@oracle-agent/oracle 0.22.2 → 0.22.4

package/public/oracle-console/bitcoin-wallets.js

@@ -1,7 +1,6 @@
-// Multi-wallet Bitcoin connector for Oracle Console.
-// Injected providers only - no npm wallet SDK required in the static console.
-// Supported: Xverse, UniSat, Leather, OKX, Phantom, Magic Eden, generic.
-// Signing: PSBT stays in the wallet. Oracle never sees private keys.
+// Multi-wallet Bitcoin address connector for Oracle Console.
+// Injected providers only, no npm wallet SDK required in the static console.
+// Supported: Xverse, UniSat, Leather, OKX, Phantom, Magic Eden.
 
 (function (root) {
   "use strict";
@@ -16,14 +15,7 @@
         const address = accounts && accounts[0];
         if (!address) throw new Error("UniSat returned no address");
         const network = (await provider.getNetwork?.()) || "livenet";
-        return { address, network, provider };
-      },
-      async signPsbt(provider, psbtHex, options = {}) {
-        return provider.signPsbt(psbtHex, options);
-      },
-      async pushPsbt(provider, psbtHex) {
-        if (typeof provider.pushPsbt === "function") return provider.pushPsbt(psbtHex);
-        throw new Error("UniSat pushPsbt unavailable - use Oracle broadcast with raw hex");
+        return { address, network };
       },
     },
     {
@@ -32,16 +24,10 @@
       detect: () => window.okxwallet && window.okxwallet.bitcoin,
       async connect(provider) {
         const result = await provider.connect();
-        const address = result?.address || result?.addresses?.[0] || (Array.isArray(result) && result[0]);
+        const address =
+          result?.address || result?.addresses?.[0] || (Array.isArray(result) && result[0]);
         if (!address) throw new Error("OKX returned no address");
-        return { address, network: result?.network || "livenet", provider };
-      },
-      async signPsbt(provider, psbtHex, options = {}) {
-        return provider.signPsbt(psbtHex, options);
-      },
-      async pushPsbt(provider, psbtHex) {
-        if (typeof provider.pushPsbt === "function") return provider.pushPsbt(psbtHex);
-        throw new Error("OKX pushPsbt unavailable - use Oracle broadcast with raw hex");
+        return { address, network: result?.network || "livenet" };
       },
     },
     {
@@ -52,43 +38,27 @@
         window.BitcoinProvider ||
         (window.xverse && window.xverse.bitcoin),
       async connect(provider) {
-        // Sats Connect request shape when provider.request exists
         if (typeof provider.request === "function") {
-          const res = await provider.request("getAccounts", {
+          const result = await provider.request("getAccounts", {
             purposes: ["payment", "ordinals"],
             message: "Connect to Oracle",
           });
-          const arr = res?.result || res;
-          const payment = Array.isArray(arr) ? arr.find((a) => a.purpose === "payment") || arr[0] : null;
+          const accounts = result?.result || result;
+          const payment = Array.isArray(accounts)
+            ? accounts.find((account) => account.purpose === "payment") || accounts[0]
+            : null;
           const address = payment?.address || payment;
           if (!address) throw new Error("Xverse returned no address");
-          return { address, network: payment?.network || "Mainnet", provider };
+          return { address, network: payment?.network || "Mainnet" };
         }
         if (typeof provider.connect === "function") {
-          const res = await provider.connect("Oracle");
-          const address = res?.addresses?.payment?.address || res?.paymentAddress || res?.address;
+          const result = await provider.connect("Oracle");
+          const address =
+            result?.addresses?.payment?.address || result?.paymentAddress || result?.address;
           if (!address) throw new Error("Xverse returned no address");
-          return { address, network: res?.network || "Mainnet", provider };
-        }
-        throw new Error("Xverse provider has no connect/request method");
-      },
-      async signPsbt(provider, psbtBase64, options = {}) {
-        if (typeof provider.request === "function") {
-          const res = await provider.request("signPsbt", {
-            psbt: psbtBase64,
-            allowedSignHash: options.allowedSignHash,
-            signInputs: options.signInputs,
-            broadcast: false,
-          });
-          return res?.result?.psbt || res?.psbt || res;
+          return { address, network: result?.network || "Mainnet" };
         }
-        if (typeof provider.signPsbt === "function") {
-          return provider.signPsbt(psbtBase64, options);
-        }
-        throw new Error("Xverse signPsbt unavailable");
-      },
-      async pushPsbt() {
-        throw new Error("Xverse: finalize in wallet or broadcast raw hex via Oracle");
+        throw new Error("Xverse provider has no connect or request method");
       },
     },
     {
@@ -96,27 +66,17 @@
       label: "Leather",
       detect: () => window.LeatherProvider || window.HiroWalletProvider || window.btc,
       async connect(provider) {
-        if (typeof provider.request === "function") {
-          const res = await provider.request("getAddresses");
-          const addrs = res?.result?.addresses || res?.addresses || [];
-          const payment = addrs.find((a) => a.type === "p2wpkh" || a.symbol === "BTC") || addrs[0];
-          const address = payment?.address;
-          if (!address) throw new Error("Leather returned no address");
-          return { address, network: payment?.network || "mainnet", provider };
+        if (typeof provider.request !== "function") {
+          throw new Error("Leather provider has no request method");
         }
-        throw new Error("Leather provider has no request method");
-      },
-      async signPsbt(provider, psbtBase64, options = {}) {
-        const res = await provider.request("signPsbt", {
-          hex: options.hex || undefined,
-          base64: psbtBase64,
-          broadcast: false,
-          ...options,
-        });
-        return res?.result?.hex || res?.result?.base64 || res?.hex || res;
-      },
-      async pushPsbt() {
-        throw new Error("Leather: broadcast raw hex via Oracle");
+        const result = await provider.request("getAddresses");
+        const addresses = result?.result?.addresses || result?.addresses || [];
+        const payment =
+          addresses.find((account) => account.type === "p2wpkh" || account.symbol === "BTC") ||
+          addresses[0];
+        const address = payment?.address;
+        if (!address) throw new Error("Leather returned no address");
+        return { address, network: payment?.network || "mainnet" };
       },
     },
     {
@@ -124,17 +84,10 @@
       label: "Phantom",
       detect: () => window.phantom && window.phantom.bitcoin,
       async connect(provider) {
-        const res = await provider.requestAccounts();
-        const address = res?.[0]?.address || res?.[0];
+        const accounts = await provider.requestAccounts();
+        const address = accounts?.[0]?.address || accounts?.[0];
         if (!address) throw new Error("Phantom returned no BTC address");
-        return { address, network: "mainnet", provider };
-      },
-      async signPsbt(provider, psbtHex, options = {}) {
-        const res = await provider.signPSBT(Buffer.from(psbtHex, "hex"), options);
-        return res;
-      },
-      async pushPsbt() {
-        throw new Error("Phantom: broadcast raw hex via Oracle");
+        return { address, network: "mainnet" };
       },
     },
     {
@@ -142,65 +95,49 @@
       label: "Magic Eden",
       detect: () => window.magicEden && window.magicEden.bitcoin,
       async connect(provider) {
-        const res = await provider.connect();
-        const address = res?.address || res?.ordinals?.address || res?.payment?.address;
+        const result = await provider.connect();
+        const address = result?.address || result?.ordinals?.address || result?.payment?.address;
         if (!address) throw new Error("Magic Eden returned no address");
-        return { address, network: "mainnet", provider };
-      },
-      async signPsbt(provider, psbt, options = {}) {
-        return provider.signPsbt(psbt, options);
-      },
-      async pushPsbt() {
-        throw new Error("Magic Eden: broadcast raw hex via Oracle");
+        return { address, network: "mainnet" };
       },
     },
   ];
 
-  function listDetected() {
-    return WALLETS.filter((w) => {
+  function detectedWallets() {
+    return WALLETS.filter((wallet) => {
       try {
-        return !!w.detect();
+        return Boolean(wallet.detect());
       } catch {
         return false;
       }
-    }).map((w) => ({ id: w.id, label: w.label }));
+    });
+  }
+
+  function listDetected() {
+    return detectedWallets().map((wallet) => ({ id: wallet.id, label: wallet.label }));
   }
 
   async function connect(preferredId) {
-    const detected = WALLETS.filter((w) => {
-      try {
-        return !!w.detect();
-      } catch {
-        return false;
-      }
-    });
+    const detected = detectedWallets();
     if (!detected.length) {
       throw new Error(
-        "No Bitcoin wallet detected. Install Xverse, UniSat, Leather, OKX, Phantom, or Magic Eden."
+        "No Bitcoin wallet detected. Install Xverse, UniSat, Leather, OKX, Phantom, or Magic Eden.",
       );
     }
-    const wallet = (preferredId && detected.find((w) => w.id === preferredId)) || detected[0];
-    const provider = wallet.detect();
-    const session = await wallet.connect(provider);
+    const wallet =
+      (preferredId && detected.find((candidate) => candidate.id === preferredId)) || detected[0];
+    const session = await wallet.connect(wallet.detect());
     return {
       walletId: wallet.id,
       walletLabel: wallet.label,
       address: session.address,
       network: session.network,
-      provider: session.provider,
-      wallet,
     };
   }
 
-  async function signPsbt(session, psbt, options = {}) {
-    if (!session?.wallet || !session?.provider) throw new Error("Bitcoin wallet not connected");
-    return session.wallet.signPsbt(session.provider, psbt, options);
-  }
-
   root.OracleBitcoinWallets = {
     listDetected,
     connect,
-    signPsbt,
-    supported: WALLETS.map((w) => ({ id: w.id, label: w.label })),
+    supported: WALLETS.map((wallet) => ({ id: wallet.id, label: wallet.label })),
   };
 })(typeof window !== "undefined" ? window : globalThis);

package/public/oracle-console/index.html

@@ -29,7 +29,7 @@
 
     <section id="btc-panel" class="permission-panel btc-panel" hidden>
       <h2 class="panel-title">Bitcoin lane</h2>
-      <p class="panel-note">Actual BTC L1 + ordinals/runes via Satflow. Sign in wallet (Xverse / UniSat / Leather / OKX / Phantom). Magic Eden BTC marketplace is dead. Oracle never holds keys.</p>
+      <p class="panel-note">Actual BTC L1 + ordinals/runes via Satflow. Connect an address-only wallet (Xverse / UniSat / Leather / OKX / Phantom). Magic Eden BTC marketplace is dead. Oracle never holds keys.</p>
       <dl class="panel-grid">
         <dt>Wallet</dt>
         <dd id="btc-wallet-label">.</dd>

package/dist/assets/skills/multichain-exec-desk.md

@@ -1,33 +0,0 @@
----
-name: multichain-exec-desk
-description: Use for cross-chain or multi-chain execution tasks.
----
-
-# Multichain execution desk
-
-## Chain routing
-- RH 4663 → oracle owns it (rhbot executor)
-- Hyperliquid → hl-info / hl-ws (read-only, keyless)
-- EVM chains → mad_exec evm_* tools
-- Solana → Jupiter tools
-- Bitcoin → btc_* tools
-
-## Execution flow
-1. `data evm_chains` — list supported chains
-2. `data dex_search` — resolve token
-3. `exec evm_quote` — quote swap
-4. `data best_swap_route` — compare aggregators
-5. `exec evm_prepare` — build unsigned tx
-6. `exec evm_simulate` — simulate (optional but recommended)
-7. `exec evm_sign` — sign (gated)
-8. `exec evm_send` — broadcast (gated)
-
-## Cross-chain
-- `data best_bridge_route` — compare bridge providers
-- `data prepare_best_bridge_route` — build signable bridge tx
-- `data rfq_quote` — RFQ/intent routing for large sizes
-
-## Safety
-- Verify destination chainId matches intent
-- Check bridge provider is live (data health first)
-- Never route through unverified contracts

package/dist/cli/commands/credential.mjs

@@ -1 +0,0 @@
-var r={name:"credential",summary:"OS credential store glue",group:"sign",usage:"oracle credential <get|set|delete> ...",async run(e){return e.dispatchOperator("oracle-credential",e.argv,{appendHintOnError:!0})}};export{r as default};

package/dist/cli/commands/runner.mjs

@@ -1 +0,0 @@
-var n={name:"runner",summary:"action runner daemon",group:"sign",usage:"oracle runner [--interval-ms N ...]",async run(r){return r.dispatchOperator("oracle-runner",r.argv,{appendHintOnError:!0})}};export{n as default};

package/dist/cli/commands/sign.mjs

@@ -1,5 +0,0 @@
-var i={name:"sign",summary:"check signer status (key handling requires the operator package)",group:"sign",usage:"oracle sign <init|doctor|import> ...",async run(r){let e=r.argv[0];return e==="init"?r.dispatchOperator("oracle-agentic-init",r.argv.slice(1),{appendHintOnError:!0}):e==="doctor"?r.dispatchOperator("oracle-agentic-doctor",r.argv.slice(1),{appendHintOnError:!0}):e==="import"?r.dispatchOperator("oracle-agentic-init",[],{appendHintOnError:!0}):(process.stderr.write(`usage: oracle sign <init|doctor|import> ...
-  oracle sign init      provision keys + policy (interactive)
-  oracle sign import    import an existing EVM private key
-  oracle sign doctor    check local signer readiness
-`),1)}};export{i as default};

package/dist/cli/commands/signer.mjs

@@ -1 +0,0 @@
-var e={name:"signer",summary:"loopback signer daemon",group:"sign",usage:"oracle signer [--port N ...]",async run(r){return r.dispatchOperator("oracle-signer",r.argv,{appendHintOnError:!0})}};export{e as default};

package/dist/cli/commands/vault.mjs

@@ -1 +0,0 @@
-var e={name:"vault",summary:"encrypt local key files at rest",group:"sign",usage:"oracle vault <encrypt|rekey|inspect|decrypt> ...",async run(r){return r.dispatchOperator("oracle-vault",r.argv,{appendHintOnError:!0})}};export{e as default};

package/dist/gateway/telegram-exact-action-callbacks.mjs

@@ -1 +0,0 @@
-import{createHash as $,randomBytes as C}from"node:crypto";import{chmodSync as h,mkdirSync as R,readFileSync as x,renameSync as H,rmSync as k,writeFileSync as L}from"node:fs";import{homedir as D}from"node:os";import{join as O}from"node:path";var m="oa1",j=12,F=1440*60*1e3,T=new Set(["evm-swap","sol","btc"]);function c(e){throw new Error(`oracle-telegram-callback: ${e}`)}function p(e,a){return(!e||typeof e!="object"||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype)&&c(`${a} must be an object`),e}function v(e,a){try{return JSON.parse(JSON.stringify(e))}catch{c(`${a} must be JSON-serializable`)}}function B(e,a){let i=`${m}:${e}:${a}`;return Buffer.byteLength(i,"utf8")>=64&&c("callback ID exceeds Telegram's 64-byte limit"),i}function P(e){if(e.ownerId)return String(e.ownerId);let a=e.ownerConfig?.owner;if(typeof a=="string"&&a.startsWith("telegram:"))return a.slice(9);if(a?.platform==="telegram"&&a.userId)return String(a.userId);let i=String(e.env?.ORACLE_OWNER_TELEGRAM??process.env.ORACLE_OWNER_TELEGRAM??"").trim();if(i)return i;c("an exact Telegram owner identity is required")}function z(e={}){let a=e.control,i=a?.oracle_control_arm?t=>a.oracle_control_arm(t):a?.call?t=>a.call("oracle_control_arm",t):null,g=a?.oracle_control_confirm?t=>a.oracle_control_confirm(t):a?.call?t=>a.call("oracle_control_confirm",t):null;(!i||!g)&&c("bounded arm/confirm control is required");let b=P(e),E=e.now??Date.now,y=e.randomBytes??C,u=e.callbackDir??O(D(),".config","oracle","telegram-callbacks");R(u,{recursive:!0,mode:448}),h(u,448);function d(t){return O(u,`${$("sha256").update(t).digest("hex")}.json`)}function N(t){try{return x(d(t)),!0}catch(o){if(o?.code==="ENOENT")return!1;throw o}}function S(t,o){let r=d(t),n=`${r}.${process.pid}.${y(6).toString("hex")}.tmp`;L(n,JSON.stringify(o),{mode:384,flag:"wx"}),h(n,384),H(n,r),h(r,384)}function M(t){try{return JSON.parse(x(d(t),"utf8"))}catch(o){if(o?.code==="ENOENT")return null;c("callback state is unreadable")}}function _(t,o,r){let n=M(t);return(!n||n.kind!==o)&&c("unknown or consumed callback"),String(r??"")!==n.chatId&&c("chat mismatch"),E()>=n.expiresAtMs&&(k(d(t),{force:!0}),c("callback expired")),k(d(t),{force:!0}),n}function I(t){for(let o=0;o<8;o++){let r=B(t,y(j).toString("base64url"));if(!N(r))return r}c("could not allocate a unique callback ID")}return Object.freeze({issue(t,o={}){let r=v(p(t,"action"),"action"),n=p(r.intent,"action.intent"),s=String(n.surface??"");T.has(s)||c(`unsupported surface ${s||"missing"}`),(s==="sol"||s==="btc")&&!r.prepared&&c(`${s} action requires a prepared envelope`);let l=o.ttlMs??12e4;(!Number.isSafeInteger(l)||l<1||l>F)&&c("ttlMs is outside the bounded range");let f=E()+l,A=String(o.chatId??b);A||c("an exact Telegram chat identity is required");let w=I("a");return S(w,{kind:"arm",expiresAtMs:f,chatId:A,action:{...r,expiresAt:new Date(f).toISOString(),maxExecutions:1}}),w},async handle(t){p(t,"callback request"),(t.platform!=="telegram"||String(t.senderId??"")!==b)&&c("owner mismatch");let o=String(t.callbackData??"");if(o.startsWith(`${m}:a:`)){let r=_(o,"arm",t.chatId),n=await i(r.action);(n?.state??n?.status)!=="pending_confirmation"&&c("arm did not create a pending action"),n?.maxExecutions!=null&&n.maxExecutions!==1&&c("arm did not create a one-shot action"),(!n?.id||!/^[a-f0-9]{64}$/i.test(String(n.intentHash??"")))&&c("arm did not return an exact intent hash");let l=I("c"),f=Date.parse(n.expiresAt??"");return S(l,{kind:"confirm",expiresAtMs:Number.isFinite(f)?Math.min(r.expiresAtMs,f):r.expiresAtMs,chatId:r.chatId,actionId:n.id,intentHash:n.intentHash}),{phase:"pending_confirmation",callbackData:l,actionId:n.id,intentHash:n.intentHash}}if(o.startsWith(`${m}:c:`)){let r=_(o,"confirm",t.chatId),n=await g({id:r.actionId,intentHash:r.intentHash}),s=n?.state??n?.status;return(n?.id!==r.actionId||n?.intentHash!==r.intentHash||s!=="active")&&c("control confirmed a different action"),{phase:"active",actionId:n.id,intentHash:n.intentHash}}c("unknown or consumed callback")}})}var K=m,U=Object.freeze([...T]);export{K as TELEGRAM_EXACT_ACTION_CALLBACK_PREFIX,U as TELEGRAM_EXACT_ACTION_SURFACES,z as createTelegramExactActionCallbacks};