@oracle-agent/oracle 0.24.8 → 0.24.10

package/dist/bin/oracle-gateway.mjs

@@ -1,26 +1,24 @@
 #!/usr/bin/env node
-var oe=Object.defineProperty;var v=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(o,r)=>(typeof require<"u"?require:o)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var l=(e,o,r)=>()=>{if(r)throw r[0];try{return e&&(o=e(e=0)),o}catch(t){throw r=[t],t}};var y=(e,o)=>{for(var r in o)oe(e,r,{get:o[r],enumerable:!0})};import _ from"node:fs";import ne from"node:os";import m from"node:path";import{fileURLToPath as ae}from"node:url";function L(){return process.env.ORACLE_FAKE_HOME||ne.homedir()}function ie(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function S(){return ie()?process.env.ORACLE_CONFIG_DIR||m.join(L(),".config","oracle"):m.join(L(),".config","oracle")}function ce(){return m.join(S(),"desk.json")}function le(){return m.join(S(),"env")}function f({force:e=!1}={}){if(f._done&&!e)return f._result||null;f._done=!0;let o={},r=(n,a)=>{if(a==null)return;let s=String(a).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,o[n]=s))};try{let n=le();if(_.existsSync(n))for(let a of _.readFileSync(n,"utf8").split(/\r?\n/)){let s=a.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let i=s[2];(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r(s[1],i)}}catch{}try{let n=ce();if(_.existsSync(n)){let a=JSON.parse(_.readFileSync(n,"utf8"));a&&typeof a=="object"&&(r("ORACLE_DESK_URL",a.deskUrl||a.dataUrl||a.url),r("ORACLE_DATA_URL",a.dataUrl||a.deskUrl||a.url),r("ORACLE_API_URL",a.apiUrl||a.dataUrl||a.deskUrl),r("ORACLE_PUBLIC_URL",a.publicUrl||a.deskUrl||a.dataUrl),r("ORACLE_EXEC_URL",a.execUrl),r("MAD_DESK_URL",a.deskUrl||a.dataUrl))}}catch{}let t=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return t&&(r("ORACLE_DESK_URL",t),r("ORACLE_DATA_URL",t),r("ORACLE_API_URL",t),r("ORACLE_PUBLIC_URL",t),r("MAD_DESK_URL",t)),f._result=Object.keys(o).length?o:null,f._result}var se,lr,x=l(()=>{se=m.dirname(ae(import.meta.url)),lr=m.resolve(se,"../..");try{f()}catch{}});function E(e){return String(e||"").trim()||void 0}function pe(e,{required:o=!1}={}){let r=E(e)?.toLowerCase();if(!r){if(o)throw new Error("model provider is required");return}if(!de.has(r))throw new Error(`unsupported provider: ${r}`);return r}function ue(e,{required:o=!1}={}){let r=E(e);if(!r){if(o)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function fe(e){let o=E(e);if(!o||o.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(o)}catch{throw new Error("invalid custom base URL")}let t=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=t==="localhost"||t==="127.0.0.1"||t==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function U({provider:e,model:o,baseUrl:r}={},{requireModel:t=!1}={}){let n=pe(e),a=ue(o,{required:t});if(n==="custom")return{provider:n,...a?{model:a}:{},baseUrl:fe(r)};if(E(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...a?{model:a}:{}}}var de,j=l(()=>{de=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"])});import $ from"node:fs";import me from"node:path";function we(){return me.join(S(),"model.json")}function h(e){return String(e||"").trim()||void 0}function ge(e={}){let o=h(e.backend)?.toLowerCase()||"auto",r=U({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:o==="standalone"}),t=h(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),a=h(e.reasoningEffort),s=h(e.computeHost||e.remoteHost),i=h(e.computeUser||e.remoteUser),c=h(e.computePath||e.remotePath);if(!he.has(o))throw new Error(`unsupported backend: ${o}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(o))throw new Error("remote compute backends are disabled in the public desktop");if(t&&!/^[A-Z][A-Z0-9_]*$/.test(t))throw new Error("api key env must be an uppercase environment variable name");if(o==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:o,...r,...t?{apiKeyEnv:t}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...a?{reasoningEffort:a}:{},...s?{computeHost:s}:{},...i?{computeUser:i}:{},...c?{computePath:c}:{}}}function P(){let e=we();if(!$.existsSync(e))return null;try{return ge(JSON.parse($.readFileSync(e,"utf8")))}catch{return null}}var he,D=l(()=>{x();j();he=new Set(["auto","standalone","hermes","remote","arch"])});import{execFile as ye}from"node:child_process";import{existsSync as _e,mkdirSync as Se,readFileSync as I,realpathSync as Ee,writeFileSync as Ce}from"node:fs";import d from"node:path";import{promisify as Oe}from"node:util";import{fileURLToPath as N}from"node:url";function be(e=import.meta.url){try{let o=Ee(N(e)),r=`${d.sep}node_modules${d.sep}`,t=o.lastIndexOf(r);if(t>0)return{root:o.slice(0,t),managed:!0}}catch{}return{root:null,managed:!1}}function b(e=import.meta.url){try{let o=d.dirname(N(e));for(let r=0;r<8;r+=1){let t=d.join(o,"package.json");if(_e(t)){let a=JSON.parse(I(t,"utf8"));if(a?.name===A&&a.version)return a.version}let n=d.dirname(o);if(n===o)break;o=n}}catch{return null}return null}function ke(e,o){let r=a=>String(a).replace(/^v/,"").split("-")[0].split(".").map(s=>Number.parseInt(s,10)||0),t=r(e),n=r(o);for(let a=0;a<Math.max(t.length,n.length);a+=1){let s=t[a]??0,i=n[a]??0;if(s>i)return 1;if(s<i)return-1}return 0}function T(e){let o=e?.stateDir||d.join(process.env.HOME||".",".oracle");return d.join(o,"update-check.json")}function Le(e){try{return JSON.parse(I(T(e),"utf8"))}catch{return null}}function xe(e,o){try{let r=T(e);Se(d.dirname(r),{recursive:!0}),Ce(r,`${JSON.stringify(o,null,2)}
-`)}catch{}}async function Ue({timeoutMs:e=4e3}={}){try{let o=new AbortController,r=setTimeout(()=>o.abort(),e),t=await fetch(`${ve}/${encodeURIComponent(A)}/latest`,{signal:o.signal});return clearTimeout(r),t.ok&&(await t.json())?.version||null}catch{return null}}async function M({paths:e,force:o=!1,timeoutMs:r=4e3}={}){let t=b(),n=o?null:Le(e),s=n&&Date.now()-(n.checkedAt||0)<Ae?n.latest:null;return s||(s=await Ue({timeoutMs:r}),s&&xe(e,{latest:s,checkedAt:Date.now()})),!t||!s?{current:t,latest:s,updateAvailable:!1,checked:!!s}:{current:t,latest:s,updateAvailable:ke(s,t)>0,checked:!0}}async function F({version:e="latest",dryRun:o=!1}={}){let{root:r,managed:t}=be();if(!t||!r)return{ok:!1,reason:"unmanaged",message:`oracle is not running from a resolvable node_modules tree (source checkout or linked dev install).
-Update it the same way you installed it \u2014 git pull, or npm install -g @oracle-agent/oracle@latest.`};let n=`${A}@${e}`,a=["install","--prefix",r,"--no-audit","--no-fund",n];if(o)return{ok:!0,dryRun:!0,root:r,command:`npm ${a.join(" ")}`};try{let{stdout:s,stderr:i}=await Re("npm",a,{timeout:3e5,maxBuffer:16777216});return{ok:!0,root:r,stdout:s,stderr:i}}catch(s){return{ok:!1,reason:"npm-failed",root:r,message:s?.stderr||s?.message||"npm install failed"}}}var Re,A,ve,Ae,G=l(()=>{Re=Oe(ye),A="@oracle-agent/oracle",ve="https://registry.npmjs.org",Ae=1440*60*1e3});import{spawn as je}from"node:child_process";import{join as q}from"node:path";import{homedir as W}from"node:os";function De(e,o=process.env){let r=String(o[`ORACLE_OWNER_${String(e).toUpperCase()}`]||""),t=String(o.ORACLE_OWNER_IDS||"");return new Set(`${r},${t}`.split(",").map(n=>n.trim()).filter(Boolean))}function C({platform:e,senderId:o},r=process.env){let t=String(o||"").trim();return t?De(e,r).has(t):!1}function Ie(e){let o=String(e||"").trim();if(!o)return null;let r=o.replace(/^\/update(?:@[\w_]+)?\b/i,"update");return/^(?:oracle\s+)?update\s+--check\s*$/i.test(r)?{checkOnly:!0}:/^(?:oracle\s+)?update\s*$/i.test(r)?{checkOnly:!1}:null}async function Ne(e,{check:o=M,update:r=F,versionOf:t=b}={}){let n=await o({force:!0});if(e.checkOnly)return n.checked?n.updateAvailable?`oracle ${n.current} \u2192 ${n.latest} available. Send /update to install.`:`oracle ${n.current} is up to date`:`oracle ${n.current||"?"} \u2014 could not reach npm`;if(n.checked&&!n.updateAvailable)return`oracle ${n.current} is already up to date`;let a=n.latest||"latest",s=await r({version:a==="latest"?"latest":a});if(!s.ok)return`oracle update failed: ${s.message}`;let i=t();return[`oracle ${n.current||"?"} \u2192 ${i||a}`,"Restart the gateway to load it: oracle gateway"].join(`
-`)}function Te(e={}){return!!(e.forwarded||e.forward_from||e.forward_from_chat||e.forward_origin||e.forward_sender_name||e.forward_date)}function Me({readConfig:e=P}={}){let o=e();return o?o.backend==="hermes"?{ok:!1,error:"model config delegates to hermes; the gateway runs Oracle's native loop. Set a standalone backend: oracle model --backend standalone"}:o.model?{ok:!0,provider:o.provider,model:o.model}:{ok:!1,error:"model config has no model \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}:{ok:!1,error:"gateway has no model configured \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}}async function u({platform:e,chatId:o,senderId:r,text:t,userName:n,meta:a={},updater:s}={}){if(!C({platform:e,senderId:r}))return process.stderr.write(`gateway: denied non-owner sender ${e}:${String(r||"unknown")}
-`),O;if(Te(a))return process.stderr.write(`gateway: dropped forwarded message on ${e}
-`),null;let i=Ie(t);if(i)return Ne(i,s);let c=t.toLowerCase().trim();return/\b(buy|sell|swap|bridge|send|transfer|balance|portfolio|watch|quote|price)\b/.test(c)?Fe({platform:e,chatId:o,senderId:r,text:t,userName:n}):Ge({platform:e,chatId:o,senderId:r,text:t,userName:n})}function H(e,{timeout:o=12e4}={}){return new Promise(r=>{let t=je(process.execPath,[Pe,...e],{stdio:["ignore","pipe","pipe"],timeout:o,env:{...process.env,ORACLE_CONFIG_DIR:$e}}),n="",a="";t.stdout.on("data",s=>n+=s.toString()),t.stderr.on("data",s=>a+=s.toString()),t.on("close",s=>r({code:s,out:n.trim(),err:a.trim()}))})}async function Fe({text:e}){let o=await H(["route","swap","--text",e],{timeout:3e4});if(o.code===0&&o.out)try{return qe(JSON.parse(o.out))}catch{return o.out}return`Trade routing failed. Try: \`${e}\` again.`}async function Ge({text:e}){let o=Me();if(!o.ok)return`Oracle is not configured yet: ${o.error}`;let r=await H(["chat","-q",e]);return r.code===0&&r.out?r.out:r.err||"Oracle could not answer that. Try again."}function qe(e){return e.error?`\u274C ${e.error}`:e.tx?`\u2705 Trade prepared: \`${e.tx.slice(0,20)}...\`
-Sign and broadcast from your own wallet.`:e.quote?`\u{1F4B1} ${e.quote}`:e.portfolio?`\u{1F4CA} ${e.portfolio}`:JSON.stringify(e,null,2)}var $e,Pe,O,w=l(()=>{D();G();$e=process.env.ORACLE_CONFIG_DIR||q(W(),".config","oracle"),Pe=process.env.ORACLE_CLI_ENTRY||q(W(),".local","share","oracle-stable","node_modules","@oracle-agent","oracle","bin","oracle.mjs");O="Oracle is self-hostable. Install your own instance: npm install -g @oracle-agent/oracle"});var B={};y(B,{telegram:()=>We});async function We(e){let{Bot:o}=await import("grammy"),r=new o(e.token);return r.command("start",t=>{let n=String(t.from?.id||t.chat.id);return C({platform:"telegram",senderId:n})?t.reply("Oracle ready. Ask me anything \u2014 swap, bridge, portfolio, watch. /update installs latest."):t.reply(O)}),r.command("update",async t=>{let n=String(t.from?.id||t.chat.id),a=String(t.chat.id);if(!C({platform:"telegram",senderId:n}))return t.reply(O);if(t.message.forward_origin||t.message.forward_from||t.message.forward_date)return;t.replyWithChatAction("typing").catch(()=>{});let s=await u({platform:"telegram",chatId:a,senderId:n,text:t.match?`update ${t.match}`.trim():"update",userName:t.from?.username||t.from?.first_name||"user"});if(s)return t.reply(s)}),r.on("message:text",async t=>{let n=String(t.chat.id),a=String(t.from?.id||n),s=t.message.text;try{t.replyWithChatAction("typing").catch(()=>{});let i=await u({platform:"telegram",chatId:n,senderId:a,text:s,userName:t.from?.username||t.from?.first_name||"user",meta:{forward_origin:t.message.forward_origin,forward_from:t.message.forward_from,forward_from_chat:t.message.forward_from_chat,forward_sender_name:t.message.forward_sender_name,forward_date:t.message.forward_date}});i&&await t.reply(i,{parse_mode:"Markdown"})}catch(i){process.stderr.write(`telegram-gateway: ${i.message}
-`),await t.reply("Something went wrong. Try again.").catch(()=>{})}}),r.start(),{platform:"telegram",bot:r}}var K=l(()=>{w()});var z={};y(z,{discord:()=>He});async function He(e){let{Client:o,GatewayIntentBits:r}=await import("discord.js"),t=new o({intents:[r.Guilds,r.GuildMessages,r.MessageContent,r.DirectMessages]});return t.on("messageCreate",async n=>{if(n.author.bot)return;let a=n.channel.id,s=n.author.id,i=n.content;try{let c=!n.guild,p=n.mentions.has(t.user.id);if(!c&&!p)return;n.channel.sendTyping().catch(()=>{});let g=await u({platform:"discord",chatId:a,senderId:s,text:i.replace(`<@${t.user.id}>`,"").trim(),userName:n.author.username,meta:{forwarded:n.reference?.type===1||Array.isArray(n.messageSnapshots)&&n.messageSnapshots.length>0}});g&&await n.reply(g).catch(()=>{})}catch(c){process.stderr.write(`discord-gateway: ${c.message}
-`)}}),await t.login(e.token),{platform:"discord",client:t}}var J=l(()=>{w()});var V={};y(V,{whatsapp:()=>Je});import{join as k}from"node:path";import{homedir as Be}from"node:os";import{spawnSync as Ke}from"node:child_process";function ze(){try{return v.resolve("whatsapp-web.js"),v.resolve("qrcode-terminal"),!0}catch{return process.stderr.write(`whatsapp-gateway: installing dependencies...
-`),Ke("npm",["install","whatsapp-web.js","qrcode-terminal"],{cwd:k(Y,"gateway"),stdio:"inherit",timeout:6e4}).status===0}}async function Je(e){if(!ze())return process.stderr.write(`whatsapp-gateway: failed to install dependencies
-`),{platform:"whatsapp",status:"failed"};let{Client:o,LocalAuth:r}=await import("whatsapp-web.js"),{generate:t}=await import("qrcode-terminal"),n=new o({authStrategy:new r({dataPath:k(Y,".wwebjs_auth")}),puppeteer:{headless:!0,args:["--no-sandbox"]}});return n.on("qr",a=>{process.stderr.write(`
+var re=Object.defineProperty;var l=(e,o,r)=>()=>{if(r)throw r[0];try{return e&&(o=e(e=0)),o}catch(t){throw r=[t],t}};var y=(e,o)=>{for(var r in o)re(e,r,{get:o[r],enumerable:!0})};import _ from"node:fs";import te from"node:os";import m from"node:path";import{fileURLToPath as oe}from"node:url";function b(){return process.env.ORACLE_FAKE_HOME||te.homedir()}function ae(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function S(){return ae()?process.env.ORACLE_CONFIG_DIR||m.join(b(),".config","oracle"):m.join(b(),".config","oracle")}function se(){return m.join(S(),"desk.json")}function ie(){return m.join(S(),"env")}function f({force:e=!1}={}){if(f._done&&!e)return f._result||null;f._done=!0;let o={},r=(n,a)=>{if(a==null)return;let s=String(a).trim();s&&(process.env[n]!=null&&String(process.env[n]).trim()!==""||(process.env[n]=s,o[n]=s))};try{let n=ie();if(_.existsSync(n))for(let a of _.readFileSync(n,"utf8").split(/\r?\n/)){let s=a.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!s||s[2].startsWith("#"))continue;let i=s[2];(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),r(s[1],i)}}catch{}try{let n=se();if(_.existsSync(n)){let a=JSON.parse(_.readFileSync(n,"utf8"));a&&typeof a=="object"&&(r("ORACLE_DESK_URL",a.deskUrl||a.dataUrl||a.url),r("ORACLE_DATA_URL",a.dataUrl||a.deskUrl||a.url),r("ORACLE_API_URL",a.apiUrl||a.dataUrl||a.deskUrl),r("ORACLE_PUBLIC_URL",a.publicUrl||a.deskUrl||a.dataUrl),r("ORACLE_EXEC_URL",a.execUrl),r("MAD_DESK_URL",a.deskUrl||a.dataUrl))}}catch{}let t=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return t&&(r("ORACLE_DESK_URL",t),r("ORACLE_DATA_URL",t),r("ORACLE_API_URL",t),r("ORACLE_PUBLIC_URL",t),r("MAD_DESK_URL",t)),f._result=Object.keys(o).length?o:null,f._result}var ne,sr,k=l(()=>{ne=m.dirname(oe(import.meta.url)),sr=m.resolve(ne,"../..");try{f()}catch{}});function E(e){return String(e||"").trim()||void 0}function le(e,{required:o=!1}={}){let r=E(e)?.toLowerCase();if(!r){if(o)throw new Error("model provider is required");return}if(!ce.has(r))throw new Error(`unsupported provider: ${r}`);return r}function de(e,{required:o=!1}={}){let r=E(e);if(!r){if(o)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function pe(e){let o=E(e);if(!o||o.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(o)}catch{throw new Error("invalid custom base URL")}let t=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),n=t==="localhost"||t==="127.0.0.1"||t==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&n)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function L({provider:e,model:o,baseUrl:r}={},{requireModel:t=!1}={}){let n=le(e),a=de(o,{required:t});if(n==="custom")return{provider:n,...a?{model:a}:{},baseUrl:pe(r)};if(E(r))throw new Error("baseUrl is only supported for the custom provider");return{...n?{provider:n}:{},...a?{model:a}:{}}}var ce,x=l(()=>{ce=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","custom","anthropic-oauth","openai-codex","xai-oauth"])});import U from"node:fs";import ue from"node:path";function me(){return ue.join(S(),"model.json")}function h(e){return String(e||"").trim()||void 0}function he(e={}){let o=h(e.backend)?.toLowerCase()||"auto",r=L({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:o==="standalone"}),t=h(e.apiKeyEnv),n=Number.parseInt(String(e.contextLength||""),10),a=h(e.reasoningEffort),s=h(e.computeHost||e.remoteHost),i=h(e.computeUser||e.remoteUser),c=h(e.computePath||e.remotePath);if(!fe.has(o))throw new Error(`unsupported backend: ${o}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(o))throw new Error("remote compute backends are disabled in the public desktop");if(t&&!/^[A-Z][A-Z0-9_]*$/.test(t))throw new Error("api key env must be an uppercase environment variable name");if(o==="remote"&&!s)throw new Error("remote backend requires computeHost");return{backend:o,...r,...t?{apiKeyEnv:t}:{},...Number.isFinite(n)&&n>0?{contextLength:n}:{},...a?{reasoningEffort:a}:{},...s?{computeHost:s}:{},...i?{computeUser:i}:{},...c?{computePath:c}:{}}}function $(){let e=me();if(!U.existsSync(e))return null;try{return he(JSON.parse(U.readFileSync(e,"utf8")))}catch{return null}}var fe,j=l(()=>{k();x();fe=new Set(["auto","standalone","hermes","remote","arch"])});import{execFile as we}from"node:child_process";import{existsSync as ge,mkdirSync as ye,readFileSync as P,realpathSync as _e,writeFileSync as Se}from"node:fs";import d from"node:path";import{promisify as Ee}from"node:util";import{fileURLToPath as I}from"node:url";function Ae(e=import.meta.url){try{let o=_e(I(e)),r=`${d.sep}node_modules${d.sep}`,t=o.lastIndexOf(r);if(t>0)return{root:o.slice(0,t),managed:!0}}catch{}return{root:null,managed:!1}}function v(e=import.meta.url){try{let o=d.dirname(I(e));for(let r=0;r<8;r+=1){let t=d.join(o,"package.json");if(ge(t)){let a=JSON.parse(P(t,"utf8"));if(a?.name===A&&a.version)return a.version}let n=d.dirname(o);if(n===o)break;o=n}}catch{return null}return null}function ve(e,o){let r=a=>String(a).replace(/^v/,"").split("-")[0].split(".").map(s=>Number.parseInt(s,10)||0),t=r(e),n=r(o);for(let a=0;a<Math.max(t.length,n.length);a+=1){let s=t[a]??0,i=n[a]??0;if(s>i)return 1;if(s<i)return-1}return 0}function D(e){let o=e?.stateDir||d.join(process.env.HOME||".",".oracle");return d.join(o,"update-check.json")}function be(e){try{return JSON.parse(P(D(e),"utf8"))}catch{return null}}function ke(e,o){try{let r=D(e);ye(d.dirname(r),{recursive:!0}),Se(r,`${JSON.stringify(o,null,2)}
+`)}catch{}}async function Le({timeoutMs:e=4e3}={}){try{let o=new AbortController,r=setTimeout(()=>o.abort(),e),t=await fetch(`${Oe}/${encodeURIComponent(A)}/latest`,{signal:o.signal});return clearTimeout(r),t.ok&&(await t.json())?.version||null}catch{return null}}async function N({paths:e,force:o=!1,timeoutMs:r=4e3}={}){let t=v(),n=o?null:be(e),s=n&&Date.now()-(n.checkedAt||0)<Re?n.latest:null;return s||(s=await Le({timeoutMs:r}),s&&ke(e,{latest:s,checkedAt:Date.now()})),!t||!s?{current:t,latest:s,updateAvailable:!1,checked:!!s}:{current:t,latest:s,updateAvailable:ve(s,t)>0,checked:!0}}async function T({version:e="latest",dryRun:o=!1}={}){let{root:r,managed:t}=Ae();if(!t||!r)return{ok:!1,reason:"unmanaged",message:`oracle is not running from a resolvable node_modules tree (source checkout or linked dev install).
+Update it the same way you installed it \u2014 git pull, or npm install -g @oracle-agent/oracle@latest.`};let n=`${A}@${e}`,a=["install","--prefix",r,"--no-audit","--no-fund",n];if(o)return{ok:!0,dryRun:!0,root:r,command:`npm ${a.join(" ")}`};try{let{stdout:s,stderr:i}=await Ce("npm",a,{timeout:3e5,maxBuffer:16777216});return{ok:!0,root:r,stdout:s,stderr:i}}catch(s){return{ok:!1,reason:"npm-failed",root:r,message:s?.stderr||s?.message||"npm install failed"}}}var Ce,A,Oe,Re,M=l(()=>{Ce=Ee(we),A="@oracle-agent/oracle",Oe="https://registry.npmjs.org",Re=1440*60*1e3});import{spawn as xe}from"node:child_process";import{join as F}from"node:path";import{homedir as G}from"node:os";function je(e,o=process.env){let r=String(o[`ORACLE_OWNER_${String(e).toUpperCase()}`]||""),t=String(o.ORACLE_OWNER_IDS||"");return new Set(`${r},${t}`.split(",").map(n=>n.trim()).filter(Boolean))}function C({platform:e,senderId:o},r=process.env){let t=String(o||"").trim();return t?je(e,r).has(t):!1}function Pe(e){let o=String(e||"").trim();if(!o)return null;let r=o.replace(/^\/update(?:@[\w_]+)?\b/i,"update");return/^(?:oracle\s+)?update\s+--check\s*$/i.test(r)?{checkOnly:!0}:/^(?:oracle\s+)?update\s*$/i.test(r)?{checkOnly:!1}:null}async function Ie(e,{check:o=N,update:r=T,versionOf:t=v}={}){let n=await o({force:!0});if(e.checkOnly)return n.checked?n.updateAvailable?`oracle ${n.current} \u2192 ${n.latest} available. Send /update to install.`:`oracle ${n.current} is up to date`:`oracle ${n.current||"?"} \u2014 could not reach npm`;if(n.checked&&!n.updateAvailable)return`oracle ${n.current} is already up to date`;let a=n.latest||"latest",s=await r({version:a==="latest"?"latest":a});if(!s.ok)return`oracle update failed: ${s.message}`;let i=t();return[`oracle ${n.current||"?"} \u2192 ${i||a}`,"Restart the gateway to load it: oracle gateway"].join(`
+`)}function De(e={}){return!!(e.forwarded||e.forward_from||e.forward_from_chat||e.forward_origin||e.forward_sender_name||e.forward_date)}function Ne({readConfig:e=$}={}){let o=e();return o?o.backend==="hermes"?{ok:!1,error:"model config delegates to hermes; the gateway runs Oracle's native loop. Set a standalone backend: oracle model --backend standalone"}:o.model?{ok:!0,provider:o.provider,model:o.model}:{ok:!1,error:"model config has no model \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}:{ok:!1,error:"gateway has no model configured \u2014 run: oracle model --backend standalone --provider <p> --model <m>"}}async function u({platform:e,chatId:o,senderId:r,text:t,userName:n,meta:a={},updater:s}={}){if(!C({platform:e,senderId:r}))return process.stderr.write(`gateway: denied non-owner sender ${e}:${String(r||"unknown")}
+`),O;if(De(a))return process.stderr.write(`gateway: dropped forwarded message on ${e}
+`),null;let i=Pe(t);if(i)return Ie(i,s);let c=t.toLowerCase().trim();return/\b(buy|sell|swap|bridge|send|transfer|balance|portfolio|watch|quote|price)\b/.test(c)?Te({platform:e,chatId:o,senderId:r,text:t,userName:n}):Me({platform:e,chatId:o,senderId:r,text:t,userName:n})}function W(e,{timeout:o=12e4}={}){return new Promise(r=>{let t=xe(process.execPath,[$e,...e],{stdio:["ignore","pipe","pipe"],timeout:o,env:{...process.env,ORACLE_CONFIG_DIR:Ue}}),n="",a="";t.stdout.on("data",s=>n+=s.toString()),t.stderr.on("data",s=>a+=s.toString()),t.on("close",s=>r({code:s,out:n.trim(),err:a.trim()}))})}async function Te({text:e}){let o=await W(["route","swap","--text",e],{timeout:3e4});if(o.code===0&&o.out)try{return Fe(JSON.parse(o.out))}catch{return o.out}return`Trade routing failed. Try: \`${e}\` again.`}async function Me({text:e}){let o=Ne();if(!o.ok)return`Oracle is not configured yet: ${o.error}`;let r=await W(["chat","-q",e]);return r.code===0&&r.out?r.out:r.err||"Oracle could not answer that. Try again."}function Fe(e){return e.error?`\u274C ${e.error}`:e.tx?`\u2705 Trade prepared: \`${e.tx.slice(0,20)}...\`
+Sign and broadcast from your own wallet.`:e.quote?`\u{1F4B1} ${e.quote}`:e.portfolio?`\u{1F4CA} ${e.portfolio}`:JSON.stringify(e,null,2)}var Ue,$e,O,w=l(()=>{j();M();Ue=process.env.ORACLE_CONFIG_DIR||F(G(),".config","oracle"),$e=process.env.ORACLE_CLI_ENTRY||F(G(),".local","share","oracle-stable","node_modules","@oracle-agent","oracle","bin","oracle.mjs");O="Oracle is self-hostable. Install your own instance: npm install -g @oracle-agent/oracle"});var H={};y(H,{telegram:()=>Ge});async function Ge(e){let{Bot:o}=await import("grammy"),r=new o(e.token);return r.command("start",t=>{let n=String(t.from?.id||t.chat.id);return C({platform:"telegram",senderId:n})?t.reply("Oracle ready. Ask me anything \u2014 swap, bridge, portfolio, watch. /update installs latest."):t.reply(O)}),r.command("update",async t=>{let n=String(t.from?.id||t.chat.id),a=String(t.chat.id);if(!C({platform:"telegram",senderId:n}))return t.reply(O);if(t.message.forward_origin||t.message.forward_from||t.message.forward_date)return;t.replyWithChatAction("typing").catch(()=>{});let s=await u({platform:"telegram",chatId:a,senderId:n,text:t.match?`update ${t.match}`.trim():"update",userName:t.from?.username||t.from?.first_name||"user"});if(s)return t.reply(s)}),r.on("message:text",async t=>{let n=String(t.chat.id),a=String(t.from?.id||n),s=t.message.text;try{t.replyWithChatAction("typing").catch(()=>{});let i=await u({platform:"telegram",chatId:n,senderId:a,text:s,userName:t.from?.username||t.from?.first_name||"user",meta:{forward_origin:t.message.forward_origin,forward_from:t.message.forward_from,forward_from_chat:t.message.forward_from_chat,forward_sender_name:t.message.forward_sender_name,forward_date:t.message.forward_date}});i&&await t.reply(i,{parse_mode:"Markdown"})}catch(i){process.stderr.write(`telegram-gateway: ${i.message}
+`),await t.reply("Something went wrong. Try again.").catch(()=>{})}}),r.start(),{platform:"telegram",bot:r}}var B=l(()=>{w()});var q={};y(q,{discord:()=>We});async function We(e){let{Client:o,GatewayIntentBits:r}=await import("discord.js"),t=new o({intents:[r.Guilds,r.GuildMessages,r.MessageContent,r.DirectMessages]});return t.on("messageCreate",async n=>{if(n.author.bot)return;let a=n.channel.id,s=n.author.id,i=n.content;try{let c=!n.guild,p=n.mentions.has(t.user.id);if(!c&&!p)return;n.channel.sendTyping().catch(()=>{});let g=await u({platform:"discord",chatId:a,senderId:s,text:i.replace(`<@${t.user.id}>`,"").trim(),userName:n.author.username,meta:{forwarded:n.reference?.type===1||Array.isArray(n.messageSnapshots)&&n.messageSnapshots.length>0}});g&&await n.reply(g).catch(()=>{})}catch(c){process.stderr.write(`discord-gateway: ${c.message}
+`)}}),await t.login(e.token),{platform:"discord",client:t}}var K=l(()=>{w()});var J={};y(J,{whatsapp:()=>qe});import{join as z}from"node:path";import{homedir as He}from"node:os";async function qe(e){let[{Client:o,LocalAuth:r},{generate:t}]=await Promise.all([import("whatsapp-web.js"),import("qrcode-terminal")]),n=new o({authStrategy:new r({dataPath:z(Be,".wwebjs_auth")}),puppeteer:{headless:!0,args:["--no-sandbox"]}});return n.on("qr",a=>{process.stderr.write(`
 WhatsApp: scan this QR code in WhatsApp \u2192 Linked Devices:
 
 `),t(a,{small:!0}),process.stderr.write(`
 `)}),n.on("ready",()=>{process.stderr.write(`whatsapp-gateway: connected
 `)}),n.on("message",async a=>{if(a.fromMe)return;let s=a.from,i=a.author||a.from,c=a.body;try{let p=await u({platform:"whatsapp",chatId:s,senderId:i,text:c,userName:a._data?.notifyName||"user",meta:{forwarded:a.isForwarded||a._data?.isForwarded,forward_date:a._data?.forwardingScore?!0:void 0}});if(p){let g=p.replace(/\*\*/g,"*").replace(/```[\s\S]*?```/g,"[code]").replace(/`/g,"");await a.reply(g)}}catch(p){process.stderr.write(`whatsapp-gateway: ${p.message}
-`)}}),await n.initialize(),{platform:"whatsapp",client:n}}var Y,Z=l(()=>{w();Y=process.env.ORACLE_CONFIG_DIR||k(Be(),".config","oracle")});var Q={};y(Q,{signal_:()=>Ye});async function Ye(e){return process.stderr.write(`signal-gateway: requires signal-cli binary
+`)}}),await n.initialize(),{platform:"whatsapp",client:n}}var Be,Y=l(()=>{w();Be=process.env.ORACLE_CONFIG_DIR||z(He(),".config","oracle")});var V={};y(V,{signal_:()=>Ke});async function Ke(e){return process.stderr.write(`signal-gateway: requires signal-cli binary
 `),process.stderr.write(`signal-gateway: not built yet \u2014 use Telegram or Discord for now
-`),{platform:"signal",status:"stub"}}var X=l(()=>{w()});import{createServer as Ve}from"node:http";import{env as re}from"node:process";import{join as te}from"node:path";import{homedir as Ze}from"node:os";import{readFileSync as Qe,existsSync as Xe}from"node:fs";var er=re.ORACLE_CONFIG_DIR||te(Ze(),".config","oracle"),ee=te(er,"gateway.json");function rr(){return Xe(ee)?JSON.parse(Qe(ee,"utf8")):{platforms:{}}}var tr=Object.freeze({telegram:"grammy",discord:"discord.js",whatsapp:"whatsapp-web.js"});async function R(e,o,r,t){try{t.push(await o(r))}catch(n){let a=tr[e];if(a&&/Cannot find (module|package)|ERR_MODULE_NOT_FOUND/.test(String(n.message))){process.stderr.write(`oracle-gateway: ${e} needs an optional dependency. Install it first:
+`),{platform:"signal",status:"stub"}}var Z=l(()=>{w()});import{createServer as ze}from"node:http";import{env as X}from"node:process";import{join as ee}from"node:path";import{homedir as Je}from"node:os";import{readFileSync as Ye,existsSync as Ve}from"node:fs";var Ze=X.ORACLE_CONFIG_DIR||ee(Je(),".config","oracle"),Q=ee(Ze,"gateway.json");function Qe(){return Ve(Q)?JSON.parse(Ye(Q,"utf8")):{platforms:{}}}var Xe=Object.freeze({telegram:"grammy",discord:"discord.js",whatsapp:"whatsapp-web.js"});async function R(e,o,r,t){try{t.push(await o(r))}catch(n){let a=Xe[e];if(a&&/Cannot find (module|package)|ERR_MODULE_NOT_FOUND/.test(String(n.message))){process.stderr.write(`oracle-gateway: ${e} needs an optional dependency. Install it first:
   npm install -g ${a}
 `);return}process.stderr.write(`oracle-gateway: ${e} failed to start: ${n.message}
-`)}}async function or(){let e=rr(),o=[];e.platforms?.telegram&&await R("telegram",async r=>(await Promise.resolve().then(()=>(K(),B))).telegram(r.platforms.telegram),e,o),e.platforms?.discord&&await R("discord",async r=>(await Promise.resolve().then(()=>(J(),z))).discord(r.platforms.discord),e,o),e.platforms?.whatsapp&&await R("whatsapp",async r=>(await Promise.resolve().then(()=>(Z(),V))).whatsapp(r.platforms.whatsapp),e,o),e.platforms?.signal&&await R("signal",async r=>(await Promise.resolve().then(()=>(X(),Q))).signal_(r.platforms.signal),e,o),o.length===0&&process.stderr.write(`oracle-gateway: no platforms configured. Run 'oracle setup telegram' first.
+`)}}async function er(){let e=Qe(),o=[];e.platforms?.telegram&&await R("telegram",async r=>(await Promise.resolve().then(()=>(B(),H))).telegram(r.platforms.telegram),e,o),e.platforms?.discord&&await R("discord",async r=>(await Promise.resolve().then(()=>(K(),q))).discord(r.platforms.discord),e,o),e.platforms?.whatsapp&&await R("whatsapp",async r=>(await Promise.resolve().then(()=>(Y(),J))).whatsapp(r.platforms.whatsapp),e,o),e.platforms?.signal&&await R("signal",async r=>(await Promise.resolve().then(()=>(Z(),V))).signal_(r.platforms.signal),e,o),o.length===0&&process.stderr.write(`oracle-gateway: no platforms configured. Run 'oracle setup telegram' first.
 `),process.stderr.write(`oracle-gateway: ${o.length} platform(s) connected
-`),Ve((r,t)=>{t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"ok",platforms:Object.keys(e.platforms||{})}))}).listen(re.ORACLE_GATEWAY_PORT||9270,"127.0.0.1")}or().catch(e=>{process.stderr.write(`oracle-gateway: ${e.message}
+`),ze((r,t)=>{t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"ok",platforms:Object.keys(e.platforms||{})}))}).listen(X.ORACLE_GATEWAY_PORT||9270,"127.0.0.1")}er().catch(e=>{process.stderr.write(`oracle-gateway: ${e.message}
 `),process.exit(1)});

package/dist/bin/oracle-init.mjs

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
-import s from"node:fs";import o from"node:path";import m from"node:os";import{randomBytes as H}from"node:crypto";import{execFileSync as F}from"node:child_process";import{fileURLToPath as q}from"node:url";import{existsSync as M,readFileSync as J}from"node:fs";import{dirname as C,join as O}from"node:path";import{fileURLToPath as B}from"node:url";function K(e){let t=C(B(e));for(let n=0;n<8;n+=1){let i=O(t,"package.json");if(M(i))try{let d=JSON.parse(J(i,"utf8"));if(d&&typeof d.version=="string")return t}catch{}let r=C(t);if(r===t)break;t=r}throw new Error(`oracle: could not resolve package root from ${e}`)}function R(e,t){let n=K(t),i=O(n,e);return M(i)?i:O(n,"dist","assets",e)}var z=o.dirname(q(import.meta.url)),$=R("profiles",import.meta.url),E=R("skills",import.meta.url),g=process.argv.slice(2),p=g.includes("--apply"),I=g.includes("--force"),D=g.includes("--json"),N=(()=>{let e=g.indexOf("--only");return e>=0?g[e+1]:null})(),l=(...e)=>{D||console.log(...e)};function W(){return JSON.parse(s.readFileSync(o.join($,"profile.schema.json"),"utf8"))}function Y(e,t,n){let i=[],r=t.required||[];for(let a of r)e[a]===void 0&&i.push(`missing required field: ${a}`);e.id&&!/^[a-z_][a-z0-9-]*$/.test(e.id)&&i.push(`id "${e.id}" must be lowercase, no dots (Hermes rejects dots)`);let d=t.properties.role.enum;e.role&&!d.includes(e.role)&&i.push(`role "${e.role}" not one of ${d.join(", ")}`);let u=e.posture||{};u.default!=="DISARMED"&&i.push("posture.default must be DISARMED -- a lane that ships armed is a bug"),u.signing&&!["none","user-wallet"].includes(u.signing)&&i.push(`posture.signing "${u.signing}" invalid -- Oracle holds no keys`);let c=t.properties.posture.properties.grantActions.items.enum;for(let a of u.grantActions||[])c.includes(a)||i.push(`grantAction "${a}" not allowed (broadcast/sign actions are forbidden)`);typeof u.rationale=="string"&&u.rationale.length<20&&i.push("posture.rationale too short -- justify the grant");for(let a of e.skills||[])n.has(a)||i.push(`skill "${a}" does not exist in skills/`);return i}function G(){if(!s.existsSync(E))return new Map;let e=new Map;for(let t of s.readdirSync(E,{withFileTypes:!0})){if(!t.isDirectory())continue;let n=o.join(E,t.name,"SKILL.md");s.existsSync(n)&&e.set(t.name,n)}return e}function Q(){if(!s.existsSync($))return[];let e=[];for(let t of s.readdirSync($,{withFileTypes:!0})){if(!t.isDirectory())continue;let n=o.join($,t.name,"profile.json");if(!s.existsSync(n))continue;let i=JSON.parse(s.readFileSync(n,"utf8"));i.__dir=o.join($,t.name),e.push(i)}return e}function V(){try{return F("hermes",["--version"],{stdio:"pipe",timeout:2e4}),!0}catch{return!1}}function L(){let e=(process.env.HERMES_HOME||"").trim();if(e){let t=e.split(o.sep),n=t.lastIndexOf("profiles");return n>0&&n===t.length-2?t.slice(0,n).join(o.sep):e}return o.join(m.homedir(),".hermes")}function X(e){try{let t=F("hermes",["profile","list"],{encoding:"utf8",timeout:3e4});return new RegExp(`(^|\\s)${e}(\\s|$)`,"m").test(t)}catch{return!1}}var U=[],h=[],k=[];function b(e,t){try{return s.readFileSync(e,"utf8")===s.readFileSync(t,"utf8")}catch{return!1}}function f(e,t){U.push({kind:e,detail:t,applied:p}),l(`${p?"  \u2714":"  \xB7"} ${e}: ${t}`)}function Z(e){return e===""||/[:#\[\]{},&*!|>'"%@`\s]/.test(e)||/^(?:null|true|false|\d+)$/i.test(e)?JSON.stringify(e):e}function ee(e,t){return[`  ${e}:`,"    command: node","    args:",`      - ${Z(t)}`,"    enabled: true"].join(`
-`)}function te(e,t,n){let i=ee(t,n);if(!s.existsSync(e))return s.writeFileSync(e,`mcp_servers:
+import n from"node:fs";import o from"node:path";import m from"node:os";import{randomBytes as H}from"node:crypto";import{execFileSync as F}from"node:child_process";import{fileURLToPath as q}from"node:url";import{existsSync as M,readFileSync as J}from"node:fs";import{dirname as C,join as O}from"node:path";import{fileURLToPath as B}from"node:url";function K(e){let t=C(B(e));for(let s=0;s<8;s+=1){let i=O(t,"package.json");if(M(i))try{let d=JSON.parse(J(i,"utf8"));if(d&&typeof d.version=="string")return t}catch{}let r=C(t);if(r===t)break;t=r}throw new Error(`oracle: could not resolve package root from ${e}`)}function R(e,t){let s=K(t),i=O(s,e);return M(i)?i:O(s,"dist","assets",e)}var z=o.dirname(q(import.meta.url)),$=R("profiles",import.meta.url),E=R("skills",import.meta.url),g=process.argv.slice(2),p=g.includes("--apply"),I=g.includes("--force"),D=g.includes("--json"),N=(()=>{let e=g.indexOf("--only");return e>=0?g[e+1]:null})(),l=(...e)=>{D||console.log(...e)};function W(){return JSON.parse(n.readFileSync(o.join($,"profile.schema.json"),"utf8"))}function Y(e,t,s){let i=[],r=t.required||[];for(let a of r)e[a]===void 0&&i.push(`missing required field: ${a}`);e.id&&!/^[a-z_][a-z0-9-]*$/.test(e.id)&&i.push(`id "${e.id}" must be lowercase, no dots (Hermes rejects dots)`);let d=t.properties.role.enum;e.role&&!d.includes(e.role)&&i.push(`role "${e.role}" not one of ${d.join(", ")}`);let u=e.posture||{};u.default!=="DISARMED"&&i.push("posture.default must be DISARMED -- a lane that ships armed is a bug"),u.signing&&!["none","user-wallet"].includes(u.signing)&&i.push(`posture.signing "${u.signing}" invalid -- lanes use none or user-wallet; local signing is oracle signer`);let c=t.properties.posture.properties.grantActions.items.enum;for(let a of u.grantActions||[])c.includes(a)||i.push(`grantAction "${a}" not allowed (broadcast/sign actions are forbidden)`);typeof u.rationale=="string"&&u.rationale.length<20&&i.push("posture.rationale too short -- justify the grant");for(let a of e.skills||[])s.has(a)||i.push(`skill "${a}" does not exist in skills/`);return i}function G(){if(!n.existsSync(E))return new Map;let e=new Map;for(let t of n.readdirSync(E,{withFileTypes:!0})){if(!t.isDirectory())continue;let s=o.join(E,t.name,"SKILL.md");n.existsSync(s)&&e.set(t.name,s)}return e}function Q(){if(!n.existsSync($))return[];let e=[];for(let t of n.readdirSync($,{withFileTypes:!0})){if(!t.isDirectory())continue;let s=o.join($,t.name,"profile.json");if(!n.existsSync(s))continue;let i=JSON.parse(n.readFileSync(s,"utf8"));i.__dir=o.join($,t.name),e.push(i)}return e}function V(){try{return F("hermes",["--version"],{stdio:"pipe",timeout:2e4}),!0}catch{return!1}}function L(){let e=(process.env.HERMES_HOME||"").trim();if(e){let t=e.split(o.sep),s=t.lastIndexOf("profiles");return s>0&&s===t.length-2?t.slice(0,s).join(o.sep):e}return o.join(m.homedir(),".hermes")}function X(e){try{let t=F("hermes",["profile","list"],{encoding:"utf8",timeout:3e4});return new RegExp(`(^|\\s)${e}(\\s|$)`,"m").test(t)}catch{return!1}}var U=[],h=[],k=[];function b(e,t){try{return n.readFileSync(e,"utf8")===n.readFileSync(t,"utf8")}catch{return!1}}function f(e,t){U.push({kind:e,detail:t,applied:p}),l(`${p?"  \u2714":"  \xB7"} ${e}: ${t}`)}function Z(e){return e===""||/[:#\[\]{},&*!|>'"%@`\s]/.test(e)||/^(?:null|true|false|\d+)$/i.test(e)?JSON.stringify(e):e}function ee(e,t){return[`  ${e}:`,"    command: node","    args:",`      - ${Z(t)}`,"    enabled: true"].join(`
+`)}function te(e,t,s){let i=ee(t,s);if(!n.existsSync(e))return n.writeFileSync(e,`mcp_servers:
 ${i}
-`,"utf8"),"created";let r=s.readFileSync(e,"utf8");if(r.includes(n)&&new RegExp(`^\\s*${t}:\\s*$`,"m").test(r))return"present";let d=new RegExp(`^([ \\t]*)${t}:\\s*\\n(?:\\1[ \\t]+.*\\n)*`,"m");return d.test(r)?(r=r.replace(d,`${i}
-`),s.writeFileSync(e,r,"utf8"),"updated"):(/^mcp_servers:\s*$/m.test(r)||/^mcp_servers:\s*\n/m.test(r)?r=r.replace(/^(mcp_servers:\s*\n)/m,`$1${i}
+`,"utf8"),"created";let r=n.readFileSync(e,"utf8");if(r.includes(s)&&new RegExp(`^\\s*${t}:\\s*$`,"m").test(r))return"present";let d=new RegExp(`^([ \\t]*)${t}:\\s*\\n(?:\\1[ \\t]+.*\\n)*`,"m");return d.test(r)?(r=r.replace(d,`${i}
+`),n.writeFileSync(e,r,"utf8"),"updated"):(/^mcp_servers:\s*$/m.test(r)||/^mcp_servers:\s*\n/m.test(r)?r=r.replace(/^(mcp_servers:\s*\n)/m,`$1${i}
 `):/^_config_version:.*$/m.test(r)?r=r.replace(/^(_config_version:.*\n)/m,`$1mcp_servers:
 ${i}
 `):r=`mcp_servers:
 ${i}
-${r}`,s.writeFileSync(e,r,"utf8"),"wired")}var se=W(),_=G(),P=new Set(_.keys()),S=Q();S=S.filter(e=>!e.template);N&&(S=S.filter(e=>e.id===N));l(`oracle-init ${p?"(APPLY)":"(dry run -- pass --apply to install)"}`);l(`  profiles: ${S.length}   skills: ${_.size}`);var T=[];for(let e of S){let t=Y(e,se,P);t.length&&T.push({id:e.id,errors:t})}if(T.length){if(D)process.stdout.write(`${JSON.stringify({ok:!1,invalid:T},null,2)}
+${r}`,n.writeFileSync(e,r,"utf8"),"wired")}var ne=W(),_=G(),P=new Set(_.keys()),S=Q();S=S.filter(e=>!e.template);N&&(S=S.filter(e=>e.id===N));l(`oracle-init ${p?"(APPLY)":"(dry run -- pass --apply to install)"}`);l(`  profiles: ${S.length}   skills: ${_.size}`);var T=[];for(let e of S){let t=Y(e,ne,P);t.length&&T.push({id:e.id,errors:t})}if(T.length){if(D)process.stdout.write(`${JSON.stringify({ok:!1,invalid:T},null,2)}
 `);else{console.error(`
-validation failed:`);for(let e of T){console.error(`  ${e.id}:`);for(let t of e.errors)console.error(`    - ${t}`)}}process.exit(1)}l("  validation: ok");{let e=o.join(m.homedir(),".config","oracle"),t=o.join(e,"exec.env"),n=!!(process.env.ORACLE_ROUTE_ATTESTATION_SECRET||process.env.MAD_ROUTE_ATTESTATION_SECRET);if(!n&&s.existsSync(t))try{let i=s.readFileSync(t,"utf8");n=/^ORACLE_ROUTE_ATTESTATION_SECRET=.+$/m.test(i)||/^MAD_ROUTE_ATTESTATION_SECRET=.+$/m.test(i)}catch{}if(n)f("attestation secret","present");else if(f("attestation secret",`generate -> ${o.relative(m.homedir(),t)}`),p){s.mkdirSync(e,{recursive:!0,mode:448});try{s.chmodSync(e,448)}catch{}let r=`ORACLE_ROUTE_ATTESTATION_SECRET=${H(32).toString("hex")}
-`;if(s.existsSync(t)){let d=s.readFileSync(t,"utf8");!/ORACLE_ROUTE_ATTESTATION_SECRET=/.test(d)&&!/MAD_ROUTE_ATTESTATION_SECRET=/.test(d)&&s.appendFileSync(t,d.endsWith(`
+validation failed:`);for(let e of T){console.error(`  ${e.id}:`);for(let t of e.errors)console.error(`    - ${t}`)}}process.exit(1)}l("  validation: ok");{let e=o.join(m.homedir(),".config","oracle"),t=o.join(e,"exec.env"),s=!!(process.env.ORACLE_ROUTE_ATTESTATION_SECRET||process.env.MAD_ROUTE_ATTESTATION_SECRET);if(!s&&n.existsSync(t))try{let i=n.readFileSync(t,"utf8");s=/^ORACLE_ROUTE_ATTESTATION_SECRET=.+$/m.test(i)||/^MAD_ROUTE_ATTESTATION_SECRET=.+$/m.test(i)}catch{}if(s)f("attestation secret","present");else if(f("attestation secret",`generate -> ${o.relative(m.homedir(),t)}`),p){n.mkdirSync(e,{recursive:!0,mode:448});try{n.chmodSync(e,448)}catch{}let r=`ORACLE_ROUTE_ATTESTATION_SECRET=${H(32).toString("hex")}
+`;if(n.existsSync(t)){let d=n.readFileSync(t,"utf8");!/ORACLE_ROUTE_ATTESTATION_SECRET=/.test(d)&&!/MAD_ROUTE_ATTESTATION_SECRET=/.test(d)&&n.appendFileSync(t,d.endsWith(`
 `)||d.length===0?r:`
-${r}`,{mode:384})}else s.writeFileSync(t,r,{mode:384});try{s.chmodSync(t,384)}catch{}}}var v=V();l(v?"  hermes CLI: found":`  hermes CLI: not found -- installing profile files directly.
+${r}`,{mode:384})}else n.writeFileSync(t,r,{mode:384});try{n.chmodSync(t,384)}catch{}}}var v=V();l(v?"  hermes CLI: found":`  hermes CLI: not found -- installing profile files directly.
     (Hermes discovers any directory under <root>/profiles/, so this works.
      MCP wiring is the one step that needs the CLI; instructions printed at the end.)`);for(let e of S){l(`
-${e.label} (${e.id})`);let t=o.join(L(),"profiles",e.id),n=o.join(t,"SOUL.md"),i=s.existsSync(n),r=new Map((e.skills||[]).map(c=>[c,s.existsSync(o.join(t,"skills",c,"SKILL.md"))]));if(v?X(e.id):s.existsSync(t))f("profile exists",e.id);else if(v){if(f("create profile",e.id),p)try{F("hermes",["profile","create",e.id],{stdio:"pipe",timeout:12e4})}catch{f("create note",`hermes profile create failed for ${e.id}; writing files directly`)}}else f("create profile dir",e.id),p&&s.mkdirSync(t,{recursive:!0});let u=o.join(e.__dir,"SOUL.md");if(s.existsSync(u)){let c=i&&!b(u,n);if(c&&!I)f("SKIP SOUL.md (exists)",`${o.relative(m.homedir(),n)} -- kept yours; --force to overwrite`),h.push({lane:e.id,file:"SOUL.md",reason:"already exists"});else if(f("install SOUL.md",o.relative(m.homedir(),n)),p){if(s.mkdirSync(o.dirname(n),{recursive:!0}),c){let a=`${n}.bak-oracle-init-${Date.now()}`;s.copyFileSync(n,a),f("backed up",o.relative(m.homedir(),a))}s.copyFileSync(u,n)}}for(let c of e.skills||[]){let a=o.join(t,"skills",c,"SKILL.md");if(r.get(c)&&!b(_.get(c),a)&&!I){f("SKIP skill (exists)",`${c} -> ${e.id}`),h.push({lane:e.id,file:`skills/${c}`,reason:"already exists"});continue}f("install skill",`${c} -> ${e.id}`),p&&(s.mkdirSync(o.dirname(a),{recursive:!0}),s.copyFileSync(_.get(c),a))}for(let c of e.mcp||[]){let a=o.join(z,"oracle-data-mcp.mjs"),y=o.join(t,"config.yaml"),x=`hermes -p ${e.id} mcp add ${c} --command node --args ${a}`;if(c!=="oracle-data"){f("mcp manual",x),k.push({lane:e.id,server:c,command:x});continue}if(f("wire mcp",`${c} (${e.id}) -> ${o.relative(m.homedir(),y)}`),p)try{s.mkdirSync(t,{recursive:!0});let w=te(y,c,a);f("mcp config",`${w}: ${o.relative(m.homedir(),y)}`)}catch(w){f("mcp note",`could not write ${y}: ${w.message}`),k.push({lane:e.id,server:c,command:x})}}f("posture",`DISARMED (${(e.posture.grantActions||[]).join(", ")})`)}var A=o.join(m.homedir(),".config","oracle","skills"),j=E;if(p&&s.existsSync(j)){s.mkdirSync(A,{recursive:!0});let e=0;for(let t of s.readdirSync(j,{withFileTypes:!0})){if(!t.isFile()||!t.name.endsWith(".md"))continue;let n=o.join(j,t.name),i=o.join(A,t.name);if(!I&&s.existsSync(i)){h.push({lane:"standalone",file:t.name});continue}try{s.copyFileSync(n,i),e++}catch(r){f("skill copy",`failed ${t.name}: ${r.message}`)}}e&&l(`  standalone skills: ${e} installed to ${A}`)}var ne={ok:!0,applied:p,profiles:S.map(e=>e.id),skills:[...P],actions:U.length,skipped:h,mcpManual:k,hermesDetected:v,hermesRoot:L()};if(D)process.stdout.write(`${JSON.stringify(ne,null,2)}
+${e.label} (${e.id})`);let t=o.join(L(),"profiles",e.id),s=o.join(t,"SOUL.md"),i=n.existsSync(s),r=new Map((e.skills||[]).map(c=>[c,n.existsSync(o.join(t,"skills",c,"SKILL.md"))]));if(v?X(e.id):n.existsSync(t))f("profile exists",e.id);else if(v){if(f("create profile",e.id),p)try{F("hermes",["profile","create",e.id],{stdio:"pipe",timeout:12e4})}catch{f("create note",`hermes profile create failed for ${e.id}; writing files directly`)}}else f("create profile dir",e.id),p&&n.mkdirSync(t,{recursive:!0});let u=o.join(e.__dir,"SOUL.md");if(n.existsSync(u)){let c=i&&!b(u,s);if(c&&!I)f("SKIP SOUL.md (exists)",`${o.relative(m.homedir(),s)} -- kept yours; --force to overwrite`),h.push({lane:e.id,file:"SOUL.md",reason:"already exists"});else if(f("install SOUL.md",o.relative(m.homedir(),s)),p){if(n.mkdirSync(o.dirname(s),{recursive:!0}),c){let a=`${s}.bak-oracle-init-${Date.now()}`;n.copyFileSync(s,a),f("backed up",o.relative(m.homedir(),a))}n.copyFileSync(u,s)}}for(let c of e.skills||[]){let a=o.join(t,"skills",c,"SKILL.md");if(r.get(c)&&!b(_.get(c),a)&&!I){f("SKIP skill (exists)",`${c} -> ${e.id}`),h.push({lane:e.id,file:`skills/${c}`,reason:"already exists"});continue}f("install skill",`${c} -> ${e.id}`),p&&(n.mkdirSync(o.dirname(a),{recursive:!0}),n.copyFileSync(_.get(c),a))}for(let c of e.mcp||[]){let a=o.join(z,"oracle-data-mcp.mjs"),y=o.join(t,"config.yaml"),x=`hermes -p ${e.id} mcp add ${c} --command node --args ${a}`;if(c!=="oracle-data"){f("mcp manual",x),k.push({lane:e.id,server:c,command:x});continue}if(f("wire mcp",`${c} (${e.id}) -> ${o.relative(m.homedir(),y)}`),p)try{n.mkdirSync(t,{recursive:!0});let w=te(y,c,a);f("mcp config",`${w}: ${o.relative(m.homedir(),y)}`)}catch(w){f("mcp note",`could not write ${y}: ${w.message}`),k.push({lane:e.id,server:c,command:x})}}f("posture",`DISARMED (${(e.posture.grantActions||[]).join(", ")})`)}var A=o.join(m.homedir(),".config","oracle","skills"),j=E;if(p&&n.existsSync(j)){n.mkdirSync(A,{recursive:!0});let e=0;for(let t of n.readdirSync(j,{withFileTypes:!0})){if(!t.isFile()||!t.name.endsWith(".md"))continue;let s=o.join(j,t.name),i=o.join(A,t.name);if(!I&&n.existsSync(i)){h.push({lane:"standalone",file:t.name});continue}try{n.copyFileSync(s,i),e++}catch(r){f("skill copy",`failed ${t.name}: ${r.message}`)}}e&&l(`  standalone skills: ${e} installed to ${A}`)}var se={ok:!0,applied:p,profiles:S.map(e=>e.id),skills:[...P],actions:U.length,skipped:h,mcpManual:k,hermesDetected:v,hermesRoot:L()};if(D)process.stdout.write(`${JSON.stringify(se,null,2)}
 `);else{if(l(`
 ${p?"installed":"would install"} ${S.length} lanes.`),h.length){l(`${h.length} file(s) already existed and were kept:`);for(let e of h)l(`  - ${e.lane}/${e.file}`);l("pass --force to overwrite (a timestamped .bak is written first).")}if(k.length){l(`
 MCP wiring needed a manual follow-up:`);for(let e of k)l(`  ${e.command}`)}p||l("re-run with --apply to make changes."),l(`