@oracle-agent/oracle 0.35.41 → 0.35.43

package/dist/cli/commands/setup.mjs

@@ -2,14 +2,14 @@ var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&
 `)+`
 `}import z from"node:fs";import hr from"node:os";import We from"node:path";import we from"node:fs";import ur from"node:os";import G from"node:path";import{fileURLToPath as lr}from"node:url";var fr=G.dirname(lr(import.meta.url)),qn=G.resolve(fr,"../..");function J(){return process.env.ORACLE_FAKE_HOME||ur.homedir()}function dr(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function R(){return dr()?process.env.ORACLE_CONFIG_DIR||G.join(J(),".config","oracle"):G.join(J(),".config","oracle")}function pr(){return G.join(R(),"desk.json")}function mr(){return G.join(R(),"env")}function ce({force:e=!1}={}){if(ce._done&&!e)return ce._result||null;ce._done=!0;let t={},r=(o,s)=>{if(s==null)return;let i=String(s).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=mr();if(we.existsSync(o))for(let s of we.readFileSync(o,"utf8").split(/\r?\n/)){let i=s.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let a=i[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),r(i[1],a)}}catch{}try{let o=pr();if(we.existsSync(o)){let s=JSON.parse(we.readFileSync(o,"utf8"));s&&typeof s=="object"&&(r("ORACLE_DESK_URL",s.deskUrl||s.dataUrl||s.url),r("ORACLE_DATA_URL",s.dataUrl||s.deskUrl||s.url),r("ORACLE_API_URL",s.apiUrl||s.dataUrl||s.deskUrl),r("ORACLE_PUBLIC_URL",s.publicUrl||s.deskUrl||s.dataUrl),r("ORACLE_EXEC_URL",s.execUrl),r("MAD_DESK_URL",s.deskUrl||s.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),ce._result=Object.keys(t).length?t:null,ce._result}try{ce()}catch{}function be(){return process.env.HERMES_HOME?G.resolve(process.env.HERMES_HOME):G.join(J(),".hermes")}function U(e){return we.mkdirSync(e,{recursive:!0}),e}var gr=/(TOKEN|SECRET|PASSWORD|KEY|AUTH|PRIVATE|MNEMONIC|SEED)/i;function $e(e="oracle"){return We.join(be(),"profiles",e,".env")}function yr(e){let t={};for(let r of String(e||"").split(/\r?\n/)){let n=r.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),t[s]=i}return t}function yt(e="oracle"){let t=$e(e);return z.existsSync(t)?yr(z.readFileSync(t,"utf8")):{}}function gt(e,t,r){if(!t||gr.test(t)===!1&&/[^A-Z0-9_]/.test(t),!/^[A-Z][A-Z0-9_]*$/.test(t)){let l=new Error(`invalid env key '${t}'`);throw l.code="BAD_KEY",l}if(r==null||String(r).trim()===""){let l=new Error(`empty value for ${t}`);throw l.code="EMPTY",l}let n=$e(e);U(We.dirname(n));let o=z.existsSync(n)?z.readFileSync(n,"utf8"):"",s=o?o.split(/\r?\n/):[],i=[],a=!1,c=`${t}=${String(r)}`;for(let l of s)l.startsWith(`${t}=`)?(i.push(c),a=!0):(l.length||i.length)&&i.push(l);for(a||(i.length&&i[i.length-1]!==""&&i.push(""),i.push(c));i.length&&i[i.length-1]==="";)i.pop();i.push(""),z.writeFileSync(n,i.join(`
 `),{mode:384});try{z.chmodSync(n,384)}catch{}return{path:n,key:t,set:!0}}function ue(e="oracle"){let t=yt(e),r={};for(let n of ae()){if(!n.required.length){r[n.key]="manual";continue}let o=n.required.filter(s=>!String(t[s]||"").trim());r[n.key]=o.length?"unset":"ready"}return{profile:e,statuses:r,envPath:$e(e)}}function Te(e="oracle"){let{statuses:t}=ue(e);return ht({profile:e,statuses:t})}function Me(e,t,r,n={}){let o=ee(t);if(!o){let u=new Error(`unknown platform '${t}'`);throw u.code="UNKNOWN_PLATFORM",u}if(!o.required.length){let u=new Error(`${o.key} uses hermes interactive setup (oracle setup messaging)`);throw u.code="NEEDS_INTERACTIVE",u}let i=o.required.filter(u=>/(TOKEN|PASSWORD|SECRET)$/i.test(u))[0]||(o.required.length===1?o.required[0]:null);if(!i){let u=new Error(`${o.key} has no single token field; provide each of [${o.required.join(", ")}] explicitly`);throw u.code="NEEDS_EXPLICIT_KEYS",u}let a=new Set([i,...Object.keys(n||{}).filter(u=>n[u]!=null&&String(n[u]).trim())]),c=yt(e),l=o.required.filter(u=>!a.has(u)&&!String(c[u]||"").trim());if(l.length){let u=new Error(`${o.key} also requires [${l.join(", ")}]; pass them explicitly (setup would otherwise be marked ready while unusable)`);throw u.code="MISSING_REQUIRED",u}gt(e,i,r);for(let[u,w]of Object.entries(n||{}))w!=null&&String(w).trim()&&gt(e,u,w);return{platform:o.key,set:o.required,profile:e,path:$e(e)}}function wr(){return We.join(R(),"setup-state.json")}function te(e={}){U(R());let t=wr(),r={};if(z.existsSync(t))try{r=JSON.parse(z.readFileSync(t,"utf8"))}catch{r={}}let n={...r,...e,updatedAt:new Date().toISOString(),host:hr.hostname()};return z.writeFileSync(t,JSON.stringify(n,null,2)+`
-`,{mode:384}),n}import I from"node:fs";import P from"node:path";import{createHash as br}from"node:crypto";import{spawnSync as fe}from"node:child_process";var kr="0.19.0",wt=`hermes-agent==${kr}`,Ye=[3,11],Ge=[3,14],ke="3.13",Pe="0.12.1",Ie=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function xr(e,{windows:t=process.platform==="win32"}={}){let r=Buffer.isBuffer(e)?e:Buffer.from(e),n=t?Ie.windows:Ie.posix,o=br("sha256").update(r).digest("hex"),s=r.toString("utf8");return o===n.sha256&&s.length>=1e3&&s.includes(Pe)}function re(){return P.join(R(),"runtime")}function kt(){return P.join(re(),"venv")}function Ve(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return P.join(kt(),t,r)}function Re(){return Ve("hermes")}function Sr(){let e=Ve("python3");return I.existsSync(e)?e:Ve("python")}function xe(){return P.join(re(),"uv",process.platform==="win32"?"uv.exe":"uv")}function le(e){let t=process.platform==="win32"&&!P.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(P.delimiter))if(r)for(let n of t){let o=P.join(r,`${e}${n}`);try{if(I.existsSync(o))return o}catch{}}return null}function vr(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function _r(e){if(!e)return!1;let[t,r]=e;return!(t<Ye[0]||t===Ye[0]&&r<Ye[1]||t>Ge[0]||t===Ge[0]&&r>=Ge[1])}function Ar(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let r=P.isAbsolute(t)?I.existsSync(t)?t:null:le(t);if(!r)continue;let n=fe(r,["--version"],{encoding:"utf8",timeout:15e3}),o=vr(`${n.stdout||""}${n.stderr||""}`);if(_r(o))return{bin:r,version:o.join("."),source:"host"}}return null}function Er(){return process.env.ORACLE_UV_BIN||le("uv")||(I.existsSync(P.join(J(),".local","bin","uv"))?P.join(J(),".local","bin","uv"):null)||(I.existsSync(xe())?xe():null)}function Or(e,t){let r=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return fe(process.execPath,["-e",r,e,t],{encoding:"utf8",timeout:2*6e4})}function $r({quiet:e=!1}={}){let t=Er();if(t)return{ok:!0,bin:t,reused:!0};U(re());let r=process.platform==="win32",n=P.join(re(),r?"uv-install.ps1":"uv-install.sh"),o=r?Ie.windows:Ie.posix,s=Or(o.url,n);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=I.readFileSync(n);if(!xr(i,{windows:r}))return{ok:!1,reason:`uv ${Pe} installer checksum mismatch`};let a=P.dirname(xe());U(a);let c=r?le("powershell.exe")||le("powershell"):le("sh")||"/bin/sh";if(!c)return{ok:!1,reason:r?"PowerShell not found":"sh not found"};let u=fe(c,r?["-NoProfile","-ExecutionPolicy","Bypass","-File",n]:[n],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!I.existsSync(xe())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:xe(),reused:!1}}function bt({quiet:e=!1}={}){let t=$r({quiet:e});if(!t.ok)return t;let r=t.bin,n={...process.env,UV_PYTHON_INSTALL_DIR:P.join(re(),"python"),UV_CACHE_DIR:P.join(re(),"cache")},o=fe(r,["python","install","--no-bin",ke],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:n});if(o.status!==0)return{ok:!1,reason:`uv python install ${ke} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=fe(r,["python","find",ke],{encoding:"utf8",timeout:6e4,env:n}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!I.existsSync(i)?{ok:!1,reason:`uv could not locate python ${ke}`}:{ok:!0,bin:i,version:ke,source:"uv"}}function de(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Re();if(I.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=le("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Je(e,t,{quiet:r}){return fe(e,t,{stdio:r?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function xt({quiet:e=!1,upgrade:t=!1}={}){let r=Ar();if(!r){let l=bt({quiet:e});if(l.ok)r={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}U(re());let n=kt();if(I.existsSync(Re())&&!t)return{ok:!0,bin:Re(),reused:!0};if(!I.existsSync(P.join(n,"pyvenv.cfg"))){let l=Je(r.bin,["-m","venv",n],{quiet:e});if(l.status!==0&&r.source!=="uv"){I.rmSync(n,{recursive:!0,force:!0});let u=bt({quiet:e});if(u.ok)r={bin:u.bin,version:u.version,source:"uv"},l=Je(r.bin,["-m","venv",n],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=Sr();if(!I.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(wt);let a=Je(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${wt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=Re();return I.existsSync(c)?{ok:!0,bin:c,reused:!1,python:r.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as Dr,randomBytes as rt,timingSafeEqual as Fr}from"node:crypto";import F from"node:fs";import M from"node:path";import Ur from"node:readline/promises";import{spawn as Br,spawnSync as Kr}from"node:child_process";import K from"node:fs";import D from"node:path";var Xe=Object.freeze(["anthropic-oauth","openai-codex","xai-oauth"]);function St(e){let t=String(e||"").trim();if(!t||!D.isAbsolute(t))return"";try{return K.statSync(t).isFile()?t:""}catch{return""}}function Tr(e){try{return K.readdirSync(e,{withFileTypes:!0})}catch{return[]}}function Mr(e=process.env){return!(e.ORACLE_PUBLIC_DESKTOP==="1"&&e.ORACLE_OWNER_DESKTOP!=="1")}function Rr(e=process.env){let t=String(e.ORACLE_REAL_HOME||"").trim();return t&&D.isAbsolute(t)?t:J()}function Pr(e={}){let t=e.home||Rr(e.env),r={"anthropic-oauth":[],"openai-codex":[],"xai-oauth":[]},n=(s,i)=>{let a=St(i);a&&(r[s].includes(a)||r[s].push(a))};n("anthropic-oauth",D.join(t,".claude",".credentials.json"));for(let s of Tr(D.join(t,".claude-lanes")))!s.isDirectory()||s.name.startsWith(".")||n("anthropic-oauth",D.join(t,".claude-lanes",s.name,".credentials.json"));let o=D.join(t,".hermes","auth.json");for(let s of Xe)n(s,o);return n("anthropic-oauth",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("openai-codex",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("xai-oauth",D.join(t,".hermes","profiles","hermes-macbook","auth.json")),r}function Ir(e){if(!K.existsSync(e))return{providers:{}};try{let t=JSON.parse(K.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{providers:{}}:{providers:t.providers&&typeof t.providers=="object"&&!Array.isArray(t.providers)?t.providers:{}}}catch{return{providers:{}}}}function Lr(e,t){let r=[];for(let n of[...Array.isArray(e)?e:[],...t]){let o=St(n)||(D.isAbsolute(String(n||""))?String(n):"");!o||r.includes(o)||r.push(o)}return r}function vt(e={}){if(!Mr(e.env))return{wrote:!1,providers:{}};let t=e.linksFile||D.join(R(),"oauth-links.json"),r=Pr(e),o={providers:{...Ir(t).providers||{}}},s=!1;for(let l of Xe){let u=Lr(o.providers[l],r[l]);JSON.stringify(u)!==JSON.stringify(o.providers[l]||[])?(o.providers[l]=u,s=!0):u.length&&(o.providers[l]=u)}if(!Xe.some(l=>(o.providers[l]||[]).length))return{wrote:!1,providers:o.providers};if(!s&&K.existsSync(t))return{wrote:!1,providers:o.providers};let a=D.dirname(t);if(K.mkdirSync(a,{recursive:!0}),process.platform!=="win32")try{K.chmodSync(a,448)}catch{}let c=`${t}.${process.pid}.tmp`;return K.writeFileSync(c,`${JSON.stringify(o,null,2)}
+`,{mode:384}),n}import I from"node:fs";import P from"node:path";import{createHash as br}from"node:crypto";import{spawnSync as fe}from"node:child_process";var kr="0.19.0",wt=`hermes-agent==${kr}`,Ye=[3,11],Ge=[3,14],ke="3.13",Pe="0.12.1",Ie=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function xr(e,{windows:t=process.platform==="win32"}={}){let r=Buffer.isBuffer(e)?e:Buffer.from(e),n=t?Ie.windows:Ie.posix,o=br("sha256").update(r).digest("hex"),s=r.toString("utf8");return o===n.sha256&&s.length>=1e3&&s.includes(Pe)}function re(){return P.join(R(),"runtime")}function kt(){return P.join(re(),"venv")}function Ve(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return P.join(kt(),t,r)}function Re(){return Ve("hermes")}function Sr(){let e=Ve("python3");return I.existsSync(e)?e:Ve("python")}function xe(){return P.join(re(),"uv",process.platform==="win32"?"uv.exe":"uv")}function le(e){let t=process.platform==="win32"&&!P.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(P.delimiter))if(r)for(let n of t){let o=P.join(r,`${e}${n}`);try{if(I.existsSync(o))return o}catch{}}return null}function vr(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function _r(e){if(!e)return!1;let[t,r]=e;return!(t<Ye[0]||t===Ye[0]&&r<Ye[1]||t>Ge[0]||t===Ge[0]&&r>=Ge[1])}function Ar(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let r=P.isAbsolute(t)?I.existsSync(t)?t:null:le(t);if(!r)continue;let n=fe(r,["--version"],{encoding:"utf8",timeout:15e3}),o=vr(`${n.stdout||""}${n.stderr||""}`);if(_r(o))return{bin:r,version:o.join("."),source:"host"}}return null}function Er(){return process.env.ORACLE_UV_BIN||le("uv")||(I.existsSync(P.join(J(),".local","bin","uv"))?P.join(J(),".local","bin","uv"):null)||(I.existsSync(xe())?xe():null)}function Or(e,t){let r=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return fe(process.execPath,["-e",r,e,t],{encoding:"utf8",timeout:2*6e4})}function $r({quiet:e=!1}={}){let t=Er();if(t)return{ok:!0,bin:t,reused:!0};U(re());let r=process.platform==="win32",n=P.join(re(),r?"uv-install.ps1":"uv-install.sh"),o=r?Ie.windows:Ie.posix,s=Or(o.url,n);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=I.readFileSync(n);if(!xr(i,{windows:r}))return{ok:!1,reason:`uv ${Pe} installer checksum mismatch`};let a=P.dirname(xe());U(a);let c=r?le("powershell.exe")||le("powershell"):le("sh")||"/bin/sh";if(!c)return{ok:!1,reason:r?"PowerShell not found":"sh not found"};let u=fe(c,r?["-NoProfile","-ExecutionPolicy","Bypass","-File",n]:[n],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!I.existsSync(xe())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:xe(),reused:!1}}function bt({quiet:e=!1}={}){let t=$r({quiet:e});if(!t.ok)return t;let r=t.bin,n={...process.env,UV_PYTHON_INSTALL_DIR:P.join(re(),"python"),UV_CACHE_DIR:P.join(re(),"cache")},o=fe(r,["python","install","--no-bin",ke],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:n});if(o.status!==0)return{ok:!1,reason:`uv python install ${ke} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=fe(r,["python","find",ke],{encoding:"utf8",timeout:6e4,env:n}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!I.existsSync(i)?{ok:!1,reason:`uv could not locate python ${ke}`}:{ok:!0,bin:i,version:ke,source:"uv"}}function de(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Re();if(I.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=le("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Je(e,t,{quiet:r}){return fe(e,t,{stdio:r?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function xt({quiet:e=!1,upgrade:t=!1}={}){let r=Ar();if(!r){let l=bt({quiet:e});if(l.ok)r={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}U(re());let n=kt();if(I.existsSync(Re())&&!t)return{ok:!0,bin:Re(),reused:!0};if(!I.existsSync(P.join(n,"pyvenv.cfg"))){let l=Je(r.bin,["-m","venv",n],{quiet:e});if(l.status!==0&&r.source!=="uv"){I.rmSync(n,{recursive:!0,force:!0});let u=bt({quiet:e});if(u.ok)r={bin:u.bin,version:u.version,source:"uv"},l=Je(r.bin,["-m","venv",n],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=Sr();if(!I.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(wt);let a=Je(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${wt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=Re();return I.existsSync(c)?{ok:!0,bin:c,reused:!1,python:r.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as Fr,randomBytes as rt,timingSafeEqual as Dr}from"node:crypto";import D from"node:fs";import M from"node:path";import Ur from"node:readline/promises";import{spawn as Br,spawnSync as Kr}from"node:child_process";import K from"node:fs";import F from"node:path";var Xe=Object.freeze(["anthropic-oauth","openai-codex","xai-oauth"]);function St(e){let t=String(e||"").trim();if(!t||!F.isAbsolute(t))return"";try{return K.statSync(t).isFile()?t:""}catch{return""}}function Tr(e){try{return K.readdirSync(e,{withFileTypes:!0})}catch{return[]}}function Mr(e=process.env){return!(e.ORACLE_PUBLIC_DESKTOP==="1"&&e.ORACLE_OWNER_DESKTOP!=="1")}function Rr(e=process.env){let t=String(e.ORACLE_REAL_HOME||"").trim();return t&&F.isAbsolute(t)?t:J()}function Pr(e={}){let t=e.home||Rr(e.env),r={"anthropic-oauth":[],"openai-codex":[],"xai-oauth":[]},n=(s,i)=>{let a=St(i);a&&(r[s].includes(a)||r[s].push(a))};n("anthropic-oauth",F.join(t,".claude",".credentials.json"));for(let s of Tr(F.join(t,".claude-lanes")))!s.isDirectory()||s.name.startsWith(".")||n("anthropic-oauth",F.join(t,".claude-lanes",s.name,".credentials.json"));let o=F.join(t,".hermes","auth.json");for(let s of Xe)n(s,o);return n("anthropic-oauth",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("openai-codex",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("xai-oauth",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),r}function Ir(e){if(!K.existsSync(e))return{providers:{}};try{let t=JSON.parse(K.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{providers:{}}:{providers:t.providers&&typeof t.providers=="object"&&!Array.isArray(t.providers)?t.providers:{}}}catch{return{providers:{}}}}function Lr(e,t){let r=[];for(let n of[...Array.isArray(e)?e:[],...t]){let o=St(n)||(F.isAbsolute(String(n||""))?String(n):"");!o||r.includes(o)||r.push(o)}return r}function vt(e={}){if(!Mr(e.env))return{wrote:!1,providers:{}};let t=e.linksFile||F.join(R(),"oauth-links.json"),r=Pr(e),o={providers:{...Ir(t).providers||{}}},s=!1;for(let l of Xe){let u=Lr(o.providers[l],r[l]);JSON.stringify(u)!==JSON.stringify(o.providers[l]||[])?(o.providers[l]=u,s=!0):u.length&&(o.providers[l]=u)}if(!Xe.some(l=>(o.providers[l]||[]).length))return{wrote:!1,providers:o.providers};if(!s&&K.existsSync(t))return{wrote:!1,providers:o.providers};let a=F.dirname(t);if(K.mkdirSync(a,{recursive:!0}),process.platform!=="win32")try{K.chmodSync(a,448)}catch{}let c=`${t}.${process.pid}.tmp`;return K.writeFileSync(c,`${JSON.stringify(o,null,2)}
 `,{mode:384}),K.renameSync(c,t),process.platform!=="win32"&&K.chmodSync(t,384),{wrote:!0,providers:o.providers}}import ne from"node:fs";import Et from"node:path";var _t=/access|refresh|idToken|id_token|token|secret|key|seed|mnemonic/i;function Cr(e=R()){return Et.join(e,"user-profile.json")}function Nr(e){if(!ne.existsSync(e))return{identities:{},wallets:{}};try{let t=JSON.parse(ne.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{identities:{},wallets:{}}:{identities:t.identities&&typeof t.identities=="object"?t.identities:{},wallets:t.wallets&&typeof t.wallets=="object"?t.wallets:{},updatedAt:t.updatedAt}}catch{return{identities:{},wallets:{}}}}function At(e){if(!e||typeof e!="object"||Array.isArray(e))return{};let t={};for(let[r,n]of Object.entries(e))if(!_t.test(r)){if(typeof n=="string"||typeof n=="number"||typeof n=="boolean"){t[r]=n;continue}if(n&&typeof n=="object"&&!Array.isArray(n)){let o={};for(let[s,i]of Object.entries(n))_t.test(s)||(typeof i=="string"||typeof i=="number"||typeof i=="boolean")&&(o[s]=i);t[r]=o}}return t}function jr(e,t){let r=Et.dirname(e);if(ne.mkdirSync(r,{recursive:!0}),process.platform!=="win32")try{ne.chmodSync(r,448)}catch{}let n={updatedAt:new Date().toISOString(),identities:At(t.identities),wallets:At(t.wallets)},o=`${e}.${process.pid}.tmp`;return ne.writeFileSync(o,`${JSON.stringify(n,null,2)}
-`,{mode:384}),ne.renameSync(o,e),process.platform!=="win32"&&ne.chmodSync(e,384),n}function Ze(e){let r=String(e||"").trim().split(".");if(r.length<2)return{};try{let n=JSON.parse(Buffer.from(r[1],"base64url").toString("utf8")),o=String(n.email||"").trim(),s=String(n.name||n.preferred_username||"").trim();return{...o?{email:o}:{},...s?{name:s}:{}}}catch{return{}}}function Qe(e,t={},r={}){let n=String(e||"").trim();if(!n)return null;let o=r.file||Cr(r.configDir),s=Nr(o),i=s.identities[n]&&typeof s.identities[n]=="object"?s.identities[n]:{};return s.identities[n]={...i,provider:n,source:String(t.source||i.source||"oracle"),loggedInAt:t.loggedInAt||new Date().toISOString(),...t.label?{label:String(t.label)}:{},...t.email?{email:String(t.email)}:{},...t.name?{name:String(t.name)}:{}},jr(o,s)}var me=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Ot=12e4;function Hr(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function oe(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(me))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function X(e){let t=oe(e);return{id:t,...me[t]}}function L(e,t={}){if(!F.existsSync(e))return t;try{let r=JSON.parse(F.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${M.basename(e)}`)}}function Tt(e){U(e),process.platform!=="win32"&&F.chmodSync(e,448)}function V(e,t){Tt(M.dirname(e));let r=`${e}.${process.pid}.${rt(4).toString("hex")}.tmp`;F.writeFileSync(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),F.renameSync(r,e),process.platform!=="win32"&&F.chmodSync(e,384)}function zr(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function et(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function pe(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=Number(e.expiresAt||e.expires_at||0);if(Number.isFinite(n)&&n>=1e9&&n<1e12&&(n=n*1e3),!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(n)?n:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function qr(e={}){let t=e.file||M.join(R(),"oauth.json"),r=e.metadataFile||M.join(M.dirname(t),"oauth-meta.json"),n=e.linksFile||M.join(M.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Kr,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&zr(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function l(y){Tt(M.dirname(c));let p;for(let f=0;f<400;f+=1)try{p=F.openSync(c,"wx",384);break}catch(m){if(m?.code!=="EEXIST")throw m;try{Date.now()-F.statSync(c).mtimeMs>3e5&&F.unlinkSync(c)}catch{}await new Promise(h=>setTimeout(h,25))}if(p===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await y()}finally{try{F.closeSync(p)}catch{}try{F.unlinkSync(c)}catch{}}}function u(y,p="oauth"){return["application","oracle","kind",p,"provider",y]}let w=!1;function g(){if(w)return;w=!0;let y=M.join(R(),"oauth-links.json");if(M.resolve(n)===M.resolve(y))try{vt({linksFile:n})}catch{}}function E(y){if(g(),!F.existsSync(n))return[];let f=L(n,{providers:{}}).providers?.[y];if(!Array.isArray(f))return[];let m=[];for(let h of f)if(M.isAbsolute(String(h||"")))try{let x=L(h,{});if(y==="anthropic-oauth"&&x.claudeAiOauth){let N=pe(x.claudeAiOauth);m.push({...N,refreshToken:"",source:"external-access-only",label:M.basename(M.dirname(h))||"claude-lane"});continue}let C=x.credential_pool&&typeof x.credential_pool=="object"?x.credential_pool:null;if(C){let N=C[y]||C[y.replace(/-oauth$/,"")]||[],ze=Array.isArray(N)?N:N?[N]:[];for(let Y of ze)if(!(!Y||typeof Y!="object"))try{let Oe=pe(Y);m.push({...Oe,refreshToken:"",source:"external-access-only",label:String(Y.label||Y.id||M.basename(M.dirname(h))||y)})}catch{}}}catch{}return m}function S(y){let p=E(y);return p.length?p.find(f=>!f.expiresAt||f.expiresAt>o()+Ot)||p[0]:null}function T(y){return y.map(p=>({label:String(p.label||"lane"),source:"external-access-only",expiresAt:Number(p.expiresAt||0),healthy:!p.expiresAt||p.expiresAt>o()+Ot}))}function v(y){let p=oe(y);if(i){let h=s("secret-tool",["lookup",...u(p)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!h.error&&h.status===0&&String(h.stdout||"").trim())try{return pe(JSON.parse(String(h.stdout).trim()))}catch{}return S(p)}let m=L(t,{providers:{}}).providers?.[p];if(m)try{return pe(m)}catch{}return S(p)}function A(y,p){let f=oe(y),m=pe(p);if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} OAuth`,...u(f)],{input:JSON.stringify(m),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected OAuth credential");let C=L(r,{providers:{}});C.providers||={},C.providers[f]={expiresAt:m.expiresAt,source:m.source},V(r,C);try{let N=Ze(m.idToken);Qe(f,{source:m.source,...N,label:N.name||N.email||f},{configDir:M.dirname(t)})}catch{}return m}let h=L(t,{providers:{}});h.providers||={},h.providers[f]=m,V(t,h);try{let x=Ze(m.idToken);Qe(f,{source:m.source,...x,label:x.name||x.email||f},{configDir:M.dirname(t)})}catch{}return m}function W(y){let p=oe(y);if(i){let h=s("secret-tool",["clear",...u(p)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{}});return x.providers&&delete x.providers[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{}}),m=!!f.providers?.[p];return f.providers&&delete f.providers[p],V(t,f),m}function B(y){let p=et(y);if(i){let f=s("secret-tool",["lookup",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return f.error||f.status!==0?"":String(f.stdout||"").trim()}return String(L(t,{apiKeys:{}}).apiKeys?.[p]||"").trim()}function Q(y,p){let f=et(y),m=String(p||"").trim();if(!m)throw new Error("API key is empty");if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} API key`,...u(f,"api-key")],{input:m,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected API key");let C=L(r,{providers:{},apiKeys:{}});return C.apiKeys||={},C.apiKeys[f]={configured:!0},V(r,C),!0}let h=L(t,{providers:{},apiKeys:{}});return h.apiKeys||={},h.apiKeys[f]=m,V(t,h),!0}function H(y){let p=et(y);if(i){let h=s("secret-tool",["clear",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{},apiKeys:{}});return x.apiKeys&&delete x.apiKeys[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{},apiKeys:{}}),m=!!f.apiKeys?.[p];return f.apiKeys&&delete f.apiKeys[p],V(t,f),m}function k(){g();let y={},p={};if(i){let f=L(r,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!v(m),expiresAt:Number(h.expiresAt||0),source:String(h.source||"oracle"),storage:a,lanes:T(E(m))};for(let m of Object.keys(f.apiKeys||{}))p[m]={configured:!!B(m),storage:a}}else{let f=L(t,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!h?.accessToken,expiresAt:Number(h?.expiresAt||0),source:String(h?.source||"oracle"),storage:a,lanes:T(E(m))};for(let[m,h]of Object.entries(f.apiKeys||{}))p[m]={configured:!!h,storage:a}}for(let f of Object.keys(me)){let m=T(E(f));if(y[f]){y[f].lanes=m;continue}let h=S(f);h&&(y[f]={loggedIn:!0,expiresAt:h.expiresAt,source:h.source,storage:"external-access-source",lanes:m})}return{storage:a,providers:y,apiKeys:p}}return Object.freeze({file:t,storage:a,get:v,set:A,remove:W,getApiKey:B,setApiKey:Q,removeApiKey:H,status:k,withLock:l})}var $t;function q(){return $t||=qr(),$t}function tt(e){return Buffer.from(e).toString("base64url")}function Wr(){let e=tt(rt(32));return{verifier:e,challenge:tt(Dr("sha256").update(e).digest()),state:tt(rt(24))}}function Yr(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Fr(r,n)}function Gr(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return Br(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function nt(e){return new URLSearchParams(e).toString()}async function se(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Jr(e){if(e)return String(await e()).trim();let t=Ur.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function ot(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return pe({accessToken:r,refreshToken:n,expiresAt:Hr(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Vr(e){let t=me["anthropic-oauth"],r=e.pkce||Wr(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Jr(e.inputFn),[i,a]=s.split("#",2);if(!i||!Yr(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return ot(await se(c,"Claude OAuth token exchange"),e)}async function Xr(e){let t=me["openai-codex"],r=await se(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await se(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:nt({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return ot(await se(i,"Codex OAuth token exchange"),e)}function Le(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Zr(e){let t=me["xai-oauth"],r=await se(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Le(r.authorization_endpoint);let n=Le(r.token_endpoint),o=await se(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Le(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let w=await se(l,"xAI OAuth token exchange");return ot(w,{...e,discovery:{authorization_endpoint:Le(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Mt(e,t={}){let r=oe(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Gr,output:t.output||(o=>process.stdout.write(`${o}
-`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Vr(n):r==="openai-codex"?Xr(n):Zr(n)}import je from"node:fs";import st from"node:path";var Qr=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Ce(e){return String(e||"").trim()||void 0}function en(e,{required:t=!1}={}){let r=Ce(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!Qr.has(r))throw new Error(`unsupported provider: ${r}`);return r}function tn(e,{required:t=!1}={}){let r=Ce(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function rn(e){let t=Ce(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function Ne({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=en(e),s=tn(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:rn(r)};if(Ce(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var nn=new Set(["auto","standalone","hermes","remote","arch"]);function on(){return st.join(R(),"model.json")}function he(e){return String(e||"").trim()||void 0}function sn(e={}){let t=he(e.backend)?.toLowerCase()||"auto",r=Ne({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=he(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=he(e.reasoningEffort),i=he(e.computeHost||e.remoteHost),a=he(e.computeUser||e.remoteUser),c=he(e.computePath||e.remotePath);if(!nn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!i)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...s?{reasoningEffort:s}:{},...i?{computeHost:i}:{},...a?{computeUser:a}:{},...c?{computePath:c}:{}}}function De(e){let t=sn(e),r=on();U(st.dirname(r)),process.platform!=="win32"&&je.chmodSync(st.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return je.writeFileSync(n,`${JSON.stringify(t,null,2)}
+`,{mode:384}),ne.renameSync(o,e),process.platform!=="win32"&&ne.chmodSync(e,384),n}function Ze(e){let r=String(e||"").trim().split(".");if(r.length<2)return{};try{let n=JSON.parse(Buffer.from(r[1],"base64url").toString("utf8")),o=String(n.email||"").trim(),s=String(n.name||n.preferred_username||"").trim();return{...o?{email:o}:{},...s?{name:s}:{}}}catch{return{}}}function Qe(e,t={},r={}){let n=String(e||"").trim();if(!n)return null;let o=r.file||Cr(r.configDir),s=Nr(o),i=s.identities[n]&&typeof s.identities[n]=="object"?s.identities[n]:{};return s.identities[n]={...i,provider:n,source:String(t.source||i.source||"oracle"),loggedInAt:t.loggedInAt||new Date().toISOString(),...t.label?{label:String(t.label)}:{},...t.email?{email:String(t.email)}:{},...t.name?{name:String(t.name)}:{}},jr(o,s)}var me=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Ot=12e4;function Hr(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function oe(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(me))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function X(e){let t=oe(e);return{id:t,...me[t]}}function L(e,t={}){if(!D.existsSync(e))return t;try{let r=JSON.parse(D.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${M.basename(e)}`)}}function Tt(e){U(e),process.platform!=="win32"&&D.chmodSync(e,448)}function V(e,t){Tt(M.dirname(e));let r=`${e}.${process.pid}.${rt(4).toString("hex")}.tmp`;D.writeFileSync(r,`${JSON.stringify(t,null,2)}
+`,{mode:384}),D.renameSync(r,e),process.platform!=="win32"&&D.chmodSync(e,384)}function zr(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function et(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function pe(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=e.expires_at_ms!=null,o;if(n){let s=e.expires_at_ms;if(o=Number(s),typeof s!="number"&&typeof s!="string"||typeof s=="string"&&!s.trim()||!Number.isFinite(o)||o<=0)throw new Error("OAuth credential has invalid expires_at_ms")}else o=Number(e.expiresAt||e.expires_at||0),Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3);if(!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function qr(e={}){let t=e.file||M.join(R(),"oauth.json"),r=e.metadataFile||M.join(M.dirname(t),"oauth-meta.json"),n=e.linksFile||M.join(M.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Kr,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&zr(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function l(y){Tt(M.dirname(c));let p;for(let f=0;f<400;f+=1)try{p=D.openSync(c,"wx",384);break}catch(m){if(m?.code!=="EEXIST")throw m;try{Date.now()-D.statSync(c).mtimeMs>3e5&&D.unlinkSync(c)}catch{}await new Promise(h=>setTimeout(h,25))}if(p===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await y()}finally{try{D.closeSync(p)}catch{}try{D.unlinkSync(c)}catch{}}}function u(y,p="oauth"){return["application","oracle","kind",p,"provider",y]}let w=!1;function g(){if(w)return;w=!0;let y=M.join(R(),"oauth-links.json");if(M.resolve(n)===M.resolve(y))try{vt({linksFile:n})}catch{}}function E(y){if(g(),!D.existsSync(n))return[];let f=L(n,{providers:{}}).providers?.[y];if(!Array.isArray(f))return[];let m=[];for(let h of f)if(M.isAbsolute(String(h||"")))try{let x=L(h,{});if(y==="anthropic-oauth"&&x.claudeAiOauth){let N=pe(x.claudeAiOauth);m.push({...N,refreshToken:"",source:"external-access-only",label:M.basename(M.dirname(h))||"claude-lane"});continue}let C=x.credential_pool&&typeof x.credential_pool=="object"?x.credential_pool:null;if(C){let N=C[y]||C[y.replace(/-oauth$/,"")]||[],ze=Array.isArray(N)?N:N?[N]:[];for(let Y of ze)if(!(!Y||typeof Y!="object"))try{let Oe=pe(Y);m.push({...Oe,refreshToken:"",source:"external-access-only",label:String(Y.label||Y.id||M.basename(M.dirname(h))||y)})}catch{}}}catch{}return m}function S(y){let p=E(y);return p.length?p.find(f=>!f.expiresAt||f.expiresAt>o()+Ot)||p[0]:null}function T(y){return y.map(p=>({label:String(p.label||"lane"),source:"external-access-only",expiresAt:Number(p.expiresAt||0),healthy:!p.expiresAt||p.expiresAt>o()+Ot}))}function v(y){let p=oe(y);if(i){let h=s("secret-tool",["lookup",...u(p)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!h.error&&h.status===0&&String(h.stdout||"").trim())try{return pe(JSON.parse(String(h.stdout).trim()))}catch{}return S(p)}let m=L(t,{providers:{}}).providers?.[p];if(m)try{return pe(m)}catch{}return S(p)}function A(y,p){let f=oe(y),m=pe(p);if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} OAuth`,...u(f)],{input:JSON.stringify(m),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected OAuth credential");let C=L(r,{providers:{}});C.providers||={},C.providers[f]={expiresAt:m.expiresAt,source:m.source},V(r,C);try{let N=Ze(m.idToken);Qe(f,{source:m.source,...N,label:N.name||N.email||f},{configDir:M.dirname(t)})}catch{}return m}let h=L(t,{providers:{}});h.providers||={},h.providers[f]=m,V(t,h);try{let x=Ze(m.idToken);Qe(f,{source:m.source,...x,label:x.name||x.email||f},{configDir:M.dirname(t)})}catch{}return m}function W(y){let p=oe(y);if(i){let h=s("secret-tool",["clear",...u(p)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{}});return x.providers&&delete x.providers[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{}}),m=!!f.providers?.[p];return f.providers&&delete f.providers[p],V(t,f),m}function B(y){let p=et(y);if(i){let f=s("secret-tool",["lookup",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return f.error||f.status!==0?"":String(f.stdout||"").trim()}return String(L(t,{apiKeys:{}}).apiKeys?.[p]||"").trim()}function Q(y,p){let f=et(y),m=String(p||"").trim();if(!m)throw new Error("API key is empty");if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} API key`,...u(f,"api-key")],{input:m,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected API key");let C=L(r,{providers:{},apiKeys:{}});return C.apiKeys||={},C.apiKeys[f]={configured:!0},V(r,C),!0}let h=L(t,{providers:{},apiKeys:{}});return h.apiKeys||={},h.apiKeys[f]=m,V(t,h),!0}function H(y){let p=et(y);if(i){let h=s("secret-tool",["clear",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{},apiKeys:{}});return x.apiKeys&&delete x.apiKeys[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{},apiKeys:{}}),m=!!f.apiKeys?.[p];return f.apiKeys&&delete f.apiKeys[p],V(t,f),m}function k(){g();let y={},p={};if(i){let f=L(r,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!v(m),expiresAt:Number(h.expiresAt||0),source:String(h.source||"oracle"),storage:a,lanes:T(E(m))};for(let m of Object.keys(f.apiKeys||{}))p[m]={configured:!!B(m),storage:a}}else{let f=L(t,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!h?.accessToken,expiresAt:Number(h?.expiresAt||0),source:String(h?.source||"oracle"),storage:a,lanes:T(E(m))};for(let[m,h]of Object.entries(f.apiKeys||{}))p[m]={configured:!!h,storage:a}}for(let f of Object.keys(me)){let m=T(E(f));if(y[f]){y[f].lanes=m;continue}let h=S(f);h&&(y[f]={loggedIn:!0,expiresAt:h.expiresAt,source:h.source,storage:"external-access-source",lanes:m})}return{storage:a,providers:y,apiKeys:p}}return Object.freeze({file:t,storage:a,get:v,set:A,remove:W,getApiKey:B,setApiKey:Q,removeApiKey:H,status:k,withLock:l})}var $t;function q(){return $t||=qr(),$t}function tt(e){return Buffer.from(e).toString("base64url")}function Wr(){let e=tt(rt(32));return{verifier:e,challenge:tt(Fr("sha256").update(e).digest()),state:tt(rt(24))}}function Yr(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Dr(r,n)}function Gr(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return Br(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function nt(e){return new URLSearchParams(e).toString()}async function se(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Jr(e){if(e)return String(await e()).trim();let t=Ur.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function ot(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return pe({accessToken:r,refreshToken:n,expiresAt:Hr(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Vr(e){let t=me["anthropic-oauth"],r=e.pkce||Wr(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Jr(e.inputFn),[i,a]=s.split("#",2);if(!i||!Yr(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return ot(await se(c,"Claude OAuth token exchange"),e)}async function Xr(e){let t=me["openai-codex"],r=await se(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await se(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:nt({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return ot(await se(i,"Codex OAuth token exchange"),e)}function Le(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Zr(e){let t=me["xai-oauth"],r=await se(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Le(r.authorization_endpoint);let n=Le(r.token_endpoint),o=await se(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Le(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let w=await se(l,"xAI OAuth token exchange");return ot(w,{...e,discovery:{authorization_endpoint:Le(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Mt(e,t={}){let r=oe(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Gr,output:t.output||(o=>process.stdout.write(`${o}
+`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Vr(n):r==="openai-codex"?Xr(n):Zr(n)}import je from"node:fs";import st from"node:path";var Qr=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Ce(e){return String(e||"").trim()||void 0}function en(e,{required:t=!1}={}){let r=Ce(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!Qr.has(r))throw new Error(`unsupported provider: ${r}`);return r}function tn(e,{required:t=!1}={}){let r=Ce(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function rn(e){let t=Ce(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function Ne({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=en(e),s=tn(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:rn(r)};if(Ce(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var nn=new Set(["auto","standalone","hermes","remote","arch"]);function on(){return st.join(R(),"model.json")}function he(e){return String(e||"").trim()||void 0}function sn(e={}){let t=he(e.backend)?.toLowerCase()||"auto",r=Ne({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=he(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=Object.fromEntries(Object.entries(e.contextByModel||{}).filter(([,u])=>Number.isSafeInteger(u)&&u>0)),i=he(e.reasoningEffort),a=he(e.computeHost||e.remoteHost),c=he(e.computeUser||e.remoteUser),l=he(e.computePath||e.remotePath);if(!nn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!a)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...Object.keys(s).length?{contextByModel:s}:{},...i?{reasoningEffort:i}:{},...a?{computeHost:a}:{},...c?{computeUser:c}:{},...l?{computePath:l}:{}}}function Fe(e){let t=sn(e),r=on();U(st.dirname(r)),process.platform!=="win32"&&je.chmodSync(st.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return je.writeFileSync(n,`${JSON.stringify(t,null,2)}
 `,{mode:384}),je.renameSync(n,r),process.platform!=="win32"&&je.chmodSync(r,384),t}var jt=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},nous:{model:"moonshotai/kimi-k3"},qwen:{model:"qwen-plus"},glm:{model:"glm-4.5"},custom:{model:""}});function at(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function ln(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function fn(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",s),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
 `)},s=i=>{let a=String(i);for(let c of a){if(c==="\r"||c===`
-`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function ct(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...Ne({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function Dt(e,t,r={}){return De(ct(e,t,r))}function dn(e){process.stdout.write(`storage: ${e.storage}
+`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function ct(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...Ne({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function Ft(e,t,r={}){return Fe(ct(e,t,r))}function dn(e){process.stdout.write(`storage: ${e.storage}
 `);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
 `);return}for(let[n,o]of t){let s=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${n}: ${o.loggedIn?"logged in":"missing"}, expires ${s}
 `);for(let i of o.lanes||[])process.stdout.write(`  ${i.label}: ${i.healthy?"ready":"expired"}
@@ -17,11 +17,11 @@ var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&
 `)}function pn(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]","    PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|nous|qwen|glm|custom",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth usage [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
 `)}var ge={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:pn(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=q();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
 `):dn(o),0}if(r==="usage"){let{collectOAuthUsage:o}=await Promise.resolve().then(()=>(Nt(),Ct)),s=await o(n);return process.stdout.write(`${JSON.stringify(s)}
-`),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=X(o),i=at(t,"--model")||s.model;ct(s.id,i);let a=await Mt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{Dt(s.id,i)}catch(l){throw c?n.set(s.id,c):n.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
-`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(jt,o))throw new Error(`unsupported API-key provider: ${o}`);let s=at(t,"--model")||jt[o].model,i=at(t,"--base-url");ct(o,s,{baseUrl:i});let a=t.includes("--stdin")?await ln():await fn();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{Dt(o,s,{baseUrl:i})}catch(l){throw c?n.setApiKey(o,c):n.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${n.storage}
+`),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=X(o),i=at(t,"--model")||s.model;ct(s.id,i);let a=await Mt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{Ft(s.id,i)}catch(l){throw c?n.set(s.id,c):n.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
+`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(jt,o))throw new Error(`unsupported API-key provider: ${o}`);let s=at(t,"--model")||jt[o].model,i=at(t,"--base-url");ct(o,s,{baseUrl:i});let a=t.includes("--stdin")?await ln():await fn();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{Ft(o,s,{baseUrl:i})}catch(l){throw c?n.setApiKey(o,c):n.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${n.storage}
 `),0}if(r==="logout"){let o=String(t.find(a=>!a.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let s=!1;try{s=n.remove(oe(o))}catch{}let i=n.removeApiKey(o);if(!s&&!i)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
 `),0}throw new Error(`unknown auth action: ${r}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
-`),1}}};var mn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var Io=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var Fe=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),hn=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Ft=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),gn=Object.freeze(Ft[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function yn(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function Ut(e,t,r){let n=yn(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function ut({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>Ut(38,r,n),bg:(r,n)=>Ut(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var Co=ut();function Bt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as $n}from"node:child_process";var Se=Buffer.alloc(0);var wn={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},bn={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function j({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function qt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function kn(e){return e>=64&&e<=126}function Kt(e){let t=e.toLowerCase();return j({name:t,shift:e!==t,sequence:e})}function xn(e){return e===13?j({name:"return",sequence:"\r"}):e===10?j({name:"return",sequence:`
+`),1}}};var mn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var Io=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var De=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),hn=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Dt=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),gn=Object.freeze(Dt[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function yn(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function Ut(e,t,r){let n=yn(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function ut({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>Ut(38,r,n),bg:(r,n)=>Ut(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var Co=ut();function Bt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as $n}from"node:child_process";var Se=Buffer.alloc(0);var wn={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},bn={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function j({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function qt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function kn(e){return e>=64&&e<=126}function Kt(e){let t=e.toLowerCase();return j({name:t,shift:e!==t,sequence:e})}function xn(e){return e===13?j({name:"return",sequence:"\r"}):e===10?j({name:"return",sequence:`
 `}):e===9?j({name:"tab",sequence:"	"}):e===127?j({name:"backspace",sequence:"\x7F"}):e===8?j({name:"backspace",sequence:"\b"}):e>=1&&e<=26?j({name:String.fromCharCode(e+96),ctrl:!0,sequence:String.fromCharCode(e)}):j({name:"unknown",sequence:String.fromCharCode(e)})}function Sn(e){let t=/^\u001b[\[O](\d*)(?:;(\d+))?(.)$/s.exec(e);if(!t)return j({name:"unknown",sequence:e});let r=t[1]===""?null:Number(t[1]),n=t[2]===void 0?null:Number(t[2]),o=t[3],s=null,i=n;if(o==="~"?s=bn[r]??null:(s=wn[o]??null,i===null&&r!==null&&r>1&&(i=r)),!s)return j({name:"unknown",sequence:e});let a=i===null?0:Math.max(0,i-1);return j({name:s,shift:(a&1)!==0,meta:(a&2)!==0,ctrl:(a&4)!==0,sequence:e})}function vn(e,t,r,n){let o=()=>(r.push(j({name:"escape",sequence:"\x1B"})),1);if(t+1>=e.length)return n?o():0;let s=e[t+1];if(s===91||s===79){let l=t+2;for(;l<e.length&&!kn(e[l]);)l+=1;return l>=e.length?n?o():0:(r.push(Sn(e.toString("utf8",t,l+1))),l+1-t)}if(s===27)return o();let i=qt(s);if(t+1+i>e.length)return n?o():0;let a=e.toString("utf8",t+1,t+1+i),c=a.toLowerCase();return r.push(j({name:c,meta:!0,shift:a!==c,sequence:`\x1B${a}`})),1+i}function Ht(e,t){let r=[],n=0;for(;n<e.length;){let o=e[n];if(o===27){let i=vn(e,n,r,t);if(i===0)return{keys:r,rest:Buffer.from(e.subarray(n))};n+=i;continue}if(o<32||o===127){r.push(xn(o)),n+=1;continue}let s=qt(o);if(n+s>e.length)return t?(r.push(Kt(e.toString("utf8",n))),{keys:r,rest:Se}):{keys:r,rest:Buffer.from(e.subarray(n))};r.push(Kt(e.toString("utf8",n,n+s))),n+=s}return{keys:r,rest:Se}}function zt(e){return Buffer.isBuffer(e)?e:e==null?Se:typeof e=="string"?Buffer.from(e,"utf8"):Buffer.from(e)}function Wt(){let e=Se;return{push(t){let r=e.length===0?zt(t):Buffer.concat([e,zt(t)]),{keys:n,rest:o}=Ht(r,!1);return e=o,n},flush(){if(e.length===0)return[];let{keys:t}=Ht(e,!0);return e=Se,t},get pending(){return e.length}}}var lt=/\u001B\[[0-9;]*m/g;function Yt(e){if(new RegExp("\\p{Mark}","u").test(e))return 0;let t=e.codePointAt(0);return t===8205||t===65039?0:t>=4352&&(t<=4447||t===9001||t===9002||t>=11904&&t<=42191&&t!==12351||t>=44032&&t<=55203||t>=63744&&t<=64255||t>=65040&&t<=65049||t>=65072&&t<=65135||t>=65280&&t<=65376||t>=65504&&t<=65510||t>=127744&&t<=129791||t>=131072&&t<=262141)?2:t<32||t>=127&&t<160?0:1}function _n(e){return[...Bt(e)].reduce((t,r)=>t+Yt(r),0)}function An(e,t){if(t<=0)return"";let r=String(e).split(/(\u001B\[[0-9;]*m)/g),n="",o=0,s=!1;for(let i of r)if(i){if(lt.test(i)){lt.lastIndex=0,n+=i,s=i!=="\x1B[0m";continue}lt.lastIndex=0;for(let a of i){let c=Yt(a);if(o+c>t)return s?`${n}\x1B[0m`:n;n+=a,o+=c}}return n}function Ue(e,t,r="left"){let n=Math.max(0,Math.floor(Number(t)||0)),o=An(String(e),n),s=Math.max(0,n-_n(o));if(r==="right")return`${" ".repeat(s)}${o}`;if(r==="center"){let i=Math.floor(s/2);return`${" ".repeat(i)}${o}${" ".repeat(s-i)}`}return`${o}${" ".repeat(s)}`}var Qo=Object.freeze(["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"]),es=Object.freeze({thinking:"Thinking",writing:"Writing",executing:"Executing",waiting:"Waiting"});async function Gt(e,{headers:t={}}={}){let r=new AbortController,n=setTimeout(()=>r.abort(),6e3);try{let o=await fetch(e,{headers:t,signal:r.signal}),s=null;try{s=await o.json()}catch{s=null}return{status:o.status,body:s}}finally{clearTimeout(n)}}async function En(e){let t=String(e||"").trim();if(!/^\d+:[\w-]{20,}$/.test(t))return{ok:!1,definitive:!0,error:"that does not look like a telegram bot token (123456:ABC\u2026)"};try{let{status:r,body:n}=await Gt(`https://api.telegram.org/bot${t}/getMe`);return r===200&&n?.ok&&n.result?.username?{ok:!0,definitive:!0,username:`@${n.result.username}`}:r===401||r===404?{ok:!1,definitive:!0,error:"telegram rejected this token (check BotFather)"}:{ok:!1,definitive:!1,error:`telegram returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function On(e){let t=String(e||"").trim();if(t.length<50)return{ok:!1,definitive:!0,error:"that does not look like a discord bot token"};try{let{status:r,body:n}=await Gt("https://discord.com/api/v10/users/@me",{headers:{Authorization:`Bot ${t}`}});return r===200&&n?.username?{ok:!0,definitive:!0,username:n.username}:r===401?{ok:!1,definitive:!0,error:"discord rejected this token (reset it in the developer portal)"}:{ok:!1,definitive:!1,error:`discord returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function Be(e,t){let r=String(e||"").toLowerCase();return r==="telegram"?En(t):r==="discord"?On(t):{ok:!1,definitive:!1}}var Tn=Object.freeze(["telegram","discord","whatsapp","slack","signal"]),Qt=Object.freeze([{id:"claude",label:"Claude",hint:"Anthropic OAuth",kind:"oauth"},{id:"codex",label:"Codex",hint:"OpenAI OAuth",kind:"oauth"},{id:"grok",label:"Grok",hint:"xAI OAuth",kind:"oauth"}]),er=Object.freeze([{id:"openrouter",label:"OpenRouter",hint:"API key",kind:"api-key"},{id:"openai",label:"OpenAI",hint:"API key",kind:"api-key"},{id:"anthropic",label:"Anthropic",hint:"API key",kind:"api-key"},{id:"deepseek",label:"DeepSeek",hint:"API key",kind:"api-key"},{id:"gemini",label:"Gemini",hint:"API key",kind:"api-key"},{id:"kimi",label:"Kimi",hint:"API key",kind:"api-key"},{id:"mistral",label:"Mistral",hint:"API key",kind:"api-key"},{id:"nous",label:"Nous Portal",hint:"API key",kind:"api-key"},{id:"qwen",label:"Qwen",hint:"API key",kind:"api-key"},{id:"glm",label:"GLM",hint:"API key",kind:"api-key"}]);function Mn(e,t){let r=String(t||"unset");return r==="ready"||r==="connected"||r==="configured"?e.fg($.ok,r):r==="manual"?e.fg($.warn,r):e.fg($.banner_dim,r||"unset")}function Jt({profile:e="oracle",statuses:t=null,oauthStatus:r=null,runtime:n=null}={}){let o=t;if(!o)try{o=ue(e).statuses||{}}catch{o={}}let s=r;if(!s)try{s=q().status()}catch{s={providers:{},apiKeys:{}}}let i=n;if(!i)try{i=de()}catch{i={ok:!1}}let a=Qt.some(w=>{let g=X(w.id);return s.providers?.[g.id]?.loggedIn===!0}),c=er.some(w=>s.apiKeys?.[w.id]?.configured===!0),l=[{id:"model",label:"model / sign-in",note:"Claude \xB7 Codex \xB7 Grok \xB7 API keys",status:a||c?"ready":"unset",action:"model"}];i.ok||l.push({id:"runtime",label:"messaging runtime",note:"one-time install \u2014 powers telegram/discord bridge",status:"missing",action:"bootstrap"});let u=new Map(ae().map(w=>[w.key,w]));for(let w of Tn){let g=u.get(w);if(!g)continue;let E=o[g.key]||(g.required?.length?"unset":"manual"),S=!i.ok&&E==="ready"?"token set":E;l.push({id:g.key,label:g.name,note:g.note||"",status:S,action:g.required?.length?"token":"hermes",platform:g})}return l.push({id:"gateway",label:"restart gateway",note:"apply channel config",status:"",action:"gateway"},{id:"gateway-install",label:"start on boot",note:"keep the bot alive after reboot",status:"",action:"gateway-install"},{id:"done",label:"done",note:"back to oracle",status:"",action:"done",skip:!0}),l}function Vt(e=null){let t=e;if(!t)try{t=q().status()}catch{t={providers:{},apiKeys:{}}}let r=[];for(let n of Qt){let o=X(n.id),s=t.providers?.[o.id]?.loggedIn===!0;r.push({id:n.id,label:n.label,note:n.hint,status:s?"connected":"OAuth",action:"oauth",kind:"oauth"})}for(let n of er){let o=t.apiKeys?.[n.id]?.configured===!0;r.push({id:n.id,label:n.label,note:n.hint,status:o?"configured":"API key",action:"api-key",kind:"api-key"})}return r.push({id:"back",label:"back",note:"setup menu",status:"",action:"back",skip:!0}),r}function Ke({width:e,palette:t,title:r,subtitle:n="",rows:o=[],index:s=0,footer:i="\u2191/\u2193 move   enter select   esc back"}={}){let a=Math.max(40,Math.floor(Number(e)||80)),c=Math.max(36,Math.min(a-4,72)),l=Math.max(0,Math.floor((a-c)/2)),u=Math.max(0,c-4),w=" ".repeat(l),g=A=>t.fg($.banner_border,A),E=A=>`${w}${A}`,S=(A="")=>E(`${g("\u2502")} ${Ue(A,u)} ${g("\u2502")}`),T="\u2500".repeat(Math.max(0,c-2)),v=[E(`${g("\u256D")}${g(T)}${g("\u256E")}`),S(t.bold(t.fg($.accent,r||"oracle setup"))),S(g("\u2500".repeat(u)))];return n&&(v.push(S(t.fg($.banner_dim,n))),v.push(S(""))),o.forEach((A,W)=>{let B=W===s,Q=B?"\u203A":" ",H=String(A.label||A.id||""),k=String(A.note||""),y=A.status?Mn(t,A.status):"",p=` ${Q} ${H}`,f=[y,k?t.fg($.banner_dim,k):""].filter(Boolean).join("  "),m=Math.max(1,u-Xt(p)-Xt(tr(f))-1),h=`${p}${" ".repeat(m)}${f}`;B?v.push(S(t.bg($.selection_bg,t.bold(t.fg($.banner_text,Ue(h,u)))))):v.push(S(h))}),v.push(S("")),v.push(S(t.fg($.banner_dim,i))),v.push(E(`${g("\u2570")}${g(T)}${g("\u256F")}`)),v}function Rn({width:e,palette:t,platformKey:r="telegram",tokenLength:n=0,error:o=""}={}){let s=Math.max(40,Math.floor(Number(e)||80)),i=Math.max(36,Math.min(s-4,72)),a=Math.max(0,Math.floor((s-i)/2)),c=Math.max(0,i-4),l=" ".repeat(a),u=v=>t.fg($.banner_border,v),w=v=>`${l}${v}`,g=(v="")=>w(`${u("\u2502")} ${Ue(v,c)} ${u("\u2502")}`),E="\u2500".repeat(Math.max(0,i-2)),S=n>0?"\u2022".repeat(Math.min(n,40)):t.fg($.banner_dim,"paste token here (hidden)");return[w(`${u("\u256D")}${u(E)}${u("\u256E")}`),g(t.bold(t.fg($.accent,`setup \xB7 ${r}`))),g(u("\u2500".repeat(c))),g(t.fg($.banner_dim,"token stays local \xB7 never echoed \xB7 never sent to chat")),g(""),g(`${t.fg($.banner_dim,"token")}  ${S}`),g(n?t.fg($.banner_dim,`       ${n} characters`):""),g(o?t.fg($.warn,o):""),g(t.fg($.banner_dim,"type or paste   backspace   enter save   esc cancel")),w(`${u("\u2570")}${u(E)}${u("\u256F")}`)]}function Pn({width:e,palette:t,title:r,subtitle:n,index:o=0,yesLabel:s="yes",noLabel:i="not now"}={}){return Ke({width:e,palette:t,title:r,subtitle:n,rows:[{id:"yes",label:s,note:"",status:""},{id:"no",label:i,note:"",status:""}],index:o,footer:"\u2191/\u2193 move   enter select   esc skip"})}function tr(e){return String(e||"").replace(/\u001b\[[0-9;]*m/g,"")}function Xt(e){return tr(e).length}function ye(e){e.write("\x1B[2J\x1B[H")}function ve(e,t){ye(e),e.write(`${t.join(`
 `)}
 `)}function Zt(e){let t=de();if(!t?.bin)return{code:1,error:"hermes not found \u2014 install hermes or run oracle bootstrap"};let r=$n(t.bin,e,{stdio:"inherit",env:process.env});return{code:typeof r.status=="number"?r.status:1}}async function rr({stdin:e=process.stdin,stdout:t=process.stdout,env:r=process.env,palette:n,profile:o="oracle",startAt:s="menu",runAuth:i=c=>ge.run({argv:c}),restartGateway:a=!0}={}){if(e?.isTTY!==!0||t?.isTTY!==!0)return{completed:!1,actions:[],reason:"non-tty"};let c=Math.max(40,Number(t.columns||80)),l=[],u="menu",w=0,g=0,E=0,S="",T="",v="",A=null,W=Jt({profile:o}),B=Vt();String(s).startsWith("token:")?(v=String(s).slice(6),u="token"):s==="model"&&(u="model");let Q=Wt(),H=e.isRaw===!0;typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume();let k=()=>{u==="menu"?ve(t,Ke({width:c,palette:n,title:"oracle setup",subtitle:"\u2191\u2193 enter \xB7 model + telegram/discord/whatsapp",rows:W,index:w})):u==="model"?ve(t,Ke({width:c,palette:n,title:"sign in",subtitle:"subscription OAuth or API key",rows:B,index:g})):u==="token"?ve(t,Rn({width:c,palette:n,platformKey:v,tokenLength:S.length,error:T})):u==="confirm-gateway"?ve(t,Pn({width:c,palette:n,title:A?.title||"restart gateway?",subtitle:A?.subtitle||"applies bot tokens to the live bridge",index:E,yesLabel:"restart gateway now",noLabel:"later \u2014 oracle setup gateway restart"})):u==="notice"&&ve(t,Ke({width:c,palette:n,title:A?.title||"setup",subtitle:A?.subtitle||"",rows:[{id:"ok",label:"continue",note:"",status:""}],index:0,footer:"enter continue   esc menu"}))};k();let y=async p=>(typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),p);return new Promise(p=>{let f=null,m=!1,h=b=>{m||(m=!0,f&&clearTimeout(f),e.off("data",Oe),Promise.resolve(y(b)).then(p))},x=()=>{W=Jt({profile:o}),B=Vt()},C=async()=>{let b=S.trim();if(!b){T="empty token",k();return}T="checking token\u2026",k();let d={ok:!1,definitive:!1};try{d=await Be(v,b)}catch{d={ok:!1,definitive:!1}}if(!d.ok&&d.definitive){S="",T=d.error||"platform rejected this token",k();return}try{let _=Me(o,v,b);te({lastPlatform:v,profile:o,ready:!0}),l.push(`token:${v}${d.ok?":verified":""}`),S="",T="";let O=!1;try{O=de().ok===!0}catch{O=!1}let pt=d.username?` \xB7 bot ${d.username}`:"";O?(A={title:`${v} saved${pt}`,subtitle:d.ok?`token verified live \xB7 ${_.path}`:`wrote credentials \xB7 ${_.path}`},E=0,u=a?"confirm-gateway":"menu"):(A={title:`${v} token saved${pt}`,subtitle:"next: install the messaging runtime (menu row) so the bot can answer"},E=0,u="notice"),x(),k()}catch(_){T=_?.message||"save failed",S="",k()}},N=async b=>{if(!b||b.action==="done"){h({completed:!0,actions:l});return}if(b.action==="model"){u="model",g=0,k();return}if(b.action==="token"){v=b.id,S="",T="",u="token",k();return}if(b.action==="bootstrap"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(`installing messaging runtime (one-time, a few minutes)\u2026
@@ -31,8 +31,8 @@ var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&
 `:`restarting gateway\u2026
 `);let _=Zt(["-p",o,"gateway",d]);l.push(`gateway:${d}:${_.code}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),A={title:_.code===0?d==="install"?"boot service installed":"gateway restarted":`gateway ${d} failed`,subtitle:_.code===0?d==="install"?"bot survives reboots now":"channels should be live":_.error||`exit ${_.code}`},u="notice",k()}},ze=async b=>{if(!b||b.action==="back"){u="menu",k();return}typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t);let d=b.kind==="oauth"?["login",b.id]:["api-key",b.id];t.write(`connecting ${b.label}\u2026
 `);let _=1;try{_=await i(d)}catch(O){t.write(`${O?.message||O}
-`),_=1}l.push(`model:${b.id}:${_}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),u="menu",k()},Y=b=>{for(let d of b){if(d.ctrl&&d.name==="c"){h({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(d.name==="escape"){S="",T="",u="menu",k();continue}if(d.name==="return"){C();continue}if(d.name==="backspace"||d.sequence==="\x7F"||d.sequence==="\b"){S=S.slice(0,-1),T="",k();continue}let O=d.sequence||"";if(O&&!d.ctrl&&!d.meta&&O!=="\x1B"){if(O.startsWith("\x1B"))continue;S+=O,T="",k()}continue}if(u==="confirm-gateway"){if(d.name==="up"||d.name==="down"){E=E===0?1:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&(E===0?N({action:"gateway",id:"gateway"}):(u="menu",k()));continue}if(u==="notice"){(d.name==="return"||d.name==="escape")&&(u="menu",k());continue}if(u==="model"){let O=B.length;if(d.name==="up"){g=O?(g-1+O)%O:0,k();continue}if(d.name==="down"){g=O?(g+1)%O:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&ze(B[g]);continue}let _=W.length;if(d.name==="up"){w=_?(w-1+_)%_:0,k();continue}if(d.name==="down"){w=_?(w+1)%_:0,k();continue}if(d.name==="escape"){h({completed:!0,actions:l,reason:"esc"});continue}d.name==="return"&&N(W[w])}},Oe=b=>{Y(Q.push(b)),f&&(clearTimeout(f),f=null),Q.pending>0&&(f=setTimeout(()=>{f=null,Y(Q.flush())},30),typeof f.unref=="function"&&f.unref())};e.on("data",Oe)})}var _e=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),Ae=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),He=Object.freeze([..._e.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...Ae.map((e,t)=>({n:_e.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:_e.length+Ae.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:_e.length+Ae.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:_e.length+Ae.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function Ln(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=He.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function sr(e="sign in",t=0){let r=Fe[t]||Fe[0];return["",`${r[0]}      oracle`,`${r[1]}     ${e}`,r[2],r[3],r[4],""].join(`
-`)}async function Cn(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<Fe.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${sr("sign in",r)}
+`),_=1}l.push(`model:${b.id}:${_}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),u="menu",k()},Y=b=>{for(let d of b){if(d.ctrl&&d.name==="c"){h({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(d.name==="escape"){S="",T="",u="menu",k();continue}if(d.name==="return"){C();continue}if(d.name==="backspace"||d.sequence==="\x7F"||d.sequence==="\b"){S=S.slice(0,-1),T="",k();continue}let O=d.sequence||"";if(O&&!d.ctrl&&!d.meta&&O!=="\x1B"){if(O.startsWith("\x1B"))continue;S+=O,T="",k()}continue}if(u==="confirm-gateway"){if(d.name==="up"||d.name==="down"){E=E===0?1:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&(E===0?N({action:"gateway",id:"gateway"}):(u="menu",k()));continue}if(u==="notice"){(d.name==="return"||d.name==="escape")&&(u="menu",k());continue}if(u==="model"){let O=B.length;if(d.name==="up"){g=O?(g-1+O)%O:0,k();continue}if(d.name==="down"){g=O?(g+1)%O:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&ze(B[g]);continue}let _=W.length;if(d.name==="up"){w=_?(w-1+_)%_:0,k();continue}if(d.name==="down"){w=_?(w+1)%_:0,k();continue}if(d.name==="escape"){h({completed:!0,actions:l,reason:"esc"});continue}d.name==="return"&&N(W[w])}},Oe=b=>{Y(Q.push(b)),f&&(clearTimeout(f),f=null),Q.pending>0&&(f=setTimeout(()=>{f=null,Y(Q.flush())},30),typeof f.unref=="function"&&f.unref())};e.on("data",Oe)})}var _e=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),Ae=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),He=Object.freeze([..._e.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...Ae.map((e,t)=>({n:_e.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:_e.length+Ae.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:_e.length+Ae.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:_e.length+Ae.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function Ln(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=He.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function sr(e="sign in",t=0){let r=De[t]||De[0];return["",`${r[0]}      oracle`,`${r[1]}     ${e}`,r[2],r[3],r[4],""].join(`
+`)}async function Cn(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<De.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${sr("sign in",r)}
 `),await t(90)}async function $s({stdin:e=process.stdin,stdout:t=process.stdout,readLine:r,runAuth:n=o=>ge.run({argv:o})}={}){if(await Cn(t),t.write(`${Ee()}
 `),t.write(`number or name  \xB7  enter skips
 `),e.isTTY!==!0||t.isTTY!==!0)return{skipped:!0,reason:"non-tty"};t.write("> ");let o=r?await r():await new Promise(c=>{let l="",u=w=>{l+=String(w),(l.includes(`
@@ -46,7 +46,7 @@ Detect: oracle harness detect
 `),1;let o=In(n.bin,e,{stdio:t?"inherit":"pipe",encoding:"utf8",env:r});return o.error?(process.stderr.write(`oracle setup: failed to run hermes: ${o.error.message}
 `),1):(t||(o.stdout&&process.stdout.write(o.stdout),o.stderr&&process.stderr.write(o.stderr)),typeof o.status=="number"?o.status:1)}async function or(e){if(!Z.isTTY||typeof Z.setRawMode!="function"){let t=new Error("interactive token entry requires a tty");throw t.code="NO_TTY",t}return nr.write(`${e}: `),new Promise((t,r)=>{let n="",o=()=>{Z.off("data",s),Z.setRawMode(!1),Z.pause(),nr.write(`
 `)},s=i=>{for(let a of String(i)){if(a==="\r"||a===`
-`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};Z.setRawMode(!0),Z.resume(),Z.on("data",s)})}async function Dn(e,t,r=[]){let n=ee(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
+`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};Z.setRawMode(!0),Z.resume(),Z.on("data",s)})}async function Fn(e,t,r=[]){let n=ee(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
 `),process.stderr.write(`known: ${ae().map(c=>c.key).join(", ")}
 `),1;if(!n.required.length)return process.stdout.write(`opening hermes setup for ${n.key} (interactive)
 `),te({lastPlatform:n.key,profile:e}),dt(["-p",e,...n.hermes||["gateway","setup"]]);let o={},s=[];for(let c=0;c<r.length;c++){let l=r[c];if(l==="--token"&&r[c+1]){o.token=r[++c];continue}if(l==="--allowed-users"&&r[c+1]){o.allowedUsers=r[++c];continue}if(l==="--app-token"&&r[c+1]){o.appToken=r[++c];continue}if(l.startsWith("-"))return process.stderr.write(`oracle setup: unknown flag ${l}
@@ -64,13 +64,13 @@ next: oracle setup gateway restart
 `),0;if(["menu","list","ls"].includes(s)){if(r)return process.stdout.write(JSON.stringify({...ue(n),modelAuth:q().status()},null,2)+`
 `),0;if(process.stdin.isTTY===!0&&process.stdout.isTTY===!0&&!process.env.ORACLE_SETUP_PLAIN){let a=await rr({profile:n,palette:ut({color:process.stdout.isTTY!==!1})});return a?.completed===!1&&a?.reason==="non-tty"?1:0}return process.stdout.write(Ee()),process.stdout.write(Te(n)),0}if(["status","show"].includes(s)){let a=ue(n);return r?process.stdout.write(JSON.stringify({...a,modelAuth:q().status()},null,2)+`
 `):(process.stdout.write(Ee()),process.stdout.write(Te(n)),process.stdout.write(`hermes root: ${be()}
-`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(Ee()),0;if(a==="local"||a==="ollama"){let l=De({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
+`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(Ee()),0;if(a==="local"||a==="ollama"){let l=Fe({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
 loopback, no API key
 `),0}if(Ae.some(c=>c.id===a)||a==="custom")return ge.run({...e,argv:["api-key",a,...i.slice(1)]});try{return X(a),ge.run({...e,argv:["login",a,...i.slice(1)]})}catch(c){return process.stderr.write(`oracle setup model: ${c.message}
 `),process.stderr.write(Ee()),1}}if(["messaging","gateway-setup","platforms"].includes(s))return te({lastAction:"messaging",profile:n}),process.stdout.write(`opening hermes gateway setup wizard...
 `),dt(["-p",n,"gateway","setup"]);if(s==="gateway"){let a=(i[0]||"status").toLowerCase();return["status","start","stop","restart","run","install"].includes(a)?dt(["-p",n,"gateway",a]):(process.stderr.write(`usage: oracle setup gateway [status|start|stop|restart|run|install]
 `),1)}if(s==="profile"){let a=i[0]||n;return process.stdout.write(`profile: ${a}
 hermes: ${be()}/profiles/${a}
-`),process.stdout.write(Te(a)),0}return ee(s)?Dn(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
+`),process.stdout.write(Te(a)),0}return ee(s)?Fn(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
 ${ft()}
 `),1)}};export{He as SETUP_CHOICES,Ts as default,Ee as renderModelSetup,Ln as resolveSetupChoice,$s as runFirstRunModelSetup};