@oracle-agent/oracle 0.35.40 → 0.35.42

package/dist/cli/commands/setup.mjs

@@ -2,14 +2,14 @@ var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&
 `)+`
 `}import z from"node:fs";import hr from"node:os";import We from"node:path";import we from"node:fs";import ur from"node:os";import G from"node:path";import{fileURLToPath as lr}from"node:url";var fr=G.dirname(lr(import.meta.url)),qn=G.resolve(fr,"../..");function J(){return process.env.ORACLE_FAKE_HOME||ur.homedir()}function dr(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function R(){return dr()?process.env.ORACLE_CONFIG_DIR||G.join(J(),".config","oracle"):G.join(J(),".config","oracle")}function pr(){return G.join(R(),"desk.json")}function mr(){return G.join(R(),"env")}function ce({force:e=!1}={}){if(ce._done&&!e)return ce._result||null;ce._done=!0;let t={},r=(o,s)=>{if(s==null)return;let i=String(s).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=mr();if(we.existsSync(o))for(let s of we.readFileSync(o,"utf8").split(/\r?\n/)){let i=s.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let a=i[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),r(i[1],a)}}catch{}try{let o=pr();if(we.existsSync(o)){let s=JSON.parse(we.readFileSync(o,"utf8"));s&&typeof s=="object"&&(r("ORACLE_DESK_URL",s.deskUrl||s.dataUrl||s.url),r("ORACLE_DATA_URL",s.dataUrl||s.deskUrl||s.url),r("ORACLE_API_URL",s.apiUrl||s.dataUrl||s.deskUrl),r("ORACLE_PUBLIC_URL",s.publicUrl||s.deskUrl||s.dataUrl),r("ORACLE_EXEC_URL",s.execUrl),r("MAD_DESK_URL",s.deskUrl||s.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),ce._result=Object.keys(t).length?t:null,ce._result}try{ce()}catch{}function be(){return process.env.HERMES_HOME?G.resolve(process.env.HERMES_HOME):G.join(J(),".hermes")}function U(e){return we.mkdirSync(e,{recursive:!0}),e}var gr=/(TOKEN|SECRET|PASSWORD|KEY|AUTH|PRIVATE|MNEMONIC|SEED)/i;function $e(e="oracle"){return We.join(be(),"profiles",e,".env")}function yr(e){let t={};for(let r of String(e||"").split(/\r?\n/)){let n=r.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),t[s]=i}return t}function yt(e="oracle"){let t=$e(e);return z.existsSync(t)?yr(z.readFileSync(t,"utf8")):{}}function gt(e,t,r){if(!t||gr.test(t)===!1&&/[^A-Z0-9_]/.test(t),!/^[A-Z][A-Z0-9_]*$/.test(t)){let l=new Error(`invalid env key '${t}'`);throw l.code="BAD_KEY",l}if(r==null||String(r).trim()===""){let l=new Error(`empty value for ${t}`);throw l.code="EMPTY",l}let n=$e(e);U(We.dirname(n));let o=z.existsSync(n)?z.readFileSync(n,"utf8"):"",s=o?o.split(/\r?\n/):[],i=[],a=!1,c=`${t}=${String(r)}`;for(let l of s)l.startsWith(`${t}=`)?(i.push(c),a=!0):(l.length||i.length)&&i.push(l);for(a||(i.length&&i[i.length-1]!==""&&i.push(""),i.push(c));i.length&&i[i.length-1]==="";)i.pop();i.push(""),z.writeFileSync(n,i.join(`
 `),{mode:384});try{z.chmodSync(n,384)}catch{}return{path:n,key:t,set:!0}}function ue(e="oracle"){let t=yt(e),r={};for(let n of ae()){if(!n.required.length){r[n.key]="manual";continue}let o=n.required.filter(s=>!String(t[s]||"").trim());r[n.key]=o.length?"unset":"ready"}return{profile:e,statuses:r,envPath:$e(e)}}function Te(e="oracle"){let{statuses:t}=ue(e);return ht({profile:e,statuses:t})}function Me(e,t,r,n={}){let o=ee(t);if(!o){let u=new Error(`unknown platform '${t}'`);throw u.code="UNKNOWN_PLATFORM",u}if(!o.required.length){let u=new Error(`${o.key} uses hermes interactive setup (oracle setup messaging)`);throw u.code="NEEDS_INTERACTIVE",u}let i=o.required.filter(u=>/(TOKEN|PASSWORD|SECRET)$/i.test(u))[0]||(o.required.length===1?o.required[0]:null);if(!i){let u=new Error(`${o.key} has no single token field; provide each of [${o.required.join(", ")}] explicitly`);throw u.code="NEEDS_EXPLICIT_KEYS",u}let a=new Set([i,...Object.keys(n||{}).filter(u=>n[u]!=null&&String(n[u]).trim())]),c=yt(e),l=o.required.filter(u=>!a.has(u)&&!String(c[u]||"").trim());if(l.length){let u=new Error(`${o.key} also requires [${l.join(", ")}]; pass them explicitly (setup would otherwise be marked ready while unusable)`);throw u.code="MISSING_REQUIRED",u}gt(e,i,r);for(let[u,w]of Object.entries(n||{}))w!=null&&String(w).trim()&&gt(e,u,w);return{platform:o.key,set:o.required,profile:e,path:$e(e)}}function wr(){return We.join(R(),"setup-state.json")}function te(e={}){U(R());let t=wr(),r={};if(z.existsSync(t))try{r=JSON.parse(z.readFileSync(t,"utf8"))}catch{r={}}let n={...r,...e,updatedAt:new Date().toISOString(),host:hr.hostname()};return z.writeFileSync(t,JSON.stringify(n,null,2)+`
-`,{mode:384}),n}import I from"node:fs";import P from"node:path";import{createHash as br}from"node:crypto";import{spawnSync as fe}from"node:child_process";var kr="0.19.0",wt=`hermes-agent==${kr}`,Ye=[3,11],Ge=[3,14],ke="3.13",Pe="0.12.1",Ie=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function xr(e,{windows:t=process.platform==="win32"}={}){let r=Buffer.isBuffer(e)?e:Buffer.from(e),n=t?Ie.windows:Ie.posix,o=br("sha256").update(r).digest("hex"),s=r.toString("utf8");return o===n.sha256&&s.length>=1e3&&s.includes(Pe)}function re(){return P.join(R(),"runtime")}function kt(){return P.join(re(),"venv")}function Ve(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return P.join(kt(),t,r)}function Re(){return Ve("hermes")}function Sr(){let e=Ve("python3");return I.existsSync(e)?e:Ve("python")}function xe(){return P.join(re(),"uv",process.platform==="win32"?"uv.exe":"uv")}function le(e){let t=process.platform==="win32"&&!P.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(P.delimiter))if(r)for(let n of t){let o=P.join(r,`${e}${n}`);try{if(I.existsSync(o))return o}catch{}}return null}function vr(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function _r(e){if(!e)return!1;let[t,r]=e;return!(t<Ye[0]||t===Ye[0]&&r<Ye[1]||t>Ge[0]||t===Ge[0]&&r>=Ge[1])}function Ar(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let r=P.isAbsolute(t)?I.existsSync(t)?t:null:le(t);if(!r)continue;let n=fe(r,["--version"],{encoding:"utf8",timeout:15e3}),o=vr(`${n.stdout||""}${n.stderr||""}`);if(_r(o))return{bin:r,version:o.join("."),source:"host"}}return null}function Er(){return process.env.ORACLE_UV_BIN||le("uv")||(I.existsSync(P.join(J(),".local","bin","uv"))?P.join(J(),".local","bin","uv"):null)||(I.existsSync(xe())?xe():null)}function Or(e,t){let r=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return fe(process.execPath,["-e",r,e,t],{encoding:"utf8",timeout:2*6e4})}function $r({quiet:e=!1}={}){let t=Er();if(t)return{ok:!0,bin:t,reused:!0};U(re());let r=process.platform==="win32",n=P.join(re(),r?"uv-install.ps1":"uv-install.sh"),o=r?Ie.windows:Ie.posix,s=Or(o.url,n);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=I.readFileSync(n);if(!xr(i,{windows:r}))return{ok:!1,reason:`uv ${Pe} installer checksum mismatch`};let a=P.dirname(xe());U(a);let c=r?le("powershell.exe")||le("powershell"):le("sh")||"/bin/sh";if(!c)return{ok:!1,reason:r?"PowerShell not found":"sh not found"};let u=fe(c,r?["-NoProfile","-ExecutionPolicy","Bypass","-File",n]:[n],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!I.existsSync(xe())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:xe(),reused:!1}}function bt({quiet:e=!1}={}){let t=$r({quiet:e});if(!t.ok)return t;let r=t.bin,n={...process.env,UV_PYTHON_INSTALL_DIR:P.join(re(),"python"),UV_CACHE_DIR:P.join(re(),"cache")},o=fe(r,["python","install","--no-bin",ke],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:n});if(o.status!==0)return{ok:!1,reason:`uv python install ${ke} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=fe(r,["python","find",ke],{encoding:"utf8",timeout:6e4,env:n}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!I.existsSync(i)?{ok:!1,reason:`uv could not locate python ${ke}`}:{ok:!0,bin:i,version:ke,source:"uv"}}function de(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Re();if(I.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=le("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Je(e,t,{quiet:r}){return fe(e,t,{stdio:r?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function xt({quiet:e=!1,upgrade:t=!1}={}){let r=Ar();if(!r){let l=bt({quiet:e});if(l.ok)r={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}U(re());let n=kt();if(I.existsSync(Re())&&!t)return{ok:!0,bin:Re(),reused:!0};if(!I.existsSync(P.join(n,"pyvenv.cfg"))){let l=Je(r.bin,["-m","venv",n],{quiet:e});if(l.status!==0&&r.source!=="uv"){I.rmSync(n,{recursive:!0,force:!0});let u=bt({quiet:e});if(u.ok)r={bin:u.bin,version:u.version,source:"uv"},l=Je(r.bin,["-m","venv",n],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=Sr();if(!I.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(wt);let a=Je(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${wt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=Re();return I.existsSync(c)?{ok:!0,bin:c,reused:!1,python:r.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as Dr,randomBytes as rt,timingSafeEqual as Fr}from"node:crypto";import F from"node:fs";import M from"node:path";import Ur from"node:readline/promises";import{spawn as Br,spawnSync as Kr}from"node:child_process";import K from"node:fs";import D from"node:path";var Xe=Object.freeze(["anthropic-oauth","openai-codex","xai-oauth"]);function St(e){let t=String(e||"").trim();if(!t||!D.isAbsolute(t))return"";try{return K.statSync(t).isFile()?t:""}catch{return""}}function Tr(e){try{return K.readdirSync(e,{withFileTypes:!0})}catch{return[]}}function Mr(e=process.env){return!(e.ORACLE_PUBLIC_DESKTOP==="1"&&e.ORACLE_OWNER_DESKTOP!=="1")}function Rr(e=process.env){let t=String(e.ORACLE_REAL_HOME||"").trim();return t&&D.isAbsolute(t)?t:J()}function Pr(e={}){let t=e.home||Rr(e.env),r={"anthropic-oauth":[],"openai-codex":[],"xai-oauth":[]},n=(s,i)=>{let a=St(i);a&&(r[s].includes(a)||r[s].push(a))};n("anthropic-oauth",D.join(t,".claude",".credentials.json"));for(let s of Tr(D.join(t,".claude-lanes")))!s.isDirectory()||s.name.startsWith(".")||n("anthropic-oauth",D.join(t,".claude-lanes",s.name,".credentials.json"));let o=D.join(t,".hermes","auth.json");for(let s of Xe)n(s,o);return n("anthropic-oauth",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("openai-codex",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("xai-oauth",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),r}function Ir(e){if(!K.existsSync(e))return{providers:{}};try{let t=JSON.parse(K.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{providers:{}}:{providers:t.providers&&typeof t.providers=="object"&&!Array.isArray(t.providers)?t.providers:{}}}catch{return{providers:{}}}}function Lr(e,t){let r=[];for(let n of[...Array.isArray(e)?e:[],...t]){let o=St(n)||(D.isAbsolute(String(n||""))?String(n):"");!o||r.includes(o)||r.push(o)}return r}function vt(e={}){if(!Mr(e.env))return{wrote:!1,providers:{}};let t=e.linksFile||D.join(R(),"oauth-links.json"),r=Pr(e),o={providers:{...Ir(t).providers||{}}},s=!1;for(let l of Xe){let u=Lr(o.providers[l],r[l]);JSON.stringify(u)!==JSON.stringify(o.providers[l]||[])?(o.providers[l]=u,s=!0):u.length&&(o.providers[l]=u)}if(!Xe.some(l=>(o.providers[l]||[]).length))return{wrote:!1,providers:o.providers};if(!s&&K.existsSync(t))return{wrote:!1,providers:o.providers};let a=D.dirname(t);if(K.mkdirSync(a,{recursive:!0}),process.platform!=="win32")try{K.chmodSync(a,448)}catch{}let c=`${t}.${process.pid}.tmp`;return K.writeFileSync(c,`${JSON.stringify(o,null,2)}
+`,{mode:384}),n}import I from"node:fs";import P from"node:path";import{createHash as br}from"node:crypto";import{spawnSync as fe}from"node:child_process";var kr="0.19.0",wt=`hermes-agent==${kr}`,Ye=[3,11],Ge=[3,14],ke="3.13",Pe="0.12.1",Ie=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function xr(e,{windows:t=process.platform==="win32"}={}){let r=Buffer.isBuffer(e)?e:Buffer.from(e),n=t?Ie.windows:Ie.posix,o=br("sha256").update(r).digest("hex"),s=r.toString("utf8");return o===n.sha256&&s.length>=1e3&&s.includes(Pe)}function re(){return P.join(R(),"runtime")}function kt(){return P.join(re(),"venv")}function Ve(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return P.join(kt(),t,r)}function Re(){return Ve("hermes")}function Sr(){let e=Ve("python3");return I.existsSync(e)?e:Ve("python")}function xe(){return P.join(re(),"uv",process.platform==="win32"?"uv.exe":"uv")}function le(e){let t=process.platform==="win32"&&!P.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(P.delimiter))if(r)for(let n of t){let o=P.join(r,`${e}${n}`);try{if(I.existsSync(o))return o}catch{}}return null}function vr(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function _r(e){if(!e)return!1;let[t,r]=e;return!(t<Ye[0]||t===Ye[0]&&r<Ye[1]||t>Ge[0]||t===Ge[0]&&r>=Ge[1])}function Ar(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let r=P.isAbsolute(t)?I.existsSync(t)?t:null:le(t);if(!r)continue;let n=fe(r,["--version"],{encoding:"utf8",timeout:15e3}),o=vr(`${n.stdout||""}${n.stderr||""}`);if(_r(o))return{bin:r,version:o.join("."),source:"host"}}return null}function Er(){return process.env.ORACLE_UV_BIN||le("uv")||(I.existsSync(P.join(J(),".local","bin","uv"))?P.join(J(),".local","bin","uv"):null)||(I.existsSync(xe())?xe():null)}function Or(e,t){let r=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return fe(process.execPath,["-e",r,e,t],{encoding:"utf8",timeout:2*6e4})}function $r({quiet:e=!1}={}){let t=Er();if(t)return{ok:!0,bin:t,reused:!0};U(re());let r=process.platform==="win32",n=P.join(re(),r?"uv-install.ps1":"uv-install.sh"),o=r?Ie.windows:Ie.posix,s=Or(o.url,n);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=I.readFileSync(n);if(!xr(i,{windows:r}))return{ok:!1,reason:`uv ${Pe} installer checksum mismatch`};let a=P.dirname(xe());U(a);let c=r?le("powershell.exe")||le("powershell"):le("sh")||"/bin/sh";if(!c)return{ok:!1,reason:r?"PowerShell not found":"sh not found"};let u=fe(c,r?["-NoProfile","-ExecutionPolicy","Bypass","-File",n]:[n],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!I.existsSync(xe())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:xe(),reused:!1}}function bt({quiet:e=!1}={}){let t=$r({quiet:e});if(!t.ok)return t;let r=t.bin,n={...process.env,UV_PYTHON_INSTALL_DIR:P.join(re(),"python"),UV_CACHE_DIR:P.join(re(),"cache")},o=fe(r,["python","install","--no-bin",ke],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:n});if(o.status!==0)return{ok:!1,reason:`uv python install ${ke} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=fe(r,["python","find",ke],{encoding:"utf8",timeout:6e4,env:n}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!I.existsSync(i)?{ok:!1,reason:`uv could not locate python ${ke}`}:{ok:!0,bin:i,version:ke,source:"uv"}}function de(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Re();if(I.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=le("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Je(e,t,{quiet:r}){return fe(e,t,{stdio:r?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function xt({quiet:e=!1,upgrade:t=!1}={}){let r=Ar();if(!r){let l=bt({quiet:e});if(l.ok)r={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}U(re());let n=kt();if(I.existsSync(Re())&&!t)return{ok:!0,bin:Re(),reused:!0};if(!I.existsSync(P.join(n,"pyvenv.cfg"))){let l=Je(r.bin,["-m","venv",n],{quiet:e});if(l.status!==0&&r.source!=="uv"){I.rmSync(n,{recursive:!0,force:!0});let u=bt({quiet:e});if(u.ok)r={bin:u.bin,version:u.version,source:"uv"},l=Je(r.bin,["-m","venv",n],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=Sr();if(!I.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(wt);let a=Je(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${wt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=Re();return I.existsSync(c)?{ok:!0,bin:c,reused:!1,python:r.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as Fr,randomBytes as rt,timingSafeEqual as Dr}from"node:crypto";import D from"node:fs";import M from"node:path";import Ur from"node:readline/promises";import{spawn as Br,spawnSync as Kr}from"node:child_process";import K from"node:fs";import F from"node:path";var Xe=Object.freeze(["anthropic-oauth","openai-codex","xai-oauth"]);function St(e){let t=String(e||"").trim();if(!t||!F.isAbsolute(t))return"";try{return K.statSync(t).isFile()?t:""}catch{return""}}function Tr(e){try{return K.readdirSync(e,{withFileTypes:!0})}catch{return[]}}function Mr(e=process.env){return!(e.ORACLE_PUBLIC_DESKTOP==="1"&&e.ORACLE_OWNER_DESKTOP!=="1")}function Rr(e=process.env){let t=String(e.ORACLE_REAL_HOME||"").trim();return t&&F.isAbsolute(t)?t:J()}function Pr(e={}){let t=e.home||Rr(e.env),r={"anthropic-oauth":[],"openai-codex":[],"xai-oauth":[]},n=(s,i)=>{let a=St(i);a&&(r[s].includes(a)||r[s].push(a))};n("anthropic-oauth",F.join(t,".claude",".credentials.json"));for(let s of Tr(F.join(t,".claude-lanes")))!s.isDirectory()||s.name.startsWith(".")||n("anthropic-oauth",F.join(t,".claude-lanes",s.name,".credentials.json"));let o=F.join(t,".hermes","auth.json");for(let s of Xe)n(s,o);return n("anthropic-oauth",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("openai-codex",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("xai-oauth",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),r}function Ir(e){if(!K.existsSync(e))return{providers:{}};try{let t=JSON.parse(K.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{providers:{}}:{providers:t.providers&&typeof t.providers=="object"&&!Array.isArray(t.providers)?t.providers:{}}}catch{return{providers:{}}}}function Lr(e,t){let r=[];for(let n of[...Array.isArray(e)?e:[],...t]){let o=St(n)||(F.isAbsolute(String(n||""))?String(n):"");!o||r.includes(o)||r.push(o)}return r}function vt(e={}){if(!Mr(e.env))return{wrote:!1,providers:{}};let t=e.linksFile||F.join(R(),"oauth-links.json"),r=Pr(e),o={providers:{...Ir(t).providers||{}}},s=!1;for(let l of Xe){let u=Lr(o.providers[l],r[l]);JSON.stringify(u)!==JSON.stringify(o.providers[l]||[])?(o.providers[l]=u,s=!0):u.length&&(o.providers[l]=u)}if(!Xe.some(l=>(o.providers[l]||[]).length))return{wrote:!1,providers:o.providers};if(!s&&K.existsSync(t))return{wrote:!1,providers:o.providers};let a=F.dirname(t);if(K.mkdirSync(a,{recursive:!0}),process.platform!=="win32")try{K.chmodSync(a,448)}catch{}let c=`${t}.${process.pid}.tmp`;return K.writeFileSync(c,`${JSON.stringify(o,null,2)}
 `,{mode:384}),K.renameSync(c,t),process.platform!=="win32"&&K.chmodSync(t,384),{wrote:!0,providers:o.providers}}import ne from"node:fs";import Et from"node:path";var _t=/access|refresh|idToken|id_token|token|secret|key|seed|mnemonic/i;function Cr(e=R()){return Et.join(e,"user-profile.json")}function Nr(e){if(!ne.existsSync(e))return{identities:{},wallets:{}};try{let t=JSON.parse(ne.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{identities:{},wallets:{}}:{identities:t.identities&&typeof t.identities=="object"?t.identities:{},wallets:t.wallets&&typeof t.wallets=="object"?t.wallets:{},updatedAt:t.updatedAt}}catch{return{identities:{},wallets:{}}}}function At(e){if(!e||typeof e!="object"||Array.isArray(e))return{};let t={};for(let[r,n]of Object.entries(e))if(!_t.test(r)){if(typeof n=="string"||typeof n=="number"||typeof n=="boolean"){t[r]=n;continue}if(n&&typeof n=="object"&&!Array.isArray(n)){let o={};for(let[s,i]of Object.entries(n))_t.test(s)||(typeof i=="string"||typeof i=="number"||typeof i=="boolean")&&(o[s]=i);t[r]=o}}return t}function jr(e,t){let r=Et.dirname(e);if(ne.mkdirSync(r,{recursive:!0}),process.platform!=="win32")try{ne.chmodSync(r,448)}catch{}let n={updatedAt:new Date().toISOString(),identities:At(t.identities),wallets:At(t.wallets)},o=`${e}.${process.pid}.tmp`;return ne.writeFileSync(o,`${JSON.stringify(n,null,2)}
-`,{mode:384}),ne.renameSync(o,e),process.platform!=="win32"&&ne.chmodSync(e,384),n}function Ze(e){let r=String(e||"").trim().split(".");if(r.length<2)return{};try{let n=JSON.parse(Buffer.from(r[1],"base64url").toString("utf8")),o=String(n.email||"").trim(),s=String(n.name||n.preferred_username||"").trim();return{...o?{email:o}:{},...s?{name:s}:{}}}catch{return{}}}function Qe(e,t={},r={}){let n=String(e||"").trim();if(!n)return null;let o=r.file||Cr(r.configDir),s=Nr(o),i=s.identities[n]&&typeof s.identities[n]=="object"?s.identities[n]:{};return s.identities[n]={...i,provider:n,source:String(t.source||i.source||"oracle"),loggedInAt:t.loggedInAt||new Date().toISOString(),...t.label?{label:String(t.label)}:{},...t.email?{email:String(t.email)}:{},...t.name?{name:String(t.name)}:{}},jr(o,s)}var me=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Ot=12e4;function Hr(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function oe(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(me))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function X(e){let t=oe(e);return{id:t,...me[t]}}function L(e,t={}){if(!F.existsSync(e))return t;try{let r=JSON.parse(F.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${M.basename(e)}`)}}function Tt(e){U(e),process.platform!=="win32"&&F.chmodSync(e,448)}function V(e,t){Tt(M.dirname(e));let r=`${e}.${process.pid}.${rt(4).toString("hex")}.tmp`;F.writeFileSync(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),F.renameSync(r,e),process.platform!=="win32"&&F.chmodSync(e,384)}function zr(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function et(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function pe(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(n)&&n>=1e9&&n<1e12&&(n=n*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(n)?n:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function qr(e={}){let t=e.file||M.join(R(),"oauth.json"),r=e.metadataFile||M.join(M.dirname(t),"oauth-meta.json"),n=e.linksFile||M.join(M.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Kr,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&zr(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function l(y){Tt(M.dirname(c));let p;for(let f=0;f<400;f+=1)try{p=F.openSync(c,"wx",384);break}catch(m){if(m?.code!=="EEXIST")throw m;try{Date.now()-F.statSync(c).mtimeMs>3e5&&F.unlinkSync(c)}catch{}await new Promise(h=>setTimeout(h,25))}if(p===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await y()}finally{try{F.closeSync(p)}catch{}try{F.unlinkSync(c)}catch{}}}function u(y,p="oauth"){return["application","oracle","kind",p,"provider",y]}let w=!1;function g(){if(w)return;w=!0;let y=M.join(R(),"oauth-links.json");if(M.resolve(n)===M.resolve(y))try{vt({linksFile:n})}catch{}}function E(y){if(g(),!F.existsSync(n))return[];let f=L(n,{providers:{}}).providers?.[y];if(!Array.isArray(f))return[];let m=[];for(let h of f)if(M.isAbsolute(String(h||"")))try{let x=L(h,{});if(y==="anthropic-oauth"&&x.claudeAiOauth){let N=pe(x.claudeAiOauth);m.push({...N,refreshToken:"",source:"external-access-only",label:M.basename(M.dirname(h))||"claude-lane"});continue}let C=x.credential_pool&&typeof x.credential_pool=="object"?x.credential_pool:null;if(C){let N=C[y]||C[y.replace(/-oauth$/,"")]||[],ze=Array.isArray(N)?N:N?[N]:[];for(let Y of ze)if(!(!Y||typeof Y!="object"))try{let Oe=pe(Y);m.push({...Oe,refreshToken:"",source:"external-access-only",label:String(Y.label||Y.id||M.basename(M.dirname(h))||y)})}catch{}}}catch{}return m}function S(y){let p=E(y);return p.length?p.find(f=>!f.expiresAt||f.expiresAt>o()+Ot)||p[0]:null}function T(y){return y.map(p=>({label:String(p.label||"lane"),source:"external-access-only",expiresAt:Number(p.expiresAt||0),healthy:!p.expiresAt||p.expiresAt>o()+Ot}))}function v(y){let p=oe(y);if(i){let h=s("secret-tool",["lookup",...u(p)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!h.error&&h.status===0&&String(h.stdout||"").trim())try{return pe(JSON.parse(String(h.stdout).trim()))}catch{}return S(p)}let m=L(t,{providers:{}}).providers?.[p];if(m)try{return pe(m)}catch{}return S(p)}function A(y,p){let f=oe(y),m=pe(p);if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} OAuth`,...u(f)],{input:JSON.stringify(m),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected OAuth credential");let C=L(r,{providers:{}});C.providers||={},C.providers[f]={expiresAt:m.expiresAt,source:m.source},V(r,C);try{let N=Ze(m.idToken);Qe(f,{source:m.source,...N,label:N.name||N.email||f},{configDir:M.dirname(t)})}catch{}return m}let h=L(t,{providers:{}});h.providers||={},h.providers[f]=m,V(t,h);try{let x=Ze(m.idToken);Qe(f,{source:m.source,...x,label:x.name||x.email||f},{configDir:M.dirname(t)})}catch{}return m}function W(y){let p=oe(y);if(i){let h=s("secret-tool",["clear",...u(p)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{}});return x.providers&&delete x.providers[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{}}),m=!!f.providers?.[p];return f.providers&&delete f.providers[p],V(t,f),m}function B(y){let p=et(y);if(i){let f=s("secret-tool",["lookup",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return f.error||f.status!==0?"":String(f.stdout||"").trim()}return String(L(t,{apiKeys:{}}).apiKeys?.[p]||"").trim()}function Q(y,p){let f=et(y),m=String(p||"").trim();if(!m)throw new Error("API key is empty");if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} API key`,...u(f,"api-key")],{input:m,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected API key");let C=L(r,{providers:{},apiKeys:{}});return C.apiKeys||={},C.apiKeys[f]={configured:!0},V(r,C),!0}let h=L(t,{providers:{},apiKeys:{}});return h.apiKeys||={},h.apiKeys[f]=m,V(t,h),!0}function H(y){let p=et(y);if(i){let h=s("secret-tool",["clear",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{},apiKeys:{}});return x.apiKeys&&delete x.apiKeys[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{},apiKeys:{}}),m=!!f.apiKeys?.[p];return f.apiKeys&&delete f.apiKeys[p],V(t,f),m}function k(){g();let y={},p={};if(i){let f=L(r,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!v(m),expiresAt:Number(h.expiresAt||0),source:String(h.source||"oracle"),storage:a,lanes:T(E(m))};for(let m of Object.keys(f.apiKeys||{}))p[m]={configured:!!B(m),storage:a}}else{let f=L(t,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!h?.accessToken,expiresAt:Number(h?.expiresAt||0),source:String(h?.source||"oracle"),storage:a,lanes:T(E(m))};for(let[m,h]of Object.entries(f.apiKeys||{}))p[m]={configured:!!h,storage:a}}for(let f of Object.keys(me)){let m=T(E(f));if(y[f]){y[f].lanes=m;continue}let h=S(f);h&&(y[f]={loggedIn:!0,expiresAt:h.expiresAt,source:h.source,storage:"external-access-source",lanes:m})}return{storage:a,providers:y,apiKeys:p}}return Object.freeze({file:t,storage:a,get:v,set:A,remove:W,getApiKey:B,setApiKey:Q,removeApiKey:H,status:k,withLock:l})}var $t;function q(){return $t||=qr(),$t}function tt(e){return Buffer.from(e).toString("base64url")}function Wr(){let e=tt(rt(32));return{verifier:e,challenge:tt(Dr("sha256").update(e).digest()),state:tt(rt(24))}}function Yr(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Fr(r,n)}function Gr(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return Br(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function nt(e){return new URLSearchParams(e).toString()}async function se(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Jr(e){if(e)return String(await e()).trim();let t=Ur.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function ot(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return pe({accessToken:r,refreshToken:n,expiresAt:Hr(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Vr(e){let t=me["anthropic-oauth"],r=e.pkce||Wr(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Jr(e.inputFn),[i,a]=s.split("#",2);if(!i||!Yr(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return ot(await se(c,"Claude OAuth token exchange"),e)}async function Xr(e){let t=me["openai-codex"],r=await se(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await se(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:nt({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return ot(await se(i,"Codex OAuth token exchange"),e)}function Le(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Zr(e){let t=me["xai-oauth"],r=await se(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Le(r.authorization_endpoint);let n=Le(r.token_endpoint),o=await se(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Le(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let w=await se(l,"xAI OAuth token exchange");return ot(w,{...e,discovery:{authorization_endpoint:Le(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Mt(e,t={}){let r=oe(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Gr,output:t.output||(o=>process.stdout.write(`${o}
-`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Vr(n):r==="openai-codex"?Xr(n):Zr(n)}import je from"node:fs";import st from"node:path";var Qr=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Ce(e){return String(e||"").trim()||void 0}function en(e,{required:t=!1}={}){let r=Ce(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!Qr.has(r))throw new Error(`unsupported provider: ${r}`);return r}function tn(e,{required:t=!1}={}){let r=Ce(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function rn(e){let t=Ce(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function Ne({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=en(e),s=tn(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:rn(r)};if(Ce(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var nn=new Set(["auto","standalone","hermes","remote","arch"]);function on(){return st.join(R(),"model.json")}function he(e){return String(e||"").trim()||void 0}function sn(e={}){let t=he(e.backend)?.toLowerCase()||"auto",r=Ne({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=he(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=he(e.reasoningEffort),i=he(e.computeHost||e.remoteHost),a=he(e.computeUser||e.remoteUser),c=he(e.computePath||e.remotePath);if(!nn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!i)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...s?{reasoningEffort:s}:{},...i?{computeHost:i}:{},...a?{computeUser:a}:{},...c?{computePath:c}:{}}}function De(e){let t=sn(e),r=on();U(st.dirname(r)),process.platform!=="win32"&&je.chmodSync(st.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return je.writeFileSync(n,`${JSON.stringify(t,null,2)}
+`,{mode:384}),ne.renameSync(o,e),process.platform!=="win32"&&ne.chmodSync(e,384),n}function Ze(e){let r=String(e||"").trim().split(".");if(r.length<2)return{};try{let n=JSON.parse(Buffer.from(r[1],"base64url").toString("utf8")),o=String(n.email||"").trim(),s=String(n.name||n.preferred_username||"").trim();return{...o?{email:o}:{},...s?{name:s}:{}}}catch{return{}}}function Qe(e,t={},r={}){let n=String(e||"").trim();if(!n)return null;let o=r.file||Cr(r.configDir),s=Nr(o),i=s.identities[n]&&typeof s.identities[n]=="object"?s.identities[n]:{};return s.identities[n]={...i,provider:n,source:String(t.source||i.source||"oracle"),loggedInAt:t.loggedInAt||new Date().toISOString(),...t.label?{label:String(t.label)}:{},...t.email?{email:String(t.email)}:{},...t.name?{name:String(t.name)}:{}},jr(o,s)}var me=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Ot=12e4;function Hr(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function oe(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(me))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function X(e){let t=oe(e);return{id:t,...me[t]}}function L(e,t={}){if(!D.existsSync(e))return t;try{let r=JSON.parse(D.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${M.basename(e)}`)}}function Tt(e){U(e),process.platform!=="win32"&&D.chmodSync(e,448)}function V(e,t){Tt(M.dirname(e));let r=`${e}.${process.pid}.${rt(4).toString("hex")}.tmp`;D.writeFileSync(r,`${JSON.stringify(t,null,2)}
+`,{mode:384}),D.renameSync(r,e),process.platform!=="win32"&&D.chmodSync(e,384)}function zr(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function et(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function pe(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=e.expires_at_ms!=null,o;if(n){let s=e.expires_at_ms;if(o=Number(s),typeof s!="number"&&typeof s!="string"||typeof s=="string"&&!s.trim()||!Number.isFinite(o)||o<=0)throw new Error("OAuth credential has invalid expires_at_ms")}else o=Number(e.expiresAt||e.expires_at||0),Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3);if(!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function qr(e={}){let t=e.file||M.join(R(),"oauth.json"),r=e.metadataFile||M.join(M.dirname(t),"oauth-meta.json"),n=e.linksFile||M.join(M.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Kr,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&zr(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function l(y){Tt(M.dirname(c));let p;for(let f=0;f<400;f+=1)try{p=D.openSync(c,"wx",384);break}catch(m){if(m?.code!=="EEXIST")throw m;try{Date.now()-D.statSync(c).mtimeMs>3e5&&D.unlinkSync(c)}catch{}await new Promise(h=>setTimeout(h,25))}if(p===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await y()}finally{try{D.closeSync(p)}catch{}try{D.unlinkSync(c)}catch{}}}function u(y,p="oauth"){return["application","oracle","kind",p,"provider",y]}let w=!1;function g(){if(w)return;w=!0;let y=M.join(R(),"oauth-links.json");if(M.resolve(n)===M.resolve(y))try{vt({linksFile:n})}catch{}}function E(y){if(g(),!D.existsSync(n))return[];let f=L(n,{providers:{}}).providers?.[y];if(!Array.isArray(f))return[];let m=[];for(let h of f)if(M.isAbsolute(String(h||"")))try{let x=L(h,{});if(y==="anthropic-oauth"&&x.claudeAiOauth){let N=pe(x.claudeAiOauth);m.push({...N,refreshToken:"",source:"external-access-only",label:M.basename(M.dirname(h))||"claude-lane"});continue}let C=x.credential_pool&&typeof x.credential_pool=="object"?x.credential_pool:null;if(C){let N=C[y]||C[y.replace(/-oauth$/,"")]||[],ze=Array.isArray(N)?N:N?[N]:[];for(let Y of ze)if(!(!Y||typeof Y!="object"))try{let Oe=pe(Y);m.push({...Oe,refreshToken:"",source:"external-access-only",label:String(Y.label||Y.id||M.basename(M.dirname(h))||y)})}catch{}}}catch{}return m}function S(y){let p=E(y);return p.length?p.find(f=>!f.expiresAt||f.expiresAt>o()+Ot)||p[0]:null}function T(y){return y.map(p=>({label:String(p.label||"lane"),source:"external-access-only",expiresAt:Number(p.expiresAt||0),healthy:!p.expiresAt||p.expiresAt>o()+Ot}))}function v(y){let p=oe(y);if(i){let h=s("secret-tool",["lookup",...u(p)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!h.error&&h.status===0&&String(h.stdout||"").trim())try{return pe(JSON.parse(String(h.stdout).trim()))}catch{}return S(p)}let m=L(t,{providers:{}}).providers?.[p];if(m)try{return pe(m)}catch{}return S(p)}function A(y,p){let f=oe(y),m=pe(p);if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} OAuth`,...u(f)],{input:JSON.stringify(m),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected OAuth credential");let C=L(r,{providers:{}});C.providers||={},C.providers[f]={expiresAt:m.expiresAt,source:m.source},V(r,C);try{let N=Ze(m.idToken);Qe(f,{source:m.source,...N,label:N.name||N.email||f},{configDir:M.dirname(t)})}catch{}return m}let h=L(t,{providers:{}});h.providers||={},h.providers[f]=m,V(t,h);try{let x=Ze(m.idToken);Qe(f,{source:m.source,...x,label:x.name||x.email||f},{configDir:M.dirname(t)})}catch{}return m}function W(y){let p=oe(y);if(i){let h=s("secret-tool",["clear",...u(p)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{}});return x.providers&&delete x.providers[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{}}),m=!!f.providers?.[p];return f.providers&&delete f.providers[p],V(t,f),m}function B(y){let p=et(y);if(i){let f=s("secret-tool",["lookup",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return f.error||f.status!==0?"":String(f.stdout||"").trim()}return String(L(t,{apiKeys:{}}).apiKeys?.[p]||"").trim()}function Q(y,p){let f=et(y),m=String(p||"").trim();if(!m)throw new Error("API key is empty");if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} API key`,...u(f,"api-key")],{input:m,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected API key");let C=L(r,{providers:{},apiKeys:{}});return C.apiKeys||={},C.apiKeys[f]={configured:!0},V(r,C),!0}let h=L(t,{providers:{},apiKeys:{}});return h.apiKeys||={},h.apiKeys[f]=m,V(t,h),!0}function H(y){let p=et(y);if(i){let h=s("secret-tool",["clear",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{},apiKeys:{}});return x.apiKeys&&delete x.apiKeys[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{},apiKeys:{}}),m=!!f.apiKeys?.[p];return f.apiKeys&&delete f.apiKeys[p],V(t,f),m}function k(){g();let y={},p={};if(i){let f=L(r,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!v(m),expiresAt:Number(h.expiresAt||0),source:String(h.source||"oracle"),storage:a,lanes:T(E(m))};for(let m of Object.keys(f.apiKeys||{}))p[m]={configured:!!B(m),storage:a}}else{let f=L(t,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!h?.accessToken,expiresAt:Number(h?.expiresAt||0),source:String(h?.source||"oracle"),storage:a,lanes:T(E(m))};for(let[m,h]of Object.entries(f.apiKeys||{}))p[m]={configured:!!h,storage:a}}for(let f of Object.keys(me)){let m=T(E(f));if(y[f]){y[f].lanes=m;continue}let h=S(f);h&&(y[f]={loggedIn:!0,expiresAt:h.expiresAt,source:h.source,storage:"external-access-source",lanes:m})}return{storage:a,providers:y,apiKeys:p}}return Object.freeze({file:t,storage:a,get:v,set:A,remove:W,getApiKey:B,setApiKey:Q,removeApiKey:H,status:k,withLock:l})}var $t;function q(){return $t||=qr(),$t}function tt(e){return Buffer.from(e).toString("base64url")}function Wr(){let e=tt(rt(32));return{verifier:e,challenge:tt(Fr("sha256").update(e).digest()),state:tt(rt(24))}}function Yr(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Dr(r,n)}function Gr(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return Br(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function nt(e){return new URLSearchParams(e).toString()}async function se(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Jr(e){if(e)return String(await e()).trim();let t=Ur.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function ot(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return pe({accessToken:r,refreshToken:n,expiresAt:Hr(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Vr(e){let t=me["anthropic-oauth"],r=e.pkce||Wr(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Jr(e.inputFn),[i,a]=s.split("#",2);if(!i||!Yr(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return ot(await se(c,"Claude OAuth token exchange"),e)}async function Xr(e){let t=me["openai-codex"],r=await se(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await se(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:nt({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return ot(await se(i,"Codex OAuth token exchange"),e)}function Le(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Zr(e){let t=me["xai-oauth"],r=await se(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Le(r.authorization_endpoint);let n=Le(r.token_endpoint),o=await se(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Le(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let w=await se(l,"xAI OAuth token exchange");return ot(w,{...e,discovery:{authorization_endpoint:Le(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Mt(e,t={}){let r=oe(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Gr,output:t.output||(o=>process.stdout.write(`${o}
+`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Vr(n):r==="openai-codex"?Xr(n):Zr(n)}import je from"node:fs";import st from"node:path";var Qr=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Ce(e){return String(e||"").trim()||void 0}function en(e,{required:t=!1}={}){let r=Ce(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!Qr.has(r))throw new Error(`unsupported provider: ${r}`);return r}function tn(e,{required:t=!1}={}){let r=Ce(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function rn(e){let t=Ce(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function Ne({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=en(e),s=tn(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:rn(r)};if(Ce(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var nn=new Set(["auto","standalone","hermes","remote","arch"]);function on(){return st.join(R(),"model.json")}function he(e){return String(e||"").trim()||void 0}function sn(e={}){let t=he(e.backend)?.toLowerCase()||"auto",r=Ne({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=he(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=Object.fromEntries(Object.entries(e.contextByModel||{}).filter(([,u])=>Number.isSafeInteger(u)&&u>0)),i=he(e.reasoningEffort),a=he(e.computeHost||e.remoteHost),c=he(e.computeUser||e.remoteUser),l=he(e.computePath||e.remotePath);if(!nn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!a)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...Object.keys(s).length?{contextByModel:s}:{},...i?{reasoningEffort:i}:{},...a?{computeHost:a}:{},...c?{computeUser:c}:{},...l?{computePath:l}:{}}}function Fe(e){let t=sn(e),r=on();U(st.dirname(r)),process.platform!=="win32"&&je.chmodSync(st.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return je.writeFileSync(n,`${JSON.stringify(t,null,2)}
 `,{mode:384}),je.renameSync(n,r),process.platform!=="win32"&&je.chmodSync(r,384),t}var jt=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},nous:{model:"moonshotai/kimi-k3"},qwen:{model:"qwen-plus"},glm:{model:"glm-4.5"},custom:{model:""}});function at(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function ln(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function fn(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",s),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
 `)},s=i=>{let a=String(i);for(let c of a){if(c==="\r"||c===`
-`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function ct(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...Ne({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function Dt(e,t,r={}){return De(ct(e,t,r))}function dn(e){process.stdout.write(`storage: ${e.storage}
+`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function ct(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...Ne({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function Ft(e,t,r={}){return Fe(ct(e,t,r))}function dn(e){process.stdout.write(`storage: ${e.storage}
 `);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
 `);return}for(let[n,o]of t){let s=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${n}: ${o.loggedIn?"logged in":"missing"}, expires ${s}
 `);for(let i of o.lanes||[])process.stdout.write(`  ${i.label}: ${i.healthy?"ready":"expired"}
@@ -17,11 +17,11 @@ var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&
 `)}function pn(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]","    PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|nous|qwen|glm|custom",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth usage [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
 `)}var ge={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:pn(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=q();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
 `):dn(o),0}if(r==="usage"){let{collectOAuthUsage:o}=await Promise.resolve().then(()=>(Nt(),Ct)),s=await o(n);return process.stdout.write(`${JSON.stringify(s)}
-`),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=X(o),i=at(t,"--model")||s.model;ct(s.id,i);let a=await Mt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{Dt(s.id,i)}catch(l){throw c?n.set(s.id,c):n.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
-`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(jt,o))throw new Error(`unsupported API-key provider: ${o}`);let s=at(t,"--model")||jt[o].model,i=at(t,"--base-url");ct(o,s,{baseUrl:i});let a=t.includes("--stdin")?await ln():await fn();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{Dt(o,s,{baseUrl:i})}catch(l){throw c?n.setApiKey(o,c):n.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${n.storage}
+`),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=X(o),i=at(t,"--model")||s.model;ct(s.id,i);let a=await Mt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{Ft(s.id,i)}catch(l){throw c?n.set(s.id,c):n.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
+`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(jt,o))throw new Error(`unsupported API-key provider: ${o}`);let s=at(t,"--model")||jt[o].model,i=at(t,"--base-url");ct(o,s,{baseUrl:i});let a=t.includes("--stdin")?await ln():await fn();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{Ft(o,s,{baseUrl:i})}catch(l){throw c?n.setApiKey(o,c):n.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${n.storage}
 `),0}if(r==="logout"){let o=String(t.find(a=>!a.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let s=!1;try{s=n.remove(oe(o))}catch{}let i=n.removeApiKey(o);if(!s&&!i)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
 `),0}throw new Error(`unknown auth action: ${r}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
-`),1}}};var mn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var Io=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var Fe=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),hn=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Ft=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),gn=Object.freeze(Ft[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function yn(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function Ut(e,t,r){let n=yn(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function ut({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>Ut(38,r,n),bg:(r,n)=>Ut(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var Co=ut();function Bt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as $n}from"node:child_process";var Se=Buffer.alloc(0);var wn={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},bn={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function j({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function qt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function kn(e){return e>=64&&e<=126}function Kt(e){let t=e.toLowerCase();return j({name:t,shift:e!==t,sequence:e})}function xn(e){return e===13?j({name:"return",sequence:"\r"}):e===10?j({name:"return",sequence:`
+`),1}}};var mn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var Io=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var De=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),hn=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Dt=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),gn=Object.freeze(Dt[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function yn(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function Ut(e,t,r){let n=yn(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function ut({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>Ut(38,r,n),bg:(r,n)=>Ut(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var Co=ut();function Bt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as $n}from"node:child_process";var Se=Buffer.alloc(0);var wn={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},bn={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function j({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function qt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function kn(e){return e>=64&&e<=126}function Kt(e){let t=e.toLowerCase();return j({name:t,shift:e!==t,sequence:e})}function xn(e){return e===13?j({name:"return",sequence:"\r"}):e===10?j({name:"return",sequence:`
 `}):e===9?j({name:"tab",sequence:"	"}):e===127?j({name:"backspace",sequence:"\x7F"}):e===8?j({name:"backspace",sequence:"\b"}):e>=1&&e<=26?j({name:String.fromCharCode(e+96),ctrl:!0,sequence:String.fromCharCode(e)}):j({name:"unknown",sequence:String.fromCharCode(e)})}function Sn(e){let t=/^\u001b[\[O](\d*)(?:;(\d+))?(.)$/s.exec(e);if(!t)return j({name:"unknown",sequence:e});let r=t[1]===""?null:Number(t[1]),n=t[2]===void 0?null:Number(t[2]),o=t[3],s=null,i=n;if(o==="~"?s=bn[r]??null:(s=wn[o]??null,i===null&&r!==null&&r>1&&(i=r)),!s)return j({name:"unknown",sequence:e});let a=i===null?0:Math.max(0,i-1);return j({name:s,shift:(a&1)!==0,meta:(a&2)!==0,ctrl:(a&4)!==0,sequence:e})}function vn(e,t,r,n){let o=()=>(r.push(j({name:"escape",sequence:"\x1B"})),1);if(t+1>=e.length)return n?o():0;let s=e[t+1];if(s===91||s===79){let l=t+2;for(;l<e.length&&!kn(e[l]);)l+=1;return l>=e.length?n?o():0:(r.push(Sn(e.toString("utf8",t,l+1))),l+1-t)}if(s===27)return o();let i=qt(s);if(t+1+i>e.length)return n?o():0;let a=e.toString("utf8",t+1,t+1+i),c=a.toLowerCase();return r.push(j({name:c,meta:!0,shift:a!==c,sequence:`\x1B${a}`})),1+i}function Ht(e,t){let r=[],n=0;for(;n<e.length;){let o=e[n];if(o===27){let i=vn(e,n,r,t);if(i===0)return{keys:r,rest:Buffer.from(e.subarray(n))};n+=i;continue}if(o<32||o===127){r.push(xn(o)),n+=1;continue}let s=qt(o);if(n+s>e.length)return t?(r.push(Kt(e.toString("utf8",n))),{keys:r,rest:Se}):{keys:r,rest:Buffer.from(e.subarray(n))};r.push(Kt(e.toString("utf8",n,n+s))),n+=s}return{keys:r,rest:Se}}function zt(e){return Buffer.isBuffer(e)?e:e==null?Se:typeof e=="string"?Buffer.from(e,"utf8"):Buffer.from(e)}function Wt(){let e=Se;return{push(t){let r=e.length===0?zt(t):Buffer.concat([e,zt(t)]),{keys:n,rest:o}=Ht(r,!1);return e=o,n},flush(){if(e.length===0)return[];let{keys:t}=Ht(e,!0);return e=Se,t},get pending(){return e.length}}}var lt=/\u001B\[[0-9;]*m/g;function Yt(e){if(new RegExp("\\p{Mark}","u").test(e))return 0;let t=e.codePointAt(0);return t===8205||t===65039?0:t>=4352&&(t<=4447||t===9001||t===9002||t>=11904&&t<=42191&&t!==12351||t>=44032&&t<=55203||t>=63744&&t<=64255||t>=65040&&t<=65049||t>=65072&&t<=65135||t>=65280&&t<=65376||t>=65504&&t<=65510||t>=127744&&t<=129791||t>=131072&&t<=262141)?2:t<32||t>=127&&t<160?0:1}function _n(e){return[...Bt(e)].reduce((t,r)=>t+Yt(r),0)}function An(e,t){if(t<=0)return"";let r=String(e).split(/(\u001B\[[0-9;]*m)/g),n="",o=0,s=!1;for(let i of r)if(i){if(lt.test(i)){lt.lastIndex=0,n+=i,s=i!=="\x1B[0m";continue}lt.lastIndex=0;for(let a of i){let c=Yt(a);if(o+c>t)return s?`${n}\x1B[0m`:n;n+=a,o+=c}}return n}function Ue(e,t,r="left"){let n=Math.max(0,Math.floor(Number(t)||0)),o=An(String(e),n),s=Math.max(0,n-_n(o));if(r==="right")return`${" ".repeat(s)}${o}`;if(r==="center"){let i=Math.floor(s/2);return`${" ".repeat(i)}${o}${" ".repeat(s-i)}`}return`${o}${" ".repeat(s)}`}var Qo=Object.freeze(["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"]),es=Object.freeze({thinking:"Thinking",writing:"Writing",executing:"Executing",waiting:"Waiting"});async function Gt(e,{headers:t={}}={}){let r=new AbortController,n=setTimeout(()=>r.abort(),6e3);try{let o=await fetch(e,{headers:t,signal:r.signal}),s=null;try{s=await o.json()}catch{s=null}return{status:o.status,body:s}}finally{clearTimeout(n)}}async function En(e){let t=String(e||"").trim();if(!/^\d+:[\w-]{20,}$/.test(t))return{ok:!1,definitive:!0,error:"that does not look like a telegram bot token (123456:ABC\u2026)"};try{let{status:r,body:n}=await Gt(`https://api.telegram.org/bot${t}/getMe`);return r===200&&n?.ok&&n.result?.username?{ok:!0,definitive:!0,username:`@${n.result.username}`}:r===401||r===404?{ok:!1,definitive:!0,error:"telegram rejected this token (check BotFather)"}:{ok:!1,definitive:!1,error:`telegram returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function On(e){let t=String(e||"").trim();if(t.length<50)return{ok:!1,definitive:!0,error:"that does not look like a discord bot token"};try{let{status:r,body:n}=await Gt("https://discord.com/api/v10/users/@me",{headers:{Authorization:`Bot ${t}`}});return r===200&&n?.username?{ok:!0,definitive:!0,username:n.username}:r===401?{ok:!1,definitive:!0,error:"discord rejected this token (reset it in the developer portal)"}:{ok:!1,definitive:!1,error:`discord returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function Be(e,t){let r=String(e||"").toLowerCase();return r==="telegram"?En(t):r==="discord"?On(t):{ok:!1,definitive:!1}}var Tn=Object.freeze(["telegram","discord","whatsapp","slack","signal"]),Qt=Object.freeze([{id:"claude",label:"Claude",hint:"Anthropic OAuth",kind:"oauth"},{id:"codex",label:"Codex",hint:"OpenAI OAuth",kind:"oauth"},{id:"grok",label:"Grok",hint:"xAI OAuth",kind:"oauth"}]),er=Object.freeze([{id:"openrouter",label:"OpenRouter",hint:"API key",kind:"api-key"},{id:"openai",label:"OpenAI",hint:"API key",kind:"api-key"},{id:"anthropic",label:"Anthropic",hint:"API key",kind:"api-key"},{id:"deepseek",label:"DeepSeek",hint:"API key",kind:"api-key"},{id:"gemini",label:"Gemini",hint:"API key",kind:"api-key"},{id:"kimi",label:"Kimi",hint:"API key",kind:"api-key"},{id:"mistral",label:"Mistral",hint:"API key",kind:"api-key"},{id:"nous",label:"Nous Portal",hint:"API key",kind:"api-key"},{id:"qwen",label:"Qwen",hint:"API key",kind:"api-key"},{id:"glm",label:"GLM",hint:"API key",kind:"api-key"}]);function Mn(e,t){let r=String(t||"unset");return r==="ready"||r==="connected"||r==="configured"?e.fg($.ok,r):r==="manual"?e.fg($.warn,r):e.fg($.banner_dim,r||"unset")}function Jt({profile:e="oracle",statuses:t=null,oauthStatus:r=null,runtime:n=null}={}){let o=t;if(!o)try{o=ue(e).statuses||{}}catch{o={}}let s=r;if(!s)try{s=q().status()}catch{s={providers:{},apiKeys:{}}}let i=n;if(!i)try{i=de()}catch{i={ok:!1}}let a=Qt.some(w=>{let g=X(w.id);return s.providers?.[g.id]?.loggedIn===!0}),c=er.some(w=>s.apiKeys?.[w.id]?.configured===!0),l=[{id:"model",label:"model / sign-in",note:"Claude \xB7 Codex \xB7 Grok \xB7 API keys",status:a||c?"ready":"unset",action:"model"}];i.ok||l.push({id:"runtime",label:"messaging runtime",note:"one-time install \u2014 powers telegram/discord bridge",status:"missing",action:"bootstrap"});let u=new Map(ae().map(w=>[w.key,w]));for(let w of Tn){let g=u.get(w);if(!g)continue;let E=o[g.key]||(g.required?.length?"unset":"manual"),S=!i.ok&&E==="ready"?"token set":E;l.push({id:g.key,label:g.name,note:g.note||"",status:S,action:g.required?.length?"token":"hermes",platform:g})}return l.push({id:"gateway",label:"restart gateway",note:"apply channel config",status:"",action:"gateway"},{id:"gateway-install",label:"start on boot",note:"keep the bot alive after reboot",status:"",action:"gateway-install"},{id:"done",label:"done",note:"back to oracle",status:"",action:"done",skip:!0}),l}function Vt(e=null){let t=e;if(!t)try{t=q().status()}catch{t={providers:{},apiKeys:{}}}let r=[];for(let n of Qt){let o=X(n.id),s=t.providers?.[o.id]?.loggedIn===!0;r.push({id:n.id,label:n.label,note:n.hint,status:s?"connected":"OAuth",action:"oauth",kind:"oauth"})}for(let n of er){let o=t.apiKeys?.[n.id]?.configured===!0;r.push({id:n.id,label:n.label,note:n.hint,status:o?"configured":"API key",action:"api-key",kind:"api-key"})}return r.push({id:"back",label:"back",note:"setup menu",status:"",action:"back",skip:!0}),r}function Ke({width:e,palette:t,title:r,subtitle:n="",rows:o=[],index:s=0,footer:i="\u2191/\u2193 move   enter select   esc back"}={}){let a=Math.max(40,Math.floor(Number(e)||80)),c=Math.max(36,Math.min(a-4,72)),l=Math.max(0,Math.floor((a-c)/2)),u=Math.max(0,c-4),w=" ".repeat(l),g=A=>t.fg($.banner_border,A),E=A=>`${w}${A}`,S=(A="")=>E(`${g("\u2502")} ${Ue(A,u)} ${g("\u2502")}`),T="\u2500".repeat(Math.max(0,c-2)),v=[E(`${g("\u256D")}${g(T)}${g("\u256E")}`),S(t.bold(t.fg($.accent,r||"oracle setup"))),S(g("\u2500".repeat(u)))];return n&&(v.push(S(t.fg($.banner_dim,n))),v.push(S(""))),o.forEach((A,W)=>{let B=W===s,Q=B?"\u203A":" ",H=String(A.label||A.id||""),k=String(A.note||""),y=A.status?Mn(t,A.status):"",p=` ${Q} ${H}`,f=[y,k?t.fg($.banner_dim,k):""].filter(Boolean).join("  "),m=Math.max(1,u-Xt(p)-Xt(tr(f))-1),h=`${p}${" ".repeat(m)}${f}`;B?v.push(S(t.bg($.selection_bg,t.bold(t.fg($.banner_text,Ue(h,u)))))):v.push(S(h))}),v.push(S("")),v.push(S(t.fg($.banner_dim,i))),v.push(E(`${g("\u2570")}${g(T)}${g("\u256F")}`)),v}function Rn({width:e,palette:t,platformKey:r="telegram",tokenLength:n=0,error:o=""}={}){let s=Math.max(40,Math.floor(Number(e)||80)),i=Math.max(36,Math.min(s-4,72)),a=Math.max(0,Math.floor((s-i)/2)),c=Math.max(0,i-4),l=" ".repeat(a),u=v=>t.fg($.banner_border,v),w=v=>`${l}${v}`,g=(v="")=>w(`${u("\u2502")} ${Ue(v,c)} ${u("\u2502")}`),E="\u2500".repeat(Math.max(0,i-2)),S=n>0?"\u2022".repeat(Math.min(n,40)):t.fg($.banner_dim,"paste token here (hidden)");return[w(`${u("\u256D")}${u(E)}${u("\u256E")}`),g(t.bold(t.fg($.accent,`setup \xB7 ${r}`))),g(u("\u2500".repeat(c))),g(t.fg($.banner_dim,"token stays local \xB7 never echoed \xB7 never sent to chat")),g(""),g(`${t.fg($.banner_dim,"token")}  ${S}`),g(n?t.fg($.banner_dim,`       ${n} characters`):""),g(o?t.fg($.warn,o):""),g(t.fg($.banner_dim,"type or paste   backspace   enter save   esc cancel")),w(`${u("\u2570")}${u(E)}${u("\u256F")}`)]}function Pn({width:e,palette:t,title:r,subtitle:n,index:o=0,yesLabel:s="yes",noLabel:i="not now"}={}){return Ke({width:e,palette:t,title:r,subtitle:n,rows:[{id:"yes",label:s,note:"",status:""},{id:"no",label:i,note:"",status:""}],index:o,footer:"\u2191/\u2193 move   enter select   esc skip"})}function tr(e){return String(e||"").replace(/\u001b\[[0-9;]*m/g,"")}function Xt(e){return tr(e).length}function ye(e){e.write("\x1B[2J\x1B[H")}function ve(e,t){ye(e),e.write(`${t.join(`
 `)}
 `)}function Zt(e){let t=de();if(!t?.bin)return{code:1,error:"hermes not found \u2014 install hermes or run oracle bootstrap"};let r=$n(t.bin,e,{stdio:"inherit",env:process.env});return{code:typeof r.status=="number"?r.status:1}}async function rr({stdin:e=process.stdin,stdout:t=process.stdout,env:r=process.env,palette:n,profile:o="oracle",startAt:s="menu",runAuth:i=c=>ge.run({argv:c}),restartGateway:a=!0}={}){if(e?.isTTY!==!0||t?.isTTY!==!0)return{completed:!1,actions:[],reason:"non-tty"};let c=Math.max(40,Number(t.columns||80)),l=[],u="menu",w=0,g=0,E=0,S="",T="",v="",A=null,W=Jt({profile:o}),B=Vt();String(s).startsWith("token:")?(v=String(s).slice(6),u="token"):s==="model"&&(u="model");let Q=Wt(),H=e.isRaw===!0;typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume();let k=()=>{u==="menu"?ve(t,Ke({width:c,palette:n,title:"oracle setup",subtitle:"\u2191\u2193 enter \xB7 model + telegram/discord/whatsapp",rows:W,index:w})):u==="model"?ve(t,Ke({width:c,palette:n,title:"sign in",subtitle:"subscription OAuth or API key",rows:B,index:g})):u==="token"?ve(t,Rn({width:c,palette:n,platformKey:v,tokenLength:S.length,error:T})):u==="confirm-gateway"?ve(t,Pn({width:c,palette:n,title:A?.title||"restart gateway?",subtitle:A?.subtitle||"applies bot tokens to the live bridge",index:E,yesLabel:"restart gateway now",noLabel:"later \u2014 oracle setup gateway restart"})):u==="notice"&&ve(t,Ke({width:c,palette:n,title:A?.title||"setup",subtitle:A?.subtitle||"",rows:[{id:"ok",label:"continue",note:"",status:""}],index:0,footer:"enter continue   esc menu"}))};k();let y=async p=>(typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),p);return new Promise(p=>{let f=null,m=!1,h=b=>{m||(m=!0,f&&clearTimeout(f),e.off("data",Oe),Promise.resolve(y(b)).then(p))},x=()=>{W=Jt({profile:o}),B=Vt()},C=async()=>{let b=S.trim();if(!b){T="empty token",k();return}T="checking token\u2026",k();let d={ok:!1,definitive:!1};try{d=await Be(v,b)}catch{d={ok:!1,definitive:!1}}if(!d.ok&&d.definitive){S="",T=d.error||"platform rejected this token",k();return}try{let _=Me(o,v,b);te({lastPlatform:v,profile:o,ready:!0}),l.push(`token:${v}${d.ok?":verified":""}`),S="",T="";let O=!1;try{O=de().ok===!0}catch{O=!1}let pt=d.username?` \xB7 bot ${d.username}`:"";O?(A={title:`${v} saved${pt}`,subtitle:d.ok?`token verified live \xB7 ${_.path}`:`wrote credentials \xB7 ${_.path}`},E=0,u=a?"confirm-gateway":"menu"):(A={title:`${v} token saved${pt}`,subtitle:"next: install the messaging runtime (menu row) so the bot can answer"},E=0,u="notice"),x(),k()}catch(_){T=_?.message||"save failed",S="",k()}},N=async b=>{if(!b||b.action==="done"){h({completed:!0,actions:l});return}if(b.action==="model"){u="model",g=0,k();return}if(b.action==="token"){v=b.id,S="",T="",u="token",k();return}if(b.action==="bootstrap"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(`installing messaging runtime (one-time, a few minutes)\u2026
@@ -31,8 +31,8 @@ var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&
 `:`restarting gateway\u2026
 `);let _=Zt(["-p",o,"gateway",d]);l.push(`gateway:${d}:${_.code}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),A={title:_.code===0?d==="install"?"boot service installed":"gateway restarted":`gateway ${d} failed`,subtitle:_.code===0?d==="install"?"bot survives reboots now":"channels should be live":_.error||`exit ${_.code}`},u="notice",k()}},ze=async b=>{if(!b||b.action==="back"){u="menu",k();return}typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t);let d=b.kind==="oauth"?["login",b.id]:["api-key",b.id];t.write(`connecting ${b.label}\u2026
 `);let _=1;try{_=await i(d)}catch(O){t.write(`${O?.message||O}
-`),_=1}l.push(`model:${b.id}:${_}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),u="menu",k()},Y=b=>{for(let d of b){if(d.ctrl&&d.name==="c"){h({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(d.name==="escape"){S="",T="",u="menu",k();continue}if(d.name==="return"){C();continue}if(d.name==="backspace"||d.sequence==="\x7F"||d.sequence==="\b"){S=S.slice(0,-1),T="",k();continue}let O=d.sequence||"";if(O&&!d.ctrl&&!d.meta&&O!=="\x1B"){if(O.startsWith("\x1B"))continue;S+=O,T="",k()}continue}if(u==="confirm-gateway"){if(d.name==="up"||d.name==="down"){E=E===0?1:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&(E===0?N({action:"gateway",id:"gateway"}):(u="menu",k()));continue}if(u==="notice"){(d.name==="return"||d.name==="escape")&&(u="menu",k());continue}if(u==="model"){let O=B.length;if(d.name==="up"){g=O?(g-1+O)%O:0,k();continue}if(d.name==="down"){g=O?(g+1)%O:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&ze(B[g]);continue}let _=W.length;if(d.name==="up"){w=_?(w-1+_)%_:0,k();continue}if(d.name==="down"){w=_?(w+1)%_:0,k();continue}if(d.name==="escape"){h({completed:!0,actions:l,reason:"esc"});continue}d.name==="return"&&N(W[w])}},Oe=b=>{Y(Q.push(b)),f&&(clearTimeout(f),f=null),Q.pending>0&&(f=setTimeout(()=>{f=null,Y(Q.flush())},30),typeof f.unref=="function"&&f.unref())};e.on("data",Oe)})}var _e=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),Ae=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),He=Object.freeze([..._e.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...Ae.map((e,t)=>({n:_e.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:_e.length+Ae.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:_e.length+Ae.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:_e.length+Ae.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function Ln(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=He.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function sr(e="sign in",t=0){let r=Fe[t]||Fe[0];return["",`${r[0]}      oracle`,`${r[1]}     ${e}`,r[2],r[3],r[4],""].join(`
-`)}async function Cn(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<Fe.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${sr("sign in",r)}
+`),_=1}l.push(`model:${b.id}:${_}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),u="menu",k()},Y=b=>{for(let d of b){if(d.ctrl&&d.name==="c"){h({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(d.name==="escape"){S="",T="",u="menu",k();continue}if(d.name==="return"){C();continue}if(d.name==="backspace"||d.sequence==="\x7F"||d.sequence==="\b"){S=S.slice(0,-1),T="",k();continue}let O=d.sequence||"";if(O&&!d.ctrl&&!d.meta&&O!=="\x1B"){if(O.startsWith("\x1B"))continue;S+=O,T="",k()}continue}if(u==="confirm-gateway"){if(d.name==="up"||d.name==="down"){E=E===0?1:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&(E===0?N({action:"gateway",id:"gateway"}):(u="menu",k()));continue}if(u==="notice"){(d.name==="return"||d.name==="escape")&&(u="menu",k());continue}if(u==="model"){let O=B.length;if(d.name==="up"){g=O?(g-1+O)%O:0,k();continue}if(d.name==="down"){g=O?(g+1)%O:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&ze(B[g]);continue}let _=W.length;if(d.name==="up"){w=_?(w-1+_)%_:0,k();continue}if(d.name==="down"){w=_?(w+1)%_:0,k();continue}if(d.name==="escape"){h({completed:!0,actions:l,reason:"esc"});continue}d.name==="return"&&N(W[w])}},Oe=b=>{Y(Q.push(b)),f&&(clearTimeout(f),f=null),Q.pending>0&&(f=setTimeout(()=>{f=null,Y(Q.flush())},30),typeof f.unref=="function"&&f.unref())};e.on("data",Oe)})}var _e=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),Ae=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),He=Object.freeze([..._e.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...Ae.map((e,t)=>({n:_e.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:_e.length+Ae.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:_e.length+Ae.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:_e.length+Ae.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function Ln(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=He.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function sr(e="sign in",t=0){let r=De[t]||De[0];return["",`${r[0]}      oracle`,`${r[1]}     ${e}`,r[2],r[3],r[4],""].join(`
+`)}async function Cn(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<De.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${sr("sign in",r)}
 `),await t(90)}async function $s({stdin:e=process.stdin,stdout:t=process.stdout,readLine:r,runAuth:n=o=>ge.run({argv:o})}={}){if(await Cn(t),t.write(`${Ee()}
 `),t.write(`number or name  \xB7  enter skips
 `),e.isTTY!==!0||t.isTTY!==!0)return{skipped:!0,reason:"non-tty"};t.write("> ");let o=r?await r():await new Promise(c=>{let l="",u=w=>{l+=String(w),(l.includes(`
@@ -46,7 +46,7 @@ Detect: oracle harness detect
 `),1;let o=In(n.bin,e,{stdio:t?"inherit":"pipe",encoding:"utf8",env:r});return o.error?(process.stderr.write(`oracle setup: failed to run hermes: ${o.error.message}
 `),1):(t||(o.stdout&&process.stdout.write(o.stdout),o.stderr&&process.stderr.write(o.stderr)),typeof o.status=="number"?o.status:1)}async function or(e){if(!Z.isTTY||typeof Z.setRawMode!="function"){let t=new Error("interactive token entry requires a tty");throw t.code="NO_TTY",t}return nr.write(`${e}: `),new Promise((t,r)=>{let n="",o=()=>{Z.off("data",s),Z.setRawMode(!1),Z.pause(),nr.write(`
 `)},s=i=>{for(let a of String(i)){if(a==="\r"||a===`
-`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};Z.setRawMode(!0),Z.resume(),Z.on("data",s)})}async function Dn(e,t,r=[]){let n=ee(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
+`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};Z.setRawMode(!0),Z.resume(),Z.on("data",s)})}async function Fn(e,t,r=[]){let n=ee(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
 `),process.stderr.write(`known: ${ae().map(c=>c.key).join(", ")}
 `),1;if(!n.required.length)return process.stdout.write(`opening hermes setup for ${n.key} (interactive)
 `),te({lastPlatform:n.key,profile:e}),dt(["-p",e,...n.hermes||["gateway","setup"]]);let o={},s=[];for(let c=0;c<r.length;c++){let l=r[c];if(l==="--token"&&r[c+1]){o.token=r[++c];continue}if(l==="--allowed-users"&&r[c+1]){o.allowedUsers=r[++c];continue}if(l==="--app-token"&&r[c+1]){o.appToken=r[++c];continue}if(l.startsWith("-"))return process.stderr.write(`oracle setup: unknown flag ${l}
@@ -64,13 +64,13 @@ next: oracle setup gateway restart
 `),0;if(["menu","list","ls"].includes(s)){if(r)return process.stdout.write(JSON.stringify({...ue(n),modelAuth:q().status()},null,2)+`
 `),0;if(process.stdin.isTTY===!0&&process.stdout.isTTY===!0&&!process.env.ORACLE_SETUP_PLAIN){let a=await rr({profile:n,palette:ut({color:process.stdout.isTTY!==!1})});return a?.completed===!1&&a?.reason==="non-tty"?1:0}return process.stdout.write(Ee()),process.stdout.write(Te(n)),0}if(["status","show"].includes(s)){let a=ue(n);return r?process.stdout.write(JSON.stringify({...a,modelAuth:q().status()},null,2)+`
 `):(process.stdout.write(Ee()),process.stdout.write(Te(n)),process.stdout.write(`hermes root: ${be()}
-`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(Ee()),0;if(a==="local"||a==="ollama"){let l=De({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
+`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(Ee()),0;if(a==="local"||a==="ollama"){let l=Fe({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
 loopback, no API key
 `),0}if(Ae.some(c=>c.id===a)||a==="custom")return ge.run({...e,argv:["api-key",a,...i.slice(1)]});try{return X(a),ge.run({...e,argv:["login",a,...i.slice(1)]})}catch(c){return process.stderr.write(`oracle setup model: ${c.message}
 `),process.stderr.write(Ee()),1}}if(["messaging","gateway-setup","platforms"].includes(s))return te({lastAction:"messaging",profile:n}),process.stdout.write(`opening hermes gateway setup wizard...
 `),dt(["-p",n,"gateway","setup"]);if(s==="gateway"){let a=(i[0]||"status").toLowerCase();return["status","start","stop","restart","run","install"].includes(a)?dt(["-p",n,"gateway",a]):(process.stderr.write(`usage: oracle setup gateway [status|start|stop|restart|run|install]
 `),1)}if(s==="profile"){let a=i[0]||n;return process.stdout.write(`profile: ${a}
 hermes: ${be()}/profiles/${a}
-`),process.stdout.write(Te(a)),0}return ee(s)?Dn(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
+`),process.stdout.write(Te(a)),0}return ee(s)?Fn(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
 ${ft()}
 `),1)}};export{He as SETUP_CHOICES,Ts as default,Ee as renderModelSetup,Ln as resolveSetupChoice,$s as runFirstRunModelSetup};

package/dist/cli/commands/sign.mjs

@@ -1,7 +1,7 @@
-var Xe=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t=[r],r}};import R from"node:fs";import Ze from"node:os";import x from"node:path";import{fileURLToPath as Qe}from"node:url";function ue(){return process.env.ORACLE_FAKE_HOME||Ze.homedir()}function tt(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function $(){return tt()?process.env.ORACLE_CONFIG_DIR||x.join(ue(),".config","oracle"):x.join(ue(),".config","oracle")}function rt(){return x.join($(),"desk.json")}function nt(){return x.join($(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let n={},t=(i,o)=>{if(o==null)return;let a=String(o).trim();a&&(process.env[i]!=null&&String(process.env[i]).trim()!==""||(process.env[i]=a,n[i]=a))};try{let i=nt();if(R.existsSync(i))for(let o of R.readFileSync(i,"utf8").split(/\r?\n/)){let a=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let l=a[2];(l.startsWith('"')&&l.endsWith('"')||l.startsWith("'")&&l.endsWith("'"))&&(l=l.slice(1,-1)),t(a[1],l)}}catch{}try{let i=rt();if(R.existsSync(i)){let o=JSON.parse(R.readFileSync(i,"utf8"));o&&typeof o=="object"&&(t("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),t("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),t("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),t("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),t("ORACLE_EXEC_URL",o.execUrl),t("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(t("ORACLE_DESK_URL",r),t("ORACLE_DATA_URL",r),t("ORACLE_API_URL",r),t("ORACLE_PUBLIC_URL",r),t("MAD_DESK_URL",r)),E._result=Object.keys(n).length?n:null,E._result}var et,Rr,de=Xe(()=>{et=x.dirname(Qe(import.meta.url)),Rr=x.resolve(et,"../..");try{E()}catch{}});de();import m from"node:fs";import M from"node:path";import{createCipheriv as ot,createDecipheriv as it,randomBytes as O,scryptSync as st}from"node:crypto";import s from"node:fs";import p from"node:path";var fe="ORACLE-LOCAL-VAULT",pe=1,k=Object.freeze({N:1<<17,r:8,p:1}),at=256*1024*1024,ct=16*1024;function P(e,n,t,{max:r=n}={}){if(typeof e!="string"||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`local-vault: invalid ${t} encoding`);let i=Buffer.from(e,"base64");if(i.toString("base64")!==e||i.length<n||i.length>r)throw new Error(`local-vault: invalid ${t} length`);return i}function me(e,n,t=k){let r=String(e??"");if(r.length<12)throw new Error("local-vault: passphrase must be at least 12 characters");if(r.includes("\0"))throw new Error("local-vault: refusing zeroed passphrase material");return st(r,n,32,{...t,maxmem:at})}function we(e,n,t={}){let r=Buffer.isBuffer(e)?Buffer.from(e):Buffer.from(String(e));if(!r.length)throw new Error("local-vault: refusing empty key material");let i=O(32),o=O(12),a={magic:fe,version:pe,kdf:{name:"scrypt",...k,salt:i.toString("base64")},cipher:{name:"aes-256-gcm",iv:o.toString("base64")},meta:{address:t.address?String(t.address).toLowerCase():null,addresses:t.addresses||void 0,kind:t.kind||"evm",createdAt:new Date().toISOString()}},l=me(n,i);try{let f=ot("aes-256-gcm",l,o);f.setAAD(Buffer.from(JSON.stringify(a)));let c=Buffer.concat([f.update(r),f.final()]);return{...a,ciphertext:c.toString("base64"),tag:f.getAuthTag().toString("base64")}}finally{l.fill(0),r.fill(0)}}function T(e,n){if(e?.magic!==fe||e?.version!==pe)throw new Error("local-vault: unsupported vault file");if(e?.kdf?.name!=="scrypt"||e?.cipher?.name!=="aes-256-gcm")throw new Error("local-vault: unsupported cryptography");if(e.kdf.N!==k.N||e.kdf.r!==k.r||e.kdf.p!==k.p)throw new Error("local-vault: unsupported KDF parameters");if(Object.keys(e.kdf).sort().join(",")!=="N,name,p,r,salt"||Object.keys(e.cipher).sort().join(",")!=="iv,name")throw new Error("local-vault: unexpected cryptography field");if(!e.meta||Object.keys(e.meta).some(u=>!["address","addresses","kind","createdAt"].includes(u))||String(e.meta.kind||"").length>16||String(e.meta.address||"").length>128||JSON.stringify(e.meta.addresses||{}).length>1024||!Number.isFinite(Date.parse(e.meta.createdAt)))throw new Error("local-vault: invalid metadata");let t=["magic","version","kdf","cipher","meta","ciphertext","tag"];if(Object.keys(e).some(u=>!t.includes(u)))throw new Error("local-vault: unexpected vault field");let r=P(e.kdf.salt,32,"salt"),i=P(e.cipher.iv,12,"iv"),o=P(e.tag,16,"tag"),a=P(e.ciphertext,1,"ciphertext",{max:ct}),{ciphertext:l,tag:f,...c}=e,d=me(n,r);try{let u=it("aes-256-gcm",d,i);return u.setAAD(Buffer.from(JSON.stringify(c))),u.setAuthTag(o),Buffer.concat([u.update(a),u.final()])}catch{throw new Error("local-vault: wrong passphrase or tampered vault")}finally{d.fill(0)}}function lt(e){if(!e.isFile())throw new Error("local-vault: secret source must be a regular file");if(e.uid!==process.getuid?.())throw new Error("local-vault: secret source must be owned by this user");if(e.nlink!==1)throw new Error("local-vault: refusing hard-linked secret source");if((e.mode&63)!==0)throw new Error("local-vault: secret source must be owner-only (0600)")}function z(e){let n=p.dirname(e),t=s.lstatSync(n);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("local-vault: unsafe destination directory");if(t.uid!==process.getuid?.())throw new Error("local-vault: destination directory must be owned by this user");if((t.mode&63)!==0)throw new Error("local-vault: destination directory must be owner-only (0700)");try{let r=s.lstatSync(e);if(r.isSymbolicLink())throw new Error("local-vault: refusing symlink destination");if(!r.isFile()||r.uid!==process.getuid?.()||r.nlink!==1)throw new Error("local-vault: unsafe destination file");if(r.dev!==t.dev)throw new Error("local-vault: destination device mismatch")}catch(r){if(r.code!=="ENOENT")throw r}}function h(e){let n;try{n=s.openSync(e,s.constants.O_RDONLY|s.constants.O_NOFOLLOW)}catch(t){throw t.code==="ELOOP"?new Error("local-vault: refusing symlink"):t}try{let t=s.fstatSync(n);if(lt(t),t.size>1024*1024)throw new Error("local-vault: secret source changed or is too large");let r=s.lstatSync(e);if(r.isSymbolicLink()||r.dev!==t.dev||r.ino!==t.ino)throw new Error("local-vault: secret source changed or is too large");return s.readFileSync(n,"utf8").replace(/[\r\n]+$/,"")}finally{s.closeSync(n)}}function N(e){return JSON.parse(h(e))}function he(e,n){s.mkdirSync(p.dirname(e),{recursive:!0,mode:448}),z(e);let t=p.join(p.dirname(e),`.${p.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`),r;try{r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384),s.writeFileSync(r,JSON.stringify(n,null,2)+`
-`),s.fsyncSync(r),s.closeSync(r),r=void 0;let i=s.openSync(t,s.constants.O_RDONLY|s.constants.O_NOFOLLOW),o;try{o=s.fstatSync(i)}finally{s.closeSync(i)}let a=s.lstatSync(p.dirname(e));if(o.nlink!==1||o.dev!==a.dev||o.uid!==process.getuid?.())throw new Error("local-vault: unsafe temporary file");s.renameSync(t,e),s.chmodSync(e,384);let l=s.openSync(p.dirname(e),"r");try{s.fsyncSync(l)}finally{s.closeSync(l)}}catch(i){if(r!==void 0)try{s.closeSync(r)}catch{}try{s.unlinkSync(t)}catch{}throw i}return e}function g(e,n){s.mkdirSync(p.dirname(e),{recursive:!0,mode:448}),z(e);let t=p.join(p.dirname(e),`.${p.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`);try{let r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384);try{s.writeFileSync(r,String(n)),s.fsyncSync(r)}finally{s.closeSync(r)}s.renameSync(t,e),s.chmodSync(e,384);let i=s.openSync(p.dirname(e),"r");try{s.fsyncSync(i)}finally{s.closeSync(i)}}catch(r){try{s.unlinkSync(t)}catch{}throw r}}function ut(e,n){try{s.linkSync(e,n)}catch(r){throw r?.code==="EEXIST"?new Error("export destination already exists; choose a new owner-only file"):r}s.chmodSync(n,384),s.unlinkSync(e);let t=s.openSync(p.dirname(n),"r");try{s.fsyncSync(t)}finally{s.closeSync(t)}}function ge(e,n){s.mkdirSync(p.dirname(e),{recursive:!0,mode:448}),z(e);let t=p.join(p.dirname(e),`.${p.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`),r;try{r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384),s.writeFileSync(r,String(n)),s.fsyncSync(r),s.closeSync(r),r=void 0,ut(t,e)}catch(i){if(r!==void 0)try{s.closeSync(r)}catch{}try{s.unlinkSync(t)}catch{}throw i}}import w from"node:path";import Er from"node:os";import{createHash as xr,randomBytes as Hu}from"node:crypto";import{Interface as se,keccak256 as Wu}from"ethers";import{Transaction as Vu}from"@scure/btc-signer";import{ed25519 as Ju}from"@noble/curves/ed25519.js";import{base58 as ws}from"@scure/base";import{Interface as Ae}from"ethers";import{Interface as wt,MaxUint256 as yn,isAddress as bn,keccak256 as En,toUtf8Bytes as xn}from"ethers";import{Interface as pt,isAddress as Zr}from"ethers";import{isAddress as Vr}from"ethers";var rn=new pt(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as mt,isAddress as sn}from"ethers";var un=new mt(["function approve(address spender,uint256 amount) returns (bool)"]),dn=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});var On=new wt(["function approve(address spender,uint256 amount) returns (bool)"]);var Nn=300*1e3,Cn=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();import{Address as Pn,NETWORK as Bn,OutScript as Dn,RawTx as Fn,SigHash as jn,TEST_NETWORK as qn,Transaction as Mn}from"@scure/btc-signer";import{createHash as ht}from"node:crypto";import{base58 as Un}from"@scure/base";import{getCompiledTransactionMessageDecoder as Kn}from"@solana/transaction-messages";var ye=e=>ht("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Jn=new Map([[ye("route"),{name:"route",prefixBytes:0}],[ye("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]);var ro=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,no=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,oo=AbortSignal.prototype.throwIfAborted,io=EventTarget.prototype.addEventListener,so=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null;var ao=64*1024,co=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});var bo=Object.freeze({tradexyz:"xyz",ventuals:"vntl",hypernova:"hyna",paradex:"para",entropy:"io",entropyio:"io"});var vo=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),Io=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"});var To="0x"+"00".repeat(32);var yt=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),Ro=Object.freeze(yt.map(e=>e[0]));import{TypedDataEncoder as ui,getAddress as di}from"ethers";import{TypedDataEncoder as Fo,getAddress as jo,isAddress as qo}from"ethers";var Et=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),xt=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as Xo,getAddress as Zo,isAddress as Qo}from"ethers";var zo=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var St=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),si=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var At=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),ai=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var mi=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]);var Nt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var _i=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0});var Ct=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Li=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),Ri=new Ae(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),$i=new Ae(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Pi=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var _t=Object.freeze([...Nt]),Bi=Object.freeze({...Ct});import{ed25519 as Zi}from"@noble/curves/ed25519.js";import{base58 as es}from"@scure/base";import{RawTx as rs,SigHash as ns,Transaction as os}from"@scure/btc-signer";import{Transaction as ss,keccak256 as as,verifyTypedData as cs}from"ethers";import{encode as ji}from"@msgpack/msgpack";import{keccak256 as Mi,verifyTypedData as Hi}from"ethers";var zi=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Wi=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});import{closeSync as _s,constants as Pt,fchmodSync as Ls,fsyncSync as Rs,lstatSync as $s,mkdirSync as Ps,openSync as Bs,readFileSync as Ds,renameSync as Fs,rmSync as js,writeFileSync as qs}from"node:fs";import{wordlists as Ts}from"ethers";var zs=Pt.O_NOFOLLOW??0;import{wordlists as Vs}from"ethers";var ve=64*1024;var Js=32*1024;var Ft=["schemaVersion","buildVersion","recordType","execution","custody"],Xs=[...Ft,"recordHash"];var Zs=Object.freeze({signed:new Set(["workflow.signed","legacy.signed"]),submitted:new Set(["workflow.submitted","legacy.broadcast"]),finalized:new Set(["workflow.finalized"]),reorged:new Set(["workflow.reorged"]),orphaned:new Set(["workflow.orphaned"]),compensating:new Set(["workflow.compensating"]),compensated:new Set(["workflow.compensated"])});var jt=Object.freeze(["draft","checked","approval","signed","submitted","finalized","reorged","orphaned","compensating","compensated","failed","cancelled"]),Re=Object.freeze(["workflow.drafted","workflow.checked","workflow.approval_requested","workflow.approval_granted","workflow.signed","workflow.submitted","workflow.finalized","workflow.reorged","workflow.orphaned","workflow.compensating","workflow.compensated","workflow.failed","workflow.cancelled","workflow.annotated"]),na=new Set(Re);var Ut=64*1024*1024;var ua=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),da=Object.freeze(["read","simulate"]);var fa=1440*60;var xa=Object.freeze(["privkey","wif","xprv","seed"]);var Sa=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),Aa=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);var Q=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),Oa=Object.freeze(Object.fromEntries(Q.map((e,n)=>[e,Object.freeze(n+1<Q.length?[Q[n+1]]:[])])));var Vt=Object.freeze({intent:"draft",quote_comparison:"draft",simulation:"draft",prepared:"checked",approval:"approval",signed:"signed",broadcast:"submitted",settlement:"finalized",balance_delta:"compensated",position:"compensated"});var Jt=Object.freeze(["owner","operator","agent","viewer"]),Gt=Object.freeze(["tenant","config","policy","grant","workflow","trade","receipt","audit","telemetry","context","lifecycle"]),Yt=Object.freeze({read:"read",create:"create",update:"update",delete:"delete",manage:"manage",prepare:"prepare",cancel:"cancel",export:"export",approve:"approve"}),dc=Object.freeze(["owner"]),fc=Object.freeze({ALLOW_ROLE_PERMISSION:"allow.role_permission",DENY_MISSING_CONTEXT:"deny.missing_context",DENY_INVALID_CONTEXT:"deny.invalid_context",DENY_INVALID_REQUEST:"deny.invalid_request",DENY_UNKNOWN_RESOURCE:"deny.unknown_resource",DENY_UNKNOWN_ACTION:"deny.unknown_action",DENY_UNBOUND_OBJECT:"deny.unbound_object",DENY_TENANT_MISMATCH:"deny.tenant_mismatch",DENY_RESOURCE_MISMATCH:"deny.resource_mismatch",DENY_ROLE_PERMISSION:"deny.role_permission",DENY_POLICY_NOT_APPROVER:"deny.policy_not_approver"}),pc=new Set(Jt),mc=new Set(Gt),wc=new Set(Object.values(Yt));var Xt=Object.freeze({owner:Object.freeze(["tenant:read","tenant:manage","config:read","config:manage","policy:read","policy:manage","grant:read","grant:create","grant:update","grant:delete","grant:manage","workflow:read","workflow:create","workflow:update","workflow:delete","workflow:cancel","workflow:approve","trade:read","trade:prepare","receipt:read","receipt:export","audit:read","audit:export","telemetry:read","telemetry:create","telemetry:export","context:read","context:create","context:update","context:delete","context:manage","context:export","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:delete","lifecycle:manage","lifecycle:approve","lifecycle:export"]),operator:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","workflow:cancel","trade:read","trade:prepare","receipt:read","audit:read","telemetry:read","telemetry:create","context:read","context:create","context:update","context:delete","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:manage"]),agent:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","trade:read","trade:prepare","receipt:read","telemetry:create","context:read","context:create","context:update","lifecycle:read"]),viewer:Object.freeze(["tenant:read","config:read","grant:read","workflow:read","trade:read","receipt:read","audit:read","telemetry:read","context:read","lifecycle:read"])}),hc=Object.freeze(Object.fromEntries(Object.entries(Xt).map(([e,n])=>[e,Object.freeze([...n])])));var Zt=Object.freeze(["succeeded","denied","invalid","failed","cancelled","timed_out","unavailable","skipped"]),Qt=Object.freeze(["workflow","task","intent","plan","run","event","eval"]),er=Object.freeze(["taskId","intentId","planId","runId","eventId"]);var Ec=Object.freeze({maxAttributes:24,maxKeyLength:48,maxStringLength:256,maxArrayLength:8}),xc=new Set(Zt),Sc=new Set(Qt),Ac=new Set(er);var vc=Object.freeze(["authorization","bearer","cookie","credential","password","passphrase","secret","token","privatekey","privkey","seed","mnemonic","keystore","signature","prompt","systemmessage","usermessage","assistantmessage","rawtransaction","signedtransaction","serializedtransaction","transactionbytes","calldata","callbytes","inputdata"]);var Ic=Object.freeze({taskId:"x-oracle-task-id",intentId:"x-oracle-intent-id",planId:"x-oracle-plan-id",runId:"x-oracle-run-id",eventId:"x-oracle-event-id"});var _c=Object.freeze({"workflow.cancelled":"cancelled","workflow.failed":"failed"});var Dc=32*1024*1024;var jc=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}});import{createHmac as rr,randomBytes as Qc,timingSafeEqual as nr}from"node:crypto";import or from"node:fs";import S from"node:path";import{homedir as ee}from"node:os";import{join as te}from"node:path";var $e=process.env.ORACLE_PUBLIC_DESKTOP==="1",tr=$e?process.env.ORACLE_CONFIG_DIR||te(ee(),".config","oracle"):te(ee(),".config","oracle"),zc=$e?tr:te(ee(),".config","mad-desk");var Jc="0".repeat(64),Gc=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"});function F(e){return e==null?"null":typeof e!="object"?JSON.stringify(e):Array.isArray(e)?"["+e.map(F).join(",")+"]":"{"+Object.keys(e).sort().map(t=>JSON.stringify(t)+":"+F(e[t])).join(",")+"}"}var Yc=Promise.resolve();function ir(e,n){if(!e)throw new Error("ledger: separate freshness anchor required");let t=a=>{try{return or.realpathSync(a)}catch{return S.resolve(a)}},r=t(S.dirname(S.resolve(e))),i=t(S.dirname(S.resolve(n))),o=(a,l)=>l===a||l.startsWith(a+S.sep);if(o(r,i)||o(i,r))throw new Error("ledger: separate freshness anchor required")}var re=(e,n)=>rr("sha256",n).update(F(e)).digest("hex"),sr=(e,n)=>{let t=Buffer.from(String(e)),r=Buffer.from(String(n));return t.length===r.length&&nr(t,r)};function ar(e,n,{sequence:t}={}){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("policy: object required");let r=t===void 0?e:{...e,policySequence:Number(t)};return{policy:r,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:re(r,n)}}}function Pe(e,n){if(!e)throw new Error("policy: sequence anchor required");let t;try{t=h(e)}catch{return{sequence:0,present:!1}}let r;try{r=JSON.parse(t)}catch{throw new Error("policy: sequence anchor is unreadable")}if(!sr(r?.integrity?.mac,re(r?.marker,n)))throw new Error("policy: sequence anchor integrity failed");return{sequence:Number(r?.marker?.policySequence||0),policyMac:r?.marker?.policyMac??null,present:!0,ledgerInitialized:r?.marker?.ledgerInitialized===!0}}function cr(e,n,t,r=null,{ledgerInitialized:i}={}){if(r==null||!String(r))throw new Error("policy: sequence anchor must bind the sealed policy MAC");let o=i===!0;if(i===void 0)try{let l=Pe(e,t);o=l.present&&l.ledgerInitialized===!0}catch{o=!1}let a={policySequence:Number(n),policyMac:String(r)};o&&(a.ledgerInitialized=!0),g(e,JSON.stringify({marker:a,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:re(a,t)}})+`
+var Xe=(e,n,t)=>()=>{if(t)throw t[0];try{return e&&(n=e(e=0)),n}catch(r){throw t=[r],r}};import L from"node:fs";import Ze from"node:os";import x from"node:path";import{fileURLToPath as Qe}from"node:url";function ue(){return process.env.ORACLE_FAKE_HOME||Ze.homedir()}function tt(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function $(){return tt()?process.env.ORACLE_CONFIG_DIR||x.join(ue(),".config","oracle"):x.join(ue(),".config","oracle")}function rt(){return x.join($(),"desk.json")}function nt(){return x.join($(),"env")}function E({force:e=!1}={}){if(E._done&&!e)return E._result||null;E._done=!0;let n={},t=(i,o)=>{if(o==null)return;let a=String(o).trim();a&&(process.env[i]!=null&&String(process.env[i]).trim()!==""||(process.env[i]=a,n[i]=a))};try{let i=nt();if(L.existsSync(i))for(let o of L.readFileSync(i,"utf8").split(/\r?\n/)){let a=o.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!a||a[2].startsWith("#"))continue;let l=a[2];(l.startsWith('"')&&l.endsWith('"')||l.startsWith("'")&&l.endsWith("'"))&&(l=l.slice(1,-1)),t(a[1],l)}}catch{}try{let i=rt();if(L.existsSync(i)){let o=JSON.parse(L.readFileSync(i,"utf8"));o&&typeof o=="object"&&(t("ORACLE_DESK_URL",o.deskUrl||o.dataUrl||o.url),t("ORACLE_DATA_URL",o.dataUrl||o.deskUrl||o.url),t("ORACLE_API_URL",o.apiUrl||o.dataUrl||o.deskUrl),t("ORACLE_PUBLIC_URL",o.publicUrl||o.deskUrl||o.dataUrl),t("ORACLE_EXEC_URL",o.execUrl),t("MAD_DESK_URL",o.deskUrl||o.dataUrl))}}catch{}let r=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return r&&(t("ORACLE_DESK_URL",r),t("ORACLE_DATA_URL",r),t("ORACLE_API_URL",r),t("ORACLE_PUBLIC_URL",r),t("MAD_DESK_URL",r)),E._result=Object.keys(n).length?n:null,E._result}var et,Lr,de=Xe(()=>{et=x.dirname(Qe(import.meta.url)),Lr=x.resolve(et,"../..");try{E()}catch{}});de();import m from"node:fs";import M from"node:path";import{createCipheriv as ot,createDecipheriv as it,randomBytes as O,scryptSync as st}from"node:crypto";import s from"node:fs";import p from"node:path";var fe="ORACLE-LOCAL-VAULT",pe=1,k=Object.freeze({N:1<<17,r:8,p:1}),at=256*1024*1024,ct=16*1024;function P(e,n,t,{max:r=n}={}){if(typeof e!="string"||!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e))throw new Error(`local-vault: invalid ${t} encoding`);let i=Buffer.from(e,"base64");if(i.toString("base64")!==e||i.length<n||i.length>r)throw new Error(`local-vault: invalid ${t} length`);return i}function me(e,n,t=k){let r=String(e??"");if(r.length<12)throw new Error("local-vault: passphrase must be at least 12 characters");if(r.includes("\0"))throw new Error("local-vault: refusing zeroed passphrase material");return st(r,n,32,{...t,maxmem:at})}function we(e,n,t={}){let r=Buffer.isBuffer(e)?Buffer.from(e):Buffer.from(String(e));if(!r.length)throw new Error("local-vault: refusing empty key material");let i=O(32),o=O(12),a={magic:fe,version:pe,kdf:{name:"scrypt",...k,salt:i.toString("base64")},cipher:{name:"aes-256-gcm",iv:o.toString("base64")},meta:{address:t.address?String(t.address).toLowerCase():null,addresses:t.addresses||void 0,kind:t.kind||"evm",createdAt:new Date().toISOString()}},l=me(n,i);try{let f=ot("aes-256-gcm",l,o);f.setAAD(Buffer.from(JSON.stringify(a)));let c=Buffer.concat([f.update(r),f.final()]);return{...a,ciphertext:c.toString("base64"),tag:f.getAuthTag().toString("base64")}}finally{l.fill(0),r.fill(0)}}function T(e,n){if(e?.magic!==fe||e?.version!==pe)throw new Error("local-vault: unsupported vault file");if(e?.kdf?.name!=="scrypt"||e?.cipher?.name!=="aes-256-gcm")throw new Error("local-vault: unsupported cryptography");if(e.kdf.N!==k.N||e.kdf.r!==k.r||e.kdf.p!==k.p)throw new Error("local-vault: unsupported KDF parameters");if(Object.keys(e.kdf).sort().join(",")!=="N,name,p,r,salt"||Object.keys(e.cipher).sort().join(",")!=="iv,name")throw new Error("local-vault: unexpected cryptography field");if(!e.meta||Object.keys(e.meta).some(u=>!["address","addresses","kind","createdAt"].includes(u))||String(e.meta.kind||"").length>16||String(e.meta.address||"").length>128||JSON.stringify(e.meta.addresses||{}).length>1024||!Number.isFinite(Date.parse(e.meta.createdAt)))throw new Error("local-vault: invalid metadata");let t=["magic","version","kdf","cipher","meta","ciphertext","tag"];if(Object.keys(e).some(u=>!t.includes(u)))throw new Error("local-vault: unexpected vault field");let r=P(e.kdf.salt,32,"salt"),i=P(e.cipher.iv,12,"iv"),o=P(e.tag,16,"tag"),a=P(e.ciphertext,1,"ciphertext",{max:ct}),{ciphertext:l,tag:f,...c}=e,d=me(n,r);try{let u=it("aes-256-gcm",d,i);return u.setAAD(Buffer.from(JSON.stringify(c))),u.setAuthTag(o),Buffer.concat([u.update(a),u.final()])}catch{throw new Error("local-vault: wrong passphrase or tampered vault")}finally{d.fill(0)}}function lt(e){if(!e.isFile())throw new Error("local-vault: secret source must be a regular file");if(e.uid!==process.getuid?.())throw new Error("local-vault: secret source must be owned by this user");if(e.nlink!==1)throw new Error("local-vault: refusing hard-linked secret source");if((e.mode&63)!==0)throw new Error("local-vault: secret source must be owner-only (0600)")}function z(e){let n=p.dirname(e),t=s.lstatSync(n);if(!t.isDirectory()||t.isSymbolicLink())throw new Error("local-vault: unsafe destination directory");if(t.uid!==process.getuid?.())throw new Error("local-vault: destination directory must be owned by this user");if((t.mode&63)!==0)throw new Error("local-vault: destination directory must be owner-only (0700)");try{let r=s.lstatSync(e);if(r.isSymbolicLink())throw new Error("local-vault: refusing symlink destination");if(!r.isFile()||r.uid!==process.getuid?.()||r.nlink!==1)throw new Error("local-vault: unsafe destination file");if(r.dev!==t.dev)throw new Error("local-vault: destination device mismatch")}catch(r){if(r.code!=="ENOENT")throw r}}function h(e){let n;try{n=s.openSync(e,s.constants.O_RDONLY|s.constants.O_NOFOLLOW)}catch(t){throw t.code==="ELOOP"?new Error("local-vault: refusing symlink"):t}try{let t=s.fstatSync(n);if(lt(t),t.size>1024*1024)throw new Error("local-vault: secret source changed or is too large");let r=s.lstatSync(e);if(r.isSymbolicLink()||r.dev!==t.dev||r.ino!==t.ino)throw new Error("local-vault: secret source changed or is too large");return s.readFileSync(n,"utf8").replace(/[\r\n]+$/,"")}finally{s.closeSync(n)}}function N(e){return JSON.parse(h(e))}function he(e,n){s.mkdirSync(p.dirname(e),{recursive:!0,mode:448}),z(e);let t=p.join(p.dirname(e),`.${p.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`),r;try{r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384),s.writeFileSync(r,JSON.stringify(n,null,2)+`
+`),s.fsyncSync(r),s.closeSync(r),r=void 0;let i=s.openSync(t,s.constants.O_RDONLY|s.constants.O_NOFOLLOW),o;try{o=s.fstatSync(i)}finally{s.closeSync(i)}let a=s.lstatSync(p.dirname(e));if(o.nlink!==1||o.dev!==a.dev||o.uid!==process.getuid?.())throw new Error("local-vault: unsafe temporary file");s.renameSync(t,e),s.chmodSync(e,384);let l=s.openSync(p.dirname(e),"r");try{s.fsyncSync(l)}finally{s.closeSync(l)}}catch(i){if(r!==void 0)try{s.closeSync(r)}catch{}try{s.unlinkSync(t)}catch{}throw i}return e}function g(e,n){s.mkdirSync(p.dirname(e),{recursive:!0,mode:448}),z(e);let t=p.join(p.dirname(e),`.${p.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`);try{let r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384);try{s.writeFileSync(r,String(n)),s.fsyncSync(r)}finally{s.closeSync(r)}s.renameSync(t,e),s.chmodSync(e,384);let i=s.openSync(p.dirname(e),"r");try{s.fsyncSync(i)}finally{s.closeSync(i)}}catch(r){try{s.unlinkSync(t)}catch{}throw r}}function ut(e,n){try{s.linkSync(e,n)}catch(r){throw r?.code==="EEXIST"?new Error("export destination already exists; choose a new owner-only file"):r}s.chmodSync(n,384),s.unlinkSync(e);let t=s.openSync(p.dirname(n),"r");try{s.fsyncSync(t)}finally{s.closeSync(t)}}function ge(e,n){s.mkdirSync(p.dirname(e),{recursive:!0,mode:448}),z(e);let t=p.join(p.dirname(e),`.${p.basename(e)}.${process.pid}.${O(6).toString("hex")}.tmp`),r;try{r=s.openSync(t,s.constants.O_CREAT|s.constants.O_EXCL|s.constants.O_WRONLY|s.constants.O_NOFOLLOW,384),s.writeFileSync(r,String(n)),s.fsyncSync(r),s.closeSync(r),r=void 0,ut(t,e)}catch(i){if(r!==void 0)try{s.closeSync(r)}catch{}try{s.unlinkSync(t)}catch{}throw i}}import w from"node:path";import Er from"node:os";import{createHash as xr,randomBytes as zu}from"node:crypto";import{Interface as se,keccak256 as Uu}from"ethers";import{Transaction as Ku}from"@scure/btc-signer";import{ed25519 as Gu}from"@noble/curves/ed25519.js";import{base58 as hs}from"@scure/base";import{Interface as Ae}from"ethers";import{Interface as wt,MaxUint256 as yn,isAddress as bn,keccak256 as En,toUtf8Bytes as xn}from"ethers";import{Interface as pt,isAddress as Zr}from"ethers";import{isAddress as Vr}from"ethers";var rn=new pt(["function approve(address spender,uint256 amount) returns (bool)"]);import{Interface as mt,isAddress as sn}from"ethers";var un=new mt(["function approve(address spender,uint256 amount) returns (bool)"]),dn=Object.freeze({42161:"0x1c3fa76e6e1088bce750f23a5bfcffa1efef6a41",43114:"0x8f550e53dfe96c055d5bdb267c21f268fcaf63b2"});var On=new wt(["function approve(address spender,uint256 amount) returns (bool)"]);var Nn=300*1e3,Cn=(()=>{let e=Number(process.env.ORACLE_PREPARE_HARD_MAX_AGE_MS);return Number.isFinite(e)&&e>0?e:1800*1e3})();import{Address as Pn,NETWORK as Bn,OutScript as Dn,RawTx as Fn,SigHash as jn,TEST_NETWORK as qn,Transaction as Mn}from"@scure/btc-signer";import{createHash as ht}from"node:crypto";import{base58 as Un}from"@scure/base";import{getCompiledTransactionMessageDecoder as Kn}from"@solana/transaction-messages";var ye=e=>ht("sha256").update(`global:${e}`).digest().subarray(0,8).toString("hex"),Jn=new Map([[ye("route"),{name:"route",prefixBytes:0}],[ye("shared_accounts_route"),{name:"shared_accounts_route",prefixBytes:1}]]);var ro=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"aborted")?.get,no=Object.getOwnPropertyDescriptor(AbortSignal.prototype,"reason")?.get,oo=AbortSignal.prototype.throwIfAborted,io=EventTarget.prototype.addEventListener,so=EventTarget.prototype.removeEventListener,ao=typeof AbortSignal.any=="function"?AbortSignal.any.bind(AbortSignal):null;var co=64*1024,lo=Object.freeze({depth:32,nodes:1e4,fields:1e4,arrayLength:1e4,bytes:1024*1024});var Eo=Object.freeze({tradexyz:"xyz",ventuals:"vntl",hypernova:"hyna",paradex:"para",entropy:"io",entropyio:"io"});var Io=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"leverage","perp-isolated-margin":"margin","builder-fee-approval":"approveBuilder","hype-stake-deposit":"stake","hype-stake-withdraw":"unstake","hype-delegate":"delegate","hype-undelegate":"delegate"}),ko=Object.freeze({"perp-order":"order","hip3-order":"order","hip4-order":"order","perp-bracket":"order","perp-cancel":"cancel","perp-leverage":"updateLeverage","perp-isolated-margin":"updateIsolatedMargin","builder-fee-approval":"approveBuilderFee","hype-stake-deposit":"cDeposit","hype-stake-withdraw":"cWithdraw","hype-delegate":"tokenDelegate","hype-undelegate":"tokenDelegate"});var No="0x"+"00".repeat(32);var yt=Object.freeze([["salt","uint256"],["maker","address"],["signer","address"],["tokenId","uint256"],["makerAmount","uint256"],["takerAmount","uint256"],["side","uint8"],["signatureType","uint8"],["timestamp","uint256"],["metadata","bytes32"],["builder","bytes32"]]),$o=Object.freeze(yt.map(e=>e[0]));import{TypedDataEncoder as di,getAddress as fi}from"ethers";import{TypedDataEncoder as jo,getAddress as qo,isAddress as Mo}from"ethers";var Et=Object.freeze({1:"0x111111125421cA6dc452d289314280a0f8842A65",8453:"0x111111125421cA6dc452d289314280a0f8842A65",42161:"0x111111125421cA6dc452d289314280a0f8842A65",10:"0x111111125421cA6dc452d289314280a0f8842A65",137:"0x111111125421cA6dc452d289314280a0f8842A65",56:"0x111111125421cA6dc452d289314280a0f8842A65"}),xt=Object.freeze({Order:[{name:"salt",type:"uint256"},{name:"maker",type:"address"},{name:"receiver",type:"address"},{name:"makerAsset",type:"address"},{name:"takerAsset",type:"address"},{name:"makingAmount",type:"uint256"},{name:"takingAmount",type:"uint256"},{name:"makerTraits",type:"uint256"}]});import{TypedDataEncoder as Zo,getAddress as Qo,isAddress as ei}from"ethers";var Wo=Object.freeze({READ:"read",PREPARE:"prepare",EXECUTE:"execute",AUTONOMOUS:"autonomous"});var St=Object.freeze({1:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",100:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",42161:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41",8453:"0x9008D19f58AAbD9eD0D60971565AA8510560ab41"}),ai=Object.freeze({1:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",100:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",42161:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110",8453:"0xC92E8bdf79f0507f65a392b0ab4667716BFE0110"});var At=Object.freeze({Order:[{name:"sellToken",type:"address"},{name:"buyToken",type:"address"},{name:"receiver",type:"address"},{name:"sellAmount",type:"uint256"},{name:"buyAmount",type:"uint256"},{name:"validTo",type:"uint32"},{name:"appData",type:"bytes32"},{name:"feeAmount",type:"uint256"},{name:"kind",type:"string"},{name:"partiallyFillable",type:"bool"},{name:"sellTokenBalance",type:"string"},{name:"buyTokenBalance",type:"string"}]}),ci=Object.freeze({OrderCancellations:[{name:"orderUids",type:"bytes[]"}]});var wi=Object.freeze(["https://limit-orders.1inch.io","https://api.1inch.dev/orderbook"]);var Nt=new Set(["evm","evm-swap","evm-bridge","evm-nft","evm-order","btc","sol","hl","poly","lighter"]);var Ri=Object.freeze({swap:5,bridge:5,perps:0,nft:0,mint:0,transfer:0,approve:0,delegate:0,identity:0,order:0,cancel:0,leverage:0,margin:0,approveBuilder:0,stake:0,unstake:0});var Ct=Object.freeze({"0x04e45aaf":{provider:"uniswap-v3",action:"swap",layout:"router02-exact-input-single"},"0x414bf389":{provider:"uniswap-v3",action:"swap",layout:"swap-router-exact-input-single"},"0xc04b8d59":{provider:"uniswap-v3",action:"swap",layout:"exact-input-deadline"},"0xb858183f":{provider:"uniswap-v3",action:"swap",layout:"exact-input"},"0x5ae401dc":{provider:"uniswap-v3",action:"swap",layout:"multicall-deadline"},"0xa026383e":{provider:"aerodrome",action:"swap",layout:"aerodrome-exact-input-single"},"0x7b939232":{provider:"across-v3",action:"bridge",layout:"across-deposit-v3"}}),Li=Object.freeze({"0x161ac21f":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-public"},"0xc2f6663a":{provider:"opensea-nft",action:"mint",layout:"seadrop-mint-allowlist"}}),$i=new Ae(["function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Pi=new Ae(["function mintAllowList(address nftContract,address feeRecipient,address minterIfNotPayer,uint256 quantity,(uint80 mintPrice,uint48 maxTotalMintableByWallet,uint48 startTime,uint48 endTime,uint48 dropStageIndex,uint32 maxTokenSupplyForStage,uint16 feeBps,bool restrictFeeRecipients) mintParams,bytes32[] proof) payable"]),Bi=Object.freeze({"0xa0712d68":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0x1249c58b":{provider:"nft-mint",action:"mint",layout:"mint-no-args"},"0x2db11544":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xefef39a1":{provider:"nft-mint",action:"mint",layout:"mint-quantity"},"0xa6f2ae3a":{provider:"nft-mint",action:"mint",layout:"mint-no-args"}});var _t=Object.freeze([...Nt]),Di=Object.freeze({...Ct});import{ed25519 as Qi}from"@noble/curves/ed25519.js";import{base58 as ts}from"@scure/base";import{RawTx as ns,SigHash as os,Transaction as is}from"@scure/btc-signer";import{Transaction as as,keccak256 as cs,verifyTypedData as ls}from"ethers";import{encode as qi}from"@msgpack/msgpack";import{keccak256 as Hi,verifyTypedData as zi}from"ethers";var Wi=Object.freeze({name:"Exchange",version:"1",chainId:1337,verifyingContract:"0x0000000000000000000000000000000000000000"}),Ui=Object.freeze({Agent:[{name:"source",type:"string"},{name:"connectionId",type:"bytes32"}]});import{closeSync as Rs,constants as Pt,fchmodSync as Ls,fsyncSync as $s,lstatSync as Ps,mkdirSync as Bs,openSync as Ds,readFileSync as Fs,renameSync as js,rmSync as qs,writeFileSync as Ms}from"node:fs";import{wordlists as Ns}from"ethers";var Ws=Pt.O_NOFOLLOW??0;import{wordlists as Ks}from"ethers";var ve=64*1024;var Gs=32*1024;var Ft=["schemaVersion","buildVersion","recordType","execution","custody"],Zs=[...Ft,"recordHash"];var Qs=Object.freeze({signed:new Set(["workflow.signed","legacy.signed"]),submitted:new Set(["workflow.submitted","legacy.broadcast"]),finalized:new Set(["workflow.finalized"]),reorged:new Set(["workflow.reorged"]),orphaned:new Set(["workflow.orphaned"]),compensating:new Set(["workflow.compensating"]),compensated:new Set(["workflow.compensated"])});var jt=Object.freeze(["draft","checked","approval","signed","submitted","finalized","reorged","orphaned","compensating","compensated","failed","cancelled"]),Le=Object.freeze(["workflow.drafted","workflow.checked","workflow.approval_requested","workflow.approval_granted","workflow.signed","workflow.submitted","workflow.finalized","workflow.reorged","workflow.orphaned","workflow.compensating","workflow.compensated","workflow.failed","workflow.cancelled","workflow.annotated"]),oa=new Set(Le);var Ut=64*1024*1024;var da=Object.freeze(["chainId","agentAddress","accountAddress","actions","targets","maxValueWei","maxGasWei","maxSlippageBps","expiresAt","nonce","revocationKey"]),fa=Object.freeze(["read","simulate"]);var pa=1440*60;var Sa=Object.freeze(["privkey","wif","xprv","seed"]);var Aa=Object.freeze([{rule:"raw-32-byte-hex-key",re:/^0x[0-9a-fA-F]{64}$/},{rule:"raw-32-byte-hex-bare",re:/^[0-9a-fA-F]{64}$/},{rule:"extended-private-key",re:/\b(?:xprv|tprv|yprv|zprv)[1-9A-HJ-NP-Za-km-z]{107}\b/},{rule:"bitcoin-wif",re:/\b[59KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/},{rule:"bip39-mnemonic",re:/\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/},{rule:"bearer-token",re:/bearer\s+[A-Za-z0-9._~+/=-]+/i},{rule:"pem-private-key",re:/-----BEGIN[A-Z ]*PRIVATE KEY-----/},{rule:"keystore-path",re:/keystore/i},{rule:"signer-url",re:/https?:\/\/\S*sign/i},{rule:"authorization-header",re:/authorization\s*:/i}]),va=Object.freeze(["grantid","id","hash","sha256","sha256hex","checksum","txhash","transactionhash","blockhash","digest","userophash","commithash","prevhash","intenthash","canonicalhash","payloadhash","requestid"]);var Q=Object.freeze(["intent","quote_comparison","simulation","prepared","approval","signed","broadcast","settlement","balance_delta","position"]),Ta=Object.freeze(Object.fromEntries(Q.map((e,n)=>[e,Object.freeze(n+1<Q.length?[Q[n+1]]:[])])));var Vt=Object.freeze({intent:"draft",quote_comparison:"draft",simulation:"draft",prepared:"checked",approval:"approval",signed:"signed",broadcast:"submitted",settlement:"finalized",balance_delta:"compensated",position:"compensated"});var Jt=Object.freeze(["owner","operator","agent","viewer"]),Gt=Object.freeze(["tenant","config","policy","grant","workflow","trade","receipt","audit","telemetry","context","lifecycle"]),Yt=Object.freeze({read:"read",create:"create",update:"update",delete:"delete",manage:"manage",prepare:"prepare",cancel:"cancel",export:"export",approve:"approve"}),fc=Object.freeze(["owner"]),pc=Object.freeze({ALLOW_ROLE_PERMISSION:"allow.role_permission",DENY_MISSING_CONTEXT:"deny.missing_context",DENY_INVALID_CONTEXT:"deny.invalid_context",DENY_INVALID_REQUEST:"deny.invalid_request",DENY_UNKNOWN_RESOURCE:"deny.unknown_resource",DENY_UNKNOWN_ACTION:"deny.unknown_action",DENY_UNBOUND_OBJECT:"deny.unbound_object",DENY_TENANT_MISMATCH:"deny.tenant_mismatch",DENY_RESOURCE_MISMATCH:"deny.resource_mismatch",DENY_ROLE_PERMISSION:"deny.role_permission",DENY_POLICY_NOT_APPROVER:"deny.policy_not_approver"}),mc=new Set(Jt),wc=new Set(Gt),hc=new Set(Object.values(Yt));var Xt=Object.freeze({owner:Object.freeze(["tenant:read","tenant:manage","config:read","config:manage","policy:read","policy:manage","grant:read","grant:create","grant:update","grant:delete","grant:manage","workflow:read","workflow:create","workflow:update","workflow:delete","workflow:cancel","workflow:approve","trade:read","trade:prepare","receipt:read","receipt:export","audit:read","audit:export","telemetry:read","telemetry:create","telemetry:export","context:read","context:create","context:update","context:delete","context:manage","context:export","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:delete","lifecycle:manage","lifecycle:approve","lifecycle:export"]),operator:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","workflow:cancel","trade:read","trade:prepare","receipt:read","audit:read","telemetry:read","telemetry:create","context:read","context:create","context:update","context:delete","lifecycle:read","lifecycle:create","lifecycle:update","lifecycle:manage"]),agent:Object.freeze(["tenant:read","config:read","policy:read","grant:read","workflow:read","workflow:create","workflow:update","trade:read","trade:prepare","receipt:read","telemetry:create","context:read","context:create","context:update","lifecycle:read"]),viewer:Object.freeze(["tenant:read","config:read","grant:read","workflow:read","trade:read","receipt:read","audit:read","telemetry:read","context:read","lifecycle:read"])}),gc=Object.freeze(Object.fromEntries(Object.entries(Xt).map(([e,n])=>[e,Object.freeze([...n])])));var Zt=Object.freeze(["succeeded","denied","invalid","failed","cancelled","timed_out","unavailable","skipped"]),Qt=Object.freeze(["workflow","task","intent","plan","run","event","eval"]),er=Object.freeze(["taskId","intentId","planId","runId","eventId"]);var xc=Object.freeze({maxAttributes:24,maxKeyLength:48,maxStringLength:256,maxArrayLength:8}),Sc=new Set(Zt),Ac=new Set(Qt),vc=new Set(er);var Ic=Object.freeze(["authorization","bearer","cookie","credential","password","passphrase","secret","token","privatekey","privkey","seed","mnemonic","keystore","signature","prompt","systemmessage","usermessage","assistantmessage","rawtransaction","signedtransaction","serializedtransaction","transactionbytes","calldata","callbytes","inputdata"]);var kc=Object.freeze({taskId:"x-oracle-task-id",intentId:"x-oracle-intent-id",planId:"x-oracle-plan-id",runId:"x-oracle-run-id",eventId:"x-oracle-event-id"});var Rc=Object.freeze({"workflow.cancelled":"cancelled","workflow.failed":"failed"});var Fc=32*1024*1024;var qc=Object.freeze({1:{name:"ethereum",mode:"mempool-private",endpoints:["https://rpc.flashbots.net/fast","https://rpc.mevblocker.io"]},8453:{name:"base",mode:"sequencer",endpoints:["https://mainnet-sequencer.base.org"]},10:{name:"optimism",mode:"sequencer",endpoints:["https://mainnet-sequencer.optimism.io"]},42161:{name:"arbitrum",mode:"sequencer",endpoints:["https://arb1-sequencer.arbitrum.io/rpc"]},56:{name:"bsc",mode:"mempool-private",endpoints:["https://rpc.48.club","https://bsc.rpc.blxrbdn.com"]},137:{name:"polygon",mode:"mempool-private",endpoints:["https://polygon-bor-rpc.publicnode.com"]},43114:{name:"avalanche",mode:"public-only",endpoints:[]},999:{name:"hyperevm",mode:"public-only",endpoints:[]}});import{createHmac as rr,randomBytes as el,timingSafeEqual as nr}from"node:crypto";import or from"node:fs";import S from"node:path";import{homedir as ee}from"node:os";import{join as te}from"node:path";var $e=process.env.ORACLE_PUBLIC_DESKTOP==="1",tr=$e?process.env.ORACLE_CONFIG_DIR||te(ee(),".config","oracle"):te(ee(),".config","oracle"),Wc=$e?tr:te(ee(),".config","mad-desk");var Gc="0".repeat(64),Yc=Object.freeze({PREPARE:"exec.prepare",SIGN:"exec.sign",BROADCAST:"exec.broadcast",POLICY_REJECT:"policy.reject",AUTH_GRANT:"auth.grant",AUTH_OK:"auth.verify.ok",AUTH_FAIL:"auth.verify.fail"});function F(e){return e==null?"null":typeof e!="object"?JSON.stringify(e):Array.isArray(e)?"["+e.map(F).join(",")+"]":"{"+Object.keys(e).sort().map(t=>JSON.stringify(t)+":"+F(e[t])).join(",")+"}"}var Xc=Promise.resolve();function ir(e,n){if(!e)throw new Error("ledger: separate freshness anchor required");let t=a=>{try{return or.realpathSync(a)}catch{return S.resolve(a)}},r=t(S.dirname(S.resolve(e))),i=t(S.dirname(S.resolve(n))),o=(a,l)=>l===a||l.startsWith(a+S.sep);if(o(r,i)||o(i,r))throw new Error("ledger: separate freshness anchor required")}var re=(e,n)=>rr("sha256",n).update(F(e)).digest("hex"),sr=(e,n)=>{let t=Buffer.from(String(e)),r=Buffer.from(String(n));return t.length===r.length&&nr(t,r)};function ar(e,n,{sequence:t}={}){if(!e||typeof e!="object"||Array.isArray(e))throw new Error("policy: object required");let r=t===void 0?e:{...e,policySequence:Number(t)};return{policy:r,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:re(r,n)}}}function Pe(e,n){if(!e)throw new Error("policy: sequence anchor required");let t;try{t=h(e)}catch{return{sequence:0,present:!1}}let r;try{r=JSON.parse(t)}catch{throw new Error("policy: sequence anchor is unreadable")}if(!sr(r?.integrity?.mac,re(r?.marker,n)))throw new Error("policy: sequence anchor integrity failed");return{sequence:Number(r?.marker?.policySequence||0),policyMac:r?.marker?.policyMac??null,present:!0,ledgerInitialized:r?.marker?.ledgerInitialized===!0}}function cr(e,n,t,r=null,{ledgerInitialized:i}={}){if(r==null||!String(r))throw new Error("policy: sequence anchor must bind the sealed policy MAC");let o=i===!0;if(i===void 0)try{let l=Pe(e,t);o=l.present&&l.ledgerInitialized===!0}catch{o=!1}let a={policySequence:Number(n),policyMac:String(r)};o&&(a.ledgerInitialized=!0),g(e,JSON.stringify({marker:a,integrity:{algorithm:"hmac-sha256-canonical-json-v1",mac:re(a,t)}})+`
 `)}function Be(e,n,t,{sequenceAnchorFile:r}={}){let i=h(n);if(!r)throw new Error("policy: sequence anchor required");let o=Pe(r,i);ir(r,e);let a=Number(o.sequence||0)+1,l=ar(t,i,{sequence:a});cr(r,a,i,l?.integrity?.mac??null),g(e,JSON.stringify(l,null,2)+`
-`)}import{readFileSync as ul,readdirSync as dl,existsSync as lr}from"node:fs";import{dirname as ur,join as _}from"node:path";import{fileURLToPath as dr}from"node:url";var L=ur(dr(import.meta.url));function fr(){let e=[_(L,"descriptors"),_(L,"clear-sign","descriptors"),_(L,"..","clear-sign","descriptors"),_(L,"..","..","clear-sign","descriptors"),_(L,"..","..","..","clear-sign","descriptors")];for(let n of e)if(lr(n))return n;return e[0]}var wl=fr();var hl=(1n<<256n)-1n;import{Wallet as ne}from"ethers";import{base58 as oe}from"@scure/base";import{ed25519 as qe}from"@noble/curves/ed25519.js";import{NETWORK as Me,TEST_NETWORK as He,WIF as pr,p2wpkh as De}from"@scure/btc-signer";import{pubECDSA as mr}from"@scure/btc-signer/utils.js";var j=e=>{let n=String(e||"").trim().replace(/^0x/i,"");return!/^[0-9a-fA-F]+$/.test(n)||n.length%2?null:Buffer.from(n,"hex")},wr=e=>{let n=String(e||"").trim();if(!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(n))return null;let t=Buffer.from(n,"base64");return t.toString("base64")===n?t:null},Fe=e=>{let n=String(e||"").trim();try{let t=Buffer.from(oe.decode(n));return oe.encode(t)===n?t:null}catch{return null}},ie=e=>{if(!(e instanceof Uint8Array))throw new Error("sol: key bytes required");if(e.length!==32&&e.length!==64)throw new Error("sol: expected 32-byte private key material");let n=Buffer.from(e.subarray(0,32));if(e.length===64){let t=Buffer.from(e.subarray(32,64)),r=Buffer.from(qe.getPublicKey(n));if(!t.equals(r))throw new Error("sol: supplied public key does not match seed")}return n},je=e=>!(e instanceof Uint8Array)||e.length!==32&&e.length!==64?null:Buffer.from(e.subarray(0,32)),y=(e,n)=>{if(n==="sol")return ie(e);if(!(e instanceof Uint8Array))throw new Error(`${n}: key bytes required`);if(e.length===32)return Buffer.from(e);if(e.length===64)return Buffer.from(e.subarray(0,32));throw new Error(`${n}: expected 32-byte private key material`)},hr=(e,n)=>{if(!Array.isArray(e))throw new Error(`${n}: expected byte array`);let t=Buffer.alloc(e.length);for(let r=0;r<e.length;r++){let i=e[r];if(typeof i!="number"||!Number.isSafeInteger(i)||i<0||i>255)throw new Error(`${n}: expected integer bytes in 0..255`);t[r]=i}return y(t,n)};function b(e,n){let t=String(n||"").trim();if(e==="evm")return new ne(t).privateKey;if(e==="btc")for(let o of[Me,He])try{return Buffer.from(pr(o).decode(t))}catch{}if(e==="sol"){if(/^hex:/i.test(t)){let c=j(t.slice(4));if(!c)throw new Error("sol: invalid explicit hex private key");return y(c,"sol")}if(/^base58:/i.test(t)){let c=Fe(t.slice(7));if(!je(c))throw new Error("sol: invalid explicit base58 private key");return ie(c)}if(/^0x/i.test(t)){let c=j(t);if(!c)throw new Error("sol: invalid explicit hex private key");return y(c,"sol")}let o=j(t),a=o&&(o.length===32||o.length===64)?y(o,"sol"):null,l=Fe(t),f=je(l);if(a&&f&&!a.equals(f))throw new Error("sol: ambiguous private key format; prefix with hex: or base58:");if(f)return ie(l);if(o)return y(o,"sol")}let r=j(t);if(r)return e==="evm"?new ne(`0x${r.toString("hex")}`).privateKey:y(r,e);let i=wr(t);if(i)return y(i,e);if(t.startsWith("[")||t.startsWith("{")){let o=JSON.parse(t);if(Array.isArray(o))return hr(o,e);let a=o.privateKey??o.secretKey??o.key;if(a)return b(e,Array.isArray(a)?JSON.stringify(a):String(a))}throw new Error(`${e}: unsupported private key format`)}function A(e,n){if(e==="evm"){let t=new ne(String(n));return{kind:e,secret:t.privateKey,addresses:[t.address.toLowerCase()]}}if(e==="btc"){let t=y(n,"btc"),r=mr(t);return{kind:e,secret:t.toString("hex"),addresses:[De(r,Me).address,De(r,He).address]}}if(e==="sol"){let t=y(n,"sol");return{kind:e,secret:t.toString("hex"),addresses:[oe.encode(qe.getPublicKey(t))]}}throw new Error(`unsupported signer kind ${e}`)}function q(e,n={}){let t=Buffer.isBuffer(e)?e.toString("utf8"):String(e||"");if(String(n.kind||"")!=="multichain")return{[n.kind||"evm"]:A(n.kind||"evm",b(n.kind||"evm",t))};let r=JSON.parse(t),i={};for(let o of["evm","btc","sol"])r[o]&&(i[o]=A(o,b(o,r[o])));if(r.cex!==void 0){if(!r.cex||typeof r.cex!="object"||Array.isArray(r.cex))throw new Error("local-vault: cex credential records invalid");i.cex={};for(let[o,a]of Object.entries(r.cex)){if(!/^[A-Za-z0-9._-]{1,64}$/.test(o)||!a||typeof a!="object")throw new Error("local-vault: cex credential record invalid");if(!/^(?:binance|bybit|okx|coinbase)$/.test(a.venue)||!/^[A-Za-z0-9._-]{1,64}$/.test(a.accountId||""))throw new Error("local-vault: cex credential binding invalid");let l=(c,d=!0)=>{let u=a[c];if(!(!d&&u===void 0)){if(!Array.isArray(u)||u.length<4||u.some(I=>!Number.isInteger(I)||I<0||I>255))throw new Error("local-vault: cex credential bytes invalid");return Buffer.from(u)}},f=a.apiSecretEncoding;if(f!==(a.venue==="coinbase"?"base64":"raw"))throw new Error("local-vault: explicit cex secret encoding refused");i.cex[o]=Object.freeze({venue:a.venue,accountId:a.accountId,apiKeyBytes:l("apiKeyBytes"),apiSecretBytes:l("apiSecretBytes"),apiSecretEncoding:f,passphraseBytes:l("passphraseBytes",!1)})}if(!Object.keys(i.cex).length)throw new Error("local-vault: empty cex credential records refused");Object.freeze(i.cex)}if(!Object.keys(i).length)throw new Error("local-vault: multichain vault is empty");return i}function ze(e){let n={};for(let t of["evm","btc","sol"])e[t]&&(n[t]=t==="evm"?e[t].secret:`0x${e[t].secret}`);return e.cex&&(n.cex=Object.fromEntries(Object.entries(e.cex).map(([t,r])=>[t,{venue:r.venue,accountId:r.accountId,apiKeyBytes:[...r.apiKeyBytes],apiSecretBytes:[...r.apiSecretBytes],apiSecretEncoding:r.apiSecretEncoding,...r.passphraseBytes?{passphraseBytes:[...r.passphraseBytes]}:{}}]))),Buffer.from(JSON.stringify(n))}function We(e){let n={};for(let[t,r]of Object.entries(e))r?.addresses&&(n[t]=r.addresses);return{kind:"multichain",address:null,addresses:n}}var _l=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Ll=Object.freeze(["binance","bybit","okx","coinbase"]),Rl=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),$l=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Pl=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),Bl=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),Dl=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),Fl=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),jl=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),ql=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Ml=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"});var br=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),Ue=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"});var Xl=256*1024;var Id=new se(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),kd=new se(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),Od=new se(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"]);function Ve(e){let n=process.env.ORACLE_SIGNER_STATE_DIR||w.join(process.env.XDG_STATE_HOME||w.join(Er.homedir(),".local","state"),"oracle"),t=xr("sha256").update(w.resolve(e)).digest("hex").slice(0,16);return{vault:w.join(e,"vault.json"),policy:w.join(e,"signer-policy.json"),policyKey:w.join(e,"policy-integrity-key"),policyAnchor:w.join(n,`signer-policy-${t}.high-water`),ledger:w.join(e,"signer-ledger.json"),ledgerAnchor:w.join(n,`signer-ledger-${t}.high-water`),executionOutbox:w.join(e,"signer-execution-outbox.json"),cexOrders:w.join(e,"cex-orders.json"),cexOrdersAnchor:w.join(n,`cex-orders-${t}.high-water`),token:w.join(e,"signer-token"),lock:w.join(n,`signer-${t}.lock`),workflowLedger:w.join(e,"workflow-events.jsonl")}}import{randomBytes as Sr}from"node:crypto";import{Wallet as Ke}from"ethers";var Ge=`oracle sign init|import|import-phrase|export|policy|status|unlock|lock|doctor
+`)}import{readFileSync as dl,readdirSync as fl,existsSync as lr}from"node:fs";import{dirname as ur,join as _}from"node:path";import{fileURLToPath as dr}from"node:url";var R=ur(dr(import.meta.url));function fr(){let e=[_(R,"descriptors"),_(R,"clear-sign","descriptors"),_(R,"..","clear-sign","descriptors"),_(R,"..","..","clear-sign","descriptors"),_(R,"..","..","..","clear-sign","descriptors")];for(let n of e)if(lr(n))return n;return e[0]}var hl=fr();var gl=(1n<<256n)-1n;import{Wallet as ne}from"ethers";import{base58 as oe}from"@scure/base";import{ed25519 as qe}from"@noble/curves/ed25519.js";import{NETWORK as Me,TEST_NETWORK as He,WIF as pr,p2wpkh as De}from"@scure/btc-signer";import{pubECDSA as mr}from"@scure/btc-signer/utils.js";var j=e=>{let n=String(e||"").trim().replace(/^0x/i,"");return!/^[0-9a-fA-F]+$/.test(n)||n.length%2?null:Buffer.from(n,"hex")},wr=e=>{let n=String(e||"").trim();if(!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(n))return null;let t=Buffer.from(n,"base64");return t.toString("base64")===n?t:null},Fe=e=>{let n=String(e||"").trim();try{let t=Buffer.from(oe.decode(n));return oe.encode(t)===n?t:null}catch{return null}},ie=e=>{if(!(e instanceof Uint8Array))throw new Error("sol: key bytes required");if(e.length!==32&&e.length!==64)throw new Error("sol: expected 32-byte private key material");let n=Buffer.from(e.subarray(0,32));if(e.length===64){let t=Buffer.from(e.subarray(32,64)),r=Buffer.from(qe.getPublicKey(n));if(!t.equals(r))throw new Error("sol: supplied public key does not match seed")}return n},je=e=>!(e instanceof Uint8Array)||e.length!==32&&e.length!==64?null:Buffer.from(e.subarray(0,32)),y=(e,n)=>{if(n==="sol")return ie(e);if(!(e instanceof Uint8Array))throw new Error(`${n}: key bytes required`);if(e.length===32)return Buffer.from(e);if(e.length===64)return Buffer.from(e.subarray(0,32));throw new Error(`${n}: expected 32-byte private key material`)},hr=(e,n)=>{if(!Array.isArray(e))throw new Error(`${n}: expected byte array`);let t=Buffer.alloc(e.length);for(let r=0;r<e.length;r++){let i=e[r];if(typeof i!="number"||!Number.isSafeInteger(i)||i<0||i>255)throw new Error(`${n}: expected integer bytes in 0..255`);t[r]=i}return y(t,n)};function b(e,n){let t=String(n||"").trim();if(e==="evm")return new ne(t).privateKey;if(e==="btc")for(let o of[Me,He])try{return Buffer.from(pr(o).decode(t))}catch{}if(e==="sol"){if(/^hex:/i.test(t)){let c=j(t.slice(4));if(!c)throw new Error("sol: invalid explicit hex private key");return y(c,"sol")}if(/^base58:/i.test(t)){let c=Fe(t.slice(7));if(!je(c))throw new Error("sol: invalid explicit base58 private key");return ie(c)}if(/^0x/i.test(t)){let c=j(t);if(!c)throw new Error("sol: invalid explicit hex private key");return y(c,"sol")}let o=j(t),a=o&&(o.length===32||o.length===64)?y(o,"sol"):null,l=Fe(t),f=je(l);if(a&&f&&!a.equals(f))throw new Error("sol: ambiguous private key format; prefix with hex: or base58:");if(f)return ie(l);if(o)return y(o,"sol")}let r=j(t);if(r)return e==="evm"?new ne(`0x${r.toString("hex")}`).privateKey:y(r,e);let i=wr(t);if(i)return y(i,e);if(t.startsWith("[")||t.startsWith("{")){let o=JSON.parse(t);if(Array.isArray(o))return hr(o,e);let a=o.privateKey??o.secretKey??o.key;if(a)return b(e,Array.isArray(a)?JSON.stringify(a):String(a))}throw new Error(`${e}: unsupported private key format`)}function A(e,n){if(e==="evm"){let t=new ne(String(n));return{kind:e,secret:t.privateKey,addresses:[t.address.toLowerCase()]}}if(e==="btc"){let t=y(n,"btc"),r=mr(t);return{kind:e,secret:t.toString("hex"),addresses:[De(r,Me).address,De(r,He).address]}}if(e==="sol"){let t=y(n,"sol");return{kind:e,secret:t.toString("hex"),addresses:[oe.encode(qe.getPublicKey(t))]}}throw new Error(`unsupported signer kind ${e}`)}function q(e,n={}){let t=Buffer.isBuffer(e)?e.toString("utf8"):String(e||"");if(String(n.kind||"")!=="multichain")return{[n.kind||"evm"]:A(n.kind||"evm",b(n.kind||"evm",t))};let r=JSON.parse(t),i={};for(let o of["evm","btc","sol"])r[o]&&(i[o]=A(o,b(o,r[o])));if(r.cex!==void 0){if(!r.cex||typeof r.cex!="object"||Array.isArray(r.cex))throw new Error("local-vault: cex credential records invalid");i.cex={};for(let[o,a]of Object.entries(r.cex)){if(!/^[A-Za-z0-9._-]{1,64}$/.test(o)||!a||typeof a!="object")throw new Error("local-vault: cex credential record invalid");if(!/^(?:binance|bybit|okx|coinbase)$/.test(a.venue)||!/^[A-Za-z0-9._-]{1,64}$/.test(a.accountId||""))throw new Error("local-vault: cex credential binding invalid");let l=(c,d=!0)=>{let u=a[c];if(!(!d&&u===void 0)){if(!Array.isArray(u)||u.length<4||u.some(I=>!Number.isInteger(I)||I<0||I>255))throw new Error("local-vault: cex credential bytes invalid");return Buffer.from(u)}},f=a.apiSecretEncoding;if(f!==(a.venue==="coinbase"?"base64":"raw"))throw new Error("local-vault: explicit cex secret encoding refused");i.cex[o]=Object.freeze({venue:a.venue,accountId:a.accountId,apiKeyBytes:l("apiKeyBytes"),apiSecretBytes:l("apiSecretBytes"),apiSecretEncoding:f,passphraseBytes:l("passphraseBytes",!1)})}if(!Object.keys(i.cex).length)throw new Error("local-vault: empty cex credential records refused");Object.freeze(i.cex)}if(!Object.keys(i).length)throw new Error("local-vault: multichain vault is empty");return i}function ze(e){let n={};for(let t of["evm","btc","sol"])e[t]&&(n[t]=t==="evm"?e[t].secret:`0x${e[t].secret}`);return e.cex&&(n.cex=Object.fromEntries(Object.entries(e.cex).map(([t,r])=>[t,{venue:r.venue,accountId:r.accountId,apiKeyBytes:[...r.apiKeyBytes],apiSecretBytes:[...r.apiSecretBytes],apiSecretEncoding:r.apiSecretEncoding,...r.passphraseBytes?{passphraseBytes:[...r.passphraseBytes]}:{}}]))),Buffer.from(JSON.stringify(n))}function We(e){let n={};for(let[t,r]of Object.entries(e))r?.addresses&&(n[t]=r.addresses);return{kind:"multichain",address:null,addresses:n}}var Rl=Object.freeze(["spot-limit-create","spot-limit-cancel","spot-order-status"]),Ll=Object.freeze(["binance","bybit","okx","coinbase"]),$l=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"}),Pl=Object.freeze({binance:"/api/v3",bybit:"/v5/order",okx:"/api/v5/trade",coinbase:"/orders"}),Bl=Object.freeze(["version","surface","kind","venue","credentialRef","symbol","base","quote","side","baseSize","limitPrice","maxQuoteNotional","timeInForce","clientOrderId","expiresAtMs","venueOrderId","nonce","grantId","artifactHash"]),Dl=Object.freeze(["market-create","withdraw","transfer","subaccount","leverage","futures","margin","convert","api-key"]),Fl=Object.freeze(["url","host","path","method","headers","signature","apiKey","apiSecret","passphrase","privateKey","redirect","proxy"]),jl=Object.freeze(["ccxt","binance-api-node","node-binance-api","coinbase-advanced-node","@okx-dex/okx-dex-sdk","bybit-api"]),ql=Object.freeze({perOrderQuote:"sealed-owner-policy",dailyGrossQuote:"sealed-owner-policy",scope:Object.freeze(["per-order","UTC-day","account","venue","quote"]),envelopeFieldIsNotCeiling:!0}),Ml=Object.freeze({binanceRecvWindowMs:5e3,bybitWindowMs:5e3,maxLocalSkewMs:2e3}),Hl=Object.freeze({perSecond:1,perMinute:30,bind:"tighter"});var br=Object.freeze({binance:Object.freeze({create:["POST","/api/v3/order"],cancel:["DELETE","/api/v3/order"],status:["GET","/api/v3/order"]}),bybit:Object.freeze({create:["POST","/v5/order/create"],cancel:["POST","/v5/order/cancel"],status:["GET","/v5/order/realtime"]}),okx:Object.freeze({create:["POST","/api/v5/trade/order"],cancel:["POST","/api/v5/trade/cancel-order"],status:["GET","/api/v5/trade/order"]}),coinbase:Object.freeze({create:["POST","/orders"],cancel:["DELETE","/orders/{order_id}"],status:["GET","/orders/{order_id}"]})}),Ue=Object.freeze({binance:"https://api.binance.com",bybit:"https://api.bybit.com",okx:"https://openapi.okx.com",coinbase:"https://api.exchange.coinbase.com"});var Zl=256*1024;var kd=new se(["function collection() view returns (address)","function token() view returns (address)","function robinhoodSwapFeeWei() view returns (uint256)","function quoteSpecificBuy(uint256 tokenId) view returns (uint256 totalCost,uint256 baseCost,uint256 fee,uint256 protocolFee,bool available)","function quoteSellNFT() view returns (uint256 netPayout,uint256 grossPayout,uint256 fee,uint256 protocolFee)","function inventory(uint256 tokenId) view returns (bool)","function buySpecificNFT(uint256 tokenId,uint256 maxCost) payable","function sellNFT(uint256 tokenId,uint256 minPayout) payable"]),Od=new se(["function decimals() view returns (uint8)","function allowance(address owner,address spender) view returns (uint256)"]),Td=new se(["function ownerOf(uint256 tokenId) view returns (address)","function getApproved(uint256 tokenId) view returns (address)","function isApprovedForAll(address owner,address operator) view returns (bool)"]);function Ve(e){let n=process.env.ORACLE_SIGNER_STATE_DIR||w.join(process.env.XDG_STATE_HOME||w.join(Er.homedir(),".local","state"),"oracle"),t=xr("sha256").update(w.resolve(e)).digest("hex").slice(0,16);return{vault:w.join(e,"vault.json"),policy:w.join(e,"signer-policy.json"),policyKey:w.join(e,"policy-integrity-key"),policyAnchor:w.join(n,`signer-policy-${t}.high-water`),ledger:w.join(e,"signer-ledger.json"),ledgerAnchor:w.join(n,`signer-ledger-${t}.high-water`),executionOutbox:w.join(e,"signer-execution-outbox.json"),cexOrders:w.join(e,"cex-orders.json"),cexOrdersAnchor:w.join(n,`cex-orders-${t}.high-water`),token:w.join(e,"signer-token"),lock:w.join(n,`signer-${t}.lock`),workflowLedger:w.join(e,"workflow-events.jsonl")}}import{randomBytes as Sr}from"node:crypto";import{Wallet as Ke}from"ethers";var Ge=`oracle sign init|import|import-phrase|export|policy|status|unlock|lock|doctor
 
   oracle sign init [--passphrase-file <0600 file>]
   oracle sign import --kind evm|btc|sol --key-file <0600 file> [--passphrase-file <0600 file>]
@@ -29,4 +29,4 @@ They are never accepted as argument values or inherited environment variables.`,
 `),0}if(r==="export"){if(!e.includes("--acknowledge-raw-key-export"))throw new Error("export requires --acknowledge-raw-key-export");if(!m.existsSync(o.vault))throw new Error("local signer vault is not initialized");let c=Je(e),d=v(e,"--output-file");if(!d)throw new Error("export requires --output-file <0600 file>");let u=M.resolve(d),I=await ae(e,n),ce=N(o.vault),le=T(ce,I);try{let H=q(le,ce.meta)[c];if(!H)throw new Error(`local signer has no ${c} key`);let Ye=c==="evm"?H.secret:`0x${H.secret.replace(/^0x/,"")}`;ge(u,`${Ye}
 `),t.write(`Private key exported to owner-only file ${u}. Protect it as wallet custody.
 `)}finally{le.fill(0)}return 0}if(r!=="init"&&r!=="import"&&r!=="import-phrase")throw new Error(`unknown subcommand '${r}'`);let a=await ae(e,n),l={};if(m.existsSync(o.vault)){if(r==="init")throw new Error("local signer vault already exists");let c=N(o.vault),d=T(c,a);try{l=q(d,c.meta)}finally{d.fill(0)}}if(r==="init"){let c=Ke.createRandom();l.evm=A("evm",b("evm",c.privateKey))}else if(r==="import"){let c=Je(e),d=v(e,"--key-file");if(!d)throw new Error("import requires --key-file <0600 file>");l[c]=A(c,b(c,h(d)))}else{let c=v(e,"--phrase-file");if(!c)throw new Error("import-phrase requires --phrase-file <0600 file>");if(l.evm&&!e.includes("--replace-evm"))throw new Error("local signer already holds an evm key; pass --replace-evm to overwrite it");let d=Ke.fromPhrase(h(c).trim().replace(/\s+/g," "));l.evm=A("evm",b("evm",d.privateKey))}Ir(o,we(ze(l),a,We(l)));let f=Object.entries(l).map(([c,d])=>`${c}:${vr(d)}`).join(" ");return t.write(`Encrypted local vault initialized for ${f}. Configure sealed policy rails before starting a signer session.
-`),0}var Fd={name:"sign",summary:"manage the encrypted self-hosted signing vault",usage:Ge,run:e=>kr(e.argv||[])};export{Fd as default,Ir as publishLockedVault,kr as run};
+`),0}var jd={name:"sign",summary:"manage the encrypted self-hosted signing vault",usage:Ge,run:e=>kr(e.argv||[])};export{jd as default,Ir as publishLockedVault,kr as run};