@oracle-agent/oracle 0.35.38 → 0.35.40

package/dist/cli/commands/setup.mjs

@@ -1,73 +1,76 @@
-var Yt=Object.defineProperty;var Vt=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(r){throw n=[r],r}};var Jt=(e,t)=>{for(var n in t)Yt(e,n,{get:t[n],enumerable:!0})};var vt={};Jt(vt,{OAUTH_USAGE_PROVIDERS:()=>Bn,collectOAuthUsage:()=>Hn,parseAnthropicUsage:()=>kt,parseCodexUsage:()=>xt});function bt(e){let t=Number(e);return Number.isFinite(t)?t:null}function Kn(e){let t=bt(e);if(t==null)return null;let n=t<=1?t*100:t;return Math.max(0,Math.min(100,n))}function kt(e){let t=[["five_hour","5h"],["seven_day","7d"],["seven_day_opus","Opus 7d"],["seven_day_sonnet","Sonnet 7d"]],n=[];for(let[r,o]of t){let s=e?.[r]||{},i=Kn(s.utilization);i!=null&&n.push({label:o,usedPercent:i,resetAt:s.resets_at||s.reset_at||null})}return{source:"oauth_usage_api",windows:n}}function xt(e){let t=e?.rate_limit||{},n=[["primary_window","5h"],["secondary_window","wk"]],r=[];for(let[o,s]of n){let i=t[o]||{},a=bt(i.used_percent);a!=null&&r.push({label:s,usedPercent:Math.max(0,Math.min(100,a)),resetAt:i.reset_at||i.resets_at||null})}return{source:"usage_api",windows:r}}function Q({id:e,label:t,connected:n,windows:r=[],unavailable:o=null}){let s=r[0]||null;return{id:e,label:t,connected:n,usedPercent:s?s.usedPercent:null,windowLabel:s?s.label:null,resetAt:s?s.resetAt:null,windows:r,unavailable:o}}function Je(e,t){try{return String(e?.get?.(t)?.accessToken||"").trim()}catch{return""}}async function wt(e,t,n){let r=await e(t,{headers:n});if(!r?.ok)throw new Error(`HTTP ${r?.status||0}`);return r.json()}async function Hn(e,{fetchFn:t=globalThis.fetch}={}){let n=new Date().toISOString(),r=[],o=Je(e,"anthropic-oauth");if(!o)r.push(Q({id:"anthropic-oauth",label:"Claude",connected:!1,unavailable:"not connected"}));else try{let a=await wt(t,"https://api.anthropic.com/api/oauth/usage",{Authorization:`Bearer ${o}`,Accept:"application/json","anthropic-beta":"oauth-2025-04-20","User-Agent":"claude-code/2.1.0"}),c=kt(a);r.push(Q({id:"anthropic-oauth",label:"Claude",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{r.push(Q({id:"anthropic-oauth",label:"Claude",connected:!0,unavailable:"quota unavailable"}))}let s=Je(e,"openai-codex");if(!s)r.push(Q({id:"openai-codex",label:"Codex",connected:!1,unavailable:"not connected"}));else try{let a=await wt(t,"https://chatgpt.com/backend-api/wham/usage",{Authorization:`Bearer ${s}`,Accept:"application/json","User-Agent":"codex-cli"}),c=xt(a);r.push(Q({id:"openai-codex",label:"Codex",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{r.push(Q({id:"openai-codex",label:"Codex",connected:!0,unavailable:"quota unavailable"}))}let i=Je(e,"xai-oauth");return r.push(Q({id:"xai-oauth",label:"Grok",connected:!!i,unavailable:i?"quota not published":"not connected"})),{fetchedAt:n,providers:r}}var Bn,St=Vt(()=>{Bn=Object.freeze([{id:"anthropic-oauth",label:"Claude"},{id:"openai-codex",label:"Codex"},{id:"xai-oauth",label:"Grok"}])});import{spawnSync as pr}from"node:child_process";import{stdin as G,stdout as qt}from"node:process";var De=Object.freeze([{key:"telegram",name:"telegram",hermes:["gateway","setup"],required:["TELEGRAM_BOT_TOKEN"],optional:["TELEGRAM_ALLOWED_USERS","TELEGRAM_PROXY"],note:"dms \xB7 groups \xB7 topics"},{key:"discord",name:"discord",hermes:["gateway","setup"],required:["DISCORD_BOT_TOKEN"],optional:["DISCORD_ALLOWED_USERS"],note:"dms \xB7 channels \xB7 threads"},{key:"slack",name:"slack",hermes:["gateway","setup"],required:["SLACK_BOT_TOKEN","SLACK_APP_TOKEN"],optional:["SLACK_ALLOWED_USERS"],note:"socket mode"},{key:"whatsapp",name:"whatsapp",hermes:["whatsapp"],required:[],optional:["WHATSAPP_ALLOWED_USERS","WHATSAPP_MODE"],note:"qr bridge"},{key:"whatsapp-cloud",name:"whatsapp cloud",hermes:["whatsapp-cloud"],required:[],optional:[],note:"business cloud api"},{key:"signal",name:"signal",hermes:["gateway","setup"],required:["SIGNAL_HTTP_URL","SIGNAL_ACCOUNT"],optional:["SIGNAL_ALLOWED_USERS"],note:"signal-cli rest bridge"},{key:"matrix",name:"matrix",hermes:["gateway","setup"],required:["MATRIX_HOMESERVER","MATRIX_ACCESS_TOKEN","MATRIX_USER_ID"],optional:["MATRIX_ALLOWED_USERS"],note:"rooms \xB7 dms"},{key:"mattermost",name:"mattermost",hermes:["gateway","setup"],required:["MATTERMOST_URL","MATTERMOST_TOKEN"],optional:["MATTERMOST_ALLOWED_USERS"],note:"channels \xB7 dms"},{key:"email",name:"email",hermes:["gateway","setup"],required:["EMAIL_ADDRESS","EMAIL_PASSWORD","EMAIL_IMAP_HOST","EMAIL_SMTP_HOST"],optional:[],note:"imap/smtp mailbox"},{key:"bluebubbles",name:"bluebubbles",hermes:["gateway","setup"],required:[],optional:[],note:"imessage via bluebubbles"},{key:"photon",name:"photon",hermes:["photon"],required:["PHOTON_PROJECT_ID","PHOTON_PROJECT_SECRET"],optional:["PHOTON_ALLOWED_USERS","PHOTON_HOME_CHANNEL"],note:"imessage via spectrum (no mac)"},{key:"homeassistant",name:"homeassistant",hermes:["gateway","setup"],required:["HASS_URL","HASS_TOKEN"],optional:[],note:"smart home"},{key:"webhook",name:"webhook",hermes:["gateway","setup"],required:[],optional:[],note:"http ingress"},{key:"api-server",name:"api server",hermes:["gateway","setup"],required:[],optional:[],note:"local http api"},{key:"dingtalk",name:"dingtalk",hermes:["gateway","setup"],required:[],optional:[],note:"dingtalk bot"},{key:"feishu",name:"feishu",hermes:["gateway","setup"],required:[],optional:[],note:"feishu / lark"},{key:"wecom",name:"wecom",hermes:["gateway","setup"],required:[],optional:[],note:"wecom"},{key:"weixin",name:"weixin",hermes:["gateway","setup"],required:[],optional:[],note:"weixin"},{key:"qqbot",name:"qqbot",hermes:["gateway","setup"],required:[],optional:[],note:"qq bot"}]);function at(e){return String(e||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}function ee(){return De.slice()}function Y(e){let t=at(e);if(!t)return null;for(let n of De)if(n.key===t||at(n.name)===t)return n;return null}function ct({profile:e="oracle",statuses:t={}}={}){let n=["oracle setup","","one oracle. many models. every connected channel.",`profile: ${e}`,"","start here (most people):","  1. oracle setup model            connect Claude / Codex / Grok / API key","  2. oracle setup telegram         bot token \u2192 dm your bot","     oracle setup discord          bot token \u2192 channels / dms","     oracle setup whatsapp         qr bridge (or whatsapp-cloud)","  3. oracle setup gateway restart  apply channel config","","messaging platforms:",""];for(let r of De){let o=t[r.key]||"unset";n.push(`  ${r.key.padEnd(16)} ${String(o).padEnd(8)}  ${r.note}`)}return n.push(""),n.push("commands:"),n.push("  oracle setup                 this menu"),n.push("  oracle setup model            standalone OAuth / API keys"),n.push("  oracle setup messaging       open hermes gateway setup wizard"),n.push("  oracle setup telegram        set TELEGRAM_BOT_TOKEN (stdin or --token)"),n.push("  oracle setup discord         set DISCORD_BOT_TOKEN"),n.push("  oracle setup whatsapp        qr link via hermes"),n.push("  oracle setup slack           bot + app tokens"),n.push("  oracle setup status          show configured platforms (no secrets)"),n.push("  oracle setup gateway         start/status/restart hermes gateway"),n.push("  /setup                       same menu inside the tui"),n.push("  /setup telegram|discord|whatsapp   channel how-to (no secrets)"),n.push(""),n.push("notes:"),n.push("  tokens stay in the hermes profile .env on this machine"),n.push("  oracle never prints bot tokens or app secrets"),n.push('  pipe tokens: echo "$TOKEN" | oracle setup telegram'),n.push("  after token setup: oracle setup gateway restart"),n.join(`
+var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var cr=(e,t)=>{for(var r in t)ir(e,r,{get:t[r],enumerable:!0})};var Ct={};cr(Ct,{OAUTH_USAGE_PROVIDERS:()=>an,collectOAuthUsage:()=>un,parseAnthropicUsage:()=>It,parseCodexUsage:()=>Lt});function Pt(e){let t=Number(e);return Number.isFinite(t)?t:null}function cn(e){let t=Pt(e);if(t==null)return null;let r=t<=1?t*100:t;return Math.max(0,Math.min(100,r))}function It(e){let t=[["five_hour","5h"],["seven_day","7d"],["seven_day_opus","Opus 7d"],["seven_day_sonnet","Sonnet 7d"]],r=[];for(let[n,o]of t){let s=e?.[n]||{},i=cn(s.utilization);i!=null&&r.push({label:o,usedPercent:i,resetAt:s.resets_at||s.reset_at||null})}return{source:"oauth_usage_api",windows:r}}function Lt(e){let t=e?.rate_limit||{},r=[["primary_window","5h"],["secondary_window","wk"]],n=[];for(let[o,s]of r){let i=t[o]||{},a=Pt(i.used_percent);a!=null&&n.push({label:s,usedPercent:Math.max(0,Math.min(100,a)),resetAt:i.reset_at||i.resets_at||null})}return{source:"usage_api",windows:n}}function ie({id:e,label:t,connected:r,windows:n=[],unavailable:o=null}){let s=n[0]||null;return{id:e,label:t,connected:r,usedPercent:s?s.usedPercent:null,windowLabel:s?s.label:null,resetAt:s?s.resetAt:null,windows:n,unavailable:o}}function it(e,t){try{return String(e?.get?.(t)?.accessToken||"").trim()}catch{return""}}async function Rt(e,t,r){let n=await e(t,{headers:r});if(!n?.ok)throw new Error(`HTTP ${n?.status||0}`);return n.json()}async function un(e,{fetchFn:t=globalThis.fetch}={}){let r=new Date().toISOString(),n=[],o=it(e,"anthropic-oauth");if(!o)n.push(ie({id:"anthropic-oauth",label:"Claude",connected:!1,unavailable:"not connected"}));else try{let a=await Rt(t,"https://api.anthropic.com/api/oauth/usage",{Authorization:`Bearer ${o}`,Accept:"application/json","anthropic-beta":"oauth-2025-04-20","User-Agent":"claude-code/2.1.0"}),c=It(a);n.push(ie({id:"anthropic-oauth",label:"Claude",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{n.push(ie({id:"anthropic-oauth",label:"Claude",connected:!0,unavailable:"quota unavailable"}))}let s=it(e,"openai-codex");if(!s)n.push(ie({id:"openai-codex",label:"Codex",connected:!1,unavailable:"not connected"}));else try{let a=await Rt(t,"https://chatgpt.com/backend-api/wham/usage",{Authorization:`Bearer ${s}`,Accept:"application/json","User-Agent":"codex-cli"}),c=Lt(a);n.push(ie({id:"openai-codex",label:"Codex",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{n.push(ie({id:"openai-codex",label:"Codex",connected:!0,unavailable:"quota unavailable"}))}let i=it(e,"xai-oauth");return n.push(ie({id:"xai-oauth",label:"Grok",connected:!!i,unavailable:i?"quota not published":"not connected"})),{fetchedAt:r,providers:n}}var an,Nt=ar(()=>{an=Object.freeze([{id:"anthropic-oauth",label:"Claude"},{id:"openai-codex",label:"Codex"},{id:"xai-oauth",label:"Grok"}])});import{spawnSync as In}from"node:child_process";import{stdin as Z,stdout as nr}from"node:process";var qe=Object.freeze([{key:"telegram",name:"telegram",hermes:["gateway","setup"],required:["TELEGRAM_BOT_TOKEN"],optional:["TELEGRAM_ALLOWED_USERS","TELEGRAM_PROXY"],note:"dms \xB7 groups \xB7 topics"},{key:"discord",name:"discord",hermes:["gateway","setup"],required:["DISCORD_BOT_TOKEN"],optional:["DISCORD_ALLOWED_USERS"],note:"dms \xB7 channels \xB7 threads"},{key:"slack",name:"slack",hermes:["gateway","setup"],required:["SLACK_BOT_TOKEN","SLACK_APP_TOKEN"],optional:["SLACK_ALLOWED_USERS"],note:"socket mode"},{key:"whatsapp",name:"whatsapp",hermes:["whatsapp"],required:[],optional:["WHATSAPP_ALLOWED_USERS","WHATSAPP_MODE"],note:"qr bridge"},{key:"whatsapp-cloud",name:"whatsapp cloud",hermes:["whatsapp-cloud"],required:[],optional:[],note:"business cloud api"},{key:"signal",name:"signal",hermes:["gateway","setup"],required:["SIGNAL_HTTP_URL","SIGNAL_ACCOUNT"],optional:["SIGNAL_ALLOWED_USERS"],note:"signal-cli rest bridge"},{key:"matrix",name:"matrix",hermes:["gateway","setup"],required:["MATRIX_HOMESERVER","MATRIX_ACCESS_TOKEN","MATRIX_USER_ID"],optional:["MATRIX_ALLOWED_USERS"],note:"rooms \xB7 dms"},{key:"mattermost",name:"mattermost",hermes:["gateway","setup"],required:["MATTERMOST_URL","MATTERMOST_TOKEN"],optional:["MATTERMOST_ALLOWED_USERS"],note:"channels \xB7 dms"},{key:"email",name:"email",hermes:["gateway","setup"],required:["EMAIL_ADDRESS","EMAIL_PASSWORD","EMAIL_IMAP_HOST","EMAIL_SMTP_HOST"],optional:[],note:"imap/smtp mailbox"},{key:"bluebubbles",name:"bluebubbles",hermes:["gateway","setup"],required:[],optional:[],note:"imessage via bluebubbles"},{key:"photon",name:"photon",hermes:["photon"],required:["PHOTON_PROJECT_ID","PHOTON_PROJECT_SECRET"],optional:["PHOTON_ALLOWED_USERS","PHOTON_HOME_CHANNEL"],note:"imessage via spectrum (no mac)"},{key:"homeassistant",name:"homeassistant",hermes:["gateway","setup"],required:["HASS_URL","HASS_TOKEN"],optional:[],note:"smart home"},{key:"webhook",name:"webhook",hermes:["gateway","setup"],required:[],optional:[],note:"http ingress"},{key:"api-server",name:"api server",hermes:["gateway","setup"],required:[],optional:[],note:"local http api"},{key:"dingtalk",name:"dingtalk",hermes:["gateway","setup"],required:[],optional:[],note:"dingtalk bot"},{key:"feishu",name:"feishu",hermes:["gateway","setup"],required:[],optional:[],note:"feishu / lark"},{key:"wecom",name:"wecom",hermes:["gateway","setup"],required:[],optional:[],note:"wecom"},{key:"weixin",name:"weixin",hermes:["gateway","setup"],required:[],optional:[],note:"weixin"},{key:"qqbot",name:"qqbot",hermes:["gateway","setup"],required:[],optional:[],note:"qq bot"}]);function mt(e){return String(e||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}function ae(){return qe.slice()}function ee(e){let t=mt(e);if(!t)return null;for(let r of qe)if(r.key===t||mt(r.name)===t)return r;return null}function ht({profile:e="oracle",statuses:t={}}={}){let r=["oracle setup","","one oracle. many models. every connected channel.",`profile: ${e}`,"","start here (most people):","  1. oracle setup model            connect Claude / Codex / Grok / API key","  2. oracle setup telegram         bot token \u2192 dm your bot","     oracle setup discord          bot token \u2192 channels / dms","     oracle setup whatsapp         qr bridge (or whatsapp-cloud)","  3. oracle setup gateway restart  apply channel config","","messaging platforms:",""];for(let n of qe){let o=t[n.key]||"unset";r.push(`  ${n.key.padEnd(16)} ${String(o).padEnd(8)}  ${n.note}`)}return r.push(""),r.push("commands:"),r.push("  oracle setup                 this menu"),r.push("  oracle setup model            standalone OAuth / API keys"),r.push("  oracle setup messaging       open hermes gateway setup wizard"),r.push("  oracle setup telegram        set TELEGRAM_BOT_TOKEN (stdin or --token)"),r.push("  oracle setup discord         set DISCORD_BOT_TOKEN"),r.push("  oracle setup whatsapp        qr link via hermes"),r.push("  oracle setup slack           bot + app tokens"),r.push("  oracle setup status          show configured platforms (no secrets)"),r.push("  oracle setup gateway         start/status/restart hermes gateway"),r.push("  /setup                       same menu inside the tui"),r.push("  /setup telegram|discord|whatsapp   channel how-to (no secrets)"),r.push(""),r.push("notes:"),r.push("  tokens stay in the hermes profile .env on this machine"),r.push("  oracle never prints bot tokens or app secrets"),r.push('  pipe tokens: echo "$TOKEN" | oracle setup telegram'),r.push("  after token setup: oracle setup gateway restart"),r.join(`
 `)+`
-`}import D from"node:fs";import rn from"node:os";import je from"node:path";import fe from"node:fs";import Xt from"node:os";import q from"node:path";import{fileURLToPath as Zt}from"node:url";var Qt=q.dirname(Zt(import.meta.url)),Ar=q.resolve(Qt,"../..");function ne(){return process.env.ORACLE_FAKE_HOME||Xt.homedir()}function en(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function N(){return en()?process.env.ORACLE_CONFIG_DIR||q.join(ne(),".config","oracle"):q.join(ne(),".config","oracle")}function tn(){return q.join(N(),"desk.json")}function nn(){return q.join(N(),"env")}function te({force:e=!1}={}){if(te._done&&!e)return te._result||null;te._done=!0;let t={},n=(o,s)=>{if(s==null)return;let i=String(s).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=nn();if(fe.existsSync(o))for(let s of fe.readFileSync(o,"utf8").split(/\r?\n/)){let i=s.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let a=i[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),n(i[1],a)}}catch{}try{let o=tn();if(fe.existsSync(o)){let s=JSON.parse(fe.readFileSync(o,"utf8"));s&&typeof s=="object"&&(n("ORACLE_DESK_URL",s.deskUrl||s.dataUrl||s.url),n("ORACLE_DATA_URL",s.dataUrl||s.deskUrl||s.url),n("ORACLE_API_URL",s.apiUrl||s.dataUrl||s.deskUrl),n("ORACLE_PUBLIC_URL",s.publicUrl||s.deskUrl||s.dataUrl),n("ORACLE_EXEC_URL",s.execUrl),n("MAD_DESK_URL",s.deskUrl||s.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(n("ORACLE_DESK_URL",r),n("ORACLE_DATA_URL",r),n("ORACLE_API_URL",r),n("ORACLE_PUBLIC_URL",r),n("MAD_DESK_URL",r)),te._result=Object.keys(t).length?t:null,te._result}try{te()}catch{}function pe(){return process.env.HERMES_HOME?q.resolve(process.env.HERMES_HOME):q.join(ne(),".hermes")}function F(e){return fe.mkdirSync(e,{recursive:!0}),e}var on=/(TOKEN|SECRET|PASSWORD|KEY|AUTH|PRIVATE|MNEMONIC|SEED)/i;function xe(e="oracle"){return je.join(pe(),"profiles",e,".env")}function sn(e){let t={};for(let n of String(e||"").split(/\r?\n/)){let r=n.trim();if(!r||r.startsWith("#"))continue;let o=r.indexOf("=");if(o<=0)continue;let s=r.slice(0,o).trim(),i=r.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),t[s]=i}return t}function lt(e="oracle"){let t=xe(e);return D.existsSync(t)?sn(D.readFileSync(t,"utf8")):{}}function ut(e,t,n){if(!t||on.test(t)===!1&&/[^A-Z0-9_]/.test(t),!/^[A-Z][A-Z0-9_]*$/.test(t)){let l=new Error(`invalid env key '${t}'`);throw l.code="BAD_KEY",l}if(n==null||String(n).trim()===""){let l=new Error(`empty value for ${t}`);throw l.code="EMPTY",l}let r=xe(e);F(je.dirname(r));let o=D.existsSync(r)?D.readFileSync(r,"utf8"):"",s=o?o.split(/\r?\n/):[],i=[],a=!1,c=`${t}=${String(n)}`;for(let l of s)l.startsWith(`${t}=`)?(i.push(c),a=!0):(l.length||i.length)&&i.push(l);for(a||(i.length&&i[i.length-1]!==""&&i.push(""),i.push(c));i.length&&i[i.length-1]==="";)i.pop();i.push(""),D.writeFileSync(r,i.join(`
-`),{mode:384});try{D.chmodSync(r,384)}catch{}return{path:r,key:t,set:!0}}function re(e="oracle"){let t=lt(e),n={};for(let r of ee()){if(!r.required.length){n[r.key]="manual";continue}let o=r.required.filter(s=>!String(t[s]||"").trim());n[r.key]=o.length?"unset":"ready"}return{profile:e,statuses:n,envPath:xe(e)}}function ve(e="oracle"){let{statuses:t}=re(e);return ct({profile:e,statuses:t})}function Se(e,t,n,r={}){let o=Y(t);if(!o){let u=new Error(`unknown platform '${t}'`);throw u.code="UNKNOWN_PLATFORM",u}if(!o.required.length){let u=new Error(`${o.key} uses hermes interactive setup (oracle setup messaging)`);throw u.code="NEEDS_INTERACTIVE",u}let i=o.required.filter(u=>/(TOKEN|PASSWORD|SECRET)$/i.test(u))[0]||(o.required.length===1?o.required[0]:null);if(!i){let u=new Error(`${o.key} has no single token field; provide each of [${o.required.join(", ")}] explicitly`);throw u.code="NEEDS_EXPLICIT_KEYS",u}let a=new Set([i,...Object.keys(r||{}).filter(u=>r[u]!=null&&String(r[u]).trim())]),c=lt(e),l=o.required.filter(u=>!a.has(u)&&!String(c[u]||"").trim());if(l.length){let u=new Error(`${o.key} also requires [${l.join(", ")}]; pass them explicitly (setup would otherwise be marked ready while unusable)`);throw u.code="MISSING_REQUIRED",u}ut(e,i,n);for(let[u,y]of Object.entries(r||{}))y!=null&&String(y).trim()&&ut(e,u,y);return{platform:o.key,set:o.required,profile:e,path:xe(e)}}function an(){return je.join(N(),"setup-state.json")}function V(e={}){F(N());let t=an(),n={};if(D.existsSync(t))try{n=JSON.parse(D.readFileSync(t,"utf8"))}catch{n={}}let r={...n,...e,updatedAt:new Date().toISOString(),host:rn.hostname()};return D.writeFileSync(t,JSON.stringify(r,null,2)+`
-`,{mode:384}),r}import R from"node:fs";import M from"node:path";import{createHash as cn}from"node:crypto";import{spawnSync as se}from"node:child_process";var un="0.19.0",dt=`hermes-agent==${un}`,Ue=[3,11],Be=[3,14],he="3.13",Ae="0.12.1",Ee=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Ae}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Ae}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function ln(e,{windows:t=process.platform==="win32"}={}){let n=Buffer.isBuffer(e)?e:Buffer.from(e),r=t?Ee.windows:Ee.posix,o=cn("sha256").update(n).digest("hex"),s=n.toString("utf8");return o===r.sha256&&s.length>=1e3&&s.includes(Ae)}function J(){return M.join(N(),"runtime")}function pt(){return M.join(J(),"venv")}function He(e){let t=process.platform==="win32"?"Scripts":"bin",n=process.platform==="win32"?`${e}.exe`:e;return M.join(pt(),t,n)}function _e(){return He("hermes")}function dn(){let e=He("python3");return R.existsSync(e)?e:He("python")}function me(){return M.join(J(),"uv",process.platform==="win32"?"uv.exe":"uv")}function oe(e){let t=process.platform==="win32"&&!M.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let n of(process.env.PATH||"").split(M.delimiter))if(n)for(let r of t){let o=M.join(n,`${e}${r}`);try{if(R.existsSync(o))return o}catch{}}return null}function fn(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function pn(e){if(!e)return!1;let[t,n]=e;return!(t<Ue[0]||t===Ue[0]&&n<Ue[1]||t>Be[0]||t===Be[0]&&n>=Be[1])}function hn(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let n=M.isAbsolute(t)?R.existsSync(t)?t:null:oe(t);if(!n)continue;let r=se(n,["--version"],{encoding:"utf8",timeout:15e3}),o=fn(`${r.stdout||""}${r.stderr||""}`);if(pn(o))return{bin:n,version:o.join("."),source:"host"}}return null}function mn(){return process.env.ORACLE_UV_BIN||oe("uv")||(R.existsSync(M.join(ne(),".local","bin","uv"))?M.join(ne(),".local","bin","uv"):null)||(R.existsSync(me())?me():null)}function gn(e,t){let n=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return se(process.execPath,["-e",n,e,t],{encoding:"utf8",timeout:2*6e4})}function yn({quiet:e=!1}={}){let t=mn();if(t)return{ok:!0,bin:t,reused:!0};F(J());let n=process.platform==="win32",r=M.join(J(),n?"uv-install.ps1":"uv-install.sh"),o=n?Ee.windows:Ee.posix,s=gn(o.url,r);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=R.readFileSync(r);if(!ln(i,{windows:n}))return{ok:!1,reason:`uv ${Ae} installer checksum mismatch`};let a=M.dirname(me());F(a);let c=n?oe("powershell.exe")||oe("powershell"):oe("sh")||"/bin/sh";if(!c)return{ok:!1,reason:n?"PowerShell not found":"sh not found"};let u=se(c,n?["-NoProfile","-ExecutionPolicy","Bypass","-File",r]:[r],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!R.existsSync(me())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:me(),reused:!1}}function ft({quiet:e=!1}={}){let t=yn({quiet:e});if(!t.ok)return t;let n=t.bin,r={...process.env,UV_PYTHON_INSTALL_DIR:M.join(J(),"python"),UV_CACHE_DIR:M.join(J(),"cache")},o=se(n,["python","install","--no-bin",he],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:r});if(o.status!==0)return{ok:!1,reason:`uv python install ${he} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=se(n,["python","find",he],{encoding:"utf8",timeout:6e4,env:r}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!R.existsSync(i)?{ok:!1,reason:`uv could not locate python ${he}`}:{ok:!0,bin:i,version:he,source:"uv"}}function ie(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=_e();if(R.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=oe("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Ke(e,t,{quiet:n}){return se(e,t,{stdio:n?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function ht({quiet:e=!1,upgrade:t=!1}={}){let n=hn();if(!n){let l=ft({quiet:e});if(l.ok)n={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}F(J());let r=pt();if(R.existsSync(_e())&&!t)return{ok:!0,bin:_e(),reused:!0};if(!R.existsSync(M.join(r,"pyvenv.cfg"))){let l=Ke(n.bin,["-m","venv",r],{quiet:e});if(l.status!==0&&n.source!=="uv"){R.rmSync(r,{recursive:!0,force:!0});let u=ft({quiet:e});if(u.ok)n={bin:u.bin,version:u.version,source:"uv"},l=Ke(n.bin,["-m","venv",r],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=dn();if(!R.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(dt);let a=Ke(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${dt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=_e();return R.existsSync(c)?{ok:!0,bin:c,reused:!1,python:n.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as wn,randomBytes as We,timingSafeEqual as bn}from"node:crypto";import L from"node:fs";import j from"node:path";import kn from"node:readline/promises";import{spawn as xn,spawnSync as vn}from"node:child_process";var ce=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Sn=12e4;function _n(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function X(e){let t=String(e||"").trim().toLowerCase();for(let[n,r]of Object.entries(ce))if(r.aliases.includes(t))return n;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function W(e){let t=X(e);return{id:t,...ce[t]}}function P(e,t={}){if(!L.existsSync(e))return t;try{let n=JSON.parse(L.readFileSync(e,"utf8"));if(!n||typeof n!="object"||Array.isArray(n))throw new Error("invalid object");return n}catch{throw new Error(`credential store is unreadable or corrupt: ${j.basename(e)}`)}}function gt(e){F(e),process.platform!=="win32"&&L.chmodSync(e,448)}function z(e,t){gt(j.dirname(e));let n=`${e}.${process.pid}.${We(4).toString("hex")}.tmp`;L.writeFileSync(n,`${JSON.stringify(t,null,2)}
-`,{mode:384}),L.renameSync(n,e),process.platform!=="win32"&&L.chmodSync(e,384)}function An(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function qe(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function ae(e={}){let t=String(e.accessToken||e.access_token||"").trim(),n=String(e.refreshToken||e.refresh_token||"").trim(),r=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(r)&&r>=1e9&&r<1e12&&(r=r*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:n,expiresAt:Number.isFinite(r)?r:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function En(e={}){let t=e.file||j.join(N(),"oauth.json"),n=e.metadataFile||j.join(j.dirname(t),"oauth-meta.json"),r=e.linksFile||j.join(j.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||vn,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&An(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function l(w){gt(j.dirname(c));let g;for(let p=0;p<400;p+=1)try{g=L.openSync(c,"wx",384);break}catch(d){if(d?.code!=="EEXIST")throw d;try{Date.now()-L.statSync(c).mtimeMs>3e5&&L.unlinkSync(c)}catch{}await new Promise(m=>setTimeout(m,25))}if(g===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await w()}finally{try{L.closeSync(g)}catch{}try{L.unlinkSync(c)}catch{}}}function u(w,g="oauth"){return["application","oracle","kind",g,"provider",w]}function y(w){if(!L.existsSync(r))return null;let p=P(r,{providers:{}}).providers?.[w];if(!Array.isArray(p))return null;let d=[];for(let m of p)if(j.isAbsolute(String(m||"")))try{let x=P(m,{});if(w==="anthropic-oauth"&&x.claudeAiOauth){let C=ae(x.claudeAiOauth);d.push({...C,refreshToken:"",source:"external-access-only"});continue}let S=x.credential_pool&&typeof x.credential_pool=="object"?x.credential_pool:null;if(S){let C=S[w]||S[w.replace(/-oauth$/,"")]||[],K=Array.isArray(C)?C:C?[C]:[];for(let H of K)if(!(!H||typeof H!="object"))try{let Fe=ae(H);d.push({...Fe,refreshToken:"",source:"external-access-only"})}catch{}}}catch{}return d.length?d.find(m=>!m.expiresAt||m.expiresAt>o()+Sn)||d[0]:null}function h(w){let g=X(w);if(i){let m=s("secret-tool",["lookup",...u(g)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!m.error&&m.status===0&&String(m.stdout||"").trim())try{return ae(JSON.parse(String(m.stdout).trim()))}catch{}return y(g)}let d=P(t,{providers:{}}).providers?.[g];if(d)try{return ae(d)}catch{}return y(g)}function O(w,g){let p=X(w),d=ae(g);if(i){let x=s("secret-tool",["store",`--label=Oracle ${p} OAuth`,...u(p)],{input:JSON.stringify(d),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected OAuth credential");let S=P(n,{providers:{}});return S.providers||={},S.providers[p]={expiresAt:d.expiresAt,source:d.source},z(n,S),d}let m=P(t,{providers:{}});return m.providers||={},m.providers[p]=d,z(t,m),d}function v(w){let g=X(w);if(i){let m=s("secret-tool",["clear",...u(g)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=P(n,{providers:{}});return x.providers&&delete x.providers[g],z(n,x),!m.error&&m.status===0}let p=P(t,{providers:{}}),d=!!p.providers?.[g];return p.providers&&delete p.providers[g],z(t,p),d}function T(w){let g=qe(w);if(i){let p=s("secret-tool",["lookup",...u(g,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return p.error||p.status!==0?"":String(p.stdout||"").trim()}return String(P(t,{apiKeys:{}}).apiKeys?.[g]||"").trim()}function k(w,g){let p=qe(w),d=String(g||"").trim();if(!d)throw new Error("API key is empty");if(i){let x=s("secret-tool",["store",`--label=Oracle ${p} API key`,...u(p,"api-key")],{input:d,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected API key");let S=P(n,{providers:{},apiKeys:{}});return S.apiKeys||={},S.apiKeys[p]={configured:!0},z(n,S),!0}let m=P(t,{providers:{},apiKeys:{}});return m.apiKeys||={},m.apiKeys[p]=d,z(t,m),!0}function A(w){let g=qe(w);if(i){let m=s("secret-tool",["clear",...u(g,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=P(n,{providers:{},apiKeys:{}});return x.apiKeys&&delete x.apiKeys[g],z(n,x),!m.error&&m.status===0}let p=P(t,{providers:{},apiKeys:{}}),d=!!p.apiKeys?.[g];return p.apiKeys&&delete p.apiKeys[g],z(t,p),d}function B(){let w={},g={};if(i){let p=P(n,{providers:{},apiKeys:{}});for(let[d,m]of Object.entries(p.providers||{}))w[d]={loggedIn:!!h(d),expiresAt:Number(m.expiresAt||0),source:String(m.source||"oracle"),storage:a};for(let d of Object.keys(p.apiKeys||{}))g[d]={configured:!!T(d),storage:a}}else{let p=P(t,{providers:{},apiKeys:{}});for(let[d,m]of Object.entries(p.providers||{}))w[d]={loggedIn:!!m?.accessToken,expiresAt:Number(m?.expiresAt||0),source:String(m?.source||"oracle"),storage:a};for(let[d,m]of Object.entries(p.apiKeys||{}))g[d]={configured:!!m,storage:a}}for(let p of Object.keys(ce)){if(w[p])continue;let d=y(p);d&&(w[p]={loggedIn:!0,expiresAt:d.expiresAt,source:d.source,storage:"external-access-source"})}return{storage:a,providers:w,apiKeys:g}}return Object.freeze({file:t,storage:a,get:h,set:O,remove:v,getApiKey:T,setApiKey:k,removeApiKey:A,status:B,withLock:l})}var mt;function U(){return mt||=En(),mt}function ze(e){return Buffer.from(e).toString("base64url")}function $n(){let e=ze(We(32));return{verifier:e,challenge:ze(wn("sha256").update(e).digest()),state:ze(We(24))}}function On(e,t){let n=Buffer.from(String(e||"")),r=Buffer.from(String(t||""));return n.length===r.length&&bn(n,r)}function Tn(e){let t=String(e),n=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return xn(n[0],n[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function Ge(e){return new URLSearchParams(e).toString()}async function Z(e,t){if(!e?.ok){let r="";try{r=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${r?`, ${r}`:""})`)}let n=await e.json();if(!n||typeof n!="object")throw new Error(`${t} returned invalid JSON`);return n}async function Mn(e){if(e)return String(await e()).trim();let t=kn.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function Ye(e,t={}){let n=String(e.access_token||"").trim(),r=String(e.refresh_token||t.refreshToken||"").trim();if(!n)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return ae({accessToken:n,refreshToken:r,expiresAt:_n(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Rn(e){let t=ce["anthropic-oauth"],n=e.pkce||$n(),r=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:n.challenge,code_challenge_method:"S256",state:n.state}),o=`${t.authorizeUrl}?${r}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Mn(e.inputFn),[i,a]=s.split("#",2);if(!i||!On(a,n.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:n.verifier})});return Ye(await Z(c,"Claude OAuth token exchange"),e)}async function Pn(e){let t=ce["openai-codex"],n=await Z(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!n.user_code||!n.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let r=`${t.issuer}/codex/device`;e.output(`Open: ${r}`),e.output(`Code: ${n.user_code}`),e.openFn(r);let o=Math.max(3,Number(n.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:n.device_auth_id,user_code:n.user_code})});if(c.ok){s=await Z(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:Ge({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return Ye(await Z(i,"Codex OAuth token exchange"),e)}function $e(e){let t=new URL(String(e)),n=t.hostname.toLowerCase();if(t.protocol!=="https:"||n!=="x.ai"&&!n.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function In(e){let t=ce["xai-oauth"],n=await Z(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");$e(n.authorization_endpoint);let r=$e(n.token_endpoint),o=await Z(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:Ge({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=$e(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(r,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:Ge({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let y=await Z(l,"xAI OAuth token exchange");return Ye(y,{...e,discovery:{authorization_endpoint:$e(n.authorization_endpoint),token_endpoint:r}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function yt(e,t={}){let n=X(e),r={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Tn,output:t.output||(o=>process.stdout.write(`${o}
-`)),now:t.now,pkce:t.pkce};return n==="anthropic-oauth"?Rn(r):n==="openai-codex"?Pn(r):In(r)}import Me from"node:fs";import Ve from"node:path";var Ln=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Oe(e){return String(e||"").trim()||void 0}function Cn(e,{required:t=!1}={}){let n=Oe(e)?.toLowerCase();if(!n){if(t)throw new Error("model provider is required");return}if(!Ln.has(n))throw new Error(`unsupported provider: ${n}`);return n}function Nn(e,{required:t=!1}={}){let n=Oe(e);if(!n){if(t)throw new Error("model is required");return}if(n.includes("..")||n.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(n))throw new Error("invalid model id");return n}function Fn(e){let t=Oe(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let n;try{n=new URL(t)}catch{throw new Error("invalid custom base URL")}let r=n.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=r==="localhost"||r==="127.0.0.1"||r==="::1";if(n.protocol!=="https:"&&!(n.protocol==="http:"&&o)||n.username||n.password||n.search||n.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return n.toString().replace(/\/+$/,"")}function Te({provider:e,model:t,baseUrl:n}={},{requireModel:r=!1}={}){let o=Cn(e),s=Nn(t,{required:r});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:Fn(n)};if(Oe(n))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var Dn=new Set(["auto","standalone","hermes","remote","arch"]);function jn(){return Ve.join(N(),"model.json")}function ue(e){return String(e||"").trim()||void 0}function Un(e={}){let t=ue(e.backend)?.toLowerCase()||"auto",n=Te({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),r=ue(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=ue(e.reasoningEffort),i=ue(e.computeHost||e.remoteHost),a=ue(e.computeUser||e.remoteUser),c=ue(e.computePath||e.remotePath);if(!Dn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(r&&!/^[A-Z][A-Z0-9_]*$/.test(r))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!i)throw new Error("remote backend requires computeHost");return{backend:t,...n,...r?{apiKeyEnv:r}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...s?{reasoningEffort:s}:{},...i?{computeHost:i}:{},...a?{computeUser:a}:{},...c?{computePath:c}:{}}}function Re(e){let t=Un(e),n=jn();F(Ve.dirname(n)),process.platform!=="win32"&&Me.chmodSync(Ve.dirname(n),448);let r=`${n}.${process.pid}.tmp`;return Me.writeFileSync(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),Me.renameSync(r,n),process.platform!=="win32"&&Me.chmodSync(n,384),t}var _t=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},nous:{model:"moonshotai/kimi-k3"},qwen:{model:"qwen-plus"},glm:{model:"glm-4.5"},custom:{model:""}});function Xe(e,t){let n=e.indexOf(t);return n>=0&&e[n+1]?e[n+1]:""}async function qn(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function zn(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,n)=>{let r="",o=()=>{process.stdin.off("data",s),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
+`}import z from"node:fs";import hr from"node:os";import We from"node:path";import we from"node:fs";import ur from"node:os";import G from"node:path";import{fileURLToPath as lr}from"node:url";var fr=G.dirname(lr(import.meta.url)),qn=G.resolve(fr,"../..");function J(){return process.env.ORACLE_FAKE_HOME||ur.homedir()}function dr(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function R(){return dr()?process.env.ORACLE_CONFIG_DIR||G.join(J(),".config","oracle"):G.join(J(),".config","oracle")}function pr(){return G.join(R(),"desk.json")}function mr(){return G.join(R(),"env")}function ce({force:e=!1}={}){if(ce._done&&!e)return ce._result||null;ce._done=!0;let t={},r=(o,s)=>{if(s==null)return;let i=String(s).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=mr();if(we.existsSync(o))for(let s of we.readFileSync(o,"utf8").split(/\r?\n/)){let i=s.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let a=i[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),r(i[1],a)}}catch{}try{let o=pr();if(we.existsSync(o)){let s=JSON.parse(we.readFileSync(o,"utf8"));s&&typeof s=="object"&&(r("ORACLE_DESK_URL",s.deskUrl||s.dataUrl||s.url),r("ORACLE_DATA_URL",s.dataUrl||s.deskUrl||s.url),r("ORACLE_API_URL",s.apiUrl||s.dataUrl||s.deskUrl),r("ORACLE_PUBLIC_URL",s.publicUrl||s.deskUrl||s.dataUrl),r("ORACLE_EXEC_URL",s.execUrl),r("MAD_DESK_URL",s.deskUrl||s.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),ce._result=Object.keys(t).length?t:null,ce._result}try{ce()}catch{}function be(){return process.env.HERMES_HOME?G.resolve(process.env.HERMES_HOME):G.join(J(),".hermes")}function U(e){return we.mkdirSync(e,{recursive:!0}),e}var gr=/(TOKEN|SECRET|PASSWORD|KEY|AUTH|PRIVATE|MNEMONIC|SEED)/i;function $e(e="oracle"){return We.join(be(),"profiles",e,".env")}function yr(e){let t={};for(let r of String(e||"").split(/\r?\n/)){let n=r.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),t[s]=i}return t}function yt(e="oracle"){let t=$e(e);return z.existsSync(t)?yr(z.readFileSync(t,"utf8")):{}}function gt(e,t,r){if(!t||gr.test(t)===!1&&/[^A-Z0-9_]/.test(t),!/^[A-Z][A-Z0-9_]*$/.test(t)){let l=new Error(`invalid env key '${t}'`);throw l.code="BAD_KEY",l}if(r==null||String(r).trim()===""){let l=new Error(`empty value for ${t}`);throw l.code="EMPTY",l}let n=$e(e);U(We.dirname(n));let o=z.existsSync(n)?z.readFileSync(n,"utf8"):"",s=o?o.split(/\r?\n/):[],i=[],a=!1,c=`${t}=${String(r)}`;for(let l of s)l.startsWith(`${t}=`)?(i.push(c),a=!0):(l.length||i.length)&&i.push(l);for(a||(i.length&&i[i.length-1]!==""&&i.push(""),i.push(c));i.length&&i[i.length-1]==="";)i.pop();i.push(""),z.writeFileSync(n,i.join(`
+`),{mode:384});try{z.chmodSync(n,384)}catch{}return{path:n,key:t,set:!0}}function ue(e="oracle"){let t=yt(e),r={};for(let n of ae()){if(!n.required.length){r[n.key]="manual";continue}let o=n.required.filter(s=>!String(t[s]||"").trim());r[n.key]=o.length?"unset":"ready"}return{profile:e,statuses:r,envPath:$e(e)}}function Te(e="oracle"){let{statuses:t}=ue(e);return ht({profile:e,statuses:t})}function Me(e,t,r,n={}){let o=ee(t);if(!o){let u=new Error(`unknown platform '${t}'`);throw u.code="UNKNOWN_PLATFORM",u}if(!o.required.length){let u=new Error(`${o.key} uses hermes interactive setup (oracle setup messaging)`);throw u.code="NEEDS_INTERACTIVE",u}let i=o.required.filter(u=>/(TOKEN|PASSWORD|SECRET)$/i.test(u))[0]||(o.required.length===1?o.required[0]:null);if(!i){let u=new Error(`${o.key} has no single token field; provide each of [${o.required.join(", ")}] explicitly`);throw u.code="NEEDS_EXPLICIT_KEYS",u}let a=new Set([i,...Object.keys(n||{}).filter(u=>n[u]!=null&&String(n[u]).trim())]),c=yt(e),l=o.required.filter(u=>!a.has(u)&&!String(c[u]||"").trim());if(l.length){let u=new Error(`${o.key} also requires [${l.join(", ")}]; pass them explicitly (setup would otherwise be marked ready while unusable)`);throw u.code="MISSING_REQUIRED",u}gt(e,i,r);for(let[u,w]of Object.entries(n||{}))w!=null&&String(w).trim()&&gt(e,u,w);return{platform:o.key,set:o.required,profile:e,path:$e(e)}}function wr(){return We.join(R(),"setup-state.json")}function te(e={}){U(R());let t=wr(),r={};if(z.existsSync(t))try{r=JSON.parse(z.readFileSync(t,"utf8"))}catch{r={}}let n={...r,...e,updatedAt:new Date().toISOString(),host:hr.hostname()};return z.writeFileSync(t,JSON.stringify(n,null,2)+`
+`,{mode:384}),n}import I from"node:fs";import P from"node:path";import{createHash as br}from"node:crypto";import{spawnSync as fe}from"node:child_process";var kr="0.19.0",wt=`hermes-agent==${kr}`,Ye=[3,11],Ge=[3,14],ke="3.13",Pe="0.12.1",Ie=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function xr(e,{windows:t=process.platform==="win32"}={}){let r=Buffer.isBuffer(e)?e:Buffer.from(e),n=t?Ie.windows:Ie.posix,o=br("sha256").update(r).digest("hex"),s=r.toString("utf8");return o===n.sha256&&s.length>=1e3&&s.includes(Pe)}function re(){return P.join(R(),"runtime")}function kt(){return P.join(re(),"venv")}function Ve(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return P.join(kt(),t,r)}function Re(){return Ve("hermes")}function Sr(){let e=Ve("python3");return I.existsSync(e)?e:Ve("python")}function xe(){return P.join(re(),"uv",process.platform==="win32"?"uv.exe":"uv")}function le(e){let t=process.platform==="win32"&&!P.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(P.delimiter))if(r)for(let n of t){let o=P.join(r,`${e}${n}`);try{if(I.existsSync(o))return o}catch{}}return null}function vr(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function _r(e){if(!e)return!1;let[t,r]=e;return!(t<Ye[0]||t===Ye[0]&&r<Ye[1]||t>Ge[0]||t===Ge[0]&&r>=Ge[1])}function Ar(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let r=P.isAbsolute(t)?I.existsSync(t)?t:null:le(t);if(!r)continue;let n=fe(r,["--version"],{encoding:"utf8",timeout:15e3}),o=vr(`${n.stdout||""}${n.stderr||""}`);if(_r(o))return{bin:r,version:o.join("."),source:"host"}}return null}function Er(){return process.env.ORACLE_UV_BIN||le("uv")||(I.existsSync(P.join(J(),".local","bin","uv"))?P.join(J(),".local","bin","uv"):null)||(I.existsSync(xe())?xe():null)}function Or(e,t){let r=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return fe(process.execPath,["-e",r,e,t],{encoding:"utf8",timeout:2*6e4})}function $r({quiet:e=!1}={}){let t=Er();if(t)return{ok:!0,bin:t,reused:!0};U(re());let r=process.platform==="win32",n=P.join(re(),r?"uv-install.ps1":"uv-install.sh"),o=r?Ie.windows:Ie.posix,s=Or(o.url,n);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=I.readFileSync(n);if(!xr(i,{windows:r}))return{ok:!1,reason:`uv ${Pe} installer checksum mismatch`};let a=P.dirname(xe());U(a);let c=r?le("powershell.exe")||le("powershell"):le("sh")||"/bin/sh";if(!c)return{ok:!1,reason:r?"PowerShell not found":"sh not found"};let u=fe(c,r?["-NoProfile","-ExecutionPolicy","Bypass","-File",n]:[n],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!I.existsSync(xe())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:xe(),reused:!1}}function bt({quiet:e=!1}={}){let t=$r({quiet:e});if(!t.ok)return t;let r=t.bin,n={...process.env,UV_PYTHON_INSTALL_DIR:P.join(re(),"python"),UV_CACHE_DIR:P.join(re(),"cache")},o=fe(r,["python","install","--no-bin",ke],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:n});if(o.status!==0)return{ok:!1,reason:`uv python install ${ke} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=fe(r,["python","find",ke],{encoding:"utf8",timeout:6e4,env:n}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!I.existsSync(i)?{ok:!1,reason:`uv could not locate python ${ke}`}:{ok:!0,bin:i,version:ke,source:"uv"}}function de(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Re();if(I.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=le("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Je(e,t,{quiet:r}){return fe(e,t,{stdio:r?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function xt({quiet:e=!1,upgrade:t=!1}={}){let r=Ar();if(!r){let l=bt({quiet:e});if(l.ok)r={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}U(re());let n=kt();if(I.existsSync(Re())&&!t)return{ok:!0,bin:Re(),reused:!0};if(!I.existsSync(P.join(n,"pyvenv.cfg"))){let l=Je(r.bin,["-m","venv",n],{quiet:e});if(l.status!==0&&r.source!=="uv"){I.rmSync(n,{recursive:!0,force:!0});let u=bt({quiet:e});if(u.ok)r={bin:u.bin,version:u.version,source:"uv"},l=Je(r.bin,["-m","venv",n],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=Sr();if(!I.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(wt);let a=Je(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${wt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=Re();return I.existsSync(c)?{ok:!0,bin:c,reused:!1,python:r.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as Dr,randomBytes as rt,timingSafeEqual as Fr}from"node:crypto";import F from"node:fs";import M from"node:path";import Ur from"node:readline/promises";import{spawn as Br,spawnSync as Kr}from"node:child_process";import K from"node:fs";import D from"node:path";var Xe=Object.freeze(["anthropic-oauth","openai-codex","xai-oauth"]);function St(e){let t=String(e||"").trim();if(!t||!D.isAbsolute(t))return"";try{return K.statSync(t).isFile()?t:""}catch{return""}}function Tr(e){try{return K.readdirSync(e,{withFileTypes:!0})}catch{return[]}}function Mr(e=process.env){return!(e.ORACLE_PUBLIC_DESKTOP==="1"&&e.ORACLE_OWNER_DESKTOP!=="1")}function Rr(e=process.env){let t=String(e.ORACLE_REAL_HOME||"").trim();return t&&D.isAbsolute(t)?t:J()}function Pr(e={}){let t=e.home||Rr(e.env),r={"anthropic-oauth":[],"openai-codex":[],"xai-oauth":[]},n=(s,i)=>{let a=St(i);a&&(r[s].includes(a)||r[s].push(a))};n("anthropic-oauth",D.join(t,".claude",".credentials.json"));for(let s of Tr(D.join(t,".claude-lanes")))!s.isDirectory()||s.name.startsWith(".")||n("anthropic-oauth",D.join(t,".claude-lanes",s.name,".credentials.json"));let o=D.join(t,".hermes","auth.json");for(let s of Xe)n(s,o);return n("anthropic-oauth",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("openai-codex",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("xai-oauth",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),r}function Ir(e){if(!K.existsSync(e))return{providers:{}};try{let t=JSON.parse(K.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{providers:{}}:{providers:t.providers&&typeof t.providers=="object"&&!Array.isArray(t.providers)?t.providers:{}}}catch{return{providers:{}}}}function Lr(e,t){let r=[];for(let n of[...Array.isArray(e)?e:[],...t]){let o=St(n)||(D.isAbsolute(String(n||""))?String(n):"");!o||r.includes(o)||r.push(o)}return r}function vt(e={}){if(!Mr(e.env))return{wrote:!1,providers:{}};let t=e.linksFile||D.join(R(),"oauth-links.json"),r=Pr(e),o={providers:{...Ir(t).providers||{}}},s=!1;for(let l of Xe){let u=Lr(o.providers[l],r[l]);JSON.stringify(u)!==JSON.stringify(o.providers[l]||[])?(o.providers[l]=u,s=!0):u.length&&(o.providers[l]=u)}if(!Xe.some(l=>(o.providers[l]||[]).length))return{wrote:!1,providers:o.providers};if(!s&&K.existsSync(t))return{wrote:!1,providers:o.providers};let a=D.dirname(t);if(K.mkdirSync(a,{recursive:!0}),process.platform!=="win32")try{K.chmodSync(a,448)}catch{}let c=`${t}.${process.pid}.tmp`;return K.writeFileSync(c,`${JSON.stringify(o,null,2)}
+`,{mode:384}),K.renameSync(c,t),process.platform!=="win32"&&K.chmodSync(t,384),{wrote:!0,providers:o.providers}}import ne from"node:fs";import Et from"node:path";var _t=/access|refresh|idToken|id_token|token|secret|key|seed|mnemonic/i;function Cr(e=R()){return Et.join(e,"user-profile.json")}function Nr(e){if(!ne.existsSync(e))return{identities:{},wallets:{}};try{let t=JSON.parse(ne.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{identities:{},wallets:{}}:{identities:t.identities&&typeof t.identities=="object"?t.identities:{},wallets:t.wallets&&typeof t.wallets=="object"?t.wallets:{},updatedAt:t.updatedAt}}catch{return{identities:{},wallets:{}}}}function At(e){if(!e||typeof e!="object"||Array.isArray(e))return{};let t={};for(let[r,n]of Object.entries(e))if(!_t.test(r)){if(typeof n=="string"||typeof n=="number"||typeof n=="boolean"){t[r]=n;continue}if(n&&typeof n=="object"&&!Array.isArray(n)){let o={};for(let[s,i]of Object.entries(n))_t.test(s)||(typeof i=="string"||typeof i=="number"||typeof i=="boolean")&&(o[s]=i);t[r]=o}}return t}function jr(e,t){let r=Et.dirname(e);if(ne.mkdirSync(r,{recursive:!0}),process.platform!=="win32")try{ne.chmodSync(r,448)}catch{}let n={updatedAt:new Date().toISOString(),identities:At(t.identities),wallets:At(t.wallets)},o=`${e}.${process.pid}.tmp`;return ne.writeFileSync(o,`${JSON.stringify(n,null,2)}
+`,{mode:384}),ne.renameSync(o,e),process.platform!=="win32"&&ne.chmodSync(e,384),n}function Ze(e){let r=String(e||"").trim().split(".");if(r.length<2)return{};try{let n=JSON.parse(Buffer.from(r[1],"base64url").toString("utf8")),o=String(n.email||"").trim(),s=String(n.name||n.preferred_username||"").trim();return{...o?{email:o}:{},...s?{name:s}:{}}}catch{return{}}}function Qe(e,t={},r={}){let n=String(e||"").trim();if(!n)return null;let o=r.file||Cr(r.configDir),s=Nr(o),i=s.identities[n]&&typeof s.identities[n]=="object"?s.identities[n]:{};return s.identities[n]={...i,provider:n,source:String(t.source||i.source||"oracle"),loggedInAt:t.loggedInAt||new Date().toISOString(),...t.label?{label:String(t.label)}:{},...t.email?{email:String(t.email)}:{},...t.name?{name:String(t.name)}:{}},jr(o,s)}var me=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Ot=12e4;function Hr(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function oe(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(me))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function X(e){let t=oe(e);return{id:t,...me[t]}}function L(e,t={}){if(!F.existsSync(e))return t;try{let r=JSON.parse(F.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${M.basename(e)}`)}}function Tt(e){U(e),process.platform!=="win32"&&F.chmodSync(e,448)}function V(e,t){Tt(M.dirname(e));let r=`${e}.${process.pid}.${rt(4).toString("hex")}.tmp`;F.writeFileSync(r,`${JSON.stringify(t,null,2)}
+`,{mode:384}),F.renameSync(r,e),process.platform!=="win32"&&F.chmodSync(e,384)}function zr(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function et(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function pe(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(n)&&n>=1e9&&n<1e12&&(n=n*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(n)?n:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function qr(e={}){let t=e.file||M.join(R(),"oauth.json"),r=e.metadataFile||M.join(M.dirname(t),"oauth-meta.json"),n=e.linksFile||M.join(M.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Kr,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&zr(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function l(y){Tt(M.dirname(c));let p;for(let f=0;f<400;f+=1)try{p=F.openSync(c,"wx",384);break}catch(m){if(m?.code!=="EEXIST")throw m;try{Date.now()-F.statSync(c).mtimeMs>3e5&&F.unlinkSync(c)}catch{}await new Promise(h=>setTimeout(h,25))}if(p===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await y()}finally{try{F.closeSync(p)}catch{}try{F.unlinkSync(c)}catch{}}}function u(y,p="oauth"){return["application","oracle","kind",p,"provider",y]}let w=!1;function g(){if(w)return;w=!0;let y=M.join(R(),"oauth-links.json");if(M.resolve(n)===M.resolve(y))try{vt({linksFile:n})}catch{}}function E(y){if(g(),!F.existsSync(n))return[];let f=L(n,{providers:{}}).providers?.[y];if(!Array.isArray(f))return[];let m=[];for(let h of f)if(M.isAbsolute(String(h||"")))try{let x=L(h,{});if(y==="anthropic-oauth"&&x.claudeAiOauth){let N=pe(x.claudeAiOauth);m.push({...N,refreshToken:"",source:"external-access-only",label:M.basename(M.dirname(h))||"claude-lane"});continue}let C=x.credential_pool&&typeof x.credential_pool=="object"?x.credential_pool:null;if(C){let N=C[y]||C[y.replace(/-oauth$/,"")]||[],ze=Array.isArray(N)?N:N?[N]:[];for(let Y of ze)if(!(!Y||typeof Y!="object"))try{let Oe=pe(Y);m.push({...Oe,refreshToken:"",source:"external-access-only",label:String(Y.label||Y.id||M.basename(M.dirname(h))||y)})}catch{}}}catch{}return m}function S(y){let p=E(y);return p.length?p.find(f=>!f.expiresAt||f.expiresAt>o()+Ot)||p[0]:null}function T(y){return y.map(p=>({label:String(p.label||"lane"),source:"external-access-only",expiresAt:Number(p.expiresAt||0),healthy:!p.expiresAt||p.expiresAt>o()+Ot}))}function v(y){let p=oe(y);if(i){let h=s("secret-tool",["lookup",...u(p)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!h.error&&h.status===0&&String(h.stdout||"").trim())try{return pe(JSON.parse(String(h.stdout).trim()))}catch{}return S(p)}let m=L(t,{providers:{}}).providers?.[p];if(m)try{return pe(m)}catch{}return S(p)}function A(y,p){let f=oe(y),m=pe(p);if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} OAuth`,...u(f)],{input:JSON.stringify(m),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected OAuth credential");let C=L(r,{providers:{}});C.providers||={},C.providers[f]={expiresAt:m.expiresAt,source:m.source},V(r,C);try{let N=Ze(m.idToken);Qe(f,{source:m.source,...N,label:N.name||N.email||f},{configDir:M.dirname(t)})}catch{}return m}let h=L(t,{providers:{}});h.providers||={},h.providers[f]=m,V(t,h);try{let x=Ze(m.idToken);Qe(f,{source:m.source,...x,label:x.name||x.email||f},{configDir:M.dirname(t)})}catch{}return m}function W(y){let p=oe(y);if(i){let h=s("secret-tool",["clear",...u(p)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{}});return x.providers&&delete x.providers[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{}}),m=!!f.providers?.[p];return f.providers&&delete f.providers[p],V(t,f),m}function B(y){let p=et(y);if(i){let f=s("secret-tool",["lookup",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return f.error||f.status!==0?"":String(f.stdout||"").trim()}return String(L(t,{apiKeys:{}}).apiKeys?.[p]||"").trim()}function Q(y,p){let f=et(y),m=String(p||"").trim();if(!m)throw new Error("API key is empty");if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} API key`,...u(f,"api-key")],{input:m,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected API key");let C=L(r,{providers:{},apiKeys:{}});return C.apiKeys||={},C.apiKeys[f]={configured:!0},V(r,C),!0}let h=L(t,{providers:{},apiKeys:{}});return h.apiKeys||={},h.apiKeys[f]=m,V(t,h),!0}function H(y){let p=et(y);if(i){let h=s("secret-tool",["clear",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{},apiKeys:{}});return x.apiKeys&&delete x.apiKeys[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{},apiKeys:{}}),m=!!f.apiKeys?.[p];return f.apiKeys&&delete f.apiKeys[p],V(t,f),m}function k(){g();let y={},p={};if(i){let f=L(r,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!v(m),expiresAt:Number(h.expiresAt||0),source:String(h.source||"oracle"),storage:a,lanes:T(E(m))};for(let m of Object.keys(f.apiKeys||{}))p[m]={configured:!!B(m),storage:a}}else{let f=L(t,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!h?.accessToken,expiresAt:Number(h?.expiresAt||0),source:String(h?.source||"oracle"),storage:a,lanes:T(E(m))};for(let[m,h]of Object.entries(f.apiKeys||{}))p[m]={configured:!!h,storage:a}}for(let f of Object.keys(me)){let m=T(E(f));if(y[f]){y[f].lanes=m;continue}let h=S(f);h&&(y[f]={loggedIn:!0,expiresAt:h.expiresAt,source:h.source,storage:"external-access-source",lanes:m})}return{storage:a,providers:y,apiKeys:p}}return Object.freeze({file:t,storage:a,get:v,set:A,remove:W,getApiKey:B,setApiKey:Q,removeApiKey:H,status:k,withLock:l})}var $t;function q(){return $t||=qr(),$t}function tt(e){return Buffer.from(e).toString("base64url")}function Wr(){let e=tt(rt(32));return{verifier:e,challenge:tt(Dr("sha256").update(e).digest()),state:tt(rt(24))}}function Yr(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Fr(r,n)}function Gr(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return Br(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function nt(e){return new URLSearchParams(e).toString()}async function se(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Jr(e){if(e)return String(await e()).trim();let t=Ur.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function ot(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return pe({accessToken:r,refreshToken:n,expiresAt:Hr(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Vr(e){let t=me["anthropic-oauth"],r=e.pkce||Wr(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Jr(e.inputFn),[i,a]=s.split("#",2);if(!i||!Yr(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return ot(await se(c,"Claude OAuth token exchange"),e)}async function Xr(e){let t=me["openai-codex"],r=await se(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await se(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:nt({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return ot(await se(i,"Codex OAuth token exchange"),e)}function Le(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Zr(e){let t=me["xai-oauth"],r=await se(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Le(r.authorization_endpoint);let n=Le(r.token_endpoint),o=await se(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Le(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let w=await se(l,"xAI OAuth token exchange");return ot(w,{...e,discovery:{authorization_endpoint:Le(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Mt(e,t={}){let r=oe(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Gr,output:t.output||(o=>process.stdout.write(`${o}
+`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Vr(n):r==="openai-codex"?Xr(n):Zr(n)}import je from"node:fs";import st from"node:path";var Qr=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Ce(e){return String(e||"").trim()||void 0}function en(e,{required:t=!1}={}){let r=Ce(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!Qr.has(r))throw new Error(`unsupported provider: ${r}`);return r}function tn(e,{required:t=!1}={}){let r=Ce(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function rn(e){let t=Ce(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function Ne({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=en(e),s=tn(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:rn(r)};if(Ce(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var nn=new Set(["auto","standalone","hermes","remote","arch"]);function on(){return st.join(R(),"model.json")}function he(e){return String(e||"").trim()||void 0}function sn(e={}){let t=he(e.backend)?.toLowerCase()||"auto",r=Ne({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=he(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=he(e.reasoningEffort),i=he(e.computeHost||e.remoteHost),a=he(e.computeUser||e.remoteUser),c=he(e.computePath||e.remotePath);if(!nn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!i)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...s?{reasoningEffort:s}:{},...i?{computeHost:i}:{},...a?{computeUser:a}:{},...c?{computePath:c}:{}}}function De(e){let t=sn(e),r=on();U(st.dirname(r)),process.platform!=="win32"&&je.chmodSync(st.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return je.writeFileSync(n,`${JSON.stringify(t,null,2)}
+`,{mode:384}),je.renameSync(n,r),process.platform!=="win32"&&je.chmodSync(r,384),t}var jt=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},nous:{model:"moonshotai/kimi-k3"},qwen:{model:"qwen-plus"},glm:{model:"glm-4.5"},custom:{model:""}});function at(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function ln(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function fn(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",s),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
 `)},s=i=>{let a=String(i);for(let c of a){if(c==="\r"||c===`
-`){o(),t(r.trim());return}if(c===""){o(),n(new Error("cancelled"));return}c==="\x7F"||c==="\b"?r=r.slice(0,-1):r+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function Ze(e,t,{baseUrl:n=""}={}){if(e==="custom"&&!String(n||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...Te({provider:e,model:t,baseUrl:n},{requireModel:!0})}}function At(e,t,n={}){return Re(Ze(e,t,n))}function Wn(e){process.stdout.write(`storage: ${e.storage}
-`);let t=Object.entries(e.providers||{}),n=Object.entries(e.apiKeys||{});if(!t.length&&!n.length){process.stdout.write(`no credentials configured
-`);return}for(let[r,o]of t){let s=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${r}: ${o.loggedIn?"logged in":"missing"}, expires ${s}
-`)}for(let[r,o]of n)process.stdout.write(`${r}: API key ${o.configured?"configured":"missing"}
-`)}function Gn(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]","    PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|nous|qwen|glm|custom",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth usage [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
-`)}var le={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:Gn(),async run(e){let t=[...e.argv],n=t.shift()||"status",r=U();try{if(n==="status"){let o=r.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
-`):Wn(o),0}if(n==="usage"){let{collectOAuthUsage:o}=await Promise.resolve().then(()=>(St(),vt)),s=await o(r);return process.stdout.write(`${JSON.stringify(s)}
-`),0}if(n==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=W(o),i=Xe(t,"--model")||s.model;Ze(s.id,i);let a=await yt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await r.withLock(async()=>{let c=r.get(s.id);r.set(s.id,a);try{At(s.id,i)}catch(l){throw c?r.set(s.id,c):r.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${r.storage}
-`),0}if(n==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(_t,o))throw new Error(`unsupported API-key provider: ${o}`);let s=Xe(t,"--model")||_t[o].model,i=Xe(t,"--base-url");Ze(o,s,{baseUrl:i});let a=t.includes("--stdin")?await qn():await zn();return await r.withLock(async()=>{let c=r.getApiKey(o);r.setApiKey(o,a);try{At(o,s,{baseUrl:i})}catch(l){throw c?r.setApiKey(o,c):r.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${r.storage}
-`),0}if(n==="logout"){let o=String(t.find(a=>!a.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let s=!1;try{s=r.remove(X(o))}catch{}let i=r.removeApiKey(o);if(!s&&!i)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
-`),0}throw new Error(`unknown auth action: ${n}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
-`),1}}};var Yn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var no=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var Pe=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),Vn=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Et=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),Jn=Object.freeze(Et[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function Xn(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let n=t.length===3?[...t].map(r=>r.repeat(2)).join(""):t;return{r:Number.parseInt(n.slice(0,2),16),g:Number.parseInt(n.slice(2,4),16),b:Number.parseInt(n.slice(4,6),16)}}function $t(e,t,n){let r=Xn(t);return r?`\x1B[${e};2;${r.r};${r.g};${r.b}m${String(n)}\x1B[0m`:String(n)}function Qe({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(n,r)=>$t(38,n,r),bg:(n,r)=>$t(48,n,r),bold:n=>`\x1B[1m${String(n)}\x1B[0m`,dim:n=>`\x1B[2m${String(n)}\x1B[0m`}):Object.freeze({fg:(n,r)=>String(r),bg:(n,r)=>String(r),bold:n=>String(n),dim:n=>String(n)})}var oo=Qe();function Ot(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as cr}from"node:child_process";var ge=Buffer.alloc(0);var Zn={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},Qn={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function I({name:e=null,ctrl:t=!1,meta:n=!1,shift:r=!1,sequence:o=""}){return{name:e,ctrl:t,meta:n,shift:r,sequence:o}}function Pt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function er(e){return e>=64&&e<=126}function Tt(e){let t=e.toLowerCase();return I({name:t,shift:e!==t,sequence:e})}function tr(e){return e===13?I({name:"return",sequence:"\r"}):e===10?I({name:"return",sequence:`
-`}):e===9?I({name:"tab",sequence:"	"}):e===127?I({name:"backspace",sequence:"\x7F"}):e===8?I({name:"backspace",sequence:"\b"}):e>=1&&e<=26?I({name:String.fromCharCode(e+96),ctrl:!0,sequence:String.fromCharCode(e)}):I({name:"unknown",sequence:String.fromCharCode(e)})}function nr(e){let t=/^\u001b[\[O](\d*)(?:;(\d+))?(.)$/s.exec(e);if(!t)return I({name:"unknown",sequence:e});let n=t[1]===""?null:Number(t[1]),r=t[2]===void 0?null:Number(t[2]),o=t[3],s=null,i=r;if(o==="~"?s=Qn[n]??null:(s=Zn[o]??null,i===null&&n!==null&&n>1&&(i=n)),!s)return I({name:"unknown",sequence:e});let a=i===null?0:Math.max(0,i-1);return I({name:s,shift:(a&1)!==0,meta:(a&2)!==0,ctrl:(a&4)!==0,sequence:e})}function rr(e,t,n,r){let o=()=>(n.push(I({name:"escape",sequence:"\x1B"})),1);if(t+1>=e.length)return r?o():0;let s=e[t+1];if(s===91||s===79){let l=t+2;for(;l<e.length&&!er(e[l]);)l+=1;return l>=e.length?r?o():0:(n.push(nr(e.toString("utf8",t,l+1))),l+1-t)}if(s===27)return o();let i=Pt(s);if(t+1+i>e.length)return r?o():0;let a=e.toString("utf8",t+1,t+1+i),c=a.toLowerCase();return n.push(I({name:c,meta:!0,shift:a!==c,sequence:`\x1B${a}`})),1+i}function Mt(e,t){let n=[],r=0;for(;r<e.length;){let o=e[r];if(o===27){let i=rr(e,r,n,t);if(i===0)return{keys:n,rest:Buffer.from(e.subarray(r))};r+=i;continue}if(o<32||o===127){n.push(tr(o)),r+=1;continue}let s=Pt(o);if(r+s>e.length)return t?(n.push(Tt(e.toString("utf8",r))),{keys:n,rest:ge}):{keys:n,rest:Buffer.from(e.subarray(r))};n.push(Tt(e.toString("utf8",r,r+s))),r+=s}return{keys:n,rest:ge}}function Rt(e){return Buffer.isBuffer(e)?e:e==null?ge:typeof e=="string"?Buffer.from(e,"utf8"):Buffer.from(e)}function It(){let e=ge;return{push(t){let n=e.length===0?Rt(t):Buffer.concat([e,Rt(t)]),{keys:r,rest:o}=Mt(n,!1);return e=o,r},flush(){if(e.length===0)return[];let{keys:t}=Mt(e,!0);return e=ge,t},get pending(){return e.length}}}var et=/\u001B\[[0-9;]*m/g;function Lt(e){if(new RegExp("\\p{Mark}","u").test(e))return 0;let t=e.codePointAt(0);return t===8205||t===65039?0:t>=4352&&(t<=4447||t===9001||t===9002||t>=11904&&t<=42191&&t!==12351||t>=44032&&t<=55203||t>=63744&&t<=64255||t>=65040&&t<=65049||t>=65072&&t<=65135||t>=65280&&t<=65376||t>=65504&&t<=65510||t>=127744&&t<=129791||t>=131072&&t<=262141)?2:t<32||t>=127&&t<160?0:1}function or(e){return[...Ot(e)].reduce((t,n)=>t+Lt(n),0)}function sr(e,t){if(t<=0)return"";let n=String(e).split(/(\u001B\[[0-9;]*m)/g),r="",o=0,s=!1;for(let i of n)if(i){if(et.test(i)){et.lastIndex=0,r+=i,s=i!=="\x1B[0m";continue}et.lastIndex=0;for(let a of i){let c=Lt(a);if(o+c>t)return s?`${r}\x1B[0m`:r;r+=a,o+=c}}return r}function Ie(e,t,n="left"){let r=Math.max(0,Math.floor(Number(t)||0)),o=sr(String(e),r),s=Math.max(0,r-or(o));if(n==="right")return`${" ".repeat(s)}${o}`;if(n==="center"){let i=Math.floor(s/2);return`${" ".repeat(i)}${o}${" ".repeat(s-i)}`}return`${o}${" ".repeat(s)}`}var So=Object.freeze(["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"]),_o=Object.freeze({thinking:"Thinking",writing:"Writing",executing:"Executing",waiting:"Waiting"});async function Ct(e,{headers:t={}}={}){let n=new AbortController,r=setTimeout(()=>n.abort(),6e3);try{let o=await fetch(e,{headers:t,signal:n.signal}),s=null;try{s=await o.json()}catch{s=null}return{status:o.status,body:s}}finally{clearTimeout(r)}}async function ir(e){let t=String(e||"").trim();if(!/^\d+:[\w-]{20,}$/.test(t))return{ok:!1,definitive:!0,error:"that does not look like a telegram bot token (123456:ABC\u2026)"};try{let{status:n,body:r}=await Ct(`https://api.telegram.org/bot${t}/getMe`);return n===200&&r?.ok&&r.result?.username?{ok:!0,definitive:!0,username:`@${r.result.username}`}:n===401||n===404?{ok:!1,definitive:!0,error:"telegram rejected this token (check BotFather)"}:{ok:!1,definitive:!1,error:`telegram returned ${n} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function ar(e){let t=String(e||"").trim();if(t.length<50)return{ok:!1,definitive:!0,error:"that does not look like a discord bot token"};try{let{status:n,body:r}=await Ct("https://discord.com/api/v10/users/@me",{headers:{Authorization:`Bot ${t}`}});return n===200&&r?.username?{ok:!0,definitive:!0,username:r.username}:n===401?{ok:!1,definitive:!0,error:"discord rejected this token (reset it in the developer portal)"}:{ok:!1,definitive:!1,error:`discord returned ${n} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function Le(e,t){let n=String(e||"").toLowerCase();return n==="telegram"?ir(t):n==="discord"?ar(t):{ok:!1,definitive:!1}}var ur=Object.freeze(["telegram","discord","whatsapp","slack","signal"]),Ut=Object.freeze([{id:"claude",label:"Claude",hint:"Anthropic OAuth",kind:"oauth"},{id:"codex",label:"Codex",hint:"OpenAI OAuth",kind:"oauth"},{id:"grok",label:"Grok",hint:"xAI OAuth",kind:"oauth"}]),Bt=Object.freeze([{id:"openrouter",label:"OpenRouter",hint:"API key",kind:"api-key"},{id:"openai",label:"OpenAI",hint:"API key",kind:"api-key"},{id:"anthropic",label:"Anthropic",hint:"API key",kind:"api-key"},{id:"deepseek",label:"DeepSeek",hint:"API key",kind:"api-key"},{id:"gemini",label:"Gemini",hint:"API key",kind:"api-key"},{id:"kimi",label:"Kimi",hint:"API key",kind:"api-key"},{id:"mistral",label:"Mistral",hint:"API key",kind:"api-key"},{id:"nous",label:"Nous Portal",hint:"API key",kind:"api-key"},{id:"qwen",label:"Qwen",hint:"API key",kind:"api-key"},{id:"glm",label:"GLM",hint:"API key",kind:"api-key"}]);function lr(e,t){let n=String(t||"unset");return n==="ready"||n==="connected"||n==="configured"?e.fg($.ok,n):n==="manual"?e.fg($.warn,n):e.fg($.banner_dim,n||"unset")}function Nt({profile:e="oracle",statuses:t=null,oauthStatus:n=null,runtime:r=null}={}){let o=t;if(!o)try{o=re(e).statuses||{}}catch{o={}}let s=n;if(!s)try{s=U().status()}catch{s={providers:{},apiKeys:{}}}let i=r;if(!i)try{i=ie()}catch{i={ok:!1}}let a=Ut.some(y=>{let h=W(y.id);return s.providers?.[h.id]?.loggedIn===!0}),c=Bt.some(y=>s.apiKeys?.[y.id]?.configured===!0),l=[{id:"model",label:"model / sign-in",note:"Claude \xB7 Codex \xB7 Grok \xB7 API keys",status:a||c?"ready":"unset",action:"model"}];i.ok||l.push({id:"runtime",label:"messaging runtime",note:"one-time install \u2014 powers telegram/discord bridge",status:"missing",action:"bootstrap"});let u=new Map(ee().map(y=>[y.key,y]));for(let y of ur){let h=u.get(y);if(!h)continue;let O=o[h.key]||(h.required?.length?"unset":"manual"),v=!i.ok&&O==="ready"?"token set":O;l.push({id:h.key,label:h.name,note:h.note||"",status:v,action:h.required?.length?"token":"hermes",platform:h})}return l.push({id:"gateway",label:"restart gateway",note:"apply channel config",status:"",action:"gateway"},{id:"gateway-install",label:"start on boot",note:"keep the bot alive after reboot",status:"",action:"gateway-install"},{id:"done",label:"done",note:"back to oracle",status:"",action:"done",skip:!0}),l}function Ft(e=null){let t=e;if(!t)try{t=U().status()}catch{t={providers:{},apiKeys:{}}}let n=[];for(let r of Ut){let o=W(r.id),s=t.providers?.[o.id]?.loggedIn===!0;n.push({id:r.id,label:r.label,note:r.hint,status:s?"connected":"OAuth",action:"oauth",kind:"oauth"})}for(let r of Bt){let o=t.apiKeys?.[r.id]?.configured===!0;n.push({id:r.id,label:r.label,note:r.hint,status:o?"configured":"API key",action:"api-key",kind:"api-key"})}return n.push({id:"back",label:"back",note:"setup menu",status:"",action:"back",skip:!0}),n}function Ce({width:e,palette:t,title:n,subtitle:r="",rows:o=[],index:s=0,footer:i="\u2191/\u2193 move   enter select   esc back"}={}){let a=Math.max(40,Math.floor(Number(e)||80)),c=Math.max(36,Math.min(a-4,72)),l=Math.max(0,Math.floor((a-c)/2)),u=Math.max(0,c-4),y=" ".repeat(l),h=A=>t.fg($.banner_border,A),O=A=>`${y}${A}`,v=(A="")=>O(`${h("\u2502")} ${Ie(A,u)} ${h("\u2502")}`),T="\u2500".repeat(Math.max(0,c-2)),k=[O(`${h("\u256D")}${h(T)}${h("\u256E")}`),v(t.bold(t.fg($.accent,n||"oracle setup"))),v(h("\u2500".repeat(u)))];return r&&(k.push(v(t.fg($.banner_dim,r))),k.push(v(""))),o.forEach((A,B)=>{let w=B===s,g=w?"\u203A":" ",p=String(A.label||A.id||""),d=String(A.note||""),m=A.status?lr(t,A.status):"",x=` ${g} ${p}`,S=[m,d?t.fg($.banner_dim,d):""].filter(Boolean).join("  "),C=Math.max(1,u-Dt(x)-Dt(Kt(S))-1),K=`${x}${" ".repeat(C)}${S}`;w?k.push(v(t.bg($.selection_bg,t.bold(t.fg($.banner_text,Ie(K,u)))))):k.push(v(K))}),k.push(v("")),k.push(v(t.fg($.banner_dim,i))),k.push(O(`${h("\u2570")}${h(T)}${h("\u256F")}`)),k}function dr({width:e,palette:t,platformKey:n="telegram",tokenLength:r=0,error:o=""}={}){let s=Math.max(40,Math.floor(Number(e)||80)),i=Math.max(36,Math.min(s-4,72)),a=Math.max(0,Math.floor((s-i)/2)),c=Math.max(0,i-4),l=" ".repeat(a),u=k=>t.fg($.banner_border,k),y=k=>`${l}${k}`,h=(k="")=>y(`${u("\u2502")} ${Ie(k,c)} ${u("\u2502")}`),O="\u2500".repeat(Math.max(0,i-2)),v=r>0?"\u2022".repeat(Math.min(r,40)):t.fg($.banner_dim,"paste token here (hidden)");return[y(`${u("\u256D")}${u(O)}${u("\u256E")}`),h(t.bold(t.fg($.accent,`setup \xB7 ${n}`))),h(u("\u2500".repeat(c))),h(t.fg($.banner_dim,"token stays local \xB7 never echoed \xB7 never sent to chat")),h(""),h(`${t.fg($.banner_dim,"token")}  ${v}`),h(r?t.fg($.banner_dim,`       ${r} characters`):""),h(o?t.fg($.warn,o):""),h(t.fg($.banner_dim,"type or paste   backspace   enter save   esc cancel")),y(`${u("\u2570")}${u(O)}${u("\u256F")}`)]}function fr({width:e,palette:t,title:n,subtitle:r,index:o=0,yesLabel:s="yes",noLabel:i="not now"}={}){return Ce({width:e,palette:t,title:n,subtitle:r,rows:[{id:"yes",label:s,note:"",status:""},{id:"no",label:i,note:"",status:""}],index:o,footer:"\u2191/\u2193 move   enter select   esc skip"})}function Kt(e){return String(e||"").replace(/\u001b\[[0-9;]*m/g,"")}function Dt(e){return Kt(e).length}function de(e){e.write("\x1B[2J\x1B[H")}function ye(e,t){de(e),e.write(`${t.join(`
+`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function ct(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...Ne({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function Dt(e,t,r={}){return De(ct(e,t,r))}function dn(e){process.stdout.write(`storage: ${e.storage}
+`);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
+`);return}for(let[n,o]of t){let s=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${n}: ${o.loggedIn?"logged in":"missing"}, expires ${s}
+`);for(let i of o.lanes||[])process.stdout.write(`  ${i.label}: ${i.healthy?"ready":"expired"}
+`)}for(let[n,o]of r)process.stdout.write(`${n}: API key ${o.configured?"configured":"missing"}
+`)}function pn(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]","    PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|nous|qwen|glm|custom",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth usage [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
+`)}var ge={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:pn(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=q();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
+`):dn(o),0}if(r==="usage"){let{collectOAuthUsage:o}=await Promise.resolve().then(()=>(Nt(),Ct)),s=await o(n);return process.stdout.write(`${JSON.stringify(s)}
+`),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=X(o),i=at(t,"--model")||s.model;ct(s.id,i);let a=await Mt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{Dt(s.id,i)}catch(l){throw c?n.set(s.id,c):n.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
+`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(jt,o))throw new Error(`unsupported API-key provider: ${o}`);let s=at(t,"--model")||jt[o].model,i=at(t,"--base-url");ct(o,s,{baseUrl:i});let a=t.includes("--stdin")?await ln():await fn();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{Dt(o,s,{baseUrl:i})}catch(l){throw c?n.setApiKey(o,c):n.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${n.storage}
+`),0}if(r==="logout"){let o=String(t.find(a=>!a.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let s=!1;try{s=n.remove(oe(o))}catch{}let i=n.removeApiKey(o);if(!s&&!i)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
+`),0}throw new Error(`unknown auth action: ${r}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
+`),1}}};var mn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var Io=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var Fe=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),hn=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Ft=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),gn=Object.freeze(Ft[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function yn(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function Ut(e,t,r){let n=yn(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function ut({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>Ut(38,r,n),bg:(r,n)=>Ut(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var Co=ut();function Bt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as $n}from"node:child_process";var Se=Buffer.alloc(0);var wn={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},bn={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function j({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function qt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function kn(e){return e>=64&&e<=126}function Kt(e){let t=e.toLowerCase();return j({name:t,shift:e!==t,sequence:e})}function xn(e){return e===13?j({name:"return",sequence:"\r"}):e===10?j({name:"return",sequence:`
+`}):e===9?j({name:"tab",sequence:"	"}):e===127?j({name:"backspace",sequence:"\x7F"}):e===8?j({name:"backspace",sequence:"\b"}):e>=1&&e<=26?j({name:String.fromCharCode(e+96),ctrl:!0,sequence:String.fromCharCode(e)}):j({name:"unknown",sequence:String.fromCharCode(e)})}function Sn(e){let t=/^\u001b[\[O](\d*)(?:;(\d+))?(.)$/s.exec(e);if(!t)return j({name:"unknown",sequence:e});let r=t[1]===""?null:Number(t[1]),n=t[2]===void 0?null:Number(t[2]),o=t[3],s=null,i=n;if(o==="~"?s=bn[r]??null:(s=wn[o]??null,i===null&&r!==null&&r>1&&(i=r)),!s)return j({name:"unknown",sequence:e});let a=i===null?0:Math.max(0,i-1);return j({name:s,shift:(a&1)!==0,meta:(a&2)!==0,ctrl:(a&4)!==0,sequence:e})}function vn(e,t,r,n){let o=()=>(r.push(j({name:"escape",sequence:"\x1B"})),1);if(t+1>=e.length)return n?o():0;let s=e[t+1];if(s===91||s===79){let l=t+2;for(;l<e.length&&!kn(e[l]);)l+=1;return l>=e.length?n?o():0:(r.push(Sn(e.toString("utf8",t,l+1))),l+1-t)}if(s===27)return o();let i=qt(s);if(t+1+i>e.length)return n?o():0;let a=e.toString("utf8",t+1,t+1+i),c=a.toLowerCase();return r.push(j({name:c,meta:!0,shift:a!==c,sequence:`\x1B${a}`})),1+i}function Ht(e,t){let r=[],n=0;for(;n<e.length;){let o=e[n];if(o===27){let i=vn(e,n,r,t);if(i===0)return{keys:r,rest:Buffer.from(e.subarray(n))};n+=i;continue}if(o<32||o===127){r.push(xn(o)),n+=1;continue}let s=qt(o);if(n+s>e.length)return t?(r.push(Kt(e.toString("utf8",n))),{keys:r,rest:Se}):{keys:r,rest:Buffer.from(e.subarray(n))};r.push(Kt(e.toString("utf8",n,n+s))),n+=s}return{keys:r,rest:Se}}function zt(e){return Buffer.isBuffer(e)?e:e==null?Se:typeof e=="string"?Buffer.from(e,"utf8"):Buffer.from(e)}function Wt(){let e=Se;return{push(t){let r=e.length===0?zt(t):Buffer.concat([e,zt(t)]),{keys:n,rest:o}=Ht(r,!1);return e=o,n},flush(){if(e.length===0)return[];let{keys:t}=Ht(e,!0);return e=Se,t},get pending(){return e.length}}}var lt=/\u001B\[[0-9;]*m/g;function Yt(e){if(new RegExp("\\p{Mark}","u").test(e))return 0;let t=e.codePointAt(0);return t===8205||t===65039?0:t>=4352&&(t<=4447||t===9001||t===9002||t>=11904&&t<=42191&&t!==12351||t>=44032&&t<=55203||t>=63744&&t<=64255||t>=65040&&t<=65049||t>=65072&&t<=65135||t>=65280&&t<=65376||t>=65504&&t<=65510||t>=127744&&t<=129791||t>=131072&&t<=262141)?2:t<32||t>=127&&t<160?0:1}function _n(e){return[...Bt(e)].reduce((t,r)=>t+Yt(r),0)}function An(e,t){if(t<=0)return"";let r=String(e).split(/(\u001B\[[0-9;]*m)/g),n="",o=0,s=!1;for(let i of r)if(i){if(lt.test(i)){lt.lastIndex=0,n+=i,s=i!=="\x1B[0m";continue}lt.lastIndex=0;for(let a of i){let c=Yt(a);if(o+c>t)return s?`${n}\x1B[0m`:n;n+=a,o+=c}}return n}function Ue(e,t,r="left"){let n=Math.max(0,Math.floor(Number(t)||0)),o=An(String(e),n),s=Math.max(0,n-_n(o));if(r==="right")return`${" ".repeat(s)}${o}`;if(r==="center"){let i=Math.floor(s/2);return`${" ".repeat(i)}${o}${" ".repeat(s-i)}`}return`${o}${" ".repeat(s)}`}var Qo=Object.freeze(["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"]),es=Object.freeze({thinking:"Thinking",writing:"Writing",executing:"Executing",waiting:"Waiting"});async function Gt(e,{headers:t={}}={}){let r=new AbortController,n=setTimeout(()=>r.abort(),6e3);try{let o=await fetch(e,{headers:t,signal:r.signal}),s=null;try{s=await o.json()}catch{s=null}return{status:o.status,body:s}}finally{clearTimeout(n)}}async function En(e){let t=String(e||"").trim();if(!/^\d+:[\w-]{20,}$/.test(t))return{ok:!1,definitive:!0,error:"that does not look like a telegram bot token (123456:ABC\u2026)"};try{let{status:r,body:n}=await Gt(`https://api.telegram.org/bot${t}/getMe`);return r===200&&n?.ok&&n.result?.username?{ok:!0,definitive:!0,username:`@${n.result.username}`}:r===401||r===404?{ok:!1,definitive:!0,error:"telegram rejected this token (check BotFather)"}:{ok:!1,definitive:!1,error:`telegram returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function On(e){let t=String(e||"").trim();if(t.length<50)return{ok:!1,definitive:!0,error:"that does not look like a discord bot token"};try{let{status:r,body:n}=await Gt("https://discord.com/api/v10/users/@me",{headers:{Authorization:`Bot ${t}`}});return r===200&&n?.username?{ok:!0,definitive:!0,username:n.username}:r===401?{ok:!1,definitive:!0,error:"discord rejected this token (reset it in the developer portal)"}:{ok:!1,definitive:!1,error:`discord returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function Be(e,t){let r=String(e||"").toLowerCase();return r==="telegram"?En(t):r==="discord"?On(t):{ok:!1,definitive:!1}}var Tn=Object.freeze(["telegram","discord","whatsapp","slack","signal"]),Qt=Object.freeze([{id:"claude",label:"Claude",hint:"Anthropic OAuth",kind:"oauth"},{id:"codex",label:"Codex",hint:"OpenAI OAuth",kind:"oauth"},{id:"grok",label:"Grok",hint:"xAI OAuth",kind:"oauth"}]),er=Object.freeze([{id:"openrouter",label:"OpenRouter",hint:"API key",kind:"api-key"},{id:"openai",label:"OpenAI",hint:"API key",kind:"api-key"},{id:"anthropic",label:"Anthropic",hint:"API key",kind:"api-key"},{id:"deepseek",label:"DeepSeek",hint:"API key",kind:"api-key"},{id:"gemini",label:"Gemini",hint:"API key",kind:"api-key"},{id:"kimi",label:"Kimi",hint:"API key",kind:"api-key"},{id:"mistral",label:"Mistral",hint:"API key",kind:"api-key"},{id:"nous",label:"Nous Portal",hint:"API key",kind:"api-key"},{id:"qwen",label:"Qwen",hint:"API key",kind:"api-key"},{id:"glm",label:"GLM",hint:"API key",kind:"api-key"}]);function Mn(e,t){let r=String(t||"unset");return r==="ready"||r==="connected"||r==="configured"?e.fg($.ok,r):r==="manual"?e.fg($.warn,r):e.fg($.banner_dim,r||"unset")}function Jt({profile:e="oracle",statuses:t=null,oauthStatus:r=null,runtime:n=null}={}){let o=t;if(!o)try{o=ue(e).statuses||{}}catch{o={}}let s=r;if(!s)try{s=q().status()}catch{s={providers:{},apiKeys:{}}}let i=n;if(!i)try{i=de()}catch{i={ok:!1}}let a=Qt.some(w=>{let g=X(w.id);return s.providers?.[g.id]?.loggedIn===!0}),c=er.some(w=>s.apiKeys?.[w.id]?.configured===!0),l=[{id:"model",label:"model / sign-in",note:"Claude \xB7 Codex \xB7 Grok \xB7 API keys",status:a||c?"ready":"unset",action:"model"}];i.ok||l.push({id:"runtime",label:"messaging runtime",note:"one-time install \u2014 powers telegram/discord bridge",status:"missing",action:"bootstrap"});let u=new Map(ae().map(w=>[w.key,w]));for(let w of Tn){let g=u.get(w);if(!g)continue;let E=o[g.key]||(g.required?.length?"unset":"manual"),S=!i.ok&&E==="ready"?"token set":E;l.push({id:g.key,label:g.name,note:g.note||"",status:S,action:g.required?.length?"token":"hermes",platform:g})}return l.push({id:"gateway",label:"restart gateway",note:"apply channel config",status:"",action:"gateway"},{id:"gateway-install",label:"start on boot",note:"keep the bot alive after reboot",status:"",action:"gateway-install"},{id:"done",label:"done",note:"back to oracle",status:"",action:"done",skip:!0}),l}function Vt(e=null){let t=e;if(!t)try{t=q().status()}catch{t={providers:{},apiKeys:{}}}let r=[];for(let n of Qt){let o=X(n.id),s=t.providers?.[o.id]?.loggedIn===!0;r.push({id:n.id,label:n.label,note:n.hint,status:s?"connected":"OAuth",action:"oauth",kind:"oauth"})}for(let n of er){let o=t.apiKeys?.[n.id]?.configured===!0;r.push({id:n.id,label:n.label,note:n.hint,status:o?"configured":"API key",action:"api-key",kind:"api-key"})}return r.push({id:"back",label:"back",note:"setup menu",status:"",action:"back",skip:!0}),r}function Ke({width:e,palette:t,title:r,subtitle:n="",rows:o=[],index:s=0,footer:i="\u2191/\u2193 move   enter select   esc back"}={}){let a=Math.max(40,Math.floor(Number(e)||80)),c=Math.max(36,Math.min(a-4,72)),l=Math.max(0,Math.floor((a-c)/2)),u=Math.max(0,c-4),w=" ".repeat(l),g=A=>t.fg($.banner_border,A),E=A=>`${w}${A}`,S=(A="")=>E(`${g("\u2502")} ${Ue(A,u)} ${g("\u2502")}`),T="\u2500".repeat(Math.max(0,c-2)),v=[E(`${g("\u256D")}${g(T)}${g("\u256E")}`),S(t.bold(t.fg($.accent,r||"oracle setup"))),S(g("\u2500".repeat(u)))];return n&&(v.push(S(t.fg($.banner_dim,n))),v.push(S(""))),o.forEach((A,W)=>{let B=W===s,Q=B?"\u203A":" ",H=String(A.label||A.id||""),k=String(A.note||""),y=A.status?Mn(t,A.status):"",p=` ${Q} ${H}`,f=[y,k?t.fg($.banner_dim,k):""].filter(Boolean).join("  "),m=Math.max(1,u-Xt(p)-Xt(tr(f))-1),h=`${p}${" ".repeat(m)}${f}`;B?v.push(S(t.bg($.selection_bg,t.bold(t.fg($.banner_text,Ue(h,u)))))):v.push(S(h))}),v.push(S("")),v.push(S(t.fg($.banner_dim,i))),v.push(E(`${g("\u2570")}${g(T)}${g("\u256F")}`)),v}function Rn({width:e,palette:t,platformKey:r="telegram",tokenLength:n=0,error:o=""}={}){let s=Math.max(40,Math.floor(Number(e)||80)),i=Math.max(36,Math.min(s-4,72)),a=Math.max(0,Math.floor((s-i)/2)),c=Math.max(0,i-4),l=" ".repeat(a),u=v=>t.fg($.banner_border,v),w=v=>`${l}${v}`,g=(v="")=>w(`${u("\u2502")} ${Ue(v,c)} ${u("\u2502")}`),E="\u2500".repeat(Math.max(0,i-2)),S=n>0?"\u2022".repeat(Math.min(n,40)):t.fg($.banner_dim,"paste token here (hidden)");return[w(`${u("\u256D")}${u(E)}${u("\u256E")}`),g(t.bold(t.fg($.accent,`setup \xB7 ${r}`))),g(u("\u2500".repeat(c))),g(t.fg($.banner_dim,"token stays local \xB7 never echoed \xB7 never sent to chat")),g(""),g(`${t.fg($.banner_dim,"token")}  ${S}`),g(n?t.fg($.banner_dim,`       ${n} characters`):""),g(o?t.fg($.warn,o):""),g(t.fg($.banner_dim,"type or paste   backspace   enter save   esc cancel")),w(`${u("\u2570")}${u(E)}${u("\u256F")}`)]}function Pn({width:e,palette:t,title:r,subtitle:n,index:o=0,yesLabel:s="yes",noLabel:i="not now"}={}){return Ke({width:e,palette:t,title:r,subtitle:n,rows:[{id:"yes",label:s,note:"",status:""},{id:"no",label:i,note:"",status:""}],index:o,footer:"\u2191/\u2193 move   enter select   esc skip"})}function tr(e){return String(e||"").replace(/\u001b\[[0-9;]*m/g,"")}function Xt(e){return tr(e).length}function ye(e){e.write("\x1B[2J\x1B[H")}function ve(e,t){ye(e),e.write(`${t.join(`
 `)}
-`)}function jt(e){let t=ie();if(!t?.bin)return{code:1,error:"hermes not found \u2014 install hermes or run oracle bootstrap"};let n=cr(t.bin,e,{stdio:"inherit",env:process.env});return{code:typeof n.status=="number"?n.status:1}}async function Ht({stdin:e=process.stdin,stdout:t=process.stdout,env:n=process.env,palette:r,profile:o="oracle",startAt:s="menu",runAuth:i=c=>le.run({argv:c}),restartGateway:a=!0}={}){if(e?.isTTY!==!0||t?.isTTY!==!0)return{completed:!1,actions:[],reason:"non-tty"};let c=Math.max(40,Number(t.columns||80)),l=[],u="menu",y=0,h=0,O=0,v="",T="",k="",A=null,B=Nt({profile:o}),w=Ft();String(s).startsWith("token:")?(k=String(s).slice(6),u="token"):s==="model"&&(u="model");let g=It(),p=e.isRaw===!0;typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume();let d=()=>{u==="menu"?ye(t,Ce({width:c,palette:r,title:"oracle setup",subtitle:"\u2191\u2193 enter \xB7 model + telegram/discord/whatsapp",rows:B,index:y})):u==="model"?ye(t,Ce({width:c,palette:r,title:"sign in",subtitle:"subscription OAuth or API key",rows:w,index:h})):u==="token"?ye(t,dr({width:c,palette:r,platformKey:k,tokenLength:v.length,error:T})):u==="confirm-gateway"?ye(t,fr({width:c,palette:r,title:A?.title||"restart gateway?",subtitle:A?.subtitle||"applies bot tokens to the live bridge",index:O,yesLabel:"restart gateway now",noLabel:"later \u2014 oracle setup gateway restart"})):u==="notice"&&ye(t,Ce({width:c,palette:r,title:A?.title||"setup",subtitle:A?.subtitle||"",rows:[{id:"ok",label:"continue",note:"",status:""}],index:0,footer:"enter continue   esc menu"}))};d();let m=async x=>(typeof e.setRawMode=="function"&&e.setRawMode(p),e.pause(),de(t),x);return new Promise(x=>{let S=null,C=!1,K=b=>{C||(C=!0,S&&clearTimeout(S),e.off("data",st),Promise.resolve(m(b)).then(x))},H=()=>{B=Nt({profile:o}),w=Ft()},Fe=async()=>{let b=v.trim();if(!b){T="empty token",d();return}T="checking token\u2026",d();let f={ok:!1,definitive:!1};try{f=await Le(k,b)}catch{f={ok:!1,definitive:!1}}if(!f.ok&&f.definitive){v="",T=f.error||"platform rejected this token",d();return}try{let _=Se(o,k,b);V({lastPlatform:k,profile:o,ready:!0}),l.push(`token:${k}${f.ok?":verified":""}`),v="",T="";let E=!1;try{E=ie().ok===!0}catch{E=!1}let it=f.username?` \xB7 bot ${f.username}`:"";E?(A={title:`${k} saved${it}`,subtitle:f.ok?`token verified live \xB7 ${_.path}`:`wrote credentials \xB7 ${_.path}`},O=0,u=a?"confirm-gateway":"menu"):(A={title:`${k} token saved${it}`,subtitle:"next: install the messaging runtime (menu row) so the bot can answer"},O=0,u="notice"),H(),d()}catch(_){T=_?.message||"save failed",v="",d()}},rt=async b=>{if(!b||b.action==="done"){K({completed:!0,actions:l});return}if(b.action==="model"){u="model",h=0,d();return}if(b.action==="token"){k=b.id,v="",T="",u="token",d();return}if(b.action==="bootstrap"){typeof e.setRawMode=="function"&&e.setRawMode(p),e.pause(),de(t),t.write(`installing messaging runtime (one-time, a few minutes)\u2026
+`)}function Zt(e){let t=de();if(!t?.bin)return{code:1,error:"hermes not found \u2014 install hermes or run oracle bootstrap"};let r=$n(t.bin,e,{stdio:"inherit",env:process.env});return{code:typeof r.status=="number"?r.status:1}}async function rr({stdin:e=process.stdin,stdout:t=process.stdout,env:r=process.env,palette:n,profile:o="oracle",startAt:s="menu",runAuth:i=c=>ge.run({argv:c}),restartGateway:a=!0}={}){if(e?.isTTY!==!0||t?.isTTY!==!0)return{completed:!1,actions:[],reason:"non-tty"};let c=Math.max(40,Number(t.columns||80)),l=[],u="menu",w=0,g=0,E=0,S="",T="",v="",A=null,W=Jt({profile:o}),B=Vt();String(s).startsWith("token:")?(v=String(s).slice(6),u="token"):s==="model"&&(u="model");let Q=Wt(),H=e.isRaw===!0;typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume();let k=()=>{u==="menu"?ve(t,Ke({width:c,palette:n,title:"oracle setup",subtitle:"\u2191\u2193 enter \xB7 model + telegram/discord/whatsapp",rows:W,index:w})):u==="model"?ve(t,Ke({width:c,palette:n,title:"sign in",subtitle:"subscription OAuth or API key",rows:B,index:g})):u==="token"?ve(t,Rn({width:c,palette:n,platformKey:v,tokenLength:S.length,error:T})):u==="confirm-gateway"?ve(t,Pn({width:c,palette:n,title:A?.title||"restart gateway?",subtitle:A?.subtitle||"applies bot tokens to the live bridge",index:E,yesLabel:"restart gateway now",noLabel:"later \u2014 oracle setup gateway restart"})):u==="notice"&&ve(t,Ke({width:c,palette:n,title:A?.title||"setup",subtitle:A?.subtitle||"",rows:[{id:"ok",label:"continue",note:"",status:""}],index:0,footer:"enter continue   esc menu"}))};k();let y=async p=>(typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),p);return new Promise(p=>{let f=null,m=!1,h=b=>{m||(m=!0,f&&clearTimeout(f),e.off("data",Oe),Promise.resolve(y(b)).then(p))},x=()=>{W=Jt({profile:o}),B=Vt()},C=async()=>{let b=S.trim();if(!b){T="empty token",k();return}T="checking token\u2026",k();let d={ok:!1,definitive:!1};try{d=await Be(v,b)}catch{d={ok:!1,definitive:!1}}if(!d.ok&&d.definitive){S="",T=d.error||"platform rejected this token",k();return}try{let _=Me(o,v,b);te({lastPlatform:v,profile:o,ready:!0}),l.push(`token:${v}${d.ok?":verified":""}`),S="",T="";let O=!1;try{O=de().ok===!0}catch{O=!1}let pt=d.username?` \xB7 bot ${d.username}`:"";O?(A={title:`${v} saved${pt}`,subtitle:d.ok?`token verified live \xB7 ${_.path}`:`wrote credentials \xB7 ${_.path}`},E=0,u=a?"confirm-gateway":"menu"):(A={title:`${v} token saved${pt}`,subtitle:"next: install the messaging runtime (menu row) so the bot can answer"},E=0,u="notice"),x(),k()}catch(_){T=_?.message||"save failed",S="",k()}},N=async b=>{if(!b||b.action==="done"){h({completed:!0,actions:l});return}if(b.action==="model"){u="model",g=0,k();return}if(b.action==="token"){v=b.id,S="",T="",u="token",k();return}if(b.action==="bootstrap"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(`installing messaging runtime (one-time, a few minutes)\u2026
 
-`);let f={ok:!1,reason:"unknown"};try{f=ht({})}catch(_){f={ok:!1,reason:_?.message||"install failed"}}l.push(`bootstrap:${f.ok?"ok":"fail"}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),H(),A={title:f.ok?"messaging runtime ready":"runtime install failed",subtitle:f.ok?"pick telegram / discord next":f.reason||"see oracle bootstrap"},u="notice",d();return}if(b.action==="hermes"){typeof e.setRawMode=="function"&&e.setRawMode(p),e.pause(),de(t),t.write(`opening ${b.id} setup\u2026
-`);let _=Y(b.id)?.hermes||["gateway","setup"],E=jt(["-p",o,..._]);l.push(`hermes:${b.id}:${E.code}`),V({lastPlatform:b.id,profile:o}),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),H(),A={title:`${b.id} setup finished`,subtitle:E.code===0?"restart gateway to apply":E.error||`exit ${E.code}`},O=0,u=a?"confirm-gateway":"menu",d();return}if(b.action==="gateway"||b.action==="gateway-install"){let f=b.action==="gateway-install"?"install":"restart";typeof e.setRawMode=="function"&&e.setRawMode(p),e.pause(),de(t),t.write(f==="install"?`installing boot service\u2026
+`);let d={ok:!1,reason:"unknown"};try{d=xt({})}catch(_){d={ok:!1,reason:_?.message||"install failed"}}l.push(`bootstrap:${d.ok?"ok":"fail"}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),A={title:d.ok?"messaging runtime ready":"runtime install failed",subtitle:d.ok?"pick telegram / discord next":d.reason||"see oracle bootstrap"},u="notice",k();return}if(b.action==="hermes"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(`opening ${b.id} setup\u2026
+`);let _=ee(b.id)?.hermes||["gateway","setup"],O=Zt(["-p",o,..._]);l.push(`hermes:${b.id}:${O.code}`),te({lastPlatform:b.id,profile:o}),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),A={title:`${b.id} setup finished`,subtitle:O.code===0?"restart gateway to apply":O.error||`exit ${O.code}`},E=0,u=a?"confirm-gateway":"menu",k();return}if(b.action==="gateway"||b.action==="gateway-install"){let d=b.action==="gateway-install"?"install":"restart";typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(d==="install"?`installing boot service\u2026
 `:`restarting gateway\u2026
-`);let _=jt(["-p",o,"gateway",f]);l.push(`gateway:${f}:${_.code}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),A={title:_.code===0?f==="install"?"boot service installed":"gateway restarted":`gateway ${f} failed`,subtitle:_.code===0?f==="install"?"bot survives reboots now":"channels should be live":_.error||`exit ${_.code}`},u="notice",d()}},Gt=async b=>{if(!b||b.action==="back"){u="menu",d();return}typeof e.setRawMode=="function"&&e.setRawMode(p),e.pause(),de(t);let f=b.kind==="oauth"?["login",b.id]:["api-key",b.id];t.write(`connecting ${b.label}\u2026
-`);let _=1;try{_=await i(f)}catch(E){t.write(`${E?.message||E}
-`),_=1}l.push(`model:${b.id}:${_}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),H(),u="menu",d()},ot=b=>{for(let f of b){if(f.ctrl&&f.name==="c"){K({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(f.name==="escape"){v="",T="",u="menu",d();continue}if(f.name==="return"){Fe();continue}if(f.name==="backspace"||f.sequence==="\x7F"||f.sequence==="\b"){v=v.slice(0,-1),T="",d();continue}let E=f.sequence||"";if(E&&!f.ctrl&&!f.meta&&E!=="\x1B"){if(E.startsWith("\x1B"))continue;v+=E,T="",d()}continue}if(u==="confirm-gateway"){if(f.name==="up"||f.name==="down"){O=O===0?1:0,d();continue}if(f.name==="escape"){u="menu",d();continue}f.name==="return"&&(O===0?rt({action:"gateway",id:"gateway"}):(u="menu",d()));continue}if(u==="notice"){(f.name==="return"||f.name==="escape")&&(u="menu",d());continue}if(u==="model"){let E=w.length;if(f.name==="up"){h=E?(h-1+E)%E:0,d();continue}if(f.name==="down"){h=E?(h+1)%E:0,d();continue}if(f.name==="escape"){u="menu",d();continue}f.name==="return"&&Gt(w[h]);continue}let _=B.length;if(f.name==="up"){y=_?(y-1+_)%_:0,d();continue}if(f.name==="down"){y=_?(y+1)%_:0,d();continue}if(f.name==="escape"){K({completed:!0,actions:l,reason:"esc"});continue}f.name==="return"&&rt(B[y])}},st=b=>{ot(g.push(b)),S&&(clearTimeout(S),S=null),g.pending>0&&(S=setTimeout(()=>{S=null,ot(g.flush())},30),typeof S.unref=="function"&&S.unref())};e.on("data",st)})}var we=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),be=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),Ne=Object.freeze([...we.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...be.map((e,t)=>({n:we.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:we.length+be.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:we.length+be.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:we.length+be.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function hr(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let n=Ne.find(r=>String(r.n)===t||r.id===t);return n||{unknown:!0,choice:t}}function Wt(e="sign in",t=0){let n=Pe[t]||Pe[0];return["",`${n[0]}      oracle`,`${n[1]}     ${e}`,n[2],n[3],n[4],""].join(`
-`)}async function mr(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=n=>new Promise(r=>setTimeout(r,n));for(let n=0;n<Pe.length;n+=1)n>0&&e.write("\x1B[7A"),e.write(`${Wt("sign in",n)}
-`),await t(90)}async function Zo({stdin:e=process.stdin,stdout:t=process.stdout,readLine:n,runAuth:r=o=>le.run({argv:o})}={}){if(await mr(t),t.write(`${ke()}
+`);let _=Zt(["-p",o,"gateway",d]);l.push(`gateway:${d}:${_.code}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),A={title:_.code===0?d==="install"?"boot service installed":"gateway restarted":`gateway ${d} failed`,subtitle:_.code===0?d==="install"?"bot survives reboots now":"channels should be live":_.error||`exit ${_.code}`},u="notice",k()}},ze=async b=>{if(!b||b.action==="back"){u="menu",k();return}typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t);let d=b.kind==="oauth"?["login",b.id]:["api-key",b.id];t.write(`connecting ${b.label}\u2026
+`);let _=1;try{_=await i(d)}catch(O){t.write(`${O?.message||O}
+`),_=1}l.push(`model:${b.id}:${_}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),u="menu",k()},Y=b=>{for(let d of b){if(d.ctrl&&d.name==="c"){h({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(d.name==="escape"){S="",T="",u="menu",k();continue}if(d.name==="return"){C();continue}if(d.name==="backspace"||d.sequence==="\x7F"||d.sequence==="\b"){S=S.slice(0,-1),T="",k();continue}let O=d.sequence||"";if(O&&!d.ctrl&&!d.meta&&O!=="\x1B"){if(O.startsWith("\x1B"))continue;S+=O,T="",k()}continue}if(u==="confirm-gateway"){if(d.name==="up"||d.name==="down"){E=E===0?1:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&(E===0?N({action:"gateway",id:"gateway"}):(u="menu",k()));continue}if(u==="notice"){(d.name==="return"||d.name==="escape")&&(u="menu",k());continue}if(u==="model"){let O=B.length;if(d.name==="up"){g=O?(g-1+O)%O:0,k();continue}if(d.name==="down"){g=O?(g+1)%O:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&ze(B[g]);continue}let _=W.length;if(d.name==="up"){w=_?(w-1+_)%_:0,k();continue}if(d.name==="down"){w=_?(w+1)%_:0,k();continue}if(d.name==="escape"){h({completed:!0,actions:l,reason:"esc"});continue}d.name==="return"&&N(W[w])}},Oe=b=>{Y(Q.push(b)),f&&(clearTimeout(f),f=null),Q.pending>0&&(f=setTimeout(()=>{f=null,Y(Q.flush())},30),typeof f.unref=="function"&&f.unref())};e.on("data",Oe)})}var _e=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),Ae=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),He=Object.freeze([..._e.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...Ae.map((e,t)=>({n:_e.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:_e.length+Ae.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:_e.length+Ae.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:_e.length+Ae.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function Ln(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=He.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function sr(e="sign in",t=0){let r=Fe[t]||Fe[0];return["",`${r[0]}      oracle`,`${r[1]}     ${e}`,r[2],r[3],r[4],""].join(`
+`)}async function Cn(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<Fe.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${sr("sign in",r)}
+`),await t(90)}async function $s({stdin:e=process.stdin,stdout:t=process.stdout,readLine:r,runAuth:n=o=>ge.run({argv:o})}={}){if(await Cn(t),t.write(`${Ee()}
 `),t.write(`number or name  \xB7  enter skips
-`),e.isTTY!==!0||t.isTTY!==!0)return{skipped:!0,reason:"non-tty"};t.write("> ");let o=n?await n():await new Promise(c=>{let l="",u=y=>{l+=String(y),(l.includes(`
-`)||l.includes("\r"))&&(e.off("data",u),c(l.trim()))};e.on("data",u)}),s=hr(o);if(s.skip)return{skipped:!0,reason:"skipped"};if(s.unknown)return t.write(`unknown choice '${s.choice}'
-`),{skipped:!0,reason:"unknown"};let i=s.kind==="oauth"?["login",s.id]:["api-key",s.id],a=await r(i);return{skipped:!1,choice:s.id,code:a}}function ke(e=U().status()){let t=[Wt("sign in"),"sign in with a subscription",""];for(let n of Ne.filter(r=>r.kind==="oauth")){let r=W(n.id),o=e.providers?.[r.id]?.loggedIn===!0;t.push(`  ${String(n.n).padStart(2)}  ${n.label.padEnd(12)} ${o?"connected":"OAuth"}`)}t.push("","or use an API key","");for(let n of Ne.filter(r=>r.kind==="api-key")){let r=n.id==="custom"?!1:e.apiKeys?.[n.id]?.configured===!0;t.push(`  ${String(n.n).padStart(2)}  ${n.label.padEnd(12)} ${r?"configured":"not configured"}`)}t.push("","or a local loopback model","");for(let n of Ne.filter(r=>r.kind==="local"))t.push(`  ${String(n.n).padStart(2)}  ${n.label.padEnd(12)} loopback`);return t.push("","Your key stays on this machine. Nothing is uploaded by Oracle.",""),t.join(`
-`)}function tt(){return["oracle setup, configure standalone OAuth, messaging, and the local agent surface","","  oracle setup                      menu + platform status","  oracle setup status               same, machine-friendly with --json","  oracle setup model                show Claude, Codex, Grok, OpenRouter, Qwen, GLM, Nous Portal, ...","  oracle setup model claude         connect Anthropic OAuth + select standalone","  oracle setup model codex          connect OpenAI OAuth + select standalone","  oracle setup model grok           connect xAI OAuth + select standalone","  oracle setup model deepseek       securely add a provider API key","  oracle setup model kimi           securely add a Kimi API key","  oracle setup model qwen           securely add a Qwen / DashScope API key","  oracle setup model glm            securely add a GLM / Zhipu API key","  oracle setup model local          select llama.cpp on 127.0.0.1:8080 (no key)","  oracle setup model ollama         select Ollama on 127.0.0.1:11434 (no key)","  oracle setup model openrouter     securely add an OpenRouter API key","  oracle setup model nous           securely add a Nous Portal API key","  oracle setup messaging            open hermes gateway setup wizard","  oracle setup telegram             set TELEGRAM_BOT_TOKEN for profile","  oracle setup discord              set DISCORD_BOT_TOKEN for profile","  oracle setup slack                set slack tokens","  oracle setup <platform>           any supported hermes platform","  oracle setup gateway [status|restart|start|stop]","  oracle setup profile [name]       default: oracle","","chat:","  /setup                      arrow-key setup wizard (model + channels)","  /setup telegram             jump to telegram token entry","  /setup status               ready/unset (no secrets)","","model credentials stay in the OS keychain or private ~/.config/oracle storage.","messaging tokens stay local in ~/.hermes/profiles/<profile>/.env","oracle never prints secrets.","TTY default: oracle setup opens an \u2191\u2193 enter menu (ORACLE_SETUP_PLAIN=1 for text)."].join(`
-`)}function gr(e){let t=e.indexOf("--profile");if(t>=0&&e[t+1])return e[t+1];let n=e.indexOf("-p");return n>=0&&e[n+1]?e[n+1]:process.env.ORACLE_PROFILE||"oracle"}function yr(e){let t=[];for(let n=0;n<e.length;n++){if(e[n]==="--profile"||e[n]==="-p"){n+=1;continue}t.push(e[n])}return t}function nt(e,{inherit:t=!0,env:n=process.env}={}){let r=ie();if(!r.ok)return process.stderr.write(`oracle setup: Hermes not detected (opt-in only).
+`),e.isTTY!==!0||t.isTTY!==!0)return{skipped:!0,reason:"non-tty"};t.write("> ");let o=r?await r():await new Promise(c=>{let l="",u=w=>{l+=String(w),(l.includes(`
+`)||l.includes("\r"))&&(e.off("data",u),c(l.trim()))};e.on("data",u)}),s=Ln(o);if(s.skip)return{skipped:!0,reason:"skipped"};if(s.unknown)return t.write(`unknown choice '${s.choice}'
+`),{skipped:!0,reason:"unknown"};let i=s.kind==="oauth"?["login",s.id]:["api-key",s.id],a=await n(i);return{skipped:!1,choice:s.id,code:a}}function Ee(e=q().status()){let t=[sr("sign in"),"sign in with a subscription",""];for(let r of He.filter(n=>n.kind==="oauth")){let n=X(r.id),o=e.providers?.[n.id]?.loggedIn===!0;t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} ${o?"connected":"OAuth"}`)}t.push("","or use an API key","");for(let r of He.filter(n=>n.kind==="api-key")){let n=r.id==="custom"?!1:e.apiKeys?.[r.id]?.configured===!0;t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} ${n?"configured":"not configured"}`)}t.push("","or a local loopback model","");for(let r of He.filter(n=>n.kind==="local"))t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} loopback`);return t.push("","Your key stays on this machine. Nothing is uploaded by Oracle.",""),t.join(`
+`)}function ft(){return["oracle setup, configure standalone OAuth, messaging, and the local agent surface","","  oracle setup                      menu + platform status","  oracle setup status               same, machine-friendly with --json","  oracle setup model                show Claude, Codex, Grok, OpenRouter, Qwen, GLM, Nous Portal, ...","  oracle setup model claude         connect Anthropic OAuth + select standalone","  oracle setup model codex          connect OpenAI OAuth + select standalone","  oracle setup model grok           connect xAI OAuth + select standalone","  oracle setup model deepseek       securely add a provider API key","  oracle setup model kimi           securely add a Kimi API key","  oracle setup model qwen           securely add a Qwen / DashScope API key","  oracle setup model glm            securely add a GLM / Zhipu API key","  oracle setup model local          select llama.cpp on 127.0.0.1:8080 (no key)","  oracle setup model ollama         select Ollama on 127.0.0.1:11434 (no key)","  oracle setup model openrouter     securely add an OpenRouter API key","  oracle setup model nous           securely add a Nous Portal API key","  oracle setup messaging            open hermes gateway setup wizard","  oracle setup telegram             set TELEGRAM_BOT_TOKEN for profile","  oracle setup discord              set DISCORD_BOT_TOKEN for profile","  oracle setup slack                set slack tokens","  oracle setup <platform>           any supported hermes platform","  oracle setup gateway [status|restart|start|stop]","  oracle setup profile [name]       default: oracle","","chat:","  /setup                      arrow-key setup wizard (model + channels)","  /setup telegram             jump to telegram token entry","  /setup status               ready/unset (no secrets)","","model credentials stay in the OS keychain or private ~/.config/oracle storage.","messaging tokens stay local in ~/.hermes/profiles/<profile>/.env","oracle never prints secrets.","TTY default: oracle setup opens an \u2191\u2193 enter menu (ORACLE_SETUP_PLAIN=1 for text)."].join(`
+`)}function Nn(e){let t=e.indexOf("--profile");if(t>=0&&e[t+1])return e[t+1];let r=e.indexOf("-p");return r>=0&&e[r+1]?e[r+1]:process.env.ORACLE_PROFILE||"oracle"}function jn(e){let t=[];for(let r=0;r<e.length;r++){if(e[r]==="--profile"||e[r]==="-p"){r+=1;continue}t.push(e[r])}return t}function dt(e,{inherit:t=!0,env:r=process.env}={}){let n=de();if(!n.ok)return process.stderr.write(`oracle setup: Hermes not detected (opt-in only).
 Native Oracle does not need Hermes.
 To use Hermes messaging/gateway: install Hermes, or run \`oracle bootstrap\`, then retry.
 Detect: oracle harness detect
-`),1;let o=pr(r.bin,e,{stdio:t?"inherit":"pipe",encoding:"utf8",env:n});return o.error?(process.stderr.write(`oracle setup: failed to run hermes: ${o.error.message}
-`),1):(t||(o.stdout&&process.stdout.write(o.stdout),o.stderr&&process.stderr.write(o.stderr)),typeof o.status=="number"?o.status:1)}async function zt(e){if(!G.isTTY||typeof G.setRawMode!="function"){let t=new Error("interactive token entry requires a tty");throw t.code="NO_TTY",t}return qt.write(`${e}: `),new Promise((t,n)=>{let r="",o=()=>{G.off("data",s),G.setRawMode(!1),G.pause(),qt.write(`
+`),1;let o=In(n.bin,e,{stdio:t?"inherit":"pipe",encoding:"utf8",env:r});return o.error?(process.stderr.write(`oracle setup: failed to run hermes: ${o.error.message}
+`),1):(t||(o.stdout&&process.stdout.write(o.stdout),o.stderr&&process.stderr.write(o.stderr)),typeof o.status=="number"?o.status:1)}async function or(e){if(!Z.isTTY||typeof Z.setRawMode!="function"){let t=new Error("interactive token entry requires a tty");throw t.code="NO_TTY",t}return nr.write(`${e}: `),new Promise((t,r)=>{let n="",o=()=>{Z.off("data",s),Z.setRawMode(!1),Z.pause(),nr.write(`
 `)},s=i=>{for(let a of String(i)){if(a==="\r"||a===`
-`){o(),t(r.trim());return}if(a===""){o(),n(new Error("cancelled"));return}a==="\x7F"||a==="\b"?r=r.slice(0,-1):r+=a}};G.setRawMode(!0),G.resume(),G.on("data",s)})}async function wr(e,t,n=[]){let r=Y(t);if(!r)return process.stderr.write(`oracle setup: unknown platform '${t}'
-`),process.stderr.write(`known: ${ee().map(c=>c.key).join(", ")}
-`),1;if(!r.required.length)return process.stdout.write(`opening hermes setup for ${r.key} (interactive)
-`),V({lastPlatform:r.key,profile:e}),nt(["-p",e,...r.hermes||["gateway","setup"]]);let o={},s=[];for(let c=0;c<n.length;c++){let l=n[c];if(l==="--token"&&n[c+1]){o.token=n[++c];continue}if(l==="--allowed-users"&&n[c+1]){o.allowedUsers=n[++c];continue}if(l==="--app-token"&&n[c+1]){o.appToken=n[++c];continue}if(l.startsWith("-"))return process.stderr.write(`oracle setup: unknown flag ${l}
-`),1;s.push(l)}let i=o.token||s[0]||"";if(!i&&!process.stdin.isTTY&&(i=await readStdinSecret()),!i)try{i=await zt(`${r.key} bot token`)}catch(c){if(c?.code==="NO_TTY")return process.stderr.write(`oracle setup ${r.key}: pipe the token on stdin (echo "$TOKEN" | oracle setup ${r.key}) or pass --token <value>
+`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};Z.setRawMode(!0),Z.resume(),Z.on("data",s)})}async function Dn(e,t,r=[]){let n=ee(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
+`),process.stderr.write(`known: ${ae().map(c=>c.key).join(", ")}
+`),1;if(!n.required.length)return process.stdout.write(`opening hermes setup for ${n.key} (interactive)
+`),te({lastPlatform:n.key,profile:e}),dt(["-p",e,...n.hermes||["gateway","setup"]]);let o={},s=[];for(let c=0;c<r.length;c++){let l=r[c];if(l==="--token"&&r[c+1]){o.token=r[++c];continue}if(l==="--allowed-users"&&r[c+1]){o.allowedUsers=r[++c];continue}if(l==="--app-token"&&r[c+1]){o.appToken=r[++c];continue}if(l.startsWith("-"))return process.stderr.write(`oracle setup: unknown flag ${l}
+`),1;s.push(l)}let i=o.token||s[0]||"";if(!i&&!process.stdin.isTTY&&(i=await readStdinSecret()),!i)try{i=await or(`${n.key} bot token`)}catch(c){if(c?.code==="NO_TTY")return process.stderr.write(`oracle setup ${n.key}: pipe the token on stdin (echo "$TOKEN" | oracle setup ${n.key}) or pass --token <value>
 `),1;throw c}if(!i)return process.stderr.write(`aborted: empty token
-`),1;let a={};if(o.allowedUsers&&(r.key==="telegram"&&(a.TELEGRAM_ALLOWED_USERS=o.allowedUsers),r.key==="discord"&&(a.DISCORD_ALLOWED_USERS=o.allowedUsers),r.key==="slack"&&(a.SLACK_ALLOWED_USERS=o.allowedUsers)),o.appToken&&r.key==="slack"&&(a.SLACK_APP_TOKEN=o.appToken),r.key==="slack"&&!a.SLACK_APP_TOKEN){let c=o.appToken||s[1]||"";if(!c&&process.stdin.isTTY&&(c=await zt("slack app token (xapp-...)")),!c)return process.stderr.write(`slack needs bot token + app token
-`),1;a.SLACK_APP_TOKEN=c}try{let c=await Le(r.key,i).catch(()=>({ok:!1,definitive:!1}));if(!c.ok&&c.definitive)return process.stderr.write(`oracle setup ${r.key}: ${c.error||"platform rejected this token"}
-`),1;let l=Se(e,r.key,i,a);V({lastPlatform:r.key,profile:e,ready:!0});let u=c.ok&&c.username?`bot: ${c.username} (token verified live)
-`:"",y=!c.ok&&c.error?`note: ${c.error}
-`:"";return process.stdout.write(`saved ${r.key} credentials for profile '${e}'
-`+u+y+`path: ${l.path}
+`),1;let a={};if(o.allowedUsers&&(n.key==="telegram"&&(a.TELEGRAM_ALLOWED_USERS=o.allowedUsers),n.key==="discord"&&(a.DISCORD_ALLOWED_USERS=o.allowedUsers),n.key==="slack"&&(a.SLACK_ALLOWED_USERS=o.allowedUsers)),o.appToken&&n.key==="slack"&&(a.SLACK_APP_TOKEN=o.appToken),n.key==="slack"&&!a.SLACK_APP_TOKEN){let c=o.appToken||s[1]||"";if(!c&&process.stdin.isTTY&&(c=await or("slack app token (xapp-...)")),!c)return process.stderr.write(`slack needs bot token + app token
+`),1;a.SLACK_APP_TOKEN=c}try{let c=await Be(n.key,i).catch(()=>({ok:!1,definitive:!1}));if(!c.ok&&c.definitive)return process.stderr.write(`oracle setup ${n.key}: ${c.error||"platform rejected this token"}
+`),1;let l=Me(e,n.key,i,a);te({lastPlatform:n.key,profile:e,ready:!0});let u=c.ok&&c.username?`bot: ${c.username} (token verified live)
+`:"",w=!c.ok&&c.error?`note: ${c.error}
+`:"";return process.stdout.write(`saved ${n.key} credentials for profile '${e}'
+`+u+w+`path: ${l.path}
 next: oracle setup gateway restart
 `),0}catch(c){return process.stderr.write(`oracle setup: ${c.message}
-`),1}}var Qo={name:"setup",summary:"configure standalone OAuth and messaging platforms",group:"read",usage:tt(),async run(e){let t=[...e.argv],n=t.includes("--json"),r=gr(t),o=yr(t).filter(a=>a!=="--json"),s=(o[0]||"menu").toLowerCase(),i=o.slice(1);if(["-h","--help","help"].includes(s))return process.stdout.write(tt()+`
-`),0;if(["menu","list","ls"].includes(s)){if(n)return process.stdout.write(JSON.stringify({...re(r),modelAuth:U().status()},null,2)+`
-`),0;if(process.stdin.isTTY===!0&&process.stdout.isTTY===!0&&!process.env.ORACLE_SETUP_PLAIN){let a=await Ht({profile:r,palette:Qe({color:process.stdout.isTTY!==!1})});return a?.completed===!1&&a?.reason==="non-tty"?1:0}return process.stdout.write(ke()),process.stdout.write(ve(r)),0}if(["status","show"].includes(s)){let a=re(r);return n?process.stdout.write(JSON.stringify({...a,modelAuth:U().status()},null,2)+`
-`):(process.stdout.write(ke()),process.stdout.write(ve(r)),process.stdout.write(`hermes root: ${pe()}
-`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(ke()),0;if(a==="local"||a==="ollama"){let l=Re({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
+`),1}}var Ts={name:"setup",summary:"configure standalone OAuth and messaging platforms",group:"read",usage:ft(),async run(e){let t=[...e.argv],r=t.includes("--json"),n=Nn(t),o=jn(t).filter(a=>a!=="--json"),s=(o[0]||"menu").toLowerCase(),i=o.slice(1);if(["-h","--help","help"].includes(s))return process.stdout.write(ft()+`
+`),0;if(["menu","list","ls"].includes(s)){if(r)return process.stdout.write(JSON.stringify({...ue(n),modelAuth:q().status()},null,2)+`
+`),0;if(process.stdin.isTTY===!0&&process.stdout.isTTY===!0&&!process.env.ORACLE_SETUP_PLAIN){let a=await rr({profile:n,palette:ut({color:process.stdout.isTTY!==!1})});return a?.completed===!1&&a?.reason==="non-tty"?1:0}return process.stdout.write(Ee()),process.stdout.write(Te(n)),0}if(["status","show"].includes(s)){let a=ue(n);return r?process.stdout.write(JSON.stringify({...a,modelAuth:q().status()},null,2)+`
+`):(process.stdout.write(Ee()),process.stdout.write(Te(n)),process.stdout.write(`hermes root: ${be()}
+`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(Ee()),0;if(a==="local"||a==="ollama"){let l=De({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
 loopback, no API key
-`),0}if(be.some(c=>c.id===a)||a==="custom")return le.run({...e,argv:["api-key",a,...i.slice(1)]});try{return W(a),le.run({...e,argv:["login",a,...i.slice(1)]})}catch(c){return process.stderr.write(`oracle setup model: ${c.message}
-`),process.stderr.write(ke()),1}}if(["messaging","gateway-setup","platforms"].includes(s))return V({lastAction:"messaging",profile:r}),process.stdout.write(`opening hermes gateway setup wizard...
-`),nt(["-p",r,"gateway","setup"]);if(s==="gateway"){let a=(i[0]||"status").toLowerCase();return["status","start","stop","restart","run","install"].includes(a)?nt(["-p",r,"gateway",a]):(process.stderr.write(`usage: oracle setup gateway [status|start|stop|restart|run|install]
-`),1)}if(s==="profile"){let a=i[0]||r;return process.stdout.write(`profile: ${a}
-hermes: ${pe()}/profiles/${a}
-`),process.stdout.write(ve(a)),0}return Y(s)?wr(r,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
-${tt()}
-`),1)}};export{Ne as SETUP_CHOICES,Qo as default,ke as renderModelSetup,hr as resolveSetupChoice,Zo as runFirstRunModelSetup};
+`),0}if(Ae.some(c=>c.id===a)||a==="custom")return ge.run({...e,argv:["api-key",a,...i.slice(1)]});try{return X(a),ge.run({...e,argv:["login",a,...i.slice(1)]})}catch(c){return process.stderr.write(`oracle setup model: ${c.message}
+`),process.stderr.write(Ee()),1}}if(["messaging","gateway-setup","platforms"].includes(s))return te({lastAction:"messaging",profile:n}),process.stdout.write(`opening hermes gateway setup wizard...
+`),dt(["-p",n,"gateway","setup"]);if(s==="gateway"){let a=(i[0]||"status").toLowerCase();return["status","start","stop","restart","run","install"].includes(a)?dt(["-p",n,"gateway",a]):(process.stderr.write(`usage: oracle setup gateway [status|start|stop|restart|run|install]
+`),1)}if(s==="profile"){let a=i[0]||n;return process.stdout.write(`profile: ${a}
+hermes: ${be()}/profiles/${a}
+`),process.stdout.write(Te(a)),0}return ee(s)?Dn(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
+${ft()}
+`),1)}};export{He as SETUP_CHOICES,Ts as default,Ee as renderModelSetup,Ln as resolveSetupChoice,$s as runFirstRunModelSetup};