@oracle-agent/oracle 0.24.2 → 0.24.4

package/dist/bin/oracle-gateway.mjs

@@ -1,23 +1,26 @@
 #!/usr/bin/env node
-var J=Object.defineProperty;var C=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,r)=>(typeof require<"u"?require:t)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var d=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(o){throw r=[o],o}};var g=(e,t)=>{for(var r in t)J(e,r,{get:t[r],enumerable:!0})};import _ from"node:fs";import Y from"node:os";import u from"node:path";import{fileURLToPath as Z}from"node:url";function L(){return process.env.ORACLE_FAKE_HOME||Y.homedir()}function V(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function y(){return V()?process.env.ORACLE_CONFIG_DIR||u.join(L(),".config","oracle"):u.join(L(),".config","oracle")}function X(){return u.join(y(),"desk.json")}function ee(){return u.join(y(),"env")}function l({force:e=!1}={}){if(l._done&&!e)return l._result||null;l._done=!0;let t={},r=(n,a)=>{if(a==null)return;let s=String(a).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,t[n]=s))};try{let n=ee();if(_.existsSync(n))for(let a of _.readFileSync(n,"utf8").split(/\r?\n/)){let s=a.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let i=s[2];(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r(s[1],i)}}catch{}try{let n=X();if(_.existsSync(n)){let a=JSON.parse(_.readFileSync(n,"utf8"));a&&typeof a=="object"&&(r("ORACLE_DESK_URL",a.deskUrl||a.dataUrl||a.url),r("ORACLE_DATA_URL",a.dataUrl||a.deskUrl||a.url),r("ORACLE_API_URL",a.apiUrl||a.dataUrl||a.deskUrl),r("ORACLE_PUBLIC_URL",a.publicUrl||a.deskUrl||a.dataUrl),r("ORACLE_EXEC_URL",a.execUrl),r("MAD_DESK_URL",a.deskUrl||a.dataUrl))}}catch{}let o=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return o&&(r("ORACLE_DESK_URL",o),r("ORACLE_DATA_URL",o),r("ORACLE_API_URL",o),r("ORACLE_PUBLIC_URL",o),r("MAD_DESK_URL",o)),l._result=Object.keys(t).length?t:null,l._result}var Q,$e,v=d(()=>{Q=u.dirname(Z(import.meta.url)),$e=u.resolve(Q,"../..");try{l()}catch{}});function E(e){return String(e||"").trim()||void 0}function te(e,{required:t=!1}={}){let r=E(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!re.has(r))throw new Error(`unsupported provider: ${r}`);return r}function oe(e,{required:t=!1}={}){let r=E(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function ne(e){let t=E(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let o=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=o==="localhost"||o==="127.0.0.1"||o==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function b({provider:e,model:t,baseUrl:r}={},{requireModel:o=!1}={}){let n=te(e),a=oe(t,{required:o});if(n==="custom")return{provider:n,...a?{model:a}:{},baseUrl:ne(r)};if(E(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...a?{model:a}:{}}}var re,x=d(()=>{re=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"])});import U from"node:fs";import ae from"node:path";function ie(){return ae.join(y(),"model.json")}function f(e){return String(e||"").trim()||void 0}function ce(e={}){let t=f(e.backend)?.toLowerCase()||"auto",r=b({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),o=f(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),a=f(e.reasoningEffort),s=f(e.computeHost||e.remoteHost),i=f(e.computeUser||e.remoteUser),c=f(e.computePath||e.remotePath);if(!se.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(o&&!/^[A-Z][A-Z0-9_]*$/.test(o))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...o?{apiKeyEnv:o}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...a?{reasoningEffort:a}:{},...s?{computeHost:s}:{},...i?{computeUser:i}:{},...c?{computePath:c}:{}}}function k(){let e=ie();if(!U.existsSync(e))return null;try{return ce(JSON.parse(U.readFileSync(e,"utf8")))}catch{return null}}var se,j=d(()=>{v();x();se=new Set(["auto","standalone","hermes","remote","arch"])});import{spawn as de}from"node:child_process";import{join as P}from"node:path";import{homedir as D}from"node:os";function ue(e,t=process.env){let r=String(t[`ORACLE_OWNER_${String(e).toUpperCase()}`]||""),o=String(t.ORACLE_OWNER_IDS||"");return new Set(`${r},${o}`.split(",").map(n=>n.trim()).filter(Boolean))}function O({platform:e,senderId:t},r=process.env){let o=String(t||"").trim();return o?ue(e,r).has(o):!1}function fe(e={}){return!!(e.forwarded||e.forward_from||e.forward_from_chat||e.forward_origin||e.forward_sender_name||e.forward_date)}function me({readConfig:e=k}={}){let t=e();return t?t.backend==="hermes"?{ok:!1,error:"model config delegates to hermes; the gateway runs Oracle's native loop. Set a standalone backend: oracle model --backend standalone"}:t.model?{ok:!0,provider:t.provider,model:t.model}:{ok:!1,error:"model config has no model \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}:{ok:!1,error:"gateway has no model configured \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}}async function m({platform:e,chatId:t,senderId:r,text:o,userName:n,meta:a={}}){if(!O({platform:e,senderId:r}))return process.stderr.write(`gateway: denied non-owner sender ${e}:${String(r||"unknown")}
-`),S;if(fe(a))return process.stderr.write(`gateway: dropped forwarded message on ${e}
-`),null;let s=o.toLowerCase().trim();return/\b(buy|sell|swap|bridge|send|transfer|balance|portfolio|watch|quote|price)\b/.test(s)?we({platform:e,chatId:t,senderId:r,text:o,userName:n}):he({platform:e,chatId:t,senderId:r,text:o,userName:n})}function I(e,{timeout:t=12e4}={}){return new Promise(r=>{let o=de(process.execPath,[le,...e],{stdio:["ignore","pipe","pipe"],timeout:t,env:{...process.env,ORACLE_CONFIG_DIR:pe}}),n="",a="";o.stdout.on("data",s=>n+=s.toString()),o.stderr.on("data",s=>a+=s.toString()),o.on("close",s=>r({code:s,out:n.trim(),err:a.trim()}))})}async function we({text:e}){let t=await I(["route","swap","--text",e],{timeout:3e4});if(t.code===0&&t.out)try{return ge(JSON.parse(t.out))}catch{return t.out}return`Trade routing failed. Try: \`${e}\` again.`}async function he({text:e}){let t=me();if(!t.ok)return`Oracle is not configured yet: ${t.error}`;let r=await I(["chat","-q",e]);return r.code===0&&r.out?r.out:r.err||"Oracle could not answer that. Try again."}function ge(e){return e.error?`\u274C ${e.error}`:e.tx?`\u2705 Trade prepared: \`${e.tx.slice(0,20)}...\`
-Sign and broadcast from your own wallet.`:e.quote?`\u{1F4B1} ${e.quote}`:e.portfolio?`\u{1F4CA} ${e.portfolio}`:JSON.stringify(e,null,2)}var pe,le,S,w=d(()=>{j();pe=process.env.ORACLE_CONFIG_DIR||P(D(),".config","oracle"),le=process.env.ORACLE_CLI_ENTRY||P(D(),".local","share","oracle-stable","node_modules","@oracle-agent","oracle","bin","oracle.mjs");S="Oracle is self-hostable. Install your own instance: npm install -g @oracle-agent/oracle"});var N={};g(N,{telegram:()=>_e});async function _e(e){let{Bot:t}=await import("grammy"),r=new t(e.token);return r.command("start",o=>{let n=String(o.from?.id||o.chat.id);return O({platform:"telegram",senderId:n})?o.reply("Oracle ready. Ask me anything \u2014 swap, bridge, portfolio, watch."):o.reply(S)}),r.on("message:text",async o=>{let n=String(o.chat.id),a=String(o.from?.id||n),s=o.message.text;try{o.replyWithChatAction("typing").catch(()=>{});let i=await m({platform:"telegram",chatId:n,senderId:a,text:s,userName:o.from?.username||o.from?.first_name||"user",meta:{forward_origin:o.message.forward_origin,forward_from:o.message.forward_from,forward_from_chat:o.message.forward_from_chat,forward_sender_name:o.message.forward_sender_name,forward_date:o.message.forward_date}});i&&await o.reply(i,{parse_mode:"Markdown"})}catch(i){process.stderr.write(`telegram-gateway: ${i.message}
-`),await o.reply("Something went wrong. Try again.").catch(()=>{})}}),r.start(),{platform:"telegram",bot:r}}var T=d(()=>{w()});var $={};g($,{discord:()=>ye});async function ye(e){let{Client:t,GatewayIntentBits:r}=await import("discord.js"),o=new t({intents:[r.Guilds,r.GuildMessages,r.MessageContent,r.DirectMessages]});return o.on("messageCreate",async n=>{if(n.author.bot)return;let a=n.channel.id,s=n.author.id,i=n.content;try{let c=!n.guild,p=n.mentions.has(o.user.id);if(!c&&!p)return;n.channel.sendTyping().catch(()=>{});let h=await m({platform:"discord",chatId:a,senderId:s,text:i.replace(`<@${o.user.id}>`,"").trim(),userName:n.author.username,meta:{forwarded:n.reference?.type===1||Array.isArray(n.messageSnapshots)&&n.messageSnapshots.length>0}});h&&await n.reply(h).catch(()=>{})}catch(c){process.stderr.write(`discord-gateway: ${c.message}
-`)}}),await o.login(e.token),{platform:"discord",client:o}}var M=d(()=>{w()});var q={};g(q,{whatsapp:()=>Oe});import{join as A}from"node:path";import{homedir as Ee}from"node:os";import{spawnSync as Re}from"node:child_process";function Ce(){try{return C.resolve("whatsapp-web.js"),C.resolve("qrcode-terminal"),!0}catch{return process.stderr.write(`whatsapp-gateway: installing dependencies...
-`),Re("npm",["install","whatsapp-web.js","qrcode-terminal"],{cwd:A(F,"gateway"),stdio:"inherit",timeout:6e4}).status===0}}async function Oe(e){if(!Ce())return process.stderr.write(`whatsapp-gateway: failed to install dependencies
-`),{platform:"whatsapp",status:"failed"};let{Client:t,LocalAuth:r}=await import("whatsapp-web.js"),{generate:o}=await import("qrcode-terminal"),n=new t({authStrategy:new r({dataPath:A(F,".wwebjs_auth")}),puppeteer:{headless:!0,args:["--no-sandbox"]}});return n.on("qr",a=>{process.stderr.write(`
+var oe=Object.defineProperty;var v=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(o,r)=>(typeof require<"u"?require:o)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var l=(e,o,r)=>()=>{if(r)throw r[0];try{return e&&(o=e(e=0)),o}catch(t){throw r=[t],t}};var y=(e,o)=>{for(var r in o)oe(e,r,{get:o[r],enumerable:!0})};import _ from"node:fs";import ne from"node:os";import m from"node:path";import{fileURLToPath as ae}from"node:url";function L(){return process.env.ORACLE_FAKE_HOME||ne.homedir()}function ie(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function S(){return ie()?process.env.ORACLE_CONFIG_DIR||m.join(L(),".config","oracle"):m.join(L(),".config","oracle")}function ce(){return m.join(S(),"desk.json")}function le(){return m.join(S(),"env")}function f({force:e=!1}={}){if(f._done&&!e)return f._result||null;f._done=!0;let o={},r=(n,a)=>{if(a==null)return;let s=String(a).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,o[n]=s))};try{let n=le();if(_.existsSync(n))for(let a of _.readFileSync(n,"utf8").split(/\r?\n/)){let s=a.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let i=s[2];(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r(s[1],i)}}catch{}try{let n=ce();if(_.existsSync(n)){let a=JSON.parse(_.readFileSync(n,"utf8"));a&&typeof a=="object"&&(r("ORACLE_DESK_URL",a.deskUrl||a.dataUrl||a.url),r("ORACLE_DATA_URL",a.dataUrl||a.deskUrl||a.url),r("ORACLE_API_URL",a.apiUrl||a.dataUrl||a.deskUrl),r("ORACLE_PUBLIC_URL",a.publicUrl||a.deskUrl||a.dataUrl),r("ORACLE_EXEC_URL",a.execUrl),r("MAD_DESK_URL",a.deskUrl||a.dataUrl))}}catch{}let t=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return t&&(r("ORACLE_DESK_URL",t),r("ORACLE_DATA_URL",t),r("ORACLE_API_URL",t),r("ORACLE_PUBLIC_URL",t),r("MAD_DESK_URL",t)),f._result=Object.keys(o).length?o:null,f._result}var se,lr,x=l(()=>{se=m.dirname(ae(import.meta.url)),lr=m.resolve(se,"../..");try{f()}catch{}});function E(e){return String(e||"").trim()||void 0}function pe(e,{required:o=!1}={}){let r=E(e)?.toLowerCase();if(!r){if(o)throw new Error("model provider is required");return}if(!de.has(r))throw new Error(`unsupported provider: ${r}`);return r}function ue(e,{required:o=!1}={}){let r=E(e);if(!r){if(o)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function fe(e){let o=E(e);if(!o||o.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(o)}catch{throw new Error("invalid custom base URL")}let t=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=t==="localhost"||t==="127.0.0.1"||t==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function U({provider:e,model:o,baseUrl:r}={},{requireModel:t=!1}={}){let n=pe(e),a=ue(o,{required:t});if(n==="custom")return{provider:n,...a?{model:a}:{},baseUrl:fe(r)};if(E(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...a?{model:a}:{}}}var de,j=l(()=>{de=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"])});import $ from"node:fs";import me from"node:path";function we(){return me.join(S(),"model.json")}function h(e){return String(e||"").trim()||void 0}function ge(e={}){let o=h(e.backend)?.toLowerCase()||"auto",r=U({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:o==="standalone"}),t=h(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),a=h(e.reasoningEffort),s=h(e.computeHost||e.remoteHost),i=h(e.computeUser||e.remoteUser),c=h(e.computePath||e.remotePath);if(!he.has(o))throw new Error(`unsupported backend: ${o}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(o))throw new Error("remote compute backends are disabled in the public desktop");if(t&&!/^[A-Z][A-Z0-9_]*$/.test(t))throw new Error("api key env must be an uppercase environment variable name");if(o==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:o,...r,...t?{apiKeyEnv:t}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...a?{reasoningEffort:a}:{},...s?{computeHost:s}:{},...i?{computeUser:i}:{},...c?{computePath:c}:{}}}function P(){let e=we();if(!$.existsSync(e))return null;try{return ge(JSON.parse($.readFileSync(e,"utf8")))}catch{return null}}var he,D=l(()=>{x();j();he=new Set(["auto","standalone","hermes","remote","arch"])});import{execFile as ye}from"node:child_process";import{existsSync as _e,mkdirSync as Se,readFileSync as I,realpathSync as Ee,writeFileSync as Ce}from"node:fs";import d from"node:path";import{promisify as Oe}from"node:util";import{fileURLToPath as N}from"node:url";function be(e=import.meta.url){try{let o=Ee(N(e)),r=`${d.sep}node_modules${d.sep}`,t=o.lastIndexOf(r);if(t>0)return{root:o.slice(0,t),managed:!0}}catch{}return{root:null,managed:!1}}function b(e=import.meta.url){try{let o=d.dirname(N(e));for(let r=0;r<8;r+=1){let t=d.join(o,"package.json");if(_e(t)){let a=JSON.parse(I(t,"utf8"));if(a?.name===A&&a.version)return a.version}let n=d.dirname(o);if(n===o)break;o=n}}catch{return null}return null}function ke(e,o){let r=a=>String(a).replace(/^v/,"").split("-")[0].split(".").map(s=>Number.parseInt(s,10)||0),t=r(e),n=r(o);for(let a=0;a<Math.max(t.length,n.length);a+=1){let s=t[a]??0,i=n[a]??0;if(s>i)return 1;if(s<i)return-1}return 0}function T(e){let o=e?.stateDir||d.join(process.env.HOME||".",".oracle");return d.join(o,"update-check.json")}function Le(e){try{return JSON.parse(I(T(e),"utf8"))}catch{return null}}function xe(e,o){try{let r=T(e);Se(d.dirname(r),{recursive:!0}),Ce(r,`${JSON.stringify(o,null,2)}
+`)}catch{}}async function Ue({timeoutMs:e=4e3}={}){try{let o=new AbortController,r=setTimeout(()=>o.abort(),e),t=await fetch(`${ve}/${encodeURIComponent(A)}/latest`,{signal:o.signal});return clearTimeout(r),t.ok&&(await t.json())?.version||null}catch{return null}}async function M({paths:e,force:o=!1,timeoutMs:r=4e3}={}){let t=b(),n=o?null:Le(e),s=n&&Date.now()-(n.checkedAt||0)<Ae?n.latest:null;return s||(s=await Ue({timeoutMs:r}),s&&xe(e,{latest:s,checkedAt:Date.now()})),!t||!s?{current:t,latest:s,updateAvailable:!1,checked:!!s}:{current:t,latest:s,updateAvailable:ke(s,t)>0,checked:!0}}async function F({version:e="latest",dryRun:o=!1}={}){let{root:r,managed:t}=be();if(!t||!r)return{ok:!1,reason:"unmanaged",message:`oracle is not running from a resolvable node_modules tree (source checkout or linked dev install).
+Update it the same way you installed it \u2014 git pull, or npm install -g @oracle-agent/oracle@latest.`};let n=`${A}@${e}`,a=["install","--prefix",r,"--no-audit","--no-fund",n];if(o)return{ok:!0,dryRun:!0,root:r,command:`npm ${a.join(" ")}`};try{let{stdout:s,stderr:i}=await Re("npm",a,{timeout:3e5,maxBuffer:16777216});return{ok:!0,root:r,stdout:s,stderr:i}}catch(s){return{ok:!1,reason:"npm-failed",root:r,message:s?.stderr||s?.message||"npm install failed"}}}var Re,A,ve,Ae,G=l(()=>{Re=Oe(ye),A="@oracle-agent/oracle",ve="https://registry.npmjs.org",Ae=1440*60*1e3});import{spawn as je}from"node:child_process";import{join as q}from"node:path";import{homedir as W}from"node:os";function De(e,o=process.env){let r=String(o[`ORACLE_OWNER_${String(e).toUpperCase()}`]||""),t=String(o.ORACLE_OWNER_IDS||"");return new Set(`${r},${t}`.split(",").map(n=>n.trim()).filter(Boolean))}function C({platform:e,senderId:o},r=process.env){let t=String(o||"").trim();return t?De(e,r).has(t):!1}function Ie(e){let o=String(e||"").trim();if(!o)return null;let r=o.replace(/^\/update(?:@[\w_]+)?\b/i,"update");return/^(?:oracle\s+)?update\s+--check\s*$/i.test(r)?{checkOnly:!0}:/^(?:oracle\s+)?update\s*$/i.test(r)?{checkOnly:!1}:null}async function Ne(e,{check:o=M,update:r=F,versionOf:t=b}={}){let n=await o({force:!0});if(e.checkOnly)return n.checked?n.updateAvailable?`oracle ${n.current} \u2192 ${n.latest} available. Send /update to install.`:`oracle ${n.current} is up to date`:`oracle ${n.current||"?"} \u2014 could not reach npm`;if(n.checked&&!n.updateAvailable)return`oracle ${n.current} is already up to date`;let a=n.latest||"latest",s=await r({version:a==="latest"?"latest":a});if(!s.ok)return`oracle update failed: ${s.message}`;let i=t();return[`oracle ${n.current||"?"} \u2192 ${i||a}`,"Restart the gateway to load it: oracle gateway"].join(`
+`)}function Te(e={}){return!!(e.forwarded||e.forward_from||e.forward_from_chat||e.forward_origin||e.forward_sender_name||e.forward_date)}function Me({readConfig:e=P}={}){let o=e();return o?o.backend==="hermes"?{ok:!1,error:"model config delegates to hermes; the gateway runs Oracle's native loop. Set a standalone backend: oracle model --backend standalone"}:o.model?{ok:!0,provider:o.provider,model:o.model}:{ok:!1,error:"model config has no model \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}:{ok:!1,error:"gateway has no model configured \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}}async function u({platform:e,chatId:o,senderId:r,text:t,userName:n,meta:a={},updater:s}={}){if(!C({platform:e,senderId:r}))return process.stderr.write(`gateway: denied non-owner sender ${e}:${String(r||"unknown")}
+`),O;if(Te(a))return process.stderr.write(`gateway: dropped forwarded message on ${e}
+`),null;let i=Ie(t);if(i)return Ne(i,s);let c=t.toLowerCase().trim();return/\b(buy|sell|swap|bridge|send|transfer|balance|portfolio|watch|quote|price)\b/.test(c)?Fe({platform:e,chatId:o,senderId:r,text:t,userName:n}):Ge({platform:e,chatId:o,senderId:r,text:t,userName:n})}function H(e,{timeout:o=12e4}={}){return new Promise(r=>{let t=je(process.execPath,[Pe,...e],{stdio:["ignore","pipe","pipe"],timeout:o,env:{...process.env,ORACLE_CONFIG_DIR:$e}}),n="",a="";t.stdout.on("data",s=>n+=s.toString()),t.stderr.on("data",s=>a+=s.toString()),t.on("close",s=>r({code:s,out:n.trim(),err:a.trim()}))})}async function Fe({text:e}){let o=await H(["route","swap","--text",e],{timeout:3e4});if(o.code===0&&o.out)try{return qe(JSON.parse(o.out))}catch{return o.out}return`Trade routing failed. Try: \`${e}\` again.`}async function Ge({text:e}){let o=Me();if(!o.ok)return`Oracle is not configured yet: ${o.error}`;let r=await H(["chat","-q",e]);return r.code===0&&r.out?r.out:r.err||"Oracle could not answer that. Try again."}function qe(e){return e.error?`\u274C ${e.error}`:e.tx?`\u2705 Trade prepared: \`${e.tx.slice(0,20)}...\`
+Sign and broadcast from your own wallet.`:e.quote?`\u{1F4B1} ${e.quote}`:e.portfolio?`\u{1F4CA} ${e.portfolio}`:JSON.stringify(e,null,2)}var $e,Pe,O,w=l(()=>{D();G();$e=process.env.ORACLE_CONFIG_DIR||q(W(),".config","oracle"),Pe=process.env.ORACLE_CLI_ENTRY||q(W(),".local","share","oracle-stable","node_modules","@oracle-agent","oracle","bin","oracle.mjs");O="Oracle is self-hostable. Install your own instance: npm install -g @oracle-agent/oracle"});var B={};y(B,{telegram:()=>We});async function We(e){let{Bot:o}=await import("grammy"),r=new o(e.token);return r.command("start",t=>{let n=String(t.from?.id||t.chat.id);return C({platform:"telegram",senderId:n})?t.reply("Oracle ready. Ask me anything \u2014 swap, bridge, portfolio, watch. /update installs latest."):t.reply(O)}),r.command("update",async t=>{let n=String(t.from?.id||t.chat.id),a=String(t.chat.id);if(!C({platform:"telegram",senderId:n}))return t.reply(O);if(t.message.forward_origin||t.message.forward_from||t.message.forward_date)return;t.replyWithChatAction("typing").catch(()=>{});let s=await u({platform:"telegram",chatId:a,senderId:n,text:t.match?`update ${t.match}`.trim():"update",userName:t.from?.username||t.from?.first_name||"user"});if(s)return t.reply(s)}),r.on("message:text",async t=>{let n=String(t.chat.id),a=String(t.from?.id||n),s=t.message.text;try{t.replyWithChatAction("typing").catch(()=>{});let i=await u({platform:"telegram",chatId:n,senderId:a,text:s,userName:t.from?.username||t.from?.first_name||"user",meta:{forward_origin:t.message.forward_origin,forward_from:t.message.forward_from,forward_from_chat:t.message.forward_from_chat,forward_sender_name:t.message.forward_sender_name,forward_date:t.message.forward_date}});i&&await t.reply(i,{parse_mode:"Markdown"})}catch(i){process.stderr.write(`telegram-gateway: ${i.message}
+`),await t.reply("Something went wrong. Try again.").catch(()=>{})}}),r.start(),{platform:"telegram",bot:r}}var K=l(()=>{w()});var z={};y(z,{discord:()=>He});async function He(e){let{Client:o,GatewayIntentBits:r}=await import("discord.js"),t=new o({intents:[r.Guilds,r.GuildMessages,r.MessageContent,r.DirectMessages]});return t.on("messageCreate",async n=>{if(n.author.bot)return;let a=n.channel.id,s=n.author.id,i=n.content;try{let c=!n.guild,p=n.mentions.has(t.user.id);if(!c&&!p)return;n.channel.sendTyping().catch(()=>{});let g=await u({platform:"discord",chatId:a,senderId:s,text:i.replace(`<@${t.user.id}>`,"").trim(),userName:n.author.username,meta:{forwarded:n.reference?.type===1||Array.isArray(n.messageSnapshots)&&n.messageSnapshots.length>0}});g&&await n.reply(g).catch(()=>{})}catch(c){process.stderr.write(`discord-gateway: ${c.message}
+`)}}),await t.login(e.token),{platform:"discord",client:t}}var J=l(()=>{w()});var V={};y(V,{whatsapp:()=>Je});import{join as k}from"node:path";import{homedir as Be}from"node:os";import{spawnSync as Ke}from"node:child_process";function ze(){try{return v.resolve("whatsapp-web.js"),v.resolve("qrcode-terminal"),!0}catch{return process.stderr.write(`whatsapp-gateway: installing dependencies...
+`),Ke("npm",["install","whatsapp-web.js","qrcode-terminal"],{cwd:k(Y,"gateway"),stdio:"inherit",timeout:6e4}).status===0}}async function Je(e){if(!ze())return process.stderr.write(`whatsapp-gateway: failed to install dependencies
+`),{platform:"whatsapp",status:"failed"};let{Client:o,LocalAuth:r}=await import("whatsapp-web.js"),{generate:t}=await import("qrcode-terminal"),n=new o({authStrategy:new r({dataPath:k(Y,".wwebjs_auth")}),puppeteer:{headless:!0,args:["--no-sandbox"]}});return n.on("qr",a=>{process.stderr.write(`
 WhatsApp: scan this QR code in WhatsApp \u2192 Linked Devices:
 
-`),o(a,{small:!0}),process.stderr.write(`
+`),t(a,{small:!0}),process.stderr.write(`
 `)}),n.on("ready",()=>{process.stderr.write(`whatsapp-gateway: connected
-`)}),n.on("message",async a=>{if(a.fromMe)return;let s=a.from,i=a.author||a.from,c=a.body;try{let p=await m({platform:"whatsapp",chatId:s,senderId:i,text:c,userName:a._data?.notifyName||"user",meta:{forwarded:a.isForwarded||a._data?.isForwarded,forward_date:a._data?.forwardingScore?!0:void 0}});if(p){let h=p.replace(/\*\*/g,"*").replace(/```[\s\S]*?```/g,"[code]").replace(/`/g,"");await a.reply(h)}}catch(p){process.stderr.write(`whatsapp-gateway: ${p.message}
-`)}}),await n.initialize(),{platform:"whatsapp",client:n}}var F,G=d(()=>{w();F=process.env.ORACLE_CONFIG_DIR||A(Ee(),".config","oracle")});var W={};g(W,{signal_:()=>Se});async function Se(e){return process.stderr.write(`signal-gateway: requires signal-cli binary
+`)}),n.on("message",async a=>{if(a.fromMe)return;let s=a.from,i=a.author||a.from,c=a.body;try{let p=await u({platform:"whatsapp",chatId:s,senderId:i,text:c,userName:a._data?.notifyName||"user",meta:{forwarded:a.isForwarded||a._data?.isForwarded,forward_date:a._data?.forwardingScore?!0:void 0}});if(p){let g=p.replace(/\*\*/g,"*").replace(/```[\s\S]*?```/g,"[code]").replace(/`/g,"");await a.reply(g)}}catch(p){process.stderr.write(`whatsapp-gateway: ${p.message}
+`)}}),await n.initialize(),{platform:"whatsapp",client:n}}var Y,Z=l(()=>{w();Y=process.env.ORACLE_CONFIG_DIR||k(Be(),".config","oracle")});var Q={};y(Q,{signal_:()=>Ye});async function Ye(e){return process.stderr.write(`signal-gateway: requires signal-cli binary
 `),process.stderr.write(`signal-gateway: not built yet \u2014 use Telegram or Discord for now
-`),{platform:"signal",status:"stub"}}var H=d(()=>{w()});import{createServer as Ae}from"node:http";import{env as B}from"node:process";import{join as K}from"node:path";import{homedir as Le}from"node:os";import{readFileSync as ve,existsSync as be}from"node:fs";var xe=B.ORACLE_CONFIG_DIR||K(Le(),".config","oracle"),z=K(xe,"gateway.json");function Ue(){return be(z)?JSON.parse(ve(z,"utf8")):{platforms:{}}}var ke=Object.freeze({telegram:"grammy",discord:"discord.js",whatsapp:"whatsapp-web.js"});async function R(e,t,r,o){try{o.push(await t(r))}catch(n){let a=ke[e];if(a&&/Cannot find (module|package)|ERR_MODULE_NOT_FOUND/.test(String(n.message))){process.stderr.write(`oracle-gateway: ${e} needs an optional dependency. Install it first:
+`),{platform:"signal",status:"stub"}}var X=l(()=>{w()});import{createServer as Ve}from"node:http";import{env as re}from"node:process";import{join as te}from"node:path";import{homedir as Ze}from"node:os";import{readFileSync as Qe,existsSync as Xe}from"node:fs";var er=re.ORACLE_CONFIG_DIR||te(Ze(),".config","oracle"),ee=te(er,"gateway.json");function rr(){return Xe(ee)?JSON.parse(Qe(ee,"utf8")):{platforms:{}}}var tr=Object.freeze({telegram:"grammy",discord:"discord.js",whatsapp:"whatsapp-web.js"});async function R(e,o,r,t){try{t.push(await o(r))}catch(n){let a=tr[e];if(a&&/Cannot find (module|package)|ERR_MODULE_NOT_FOUND/.test(String(n.message))){process.stderr.write(`oracle-gateway: ${e} needs an optional dependency. Install it first:
   npm install -g ${a}
 `);return}process.stderr.write(`oracle-gateway: ${e} failed to start: ${n.message}
-`)}}async function je(){let e=Ue(),t=[];e.platforms?.telegram&&await R("telegram",async r=>(await Promise.resolve().then(()=>(T(),N))).telegram(r.platforms.telegram),e,t),e.platforms?.discord&&await R("discord",async r=>(await Promise.resolve().then(()=>(M(),$))).discord(r.platforms.discord),e,t),e.platforms?.whatsapp&&await R("whatsapp",async r=>(await Promise.resolve().then(()=>(G(),q))).whatsapp(r.platforms.whatsapp),e,t),e.platforms?.signal&&await R("signal",async r=>(await Promise.resolve().then(()=>(H(),W))).signal_(r.platforms.signal),e,t),t.length===0&&process.stderr.write(`oracle-gateway: no platforms configured. Run 'oracle setup telegram' first.
-`),process.stderr.write(`oracle-gateway: ${t.length} platform(s) connected
-`),Ae((r,o)=>{o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"ok",platforms:Object.keys(e.platforms||{})}))}).listen(B.ORACLE_GATEWAY_PORT||9270,"127.0.0.1")}je().catch(e=>{process.stderr.write(`oracle-gateway: ${e.message}
+`)}}async function or(){let e=rr(),o=[];e.platforms?.telegram&&await R("telegram",async r=>(await Promise.resolve().then(()=>(K(),B))).telegram(r.platforms.telegram),e,o),e.platforms?.discord&&await R("discord",async r=>(await Promise.resolve().then(()=>(J(),z))).discord(r.platforms.discord),e,o),e.platforms?.whatsapp&&await R("whatsapp",async r=>(await Promise.resolve().then(()=>(Z(),V))).whatsapp(r.platforms.whatsapp),e,o),e.platforms?.signal&&await R("signal",async r=>(await Promise.resolve().then(()=>(X(),Q))).signal_(r.platforms.signal),e,o),o.length===0&&process.stderr.write(`oracle-gateway: no platforms configured. Run 'oracle setup telegram' first.
+`),process.stderr.write(`oracle-gateway: ${o.length} platform(s) connected
+`),Ve((r,t)=>{t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"ok",platforms:Object.keys(e.platforms||{})}))}).listen(re.ORACLE_GATEWAY_PORT||9270,"127.0.0.1")}or().catch(e=>{process.stderr.write(`oracle-gateway: ${e.message}
 `),process.exit(1)});

package/dist/cli/commands/auth.mjs

@@ -1,7 +1,7 @@
 import T from"node:fs";import F from"node:path";import j from"node:fs";import pe from"node:os";import O from"node:path";import{fileURLToPath as le}from"node:url";var fe=O.dirname(le(import.meta.url)),Ve=O.resolve(fe,"../..");function X(){return process.env.ORACLE_FAKE_HOME||pe.homedir()}function he(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function b(){return he()?process.env.ORACLE_CONFIG_DIR||O.join(X(),".config","oracle"):O.join(X(),".config","oracle")}function me(){return O.join(b(),"desk.json")}function we(){return O.join(b(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let t={},r=(n,i)=>{if(i==null)return;let s=String(i).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,t[n]=s))};try{let n=we();if(j.existsSync(n))for(let i of j.readFileSync(n,"utf8").split(/\r?\n/)){let s=i.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let p=s[2];(p.startsWith('"')&&p.endsWith('"')||p.startsWith("'")&&p.endsWith("'"))&&(p=p.slice(1,-1)),r(s[1],p)}}catch{}try{let n=me();if(j.existsSync(n)){let i=JSON.parse(j.readFileSync(n,"utf8"));i&&typeof i=="object"&&(r("ORACLE_DESK_URL",i.deskUrl||i.dataUrl||i.url),r("ORACLE_DATA_URL",i.dataUrl||i.deskUrl||i.url),r("ORACLE_API_URL",i.apiUrl||i.dataUrl||i.deskUrl),r("ORACLE_PUBLIC_URL",i.publicUrl||i.deskUrl||i.dataUrl),r("ORACLE_EXEC_URL",i.execUrl),r("MAD_DESK_URL",i.deskUrl||i.dataUrl))}}catch{}let o=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return o&&(r("ORACLE_DESK_URL",o),r("ORACLE_DATA_URL",o),r("ORACLE_API_URL",o),r("ORACLE_PUBLIC_URL",o),r("MAD_DESK_URL",o)),E._result=Object.keys(t).length?t:null,E._result}try{E()}catch{}function $(e){return j.mkdirSync(e,{recursive:!0}),e}var ge=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"]);function I(e){return String(e||"").trim()||void 0}function ye(e,{required:t=!1}={}){let r=I(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!ge.has(r))throw new Error(`unsupported provider: ${r}`);return r}function ve(e,{required:t=!1}={}){let r=I(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function ke(e){let t=I(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let o=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=o==="localhost"||o==="127.0.0.1"||o==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function L({provider:e,model:t,baseUrl:r}={},{requireModel:o=!1}={}){let n=ye(e),i=ve(t,{required:o});if(n==="custom")return{provider:n,...i?{model:i}:{},baseUrl:ke(r)};if(I(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...i?{model:i}:{}}}var xe=new Set(["auto","standalone","hermes","remote","arch"]);function _e(){return F.join(b(),"model.json")}function P(e){return String(e||"").trim()||void 0}function Ae(e={}){let t=P(e.backend)?.toLowerCase()||"auto",r=L({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),o=P(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),i=P(e.reasoningEffort),s=P(e.computeHost||e.remoteHost),p=P(e.computeUser||e.remoteUser),u=P(e.computePath||e.remotePath);if(!xe.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(o&&!/^[A-Z][A-Z0-9_]*$/.test(o))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:t,...r,...o?{apiKeyEnv:o}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...i?{reasoningEffort:i}:{},...s?{computeHost:s}:{},...p?{computeUser:p}:{},...u?{computePath:u}:{}}}function Z(e){let t=Ae(e),r=_e();$(F.dirname(r)),process.platform!=="win32"&&T.chmodSync(F.dirname(r),448);let o=`${r}.${process.pid}.tmp`;return T.writeFileSync(o,`${JSON.stringify(t,null,2)}
-`,{mode:384}),T.renameSync(o,r),process.platform!=="win32"&&T.chmodSync(r,384),t}import{createHash as Se,randomBytes as N,timingSafeEqual as Ee}from"node:crypto";import g from"node:fs";import k from"node:path";import Oe from"node:readline/promises";import{spawn as be,spawnSync as Pe}from"node:child_process";var R=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.5",protocol:"responses"}}),Ce=12e4;function Re(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function _(e){let t=String(e||"").trim().toLowerCase();for(let[r,o]of Object.entries(R))if(o.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function Y(e){let t=_(e);return{id:t,...R[t]}}function m(e,t={}){if(!g.existsSync(e))return t;try{let r=JSON.parse(g.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${k.basename(e)}`)}}function Q(e){$(e),process.platform!=="win32"&&g.chmodSync(e,448)}function x(e,t){Q(k.dirname(e));let r=`${e}.${process.pid}.${N(4).toString("hex")}.tmp`;g.writeFileSync(r,`${JSON.stringify(t,null,2)}
+`,{mode:384}),T.renameSync(o,r),process.platform!=="win32"&&T.chmodSync(r,384),t}import{createHash as Se,randomBytes as N,timingSafeEqual as Ee}from"node:crypto";import g from"node:fs";import k from"node:path";import Oe from"node:readline/promises";import{spawn as be,spawnSync as Pe}from"node:child_process";var R=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Ce=12e4;function Re(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function _(e){let t=String(e||"").trim().toLowerCase();for(let[r,o]of Object.entries(R))if(o.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function Y(e){let t=_(e);return{id:t,...R[t]}}function m(e,t={}){if(!g.existsSync(e))return t;try{let r=JSON.parse(g.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${k.basename(e)}`)}}function Q(e){$(e),process.platform!=="win32"&&g.chmodSync(e,448)}function x(e,t){Q(k.dirname(e));let r=`${e}.${process.pid}.${N(4).toString("hex")}.tmp`;g.writeFileSync(r,`${JSON.stringify(t,null,2)}
 `,{mode:384}),g.renameSync(r,e),process.platform!=="win32"&&g.chmodSync(e,384)}function Ue(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function D(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function C(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),o=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function je(e={}){let t=e.file||k.join(b(),"oauth.json"),r=e.metadataFile||k.join(k.dirname(t),"oauth-meta.json"),o=e.linksFile||k.join(k.dirname(t),"oauth-links.json"),n=()=>typeof e.now=="function"?Number(e.now()):Date.now(),i=e.spawnFn||Pe,s=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&Ue(i),p=s?"linux-secret-service":"private-file",u=`${t}.lock`;async function v(f){Q(k.dirname(u));let l;for(let c=0;c<400;c+=1)try{l=g.openSync(u,"wx",384);break}catch(a){if(a?.code!=="EEXIST")throw a;try{Date.now()-g.statSync(u).mtimeMs>3e5&&g.unlinkSync(u)}catch{}await new Promise(d=>setTimeout(d,25))}if(l===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await f()}finally{try{g.closeSync(l)}catch{}try{g.unlinkSync(u)}catch{}}}function w(f,l="oauth"){return["application","oracle","kind",l,"provider",f]}function U(f){if(!g.existsSync(o))return null;let c=m(o,{providers:{}}).providers?.[f];if(!Array.isArray(c))return null;let a=[];for(let d of c)if(k.isAbsolute(String(d||"")))try{let h=m(d,{});if(f==="anthropic-oauth"&&h.claudeAiOauth){let S=C(h.claudeAiOauth);a.push({...S,refreshToken:"",source:"external-access-only"});continue}let y=h.credential_pool&&typeof h.credential_pool=="object"?h.credential_pool:null;if(y){let S=y[f]||y[f.replace(/-oauth$/,"")]||[],ue=Array.isArray(S)?S:S?[S]:[];for(let z of ue)if(!(!z||typeof z!="object"))try{let de=C(z);a.push({...de,refreshToken:"",source:"external-access-only"})}catch{}}}catch{}return a.length?a.find(d=>!d.expiresAt||d.expiresAt>n()+Ce)||a[0]:null}function W(f){let l=_(f);if(s){let d=i("secret-tool",["lookup",...w(l)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!d.error&&d.status===0&&String(d.stdout||"").trim())try{return C(JSON.parse(String(d.stdout).trim()))}catch{}return U(l)}let a=m(t,{providers:{}}).providers?.[l];if(a)try{return C(a)}catch{}return U(l)}function ne(f,l){let c=_(f),a=C(l);if(s){let h=i("secret-tool",["store",`--label=Oracle ${c} OAuth`,...w(c)],{input:JSON.stringify(a),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected OAuth credential");let y=m(r,{providers:{}});return y.providers||={},y.providers[c]={expiresAt:a.expiresAt,source:a.source},x(r,y),a}let d=m(t,{providers:{}});return d.providers||={},d.providers[c]=a,x(t,d),a}function ie(f){let l=_(f);if(s){let d=i("secret-tool",["clear",...w(l)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{}});return h.providers&&delete h.providers[l],x(r,h),!d.error&&d.status===0}let c=m(t,{providers:{}}),a=!!c.providers?.[l];return c.providers&&delete c.providers[l],x(t,c),a}function V(f){let l=D(f);if(s){let c=i("secret-tool",["lookup",...w(l,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return c.error||c.status!==0?"":String(c.stdout||"").trim()}return String(m(t,{apiKeys:{}}).apiKeys?.[l]||"").trim()}function se(f,l){let c=D(f),a=String(l||"").trim();if(!a)throw new Error("API key is empty");if(s){let h=i("secret-tool",["store",`--label=Oracle ${c} API key`,...w(c,"api-key")],{input:a,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(h.error||h.status!==0)throw new Error("OS credential store rejected API key");let y=m(r,{providers:{},apiKeys:{}});return y.apiKeys||={},y.apiKeys[c]={configured:!0},x(r,y),!0}let d=m(t,{providers:{},apiKeys:{}});return d.apiKeys||={},d.apiKeys[c]=a,x(t,d),!0}function ce(f){let l=D(f);if(s){let d=i("secret-tool",["clear",...w(l,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),h=m(r,{providers:{},apiKeys:{}});return h.apiKeys&&delete h.apiKeys[l],x(r,h),!d.error&&d.status===0}let c=m(t,{providers:{},apiKeys:{}}),a=!!c.apiKeys?.[l];return c.apiKeys&&delete c.apiKeys[l],x(t,c),a}function ae(){let f={},l={};if(s){let c=m(r,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!W(a),expiresAt:Number(d.expiresAt||0),source:String(d.source||"oracle"),storage:p};for(let a of Object.keys(c.apiKeys||{}))l[a]={configured:!!V(a),storage:p}}else{let c=m(t,{providers:{},apiKeys:{}});for(let[a,d]of Object.entries(c.providers||{}))f[a]={loggedIn:!!d?.accessToken,expiresAt:Number(d?.expiresAt||0),source:String(d?.source||"oracle"),storage:p};for(let[a,d]of Object.entries(c.apiKeys||{}))l[a]={configured:!!d,storage:p}}for(let c of Object.keys(R)){if(f[c])continue;let a=U(c);a&&(f[c]={loggedIn:!0,expiresAt:a.expiresAt,source:a.source,storage:"external-access-source"})}return{storage:p,providers:f,apiKeys:l}}return Object.freeze({file:t,storage:p,get:W,set:ne,remove:ie,getApiKey:V,setApiKey:se,removeApiKey:ce,status:ae,withLock:v})}var G;function ee(){return G||=je(),G}function M(e){return Buffer.from(e).toString("base64url")}function $e(){let e=M(N(32));return{verifier:e,challenge:M(Se("sha256").update(e).digest()),state:M(N(24))}}function Ie(e,t){let r=Buffer.from(String(e||"")),o=Buffer.from(String(t||""));return r.length===o.length&&Ee(r,o)}function Le(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return be(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function B(e){return new URLSearchParams(e).toString()}async function A(e,t){if(!e?.ok){let o="";try{o=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${o?`, ${o}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Te(e){if(e)return String(await e()).trim();let t=Oe.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function H(e,t={}){let r=String(e.access_token||"").trim(),o=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let n=Number(e.expires_in||3600);return C({accessToken:r,refreshToken:o,expiresAt:Re(t)+Math.max(1,n)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Ke(e){let t=R["anthropic-oauth"],r=e.pkce||$e(),o=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),n=`${t.authorizeUrl}?${o}`;e.output(`Open: ${n}`),e.openFn(n);let i=await Te(e.inputFn),[s,p]=i.split("#",2);if(!s||!Ie(p,r.state))throw new Error("Claude OAuth state mismatch");let u=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:s,state:p,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return H(await A(u,"Claude OAuth token exchange"),e)}async function ze(e){let t=R["openai-codex"],r=await A(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let o=`${t.issuer}/codex/device`;e.output(`Open: ${o}`),e.output(`Code: ${r.user_code}`),e.openFn(o);let n=Math.max(3,Number(r.interval||5)),i;for(let p=0;p<Math.ceil(900/n);p+=1){await e.sleepFn(n*1e3);let u=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(u.ok){i=await A(u,"Codex device authorization");break}if(![403,404].includes(u.status))throw new Error(`Codex device authorization failed (HTTP ${u.status})`)}if(!i)throw new Error("Codex device authorization timed out");let s=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:B({grant_type:"authorization_code",code:i.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:i.code_verifier})});return H(await A(s,"Codex OAuth token exchange"),e)}function K(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Fe(e){let t=R["xai-oauth"],r=await A(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");K(r.authorization_endpoint);let o=K(r.token_endpoint),n=await A(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:B({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!n.device_code||!n.user_code||!n.verification_uri)throw new Error("xAI device authorization returned incomplete data");let i=K(n.verification_uri_complete||n.verification_uri);e.output(`Open: ${i}`),e.output(`Code: ${n.user_code}`),e.openFn(i);let s=Math.max(1,Number(n.interval||5)),p=Math.ceil(Math.max(1,Number(n.expires_in||600))/s);for(let u=0;u<p;u+=1){let v=await e.fetchFn(o,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:B({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:n.device_code})});if(v.ok){let U=await A(v,"xAI OAuth token exchange");return H(U,{...e,discovery:{authorization_endpoint:K(r.authorization_endpoint),token_endpoint:o}})}let w="";try{w=String((await v.json())?.error||"")}catch{}if(w==="slow_down")await e.sleepFn((s+1)*1e3);else if(w==="authorization_pending")await e.sleepFn(s*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${v.status}${w?`, ${w}`:""})`)}throw new Error("xAI device authorization timed out")}async function te(e,t={}){let r=_(e),o={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(n=>new Promise(i=>setTimeout(i,n))),openFn:t.openFn||Le,output:t.output||(n=>process.stdout.write(`${n}
-`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Ke(o):r==="openai-codex"?ze(o):Fe(o)}var re=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.5"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},custom:{model:""}});function J(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function De(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function Me(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let o="",n=()=>{process.stdin.off("data",i),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
+`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Ke(o):r==="openai-codex"?ze(o):Fe(o)}var re=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},custom:{model:""}});function J(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function De(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function Me(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let o="",n=()=>{process.stdin.off("data",i),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
 `)},i=s=>{let p=String(s);for(let u of p){if(u==="\r"||u===`
 `){n(),t(o.trim());return}if(u===""){n(),r(new Error("cancelled"));return}u==="\x7F"||u==="\b"?o=o.slice(0,-1):o+=u}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",i)})}function q(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...L({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function oe(e,t,r={}){return Z(q(e,t,r))}function Ne(e){process.stdout.write(`storage: ${e.storage}
 `);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured