"?[e.query]:typeof e.text=="string"?[e.text]:typeof e.id=="string"?[e.id]:typeof e.handle=="string"?[e.handle]:[];l==="search"&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),(l==="timeline"||l==="mentions")&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),r=[l,...u]}if(r.length===0)return{ok:!1,error:"empty argv"};if(r.length>24)return{ok:!1,error:"too many arguments"};for(let l of r)if(String(l).length>4e3)return{ok:!1,error:"argument too long"};let n=up(r);if(n)return{ok:!1,error:`forbidden flag: ${n}`};if(r.some(l=>String(l).includes("\0")))return{ok:!1,error:"nul byte in argv"};let o=String(r[0]||"").replace(/^\//,"");if(o.startsWith("2/")||r[0].startsWith("/2/")||r[0].startsWith("https://api.x.com/")){if(!aa(t)&&r.some(l=>/^-X$/.test(l)||/^--request$/.test(l))){let l=r.findIndex(c=>c==="-X"||c==="--request"),u=String(r[l+1]||"GET").toUpperCase();if(u!=="GET"&&u!=="HEAD")return{ok:!1,error:"raw non-GET requires ORACLE_XURL_ALLOW_WRITE=true"}}}else if(o==="auth"){if(String(r[1]||"")!=="status")return{ok:!1,error:"only `auth status` is allowed (no apps add / oauth2 from the agent)"}}else if(!sp.includes(o))if(ip.includes(o)){if(!aa(t))return{ok:!1,error:`write command '${o}' requires ORACLE_XURL_ALLOW_WRITE=true`}}else return o==="media"?{ok:!1,error:"media upload is disabled in the agent tool (run xurl media outside the agent)"}:{ok:!1,error:`command not allowlisted: ${o}`};let s=[...r],i=String(t.ORACLE_XURL_APP||"").trim(),a=String(t.ORACLE_XURL_USER||"").trim();if(i&&!s.includes("--app")&&s.unshift("--app",i),a&&!s.includes("--username")&&!s.includes("-u")){let l=0;s[0]==="--app"&&(l=2),l<s.length&&s.splice(l+1,0,"-u",a)}return{ok:!0,argv:s,command:o}}async function ca(e,t={},r={}){if(e!=="xurl")return{ok:!1,error:`unknown tool: ${e}`};let n=r.env||process.env;if(!ap(n))return{ok:!1,error:"xurl is disabled. Set ORACLE_XURL_ENABLED=true after `xurl auth status` succeeds. Writes stay off until ORACLE_XURL_ALLOW_WRITE=true."};let o=fp(t,n);if(!o.ok)return o;let s=cp(n);if(!s.ok)return s;let a=(r.spawnFn||np)(s.bin,o.argv,{encoding:"utf8",timeout:r.timeoutMs||sa,maxBuffer:1024*1024,env:lp(n)});if(a.error){let d=a.error.code==="ETIMEDOUT"?`xurl timed out after ${r.timeoutMs||sa}ms`:String(a.error.message||a.error);return{ok:!1,error:L(d,{force:!0})}}let l=L(String(a.stdout||"").slice(0,op),{force:!0}),u=L(String(a.stderr||"").slice(0,2e3),{force:!0}),c=typeof a.status=="number"?a.status:1;return{ok:c===0,status:c,command:o.command,argv:o.argv.map(d=>/=/.test(d)&&/token|secret|key|bearer/i.test(d)?"[redacted-arg]":d),stdout:l,stderr:u||void 0}}var la=Object.freeze([{type:"function",function:{name:"xurl",description:"Call the official xurl CLI against the X API with an allowlisted command. Reads (whoami/user/read/search/timeline/mentions/...) work when ORACLE_XURL_ENABLED=true. Writes (post/reply/like/follow/dm/...) also need ORACLE_XURL_ALLOW_WRITE=true. Never pass secrets or --verbose. Auth is whatever the operator configured in ~/.xurl.",parameters:{type:"object",properties:{command:{type:"string",description:"xurl subcommand: whoami, user, read, search, timeline, mentions, post, reply, ..."},args:{type:"array",items:{type:"string"},description:"Positional args after the command (query, id, handle, text)."},query:{type:"string",description:"Convenience for search query."},text:{type:"string",description:"Convenience for post/reply/dm text."},id:{type:"string",description:"Convenience for read/like/reply target id or URL."},handle:{type:"string",description:"Convenience for user/follow/dm handle."},limit:{type:"integer",description:"Result limit for search/timeline/mentions (1-50)."},argv:{type:"array",items:{type:"string"},description:"Raw argv alternative (still allowlisted + flag-filtered)."}},additionalProperties:!1}}}]);import dp from"node:fs";import pp from"node:path";var mp="knowledge",hp="corpus.json",Bn=["canonical","historical","methodology","live-required"],fa=new Set(Bn),Mn=200,jn=1,Un=10,da=5,ua=240,ve={idExact:100,titleExact:60,titleSubstring:30,titleToken:12,taxonomyToken:8,keywordToken:6,summaryToken:2,summarySubstring:3},De=null;function gp(){return pp.join(we(mp,import.meta.url),hp)}function it(e){return typeof e=="string"&&e.trim().length>0}function Pn(e){return Array.isArray(e)&&e.every(t=>typeof t=="string")}function yp(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let{id:t,title:r,kind:n,taxonomyIds:o,keywords:s,summary:i,canonicalUrls:a,sourceTier:l,updateCadence:u,liveDataRequired:c}=e;if(!it(t)||!it(r)||!fa.has(n)||!Pn(o)||!Pn(s)||!it(i)||!Pn(a)||a.length===0||!Number.isInteger(l)||l<0||l>4||!it(u)||typeof c!="boolean"||n==="live-required"!==c)return null;try{if(a.some(d=>new URL(d).protocol!=="https:"))return null}catch{return null}return{id:t.trim(),title:r.trim(),kind:n,taxonomyIds:o.map(d=>d.trim()).filter(Boolean),keywords:s.map(d=>d.trim()).filter(Boolean),summary:i.trim(),canonicalUrls:a.map(d=>d.trim()),sourceTier:l,updateCadence:u.trim(),liveDataRequired:c}}function bp(e){if(Array.isArray(e))return e;if(e&&typeof e=="object"){if(Array.isArray(e.records))return e.records;if(Array.isArray(e.corpus))return e.corpus}return null}function xp(e={}){let t=e&&typeof e=="object"?e:{},r=it(t.corpusPath)?t.corpusPath:gp();if(!t.forceReload&&De&&De.path===r)return De.result;let n;try{n=dp.readFileSync(r,"utf8")}catch(c){let d={ok:!1,error:`could not read knowledge corpus: ${c.code||c.message}`,records:[]};return De={path:r,result:d},d}let o;try{o=JSON.parse(n)}catch(c){let d={ok:!1,error:`knowledge corpus is not valid JSON: ${c.message}`,records:[]};return De={path:r,result:d},d}let s=bp(o);if(!s){let c={ok:!1,error:"knowledge corpus must be an array of records, or an object with a records[] array",records:[]};return De={path:r,result:c},c}let i=[],a=new Set,l=0;for(let c of s){let d=yp(c);if(!d||a.has(d.id)){l+=1;continue}a.add(d.id),i.push(d)}i.sort((c,d)=>c.id<d.id?-1:c.id>d.id?1:0);let u={ok:!0,records:i,skipped:l,path:r};return De={path:r,result:u},u}function Dn(e){return String(e||"").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean)}function Fn(e){return String(e||"").split(".").map(t=>t.trim().toLowerCase()).filter(Boolean)}function _p(e,t){let r=Fn(t);return r.length===0?!0:e.some(n=>{let o=Fn(n);return o.length<r.length?!1:r.every((s,i)=>o[i]===s)})}function wp(e,t,r){let n=0,o=e.id.toLowerCase(),s=e.title.toLowerCase(),i=e.summary.toLowerCase();o===t&&(n+=ve.idExact),s===t?n+=ve.titleExact:t&&s.includes(t)&&(n+=ve.titleSubstring),t&&i.includes(t)&&(n+=ve.summarySubstring);let a=new Set(Dn(e.title)),l=new Set(e.taxonomyIds.flatMap(c=>Fn(c))),u=new Set(e.keywords.flatMap(c=>Dn(c)));for(let c of r)a.has(c)&&(n+=ve.titleToken),l.has(c)&&(n+=ve.taxonomyToken),u.has(c)&&(n+=ve.keywordToken),i.includes(c)&&(n+=ve.summaryToken);return n}function Sp(e){return e.length<=ua?e:`${e.slice(0,ua)}\u2026`}function kp(e={},t={}){let r=e&&typeof e=="object"?e:{},n=new Set(["query","topK","taxonomyPrefix","kinds"]);if(Object.keys(r).some(m=>!n.has(m)))return{ok:!1,error:"unexpected knowledge_search argument"};if(!it(r.query))return{ok:!1,error:"query is required"};let o=r.query.trim().replace(/\s+/g," ");if(!o)return{ok:!1,error:"query is required"};if(o.length>Mn)return{ok:!1,error:`query length must not exceed ${Mn} characters`};let s=da;if(r.topK!==void 0&&r.topK!==null){let m=r.topK;if(typeof m!="number"||!Number.isInteger(m)||m<jn||m>Un)return{ok:!1,error:`topK must be an integer between ${jn} and ${Un}`};s=m}let i=null;if(r.kinds!==void 0&&r.kinds!==null){if(!Array.isArray(r.kinds)||r.kinds.length===0||r.kinds.some(m=>!fa.has(m)))return{ok:!1,error:`kinds must be a non-empty array drawn from ${Bn.join(", ")}`};i=new Set(r.kinds)}let a="";if(r.taxonomyPrefix!==void 0&&r.taxonomyPrefix!==null){if(typeof r.taxonomyPrefix!="string")return{ok:!1,error:"taxonomyPrefix must be a string"};a=r.taxonomyPrefix.trim()}let l=xp(t);if(!l.ok)return{ok:!1,error:l.error};let u=o.toLowerCase(),c=[...new Set(Dn(o))],d=[];for(let m of l.records){if(i&&!i.has(m.kind)||a&&!_p(m.taxonomyIds,a))continue;let h=wp(m,u,c);h<=0||d.push({record:m,score:h})}d.sort((m,h)=>h.score!==m.score?h.score-m.score:m.record.id<h.record.id?-1:m.record.id>h.record.id?1:0);let p=d.slice(0,s).map(({record:m,score:h})=>({id:m.id,title:m.title,kind:m.kind,taxonomyIds:m.taxonomyIds,summary:Sp(m.summary),canonicalUrls:m.canonicalUrls,sourceTier:m.sourceTier,updateCadence:m.updateCadence,liveDataRequired:m.liveDataRequired,score:h})),f={ok:!0,query:o,results:p,count:p.length};return p.some(m=>m.liveDataRequired)&&(f.warning="one or more results require live data; treat their content as potentially stale until confirmed with a live lookup"),f}function pa(e,t={},r={}){return e==="knowledge_search"?kp(t,r):{ok:!1,error:`unknown tool: ${e}`}}var ma=[{type:"function",function:{name:"knowledge_search",description:"Read-only search over the local, offline knowledge corpus by keyword or topic. Deterministic lexical search over canonical, historical, methodology, and live-required records. Results of kind live-required need a live lookup to confirm current state before being relied on.",parameters:{type:"object",properties:{query:{type:"string",description:`Search text (max ${Mn} chars)`},topK:{type:"integer",minimum:jn,maximum:Un,description:`Maximum results to return (default ${da})`},taxonomyPrefix:{type:"string",description:"Restrict results to records whose taxonomy ids fall under this dot-separated prefix"},kinds:{type:"array",items:{type:"string",enum:Bn},description:"Restrict results to these record kinds"}},required:["query"],additionalProperties:!1}}}];import Ep from"node:fs";import ha from"node:path";import{homedir as Ap}from"node:os";var vp=64*1024,Op=64;function Tp(e=process.env.ORACLE_CONFIG_DIR||ha.join(Ap(),".config","oracle")){return ha.join(e,"hooks.json")}function Hn(e={}){let t=e.path||Tp(e.configDir),r;try{r=Ep.readFileSync(t,"utf8")}catch{return{source:"missing",pre_tool:[]}}if(r.length>vp)return{source:"oversized",pre_tool:[],error:"hooks.json too large"};try{let n=JSON.parse(r),o=Array.isArray(n?.pre_tool)?n.pre_tool.slice(0,Op):[],s=[];for(let i of o){if(!i||typeof i!="object")continue;let a=typeof i.match=="string"?i.match.trim():"";!a||a.length>128||i.decision==="deny"&&s.push({match:a,decision:"deny",reason:typeof i.reason=="string"?i.reason.slice(0,200):"denied by operator hook",server:typeof i.server=="string"?i.server.trim().slice(0,128):void 0})}return{source:"file",path:t,pre_tool:s}}catch(n){return{source:"invalid",pre_tool:[],error:n instanceof Error?n.message:String(n)}}}function ga(e={},t=Hn()){try{if(t?.error&&t.source==="invalid")return{allow:!1,reason:`hooks.json invalid: ${t.error}`};if(t?.error&&t.source==="oversized")return{allow:!1,reason:"hooks.json oversized"};let r=typeof e.name=="string"?e.name:"";if(!r)return{allow:!1,reason:"hook check missing tool name"};let n=Array.isArray(t?.pre_tool)?t.pre_tool:[];for(let o of n)if(!(o.match!=="*"&&o.match!==r)&&!(o.server&&e?.args?.server!==o.server))return{allow:!1,reason:o.reason||`denied by hook (${o.match})`};return{allow:!0}}catch(r){return{allow:!1,reason:`hook engine failure: ${r instanceof Error?r.message:String(r)}`.slice(0,200)}}}import{homedir as zn}from"node:os";import{join as qn}from"node:path";var ya=process.env.ORACLE_PUBLIC_DESKTOP==="1",Cp=ya?process.env.ORACLE_CONFIG_DIR||qn(zn(),".config","oracle"):qn(zn(),".config","oracle"),Uy=ya?Cp:qn(zn(),".config","mad-desk");function Rp(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var Lp=["0","false","off","no"];function ba(e,t,r=!0){let n=String(Rp(e,t,"")).trim().toLowerCase();return n===""?r:!Lp.includes(n)}import{mkdir as zp,chmod as ur,readFile as qp,rename as Kp,writeFile as Gp}from"node:fs/promises";import{homedir as Wp}from"node:os";import{dirname as _a,join as Gn}from"node:path";import Vp from"sql.js";import{wordlists as Ip}from"ethers";var Np=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),$p=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],Pp=new Set([12,15,18,21,24]);function Mp(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return Pp.has(t.length)&&t.every(r=>Ip.en.getWordIndex(r)>=0)}var jp=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,Up=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,Dp=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function Fp(e){let t=xa(e);return Dp.has(t)||Up.test(t)}var Ct=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function xa(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function Bp(e){let t=xa(e);return[...Np].some(r=>t.includes(r))}function Hp(e,t,r){if(typeof t=="string"){if($p.some(n=>n.test(t))||Mp(t))throw new Ct(r);if(jp.test(t)&&!Fp(e))throw new Ct(r)}}function Kn(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return Hp(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((o,s)=>Kn(o,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let n={};for(let o of Object.keys(e).sort()){let s=`${t}.${o}`;if(Bp(o))throw new Ct(s);e[o]!==void 0&&(n[o]=Kn(e[o],s,o))}return n}function at(e){return Kn(e)}var Wn=Object.freeze(["project","entity","source","thesis","strategy","simulation","prepared_action","receipt","position"]),Xp=new Set(Wn),Yp=new Set(Wn.slice(0,-1).map((e,t)=>`${e}:${Wn[t+1]}`)),Jp=Gn(process.env.ORACLE_CONFIG_DIR||Gn(Wp(),".config","oracle"),"workspace"),Zp=Gn(Jp,"artifacts.sqlite");function pr(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(pr).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${pr(e[t])}`).join(",")}}`}function wa(e){if(!Xp.has(e))throw new TypeError(`unknown artifact type: ${e}`);return e}function fr(e){let t=[];for(;e.step();)t.push(e.getAsObject());return e.free(),t}function dr(e){return e?{id:e.id,type:e.type,createdAt:e.created_at,data:JSON.parse(e.data_json)}:null}async function Sa(e={}){let t=e.path||Zp;await zp(_a(t),{recursive:!0,mode:448}),await ur(_a(t),448);let r;try{r=await qp(t)}catch(u){if(u.code!=="ENOENT")throw u}let n=await Vp(e.sqlJs||{}),o=r?new n.Database(r):new n.Database;o.run(`
+`)){let l=a.trim().split(/\s+/),u=l.at(-1);if(u!==t&&u!==n)continue;let c=l[6];/^\d+$/.test(c||"")&&o.add(c)}}if(!o.size)return!1;for(let s of r){let i=[];try{i=M.readdirSync(`/proc/${s.pid}/fd`)}catch{continue}for(let a of i)try{let l=/^socket:\[(\d+)\]$/.exec(M.readlinkSync(`/proc/${s.pid}/fd/${a}`));if(l&&o.has(l[1]))return!0}catch{}}}catch{}return!1}function Qd(e,t,r){return new Promise((n,o)=>{let s=vn.request({socketPath:e,path:t,method:"GET",signal:r,headers:{host:"127.0.0.1:9224"}},i=>{let a="";i.setEncoding("utf8"),i.on("data",l=>{a.length<64e3&&(a+=l)}),i.on("end",()=>{if((i.statusCode||500)>=400)return o(new Error(`CDP returned ${i.statusCode}`));try{n(JSON.parse(a))}catch(l){o(l)}})});s.once("error",o),s.end()})}async function ep(e,t,r,n=15e3){let o=Date.now()+n;for(;Date.now()<o;){if(r?.aborted||t.exitCode!=null||t.signalCode!=null||t.killed)return null;try{if(!Zd(t,e))throw new Error("CDP socket is not owned");let s=await Qd(e,"/json/version",r);if(/^ws:\/\/(?:127\.0\.0\.1|0\.0\.0\.0|localhost):9224\/devtools\/browser\/[A-Za-z0-9-]+$/.test(s?.webSocketDebuggerUrl||""))return s}catch{}try{await ta(50,r)}catch{return null}}return null}async function tp(e,t,r={}){if(String(e.ORACLE_BROWSER_CDP_URL||"").trim())return{ok:!1,error:"ORACLE_BROWSER_CDP_URL is unsupported: Oracle must launch Chromium with its mandatory SSRF proxy"};let o=Zi(r.taskId||"default"),s=ot.get(o);if(s)return s.promise;let i=F.get(o);if(i?.child&&i.child.exitCode==null&&i.child.signalCode==null&&!i.child.killed)return Rn(o),{ok:!0,cdpUrl:i.cdpUrl,cdpSocket:i.cdpSocket,managed:!0,key:o};let a=new AbortController,l=r.ownerTaskId||r.taskId||"default",u=()=>a.abort();r.signal?.addEventListener("abort",u,{once:!0}),r.signal?.aborted&&a.abort();let c={controller:a,ownerTaskId:l,promise:null};c.promise=(async()=>{let d=String(r.executablePath||e.ORACLE_CHROMIUM_PATH||"").trim()||Ui(e);if(!d||!$.isAbsolute(d)||!cr(d))return{ok:!1,error:"Browser Use needs Chromium. Set ORACLE_CHROMIUM_PATH to an absolute executable path."};let p;try{p=await(r.startProxyFn||Kd)(r.proxyOptions)}catch{return a.signal.aborted?ce():{ok:!1,error:"mandatory Oracle browser SSRF proxy failed to start"}}if(a.signal.aborted)return je(p),ce();let f;try{f=await(r.startProxyRelayFn||((S,v)=>Ji(S,v,"proxy")))(p.url,t.BH_RUNTIME_DIR)}catch{return je(p),a.signal.aborted?ce():{ok:!1,error:"isolated Chromium proxy relay failed to start"}}if(a.signal.aborted)return f.close(),je(p),ce();let m=M.mkdtempSync($.join(t.HOME,"chromium-profile-"));M.chmodSync(m,448);let h=$.join(t.BH_RUNTIME_DIR,`chromium-cdp-${Gi(12).toString("hex")}.sock`);try{M.rmSync(h,{force:!0})}catch{}let E=["--headless=new","--remote-debugging-port=9224","--remote-debugging-address=0.0.0.0",`--user-data-dir=${m}`,"--disable-dev-shm-usage","--disable-extensions","--disable-background-networking","--disable-sync","--disable-translate","--proxy-server=http://0.0.0.0:9223","--proxy-bypass-list=<-loopback>","--mute-audio","--no-first-run","--no-default-browser-check","about:blank"],y=Ud(d,m,t,E,f.socketPath,h,e);if(!y.ok)return f.close(),je(p),y;let w=Nn(y.command,y.argv,{env:t,cwd:t.BH_AGENT_WORKSPACE,mode:"ignore",processGroup:!0,spawnFn:r.browserSpawnFn,spawnOptions:{env:t,stdio:"ignore",detached:!1,windowsHide:!0}}),b=w.child;if(!b||typeof b.once!="function")return f.close(),je(p),{ok:!1,error:"failed to create managed Chromium process"};let g={child:b,cdpUrl:null,cdpSocket:h,proxy:p,proxyRelay:f,owned:w.owned,activeRuns:0,idleTimeoutMs:Number(r.idleTimeoutMs)||Yi,ownerTaskId:l,launching:!0};F.set(o,g),Bi||(Bi=!0,process.once("exit",Wd)),b.once("exit",()=>{F.get(o)?.child===b&&ae(o).catch(()=>{})});let _=null;if(r.readDevToolsEndpointFn){let S=await Yd(m,b,r,a.signal);if(!S||a.signal.aborted||F.get(o)!==g||!qi(b,y.profileArg))return F.get(o)===g?await ae(o):(Tt(b,"SIGTERM",w.owned),f.close(),je(p)),a.signal.aborted?ce():{ok:!1,error:"managed Chromium did not expose an owned CDP endpoint"};if(!(r.verifyCdpOwnerFn||Jd)(b,S.port))return F.get(o)===g&&await ae(o),{ok:!1,error:"managed Chromium CDP listener is not owned by the launched process tree"};_=`http://127.0.0.1:${S.port}`;try{let C=await(r.fetchImpl||fetch)(`${_}/json/version`,{signal:AbortSignal.timeout(1e3)});if((C?.ok&&typeof C.json=="function"?await C.json():null)?.webSocketDebuggerUrl!==`ws://127.0.0.1:${S.port}${S.wsPath}`)throw new Error("CDP identity mismatch")}catch{return F.get(o)===g&&await ae(o),{ok:!1,error:"managed Chromium CDP identity verification failed"}}}else{if(!await ep(h,b,a.signal,Number(r.launchTimeoutMs)||15e3))return F.get(o)===g&&await ae(o),a.signal.aborted?ce():{ok:!1,error:"managed Chromium did not expose an owned private CDP socket"};if(a.signal.aborted||F.get(o)!==g)return F.get(o)===g&&await ae(o),ce();if(!qi(b,y.profileArg))return F.get(o)===g&&await ae(o),{ok:!1,error:"private CDP socket is not bound to the launched Chromium process tree"}}return a.signal.aborted||F.get(o)!==g?(F.get(o)===g&&await ae(o),ce()):(g.cdpUrl=_,g.launching=!1,Rn(o),{ok:!0,cdpUrl:_,cdpSocket:h,managed:!0,key:o})})(),ot.set(o,c);try{return await c.promise}finally{r.signal?.removeEventListener("abort",u),ot.get(o)===c&&ot.delete(o)}}function Ki(e){let t=Number(e),r=Number.isFinite(t)?Math.trunc(t):Cn;return Math.max(Rd,Math.min(Xi,r))*1e3}function rp(e,t,r={}){return new Promise(n=>{if(r.signal?.aborted){n({error:Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"})});return}let o,s=!1;try{let h=Nn(e,t,{cwd:r.cwd,env:r.env,mode:"pipe",input:r.input,spawnFn:r.spawnFn,spawnOptions:{cwd:r.cwd,env:r.env,windowsHide:!0,stdio:["pipe","pipe","pipe"]}});o=h.child,s=h.owned}catch(h){n({error:h});return}if(!o||typeof o.once!="function"){n({error:new Error("CLI spawn did not return a ChildProcess")});return}let i="",a="",l=!1,u,c,d=null,p=h=>{l||(l=!0,u&&clearTimeout(u),c&&clearTimeout(c),r.signal?.removeEventListener("abort",m),n(h))},f=h=>{d||(d=h,Tt(o,"SIGKILL",s),c=setTimeout(()=>p({error:Object.assign(new Error("browser_exec process tree did not reap"),{code:"EREAP"}),stdout:i,stderr:a}),3e3),c.unref?.())},m=()=>f(Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"}));o.stdout?.on("data",h=>{i.length<On&&(i+=String(h).slice(0,On-i.length))}),o.stderr?.on("data",h=>{a.length<Tn&&(a+=String(h).slice(0,Tn-a.length))}),o.once("error",h=>p({error:h,stdout:i,stderr:a})),o.once("close",(h,E)=>p(d?{error:d,stdout:i,stderr:a}:{status:h,signal:E,stdout:i,stderr:a})),u=setTimeout(()=>f(Object.assign(new Error("timed out"),{code:"ETIMEDOUT"})),r.timeout),u.unref?.(),r.signal?.aborted?m():r.signal?.addEventListener("abort",m,{once:!0}),o.stdin&&(o.stdin.on?.("error",h=>{l||h?.code==="EPIPE"||h?.code==="ECONNRESET"||p({error:h,stdout:i,stderr:a})}),o.stdin.end(r.input))})}async function ra(e={},t={}){let r=t.env||process.env;if(!In(r))return{ok:!1,error:"browser_exec is disabled. Set ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use. Oracle runs an AST-bounded browser-helper subset, not terminal-equivalent Python."};if(t.signal?.aborted)return ce();let n=String(e.code||""),o=String(e.session||"").trim();if(o&&!Td.test(o))return{ok:!1,error:"session must be 1-64 letters, digits, dashes, or underscores"};let s=Bd(n,{env:r,python:t.python,spawnFn:t.validatorSpawnFn});if(!s.ok)return s;let i=Pd(r);if(!i.ok)return i;let a=`${t.taskId||"default"}--${o||"default"}`,l=qd(r,a);l.BU_NAME=`oracle-${Ln("sha256").update(a).digest("hex").slice(0,12)}`;let u={...t,taskId:a,ownerTaskId:t.taskId||"default",cli:i},c=t.ensureBrowserFn?await t.ensureBrowserFn(r,l,u):await tp(r,l,u);if(!c?.ok)return c||{ok:!1,error:"Browser Use backend failed to initialize"};if(t.signal?.aborted)return ce();l.BU_CDP_URL="http://0.0.0.0:9222";let d;if(c.cdpSocket)d={socketPath:c.cdpSocket,close(){}};else try{d=await(t.startCdpRelayFn||jd)(c.cdpUrl,l.BH_RUNTIME_DIR)}catch{return{ok:!1,error:"isolated CDP relay failed to start"}}if(t.signal?.aborted)return d.close(),ce();let p=Md(i,l,d.socketPath,r);if(!p.ok)return d.close(),p;c.key&&Vd(c.key);let f;try{f=await rp(p.command,p.argv,{spawnFn:t.cliSpawnFn,input:n,timeout:Ki(e.timeout_s),cwd:l.BH_AGENT_WORKSPACE,env:l,signal:t.signal})}finally{d.close(),c.key&&Xd(c.key)}if(f.error){let y=f.error.code==="ETIMEDOUT"?`browser_exec timed out after ${Ki(e.timeout_s)/1e3}s`:`browser_exec failed to launch: ${f.error.message||f.error}`;return{ok:!1,error:L(y,{force:!0})}}let m=typeof f.status=="number"?f.status:1,h=L(String(f.stdout||"").slice(0,On),{force:!0}),E=L(String(f.stderr||"").slice(0,Tn),{force:!0});return{ok:m===0,status:m,stdout:h,stderr:E||void 0,workspace:l.BH_AGENT_WORKSPACE,session:o||void 0}}var na=Object.freeze([{type:"function",function:{name:"browser_exec",description:"Drive Browser Use CLI 3.0 with several browser actions in one persistent call. Oracle accepts only AST-bounded helper Python: literal-public-URL new_tab/goto_url, wait_for_load, page_info, literal fill_input, literal click_at_xy, ensure_real_tab, and print. No variables, imports, attributes, filesystem, subprocess, arbitrary JavaScript, raw CDP, or dynamic URLs. Requires ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use.",parameters:{type:"object",properties:{code:{type:"string",description:"Bounded Python using approved pre-imported Browser Use helpers. Begin with a short comment describing the step."},session:{type:"string",description:"Optional persistent session name: 1-64 letters, digits, dashes, or underscores."},timeout_s:{type:"integer",description:`Timeout in seconds (default ${Cn}, maximum ${Xi}).`,default:Cn}},required:["code"],additionalProperties:!1}}}]);import{spawnSync as np}from"node:child_process";import oa from"node:fs";import $n from"node:path";var sa=45e3,op=4e4,sp=Object.freeze(["whoami","user","read","search","timeline","mentions","bookmarks","likes","following","followers","dms","auth"]),ip=Object.freeze(["post","reply","quote","delete","like","unlike","repost","unrepost","bookmark","unbookmark","follow","unfollow","block","unblock","mute","unmute","dm"]),ia=Object.freeze(["--verbose","-v","--trace","-t","--bearer-token","--consumer-key","--consumer-secret","--access-token","--token-secret","--client-id","--client-secret"]);function ap(e=process.env){let t=String(e.ORACLE_XURL_ENABLED||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function aa(e=process.env){let t=String(e.ORACLE_XURL_ALLOW_WRITE||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function cp(e=process.env){let t=String(e.ORACLE_XURL_BIN||"").trim();if(t)return $n.isAbsolute(t)?oa.existsSync(t)?{ok:!0,bin:t}:{ok:!1,error:`ORACLE_XURL_BIN not found: ${t}`}:{ok:!1,error:"ORACLE_XURL_BIN must be absolute"};let r=String(e.PATH||process.env.PATH||"");for(let n of r.split($n.delimiter)){if(!n)continue;let o=$n.join(n,"xurl");try{if(oa.existsSync(o))return{ok:!0,bin:o}}catch{}}return{ok:!1,error:"xurl binary not found on PATH. Install: curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash"}}function lp(e=process.env){let t=e.HOME||process.env.HOME||"";return{PATH:e.PATH||process.env.PATH||"/usr/bin:/bin",HOME:t,USER:e.USER||process.env.USER||"",LANG:e.LANG||process.env.LANG||"C.UTF-8",LC_ALL:e.LC_ALL||process.env.LC_ALL||"C.UTF-8",XDG_CONFIG_HOME:e.XDG_CONFIG_HOME||process.env.XDG_CONFIG_HOME||"",XDG_DATA_HOME:e.XDG_DATA_HOME||process.env.XDG_DATA_HOME||"",NO_COLOR:"1"}}function up(e){for(let t of e){let r=String(t);if(ia.includes(r))return r;if(ia.some(n=>n.startsWith("--")&&r.startsWith(`${n}=`)))return r.split("=")[0]}return null}function fp(e={},t=process.env){let r;if(Array.isArray(e.argv))r=e.argv.map(l=>String(l));else{let l=String(e.command||e.cmd||"").trim();if(!l)return{ok:!1,error:"command is required (e.g. whoami, search, read, post)"};let u=Array.isArray(e.args)?e.args.map(c=>String(c)):typeof e.query=="string"?[e.query]:typeof e.text=="string"?[e.text]:typeof e.id=="string"?[e.id]:typeof e.handle=="string"?[e.handle]:[];l==="search"&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),(l==="timeline"||l==="mentions")&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),r=[l,...u]}if(r.length===0)return{ok:!1,error:"empty argv"};if(r.length>24)return{ok:!1,error:"too many arguments"};for(let l of r)if(String(l).length>4e3)return{ok:!1,error:"argument too long"};let n=up(r);if(n)return{ok:!1,error:`forbidden flag: ${n}`};if(r.some(l=>String(l).includes("\0")))return{ok:!1,error:"nul byte in argv"};let o=String(r[0]||"").replace(/^\//,"");if(o.startsWith("2/")||r[0].startsWith("/2/")||r[0].startsWith("https://api.x.com/")){if(!aa(t)&&r.some(l=>/^-X$/.test(l)||/^--request$/.test(l))){let l=r.findIndex(c=>c==="-X"||c==="--request"),u=String(r[l+1]||"GET").toUpperCase();if(u!=="GET"&&u!=="HEAD")return{ok:!1,error:"raw non-GET requires ORACLE_XURL_ALLOW_WRITE=true"}}}else if(o==="auth"){if(String(r[1]||"")!=="status")return{ok:!1,error:"only `auth status` is allowed (no apps add / oauth2 from the agent)"}}else if(!sp.includes(o))if(ip.includes(o)){if(!aa(t))return{ok:!1,error:`write command '${o}' requires ORACLE_XURL_ALLOW_WRITE=true`}}else return o==="media"?{ok:!1,error:"media upload is disabled in the agent tool (run xurl media outside the agent)"}:{ok:!1,error:`command not allowlisted: ${o}`};let s=[...r],i=String(t.ORACLE_XURL_APP||"").trim(),a=String(t.ORACLE_XURL_USER||"").trim();if(i&&!s.includes("--app")&&s.unshift("--app",i),a&&!s.includes("--username")&&!s.includes("-u")){let l=0;s[0]==="--app"&&(l=2),l<s.length&&s.splice(l+1,0,"-u",a)}return{ok:!0,argv:s,command:o}}async function ca(e,t={},r={}){if(e!=="xurl")return{ok:!1,error:`unknown tool: ${e}`};let n=r.env||process.env;if(!ap(n))return{ok:!1,error:"xurl is disabled. Set ORACLE_XURL_ENABLED=true after `xurl auth status` succeeds. Writes stay off until ORACLE_XURL_ALLOW_WRITE=true."};let o=fp(t,n);if(!o.ok)return o;let s=cp(n);if(!s.ok)return s;let a=(r.spawnFn||np)(s.bin,o.argv,{encoding:"utf8",timeout:r.timeoutMs||sa,maxBuffer:1024*1024,env:lp(n)});if(a.error){let d=a.error.code==="ETIMEDOUT"?`xurl timed out after ${r.timeoutMs||sa}ms`:String(a.error.message||a.error);return{ok:!1,error:L(d,{force:!0})}}let l=L(String(a.stdout||"").slice(0,op),{force:!0}),u=L(String(a.stderr||"").slice(0,2e3),{force:!0}),c=typeof a.status=="number"?a.status:1;return{ok:c===0,status:c,command:o.command,argv:o.argv.map(d=>/=/.test(d)&&/token|secret|key|bearer/i.test(d)?"[redacted-arg]":d),stdout:l,stderr:u||void 0}}var la=Object.freeze([{type:"function",function:{name:"xurl",description:"Call the official xurl CLI against the X API with an allowlisted command. Reads (whoami/user/read/search/timeline/mentions/...) work when ORACLE_XURL_ENABLED=true. Writes (post/reply/like/follow/dm/...) also need ORACLE_XURL_ALLOW_WRITE=true. Never pass secrets or --verbose. Auth is whatever the operator configured in ~/.xurl.",parameters:{type:"object",properties:{command:{type:"string",description:"xurl subcommand: whoami, user, read, search, timeline, mentions, post, reply, ..."},args:{type:"array",items:{type:"string"},description:"Positional args after the command (query, id, handle, text)."},query:{type:"string",description:"Convenience for search query."},text:{type:"string",description:"Convenience for post/reply/dm text."},id:{type:"string",description:"Convenience for read/like/reply target id or URL."},handle:{type:"string",description:"Convenience for user/follow/dm handle."},limit:{type:"integer",description:"Result limit for search/timeline/mentions (1-50)."},argv:{type:"array",items:{type:"string"},description:"Raw argv alternative (still allowlisted + flag-filtered)."}},additionalProperties:!1}}}]);import dp from"node:fs";import pp from"node:path";var mp="knowledge",hp="corpus.json",Bn=["canonical","historical","methodology","live-required"],fa=new Set(Bn),Mn=200,jn=1,Un=10,da=5,ua=240,ve={idExact:100,titleExact:60,titleSubstring:30,titleToken:12,taxonomyToken:8,keywordToken:6,summaryToken:2,summarySubstring:3},De=null;function gp(){return pp.join(we(mp,import.meta.url),hp)}function it(e){return typeof e=="string"&&e.trim().length>0}function Pn(e){return Array.isArray(e)&&e.every(t=>typeof t=="string")}function yp(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let{id:t,title:r,kind:n,taxonomyIds:o,keywords:s,summary:i,canonicalUrls:a,sourceTier:l,updateCadence:u,liveDataRequired:c}=e;if(!it(t)||!it(r)||!fa.has(n)||!Pn(o)||!Pn(s)||!it(i)||!Pn(a)||a.length===0||!Number.isInteger(l)||l<0||l>4||!it(u)||typeof c!="boolean"||n==="live-required"!==c)return null;try{if(a.some(d=>new URL(d).protocol!=="https:"))return null}catch{return null}return{id:t.trim(),title:r.trim(),kind:n,taxonomyIds:o.map(d=>d.trim()).filter(Boolean),keywords:s.map(d=>d.trim()).filter(Boolean),summary:i.trim(),canonicalUrls:a.map(d=>d.trim()),sourceTier:l,updateCadence:u.trim(),liveDataRequired:c}}function bp(e){if(Array.isArray(e))return e;if(e&&typeof e=="object"){if(Array.isArray(e.records))return e.records;if(Array.isArray(e.corpus))return e.corpus}return null}function xp(e={}){let t=e&&typeof e=="object"?e:{},r=it(t.corpusPath)?t.corpusPath:gp();if(!t.forceReload&&De&&De.path===r)return De.result;let n;try{n=dp.readFileSync(r,"utf8")}catch(c){let d={ok:!1,error:`could not read knowledge corpus: ${c.code||c.message}`,records:[]};return De={path:r,result:d},d}let o;try{o=JSON.parse(n)}catch(c){let d={ok:!1,error:`knowledge corpus is not valid JSON: ${c.message}`,records:[]};return De={path:r,result:d},d}let s=bp(o);if(!s){let c={ok:!1,error:"knowledge corpus must be an array of records, or an object with a records[] array",records:[]};return De={path:r,result:c},c}let i=[],a=new Set,l=0;for(let c of s){let d=yp(c);if(!d||a.has(d.id)){l+=1;continue}a.add(d.id),i.push(d)}i.sort((c,d)=>c.id<d.id?-1:c.id>d.id?1:0);let u={ok:!0,records:i,skipped:l,path:r};return De={path:r,result:u},u}function Dn(e){return String(e||"").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean)}function Fn(e){return String(e||"").split(".").map(t=>t.trim().toLowerCase()).filter(Boolean)}function _p(e,t){let r=Fn(t);return r.length===0?!0:e.some(n=>{let o=Fn(n);return o.length<r.length?!1:r.every((s,i)=>o[i]===s)})}function wp(e,t,r){let n=0,o=e.id.toLowerCase(),s=e.title.toLowerCase(),i=e.summary.toLowerCase();o===t&&(n+=ve.idExact),s===t?n+=ve.titleExact:t&&s.includes(t)&&(n+=ve.titleSubstring),t&&i.includes(t)&&(n+=ve.summarySubstring);let a=new Set(Dn(e.title)),l=new Set(e.taxonomyIds.flatMap(c=>Fn(c))),u=new Set(e.keywords.flatMap(c=>Dn(c)));for(let c of r)a.has(c)&&(n+=ve.titleToken),l.has(c)&&(n+=ve.taxonomyToken),u.has(c)&&(n+=ve.keywordToken),i.includes(c)&&(n+=ve.summaryToken);return n}function Sp(e){return e.length<=ua?e:`${e.slice(0,ua)}\u2026`}function kp(e={},t={}){let r=e&&typeof e=="object"?e:{},n=new Set(["query","topK","taxonomyPrefix","kinds"]);if(Object.keys(r).some(m=>!n.has(m)))return{ok:!1,error:"unexpected knowledge_search argument"};if(!it(r.query))return{ok:!1,error:"query is required"};let o=r.query.trim().replace(/\s+/g," ");if(!o)return{ok:!1,error:"query is required"};if(o.length>Mn)return{ok:!1,error:`query length must not exceed ${Mn} characters`};let s=da;if(r.topK!==void 0&&r.topK!==null){let m=r.topK;if(typeof m!="number"||!Number.isInteger(m)||m<jn||m>Un)return{ok:!1,error:`topK must be an integer between ${jn} and ${Un}`};s=m}let i=null;if(r.kinds!==void 0&&r.kinds!==null){if(!Array.isArray(r.kinds)||r.kinds.length===0||r.kinds.some(m=>!fa.has(m)))return{ok:!1,error:`kinds must be a non-empty array drawn from ${Bn.join(", ")}`};i=new Set(r.kinds)}let a="";if(r.taxonomyPrefix!==void 0&&r.taxonomyPrefix!==null){if(typeof r.taxonomyPrefix!="string")return{ok:!1,error:"taxonomyPrefix must be a string"};a=r.taxonomyPrefix.trim()}let l=xp(t);if(!l.ok)return{ok:!1,error:l.error};let u=o.toLowerCase(),c=[...new Set(Dn(o))],d=[];for(let m of l.records){if(i&&!i.has(m.kind)||a&&!_p(m.taxonomyIds,a))continue;let h=wp(m,u,c);h<=0||d.push({record:m,score:h})}d.sort((m,h)=>h.score!==m.score?h.score-m.score:m.record.id<h.record.id?-1:m.record.id>h.record.id?1:0);let p=d.slice(0,s).map(({record:m,score:h})=>({id:m.id,title:m.title,kind:m.kind,taxonomyIds:m.taxonomyIds,summary:Sp(m.summary),canonicalUrls:m.canonicalUrls,sourceTier:m.sourceTier,updateCadence:m.updateCadence,liveDataRequired:m.liveDataRequired,score:h})),f={ok:!0,query:o,results:p,count:p.length};return p.some(m=>m.liveDataRequired)&&(f.warning="one or more results require live data; treat their content as potentially stale until confirmed with a live lookup"),f}function pa(e,t={},r={}){return e==="knowledge_search"?kp(t,r):{ok:!1,error:`unknown tool: ${e}`}}var ma=[{type:"function",function:{name:"knowledge_search",description:"Read-only search over the local, offline knowledge corpus by keyword or topic. Deterministic lexical search over canonical, historical, methodology, and live-required records. Results of kind live-required need a live lookup to confirm current state before being relied on.",parameters:{type:"object",properties:{query:{type:"string",description:`Search text (max ${Mn} chars)`},topK:{type:"integer",minimum:jn,maximum:Un,description:`Maximum results to return (default ${da})`},taxonomyPrefix:{type:"string",description:"Restrict results to records whose taxonomy ids fall under this dot-separated prefix"},kinds:{type:"array",items:{type:"string",enum:Bn},description:"Restrict results to these record kinds"}},required:["query"],additionalProperties:!1}}}];import Ep from"node:fs";import ha from"node:path";import{homedir as Ap}from"node:os";var vp=64*1024,Op=64;function Tp(e=process.env.ORACLE_CONFIG_DIR||ha.join(Ap(),".config","oracle")){return ha.join(e,"hooks.json")}function Hn(e={}){let t=e.path||Tp(e.configDir),r;try{r=Ep.readFileSync(t,"utf8")}catch{return{source:"missing",pre_tool:[]}}if(r.length>vp)return{source:"oversized",pre_tool:[],error:"hooks.json too large"};try{let n=JSON.parse(r),o=Array.isArray(n?.pre_tool)?n.pre_tool.slice(0,Op):[],s=[];for(let i of o){if(!i||typeof i!="object")continue;let a=typeof i.match=="string"?i.match.trim():"";!a||a.length>128||i.decision==="deny"&&s.push({match:a,decision:"deny",reason:typeof i.reason=="string"?i.reason.slice(0,200):"denied by operator hook",server:typeof i.server=="string"?i.server.trim().slice(0,128):void 0})}return{source:"file",path:t,pre_tool:s}}catch(n){return{source:"invalid",pre_tool:[],error:n instanceof Error?n.message:String(n)}}}function ga(e={},t=Hn()){try{if(t?.error&&t.source==="invalid")return{allow:!1,reason:`hooks.json invalid: ${t.error}`};if(t?.error&&t.source==="oversized")return{allow:!1,reason:"hooks.json oversized"};let r=typeof e.name=="string"?e.name:"";if(!r)return{allow:!1,reason:"hook check missing tool name"};let n=Array.isArray(t?.pre_tool)?t.pre_tool:[];for(let o of n)if(!(o.match!=="*"&&o.match!==r)&&!(o.server&&e?.args?.server!==o.server))return{allow:!1,reason:o.reason||`denied by hook (${o.match})`};return{allow:!0}}catch(r){return{allow:!1,reason:`hook engine failure: ${r instanceof Error?r.message:String(r)}`.slice(0,200)}}}import{homedir as zn}from"node:os";import{join as qn}from"node:path";var ya=process.env.ORACLE_PUBLIC_DESKTOP==="1",Cp=ya?process.env.ORACLE_CONFIG_DIR||qn(zn(),".config","oracle"):qn(zn(),".config","oracle"),Uy=ya?Cp:qn(zn(),".config","mad-desk");function Rp(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var Lp=["0","false","off","no"];function ba(e,t,r=!0){let n=String(Rp(e,t,"")).trim().toLowerCase();return n===""?r:!Lp.includes(n)}import{mkdir as zp,chmod as ur,readFile as qp,rename as Kp,writeFile as Gp}from"node:fs/promises";import{homedir as Wp}from"node:os";import{dirname as _a,join as Gn}from"node:path";import Vp from"sql.js";import{wordlists as Ip}from"ethers";var Np=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),$p=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],Pp=new Set([12,15,18,21,24]);function Mp(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return Pp.has(t.length)&&t.every(r=>Ip.en.getWordIndex(r)>=0)}var jp=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,Up=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,Dp=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function Fp(e){let t=xa(e);return Dp.has(t)||Up.test(t)}var Ct=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function xa(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function Bp(e){let t=xa(e);return[...Np].some(r=>t.includes(r))}function Hp(e,t,r){if(typeof t=="string"){if($p.some(n=>n.test(t))||Mp(t))throw new Ct(r);if(jp.test(t)&&!Fp(e))throw new Ct(r)}}function Kn(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return Hp(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((o,s)=>Kn(o,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let n={};for(let o of Object.keys(e).sort()){let s=`${t}.${o}`;if(Bp(o))throw new Ct(s);e[o]!==void 0&&(n[o]=Kn(e[o],s,o))}return n}function at(e){return Kn(e)}var Wn=Object.freeze(["project","entity","source","thesis","strategy","simulation","prepared_action","receipt","position"]),Xp=new Set(Wn),Yp=new Set(Wn.slice(0,-1).map((e,t)=>`${e}:${Wn[t+1]}`)),Jp=Gn(process.env.ORACLE_CONFIG_DIR||Gn(Wp(),".config","oracle"),"workspace"),Zp=Gn(Jp,"artifacts.sqlite");function pr(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(pr).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${pr(e[t])}`).join(",")}}`}function wa(e){if(!Xp.has(e))throw new TypeError(`unknown artifact type: ${e}`);return e}function fr(e){let t=[];for(;e.step();)t.push(e.getAsObject());return e.free(),t}function dr(e){return e?{id:e.id,type:e.type,createdAt:e.created_at,data:JSON.parse(e.data_json)}:null}async function Sa(e={}){let t=e.path||Zp;await zp(_a(t),{recursive:!0,mode:448}),await ur(_a(t),448);let r;try{r=await qp(t)}catch(u){if(u.code!=="ENOENT")throw u}let n=await Vp(e.sqlJs||{}),o=r?new n.Database(r):new n.Database;o.run(`
     PRAGMA foreign_keys=ON;
     CREATE TABLE IF NOT EXISTS artifacts (
       id TEXT PRIMARY KEY, type TEXT NOT NULL, created_at TEXT NOT NULL, data_json TEXT NOT NULL

package/dist/cli/commands/doctor.mjs

@@ -1,6 +1,6 @@
-import P from"node:fs";import Oe from"node:path";import z from"node:fs";import S from"node:path";import T from"node:fs";import ee from"node:os";import x from"node:path";import{fileURLToPath as te}from"node:url";var ne=x.dirname(te(import.meta.url)),i=x.resolve(ne,"../..");function D(){return process.env.ORACLE_FAKE_HOME||ee.homedir()}function re(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function j(){return re()?process.env.ORACLE_CONFIG_DIR||x.join(D(),".config","oracle"):x.join(D(),".config","oracle")}function oe(){return x.join(j(),"desk.json")}function se(){return x.join(j(),"env")}function w({force:e=!1}={}){if(w._done&&!e)return w._result||null;w._done=!0;let t={},n=(s,o)=>{if(o==null)return;let d=String(o).trim();d&&(process.env[s]!=null&&String(process.env[s]).trim()!==""||(process.env[s]=d,t[s]=d))};try{let s=se();if(T.existsSync(s))for(let o of T.readFileSync(s,"utf8").split(/\r?\n/)){let d=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!d||d[2].startsWith("#"))continue;let a=d[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),n(d[1],a)}}catch{}try{let s=oe();if(T.existsSync(s)){let o=JSON.parse(T.readFileSync(s,"utf8"));o&&typeof o=="object"&&(n("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),n("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),n("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),n("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),n("ORACLE_EXEC_URL",o.execUrl),n("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(n("ORACLE_DESK_URL",r),n("ORACLE_DATA_URL",r),n("ORACLE_API_URL",r),n("ORACLE_PUBLIC_URL",r),n("MAD_DESK_URL",r)),w._result=Object.keys(t).length?t:null,w._result}try{w()}catch{}var ie="0.19.0",Me=`hermes-agent==${ie}`;var K="0.12.1",He=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${K}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${K}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function ce(){return S.join(j(),"runtime")}function ae(){return S.join(ce(),"venv")}function le(e){let t=process.platform==="win32"?"Scripts":"bin",n=process.platform==="win32"?`${e}.exe`:e;return S.join(ae(),t,n)}function ue(){return le("hermes")}function de(e){let t=process.platform==="win32"&&!S.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let n of(process.env.PATH||"").split(S.delimiter))if(n)for(let r of t){let s=S.join(n,`${e}${r}`);try{if(z.existsSync(s))return s}catch{}}return null}function B(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=de("hermes");if(e)return{ok:!0,bin:e,source:"path"};let t=ue();return z.existsSync(t)?{ok:!0,bin:t,source:"managed"}:{ok:!1,bin:null,source:null}}import A from"node:fs";import c from"node:path";import{existsSync as V,readFileSync as fe}from"node:fs";import{dirname as G,join as N}from"node:path";import{fileURLToPath as pe}from"node:url";function me(e){let t=G(pe(e));for(let n=0;n<8;n+=1){let r=N(t,"package.json");if(V(r))try{let o=JSON.parse(fe(r,"utf8"));if(o&&typeof o.version=="string")return t}catch{}let s=G(t);if(s===t)break;t=s}throw new Error(`oracle: could not resolve package root from ${e}`)}function Y(e,t){let n=me(t),r=N(n,"dist","assets",e);return V(r)?r:N(n,e)}var he=Object.freeze([{id:"oracle",label:"Oracle Native",kind:"oracle",bins:["oracle"],website:!0,detect:!0},{id:"hermes",label:"Hermes Agent",kind:"mcp",bins:["hermes"],mcpTarget:"generic",configKey:"hermes",website:!0,detect:!0},{id:"claude",label:"Claude Code",kind:"mcp",bins:["claude"],mcpTarget:"claude-code",configKey:"claudeCode",website:!0,detect:!0},{id:"claude-desktop",label:"Claude Desktop",kind:"mcp",bins:[],mcpTarget:"claude-desktop",configKey:"claudeDesktop",website:!0,detect:!1},{id:"chatgpt",label:"ChatGPT",kind:"mcp",bins:[],mcpTarget:"chatgpt",configKey:"chatgpt",website:!0,detect:!1},{id:"codex",label:"OpenAI Codex",kind:"mcp",bins:["codex"],mcpTarget:"codex",configKey:"codex",website:!0,detect:!0},{id:"cursor",label:"Cursor",kind:"mcp",bins:["cursor","cursor-agent"],mcpTarget:"cursor",configKey:"cursor",website:!0,detect:!0},{id:"windsurf",label:"Windsurf",kind:"mcp",bins:["windsurf"],mcpTarget:"vscode",configKey:"windsurf",website:!0,detect:!0},{id:"vscode",label:"VS Code / Copilot",kind:"mcp",bins:["code","code-insiders"],mcpTarget:"vscode",configKey:"vscode",website:!0,detect:!0},{id:"openclaw",label:"OpenClaw",kind:"mcp",bins:["openclaw","claw"],mcpTarget:"generic",configKey:"openclaw",website:!0,detect:!0},{id:"perplexity",label:"Perplexity",kind:"mcp",bins:["perplexity","pplx"],mcpTarget:"generic",configKey:"perplexity",website:!0,detect:!0},{id:"manus",label:"Manus",kind:"mcp",bins:["manus"],mcpTarget:"generic",configKey:"manus",website:!0,detect:!0},{id:"prime",label:"Prime Intellect Agent",kind:"mcp",bins:["prime-agent","prime"],mcpTarget:"generic",configKey:"prime",website:!1,detect:!0},{id:"opencode",label:"OpenCode",kind:"mcp",bins:["opencode"],mcpTarget:"generic",configKey:"opencode",website:!1,detect:!0},{id:"aider",label:"Aider",kind:"mcp",bins:["aider"],mcpTarget:"generic",configKey:"aider",website:!1,detect:!0},{id:"continue",label:"Continue",kind:"mcp",bins:["continue"],mcpTarget:"vscode",configKey:"continue",website:!1,detect:!0},{id:"goose",label:"Goose",kind:"mcp",bins:["goose"],mcpTarget:"generic",configKey:"goose",website:!1,detect:!0},{id:"amp",label:"Amp",kind:"mcp",bins:["amp"],mcpTarget:"generic",configKey:"amp",website:!1,detect:!0},{id:"generic",label:"Generic MCP",kind:"mcp",bins:[],mcpTarget:"generic",configKey:"genericMcp",website:!0,detect:!1}]);function W(){return he.filter(e=>e.website)}var I=Object.freeze(["long_horizon","recursive_fanout","continual_learn","evidence_first","prepare_only"]);function $(e=process.env){let t=String(e?.ORACLE_RESEARCH_MODE??e?.ORACLE_RLM_MODE??"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"||t==="research"}var O=Object.freeze(["oracle_cli","memory_add","memory_remove","skill_load","skill_create","skill_list","cron_add","cron_list","cron_remove","meta_analyze","web_fetch","web_search","file_read","file_write","mcp_list","mcp_call","todo_list","todo_set","session_search","research_delegate","clarify","code_eval","learn_skill","workspace_artifact","research_artifact","portfolio_analyze","trade_lifecycle","signal_score","vision_analyze","browser_exec","xurl","knowledge_search"]),_e="deny",We=256*1024;var qe=Object.freeze({version:1,source:"default",defaultDecision:_e,allow:O,deny:Object.freeze([])});var M=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),Je=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),_=(e,t=0,n=1)=>Math.min(n,Math.max(t,e)),m=e=>Number.isFinite(Number(e))?Number(e):null,ge=e=>Math.round(e*1e4)/1e4;function h(e,t,n,r=!0){!r||n===null||!Number.isFinite(n)||e.push({feature:t,value:ge(n)})}function ye(e,t){let n=m(e.repeatBuys??e.repeat_buys??e.buyCount),r=m(e.walletWinRate??e.winRate);h(t,"repeat_buys",n===null?null:_((n-1)/4)*.38),h(t,"wallet_win_rate",r===null?null:(_(r)-.5)*.5)}function be(e,t){let n=m(e.ageHours??e.poolAgeHours),r=m(e.liquidityUsd??e.liquidity),s=e.liquidityLocked??e.locked;h(t,"pool_age",n===null?null:n<24?-.42:_(n/720)*.12),h(t,"liquidity",r===null?null:(_(Math.log10(Math.max(1,r))/7)-.5)*.28),h(t,"liquidity_lock",s==null?null:s?.12:-.28)}function Ee(e,t){let n=m(e.floorChange??e.floorChangePct),r=m(e.sales??e.saleCount);h(t,"floor_change",n===null?null:_(n,-1,1)*.35),h(t,"sales_depth",r===null?null:_(r/50)*.18)}function ke(e,t){let n=m(e.flowImbalance??e.imbalance),r=m(e.fundingRate??e.funding);h(t,"flow_imbalance",n===null?null:_(n,-1,1)*.42),h(t,"funding",r===null?null:-_(r*100,-1,1)*.12)}function Ae(e,t){let n=m(e.marketProbability??e.marketPrice??e.probability),r=m(e.fairProbability??e.referenceProbability??e.fairValue);h(t,"probability_mispricing",n===null||r===null?null:_(r-n,-1,1)*.65);let s=m(e.liquidityUsd??e.liquidity);h(t,"market_liquidity",s===null?null:_(Math.log10(Math.max(1,s))/6)*.12)}var Ze=Object.freeze({wallet:ye,pool:be,nft_floor:Ee,hl_flow:ke,prediction_market:Ae});function H(e){try{return A.existsSync(e)}catch{return!1}}function L(e){for(let t of e)if(t&&H(t))return t;return null}function F(e){try{return Y(e,import.meta.url)}catch{return null}}function ve(){let e=[c.join(i,"dist/data/desk-data.mjs"),c.join(i,"data/desk-data.mjs"),c.join(i,"src/data/desk-data.mjs")];for(let r of e)if(H(r))try{let o=A.readFileSync(r,"utf8").match(/\bid\s*:\s*["'][a-z0-9-]+["']/gi)||[],d=new Set(o.map(a=>a.toLowerCase()));if(d.size>=20)return{count:d.size,detail:`${d.size} provider ids (bundled desk-data)`}}catch{}let t=[c.join(i,"src/data/providers"),c.join(i,"dist/data/providers"),c.join(i,"data/providers")],n=L(t);if(!n)return{count:0,detail:"providers dir missing"};try{let r=A.readdirSync(n).filter(s=>s.endsWith(".mjs"));return{count:r.length,detail:`${r.length} provider modules`}}catch(r){return{count:0,detail:r instanceof Error?r.message:String(r)}}}function q(){let e=L([F("skills"),c.join(i,"skills"),c.join(i,"dist/assets/skills"),c.join(i,"assets/skills")]);if(!e)return{count:0,trading:[],building:[]};let t=A.readdirSync(e),n=t.filter(s=>/trade|swap|snipe|farm|hyperliquid|poly|best-exec|circuit|meme|token-research|rfq/i.test(s)),r=t.filter(s=>/launch|builder|protocol|nft|dex-launch|token-launch|security|contract/i.test(s));return{count:t.length,trading:n,building:r}}function we(){let e=L([F("protocols/templates"),c.join(i,"protocols/templates"),c.join(i,"dist/assets/protocols/templates"),c.join(i,"assets/protocols/templates")]);return e?A.readdirSync(e).filter(n=>!n.startsWith(".")):q().building.some(n=>/protocol-builder|dex-launch|token-launch/i.test(n))?["(via skills: protocol-builder / launch packs)"]:[]}function xe(){let e=L([F("profiles"),c.join(i,"profiles"),c.join(i,"dist/assets/profiles"),c.join(i,"assets/profiles")]);return e?A.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()&&!t.name.startsWith("_")).map(t=>t.name):[]}function Se(){try{if(O.includes("trade_lifecycle")&&!O.some(t=>/broadcast|wallet_sign/.test(t)))return!0}catch{}let e=[c.join(i,"src/capability-posture.mjs"),c.join(i,"dist/capability-posture.mjs"),c.join(i,"capability-posture.mjs"),c.join(i,"dist/public-control/policy-schema.mjs"),c.join(i,"README.md"),c.join(i,"package.json")];for(let t of e)if(H(t))try{let n=A.readFileSync(t,"utf8");if(/prepare-only|never takes your key|never.*broadcast/i.test(n))return!0}catch{}return!1}function X(e=process.env){let t=[],n=(f,U,Z,Q=1)=>{t.push({id:f,status:U,detail:Z,weight:Q})},[r,s]=process.versions.node.split(".").map(Number),o=r>20||r===20&&s>=19;n("node",o?"ok":"fail",`node ${process.versions.node}`,2);let a=["oracle_cli","research_delegate","trade_lifecycle","signal_score","skill_load","learn_skill","code_eval","cron_add","web_fetch"].filter(f=>!O.includes(f));n("agent_tools",a.length===0?"ok":"warn",a.length===0?`safe tools ${O.length}; signal_score present`:`missing tools: ${a.join(",")}`,3),n("research_attributes","ok",`attrs [${I.join(", ")}]; mode=${$(e)?"ON":"off"}`,2);let y=ve();n("providers",y.count>=40?"ok":y.count>=10?"warn":"fail",y.detail,3);let p=q();n("skills_trading_build",p.trading.length>=5&&p.building.length>=4?"ok":p.count>=10?"warn":"fail",`${p.count} skills; trading=${p.trading.length} building=${p.building.length}`,3);let b=we();n("protocol_templates",b.length>=2?"ok":"warn",b.length?b.join(", "):"none",2);let E=xe();n("profiles",E.includes("protocol-builder")&&E.includes("oracle")?"ok":E.length>=1?"warn":"fail",E.join(", ")||"none",2),n("signals_engine",M.length>=4?"ok":"fail",`types: ${M.join(", ")} (cold / no hot exec)`,2);let v=W();n("harness_roster",v.length>=8?"ok":"warn",`${v.length} website harnesses; native default; MCP inbound only`,2),n("custody_prepare_only",Se()?"ok":"fail","public plane prepare-only",4);let R=e.ORACLE_DATA_URL||"http://127.0.0.1:8787";n("data_url","ok",R,1);let g=0,l=0;for(let f of t)l+=f.weight,f.status==="ok"?g+=f.weight:f.status==="warn"&&(g+=f.weight*.5);let k=l?Math.round(g/l*100):0,u=!t.some(f=>f.status==="fail")&&k>=70,C=u?`AGENTIC READY ${k}% \u2014 Oracle is the crypto control plane (prepare-only); pair coding harnesses via MCP for build.`:`AGENTIC GAPS ${k}% \u2014 fix fail/warn checks before calling Oracle the default crypto harness.`;return{ok:u,score:g,max:l,pct:k,summary:C,researchMode:$(e),attributes:[...I],packageRoot:i,checks:t}}function J(){let[e,t]=process.versions.node.split(".").map(Number);return e>20||e===20&&t>=19}function Re(e){if(!P.existsSync(e))return{};let t={};for(let n of P.readFileSync(e,"utf8").split(/\r?\n/)){let r=n.match(/^([A-Z0-9_]+)=(.*)$/);r&&(t[r[1]]=r[2])}return t}async function Ce(e){let t=e.replace(/\/$/,"");for(let n of["/health","/public/health"])try{if((await fetch(t+n)).ok)return!0}catch{}return!1}var pt={name:"doctor",summary:"check the read plane (+ optional --agentic crypto harness score)",group:"read",usage:"oracle doctor [--json] [--agentic]",async run(e){let t=e.argv.includes("--json"),n=e.argv.includes("--agentic"),r=[],s=!1,o=(u,C,f,U=null)=>{r.push({id:u,status:C,detail:f,fix:U}),C==="fail"&&(s=!0)};o("node",J()?"ok":"fail",`node ${process.versions.node}`,J()?null:"install node >= 20.19");let d=e.paths.oracleExecEnvPath(),a=Re(d),y=process.env.ORACLE_ROUTE_ATTESTATION_SECRET||process.env.MAD_ROUTE_ATTESTATION_SECRET||process.env.ORACLE_ATTESTATION_SECRET||process.env.ORACLE_STAMP_HMAC_SECRET||a.ORACLE_ROUTE_ATTESTATION_SECRET||a.MAD_ROUTE_ATTESTATION_SECRET||a.ORACLE_ATTESTATION_SECRET||a.ORACLE_STAMP_HMAC_SECRET;o("attestation_secret",y?"ok":"warn",y?"present":"missing",y?null:"run oracle init --apply (writes ~/.config/oracle/exec.env)");let p=process.env.ORACLE_DATA_URL||"http://127.0.0.1:8787",b=await Ce(p),E=e.paths.loadDeskRouting&&(process.env.ORACLE_DESK_URL||process.env.ORACLE_PUBLIC_URL)?`desk ${process.env.ORACLE_DESK_URL||process.env.ORACLE_PUBLIC_URL}`:null;o("data_server",b?"ok":"warn",b?`reachable ${p}${E?` (${E})`:""}`:`down ${p}`,b?null:p.includes("127.0.0.1")||p.includes("localhost")?"oracle data serve  OR  set ~/.config/oracle/desk.json \u2192 Arch :8799":"check Arch desk is up (curl $ORACLE_DESK_URL/public/health)");let v=B();o("harness_model","ok","Oracle native is default; external clients are inbound MCP only (oracle harness detect)",null),o("hermes_opt_in","ok",v.ok?`detected ${v.bin} (${v.source}) \u2014 unused unless explicitly opted in`:"not detected \u2014 native-only OK",null);let R=Oe.join(e.paths.hermesRoot(),"profiles"),g=0;P.existsSync(R)&&(g=P.readdirSync(R,{withFileTypes:!0}).filter(u=>u.isDirectory()).length),o("hermes_lanes","ok",g>0?`${g} profile dir(s) (optional surface)`:"no Hermes lane profiles (native-only OK)",null);let l=null;if(n){l=X(process.env);for(let u of l.checks)o(`agentic_${u.id}`,u.status,u.detail,null)}let k={ok:!s&&(l?l.ok:!0),checks:r,...l?{agentic:{pct:l.pct,summary:l.summary,attributes:l.attributes,researchMode:l.researchMode}}:{}};if(t)process.stdout.write(JSON.stringify(k,null,2)+`
-`);else{for(let u of r)process.stdout.write(`${u.status.toUpperCase().padEnd(4)} ${u.id}: ${u.detail}
-`),u.fix&&process.stdout.write(`     fix: ${u.fix}
-`);l&&process.stdout.write(`
-${l.summary}
-`)}return k.ok?0:1}};export{pt as default};
+var d=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var x=d(()=>{});var q=d(()=>{});var C=d(()=>{});var A=d(()=>{q();C()});var be=d(()=>{});var cn,un,v=d(()=>{cn=300*1e3,un=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})()});import{Contract as pn,JsonRpcProvider as fn}from"ethers";var Be=d(()=>{});var bn,z=d(()=>{Be();bn=Object.freeze({swap:5,bridge:5,perps:0,nft:0})});var Pe=d(()=>{x();A();be();v();z()});var Ue=d(()=>{x();A();v();z()});var ge=d(()=>{});var $e=d(()=>{x();A();ge();v()});var Hn,Fe=d(()=>{Hn=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"})});import{TypedDataEncoder as Xn,getAddress as Yn,isAddress as Jn}from"ethers";var oo,ao,io,so,qe=d(()=>{x();A();Fe();be();v();oo=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),ao=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"}),io=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),so=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]})});var Y,uo,J=d(()=>{Y={robinhood:{chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC"],evm:!0},ethereum:{chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],evm:!0},polygon:{chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],evm:!0},arbitrum:{chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],evm:!0},base:{chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],evm:!0},hyperevm:{chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],evm:!0},bsc:{chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],evm:!0},avalanche:{chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],evm:!0},optimism:{chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],evm:!0},abstract:{chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],evm:!0},stable:{chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],evm:!0}},uo=new Map(Object.values(Y).map(e=>[e.chainId,e]))});import{Interface as Pt,getAddress as ho}from"ethers";var wo,$=d(()=>{x();J();wo=new Pt(["function allowance(address owner,address spender) view returns (uint256)","function balanceOf(address account) view returns (uint256)"])});var Eo,Q=d(()=>{x();Eo=Object.freeze({1:"ethereum",10:"optimism",56:"bsc",137:"polygon",8453:"base",42161:"arbitrum",43114:"avalanche",999:"hyperevm",4663:"robinhood"})});import{Interface as He,getAddress as xo,isAddress as vo}from"ethers";var Co,No,Ee=d(()=>{$();Q();A();v();Co=new He(["function quoteExactInputSingle((address tokenIn, address tokenOut, uint256 amountIn, uint24 fee, uint160 sqrtPriceLimitX96) params) returns (uint256 amountOut, uint160 sqrtPriceX96After, uint32 initializedTicksCrossed, uint256 gasEstimate)","function quoteExactInput(bytes path, uint256 amountIn) returns (uint256 amountOut, uint160[] sqrtPriceX96AfterList, uint32[] initializedTicksCrossedList, uint256 gasEstimate)"]),No=new He(["function exactInputSingle((address tokenIn,address tokenOut,uint24 fee,address recipient,uint256 amountIn,uint256 amountOutMinimum,uint160 sqrtPriceLimitX96) params) payable returns (uint256 amountOut)","function multicall(uint256 deadline,bytes[] data) payable returns (bytes[] results)"])});import{AbiCoder as $t,Interface as Ge,getAddress as Ro,isAddress as Lo,keccak256 as Bo}from"ethers";var Fo,qo,Mo,Ke=d(()=>{$();Q();A();v();Fo=$t.defaultAbiCoder(),qo=new Ge(["function quoteExactInputSingle(((address currency0,address currency1,uint24 fee,int24 tickSpacing,address hooks) poolKey,bool zeroForOne,uint128 exactAmount,bytes hookData) params) returns (uint256 amountOut, uint256 gasEstimate)"]),Mo=new Ge(["function execute(bytes commands,bytes[] inputs,uint256 deadline) payable"])});import ee from"node:fs";import Zt from"node:path";import ve from"node:fs";import B from"node:path";import G from"node:fs";import Qe from"node:os";import L from"node:path";import{fileURLToPath as Ze}from"node:url";var et=L.dirname(Ze(import.meta.url)),s=L.resolve(et,"../..");function ne(){return process.env.ORACLE_FAKE_HOME||Qe.homedir()}function tt(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function K(){return tt()?process.env.ORACLE_CONFIG_DIR||L.join(ne(),".config","oracle"):L.join(ne(),".config","oracle")}function rt(){return L.join(K(),"desk.json")}function nt(){return L.join(K(),"env")}function R({force:e=!1}={}){if(R._done&&!e)return R._result||null;R._done=!0;let t={},r=(a,o)=>{if(o==null)return;let l=String(o).trim();l&&(process.env[a]!=null&&String(process.env[a]).trim()!==""||(process.env[a]=l,t[a]=l))};try{let a=nt();if(G.existsSync(a))for(let o of G.readFileSync(a,"utf8").split(/\r?\n/)){let l=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!l||l[2].startsWith("#"))continue;let c=l[2];(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),r(l[1],c)}}catch{}try{let a=rt();if(G.existsSync(a)){let o=JSON.parse(G.readFileSync(a,"utf8"));o&&typeof o=="object"&&(r("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),r("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),r("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),r("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),r("ORACLE_EXEC_URL",o.execUrl),r("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),R._result=Object.keys(t).length?t:null,R._result}try{R()}catch{}var ot="0.19.0",pr=`hermes-agent==${ot}`;var xe="0.12.1",fr=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${xe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${xe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function at(){return B.join(K(),"runtime")}function it(){return B.join(at(),"venv")}function st(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return B.join(it(),t,r)}function ct(){return st("hermes")}function ut(e){let t=process.platform==="win32"&&!B.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(B.delimiter))if(r)for(let n of t){let a=B.join(r,`${e}${n}`);try{if(ve.existsSync(a))return a}catch{}}return null}function Se(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=ut("hermes");if(e)return{ok:!0,bin:e,source:"path"};let t=ct();return ve.existsSync(t)?{ok:!0,bin:t,source:"managed"}:{ok:!1,bin:null,source:null}}import I from"node:fs";import u from"node:path";import{existsSync as Ie,readFileSync as lt}from"node:fs";import{dirname as ke,join as oe}from"node:path";import{fileURLToPath as dt}from"node:url";function pt(e){let t=ke(dt(e));for(let r=0;r<8;r+=1){let n=oe(t,"package.json");if(Ie(n))try{let o=JSON.parse(lt(n,"utf8"));if(o&&typeof o.version=="string")return t}catch{}let a=ke(t);if(a===t)break;t=a}throw new Error(`oracle: could not resolve package root from ${e}`)}function _e(e,t){let r=pt(t),n=oe(r,"dist","assets",e);return Ie(n)?n:oe(r,e)}var ft=Object.freeze([{id:"oracle",label:"Oracle Native",kind:"oracle",bins:["oracle"],website:!0,detect:!0},{id:"hermes",label:"Hermes Agent",kind:"mcp",bins:["hermes"],mcpTarget:"generic",configKey:"hermes",website:!0,detect:!0},{id:"claude",label:"Claude Code",kind:"mcp",bins:["claude"],mcpTarget:"claude-code",configKey:"claudeCode",website:!0,detect:!0},{id:"claude-desktop",label:"Claude Desktop",kind:"mcp",bins:[],mcpTarget:"claude-desktop",configKey:"claudeDesktop",website:!0,detect:!1},{id:"chatgpt",label:"ChatGPT",kind:"mcp",bins:[],mcpTarget:"chatgpt",configKey:"chatgpt",website:!0,detect:!1},{id:"codex",label:"OpenAI Codex",kind:"mcp",bins:["codex"],mcpTarget:"codex",configKey:"codex",website:!0,detect:!0},{id:"cursor",label:"Cursor",kind:"mcp",bins:["cursor","cursor-agent"],mcpTarget:"cursor",configKey:"cursor",website:!0,detect:!0},{id:"windsurf",label:"Windsurf",kind:"mcp",bins:["windsurf"],mcpTarget:"vscode",configKey:"windsurf",website:!0,detect:!0},{id:"vscode",label:"VS Code / Copilot",kind:"mcp",bins:["code","code-insiders"],mcpTarget:"vscode",configKey:"vscode",website:!0,detect:!0},{id:"openclaw",label:"OpenClaw",kind:"mcp",bins:["openclaw","claw"],mcpTarget:"generic",configKey:"openclaw",website:!0,detect:!0},{id:"perplexity",label:"Perplexity",kind:"mcp",bins:["perplexity","pplx"],mcpTarget:"generic",configKey:"perplexity",website:!0,detect:!0},{id:"manus",label:"Manus",kind:"mcp",bins:["manus"],mcpTarget:"generic",configKey:"manus",website:!0,detect:!0},{id:"prime",label:"Prime Intellect Agent",kind:"mcp",bins:["prime-agent","prime"],mcpTarget:"generic",configKey:"prime",website:!1,detect:!0},{id:"opencode",label:"OpenCode",kind:"mcp",bins:["opencode"],mcpTarget:"generic",configKey:"opencode",website:!1,detect:!0},{id:"aider",label:"Aider",kind:"mcp",bins:["aider"],mcpTarget:"generic",configKey:"aider",website:!1,detect:!0},{id:"continue",label:"Continue",kind:"mcp",bins:["continue"],mcpTarget:"vscode",configKey:"continue",website:!1,detect:!0},{id:"goose",label:"Goose",kind:"mcp",bins:["goose"],mcpTarget:"generic",configKey:"goose",website:!1,detect:!0},{id:"amp",label:"Amp",kind:"mcp",bins:["amp"],mcpTarget:"generic",configKey:"amp",website:!1,detect:!0},{id:"generic",label:"Generic MCP",kind:"mcp",bins:[],mcpTarget:"generic",configKey:"genericMcp",website:!0,detect:!1}]);function Ce(){return ft.filter(e=>e.website)}var ae=Object.freeze(["long_horizon","recursive_fanout","continual_learn","evidence_first","prepare_only"]);function ie(e=process.env){let t=String(e?.ORACLE_RESEARCH_MODE??e?.ORACLE_RLM_MODE??"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"||t==="research"}var D=Object.freeze(["oracle_cli","memory_add","memory_remove","skill_load","skill_create","skill_list","cron_add","cron_list","cron_remove","meta_analyze","web_fetch","web_search","file_read","file_write","mcp_list","mcp_call","todo_list","todo_set","session_search","research_delegate","clarify","code_eval","learn_skill","workspace_artifact","research_artifact","portfolio_analyze","trade_lifecycle","signal_score","vision_analyze","browser_exec","xurl","knowledge_search"]),mt="deny",Ar=256*1024;var xr=Object.freeze({version:1,source:"default",defaultDecision:mt,allow:D,deny:Object.freeze([])});var se=Object.freeze(["wallet","pool","nft_floor","hl_flow","prediction_market"]),Sr=Object.freeze({wallets:"wallet",smart_wallet:"wallet",pools:"pool",new_pool:"pool",nft:"nft_floor",nft_floors:"nft_floor",hyperliquid:"hl_flow",prediction:"prediction_market",prediction_markets:"prediction_market"}),y=(e,t=0,r=1)=>Math.min(r,Math.max(t,e)),b=e=>Number.isFinite(Number(e))?Number(e):null,ht=e=>Math.round(e*1e4)/1e4;function g(e,t,r,n=!0){!n||r===null||!Number.isFinite(r)||e.push({feature:t,value:ht(r)})}function wt(e,t){let r=b(e.repeatBuys??e.repeat_buys??e.buyCount),n=b(e.walletWinRate??e.winRate);g(t,"repeat_buys",r===null?null:y((r-1)/4)*.38),g(t,"wallet_win_rate",n===null?null:(y(n)-.5)*.5)}function bt(e,t){let r=b(e.ageHours??e.poolAgeHours),n=b(e.liquidityUsd??e.liquidity),a=e.liquidityLocked??e.locked;g(t,"pool_age",r===null?null:r<24?-.42:y(r/720)*.12),g(t,"liquidity",n===null?null:(y(Math.log10(Math.max(1,n))/7)-.5)*.28),g(t,"liquidity_lock",a==null?null:a?.12:-.28)}function gt(e,t){let r=b(e.floorChange??e.floorChangePct),n=b(e.sales??e.saleCount);g(t,"floor_change",r===null?null:y(r,-1,1)*.35),g(t,"sales_depth",n===null?null:y(n/50)*.18)}function Et(e,t){let r=b(e.flowImbalance??e.imbalance),n=b(e.fundingRate??e.funding);g(t,"flow_imbalance",r===null?null:y(r,-1,1)*.42),g(t,"funding",n===null?null:-y(n*100,-1,1)*.12)}function yt(e,t){let r=b(e.marketProbability??e.marketPrice??e.probability),n=b(e.fairProbability??e.referenceProbability??e.fairValue);g(t,"probability_mispricing",r===null||n===null?null:y(n-r,-1,1)*.65);let a=b(e.liquidityUsd??e.liquidity);g(t,"market_liquidity",a===null?null:y(Math.log10(Math.max(1,a))/6)*.12)}var kr=Object.freeze({wallet:wt,pool:bt,nft_floor:gt,hl_flow:Et,prediction_market:yt});function ce(e){try{return I.existsSync(e)}catch{return!1}}function W(e){for(let t of e)if(t&&ce(t))return t;return null}function ue(e){try{return _e(e,import.meta.url)}catch{return null}}function At(){let e=[u.join(s,"dist/data/desk-data.mjs"),u.join(s,"data/desk-data.mjs"),u.join(s,"src/data/desk-data.mjs")];for(let n of e)if(ce(n))try{let o=I.readFileSync(n,"utf8").match(/\bid\s*:\s*["'][a-z0-9-]+["']/gi)||[],l=new Set(o.map(c=>c.toLowerCase()));if(l.size>=20)return{count:l.size,detail:`${l.size} provider ids (bundled desk-data)`}}catch{}let t=[u.join(s,"src/data/providers"),u.join(s,"dist/data/providers"),u.join(s,"data/providers")],r=W(t);if(!r)return{count:0,detail:"providers dir missing"};try{let n=I.readdirSync(r).filter(a=>a.endsWith(".mjs"));return{count:n.length,detail:`${n.length} provider modules`}}catch(n){return{count:0,detail:n instanceof Error?n.message:String(n)}}}function Ne(){let e=W([ue("skills"),u.join(s,"skills"),u.join(s,"dist/assets/skills"),u.join(s,"assets/skills")]);if(!e)return{count:0,trading:[],building:[]};let t=I.readdirSync(e),r=t.filter(a=>/trade|swap|snipe|farm|hyperliquid|poly|best-exec|circuit|meme|token-research|rfq/i.test(a)),n=t.filter(a=>/launch|builder|protocol|nft|dex-launch|token-launch|security|contract/i.test(a));return{count:t.length,trading:r,building:n}}function xt(){let e=W([ue("protocols/templates"),u.join(s,"protocols/templates"),u.join(s,"dist/assets/protocols/templates"),u.join(s,"assets/protocols/templates")]);return e?I.readdirSync(e).filter(r=>!r.startsWith(".")):Ne().building.some(r=>/protocol-builder|dex-launch|token-launch/i.test(r))?["(via skills: protocol-builder / launch packs)"]:[]}function vt(){let e=W([ue("profiles"),u.join(s,"profiles"),u.join(s,"dist/assets/profiles"),u.join(s,"assets/profiles")]);return e?I.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()&&!t.name.startsWith("_")).map(t=>t.name):[]}function St(){try{if(D.includes("trade_lifecycle")&&!D.some(t=>/broadcast|wallet_sign/.test(t)))return!0}catch{}let e=[u.join(s,"src/capability-posture.mjs"),u.join(s,"dist/capability-posture.mjs"),u.join(s,"capability-posture.mjs"),u.join(s,"dist/public-control/policy-schema.mjs"),u.join(s,"README.md"),u.join(s,"package.json")];for(let t of e)if(ce(t))try{let r=I.readFileSync(t,"utf8");if(/prepare-only|never takes your key|never.*broadcast/i.test(r))return!0}catch{}return!1}function Oe(e=process.env){let t=[],r=(i,H,te,re=1)=>{t.push({id:i,status:H,detail:te,weight:re})},[n,a]=process.versions.node.split(".").map(Number),o=n>20||n===20&&a>=19;r("node",o?"ok":"fail",`node ${process.versions.node}`,2);let c=["oracle_cli","research_delegate","trade_lifecycle","signal_score","skill_load","learn_skill","code_eval","cron_add","web_fetch"].filter(i=>!D.includes(i));r("agent_tools",c.length===0?"ok":"warn",c.length===0?`safe tools ${D.length}; signal_score present`:`missing tools: ${c.join(",")}`,3),r("research_attributes","ok",`attrs [${ae.join(", ")}]; mode=${ie(e)?"ON":"off"}`,2);let E=At();r("providers",E.count>=40?"ok":E.count>=10?"warn":"fail",E.detail,3);let p=Ne();r("skills_trading_build",p.trading.length>=5&&p.building.length>=4?"ok":p.count>=10?"warn":"fail",`${p.count} skills; trading=${p.trading.length} building=${p.building.length}`,3);let h=xt();r("protocol_templates",h.length>=2?"ok":"warn",h.length?h.join(", "):"none",2);let f=vt();r("profiles",f.includes("protocol-builder")&&f.includes("oracle")?"ok":f.length>=1?"warn":"fail",f.join(", ")||"none",2),r("signals_engine",se.length>=4?"ok":"fail",`types: ${se.join(", ")} (cold / no hot exec)`,2);let T=Ce();r("harness_roster",T.length>=8?"ok":"warn",`${T.length} website harnesses; native default; MCP inbound only`,2),r("custody_prepare_only",St()?"ok":"fail","public plane prepare-only",4);let V=e.ORACLE_DATA_URL||"http://127.0.0.1:8787";r("data_url","ok",V,1);let S=0,w=0;for(let i of t)w+=i.weight,i.status==="ok"?S+=i.weight:i.status==="warn"&&(S+=i.weight*.5);let k=w?Math.round(S/w*100):0,m=!t.some(i=>i.status==="fail")&&k>=70,j=m?`AGENTIC READY ${k}% \u2014 Oracle is the crypto control plane (prepare-only); pair coding harnesses via MCP for build.`:`AGENTIC GAPS ${k}% \u2014 fix fail/warn checks before calling Oracle the default crypto harness.`;return{ok:m,score:S,max:w,pct:k,summary:j,researchMode:ie(e),attributes:[...ae],packageRoot:s,checks:t}}var Pr=1<<17;var Ur=256*1024*1024;import P from"node:fs";import Te from"node:fs";import kt from"node:os";import _ from"node:path";function Re(e=process.env){return e.ORACLE_CONFIG_DIR?_.resolve(e.ORACLE_CONFIG_DIR):e.ORACLE_FAKE_HOME?_.join(_.resolve(e.ORACLE_FAKE_HOME),".config","oracle"):_.join(kt.homedir(),".config","oracle")}function le(e=process.env){let t=Re(e);Te.mkdirSync(t,{recursive:!0,mode:448});try{Te.chmodSync(t,448)}catch{}return t}function de(e=process.env){return _.join(le(e),"keys","default.vault")}function pe(e=process.env){return _.join(le(e),"local-session.json")}function fe(e=process.env){return _.join(le(e),"local-arm.json")}var Wr=1800*1e3;function Le(e){return JSON.parse(P.readFileSync(e,"utf8"))}function F(e=process.env){let t=e.ORACLE_VAULT_PATH||de(e),r=pe(e),n=fe(e),a=!1,o=null;try{P.existsSync(t)&&(a=!0,o=JSON.parse(P.readFileSync(t,"utf8"))?.meta||null)}catch{a=P.existsSync(t)}let l=!1,c=null,E=null;try{if(P.existsSync(r)){let f=Le(r);f?.expiresAt&&Date.parse(f.expiresAt)>Date.now()&&f?.vaultPath&&(l=!0,c=f.expiresAt,E=f.address||null)}}catch{l=!1}let p=!1,h=null;try{P.existsSync(n)&&(h=Le(n),p=h?.armed===!0,p&&h.expiresAt&&Date.parse(h.expiresAt)<=Date.now()&&(p=!1))}catch{p=!1}return{vaultPath:t,vaultExists:a,vaultMeta:o,unlocked:l,sessionExpiresAt:c,address:E,armed:p,arm:h,plane:"local-self-custody",note:"Keys never leave this machine. Public HTTP plane stays prepare-only."}}import{Wallet as Ms,JsonRpcProvider as Vs,getAddress as js,isAddress as Hs,parseUnits as Gs}from"ethers";var Xr=Object.freeze(["blockNumber","nativeBalance","tokenBalance","resolveToken","resolvePools","scanBlocks","scoreRisk","quote","sellSimulation","prepareUnsignedTx"]),me=Object.freeze({LIVE:"LIVE",CACHED:"CACHED",STALE:"STALE",UNKNOWN:"UNKNOWN",UNAVAILABLE:"UNAVAILABLE"}),he=Object.freeze({PASS:"PASS",CAUTION:"CAUTION",FAIL:"FAIL",UNKNOWN:"UNKNOWN"});var Tt=Object.freeze({FULL:"FULL",NO_GAS:"NO_GAS",FAILED:"FAILED"});Pe();Ue();$e();x();A();ge();v();qe();Ee();Ke();x();var la=Object.freeze({across:["across"],relay:["relaychain","relay"],lifi:["jumper-(li.fi-powered)","lifi"],stargate:["stargate-v2","stargate-v1","stargate"],hop:["hop-protocol","hop"],debridge:["debridge"],synapse:["synapse"],connext:["connext"],cbridge:["celer-bridge","celer-cbridge","cbridge"],celer:["celer-bridge","celer-cbridge","cbridge"],squid:["squid"],symbiosis:["symbiosis"],wormhole:["wormhole"],mayan:["mayan"],allbridge:["allbridge"],thorchain:["thorchain"]});z();v();var Ca=Object.freeze({TRANSACTION:"unsigned-transaction",TYPED_DATA_ORDER:"typed-data-order"});var Na=new Set(["0x0000000000000000000000000000000000000000","0x000000000000000000000000000000000000dead","0x0000000000000000000000000000000000000001","0x00000000000000000000000000000000000a1ce5"].map(e=>e.toLowerCase()));$();Q();$();$();var Za=Object.freeze([{key:"ethereum",chainId:1,name:"Ethereum",rpcEnv:["ETH_RPC_URL","ETHEREUM_RPC_URL","MAINNET_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://etherscan.io",dexscreenerSlug:"ethereum",venueKind:"uniswap-v3",wrappedNative:"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.71 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:1}}]},{key:"optimism",chainId:10,name:"OP Mainnet",rpcEnv:["OPTIMISM_RPC_URL","OP_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://optimistic.etherscan.io",dexscreenerSlug:"optimism",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1905.23 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:10}}]},{key:"bsc",chainId:56,name:"BNB Smart Chain",rpcEnv:["BSC_RPC_URL","BNB_RPC_URL"],nativeCurrency:{symbol:"BNB",decimals:18},explorer:"https://bscscan.com",dexscreenerSlug:"bsc",venueKind:"uniswap-v3",wrappedNative:"0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",venues:[{kind:"quoter",address:"0x78D78E420Da98ad378D7799bE8f4AF69033EB077",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WBNB->USDC fee 500 quoted 413.86 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}},{kind:"router",address:"0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:56}}]},{key:"polygon",chainId:137,name:"Polygon",rpcEnv:["POLYGON_RPC_URL","POLYGON_RPC"],nativeCurrency:{symbol:"POL",decimals:18},explorer:"https://polygonscan.com",dexscreenerSlug:"polygon",venueKind:"uniswap-v3",wrappedNative:"0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WMATIC->USDC fee 500 quoted 0.0720 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:137}}]},{key:"stable",chainId:988,name:"Stable Mainnet",rpcEnv:["STABLE_RPC_URL","STABLE_RPC"],nativeCurrency:{symbol:"USDT0",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x5d442b349590a6048Eb2dC0eC346cAA5F47A9ab5",venues:[{kind:"quoter",address:"0xb070179E7032CdA868b53e6C1742F80c9e940d1A",label:"Uniswap V3 QuoterV2 (canonical)",verified:{method:"Stable is on the OFFICIAL Uniswap v3 Deployments List (governance-recognised 2026-05-12, UAC process completed 2026-04, deployed by Protofire), so this is a canonical deployment rather than a fork. eth_getCode returned 8273 bytes, the same size as the canonical quoter on the seven already-verified chains. Functional probe on a live pool (TOAST -> USDT0, fee 10000): 100 in -> 0.000003, 1000 -> 0.000031, 10000 -> 0.000319 USDT0. Output scales monotonically with input, which is a working quoter answering, not a revert. Two of three sampled pools carry non-zero liquidity. NOTE: the pools discovered so far are thin, so real routing size is limited -- the venue is proved, deep liquidity is not.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:988}},{kind:"router",address:"0x32eaf9B5d5F2CD7361c5012890C943D7de84C22a",label:"Uniswap SwapRouter02 (canonical)",verified:{method:"eth_getCode returned 24497 bytes. Cross-checked on-chain rather than trusted from docs: router.factory() returns 0x88f0a512ef09175d456bc9547f914f48c013e4aa, the same v3 core factory that created the pools quoted above, and router.WETH9() returns the wrappedNative recorded on this chain entry. Address published in the Stable docs DEX reference and the Uniswap deployments list.",source:"docs.stable.xyz/en/reference/dexes + on-chain factory()/WETH9() round-trip",date:"2026-08-05",chainId:988}}]},{key:"hyperevm",chainId:999,name:"HyperEVM",rpcEnv:["HYPEREVM_RPC_URL","HYPER_EVM_RPC"],nativeCurrency:{symbol:"HYPE",decimals:18},dexscreenerSlug:"hyperevm",venueKind:"uniswap-v3",wrappedNative:"0x5555555555555555555555555555555555555555",venues:[{kind:"quoter",address:"0x03A918028f22D9E1473B7959C927AD7425A45C7C",label:"HyperSwap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle(1 WHYPE -> USDT0) returned live output on all four fee tiers (100: 57.3385, 500: 57.4187, 3000: 57.3237, 10000: 56.1963 USDT0). Decimals read on-chain: WHYPE 18, USDT0 6. Best tier checked against an INDEPENDENT control the same minute -- Hyperliquid allMids put HYPE at 57.3205, so the pool is 0.171% from the perp mid, which is the right shape for fee plus impact rather than a wrong contract or a decimals bug.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}},{kind:"router",address:"0x4E2960a8cd19B467b82d26D83fAcb0fAE26b094D",label:"HyperSwap V3 SwapRouter",verified:{method:"eth_getCode returned 12070 bytes, and it is the router paired with the quoter proved above -- the same pair already shipped in UNI_V3_VENUES[999].hyperswap, which is the map the quote/prepare path actually routes through.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:999}}]},{key:"abstract",chainId:2741,name:"Abstract",rpcEnv:["ABSTRACT_RPC_URL","ABS_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},venueKind:"uniswap-v3",wrappedNative:"0x3439153EB7AF838Ad19d56E1571FBD09333C2809",venues:[{kind:"quoter",address:"0x728BD3eC25D5EDBafebB84F3d67367Cd9EBC7693",label:"Uniswap V3 QuoterV2 (Abstract deployment)",verified:{method:"Abstract is a ZK-stack chain, so CREATE2 addresses differ and the canonical Uniswap addresses are NOT valid here -- probing them returns codesize 0, which is what previously made this chain look like it had no V3 at all. Found the real deployment from live traffic instead: scanned recent Swap(...) logs, took the busiest pool, read pool.factory() = 0xa1160e73b63f322ae88cc2d8e700833e71d0b2a1, then enumerated that factory's deployer (0xf3d63166F0Ca56C3c1A3508FcE03Ff0Cf3Fb691e) and probed each of its 56 contracts with a real quoteExactInputSingle call. Exactly one answered: 1 WETH -> 1846.475731 USDC.e at fee 500. Independent sanity check: the pool's own slot0() spot price is 1873.11 USDC.e per WETH, so the quoter sits ~1.4% below spot, the right shape for fee plus price impact on this size.",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-08-05",chainId:2741}},{kind:"router",address:"0x7712FA47387542819d4E35A23f8116C90C18767C",label:"Uniswap SwapRouter02 (Abstract deployment)",verified:{method:"eth_getCode returned 167392 bytes and the runtime contains the exactInputSingle selector. router.factory() matches the factory proved above and router.WETH9() matches the wrappedNative on this entry. Chosen over its byte-identical twin (0xfD6257F4...) because this is the address real users actually route through: it appeared as tx.to on live swaps against the WETH/USDC.e pool.",source:"on-chain factory()/WETH9() round-trip + live swap tx.to sampling",date:"2026-08-05",chainId:2741}}]},{key:"robinhood",chainId:4663,name:"Robinhood Chain",rpcEnv:["RH_CHAIN_RPC","ROBINHOOD_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},dexscreenerSlug:"robinhood",venueKind:"uniswap-v3",wrappedNative:"0x0bd7d308f8e1639fab988df18a8011f41eacad73",venues:[{kind:"quoter",address:"0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDG fee 100 quoted 1866.58 USDG, and USDG->CASHCAT fee 10000 quoted a live amount). A contract that correctly prices known pairs IS a working V3 quoter",source:"live eth_call against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"router",address:"0xcaf681a66d020601342297493863e78c959e5cb2",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode (24497 bytes) on this chain and the paired quoter at the same deployment passed a live functional quote",source:"live eth_getCode against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}},{kind:"factory",address:"0x1f7d7550b1b028f7571e69a784071f0205fd2efa",label:"Uniswap V3 Factory",verified:{method:"eth_getCode returned real bytecode (24535 bytes) and a PoolCreated log scan over this factory returned 76 pools in ~9000 recent blocks",source:"live eth_getLogs against rpc.mainnet.chain.robinhood.com",date:"2026-07-31",chainId:4663}}]},{key:"base",chainId:8453,name:"Base",rpcEnv:["BASE_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://basescan.org",dexscreenerSlug:"base",venueKind:"uniswap-v3",wrappedNative:"0x4200000000000000000000000000000000000006",venues:[{kind:"quoter",address:"0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",label:"Uniswap V3 QuoterV2 (Base)",verified:{method:"functional probe: quoteExactInputSingle returned WETH->USDC at fee 500 = 1908.44 USDC, a live sane price. The canonical mainnet quoter address also has bytecode on Base but does NOT price this pair, which is exactly the false positive a codesize-only check accepts",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router",address:"0x2626664c2603336E57B271c5C0b26F421741e481",label:"Uniswap V3 SwapRouter02 (Base)",verified:{method:"eth_getCode returned real bytecode and the paired Base quoter passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:8453}},{kind:"router-v2",address:"0x4752ba5DBc23f44D87826276BF6Fd6b1C372aD24",label:"Uniswap V2 Router02 (Base)",verified:{method:"eth_getCode returned 17891 bytes; live getAmountsOut on WETH->USDC round-tripped to 98.75% (2x0.30% fee + impact)",source:"https://docs.uniswap.org/contracts/v2/reference/smart-contracts/v2-deployments",date:"2026-07-30",chainId:8453}}]},{key:"arbitrum",chainId:42161,name:"Arbitrum One",rpcEnv:["ARBITRUM_RPC_URL","ARB_RPC_URL"],nativeCurrency:{symbol:"ETH",decimals:18},explorer:"https://arbiscan.io",dexscreenerSlug:"arbitrum",venueKind:"uniswap-v3",wrappedNative:"0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",venues:[{kind:"quoter",address:"0x61fFE014bA17989E743c5F6cB21bF9697530B21e",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WETH->USDC fee 500 quoted 1908.72 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}},{kind:"router",address:"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:42161}}]},{key:"avalanche",chainId:43114,name:"Avalanche C-Chain",rpcEnv:["AVALANCHE_RPC_URL","AVAX_RPC_URL"],nativeCurrency:{symbol:"AVAX",decimals:18},explorer:"https://snowtrace.io",dexscreenerSlug:"avalanche",venueKind:"uniswap-v3",wrappedNative:"0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",venues:[{kind:"quoter",address:"0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",label:"Uniswap V3 QuoterV2",verified:{method:"functional probe, not a codesize check: quoteExactInputSingle returned a live sane price (WAVAX->USDC fee 500 quoted 6.48 USDC). A contract that correctly prices a known pair IS a working V3 quoter",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}},{kind:"router",address:"0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",label:"Uniswap V3 SwapRouter02",verified:{method:"eth_getCode returned real bytecode on this chain and the paired quoter at the same deployment passed a live functional quote",source:"scripts/verify-v3-venues.mjs (re-runnable)",date:"2026-07-30",chainId:43114}}]}]);Ee();J();import{homedir as ye}from"node:os";import{join as Ae}from"node:path";var We=process.env.ORACLE_PUBLIC_DESKTOP==="1",Mt=We?process.env.ORACLE_CONFIG_DIR||Ae(ye(),".config","oracle"):Ae(ye(),".config","oracle"),fi=We?Mt:Ae(ye(),".config","mad-desk");A();import{Interface as Kt,MaxUint256 as Mi,isAddress as Vi,keccak256 as ji,toUtf8Bytes as Hi}from"ethers";import{Interface as Ht,isAddress as xi}from"ethers";A();q();C();import{isAddress as wi}from"ethers";q();C();var Ii=new Ht(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Gt,isAddress as Ni}from"ethers";q();C();var Li=new Gt(["function approve(address spender,uint256 amount) returns (bool)"]),Bi=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});C();var Yi=new Kt(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as Wt,isAddress as Zi}from"ethers";C();var rs=new Wt(["function setApprovalForAll(address operator,bool approved)"]);import{Interface as zt,MaxUint256 as as,isAddress as is}from"ethers";var ss=new zt(["function transfer(address to,uint256 amount) returns (bool)","function transferFrom(address from,address to,uint256 amount) returns (bool)"]);import{isAddress as Bs}from"ethers";import{Wallet as tc,JsonRpcProvider as rc,getAddress as nc,isAddress as oc,parseUnits as ac}from"ethers";J();function Je(){let[e,t]=process.versions.node.split(".").map(Number);return e>20||e===20&&t>=19}function er(e){if(!ee.existsSync(e))return{};let t={};for(let r of ee.readFileSync(e,"utf8").split(/\r?\n/)){let n=r.match(/^([A-Z0-9_]+)=(.*)$/);n&&(t[n[1]]=n[2])}return t}async function tr(e){let t=e.replace(/\/$/,"");for(let r of["/health","/public/health"])try{if((await fetch(t+r)).ok)return!0}catch{}return!1}var Bc={name:"doctor",summary:"check the read plane (+ optional --agentic crypto harness score)",group:"read",usage:"oracle doctor [--json] [--agentic]",async run(e){let t=e.argv.includes("--json"),r=e.argv.includes("--agentic"),n=[],a=!1,o=(i,H,te,re=null)=>{n.push({id:i,status:H,detail:te,fix:re}),H==="fail"&&(a=!0)};o("node",Je()?"ok":"fail",`node ${process.versions.node}`,Je()?null:"install node >= 20.19");let l=e.paths.oracleExecEnvPath(),c=er(l),E=process.env.ORACLE_ROUTE_ATTESTATION_SECRET||process.env.MAD_ROUTE_ATTESTATION_SECRET||process.env.ORACLE_ATTESTATION_SECRET||process.env.ORACLE_STAMP_HMAC_SECRET||c.ORACLE_ROUTE_ATTESTATION_SECRET||c.MAD_ROUTE_ATTESTATION_SECRET||c.ORACLE_ATTESTATION_SECRET||c.ORACLE_STAMP_HMAC_SECRET;o("attestation_secret",E?"ok":"warn",E?"present":"missing",E?null:"run oracle init --apply (writes ~/.config/oracle/exec.env)");let p=process.env.ORACLE_DATA_URL||"http://127.0.0.1:8787",h=await tr(p),f=e.paths.loadDeskRouting&&(process.env.ORACLE_DESK_URL||process.env.ORACLE_PUBLIC_URL)?`desk ${process.env.ORACLE_DESK_URL||process.env.ORACLE_PUBLIC_URL}`:null;o("data_server",h?"ok":"warn",h?`reachable ${p}${f?` (${f})`:""}`:`down ${p}`,h?null:p.includes("127.0.0.1")||p.includes("localhost")?"oracle data serve  OR  set ~/.config/oracle/desk.json \u2192 Arch :8799":"check Arch desk is up (curl $ORACLE_DESK_URL/public/health)");let T=Se();o("harness_model","ok","Oracle native is default; external clients are inbound MCP only (oracle harness detect)",null),o("hermes_opt_in","ok",T.ok?`detected ${T.bin} (${T.source}) \u2014 unused unless explicitly opted in`:"not detected \u2014 native-only OK",null);let V=Zt.join(e.paths.hermesRoot(),"profiles"),S=0;ee.existsSync(V)&&(S=ee.readdirSync(V,{withFileTypes:!0}).filter(i=>i.isDirectory()).length),o("hermes_lanes","ok",S>0?`${S} profile dir(s) (optional surface)`:"no Hermes lane profiles (native-only OK)",null);let w=F(process.env),k=w.vaultExists&&w.unlocked&&w.armed;o("self_host_vault",k?"ok":"warn",k?`ready ${w.address||"unlocked"}`:w.vaultExists?`not ready: unlocked=${w.unlocked} armed=${w.armed}`:"not configured \u2014 read/prepare mode OK",k?null:"optional: oracle vault import && oracle vault unlock && oracle arm --max <amount> --chain <chain>");let m=null;if(r){m=Oe(process.env);for(let i of m.checks)o(`agentic_${i.id}`,i.status,i.detail,null)}let j={ok:!a&&(m?m.ok:!0),checks:n,...m?{agentic:{pct:m.pct,summary:m.summary,attributes:m.attributes,researchMode:m.researchMode}}:{}};if(t)process.stdout.write(JSON.stringify(j,null,2)+`
+`);else{for(let i of n)process.stdout.write(`${i.status.toUpperCase().padEnd(4)} ${i.id}: ${i.detail}
+`),i.fix&&process.stdout.write(`     fix: ${i.fix}
+`);m&&process.stdout.write(`
+${m.summary}
+`)}return j.ok?0:1}};export{Bc as default};

package/dist/cli/commands/model.mjs

@@ -268,7 +268,7 @@ Connection: close\r
 `)){let[i,a]=s.trim().split(/\s+/).map(Number);!i||!a||(r.has(a)||r.set(a,[]),r.get(a).push(i))}let n=[],o=s=>{for(let i of r.get(s)||[])o(i),n.push(i)};return o(e),[...n,e].map(s=>({pid:s,startTime:It(s)}))}function Vd(e,t){for(let r of e||[])if(!(!r.startTime||It(r.pid)!==r.startTime))try{process.kill(r.pid,t)}catch{}}function Nt(e,t="SIGTERM",r=!1){if(e){if(!r){try{e.kill(t)}catch{}return}if(process.platform==="win32"){try{ct("taskkill",["/PID",String(e.pid),"/T",...t==="SIGKILL"?["/F"]:[]],{stdio:"ignore",windowsHide:!0})}catch{}fr(e,"cancel");return}if(!e._oracleKillTargets){if(!e._oracleStartTime||It(e.pid)!==e._oracleStartTime){fr(e,"cancel");return}e._oracleKillTargets=pr(e.pid)}if(fr(e,"cancel"),e._oracleProcessGroup&&It(e.pid)===e._oracleStartTime)try{process.kill(-e.pid,t)}catch{}Vd(e._oracleKillTargets,t)}}var Ay=Object.freeze({spawn:Un,kill:Nt});function Xi(e,t){return!e||e.exitCode!=null||e.signalCode!=null?Promise.resolve(!0):new Promise(r=>{let n=!1,o=a=>{n||(n=!0,clearTimeout(i),e.removeListener?.("exit",s),e.removeListener?.("close",s),r(a))},s=()=>o(!0),i=setTimeout(()=>o(!1),t);e.once?.("exit",s),e.once?.("close",s)})}async function ce(e){let t=F.get(e);if(t){if(t.stopPromise)return t.stopPromise;t.stopPromise=(async()=>{t.idleTimer&&clearTimeout(t.idleTimer),t.proxyRelay?.close?.(),Ue(t.proxy);let r=Xi(t.child,1e3);if(Nt(t.child,"SIGTERM",t.owned),!await r){let n=Xi(t.child,3e3);if(Nt(t.child,"SIGKILL",t.owned),!await n)throw Object.assign(new Error("managed Chromium process tree did not reap"),{code:"EREAP"})}F.get(e)===t&&F.delete(e)})();try{await t.stopPromise}catch(r){throw F.get(e)===t&&(t.stopPromise=null),r}}}function Pn(e){let t=F.get(e);if(t){if(t.idleTimer&&clearTimeout(t.idleTimer),t.activeRuns>0){t.idleTimer=null;return}t.idleTimer=setTimeout(()=>{ce(e).catch(()=>{})},t.idleTimeoutMs||ra),typeof t.idleTimer.unref=="function"&&t.idleTimer.unref()}}function Xd(){for(let e of at.values())e.controller.abort();for(let e of[...F.keys()])ce(e).catch(()=>{})}async function ia(e){let t=[];for(let n of at.values())n.ownerTaskId===e&&(n.controller.abort(),t.push(n.promise));await Promise.allSettled(t);let r=[];for(let[n,o]of F.entries())o.ownerTaskId===e&&r.push(ce(n));await Promise.all(r)}function Yd(e){let t=F.get(e);t&&(t.activeRuns=(t.activeRuns||0)+1,t.idleTimer&&clearTimeout(t.idleTimer),t.idleTimer=null)}function Jd(e){let t=F.get(e);t&&(t.activeRuns=Math.max(0,(t.activeRuns||0)-1),Pn(e))}function le(){return{ok:!1,error:"managed Chromium launch aborted"}}async function aa(e,t){if(t?.aborted)throw Object.assign(new Error("aborted"),{code:"ABORT_ERR"});await new Promise((r,n)=>{let o=!1,s=l=>{o||(o=!0,t?.removeEventListener("abort",a),l())},i=setTimeout(()=>s(r),e),a=()=>{clearTimeout(i),s(()=>n(Object.assign(new Error("aborted"),{code:"ABORT_ERR"})))};t?.addEventListener("abort",a,{once:!0}),i.unref?.()})}async function Zd(e,t,r,n){if(r.readDevToolsEndpointFn)return r.readDevToolsEndpointFn(e,t,n);let o=$.join(e,"DevToolsActivePort"),s=Date.now()+(Number(r.launchTimeoutMs)||15e3);for(;Date.now()<s;){if(n?.aborted||t.exitCode!=null||t.signalCode!=null||t.killed)return null;try{let[i,a]=M.readFileSync(o,"utf8").trim().split(/\r?\n/),l=Number(i);if(Number.isInteger(l)&&l>0&&l<=65535&&/^\/devtools\/browser\/[A-Za-z0-9-]+$/.test(a||""))return{port:l,wsPath:a}}catch{}try{await aa(50,n)}catch{return null}}return null}function Yi(e,t){if(!e?.pid||process.platform!=="linux")return!0;try{let r=M.readFileSync(`/proc/${e.pid}/cmdline`,"utf8").split("\0");return pr(e.pid).some(({pid:o})=>{try{let s=M.readFileSync(`/proc/${o}/cmdline`,"utf8").split("\0");return s.includes("--remote-debugging-port=9224")&&s.includes(`--user-data-dir=${t}`)}catch{return!1}})}catch{return!1}}function Qd(e,t){if(!e?.pid||!Number.isInteger(t))return!1;if(process.platform==="linux")try{let r=t.toString(16).toUpperCase().padStart(4,"0"),n=new Set;for(let o of["/proc/net/tcp","/proc/net/tcp6"])for(let s of M.readFileSync(o,"utf8").split(`
 `).slice(1)){let i=s.trim().split(/\s+/);if(i.length<10||i[3]!=="0A")continue;let[a,l]=String(i[1]||"").split(":");(a==="0100007F"||a==="00000000000000000000000001000000")&&l===r&&n.add(i[9])}if(!n.size)return!1;for(let o of pr(e.pid)){let s=[];try{s=M.readdirSync(`/proc/${o.pid}/fd`)}catch{continue}for(let i of s)try{let a=M.readlinkSync(`/proc/${o.pid}/fd/${i}`),l=/^socket:\[(\d+)\]$/.exec(a);if(l&&n.has(l[1]))return!0}catch{}}return!1}catch{return!1}if(process.platform==="darwin"){let r=ct("lsof",["-nP","-a","-p",String(e.pid),`-iTCP:${t}`,"-sTCP:LISTEN","-t"],{encoding:"utf8",timeout:2e3});return r.status===0&&String(r.stdout||"").trim().split(/\s+/).includes(String(e.pid))}if(process.platform==="win32"){let r=ct("netstat.exe",["-ano","-p","tcp"],{encoding:"utf8",timeout:2e3,windowsHide:!0});return String(r.stdout||"").split(`
 `).some(n=>{let o=n.trim().split(/\s+/);return o[0]==="TCP"&&o[1]?.endsWith(`:${t}`)&&o[3]==="LISTENING"&&o[4]===String(e.pid)})}return!1}function ep(e,t){if(process.platform!=="linux"||!e?.pid||!t)return!1;try{let r=pr(e.pid),n=`/sandbox/runtime/${$.basename(t)}`,o=new Set;for(let s of r){let i;try{i=M.readFileSync(`/proc/${s.pid}/net/unix`,"utf8")}catch{continue}for(let a of i.split(`
-`)){let l=a.trim().split(/\s+/),u=l.at(-1);if(u!==t&&u!==n)continue;let c=l[6];/^\d+$/.test(c||"")&&o.add(c)}}if(!o.size)return!1;for(let s of r){let i=[];try{i=M.readdirSync(`/proc/${s.pid}/fd`)}catch{continue}for(let a of i)try{let l=/^socket:\[(\d+)\]$/.exec(M.readlinkSync(`/proc/${s.pid}/fd/${a}`));if(l&&o.has(l[1]))return!0}catch{}}}catch{}return!1}function tp(e,t,r){return new Promise((n,o)=>{let s=Ln.request({socketPath:e,path:t,method:"GET",signal:r,headers:{host:"127.0.0.1:9224"}},i=>{let a="";i.setEncoding("utf8"),i.on("data",l=>{a.length<64e3&&(a+=l)}),i.on("end",()=>{if((i.statusCode||500)>=400)return o(new Error(`CDP returned ${i.statusCode}`));try{n(JSON.parse(a))}catch(l){o(l)}})});s.once("error",o),s.end()})}async function rp(e,t,r,n=15e3){let o=Date.now()+n;for(;Date.now()<o;){if(r?.aborted||t.exitCode!=null||t.signalCode!=null||t.killed)return null;try{if(!ep(t,e))throw new Error("CDP socket is not owned");let s=await tp(e,"/json/version",r);if(/^ws:\/\/(?:127\.0\.0\.1|0\.0\.0\.0|localhost):9224\/devtools\/browser\/[A-Za-z0-9-]+$/.test(s?.webSocketDebuggerUrl||""))return s}catch{}try{await aa(50,r)}catch{return null}}return null}async function np(e,t,r={}){if(String(e.ORACLE_BROWSER_CDP_URL||"").trim())return{ok:!1,error:"ORACLE_BROWSER_CDP_URL is unsupported: Oracle must launch Chromium with its mandatory SSRF proxy"};let o=oa(r.taskId||"default"),s=at.get(o);if(s)return s.promise;let i=F.get(o);if(i?.child&&i.child.exitCode==null&&i.child.signalCode==null&&!i.child.killed)return Pn(o),{ok:!0,cdpUrl:i.cdpUrl,cdpSocket:i.cdpSocket,managed:!0,key:o};let a=new AbortController,l=r.ownerTaskId||r.taskId||"default",u=()=>a.abort();r.signal?.addEventListener("abort",u,{once:!0}),r.signal?.aborted&&a.abort();let c={controller:a,ownerTaskId:l,promise:null};c.promise=(async()=>{let d=String(r.executablePath||e.ORACLE_CHROMIUM_PATH||"").trim()||qi(e);if(!d||!$.isAbsolute(d)||!dr(d))return{ok:!1,error:"Browser Use needs Chromium. Set ORACLE_CHROMIUM_PATH to an absolute executable path."};let p;try{p=await(r.startProxyFn||Wd)(r.proxyOptions)}catch{return a.signal.aborted?le():{ok:!1,error:"mandatory Oracle browser SSRF proxy failed to start"}}if(a.signal.aborted)return Ue(p),le();let f;try{f=await(r.startProxyRelayFn||((S,v)=>na(S,v,"proxy")))(p.url,t.BH_RUNTIME_DIR)}catch{return Ue(p),a.signal.aborted?le():{ok:!1,error:"isolated Chromium proxy relay failed to start"}}if(a.signal.aborted)return f.close(),Ue(p),le();let m=M.mkdtempSync($.join(t.HOME,"chromium-profile-"));M.chmodSync(m,448);let h=$.join(t.BH_RUNTIME_DIR,`chromium-cdp-${Zi(12).toString("hex")}.sock`);try{M.rmSync(h,{force:!0})}catch{}let E=["--headless=new","--remote-debugging-port=9224","--remote-debugging-address=0.0.0.0",`--user-data-dir=${m}`,"--disable-dev-shm-usage","--disable-extensions","--disable-background-networking","--disable-sync","--disable-translate","--proxy-server=http://0.0.0.0:9223","--proxy-bypass-list=<-loopback>","--mute-audio","--no-first-run","--no-default-browser-check","about:blank"],y=Fd(d,m,t,E,f.socketPath,h,e);if(!y.ok)return f.close(),Ue(p),y;let w=Un(y.command,y.argv,{env:t,cwd:t.BH_AGENT_WORKSPACE,mode:"ignore",processGroup:!0,spawnFn:r.browserSpawnFn,spawnOptions:{env:t,stdio:"ignore",detached:!1,windowsHide:!0}}),b=w.child;if(!b||typeof b.once!="function")return f.close(),Ue(p),{ok:!1,error:"failed to create managed Chromium process"};let g={child:b,cdpUrl:null,cdpSocket:h,proxy:p,proxyRelay:f,owned:w.owned,activeRuns:0,idleTimeoutMs:Number(r.idleTimeoutMs)||ra,ownerTaskId:l,launching:!0};F.set(o,g),Wi||(Wi=!0,process.once("exit",Xd)),b.once("exit",()=>{F.get(o)?.child===b&&ce(o).catch(()=>{})});let _=null;if(r.readDevToolsEndpointFn){let S=await Zd(m,b,r,a.signal);if(!S||a.signal.aborted||F.get(o)!==g||!Yi(b,y.profileArg))return F.get(o)===g?await ce(o):(Nt(b,"SIGTERM",w.owned),f.close(),Ue(p)),a.signal.aborted?le():{ok:!1,error:"managed Chromium did not expose an owned CDP endpoint"};if(!(r.verifyCdpOwnerFn||Qd)(b,S.port))return F.get(o)===g&&await ce(o),{ok:!1,error:"managed Chromium CDP listener is not owned by the launched process tree"};_=`http://127.0.0.1:${S.port}`;try{let C=await(r.fetchImpl||fetch)(`${_}/json/version`,{signal:AbortSignal.timeout(1e3)});if((C?.ok&&typeof C.json=="function"?await C.json():null)?.webSocketDebuggerUrl!==`ws://127.0.0.1:${S.port}${S.wsPath}`)throw new Error("CDP identity mismatch")}catch{return F.get(o)===g&&await ce(o),{ok:!1,error:"managed Chromium CDP identity verification failed"}}}else{if(!await rp(h,b,a.signal,Number(r.launchTimeoutMs)||15e3))return F.get(o)===g&&await ce(o),a.signal.aborted?le():{ok:!1,error:"managed Chromium did not expose an owned private CDP socket"};if(a.signal.aborted||F.get(o)!==g)return F.get(o)===g&&await ce(o),le();if(!Yi(b,y.profileArg))return F.get(o)===g&&await ce(o),{ok:!1,error:"private CDP socket is not bound to the launched Chromium process tree"}}return a.signal.aborted||F.get(o)!==g?(F.get(o)===g&&await ce(o),le()):(g.cdpUrl=_,g.launching=!1,Pn(o),{ok:!0,cdpUrl:_,cdpSocket:h,managed:!0,key:o})})(),at.set(o,c);try{return await c.promise}finally{r.signal?.removeEventListener("abort",u),at.get(o)===c&&at.delete(o)}}function Ji(e){let t=Number(e),r=Number.isFinite(t)?Math.trunc(t):$n;return Math.max(Id,Math.min(ta,r))*1e3}function op(e,t,r={}){return new Promise(n=>{if(r.signal?.aborted){n({error:Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"})});return}let o,s=!1;try{let h=Un(e,t,{cwd:r.cwd,env:r.env,mode:"pipe",input:r.input,spawnFn:r.spawnFn,spawnOptions:{cwd:r.cwd,env:r.env,windowsHide:!0,stdio:["pipe","pipe","pipe"]}});o=h.child,s=h.owned}catch(h){n({error:h});return}if(!o||typeof o.once!="function"){n({error:new Error("CLI spawn did not return a ChildProcess")});return}let i="",a="",l=!1,u,c,d=null,p=h=>{l||(l=!0,u&&clearTimeout(u),c&&clearTimeout(c),r.signal?.removeEventListener("abort",m),n(h))},f=h=>{d||(d=h,Nt(o,"SIGKILL",s),c=setTimeout(()=>p({error:Object.assign(new Error("browser_exec process tree did not reap"),{code:"EREAP"}),stdout:i,stderr:a}),3e3),c.unref?.())},m=()=>f(Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"}));o.stdout?.on("data",h=>{i.length<In&&(i+=String(h).slice(0,In-i.length))}),o.stderr?.on("data",h=>{a.length<Nn&&(a+=String(h).slice(0,Nn-a.length))}),o.once("error",h=>p({error:h,stdout:i,stderr:a})),o.once("close",(h,E)=>p(d?{error:d,stdout:i,stderr:a}:{status:h,signal:E,stdout:i,stderr:a})),u=setTimeout(()=>f(Object.assign(new Error("timed out"),{code:"ETIMEDOUT"})),r.timeout),u.unref?.(),r.signal?.aborted?m():r.signal?.addEventListener("abort",m,{once:!0}),o.stdin?.end(r.input)})}async function ca(e={},t={}){let r=t.env||process.env;if(!jn(r))return{ok:!1,error:"browser_exec is disabled. Set ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use. Oracle runs an AST-bounded browser-helper subset, not terminal-equivalent Python."};if(t.signal?.aborted)return le();let n=String(e.code||""),o=String(e.session||"").trim();if(o&&!Rd.test(o))return{ok:!1,error:"session must be 1-64 letters, digits, dashes, or underscores"};let s=zd(n,{env:r,python:t.python,spawnFn:t.validatorSpawnFn});if(!s.ok)return s;let i=jd(r);if(!i.ok)return i;let a=`${t.taskId||"default"}--${o||"default"}`,l=Gd(r,a);l.BU_NAME=`oracle-${Mn("sha256").update(a).digest("hex").slice(0,12)}`;let u={...t,taskId:a,ownerTaskId:t.taskId||"default",cli:i},c=t.ensureBrowserFn?await t.ensureBrowserFn(r,l,u):await np(r,l,u);if(!c?.ok)return c||{ok:!1,error:"Browser Use backend failed to initialize"};if(t.signal?.aborted)return le();l.BU_CDP_URL="http://0.0.0.0:9222";let d;if(c.cdpSocket)d={socketPath:c.cdpSocket,close(){}};else try{d=await(t.startCdpRelayFn||Dd)(c.cdpUrl,l.BH_RUNTIME_DIR)}catch{return{ok:!1,error:"isolated CDP relay failed to start"}}if(t.signal?.aborted)return d.close(),le();let p=Ud(i,l,d.socketPath,r);if(!p.ok)return d.close(),p;c.key&&Yd(c.key);let f;try{f=await op(p.command,p.argv,{spawnFn:t.cliSpawnFn,input:n,timeout:Ji(e.timeout_s),cwd:l.BH_AGENT_WORKSPACE,env:l,signal:t.signal})}finally{d.close(),c.key&&Jd(c.key)}if(f.error){let y=f.error.code==="ETIMEDOUT"?`browser_exec timed out after ${Ji(e.timeout_s)/1e3}s`:`browser_exec failed to launch: ${f.error.message||f.error}`;return{ok:!1,error:L(y,{force:!0})}}let m=typeof f.status=="number"?f.status:1,h=L(String(f.stdout||"").slice(0,In),{force:!0}),E=L(String(f.stderr||"").slice(0,Nn),{force:!0});return{ok:m===0,status:m,stdout:h,stderr:E||void 0,workspace:l.BH_AGENT_WORKSPACE,session:o||void 0}}var la=Object.freeze([{type:"function",function:{name:"browser_exec",description:"Drive Browser Use CLI 3.0 with several browser actions in one persistent call. Oracle accepts only AST-bounded helper Python: literal-public-URL new_tab/goto_url, wait_for_load, page_info, literal fill_input, literal click_at_xy, ensure_real_tab, and print. No variables, imports, attributes, filesystem, subprocess, arbitrary JavaScript, raw CDP, or dynamic URLs. Requires ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use.",parameters:{type:"object",properties:{code:{type:"string",description:"Bounded Python using approved pre-imported Browser Use helpers. Begin with a short comment describing the step."},session:{type:"string",description:"Optional persistent session name: 1-64 letters, digits, dashes, or underscores."},timeout_s:{type:"integer",description:`Timeout in seconds (default ${$n}, maximum ${ta}).`,default:$n}},required:["code"],additionalProperties:!1}}}]);import{spawnSync as sp}from"node:child_process";import ua from"node:fs";import Dn from"node:path";var fa=45e3,ip=4e4,ap=Object.freeze(["whoami","user","read","search","timeline","mentions","bookmarks","likes","following","followers","dms","auth"]),cp=Object.freeze(["post","reply","quote","delete","like","unlike","repost","unrepost","bookmark","unbookmark","follow","unfollow","block","unblock","mute","unmute","dm"]),da=Object.freeze(["--verbose","-v","--trace","-t","--bearer-token","--consumer-key","--consumer-secret","--access-token","--token-secret","--client-id","--client-secret"]);function lp(e=process.env){let t=String(e.ORACLE_XURL_ENABLED||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function pa(e=process.env){let t=String(e.ORACLE_XURL_ALLOW_WRITE||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function up(e=process.env){let t=String(e.ORACLE_XURL_BIN||"").trim();if(t)return Dn.isAbsolute(t)?ua.existsSync(t)?{ok:!0,bin:t}:{ok:!1,error:`ORACLE_XURL_BIN not found: ${t}`}:{ok:!1,error:"ORACLE_XURL_BIN must be absolute"};let r=String(e.PATH||process.env.PATH||"");for(let n of r.split(Dn.delimiter)){if(!n)continue;let o=Dn.join(n,"xurl");try{if(ua.existsSync(o))return{ok:!0,bin:o}}catch{}}return{ok:!1,error:"xurl binary not found on PATH. Install: curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash"}}function fp(e=process.env){let t=e.HOME||process.env.HOME||"";return{PATH:e.PATH||process.env.PATH||"/usr/bin:/bin",HOME:t,USER:e.USER||process.env.USER||"",LANG:e.LANG||process.env.LANG||"C.UTF-8",LC_ALL:e.LC_ALL||process.env.LC_ALL||"C.UTF-8",XDG_CONFIG_HOME:e.XDG_CONFIG_HOME||process.env.XDG_CONFIG_HOME||"",XDG_DATA_HOME:e.XDG_DATA_HOME||process.env.XDG_DATA_HOME||"",NO_COLOR:"1"}}function dp(e){for(let t of e){let r=String(t);if(da.includes(r))return r;if(da.some(n=>n.startsWith("--")&&r.startsWith(`${n}=`)))return r.split("=")[0]}return null}function pp(e={},t=process.env){let r;if(Array.isArray(e.argv))r=e.argv.map(l=>String(l));else{let l=String(e.command||e.cmd||"").trim();if(!l)return{ok:!1,error:"command is required (e.g. whoami, search, read, post)"};let u=Array.isArray(e.args)?e.args.map(c=>String(c)):typeof e.query=="string"?[e.query]:typeof e.text=="string"?[e.text]:typeof e.id=="string"?[e.id]:typeof e.handle=="string"?[e.handle]:[];l==="search"&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),(l==="timeline"||l==="mentions")&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),r=[l,...u]}if(r.length===0)return{ok:!1,error:"empty argv"};if(r.length>24)return{ok:!1,error:"too many arguments"};for(let l of r)if(String(l).length>4e3)return{ok:!1,error:"argument too long"};let n=dp(r);if(n)return{ok:!1,error:`forbidden flag: ${n}`};if(r.some(l=>String(l).includes("\0")))return{ok:!1,error:"nul byte in argv"};let o=String(r[0]||"").replace(/^\//,"");if(o.startsWith("2/")||r[0].startsWith("/2/")||r[0].startsWith("https://api.x.com/")){if(!pa(t)&&r.some(l=>/^-X$/.test(l)||/^--request$/.test(l))){let l=r.findIndex(c=>c==="-X"||c==="--request"),u=String(r[l+1]||"GET").toUpperCase();if(u!=="GET"&&u!=="HEAD")return{ok:!1,error:"raw non-GET requires ORACLE_XURL_ALLOW_WRITE=true"}}}else if(o==="auth"){if(String(r[1]||"")!=="status")return{ok:!1,error:"only `auth status` is allowed (no apps add / oauth2 from the agent)"}}else if(!ap.includes(o))if(cp.includes(o)){if(!pa(t))return{ok:!1,error:`write command '${o}' requires ORACLE_XURL_ALLOW_WRITE=true`}}else return o==="media"?{ok:!1,error:"media upload is disabled in the agent tool (run xurl media outside the agent)"}:{ok:!1,error:`command not allowlisted: ${o}`};let s=[...r],i=String(t.ORACLE_XURL_APP||"").trim(),a=String(t.ORACLE_XURL_USER||"").trim();if(i&&!s.includes("--app")&&s.unshift("--app",i),a&&!s.includes("--username")&&!s.includes("-u")){let l=0;s[0]==="--app"&&(l=2),l<s.length&&s.splice(l+1,0,"-u",a)}return{ok:!0,argv:s,command:o}}async function ma(e,t={},r={}){if(e!=="xurl")return{ok:!1,error:`unknown tool: ${e}`};let n=r.env||process.env;if(!lp(n))return{ok:!1,error:"xurl is disabled. Set ORACLE_XURL_ENABLED=true after `xurl auth status` succeeds. Writes stay off until ORACLE_XURL_ALLOW_WRITE=true."};let o=pp(t,n);if(!o.ok)return o;let s=up(n);if(!s.ok)return s;let a=(r.spawnFn||sp)(s.bin,o.argv,{encoding:"utf8",timeout:r.timeoutMs||fa,maxBuffer:1024*1024,env:fp(n)});if(a.error){let d=a.error.code==="ETIMEDOUT"?`xurl timed out after ${r.timeoutMs||fa}ms`:String(a.error.message||a.error);return{ok:!1,error:L(d,{force:!0})}}let l=L(String(a.stdout||"").slice(0,ip),{force:!0}),u=L(String(a.stderr||"").slice(0,2e3),{force:!0}),c=typeof a.status=="number"?a.status:1;return{ok:c===0,status:c,command:o.command,argv:o.argv.map(d=>/=/.test(d)&&/token|secret|key|bearer/i.test(d)?"[redacted-arg]":d),stdout:l,stderr:u||void 0}}var ha=Object.freeze([{type:"function",function:{name:"xurl",description:"Call the official xurl CLI against the X API with an allowlisted command. Reads (whoami/user/read/search/timeline/mentions/...) work when ORACLE_XURL_ENABLED=true. Writes (post/reply/like/follow/dm/...) also need ORACLE_XURL_ALLOW_WRITE=true. Never pass secrets or --verbose. Auth is whatever the operator configured in ~/.xurl.",parameters:{type:"object",properties:{command:{type:"string",description:"xurl subcommand: whoami, user, read, search, timeline, mentions, post, reply, ..."},args:{type:"array",items:{type:"string"},description:"Positional args after the command (query, id, handle, text)."},query:{type:"string",description:"Convenience for search query."},text:{type:"string",description:"Convenience for post/reply/dm text."},id:{type:"string",description:"Convenience for read/like/reply target id or URL."},handle:{type:"string",description:"Convenience for user/follow/dm handle."},limit:{type:"integer",description:"Result limit for search/timeline/mentions (1-50)."},argv:{type:"array",items:{type:"string"},description:"Raw argv alternative (still allowlisted + flag-filtered)."}},additionalProperties:!1}}}]);import mp from"node:fs";import hp from"node:path";var gp="knowledge",yp="corpus.json",Gn=["canonical","historical","methodology","live-required"],ya=new Set(Gn),Bn=200,Hn=1,zn=10,ba=5,ga=240,Oe={idExact:100,titleExact:60,titleSubstring:30,titleToken:12,taxonomyToken:8,keywordToken:6,summaryToken:2,summarySubstring:3},Fe=null;function bp(){return hp.join(Se(gp,import.meta.url),yp)}function lt(e){return typeof e=="string"&&e.trim().length>0}function Fn(e){return Array.isArray(e)&&e.every(t=>typeof t=="string")}function xp(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let{id:t,title:r,kind:n,taxonomyIds:o,keywords:s,summary:i,canonicalUrls:a,sourceTier:l,updateCadence:u,liveDataRequired:c}=e;if(!lt(t)||!lt(r)||!ya.has(n)||!Fn(o)||!Fn(s)||!lt(i)||!Fn(a)||a.length===0||!Number.isInteger(l)||l<0||l>4||!lt(u)||typeof c!="boolean"||n==="live-required"!==c)return null;try{if(a.some(d=>new URL(d).protocol!=="https:"))return null}catch{return null}return{id:t.trim(),title:r.trim(),kind:n,taxonomyIds:o.map(d=>d.trim()).filter(Boolean),keywords:s.map(d=>d.trim()).filter(Boolean),summary:i.trim(),canonicalUrls:a.map(d=>d.trim()),sourceTier:l,updateCadence:u.trim(),liveDataRequired:c}}function _p(e){if(Array.isArray(e))return e;if(e&&typeof e=="object"){if(Array.isArray(e.records))return e.records;if(Array.isArray(e.corpus))return e.corpus}return null}function wp(e={}){let t=e&&typeof e=="object"?e:{},r=lt(t.corpusPath)?t.corpusPath:bp();if(!t.forceReload&&Fe&&Fe.path===r)return Fe.result;let n;try{n=mp.readFileSync(r,"utf8")}catch(c){let d={ok:!1,error:`could not read knowledge corpus: ${c.code||c.message}`,records:[]};return Fe={path:r,result:d},d}let o;try{o=JSON.parse(n)}catch(c){let d={ok:!1,error:`knowledge corpus is not valid JSON: ${c.message}`,records:[]};return Fe={path:r,result:d},d}let s=_p(o);if(!s){let c={ok:!1,error:"knowledge corpus must be an array of records, or an object with a records[] array",records:[]};return Fe={path:r,result:c},c}let i=[],a=new Set,l=0;for(let c of s){let d=xp(c);if(!d||a.has(d.id)){l+=1;continue}a.add(d.id),i.push(d)}i.sort((c,d)=>c.id<d.id?-1:c.id>d.id?1:0);let u={ok:!0,records:i,skipped:l,path:r};return Fe={path:r,result:u},u}function qn(e){return String(e||"").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean)}function Kn(e){return String(e||"").split(".").map(t=>t.trim().toLowerCase()).filter(Boolean)}function Sp(e,t){let r=Kn(t);return r.length===0?!0:e.some(n=>{let o=Kn(n);return o.length<r.length?!1:r.every((s,i)=>o[i]===s)})}function kp(e,t,r){let n=0,o=e.id.toLowerCase(),s=e.title.toLowerCase(),i=e.summary.toLowerCase();o===t&&(n+=Oe.idExact),s===t?n+=Oe.titleExact:t&&s.includes(t)&&(n+=Oe.titleSubstring),t&&i.includes(t)&&(n+=Oe.summarySubstring);let a=new Set(qn(e.title)),l=new Set(e.taxonomyIds.flatMap(c=>Kn(c))),u=new Set(e.keywords.flatMap(c=>qn(c)));for(let c of r)a.has(c)&&(n+=Oe.titleToken),l.has(c)&&(n+=Oe.taxonomyToken),u.has(c)&&(n+=Oe.keywordToken),i.includes(c)&&(n+=Oe.summaryToken);return n}function Ep(e){return e.length<=ga?e:`${e.slice(0,ga)}\u2026`}function Ap(e={},t={}){let r=e&&typeof e=="object"?e:{},n=new Set(["query","topK","taxonomyPrefix","kinds"]);if(Object.keys(r).some(m=>!n.has(m)))return{ok:!1,error:"unexpected knowledge_search argument"};if(!lt(r.query))return{ok:!1,error:"query is required"};let o=r.query.trim().replace(/\s+/g," ");if(!o)return{ok:!1,error:"query is required"};if(o.length>Bn)return{ok:!1,error:`query length must not exceed ${Bn} characters`};let s=ba;if(r.topK!==void 0&&r.topK!==null){let m=r.topK;if(typeof m!="number"||!Number.isInteger(m)||m<Hn||m>zn)return{ok:!1,error:`topK must be an integer between ${Hn} and ${zn}`};s=m}let i=null;if(r.kinds!==void 0&&r.kinds!==null){if(!Array.isArray(r.kinds)||r.kinds.length===0||r.kinds.some(m=>!ya.has(m)))return{ok:!1,error:`kinds must be a non-empty array drawn from ${Gn.join(", ")}`};i=new Set(r.kinds)}let a="";if(r.taxonomyPrefix!==void 0&&r.taxonomyPrefix!==null){if(typeof r.taxonomyPrefix!="string")return{ok:!1,error:"taxonomyPrefix must be a string"};a=r.taxonomyPrefix.trim()}let l=wp(t);if(!l.ok)return{ok:!1,error:l.error};let u=o.toLowerCase(),c=[...new Set(qn(o))],d=[];for(let m of l.records){if(i&&!i.has(m.kind)||a&&!Sp(m.taxonomyIds,a))continue;let h=kp(m,u,c);h<=0||d.push({record:m,score:h})}d.sort((m,h)=>h.score!==m.score?h.score-m.score:m.record.id<h.record.id?-1:m.record.id>h.record.id?1:0);let p=d.slice(0,s).map(({record:m,score:h})=>({id:m.id,title:m.title,kind:m.kind,taxonomyIds:m.taxonomyIds,summary:Ep(m.summary),canonicalUrls:m.canonicalUrls,sourceTier:m.sourceTier,updateCadence:m.updateCadence,liveDataRequired:m.liveDataRequired,score:h})),f={ok:!0,query:o,results:p,count:p.length};return p.some(m=>m.liveDataRequired)&&(f.warning="one or more results require live data; treat their content as potentially stale until confirmed with a live lookup"),f}function xa(e,t={},r={}){return e==="knowledge_search"?Ap(t,r):{ok:!1,error:`unknown tool: ${e}`}}var _a=[{type:"function",function:{name:"knowledge_search",description:"Read-only search over the local, offline knowledge corpus by keyword or topic. Deterministic lexical search over canonical, historical, methodology, and live-required records. Results of kind live-required need a live lookup to confirm current state before being relied on.",parameters:{type:"object",properties:{query:{type:"string",description:`Search text (max ${Bn} chars)`},topK:{type:"integer",minimum:Hn,maximum:zn,description:`Maximum results to return (default ${ba})`},taxonomyPrefix:{type:"string",description:"Restrict results to records whose taxonomy ids fall under this dot-separated prefix"},kinds:{type:"array",items:{type:"string",enum:Gn},description:"Restrict results to these record kinds"}},required:["query"],additionalProperties:!1}}}];import vp from"node:fs";import wa from"node:path";import{homedir as Op}from"node:os";var Tp=64*1024,Cp=64;function Rp(e=process.env.ORACLE_CONFIG_DIR||wa.join(Op(),".config","oracle")){return wa.join(e,"hooks.json")}function Wn(e={}){let t=e.path||Rp(e.configDir),r;try{r=vp.readFileSync(t,"utf8")}catch{return{source:"missing",pre_tool:[]}}if(r.length>Tp)return{source:"oversized",pre_tool:[],error:"hooks.json too large"};try{let n=JSON.parse(r),o=Array.isArray(n?.pre_tool)?n.pre_tool.slice(0,Cp):[],s=[];for(let i of o){if(!i||typeof i!="object")continue;let a=typeof i.match=="string"?i.match.trim():"";!a||a.length>128||i.decision==="deny"&&s.push({match:a,decision:"deny",reason:typeof i.reason=="string"?i.reason.slice(0,200):"denied by operator hook",server:typeof i.server=="string"?i.server.trim().slice(0,128):void 0})}return{source:"file",path:t,pre_tool:s}}catch(n){return{source:"invalid",pre_tool:[],error:n instanceof Error?n.message:String(n)}}}function Sa(e={},t=Wn()){try{if(t?.error&&t.source==="invalid")return{allow:!1,reason:`hooks.json invalid: ${t.error}`};if(t?.error&&t.source==="oversized")return{allow:!1,reason:"hooks.json oversized"};let r=typeof e.name=="string"?e.name:"";if(!r)return{allow:!1,reason:"hook check missing tool name"};let n=Array.isArray(t?.pre_tool)?t.pre_tool:[];for(let o of n)if(!(o.match!=="*"&&o.match!==r)&&!(o.server&&e?.args?.server!==o.server))return{allow:!1,reason:o.reason||`denied by hook (${o.match})`};return{allow:!0}}catch(r){return{allow:!1,reason:`hook engine failure: ${r instanceof Error?r.message:String(r)}`.slice(0,200)}}}import{homedir as Vn}from"node:os";import{join as Xn}from"node:path";var ka=process.env.ORACLE_PUBLIC_DESKTOP==="1",Lp=ka?process.env.ORACLE_CONFIG_DIR||Xn(Vn(),".config","oracle"):Xn(Vn(),".config","oracle"),Hy=ka?Lp:Xn(Vn(),".config","mad-desk");function Ip(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var Np=["0","false","off","no"];function Ea(e,t,r=!0){let n=String(Ip(e,t,"")).trim().toLowerCase();return n===""?r:!Np.includes(n)}import{mkdir as Kp,chmod as mr,readFile as Gp,rename as Wp,writeFile as Vp}from"node:fs/promises";import{homedir as Xp}from"node:os";import{dirname as va,join as Jn}from"node:path";import Yp from"sql.js";import{wordlists as $p}from"ethers";var Pp=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),Mp=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],jp=new Set([12,15,18,21,24]);function Up(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return jp.has(t.length)&&t.every(r=>$p.en.getWordIndex(r)>=0)}var Dp=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,Fp=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,Bp=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function Hp(e){let t=Aa(e);return Bp.has(t)||Fp.test(t)}var $t=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function Aa(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function zp(e){let t=Aa(e);return[...Pp].some(r=>t.includes(r))}function qp(e,t,r){if(typeof t=="string"){if(Mp.some(n=>n.test(t))||Up(t))throw new $t(r);if(Dp.test(t)&&!Hp(e))throw new $t(r)}}function Yn(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return qp(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((o,s)=>Yn(o,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let n={};for(let o of Object.keys(e).sort()){let s=`${t}.${o}`;if(zp(o))throw new $t(s);e[o]!==void 0&&(n[o]=Yn(e[o],s,o))}return n}function ut(e){return Yn(e)}var Zn=Object.freeze(["project","entity","source","thesis","strategy","simulation","prepared_action","receipt","position"]),Jp=new Set(Zn),Zp=new Set(Zn.slice(0,-1).map((e,t)=>`${e}:${Zn[t+1]}`)),Qp=Jn(process.env.ORACLE_CONFIG_DIR||Jn(Xp(),".config","oracle"),"workspace"),em=Jn(Qp,"artifacts.sqlite");function yr(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(yr).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${yr(e[t])}`).join(",")}}`}function Oa(e){if(!Jp.has(e))throw new TypeError(`unknown artifact type: ${e}`);return e}function hr(e){let t=[];for(;e.step();)t.push(e.getAsObject());return e.free(),t}function gr(e){return e?{id:e.id,type:e.type,createdAt:e.created_at,data:JSON.parse(e.data_json)}:null}async function Ta(e={}){let t=e.path||em;await Kp(va(t),{recursive:!0,mode:448}),await mr(va(t),448);let r;try{r=await Gp(t)}catch(u){if(u.code!=="ENOENT")throw u}let n=await Yp(e.sqlJs||{}),o=r?new n.Database(r):new n.Database;o.run(`
+`)){let l=a.trim().split(/\s+/),u=l.at(-1);if(u!==t&&u!==n)continue;let c=l[6];/^\d+$/.test(c||"")&&o.add(c)}}if(!o.size)return!1;for(let s of r){let i=[];try{i=M.readdirSync(`/proc/${s.pid}/fd`)}catch{continue}for(let a of i)try{let l=/^socket:\[(\d+)\]$/.exec(M.readlinkSync(`/proc/${s.pid}/fd/${a}`));if(l&&o.has(l[1]))return!0}catch{}}}catch{}return!1}function tp(e,t,r){return new Promise((n,o)=>{let s=Ln.request({socketPath:e,path:t,method:"GET",signal:r,headers:{host:"127.0.0.1:9224"}},i=>{let a="";i.setEncoding("utf8"),i.on("data",l=>{a.length<64e3&&(a+=l)}),i.on("end",()=>{if((i.statusCode||500)>=400)return o(new Error(`CDP returned ${i.statusCode}`));try{n(JSON.parse(a))}catch(l){o(l)}})});s.once("error",o),s.end()})}async function rp(e,t,r,n=15e3){let o=Date.now()+n;for(;Date.now()<o;){if(r?.aborted||t.exitCode!=null||t.signalCode!=null||t.killed)return null;try{if(!ep(t,e))throw new Error("CDP socket is not owned");let s=await tp(e,"/json/version",r);if(/^ws:\/\/(?:127\.0\.0\.1|0\.0\.0\.0|localhost):9224\/devtools\/browser\/[A-Za-z0-9-]+$/.test(s?.webSocketDebuggerUrl||""))return s}catch{}try{await aa(50,r)}catch{return null}}return null}async function np(e,t,r={}){if(String(e.ORACLE_BROWSER_CDP_URL||"").trim())return{ok:!1,error:"ORACLE_BROWSER_CDP_URL is unsupported: Oracle must launch Chromium with its mandatory SSRF proxy"};let o=oa(r.taskId||"default"),s=at.get(o);if(s)return s.promise;let i=F.get(o);if(i?.child&&i.child.exitCode==null&&i.child.signalCode==null&&!i.child.killed)return Pn(o),{ok:!0,cdpUrl:i.cdpUrl,cdpSocket:i.cdpSocket,managed:!0,key:o};let a=new AbortController,l=r.ownerTaskId||r.taskId||"default",u=()=>a.abort();r.signal?.addEventListener("abort",u,{once:!0}),r.signal?.aborted&&a.abort();let c={controller:a,ownerTaskId:l,promise:null};c.promise=(async()=>{let d=String(r.executablePath||e.ORACLE_CHROMIUM_PATH||"").trim()||qi(e);if(!d||!$.isAbsolute(d)||!dr(d))return{ok:!1,error:"Browser Use needs Chromium. Set ORACLE_CHROMIUM_PATH to an absolute executable path."};let p;try{p=await(r.startProxyFn||Wd)(r.proxyOptions)}catch{return a.signal.aborted?le():{ok:!1,error:"mandatory Oracle browser SSRF proxy failed to start"}}if(a.signal.aborted)return Ue(p),le();let f;try{f=await(r.startProxyRelayFn||((S,v)=>na(S,v,"proxy")))(p.url,t.BH_RUNTIME_DIR)}catch{return Ue(p),a.signal.aborted?le():{ok:!1,error:"isolated Chromium proxy relay failed to start"}}if(a.signal.aborted)return f.close(),Ue(p),le();let m=M.mkdtempSync($.join(t.HOME,"chromium-profile-"));M.chmodSync(m,448);let h=$.join(t.BH_RUNTIME_DIR,`chromium-cdp-${Zi(12).toString("hex")}.sock`);try{M.rmSync(h,{force:!0})}catch{}let E=["--headless=new","--remote-debugging-port=9224","--remote-debugging-address=0.0.0.0",`--user-data-dir=${m}`,"--disable-dev-shm-usage","--disable-extensions","--disable-background-networking","--disable-sync","--disable-translate","--proxy-server=http://0.0.0.0:9223","--proxy-bypass-list=<-loopback>","--mute-audio","--no-first-run","--no-default-browser-check","about:blank"],y=Fd(d,m,t,E,f.socketPath,h,e);if(!y.ok)return f.close(),Ue(p),y;let w=Un(y.command,y.argv,{env:t,cwd:t.BH_AGENT_WORKSPACE,mode:"ignore",processGroup:!0,spawnFn:r.browserSpawnFn,spawnOptions:{env:t,stdio:"ignore",detached:!1,windowsHide:!0}}),b=w.child;if(!b||typeof b.once!="function")return f.close(),Ue(p),{ok:!1,error:"failed to create managed Chromium process"};let g={child:b,cdpUrl:null,cdpSocket:h,proxy:p,proxyRelay:f,owned:w.owned,activeRuns:0,idleTimeoutMs:Number(r.idleTimeoutMs)||ra,ownerTaskId:l,launching:!0};F.set(o,g),Wi||(Wi=!0,process.once("exit",Xd)),b.once("exit",()=>{F.get(o)?.child===b&&ce(o).catch(()=>{})});let _=null;if(r.readDevToolsEndpointFn){let S=await Zd(m,b,r,a.signal);if(!S||a.signal.aborted||F.get(o)!==g||!Yi(b,y.profileArg))return F.get(o)===g?await ce(o):(Nt(b,"SIGTERM",w.owned),f.close(),Ue(p)),a.signal.aborted?le():{ok:!1,error:"managed Chromium did not expose an owned CDP endpoint"};if(!(r.verifyCdpOwnerFn||Qd)(b,S.port))return F.get(o)===g&&await ce(o),{ok:!1,error:"managed Chromium CDP listener is not owned by the launched process tree"};_=`http://127.0.0.1:${S.port}`;try{let C=await(r.fetchImpl||fetch)(`${_}/json/version`,{signal:AbortSignal.timeout(1e3)});if((C?.ok&&typeof C.json=="function"?await C.json():null)?.webSocketDebuggerUrl!==`ws://127.0.0.1:${S.port}${S.wsPath}`)throw new Error("CDP identity mismatch")}catch{return F.get(o)===g&&await ce(o),{ok:!1,error:"managed Chromium CDP identity verification failed"}}}else{if(!await rp(h,b,a.signal,Number(r.launchTimeoutMs)||15e3))return F.get(o)===g&&await ce(o),a.signal.aborted?le():{ok:!1,error:"managed Chromium did not expose an owned private CDP socket"};if(a.signal.aborted||F.get(o)!==g)return F.get(o)===g&&await ce(o),le();if(!Yi(b,y.profileArg))return F.get(o)===g&&await ce(o),{ok:!1,error:"private CDP socket is not bound to the launched Chromium process tree"}}return a.signal.aborted||F.get(o)!==g?(F.get(o)===g&&await ce(o),le()):(g.cdpUrl=_,g.launching=!1,Pn(o),{ok:!0,cdpUrl:_,cdpSocket:h,managed:!0,key:o})})(),at.set(o,c);try{return await c.promise}finally{r.signal?.removeEventListener("abort",u),at.get(o)===c&&at.delete(o)}}function Ji(e){let t=Number(e),r=Number.isFinite(t)?Math.trunc(t):$n;return Math.max(Id,Math.min(ta,r))*1e3}function op(e,t,r={}){return new Promise(n=>{if(r.signal?.aborted){n({error:Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"})});return}let o,s=!1;try{let h=Un(e,t,{cwd:r.cwd,env:r.env,mode:"pipe",input:r.input,spawnFn:r.spawnFn,spawnOptions:{cwd:r.cwd,env:r.env,windowsHide:!0,stdio:["pipe","pipe","pipe"]}});o=h.child,s=h.owned}catch(h){n({error:h});return}if(!o||typeof o.once!="function"){n({error:new Error("CLI spawn did not return a ChildProcess")});return}let i="",a="",l=!1,u,c,d=null,p=h=>{l||(l=!0,u&&clearTimeout(u),c&&clearTimeout(c),r.signal?.removeEventListener("abort",m),n(h))},f=h=>{d||(d=h,Nt(o,"SIGKILL",s),c=setTimeout(()=>p({error:Object.assign(new Error("browser_exec process tree did not reap"),{code:"EREAP"}),stdout:i,stderr:a}),3e3),c.unref?.())},m=()=>f(Object.assign(new Error("browser_exec aborted"),{code:"ABORT_ERR"}));o.stdout?.on("data",h=>{i.length<In&&(i+=String(h).slice(0,In-i.length))}),o.stderr?.on("data",h=>{a.length<Nn&&(a+=String(h).slice(0,Nn-a.length))}),o.once("error",h=>p({error:h,stdout:i,stderr:a})),o.once("close",(h,E)=>p(d?{error:d,stdout:i,stderr:a}:{status:h,signal:E,stdout:i,stderr:a})),u=setTimeout(()=>f(Object.assign(new Error("timed out"),{code:"ETIMEDOUT"})),r.timeout),u.unref?.(),r.signal?.aborted?m():r.signal?.addEventListener("abort",m,{once:!0}),o.stdin&&(o.stdin.on?.("error",h=>{l||h?.code==="EPIPE"||h?.code==="ECONNRESET"||p({error:h,stdout:i,stderr:a})}),o.stdin.end(r.input))})}async function ca(e={},t={}){let r=t.env||process.env;if(!jn(r))return{ok:!1,error:"browser_exec is disabled. Set ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use. Oracle runs an AST-bounded browser-helper subset, not terminal-equivalent Python."};if(t.signal?.aborted)return le();let n=String(e.code||""),o=String(e.session||"").trim();if(o&&!Rd.test(o))return{ok:!1,error:"session must be 1-64 letters, digits, dashes, or underscores"};let s=zd(n,{env:r,python:t.python,spawnFn:t.validatorSpawnFn});if(!s.ok)return s;let i=jd(r);if(!i.ok)return i;let a=`${t.taskId||"default"}--${o||"default"}`,l=Gd(r,a);l.BU_NAME=`oracle-${Mn("sha256").update(a).digest("hex").slice(0,12)}`;let u={...t,taskId:a,ownerTaskId:t.taskId||"default",cli:i},c=t.ensureBrowserFn?await t.ensureBrowserFn(r,l,u):await np(r,l,u);if(!c?.ok)return c||{ok:!1,error:"Browser Use backend failed to initialize"};if(t.signal?.aborted)return le();l.BU_CDP_URL="http://0.0.0.0:9222";let d;if(c.cdpSocket)d={socketPath:c.cdpSocket,close(){}};else try{d=await(t.startCdpRelayFn||Dd)(c.cdpUrl,l.BH_RUNTIME_DIR)}catch{return{ok:!1,error:"isolated CDP relay failed to start"}}if(t.signal?.aborted)return d.close(),le();let p=Ud(i,l,d.socketPath,r);if(!p.ok)return d.close(),p;c.key&&Yd(c.key);let f;try{f=await op(p.command,p.argv,{spawnFn:t.cliSpawnFn,input:n,timeout:Ji(e.timeout_s),cwd:l.BH_AGENT_WORKSPACE,env:l,signal:t.signal})}finally{d.close(),c.key&&Jd(c.key)}if(f.error){let y=f.error.code==="ETIMEDOUT"?`browser_exec timed out after ${Ji(e.timeout_s)/1e3}s`:`browser_exec failed to launch: ${f.error.message||f.error}`;return{ok:!1,error:L(y,{force:!0})}}let m=typeof f.status=="number"?f.status:1,h=L(String(f.stdout||"").slice(0,In),{force:!0}),E=L(String(f.stderr||"").slice(0,Nn),{force:!0});return{ok:m===0,status:m,stdout:h,stderr:E||void 0,workspace:l.BH_AGENT_WORKSPACE,session:o||void 0}}var la=Object.freeze([{type:"function",function:{name:"browser_exec",description:"Drive Browser Use CLI 3.0 with several browser actions in one persistent call. Oracle accepts only AST-bounded helper Python: literal-public-URL new_tab/goto_url, wait_for_load, page_info, literal fill_input, literal click_at_xy, ensure_real_tab, and print. No variables, imports, attributes, filesystem, subprocess, arbitrary JavaScript, raw CDP, or dynamic URLs. Requires ORACLE_BROWSER_ENABLED=true and ORACLE_BROWSER_BACKEND=browser-use.",parameters:{type:"object",properties:{code:{type:"string",description:"Bounded Python using approved pre-imported Browser Use helpers. Begin with a short comment describing the step."},session:{type:"string",description:"Optional persistent session name: 1-64 letters, digits, dashes, or underscores."},timeout_s:{type:"integer",description:`Timeout in seconds (default ${$n}, maximum ${ta}).`,default:$n}},required:["code"],additionalProperties:!1}}}]);import{spawnSync as sp}from"node:child_process";import ua from"node:fs";import Dn from"node:path";var fa=45e3,ip=4e4,ap=Object.freeze(["whoami","user","read","search","timeline","mentions","bookmarks","likes","following","followers","dms","auth"]),cp=Object.freeze(["post","reply","quote","delete","like","unlike","repost","unrepost","bookmark","unbookmark","follow","unfollow","block","unblock","mute","unmute","dm"]),da=Object.freeze(["--verbose","-v","--trace","-t","--bearer-token","--consumer-key","--consumer-secret","--access-token","--token-secret","--client-id","--client-secret"]);function lp(e=process.env){let t=String(e.ORACLE_XURL_ENABLED||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function pa(e=process.env){let t=String(e.ORACLE_XURL_ALLOW_WRITE||"").trim().toLowerCase();return t==="1"||t==="true"||t==="yes"||t==="on"}function up(e=process.env){let t=String(e.ORACLE_XURL_BIN||"").trim();if(t)return Dn.isAbsolute(t)?ua.existsSync(t)?{ok:!0,bin:t}:{ok:!1,error:`ORACLE_XURL_BIN not found: ${t}`}:{ok:!1,error:"ORACLE_XURL_BIN must be absolute"};let r=String(e.PATH||process.env.PATH||"");for(let n of r.split(Dn.delimiter)){if(!n)continue;let o=Dn.join(n,"xurl");try{if(ua.existsSync(o))return{ok:!0,bin:o}}catch{}}return{ok:!1,error:"xurl binary not found on PATH. Install: curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash"}}function fp(e=process.env){let t=e.HOME||process.env.HOME||"";return{PATH:e.PATH||process.env.PATH||"/usr/bin:/bin",HOME:t,USER:e.USER||process.env.USER||"",LANG:e.LANG||process.env.LANG||"C.UTF-8",LC_ALL:e.LC_ALL||process.env.LC_ALL||"C.UTF-8",XDG_CONFIG_HOME:e.XDG_CONFIG_HOME||process.env.XDG_CONFIG_HOME||"",XDG_DATA_HOME:e.XDG_DATA_HOME||process.env.XDG_DATA_HOME||"",NO_COLOR:"1"}}function dp(e){for(let t of e){let r=String(t);if(da.includes(r))return r;if(da.some(n=>n.startsWith("--")&&r.startsWith(`${n}=`)))return r.split("=")[0]}return null}function pp(e={},t=process.env){let r;if(Array.isArray(e.argv))r=e.argv.map(l=>String(l));else{let l=String(e.command||e.cmd||"").trim();if(!l)return{ok:!1,error:"command is required (e.g. whoami, search, read, post)"};let u=Array.isArray(e.args)?e.args.map(c=>String(c)):typeof e.query=="string"?[e.query]:typeof e.text=="string"?[e.text]:typeof e.id=="string"?[e.id]:typeof e.handle=="string"?[e.handle]:[];l==="search"&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),(l==="timeline"||l==="mentions")&&e.limit!=null&&u.push("-n",String(Math.min(50,Math.max(1,Number(e.limit)||10)))),r=[l,...u]}if(r.length===0)return{ok:!1,error:"empty argv"};if(r.length>24)return{ok:!1,error:"too many arguments"};for(let l of r)if(String(l).length>4e3)return{ok:!1,error:"argument too long"};let n=dp(r);if(n)return{ok:!1,error:`forbidden flag: ${n}`};if(r.some(l=>String(l).includes("\0")))return{ok:!1,error:"nul byte in argv"};let o=String(r[0]||"").replace(/^\//,"");if(o.startsWith("2/")||r[0].startsWith("/2/")||r[0].startsWith("https://api.x.com/")){if(!pa(t)&&r.some(l=>/^-X$/.test(l)||/^--request$/.test(l))){let l=r.findIndex(c=>c==="-X"||c==="--request"),u=String(r[l+1]||"GET").toUpperCase();if(u!=="GET"&&u!=="HEAD")return{ok:!1,error:"raw non-GET requires ORACLE_XURL_ALLOW_WRITE=true"}}}else if(o==="auth"){if(String(r[1]||"")!=="status")return{ok:!1,error:"only `auth status` is allowed (no apps add / oauth2 from the agent)"}}else if(!ap.includes(o))if(cp.includes(o)){if(!pa(t))return{ok:!1,error:`write command '${o}' requires ORACLE_XURL_ALLOW_WRITE=true`}}else return o==="media"?{ok:!1,error:"media upload is disabled in the agent tool (run xurl media outside the agent)"}:{ok:!1,error:`command not allowlisted: ${o}`};let s=[...r],i=String(t.ORACLE_XURL_APP||"").trim(),a=String(t.ORACLE_XURL_USER||"").trim();if(i&&!s.includes("--app")&&s.unshift("--app",i),a&&!s.includes("--username")&&!s.includes("-u")){let l=0;s[0]==="--app"&&(l=2),l<s.length&&s.splice(l+1,0,"-u",a)}return{ok:!0,argv:s,command:o}}async function ma(e,t={},r={}){if(e!=="xurl")return{ok:!1,error:`unknown tool: ${e}`};let n=r.env||process.env;if(!lp(n))return{ok:!1,error:"xurl is disabled. Set ORACLE_XURL_ENABLED=true after `xurl auth status` succeeds. Writes stay off until ORACLE_XURL_ALLOW_WRITE=true."};let o=pp(t,n);if(!o.ok)return o;let s=up(n);if(!s.ok)return s;let a=(r.spawnFn||sp)(s.bin,o.argv,{encoding:"utf8",timeout:r.timeoutMs||fa,maxBuffer:1024*1024,env:fp(n)});if(a.error){let d=a.error.code==="ETIMEDOUT"?`xurl timed out after ${r.timeoutMs||fa}ms`:String(a.error.message||a.error);return{ok:!1,error:L(d,{force:!0})}}let l=L(String(a.stdout||"").slice(0,ip),{force:!0}),u=L(String(a.stderr||"").slice(0,2e3),{force:!0}),c=typeof a.status=="number"?a.status:1;return{ok:c===0,status:c,command:o.command,argv:o.argv.map(d=>/=/.test(d)&&/token|secret|key|bearer/i.test(d)?"[redacted-arg]":d),stdout:l,stderr:u||void 0}}var ha=Object.freeze([{type:"function",function:{name:"xurl",description:"Call the official xurl CLI against the X API with an allowlisted command. Reads (whoami/user/read/search/timeline/mentions/...) work when ORACLE_XURL_ENABLED=true. Writes (post/reply/like/follow/dm/...) also need ORACLE_XURL_ALLOW_WRITE=true. Never pass secrets or --verbose. Auth is whatever the operator configured in ~/.xurl.",parameters:{type:"object",properties:{command:{type:"string",description:"xurl subcommand: whoami, user, read, search, timeline, mentions, post, reply, ..."},args:{type:"array",items:{type:"string"},description:"Positional args after the command (query, id, handle, text)."},query:{type:"string",description:"Convenience for search query."},text:{type:"string",description:"Convenience for post/reply/dm text."},id:{type:"string",description:"Convenience for read/like/reply target id or URL."},handle:{type:"string",description:"Convenience for user/follow/dm handle."},limit:{type:"integer",description:"Result limit for search/timeline/mentions (1-50)."},argv:{type:"array",items:{type:"string"},description:"Raw argv alternative (still allowlisted + flag-filtered)."}},additionalProperties:!1}}}]);import mp from"node:fs";import hp from"node:path";var gp="knowledge",yp="corpus.json",Gn=["canonical","historical","methodology","live-required"],ya=new Set(Gn),Bn=200,Hn=1,zn=10,ba=5,ga=240,Oe={idExact:100,titleExact:60,titleSubstring:30,titleToken:12,taxonomyToken:8,keywordToken:6,summaryToken:2,summarySubstring:3},Fe=null;function bp(){return hp.join(Se(gp,import.meta.url),yp)}function lt(e){return typeof e=="string"&&e.trim().length>0}function Fn(e){return Array.isArray(e)&&e.every(t=>typeof t=="string")}function xp(e){if(!e||typeof e!="object"||Array.isArray(e))return null;let{id:t,title:r,kind:n,taxonomyIds:o,keywords:s,summary:i,canonicalUrls:a,sourceTier:l,updateCadence:u,liveDataRequired:c}=e;if(!lt(t)||!lt(r)||!ya.has(n)||!Fn(o)||!Fn(s)||!lt(i)||!Fn(a)||a.length===0||!Number.isInteger(l)||l<0||l>4||!lt(u)||typeof c!="boolean"||n==="live-required"!==c)return null;try{if(a.some(d=>new URL(d).protocol!=="https:"))return null}catch{return null}return{id:t.trim(),title:r.trim(),kind:n,taxonomyIds:o.map(d=>d.trim()).filter(Boolean),keywords:s.map(d=>d.trim()).filter(Boolean),summary:i.trim(),canonicalUrls:a.map(d=>d.trim()),sourceTier:l,updateCadence:u.trim(),liveDataRequired:c}}function _p(e){if(Array.isArray(e))return e;if(e&&typeof e=="object"){if(Array.isArray(e.records))return e.records;if(Array.isArray(e.corpus))return e.corpus}return null}function wp(e={}){let t=e&&typeof e=="object"?e:{},r=lt(t.corpusPath)?t.corpusPath:bp();if(!t.forceReload&&Fe&&Fe.path===r)return Fe.result;let n;try{n=mp.readFileSync(r,"utf8")}catch(c){let d={ok:!1,error:`could not read knowledge corpus: ${c.code||c.message}`,records:[]};return Fe={path:r,result:d},d}let o;try{o=JSON.parse(n)}catch(c){let d={ok:!1,error:`knowledge corpus is not valid JSON: ${c.message}`,records:[]};return Fe={path:r,result:d},d}let s=_p(o);if(!s){let c={ok:!1,error:"knowledge corpus must be an array of records, or an object with a records[] array",records:[]};return Fe={path:r,result:c},c}let i=[],a=new Set,l=0;for(let c of s){let d=xp(c);if(!d||a.has(d.id)){l+=1;continue}a.add(d.id),i.push(d)}i.sort((c,d)=>c.id<d.id?-1:c.id>d.id?1:0);let u={ok:!0,records:i,skipped:l,path:r};return Fe={path:r,result:u},u}function qn(e){return String(e||"").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean)}function Kn(e){return String(e||"").split(".").map(t=>t.trim().toLowerCase()).filter(Boolean)}function Sp(e,t){let r=Kn(t);return r.length===0?!0:e.some(n=>{let o=Kn(n);return o.length<r.length?!1:r.every((s,i)=>o[i]===s)})}function kp(e,t,r){let n=0,o=e.id.toLowerCase(),s=e.title.toLowerCase(),i=e.summary.toLowerCase();o===t&&(n+=Oe.idExact),s===t?n+=Oe.titleExact:t&&s.includes(t)&&(n+=Oe.titleSubstring),t&&i.includes(t)&&(n+=Oe.summarySubstring);let a=new Set(qn(e.title)),l=new Set(e.taxonomyIds.flatMap(c=>Kn(c))),u=new Set(e.keywords.flatMap(c=>qn(c)));for(let c of r)a.has(c)&&(n+=Oe.titleToken),l.has(c)&&(n+=Oe.taxonomyToken),u.has(c)&&(n+=Oe.keywordToken),i.includes(c)&&(n+=Oe.summaryToken);return n}function Ep(e){return e.length<=ga?e:`${e.slice(0,ga)}\u2026`}function Ap(e={},t={}){let r=e&&typeof e=="object"?e:{},n=new Set(["query","topK","taxonomyPrefix","kinds"]);if(Object.keys(r).some(m=>!n.has(m)))return{ok:!1,error:"unexpected knowledge_search argument"};if(!lt(r.query))return{ok:!1,error:"query is required"};let o=r.query.trim().replace(/\s+/g," ");if(!o)return{ok:!1,error:"query is required"};if(o.length>Bn)return{ok:!1,error:`query length must not exceed ${Bn} characters`};let s=ba;if(r.topK!==void 0&&r.topK!==null){let m=r.topK;if(typeof m!="number"||!Number.isInteger(m)||m<Hn||m>zn)return{ok:!1,error:`topK must be an integer between ${Hn} and ${zn}`};s=m}let i=null;if(r.kinds!==void 0&&r.kinds!==null){if(!Array.isArray(r.kinds)||r.kinds.length===0||r.kinds.some(m=>!ya.has(m)))return{ok:!1,error:`kinds must be a non-empty array drawn from ${Gn.join(", ")}`};i=new Set(r.kinds)}let a="";if(r.taxonomyPrefix!==void 0&&r.taxonomyPrefix!==null){if(typeof r.taxonomyPrefix!="string")return{ok:!1,error:"taxonomyPrefix must be a string"};a=r.taxonomyPrefix.trim()}let l=wp(t);if(!l.ok)return{ok:!1,error:l.error};let u=o.toLowerCase(),c=[...new Set(qn(o))],d=[];for(let m of l.records){if(i&&!i.has(m.kind)||a&&!Sp(m.taxonomyIds,a))continue;let h=kp(m,u,c);h<=0||d.push({record:m,score:h})}d.sort((m,h)=>h.score!==m.score?h.score-m.score:m.record.id<h.record.id?-1:m.record.id>h.record.id?1:0);let p=d.slice(0,s).map(({record:m,score:h})=>({id:m.id,title:m.title,kind:m.kind,taxonomyIds:m.taxonomyIds,summary:Ep(m.summary),canonicalUrls:m.canonicalUrls,sourceTier:m.sourceTier,updateCadence:m.updateCadence,liveDataRequired:m.liveDataRequired,score:h})),f={ok:!0,query:o,results:p,count:p.length};return p.some(m=>m.liveDataRequired)&&(f.warning="one or more results require live data; treat their content as potentially stale until confirmed with a live lookup"),f}function xa(e,t={},r={}){return e==="knowledge_search"?Ap(t,r):{ok:!1,error:`unknown tool: ${e}`}}var _a=[{type:"function",function:{name:"knowledge_search",description:"Read-only search over the local, offline knowledge corpus by keyword or topic. Deterministic lexical search over canonical, historical, methodology, and live-required records. Results of kind live-required need a live lookup to confirm current state before being relied on.",parameters:{type:"object",properties:{query:{type:"string",description:`Search text (max ${Bn} chars)`},topK:{type:"integer",minimum:Hn,maximum:zn,description:`Maximum results to return (default ${ba})`},taxonomyPrefix:{type:"string",description:"Restrict results to records whose taxonomy ids fall under this dot-separated prefix"},kinds:{type:"array",items:{type:"string",enum:Gn},description:"Restrict results to these record kinds"}},required:["query"],additionalProperties:!1}}}];import vp from"node:fs";import wa from"node:path";import{homedir as Op}from"node:os";var Tp=64*1024,Cp=64;function Rp(e=process.env.ORACLE_CONFIG_DIR||wa.join(Op(),".config","oracle")){return wa.join(e,"hooks.json")}function Wn(e={}){let t=e.path||Rp(e.configDir),r;try{r=vp.readFileSync(t,"utf8")}catch{return{source:"missing",pre_tool:[]}}if(r.length>Tp)return{source:"oversized",pre_tool:[],error:"hooks.json too large"};try{let n=JSON.parse(r),o=Array.isArray(n?.pre_tool)?n.pre_tool.slice(0,Cp):[],s=[];for(let i of o){if(!i||typeof i!="object")continue;let a=typeof i.match=="string"?i.match.trim():"";!a||a.length>128||i.decision==="deny"&&s.push({match:a,decision:"deny",reason:typeof i.reason=="string"?i.reason.slice(0,200):"denied by operator hook",server:typeof i.server=="string"?i.server.trim().slice(0,128):void 0})}return{source:"file",path:t,pre_tool:s}}catch(n){return{source:"invalid",pre_tool:[],error:n instanceof Error?n.message:String(n)}}}function Sa(e={},t=Wn()){try{if(t?.error&&t.source==="invalid")return{allow:!1,reason:`hooks.json invalid: ${t.error}`};if(t?.error&&t.source==="oversized")return{allow:!1,reason:"hooks.json oversized"};let r=typeof e.name=="string"?e.name:"";if(!r)return{allow:!1,reason:"hook check missing tool name"};let n=Array.isArray(t?.pre_tool)?t.pre_tool:[];for(let o of n)if(!(o.match!=="*"&&o.match!==r)&&!(o.server&&e?.args?.server!==o.server))return{allow:!1,reason:o.reason||`denied by hook (${o.match})`};return{allow:!0}}catch(r){return{allow:!1,reason:`hook engine failure: ${r instanceof Error?r.message:String(r)}`.slice(0,200)}}}import{homedir as Vn}from"node:os";import{join as Xn}from"node:path";var ka=process.env.ORACLE_PUBLIC_DESKTOP==="1",Lp=ka?process.env.ORACLE_CONFIG_DIR||Xn(Vn(),".config","oracle"):Xn(Vn(),".config","oracle"),Hy=ka?Lp:Xn(Vn(),".config","mad-desk");function Ip(e,t,r=""){let n=process.env[e];if(n!=null&&String(n).trim()!=="")return n;let o=t?process.env[t]:void 0;return o!=null&&String(o).trim()!==""?o:r}var Np=["0","false","off","no"];function Ea(e,t,r=!0){let n=String(Ip(e,t,"")).trim().toLowerCase();return n===""?r:!Np.includes(n)}import{mkdir as Kp,chmod as mr,readFile as Gp,rename as Wp,writeFile as Vp}from"node:fs/promises";import{homedir as Xp}from"node:os";import{dirname as va,join as Jn}from"node:path";import Yp from"sql.js";import{wordlists as $p}from"ethers";var Pp=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),Mp=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],jp=new Set([12,15,18,21,24]);function Up(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return jp.has(t.length)&&t.every(r=>$p.en.getWordIndex(r)>=0)}var Dp=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,Fp=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,Bp=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function Hp(e){let t=Aa(e);return Bp.has(t)||Fp.test(t)}var $t=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function Aa(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function zp(e){let t=Aa(e);return[...Pp].some(r=>t.includes(r))}function qp(e,t,r){if(typeof t=="string"){if(Mp.some(n=>n.test(t))||Up(t))throw new $t(r);if(Dp.test(t)&&!Hp(e))throw new $t(r)}}function Yn(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return qp(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((o,s)=>Yn(o,`${t}[${s}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let n={};for(let o of Object.keys(e).sort()){let s=`${t}.${o}`;if(zp(o))throw new $t(s);e[o]!==void 0&&(n[o]=Yn(e[o],s,o))}return n}function ut(e){return Yn(e)}var Zn=Object.freeze(["project","entity","source","thesis","strategy","simulation","prepared_action","receipt","position"]),Jp=new Set(Zn),Zp=new Set(Zn.slice(0,-1).map((e,t)=>`${e}:${Zn[t+1]}`)),Qp=Jn(process.env.ORACLE_CONFIG_DIR||Jn(Xp(),".config","oracle"),"workspace"),em=Jn(Qp,"artifacts.sqlite");function yr(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(yr).join(",")}]`:`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${yr(e[t])}`).join(",")}}`}function Oa(e){if(!Jp.has(e))throw new TypeError(`unknown artifact type: ${e}`);return e}function hr(e){let t=[];for(;e.step();)t.push(e.getAsObject());return e.free(),t}function gr(e){return e?{id:e.id,type:e.type,createdAt:e.created_at,data:JSON.parse(e.data_json)}:null}async function Ta(e={}){let t=e.path||em;await Kp(va(t),{recursive:!0,mode:448}),await mr(va(t),448);let r;try{r=await Gp(t)}catch(u){if(u.code!=="ENOENT")throw u}let n=await Yp(e.sqlJs||{}),o=r?new n.Database(r):new n.Database;o.run(`
     PRAGMA foreign_keys=ON;
     CREATE TABLE IF NOT EXISTS artifacts (
       id TEXT PRIMARY KEY, type TEXT NOT NULL, created_at TEXT NOT NULL, data_json TEXT NOT NULL