@oracle-agent/oracle 0.28.21 → 0.28.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,57 +1,64 @@
|
|
|
1
|
-
import{spawnSync as
|
|
1
|
+
import{spawnSync as Er}from"node:child_process";import{stdin as z,stdout as yt}from"node:process";var Se=Object.freeze([{key:"telegram",name:"telegram",hermes:["gateway","setup"],required:["TELEGRAM_BOT_TOKEN"],optional:["TELEGRAM_ALLOWED_USERS","TELEGRAM_PROXY"],note:"dms \xB7 groups \xB7 topics"},{key:"discord",name:"discord",hermes:["gateway","setup"],required:["DISCORD_BOT_TOKEN"],optional:["DISCORD_ALLOWED_USERS"],note:"dms \xB7 channels \xB7 threads"},{key:"slack",name:"slack",hermes:["gateway","setup"],required:["SLACK_BOT_TOKEN","SLACK_APP_TOKEN"],optional:["SLACK_ALLOWED_USERS"],note:"socket mode"},{key:"whatsapp",name:"whatsapp",hermes:["whatsapp"],required:[],optional:["WHATSAPP_ALLOWED_USERS","WHATSAPP_MODE"],note:"qr bridge"},{key:"whatsapp-cloud",name:"whatsapp cloud",hermes:["whatsapp-cloud"],required:[],optional:[],note:"business cloud api"},{key:"signal",name:"signal",hermes:["gateway","setup"],required:["SIGNAL_HTTP_URL","SIGNAL_ACCOUNT"],optional:["SIGNAL_ALLOWED_USERS"],note:"signal-cli rest bridge"},{key:"matrix",name:"matrix",hermes:["gateway","setup"],required:["MATRIX_HOMESERVER","MATRIX_ACCESS_TOKEN","MATRIX_USER_ID"],optional:["MATRIX_ALLOWED_USERS"],note:"rooms \xB7 dms"},{key:"mattermost",name:"mattermost",hermes:["gateway","setup"],required:["MATTERMOST_URL","MATTERMOST_TOKEN"],optional:["MATTERMOST_ALLOWED_USERS"],note:"channels \xB7 dms"},{key:"email",name:"email",hermes:["gateway","setup"],required:["EMAIL_ADDRESS","EMAIL_PASSWORD","EMAIL_IMAP_HOST","EMAIL_SMTP_HOST"],optional:[],note:"imap/smtp mailbox"},{key:"bluebubbles",name:"bluebubbles",hermes:["gateway","setup"],required:[],optional:[],note:"imessage via bluebubbles"},{key:"photon",name:"photon",hermes:["photon"],required:["PHOTON_PROJECT_ID","PHOTON_PROJECT_SECRET"],optional:["PHOTON_ALLOWED_USERS","PHOTON_HOME_CHANNEL"],note:"imessage via spectrum (no mac)"},{key:"homeassistant",name:"homeassistant",hermes:["gateway","setup"],required:["HASS_URL","HASS_TOKEN"],optional:[],note:"smart home"},{key:"webhook",name:"webhook",hermes:["gateway","setup"],required:[],optional:[],note:"http ingress"},{key:"api-server",name:"api server",hermes:["gateway","setup"],required:[],optional:[],note:"local http api"},{key:"dingtalk",name:"dingtalk",hermes:["gateway","setup"],required:[],optional:[],note:"dingtalk bot"},{key:"feishu",name:"feishu",hermes:["gateway","setup"],required:[],optional:[],note:"feishu / lark"},{key:"wecom",name:"wecom",hermes:["gateway","setup"],required:[],optional:[],note:"wecom"},{key:"weixin",name:"weixin",hermes:["gateway","setup"],required:[],optional:[],note:"weixin"},{key:"qqbot",name:"qqbot",hermes:["gateway","setup"],required:[],optional:[],note:"qq bot"}]);function He(e){return String(e||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}function J(){return Se.slice()}function q(e){let t=He(e);if(!t)return null;for(let r of Se)if(r.key===t||He(r.name)===t)return r;return null}function ze({profile:e="oracle",statuses:t={}}={}){let r=["oracle setup","","one oracle. many models. every connected channel.",`profile: ${e}`,"","start here (most people):"," 1. oracle setup model connect Claude / Codex / Grok / API key"," 2. oracle setup telegram bot token \u2192 dm your bot"," oracle setup discord bot token \u2192 channels / dms"," oracle setup whatsapp qr bridge (or whatsapp-cloud)"," 3. oracle setup gateway restart apply channel config","","messaging platforms:",""];for(let n of Se){let o=t[n.key]||"unset";r.push(` ${n.key.padEnd(16)} ${String(o).padEnd(8)} ${n.note}`)}return r.push(""),r.push("commands:"),r.push(" oracle setup this menu"),r.push(" oracle setup model standalone OAuth / API keys"),r.push(" oracle setup messaging open hermes gateway setup wizard"),r.push(" oracle setup telegram set TELEGRAM_BOT_TOKEN (stdin or --token)"),r.push(" oracle setup discord set DISCORD_BOT_TOKEN"),r.push(" oracle setup whatsapp qr link via hermes"),r.push(" oracle setup slack bot + app tokens"),r.push(" oracle setup status show configured platforms (no secrets)"),r.push(" oracle setup gateway start/status/restart hermes gateway"),r.push(" /setup same menu inside the tui"),r.push(" /setup telegram|discord|whatsapp channel how-to (no secrets)"),r.push(""),r.push("notes:"),r.push(" tokens stay in the hermes profile .env on this machine"),r.push(" oracle never prints bot tokens or app secrets"),r.push(' pipe tokens: echo "$TOKEN" | oracle setup telegram'),r.push(" after token setup: oracle setup gateway restart"),r.join(`
|
|
2
2
|
`)+`
|
|
3
|
-
`}import
|
|
4
|
-
`),{mode:384});try{
|
|
5
|
-
`,{mode:384}),
|
|
6
|
-
`,{mode:384}),y.renameSync(t,e),process.platform!=="win32"&&y.chmodSync(e,384)}function pt(e){if(process.platform!=="linux")return!1;let r=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!r.error&&r.status===0}function oe(e){let r=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(r))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return r}function C(e={}){let r=String(e.accessToken||e.access_token||"").trim(),t=String(e.refreshToken||e.refresh_token||"").trim(),o=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3),!r)throw new Error("OAuth credential is missing access token");return{accessToken:r,refreshToken:t,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function dt(e={}){let r=e.file||E.join(v(),"oauth.json"),t=e.metadataFile||E.join(E.dirname(r),"oauth-meta.json"),o=e.linksFile||E.join(E.dirname(r),"oauth-links.json"),n=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||ct,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&pt(s),a=i?"linux-secret-service":"private-file",c=`${r}.lock`;async function d(m){be(E.dirname(c));let h;for(let u=0;u<400;u+=1)try{h=y.openSync(c,"wx",384);break}catch(l){if(l?.code!=="EEXIST")throw l;try{Date.now()-y.statSync(c).mtimeMs>3e5&&y.unlinkSync(c)}catch{}await new Promise(f=>setTimeout(f,25))}if(h===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await m()}finally{try{y.closeSync(h)}catch{}try{y.unlinkSync(c)}catch{}}}function p(m,h="oauth"){return["application","oracle","kind",h,"provider",m]}function k(m){if(!y.existsSync(o))return null;let u=g(o,{providers:{}}).providers?.[m];if(!Array.isArray(u))return null;let l=[];for(let f of u)if(E.isAbsolute(String(f||"")))try{let w=g(f,{});if(m==="anthropic-oauth"&&w.claudeAiOauth){let P=C(w.claudeAiOauth);l.push({...P,refreshToken:"",source:"external-access-only"});continue}let _=w.credential_pool&&typeof w.credential_pool=="object"?w.credential_pool:null;if(_){let P=_[m]||_[m.replace(/-oauth$/,"")]||[],Fe=Array.isArray(P)?P:P?[P]:[];for(let ee of Fe)if(!(!ee||typeof ee!="object"))try{let Ke=C(ee);l.push({...Ke,refreshToken:"",source:"external-access-only"})}catch{}}}catch{}return l.length?l.find(f=>!f.expiresAt||f.expiresAt>n()+ut)||l[0]:null}function we(m){let h=T(m);if(i){let f=s("secret-tool",["lookup",...p(h)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!f.error&&f.status===0&&String(f.stdout||"").trim())try{return C(JSON.parse(String(f.stdout).trim()))}catch{}return k(h)}let l=g(r,{providers:{}}).providers?.[h];if(l)try{return C(l)}catch{}return k(h)}function De(m,h){let u=T(m),l=C(h);if(i){let w=s("secret-tool",["store",`--label=Oracle ${u} OAuth`,...p(u)],{input:JSON.stringify(l),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(w.error||w.status!==0)throw new Error("OS credential store rejected OAuth credential");let _=g(t,{providers:{}});return _.providers||={},_.providers[u]={expiresAt:l.expiresAt,source:l.source},O(t,_),l}let f=g(r,{providers:{}});return f.providers||={},f.providers[u]=l,O(r,f),l}function Ue(m){let h=T(m);if(i){let f=s("secret-tool",["clear",...p(h)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),w=g(t,{providers:{}});return w.providers&&delete w.providers[h],O(t,w),!f.error&&f.status===0}let u=g(r,{providers:{}}),l=!!u.providers?.[h];return u.providers&&delete u.providers[h],O(r,u),l}function ge(m){let h=oe(m);if(i){let u=s("secret-tool",["lookup",...p(h,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return u.error||u.status!==0?"":String(u.stdout||"").trim()}return String(g(r,{apiKeys:{}}).apiKeys?.[h]||"").trim()}function je(m,h){let u=oe(m),l=String(h||"").trim();if(!l)throw new Error("API key is empty");if(i){let w=s("secret-tool",["store",`--label=Oracle ${u} API key`,...p(u,"api-key")],{input:l,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(w.error||w.status!==0)throw new Error("OS credential store rejected API key");let _=g(t,{providers:{},apiKeys:{}});return _.apiKeys||={},_.apiKeys[u]={configured:!0},O(t,_),!0}let f=g(r,{providers:{},apiKeys:{}});return f.apiKeys||={},f.apiKeys[u]=l,O(r,f),!0}function Ne(m){let h=oe(m);if(i){let f=s("secret-tool",["clear",...p(h,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),w=g(t,{providers:{},apiKeys:{}});return w.apiKeys&&delete w.apiKeys[h],O(t,w),!f.error&&f.status===0}let u=g(r,{providers:{},apiKeys:{}}),l=!!u.apiKeys?.[h];return u.apiKeys&&delete u.apiKeys[h],O(r,u),l}function Me(){let m={},h={};if(i){let u=g(t,{providers:{},apiKeys:{}});for(let[l,f]of Object.entries(u.providers||{}))m[l]={loggedIn:!!we(l),expiresAt:Number(f.expiresAt||0),source:String(f.source||"oracle"),storage:a};for(let l of Object.keys(u.apiKeys||{}))h[l]={configured:!!ge(l),storage:a}}else{let u=g(r,{providers:{},apiKeys:{}});for(let[l,f]of Object.entries(u.providers||{}))m[l]={loggedIn:!!f?.accessToken,expiresAt:Number(f?.expiresAt||0),source:String(f?.source||"oracle"),storage:a};for(let[l,f]of Object.entries(u.apiKeys||{}))h[l]={configured:!!f,storage:a}}for(let u of Object.keys($)){if(m[u])continue;let l=k(u);l&&(m[u]={loggedIn:!0,expiresAt:l.expiresAt,source:l.source,storage:"external-access-source"})}return{storage:a,providers:m,apiKeys:h}}return Object.freeze({file:r,storage:a,get:we,set:De,remove:Ue,getApiKey:ge,setApiKey:je,removeApiKey:Ne,status:Me,withLock:d})}var Oe;function D(){return Oe||=dt(),Oe}function ne(e){return Buffer.from(e).toString("base64url")}function ft(){let e=ne(se(32));return{verifier:e,challenge:ne(nt("sha256").update(e).digest()),state:ne(se(24))}}function ht(e,r){let t=Buffer.from(String(e||"")),o=Buffer.from(String(r||""));return t.length===o.length&&st(t,o)}function mt(e){let r=String(e),t=process.platform==="darwin"?["open",[r]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",r]]:["xdg-open",[r]];try{return at(t[0],t[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function ie(e){return new URLSearchParams(e).toString()}async function R(e,r){if(!e?.ok){let o="";try{o=String((await e.json())?.error||"")}catch{}throw new Error(`${r} failed (HTTP ${e?.status||"unknown"}${o?`, ${o}`:""})`)}let t=await e.json();if(!t||typeof t!="object")throw new Error(`${r} returned invalid JSON`);return t}async function wt(e){if(e)return String(await e()).trim();let r=it.createInterface({input:process.stdin,output:process.stdout});try{return String(await r.question("Authorization code: ")).trim()}finally{r.close()}}function ae(e,r={}){let t=String(e.access_token||"").trim(),o=String(e.refresh_token||r.refreshToken||"").trim();if(!t)throw new Error("OAuth token response is missing access token");let n=Number(e.expires_in||3600);return C({accessToken:t,refreshToken:o,expiresAt:lt(r)+Math.max(1,n)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...r.discovery?{discovery:r.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function gt(e){let r=$["anthropic-oauth"],t=e.pkce||ft(),o=new URLSearchParams({code:"true",client_id:r.clientId,response_type:"code",redirect_uri:r.redirectUri,scope:r.scope,code_challenge:t.challenge,code_challenge_method:"S256",state:t.state}),n=`${r.authorizeUrl}?${o}`;e.output(`Open: ${n}`),e.openFn(n);let s=await wt(e.inputFn),[i,a]=s.split("#",2);if(!i||!ht(a,t.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(r.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:r.clientId,code:i,state:a,redirect_uri:r.redirectUri,code_verifier:t.verifier})});return ae(await R(c,"Claude OAuth token exchange"),e)}async function yt(e){let r=$["openai-codex"],t=await R(await e.fetchFn(`${r.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:r.clientId})}),"Codex device authorization");if(!t.user_code||!t.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let o=`${r.issuer}/codex/device`;e.output(`Open: ${o}`),e.output(`Code: ${t.user_code}`),e.openFn(o);let n=Math.max(3,Number(t.interval||5)),s;for(let a=0;a<Math.ceil(900/n);a+=1){await e.sleepFn(n*1e3);let c=await e.fetchFn(`${r.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:t.device_auth_id,user_code:t.user_code})});if(c.ok){s=await R(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(r.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:ie({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${r.issuer}/deviceauth/callback`,client_id:r.clientId,code_verifier:s.code_verifier})});return ae(await R(i,"Codex OAuth token exchange"),e)}function Y(e){let r=new URL(String(e)),t=r.hostname.toLowerCase();if(r.protocol!=="https:"||t!=="x.ai"&&!t.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return r.toString()}async function kt(e){let r=$["xai-oauth"],t=await R(await e.fetchFn(r.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Y(t.authorization_endpoint);let o=Y(t.token_endpoint),n=await R(await e.fetchFn(r.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:ie({client_id:r.clientId,scope:r.scope})}),"xAI device authorization");if(!n.device_code||!n.user_code||!n.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Y(n.verification_uri_complete||n.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${n.user_code}`),e.openFn(s);let i=Math.max(1,Number(n.interval||5)),a=Math.ceil(Math.max(1,Number(n.expires_in||600))/i);for(let c=0;c<a;c+=1){let d=await e.fetchFn(o,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:ie({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:r.clientId,device_code:n.device_code})});if(d.ok){let k=await R(d,"xAI OAuth token exchange");return ae(k,{...e,discovery:{authorization_endpoint:Y(t.authorization_endpoint),token_endpoint:o}})}let p="";try{p=String((await d.json())?.error||"")}catch{}if(p==="slow_down")await e.sleepFn((i+1)*1e3);else if(p==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${d.status}${p?`, ${p}`:""})`)}throw new Error("xAI device authorization timed out")}async function Te(e,r={}){let t=T(e),o={fetchFn:r.fetchFn||globalThis.fetch,inputFn:r.inputFn,sleepFn:r.sleepFn||(n=>new Promise(s=>setTimeout(s,n))),openFn:r.openFn||mt,output:r.output||(n=>process.stdout.write(`${n}
|
|
7
|
-
`)),now:
|
|
8
|
-
`,{mode:384}),
|
|
3
|
+
`}import L from"node:fs";import Ot from"node:os";import ve from"node:path";import oe from"node:fs";import _t from"node:os";import j from"node:path";import{fileURLToPath as kt}from"node:url";var St=j.dirname(kt(import.meta.url)),Dr=j.resolve(St,"../..");function le(){return process.env.ORACLE_FAKE_HOME||_t.homedir()}function vt(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function C(){return vt()?process.env.ORACLE_CONFIG_DIR||j.join(le(),".config","oracle"):j.join(le(),".config","oracle")}function At(){return j.join(C(),"desk.json")}function Et(){return j.join(C(),"env")}function X({force:e=!1}={}){if(X._done&&!e)return X._result||null;X._done=!0;let t={},r=(o,s)=>{if(s==null)return;let i=String(s).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=Et();if(oe.existsSync(o))for(let s of oe.readFileSync(o,"utf8").split(/\r?\n/)){let i=s.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let a=i[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),r(i[1],a)}}catch{}try{let o=At();if(oe.existsSync(o)){let s=JSON.parse(oe.readFileSync(o,"utf8"));s&&typeof s=="object"&&(r("ORACLE_DESK_URL",s.deskUrl||s.dataUrl||s.url),r("ORACLE_DATA_URL",s.dataUrl||s.deskUrl||s.url),r("ORACLE_API_URL",s.apiUrl||s.dataUrl||s.deskUrl),r("ORACLE_PUBLIC_URL",s.publicUrl||s.deskUrl||s.dataUrl),r("ORACLE_EXEC_URL",s.execUrl),r("MAD_DESK_URL",s.deskUrl||s.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),X._result=Object.keys(t).length?t:null,X._result}try{X()}catch{}function se(){return process.env.HERMES_HOME?j.resolve(process.env.HERMES_HOME):j.join(le(),".hermes")}function B(e){return oe.mkdirSync(e,{recursive:!0}),e}var $t=/(TOKEN|SECRET|PASSWORD|KEY|AUTH|PRIVATE|MNEMONIC|SEED)/i;function fe(e="oracle"){return ve.join(se(),"profiles",e,".env")}function Mt(e){let t={};for(let r of String(e||"").split(/\r?\n/)){let n=r.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),t[s]=i}return t}function qe(e="oracle"){let t=fe(e);return L.existsSync(t)?Mt(L.readFileSync(t,"utf8")):{}}function We(e,t,r){if(!t||$t.test(t)===!1&&/[^A-Z0-9_]/.test(t),!/^[A-Z][A-Z0-9_]*$/.test(t)){let f=new Error(`invalid env key '${t}'`);throw f.code="BAD_KEY",f}if(r==null||String(r).trim()===""){let f=new Error(`empty value for ${t}`);throw f.code="EMPTY",f}let n=fe(e);B(ve.dirname(n));let o=L.existsSync(n)?L.readFileSync(n,"utf8"):"",s=o?o.split(/\r?\n/):[],i=[],a=!1,c=`${t}=${String(r)}`;for(let f of s)f.startsWith(`${t}=`)?(i.push(c),a=!0):(f.length||i.length)&&i.push(f);for(a||(i.length&&i[i.length-1]!==""&&i.push(""),i.push(c));i.length&&i[i.length-1]==="";)i.pop();i.push(""),L.writeFileSync(n,i.join(`
|
|
4
|
+
`),{mode:384});try{L.chmodSync(n,384)}catch{}return{path:n,key:t,set:!0}}function Z(e="oracle"){let t=qe(e),r={};for(let n of J()){if(!n.required.length){r[n.key]="manual";continue}let o=n.required.filter(s=>!String(t[s]||"").trim());r[n.key]=o.length?"unset":"ready"}return{profile:e,statuses:r,envPath:fe(e)}}function de(e="oracle"){let{statuses:t}=Z(e);return ze({profile:e,statuses:t})}function pe(e,t,r,n={}){let o=q(t);if(!o){let u=new Error(`unknown platform '${t}'`);throw u.code="UNKNOWN_PLATFORM",u}if(!o.required.length){let u=new Error(`${o.key} uses hermes interactive setup (oracle setup messaging)`);throw u.code="NEEDS_INTERACTIVE",u}let i=o.required.filter(u=>/(TOKEN|PASSWORD|SECRET)$/i.test(u))[0]||(o.required.length===1?o.required[0]:null);if(!i){let u=new Error(`${o.key} has no single token field; provide each of [${o.required.join(", ")}] explicitly`);throw u.code="NEEDS_EXPLICIT_KEYS",u}let a=new Set([i,...Object.keys(n||{}).filter(u=>n[u]!=null&&String(n[u]).trim())]),c=qe(e),f=o.required.filter(u=>!a.has(u)&&!String(c[u]||"").trim());if(f.length){let u=new Error(`${o.key} also requires [${f.join(", ")}]; pass them explicitly (setup would otherwise be marked ready while unusable)`);throw u.code="MISSING_REQUIRED",u}We(e,i,r);for(let[u,x]of Object.entries(n||{}))x!=null&&String(x).trim()&&We(e,u,x);return{platform:o.key,set:o.required,profile:e,path:fe(e)}}function Tt(){return ve.join(C(),"setup-state.json")}function Y(e={}){B(C());let t=Tt(),r={};if(L.existsSync(t))try{r=JSON.parse(L.readFileSync(t,"utf8"))}catch{r={}}let n={...r,...e,updatedAt:new Date().toISOString(),host:Ot.hostname()};return L.writeFileSync(t,JSON.stringify(n,null,2)+`
|
|
5
|
+
`,{mode:384}),n}import Ge from"node:fs";import Q from"node:path";var Rt="0.19.0",Gr=`hermes-agent==${Rt}`;var Ye="0.12.1",Vr=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Ye}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Ye}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function Pt(){return Q.join(C(),"runtime")}function It(){return Q.join(Pt(),"venv")}function Ct(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return Q.join(It(),t,r)}function Lt(){return Ct("hermes")}function Nt(e){let t=process.platform==="win32"&&!Q.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(Q.delimiter))if(r)for(let n of t){let o=Q.join(r,`${e}${n}`);try{if(Ge.existsSync(o))return o}catch{}}return null}function he(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Lt();if(Ge.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=Nt("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}import{createHash as Dt,randomBytes as Oe,timingSafeEqual as Ft}from"node:crypto";import R from"node:fs";import N from"node:path";import Ut from"node:readline/promises";import{spawn as jt,spawnSync as Bt}from"node:child_process";var te=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Kt=12e4;function Ht(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function G(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(te))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function H(e){let t=G(e);return{id:t,...te[t]}}function M(e,t={}){if(!R.existsSync(e))return t;try{let r=JSON.parse(R.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${N.basename(e)}`)}}function Je(e){B(e),process.platform!=="win32"&&R.chmodSync(e,448)}function K(e,t){Je(N.dirname(e));let r=`${e}.${process.pid}.${Oe(4).toString("hex")}.tmp`;R.writeFileSync(r,`${JSON.stringify(t,null,2)}
|
|
6
|
+
`,{mode:384}),R.renameSync(r,e),process.platform!=="win32"&&R.chmodSync(e,384)}function zt(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function Ae(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function ee(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(n)&&n>=1e9&&n<1e12&&(n=n*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(n)?n:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function Wt(e={}){let t=e.file||N.join(C(),"oauth.json"),r=e.metadataFile||N.join(N.dirname(t),"oauth-meta.json"),n=e.linksFile||N.join(N.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Bt,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&zt(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function f(g){Je(N.dirname(c));let h;for(let d=0;d<400;d+=1)try{h=R.openSync(c,"wx",384);break}catch(l){if(l?.code!=="EEXIST")throw l;try{Date.now()-R.statSync(c).mtimeMs>3e5&&R.unlinkSync(c)}catch{}await new Promise(p=>setTimeout(p,25))}if(h===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await g()}finally{try{R.closeSync(h)}catch{}try{R.unlinkSync(c)}catch{}}}function u(g,h="oauth"){return["application","oracle","kind",h,"provider",g]}function x(g){if(!R.existsSync(n))return null;let d=M(n,{providers:{}}).providers?.[g];if(!Array.isArray(d))return null;let l=[];for(let p of d)if(N.isAbsolute(String(p||"")))try{let b=M(p,{});if(g==="anthropic-oauth"&&b.claudeAiOauth){let P=ee(b.claudeAiOauth);l.push({...P,refreshToken:"",source:"external-access-only"});continue}let k=b.credential_pool&&typeof b.credential_pool=="object"?b.credential_pool:null;if(k){let P=k[g]||k[g.replace(/-oauth$/,"")]||[],U=Array.isArray(P)?P:P?[P]:[];for(let W of U)if(!(!W||typeof W!="object"))try{let ke=ee(W);l.push({...ke,refreshToken:"",source:"external-access-only"})}catch{}}}catch{}return l.length?l.find(p=>!p.expiresAt||p.expiresAt>o()+Kt)||l[0]:null}function y(g){let h=G(g);if(i){let p=s("secret-tool",["lookup",...u(h)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!p.error&&p.status===0&&String(p.stdout||"").trim())try{return ee(JSON.parse(String(p.stdout).trim()))}catch{}return x(h)}let l=M(t,{providers:{}}).providers?.[h];if(l)try{return ee(l)}catch{}return x(h)}function O(g,h){let d=G(g),l=ee(h);if(i){let b=s("secret-tool",["store",`--label=Oracle ${d} OAuth`,...u(d)],{input:JSON.stringify(l),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(b.error||b.status!==0)throw new Error("OS credential store rejected OAuth credential");let k=M(r,{providers:{}});return k.providers||={},k.providers[d]={expiresAt:l.expiresAt,source:l.source},K(r,k),l}let p=M(t,{providers:{}});return p.providers||={},p.providers[d]=l,K(t,p),l}function S(g){let h=G(g);if(i){let p=s("secret-tool",["clear",...u(h)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),b=M(r,{providers:{}});return b.providers&&delete b.providers[h],K(r,b),!p.error&&p.status===0}let d=M(t,{providers:{}}),l=!!d.providers?.[h];return d.providers&&delete d.providers[h],K(t,d),l}function $(g){let h=Ae(g);if(i){let d=s("secret-tool",["lookup",...u(h,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return d.error||d.status!==0?"":String(d.stdout||"").trim()}return String(M(t,{apiKeys:{}}).apiKeys?.[h]||"").trim()}function _(g,h){let d=Ae(g),l=String(h||"").trim();if(!l)throw new Error("API key is empty");if(i){let b=s("secret-tool",["store",`--label=Oracle ${d} API key`,...u(d,"api-key")],{input:l,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(b.error||b.status!==0)throw new Error("OS credential store rejected API key");let k=M(r,{providers:{},apiKeys:{}});return k.apiKeys||={},k.apiKeys[d]={configured:!0},K(r,k),!0}let p=M(t,{providers:{},apiKeys:{}});return p.apiKeys||={},p.apiKeys[d]=l,K(t,p),!0}function v(g){let h=Ae(g);if(i){let p=s("secret-tool",["clear",...u(h,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),b=M(r,{providers:{},apiKeys:{}});return b.apiKeys&&delete b.apiKeys[h],K(r,b),!p.error&&p.status===0}let d=M(t,{providers:{},apiKeys:{}}),l=!!d.apiKeys?.[h];return d.apiKeys&&delete d.apiKeys[h],K(t,d),l}function F(){let g={},h={};if(i){let d=M(r,{providers:{},apiKeys:{}});for(let[l,p]of Object.entries(d.providers||{}))g[l]={loggedIn:!!y(l),expiresAt:Number(p.expiresAt||0),source:String(p.source||"oracle"),storage:a};for(let l of Object.keys(d.apiKeys||{}))h[l]={configured:!!$(l),storage:a}}else{let d=M(t,{providers:{},apiKeys:{}});for(let[l,p]of Object.entries(d.providers||{}))g[l]={loggedIn:!!p?.accessToken,expiresAt:Number(p?.expiresAt||0),source:String(p?.source||"oracle"),storage:a};for(let[l,p]of Object.entries(d.apiKeys||{}))h[l]={configured:!!p,storage:a}}for(let d of Object.keys(te)){if(g[d])continue;let l=x(d);l&&(g[d]={loggedIn:!0,expiresAt:l.expiresAt,source:l.source,storage:"external-access-source"})}return{storage:a,providers:g,apiKeys:h}}return Object.freeze({file:t,storage:a,get:y,set:O,remove:S,getApiKey:$,setApiKey:_,removeApiKey:v,status:F,withLock:f})}var Ve;function D(){return Ve||=Wt(),Ve}function Ee(e){return Buffer.from(e).toString("base64url")}function qt(){let e=Ee(Oe(32));return{verifier:e,challenge:Ee(Dt("sha256").update(e).digest()),state:Ee(Oe(24))}}function Yt(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Ft(r,n)}function Gt(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return jt(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function $e(e){return new URLSearchParams(e).toString()}async function V(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Vt(e){if(e)return String(await e()).trim();let t=Ut.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function Me(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return ee({accessToken:r,refreshToken:n,expiresAt:Ht(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Jt(e){let t=te["anthropic-oauth"],r=e.pkce||qt(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Vt(e.inputFn),[i,a]=s.split("#",2);if(!i||!Yt(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return Me(await V(c,"Claude OAuth token exchange"),e)}async function Xt(e){let t=te["openai-codex"],r=await V(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await V(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:$e({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return Me(await V(i,"Codex OAuth token exchange"),e)}function me(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Zt(e){let t=te["xai-oauth"],r=await V(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");me(r.authorization_endpoint);let n=me(r.token_endpoint),o=await V(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:$e({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=me(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let f=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:$e({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(f.ok){let x=await V(f,"xAI OAuth token exchange");return Me(x,{...e,discovery:{authorization_endpoint:me(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await f.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${f.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Xe(e,t={}){let r=G(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Gt,output:t.output||(o=>process.stdout.write(`${o}
|
|
7
|
+
`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Jt(n):r==="openai-codex"?Xt(n):Zt(n)}import we from"node:fs";import Te from"node:path";var Qt=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","custom","anthropic-oauth","openai-codex","xai-oauth"]);function ge(e){return String(e||"").trim()||void 0}function er(e,{required:t=!1}={}){let r=ge(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!Qt.has(r))throw new Error(`unsupported provider: ${r}`);return r}function tr(e,{required:t=!1}={}){let r=ge(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function rr(e){let t=ge(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function ye({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=er(e),s=tr(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:rr(r)};if(ge(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var nr=new Set(["auto","standalone","hermes","remote","arch"]);function or(){return Te.join(C(),"model.json")}function re(e){return String(e||"").trim()||void 0}function sr(e={}){let t=re(e.backend)?.toLowerCase()||"auto",r=ye({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=re(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=re(e.reasoningEffort),i=re(e.computeHost||e.remoteHost),a=re(e.computeUser||e.remoteUser),c=re(e.computePath||e.remotePath);if(!nr.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!i)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...s?{reasoningEffort:s}:{},...i?{computeHost:i}:{},...a?{computeUser:a}:{},...c?{computePath:c}:{}}}function Ze(e){let t=sr(e),r=or();B(Te.dirname(r)),process.platform!=="win32"&&we.chmodSync(Te.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return we.writeFileSync(n,`${JSON.stringify(t,null,2)}
|
|
8
|
+
`,{mode:384}),we.renameSync(n,r),process.platform!=="win32"&&we.chmodSync(r,384),t}var Qe=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},nous:{model:"moonshotai/kimi-k3"},custom:{model:""}});function Re(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function ir(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function ar(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",s),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
|
|
9
9
|
`)},s=i=>{let a=String(i);for(let c of a){if(c==="\r"||c===`
|
|
10
|
-
`){
|
|
11
|
-
`);let
|
|
12
|
-
`);return}for(let[o
|
|
13
|
-
`)}for(let[o
|
|
14
|
-
`)}function
|
|
15
|
-
`)}var
|
|
16
|
-
`):
|
|
17
|
-
`),0}if(
|
|
18
|
-
`),0}if(
|
|
19
|
-
`),0}throw new Error(`unknown auth action: ${
|
|
20
|
-
`),1}}};var
|
|
21
|
-
`)}
|
|
22
|
-
`)
|
|
23
|
-
`),r.
|
|
24
|
-
`)
|
|
25
|
-
`)
|
|
26
|
-
`)
|
|
27
|
-
`)}function
|
|
28
|
-
`)}function $
|
|
10
|
+
`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function Pe(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...ye({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function et(e,t,r={}){return Ze(Pe(e,t,r))}function cr(e){process.stdout.write(`storage: ${e.storage}
|
|
11
|
+
`);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
|
|
12
|
+
`);return}for(let[n,o]of t){let s=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${n}: ${o.loggedIn?"logged in":"missing"}, expires ${s}
|
|
13
|
+
`)}for(let[n,o]of r)process.stdout.write(`${n}: API key ${o.configured?"configured":"missing"}
|
|
14
|
+
`)}function ur(){return["oracle auth, configure OAuth or API-key authentication",""," oracle auth login claude|codex|grok [--model MODEL] [--no-browser]"," oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]"," PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|nous|custom",` printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`," oracle auth status [--json]"," oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
|
|
15
|
+
`)}var ne={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:ur(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=D();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
|
|
16
|
+
`):cr(o),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=H(o),i=Re(t,"--model")||s.model;Pe(s.id,i);let a=await Xe(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{et(s.id,i)}catch(f){throw c?n.set(s.id,c):n.remove(s.id),f}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
|
|
17
|
+
`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(Qe,o))throw new Error(`unsupported API-key provider: ${o}`);let s=Re(t,"--model")||Qe[o].model,i=Re(t,"--base-url");Pe(o,s,{baseUrl:i});let a=t.includes("--stdin")?await ir():await ar();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{et(o,s,{baseUrl:i})}catch(f){throw c?n.setApiKey(o,c):n.removeApiKey(o),f}}),process.stdout.write(`${o}: API key configured in ${n.storage}
|
|
18
|
+
`),0}if(r==="logout"){let o=String(t.find(a=>!a.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let s=!1;try{s=n.remove(G(o))}catch{}let i=n.removeApiKey(o);if(!s&&!i)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
|
|
19
|
+
`),0}throw new Error(`unknown auth action: ${r}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
|
|
20
|
+
`),1}}};var lr=Object.freeze([["#EAF7FF"," \u2584\u2584\u2584\u2588\u2588\u2588\u2588\u2584\u2584\u2584"],["#D8F2FF"," \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584"],["#B8F0FF"," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"],["#ACDEEF","\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"],["#A5D9EB","\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"],["#9FCBDD","\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"],["#91C2D7","\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"],["#7FA9BE"," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"],["#60717F"," \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580"],["#4A5A66"," \u2580\u2580\u2580\u2588\u2588\u2588\u2588\u2580\u2580\u2580"]]);var mn=Object.freeze([" \u2588\u2588\u2588\u2593\u2593"," \u2588\u2588\u2588\u2588\u2588\u2593\u2593\u2592","\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2593\u2592\u2592"," \u2593\u2593\u2593\u2593\u2592\u2592\u2592\u2591"," \u2592\u2592\u2592\u2591\u2591\u2591"]);var be=Object.freeze([[" \u2588\u2588\u2588\u2593\u2593"," \u2588\u2588\u2588\u2588\u2588\u2593\u2593\u2592","\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2593\u2592\u2592"," \u2593\u2593\u2593\u2593\u2592\u2592\u2592\u2591"," \u2592\u2592\u2592\u2591\u2591\u2591"],[" \u2593\u2588\u2588\u2588\u2593"," \u2592\u2593\u2593\u2588\u2588\u2588\u2588\u2588","\u2592\u2592\u2593\u2593\u2588\u2588\u2588\u2588\u2588\u2588"," \u2591\u2592\u2592\u2593\u2593\u2593\u2593\u2593"," \u2591\u2591\u2592\u2592\u2592\u2592"],[" \u2593\u2593\u2588\u2588\u2588"," \u2592\u2593\u2593\u2593\u2588\u2588\u2588\u2588","\u2592\u2592\u2593\u2593\u2593\u2588\u2588\u2588\u2588\u2588"," \u2591\u2592\u2592\u2592\u2593\u2593\u2593\u2593"," \u2591\u2591\u2591\u2592\u2592\u2592"],[" \u2591\u2592\u2592\u2593\u2593"," \u2591\u2592\u2592\u2593\u2593\u2593\u2593\u2593","\u2591\u2591\u2592\u2592\u2593\u2593\u2588\u2588\u2588\u2588"," \u2593\u2593\u2593\u2588\u2588\u2588\u2588\u2588\u2588"," \u2588\u2588\u2588\u2588\u2588\u2593"]]),fr=Object.freeze([["#EAF7FF"," __ "],["#D8F2FF"," ____ _________ ______/ /__ "],["#B8F0FF"," / __ \\/ ___/ __ `/ ___/ / _ \\"],["#ACDEEF","/ /_/ / / / /_/ / /__/ / __/"],["#91C2D7","\\____/_/ \\__,_/\\___/_/\\___/ "]]);var A=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function dr(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function tt(e,t,r){let n=dr(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function Ie({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>tt(38,r,n),bg:(r,n)=>tt(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var yn=Ie();function rt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as _r}from"node:child_process";var ie=Buffer.alloc(0);var pr={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},hr={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function T({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function it(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function mr(e){return e>=64&&e<=126}function nt(e){let t=e.toLowerCase();return T({name:t,shift:e!==t,sequence:e})}function gr(e){return e===13?T({name:"return",sequence:"\r"}):e===10?T({name:"return",sequence:`
|
|
21
|
+
`}):e===9?T({name:"tab",sequence:" "}):e===127?T({name:"backspace",sequence:"\x7F"}):e===8?T({name:"backspace",sequence:"\b"}):e>=1&&e<=26?T({name:String.fromCharCode(e+96),ctrl:!0,sequence:String.fromCharCode(e)}):T({name:"unknown",sequence:String.fromCharCode(e)})}function yr(e){let t=/^\u001b[\[O](\d*)(?:;(\d+))?(.)$/s.exec(e);if(!t)return T({name:"unknown",sequence:e});let r=t[1]===""?null:Number(t[1]),n=t[2]===void 0?null:Number(t[2]),o=t[3],s=null,i=n;if(o==="~"?s=hr[r]??null:(s=pr[o]??null,i===null&&r!==null&&r>1&&(i=r)),!s)return T({name:"unknown",sequence:e});let a=i===null?0:Math.max(0,i-1);return T({name:s,shift:(a&1)!==0,meta:(a&2)!==0,ctrl:(a&4)!==0,sequence:e})}function wr(e,t,r,n){let o=()=>(r.push(T({name:"escape",sequence:"\x1B"})),1);if(t+1>=e.length)return n?o():0;let s=e[t+1];if(s===91||s===79){let f=t+2;for(;f<e.length&&!mr(e[f]);)f+=1;return f>=e.length?n?o():0:(r.push(yr(e.toString("utf8",t,f+1))),f+1-t)}if(s===27)return o();let i=it(s);if(t+1+i>e.length)return n?o():0;let a=e.toString("utf8",t+1,t+1+i),c=a.toLowerCase();return r.push(T({name:c,meta:!0,shift:a!==c,sequence:`\x1B${a}`})),1+i}function ot(e,t){let r=[],n=0;for(;n<e.length;){let o=e[n];if(o===27){let i=wr(e,n,r,t);if(i===0)return{keys:r,rest:Buffer.from(e.subarray(n))};n+=i;continue}if(o<32||o===127){r.push(gr(o)),n+=1;continue}let s=it(o);if(n+s>e.length)return t?(r.push(nt(e.toString("utf8",n))),{keys:r,rest:ie}):{keys:r,rest:Buffer.from(e.subarray(n))};r.push(nt(e.toString("utf8",n,n+s))),n+=s}return{keys:r,rest:ie}}function st(e){return Buffer.isBuffer(e)?e:e==null?ie:typeof e=="string"?Buffer.from(e,"utf8"):Buffer.from(e)}function at(){let e=ie;return{push(t){let r=e.length===0?st(t):Buffer.concat([e,st(t)]),{keys:n,rest:o}=ot(r,!1);return e=o,n},flush(){if(e.length===0)return[];let{keys:t}=ot(e,!0);return e=ie,t},get pending(){return e.length}}}var Ce=/\u001B\[[0-9;]*m/g;function ct(e){if(new RegExp("\\p{Mark}","u").test(e))return 0;let t=e.codePointAt(0);return t===8205||t===65039?0:t>=4352&&(t<=4447||t===9001||t===9002||t>=11904&&t<=42191&&t!==12351||t>=44032&&t<=55203||t>=63744&&t<=64255||t>=65040&&t<=65049||t>=65072&&t<=65135||t>=65280&&t<=65376||t>=65504&&t<=65510||t>=127744&&t<=129791||t>=131072&&t<=262141)?2:t<32||t>=127&&t<160?0:1}function br(e){return[...rt(e)].reduce((t,r)=>t+ct(r),0)}function xr(e,t){if(t<=0)return"";let r=String(e).split(/(\u001B\[[0-9;]*m)/g),n="",o=0,s=!1;for(let i of r)if(i){if(Ce.test(i)){Ce.lastIndex=0,n+=i,s=i!=="\x1B[0m";continue}Ce.lastIndex=0;for(let a of i){let c=ct(a);if(o+c>t)return s?`${n}\x1B[0m`:n;n+=a,o+=c}}return n}function xe(e,t,r="left"){let n=Math.max(0,Math.floor(Number(t)||0)),o=xr(String(e),n),s=Math.max(0,n-br(o));if(r==="right")return`${" ".repeat(s)}${o}`;if(r==="center"){let i=Math.floor(s/2);return`${" ".repeat(i)}${o}${" ".repeat(s-i)}`}return`${o}${" ".repeat(s)}`}var kr=Object.freeze(["telegram","discord","whatsapp","slack","signal"]),pt=Object.freeze([{id:"claude",label:"Claude",hint:"Anthropic OAuth",kind:"oauth"},{id:"codex",label:"Codex",hint:"OpenAI OAuth",kind:"oauth"},{id:"grok",label:"Grok",hint:"xAI OAuth",kind:"oauth"}]),ht=Object.freeze([{id:"openrouter",label:"OpenRouter",hint:"API key",kind:"api-key"},{id:"openai",label:"OpenAI",hint:"API key",kind:"api-key"},{id:"anthropic",label:"Anthropic",hint:"API key",kind:"api-key"},{id:"deepseek",label:"DeepSeek",hint:"API key",kind:"api-key"},{id:"gemini",label:"Gemini",hint:"API key",kind:"api-key"},{id:"kimi",label:"Kimi",hint:"API key",kind:"api-key"},{id:"mistral",label:"Mistral",hint:"API key",kind:"api-key"},{id:"nous",label:"Nous",hint:"API key",kind:"api-key"}]);function Sr(e,t){let r=String(t||"unset");return r==="ready"||r==="connected"||r==="configured"?e.fg(A.ok,r):r==="manual"?e.fg(A.warn,r):e.fg(A.banner_dim,r||"unset")}function ut({profile:e="oracle",statuses:t=null,oauthStatus:r=null}={}){let n=t;if(!n)try{n=Z(e).statuses||{}}catch{n={}}let o=r;if(!o)try{o=D().status()}catch{o={providers:{},apiKeys:{}}}let s=pt.some(f=>{let u=H(f.id);return o.providers?.[u.id]?.loggedIn===!0}),i=ht.some(f=>o.apiKeys?.[f.id]?.configured===!0),a=[{id:"model",label:"model / sign-in",note:"Claude \xB7 Codex \xB7 Grok \xB7 API keys",status:s||i?"ready":"unset",action:"model"}],c=new Map(J().map(f=>[f.key,f]));for(let f of kr){let u=c.get(f);u&&a.push({id:u.key,label:u.name,note:u.note||"",status:n[u.key]||(u.required?.length?"unset":"manual"),action:u.required?.length?"token":"hermes",platform:u})}return a.push({id:"gateway",label:"restart gateway",note:"apply channel config",status:"",action:"gateway"},{id:"done",label:"done",note:"back to oracle",status:"",action:"done",skip:!0}),a}function lt(e=null){let t=e;if(!t)try{t=D().status()}catch{t={providers:{},apiKeys:{}}}let r=[];for(let n of pt){let o=H(n.id),s=t.providers?.[o.id]?.loggedIn===!0;r.push({id:n.id,label:n.label,note:n.hint,status:s?"connected":"OAuth",action:"oauth",kind:"oauth"})}for(let n of ht){let o=t.apiKeys?.[n.id]?.configured===!0;r.push({id:n.id,label:n.label,note:n.hint,status:o?"configured":"API key",action:"api-key",kind:"api-key"})}return r.push({id:"back",label:"back",note:"setup menu",status:"",action:"back",skip:!0}),r}function _e({width:e,palette:t,title:r,subtitle:n="",rows:o=[],index:s=0,footer:i="\u2191/\u2193 move enter select esc back"}={}){let a=Math.max(40,Math.floor(Number(e)||80)),c=Math.max(36,Math.min(a-4,72)),f=Math.max(0,Math.floor((a-c)/2)),u=Math.max(0,c-4),x=" ".repeat(f),y=v=>t.fg(A.banner_border,v),O=v=>`${x}${v}`,S=(v="")=>O(`${y("\u2502")} ${xe(v,u)} ${y("\u2502")}`),$="\u2500".repeat(Math.max(0,c-2)),_=[O(`${y("\u256D")}${y($)}${y("\u256E")}`),S(t.bold(t.fg(A.accent,r||"oracle setup"))),S(y("\u2500".repeat(u)))];return n&&(_.push(S(t.fg(A.banner_dim,n))),_.push(S(""))),o.forEach((v,F)=>{let g=F===s,h=g?"\u203A":" ",d=String(v.label||v.id||""),l=String(v.note||""),p=v.status?Sr(t,v.status):"",b=` ${h} ${d}`,k=[p,l?t.fg(A.banner_dim,l):""].filter(Boolean).join(" "),P=Math.max(1,u-ft(b)-ft(mt(k))-1),U=`${b}${" ".repeat(P)}${k}`;g?_.push(S(t.bg(A.selection_bg,t.bold(t.fg(A.banner_text,xe(U,u)))))):_.push(S(U))}),_.push(S("")),_.push(S(t.fg(A.banner_dim,i))),_.push(O(`${y("\u2570")}${y($)}${y("\u256F")}`)),_}function vr({width:e,palette:t,platformKey:r="telegram",tokenLength:n=0,error:o=""}={}){let s=Math.max(40,Math.floor(Number(e)||80)),i=Math.max(36,Math.min(s-4,72)),a=Math.max(0,Math.floor((s-i)/2)),c=Math.max(0,i-4),f=" ".repeat(a),u=_=>t.fg(A.banner_border,_),x=_=>`${f}${_}`,y=(_="")=>x(`${u("\u2502")} ${xe(_,c)} ${u("\u2502")}`),O="\u2500".repeat(Math.max(0,i-2)),S=n>0?"\u2022".repeat(Math.min(n,40)):t.fg(A.banner_dim,"paste token here (hidden)");return[x(`${u("\u256D")}${u(O)}${u("\u256E")}`),y(t.bold(t.fg(A.accent,`setup \xB7 ${r}`))),y(u("\u2500".repeat(c))),y(t.fg(A.banner_dim,"token stays local \xB7 never echoed \xB7 never sent to chat")),y(""),y(`${t.fg(A.banner_dim,"token")} ${S}`),y(n?t.fg(A.banner_dim,` ${n} characters`):""),y(o?t.fg(A.warn,o):""),y(t.fg(A.banner_dim,"type or paste backspace enter save esc cancel")),x(`${u("\u2570")}${u(O)}${u("\u256F")}`)]}function Ar({width:e,palette:t,title:r,subtitle:n,index:o=0,yesLabel:s="yes",noLabel:i="not now"}={}){return _e({width:e,palette:t,title:r,subtitle:n,rows:[{id:"yes",label:s,note:"",status:""},{id:"no",label:i,note:"",status:""}],index:o,footer:"\u2191/\u2193 move enter select esc skip"})}function mt(e){return String(e||"").replace(/\u001b\[[0-9;]*m/g,"")}function ft(e){return mt(e).length}function ce(e){e.write("\x1B[2J\x1B[H")}function ae(e,t){ce(e),e.write(`${t.join(`
|
|
22
|
+
`)}
|
|
23
|
+
`)}function dt(e){let t=he();if(!t?.bin)return{code:1,error:"hermes not found \u2014 install hermes or run oracle bootstrap"};let r=_r(t.bin,e,{stdio:"inherit",env:process.env});return{code:typeof r.status=="number"?r.status:1}}async function gt({stdin:e=process.stdin,stdout:t=process.stdout,env:r=process.env,palette:n,profile:o="oracle",startAt:s="menu",runAuth:i=c=>ne.run({argv:c}),restartGateway:a=!0}={}){if(e?.isTTY!==!0||t?.isTTY!==!0)return{completed:!1,actions:[],reason:"non-tty"};let c=Math.max(40,Number(t.columns||80)),f=[],u="menu",x=0,y=0,O=0,S="",$="",_="",v=null,F=ut({profile:o}),g=lt();String(s).startsWith("token:")?(_=String(s).slice(6),u="token"):s==="model"&&(u="model");let h=at(),d=e.isRaw===!0;typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume();let l=()=>{u==="menu"?ae(t,_e({width:c,palette:n,title:"oracle setup",subtitle:"\u2191\u2193 enter \xB7 model + telegram/discord/whatsapp",rows:F,index:x})):u==="model"?ae(t,_e({width:c,palette:n,title:"sign in",subtitle:"subscription OAuth or API key",rows:g,index:y})):u==="token"?ae(t,vr({width:c,palette:n,platformKey:_,tokenLength:S.length,error:$})):u==="confirm-gateway"?ae(t,Ar({width:c,palette:n,title:v?.title||"restart gateway?",subtitle:v?.subtitle||"applies bot tokens to the live bridge",index:O,yesLabel:"restart gateway now",noLabel:"later \u2014 oracle setup gateway restart"})):u==="notice"&&ae(t,_e({width:c,palette:n,title:v?.title||"setup",subtitle:v?.subtitle||"",rows:[{id:"ok",label:"continue",note:"",status:""}],index:0,footer:"enter continue esc menu"}))};l();let p=async b=>(typeof e.setRawMode=="function"&&e.setRawMode(d),e.pause(),ce(t),b);return new Promise(b=>{let k=null,P=!1,U=w=>{P||(P=!0,k&&clearTimeout(k),e.off("data",Ke),Promise.resolve(p(w)).then(b))},W=()=>{F=ut({profile:o}),g=lt()},ke=()=>{let w=S.trim();if(!w){$="empty token",l();return}try{let m=pe(o,_,w);Y({lastPlatform:_,profile:o,ready:!0}),f.push(`token:${_}`),S="",$="",v={title:`${_} saved`,subtitle:`wrote credentials \xB7 ${m.path}`},O=0,u=a?"confirm-gateway":"menu",W(),l()}catch(m){$=m?.message||"save failed",S="",l()}},je=async w=>{if(!w||w.action==="done"){U({completed:!0,actions:f});return}if(w.action==="model"){u="model",y=0,l();return}if(w.action==="token"){_=w.id,S="",$="",u="token",l();return}if(w.action==="hermes"){typeof e.setRawMode=="function"&&e.setRawMode(d),e.pause(),ce(t),t.write(`opening ${w.id} setup\u2026
|
|
24
|
+
`);let I=q(w.id)?.hermes||["gateway","setup"],E=dt(["-p",o,...I]);f.push(`hermes:${w.id}:${E.code}`),Y({lastPlatform:w.id,profile:o}),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),W(),v={title:`${w.id} setup finished`,subtitle:E.code===0?"restart gateway to apply":E.error||`exit ${E.code}`},O=0,u=a?"confirm-gateway":"menu",l();return}if(w.action==="gateway"){typeof e.setRawMode=="function"&&e.setRawMode(d),e.pause(),ce(t),t.write(`restarting gateway\u2026
|
|
25
|
+
`);let m=dt(["-p",o,"gateway","restart"]);f.push(`gateway:restart:${m.code}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),v={title:m.code===0?"gateway restarted":"gateway restart failed",subtitle:m.code===0?"channels should be live":m.error||`exit ${m.code}`},u="notice",l()}},xt=async w=>{if(!w||w.action==="back"){u="menu",l();return}typeof e.setRawMode=="function"&&e.setRawMode(d),e.pause(),ce(t);let m=w.kind==="oauth"?["login",w.id]:["api-key",w.id];t.write(`connecting ${w.label}\u2026
|
|
26
|
+
`);let I=1;try{I=await i(m)}catch(E){t.write(`${E?.message||E}
|
|
27
|
+
`),I=1}f.push(`model:${w.id}:${I}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),W(),u="menu",l()},Be=w=>{for(let m of w){if(m.ctrl&&m.name==="c"){U({completed:!1,actions:f,reason:"cancel"});return}if(u==="token"){if(m.name==="escape"){S="",$="",u="menu",l();continue}if(m.name==="return"){ke();continue}if(m.name==="backspace"||m.sequence==="\x7F"||m.sequence==="\b"){S=S.slice(0,-1),$="",l();continue}let E=m.sequence||"";if(E&&!m.ctrl&&!m.meta&&E!=="\x1B"){if(E.startsWith("\x1B"))continue;S+=E,$="",l()}continue}if(u==="confirm-gateway"){if(m.name==="up"||m.name==="down"){O=O===0?1:0,l();continue}if(m.name==="escape"){u="menu",l();continue}m.name==="return"&&(O===0?je({action:"gateway",id:"gateway"}):(u="menu",l()));continue}if(u==="notice"){(m.name==="return"||m.name==="escape")&&(u="menu",l());continue}if(u==="model"){let E=g.length;if(m.name==="up"){y=E?(y-1+E)%E:0,l();continue}if(m.name==="down"){y=E?(y+1)%E:0,l();continue}if(m.name==="escape"){u="menu",l();continue}m.name==="return"&&xt(g[y]);continue}let I=F.length;if(m.name==="up"){x=I?(x-1+I)%I:0,l();continue}if(m.name==="down"){x=I?(x+1)%I:0,l();continue}if(m.name==="escape"){U({completed:!0,actions:f,reason:"esc"});continue}m.name==="return"&&je(F[x])}},Ke=w=>{Be(h.push(w)),k&&(clearTimeout(k),k=null),h.pending>0&&(k=setTimeout(()=>{k=null,Be(h.flush())},30),typeof k.unref=="function"&&k.unref())};e.on("data",Ke)})}var Le=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),De=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous"}]),Fe=Object.freeze([...Le.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...De.map((e,t)=>({n:Le.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:Le.length+De.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"}]);function Or(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=Fe.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function bt(e="sign in",t=0){let r=be[t]||be[0];return["",`${r[0]} oracle`,`${r[1]} ${e}`,r[2],r[3],r[4],""].join(`
|
|
28
|
+
`)}async function $r(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<be.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${bt("sign in",r)}
|
|
29
|
+
`),await t(90)}async function oo({stdin:e=process.stdin,stdout:t=process.stdout,readLine:r,runAuth:n=o=>ne.run({argv:o})}={}){if(await $r(t),t.write(`${ue()}
|
|
30
|
+
`),t.write(`number or name \xB7 enter skips
|
|
31
|
+
`),e.isTTY!==!0||t.isTTY!==!0)return{skipped:!0,reason:"non-tty"};t.write("> ");let o=r?await r():await new Promise(c=>{let f="",u=x=>{f+=String(x),(f.includes(`
|
|
32
|
+
`)||f.includes("\r"))&&(e.off("data",u),c(f.trim()))};e.on("data",u)}),s=Or(o);if(s.skip)return{skipped:!0,reason:"skipped"};if(s.unknown)return t.write(`unknown choice '${s.choice}'
|
|
33
|
+
`),{skipped:!0,reason:"unknown"};let i=s.kind==="oauth"?["login",s.id]:["api-key",s.id],a=await n(i);return{skipped:!1,choice:s.id,code:a}}function ue(e=D().status()){let t=[bt("sign in"),"sign in with a subscription",""];for(let r of Fe.filter(n=>n.kind==="oauth")){let n=H(r.id),o=e.providers?.[n.id]?.loggedIn===!0;t.push(` ${String(r.n).padStart(2)} ${r.label.padEnd(12)} ${o?"connected":"OAuth"}`)}t.push("","or use an API key","");for(let r of Fe.filter(n=>n.kind==="api-key")){let n=r.id==="custom"?!1:e.apiKeys?.[r.id]?.configured===!0;t.push(` ${String(r.n).padStart(2)} ${r.label.padEnd(12)} ${n?"configured":"not configured"}`)}return t.push("","Your key stays on this machine. Nothing is uploaded by Oracle.",""),t.join(`
|
|
34
|
+
`)}function Ne(){return["oracle setup, configure standalone OAuth, messaging, and the local agent surface",""," oracle setup menu + platform status"," oracle setup status same, machine-friendly with --json"," oracle setup model show Claude, Codex, Grok, OpenRouter, DeepSeek, Nous, ..."," oracle setup model claude connect Anthropic OAuth + select standalone"," oracle setup model codex connect OpenAI OAuth + select standalone"," oracle setup model grok connect xAI OAuth + select standalone"," oracle setup model deepseek securely add a provider API key"," oracle setup model kimi securely add a Kimi API key"," oracle setup messaging open hermes gateway setup wizard"," oracle setup telegram set TELEGRAM_BOT_TOKEN for profile"," oracle setup discord set DISCORD_BOT_TOKEN for profile"," oracle setup slack set slack tokens"," oracle setup <platform> any supported hermes platform"," oracle setup gateway [status|restart|start|stop]"," oracle setup profile [name] default: oracle","","chat:"," /setup arrow-key setup wizard (model + channels)"," /setup telegram jump to telegram token entry"," /setup status ready/unset (no secrets)","","model credentials stay in the OS keychain or private ~/.config/oracle storage.","messaging tokens stay local in ~/.hermes/profiles/<profile>/.env","oracle never prints secrets.","TTY default: oracle setup opens an \u2191\u2193 enter menu (ORACLE_SETUP_PLAIN=1 for text)."].join(`
|
|
35
|
+
`)}function Mr(e){let t=e.indexOf("--profile");if(t>=0&&e[t+1])return e[t+1];let r=e.indexOf("-p");return r>=0&&e[r+1]?e[r+1]:process.env.ORACLE_PROFILE||"oracle"}function Tr(e){let t=[];for(let r=0;r<e.length;r++){if(e[r]==="--profile"||e[r]==="-p"){r+=1;continue}t.push(e[r])}return t}function Ue(e,{inherit:t=!0,env:r=process.env}={}){let n=he();if(!n.ok)return process.stderr.write(`oracle setup: Hermes not detected (opt-in only).
|
|
29
36
|
Native Oracle does not need Hermes.
|
|
30
37
|
To use Hermes messaging/gateway: install Hermes, or run \`oracle bootstrap\`, then retry.
|
|
31
38
|
Detect: oracle harness detect
|
|
32
|
-
`),1;let
|
|
33
|
-
`),1):(
|
|
39
|
+
`),1;let o=Er(n.bin,e,{stdio:t?"inherit":"pipe",encoding:"utf8",env:r});return o.error?(process.stderr.write(`oracle setup: failed to run hermes: ${o.error.message}
|
|
40
|
+
`),1):(t||(o.stdout&&process.stdout.write(o.stdout),o.stderr&&process.stderr.write(o.stderr)),typeof o.status=="number"?o.status:1)}async function wt(e){if(!z.isTTY||typeof z.setRawMode!="function"){let t=new Error("interactive token entry requires a tty");throw t.code="NO_TTY",t}return yt.write(`${e}: `),new Promise((t,r)=>{let n="",o=()=>{z.off("data",s),z.setRawMode(!1),z.pause(),yt.write(`
|
|
34
41
|
`)},s=i=>{for(let a of String(i)){if(a==="\r"||a===`
|
|
35
|
-
`){
|
|
36
|
-
`),process.stderr.write(`known: ${
|
|
37
|
-
`),1;if(!
|
|
38
|
-
`),
|
|
39
|
-
`),1;s.push(
|
|
42
|
+
`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};z.setRawMode(!0),z.resume(),z.on("data",s)})}async function Rr(e,t,r=[]){let n=q(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
|
|
43
|
+
`),process.stderr.write(`known: ${J().map(c=>c.key).join(", ")}
|
|
44
|
+
`),1;if(!n.required.length)return process.stdout.write(`opening hermes setup for ${n.key} (interactive)
|
|
45
|
+
`),Y({lastPlatform:n.key,profile:e}),Ue(["-p",e,...n.hermes||["gateway","setup"]]);let o={},s=[];for(let c=0;c<r.length;c++){let f=r[c];if(f==="--token"&&r[c+1]){o.token=r[++c];continue}if(f==="--allowed-users"&&r[c+1]){o.allowedUsers=r[++c];continue}if(f==="--app-token"&&r[c+1]){o.appToken=r[++c];continue}if(f.startsWith("-"))return process.stderr.write(`oracle setup: unknown flag ${f}
|
|
46
|
+
`),1;s.push(f)}let i=o.token||s[0]||"";if(!i&&!process.stdin.isTTY&&(i=await readStdinSecret()),!i)try{i=await wt(`${n.key} bot token`)}catch(c){if(c?.code==="NO_TTY")return process.stderr.write(`oracle setup ${n.key}: pipe the token on stdin (echo "$TOKEN" | oracle setup ${n.key}) or pass --token <value>
|
|
40
47
|
`),1;throw c}if(!i)return process.stderr.write(`aborted: empty token
|
|
41
|
-
`),1;let a={};if(
|
|
42
|
-
`),1;a.SLACK_APP_TOKEN=c}try{let c=
|
|
48
|
+
`),1;let a={};if(o.allowedUsers&&(n.key==="telegram"&&(a.TELEGRAM_ALLOWED_USERS=o.allowedUsers),n.key==="discord"&&(a.DISCORD_ALLOWED_USERS=o.allowedUsers),n.key==="slack"&&(a.SLACK_ALLOWED_USERS=o.allowedUsers)),o.appToken&&n.key==="slack"&&(a.SLACK_APP_TOKEN=o.appToken),n.key==="slack"&&!a.SLACK_APP_TOKEN){let c=o.appToken||s[1]||"";if(!c&&process.stdin.isTTY&&(c=await wt("slack app token (xapp-...)")),!c)return process.stderr.write(`slack needs bot token + app token
|
|
49
|
+
`),1;a.SLACK_APP_TOKEN=c}try{let c=pe(e,n.key,i,a);return Y({lastPlatform:n.key,profile:e,ready:!0}),process.stdout.write(`saved ${n.key} credentials for profile '${e}'
|
|
43
50
|
path: ${c.path}
|
|
44
51
|
next: oracle setup gateway restart
|
|
45
52
|
`),0}catch(c){return process.stderr.write(`oracle setup: ${c.message}
|
|
46
|
-
`),1}}var
|
|
47
|
-
`),0;if(["menu","list","ls"].includes(s))return
|
|
48
|
-
`):(process.stdout.write(
|
|
49
|
-
`):(process.stdout.write(
|
|
50
|
-
`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(
|
|
51
|
-
`),process.stderr.write(
|
|
52
|
-
`),
|
|
53
|
-
`),1)}if(s==="profile"){let a=i[0]||
|
|
54
|
-
hermes: ${
|
|
55
|
-
`),process.stdout.write(
|
|
56
|
-
${
|
|
57
|
-
`),1)}};export{
|
|
53
|
+
`),1}}var so={name:"setup",summary:"configure standalone OAuth and messaging platforms",group:"read",usage:Ne(),async run(e){let t=[...e.argv],r=t.includes("--json"),n=Mr(t),o=Tr(t).filter(a=>a!=="--json"),s=(o[0]||"menu").toLowerCase(),i=o.slice(1);if(["-h","--help","help"].includes(s))return process.stdout.write(Ne()+`
|
|
54
|
+
`),0;if(["menu","list","ls"].includes(s)){if(r)return process.stdout.write(JSON.stringify({...Z(n),modelAuth:D().status()},null,2)+`
|
|
55
|
+
`),0;if(process.stdin.isTTY===!0&&process.stdout.isTTY===!0&&!process.env.ORACLE_SETUP_PLAIN){let a=await gt({profile:n,palette:Ie({color:process.stdout.isTTY!==!1})});return a?.completed===!1&&a?.reason==="non-tty"?1:0}return process.stdout.write(ue()),process.stdout.write(de(n)),0}if(["status","show"].includes(s)){let a=Z(n);return r?process.stdout.write(JSON.stringify({...a,modelAuth:D().status()},null,2)+`
|
|
56
|
+
`):(process.stdout.write(ue()),process.stdout.write(de(n)),process.stdout.write(`hermes root: ${se()}
|
|
57
|
+
`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(ue()),0;if(De.some(c=>c.id===a)||a==="custom")return ne.run({...e,argv:["api-key",a,...i.slice(1)]});try{return H(a),ne.run({...e,argv:["login",a,...i.slice(1)]})}catch(c){return process.stderr.write(`oracle setup model: ${c.message}
|
|
58
|
+
`),process.stderr.write(ue()),1}}if(["messaging","gateway-setup","platforms"].includes(s))return Y({lastAction:"messaging",profile:n}),process.stdout.write(`opening hermes gateway setup wizard...
|
|
59
|
+
`),Ue(["-p",n,"gateway","setup"]);if(s==="gateway"){let a=(i[0]||"status").toLowerCase();return["status","start","stop","restart","run","install"].includes(a)?Ue(["-p",n,"gateway",a]):(process.stderr.write(`usage: oracle setup gateway [status|start|stop|restart|run|install]
|
|
60
|
+
`),1)}if(s==="profile"){let a=i[0]||n;return process.stdout.write(`profile: ${a}
|
|
61
|
+
hermes: ${se()}/profiles/${a}
|
|
62
|
+
`),process.stdout.write(de(a)),0}return q(s)?Rr(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
|
|
63
|
+
${Ne()}
|
|
64
|
+
`),1)}};export{Fe as SETUP_CHOICES,so as default,ue as renderModelSetup,Or as resolveSetupChoice,oo as runFirstRunModelSetup};
|
package/package.json
CHANGED