@oracle-agent/oracle 0.35.48 → 0.35.50

package/dist/cli/commands/setup.mjs

@@ -1,76 +1,77 @@
-var ir=Object.defineProperty;var ar=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var cr=(e,t)=>{for(var r in t)ir(e,r,{get:t[r],enumerable:!0})};var Ct={};cr(Ct,{OAUTH_USAGE_PROVIDERS:()=>an,collectOAuthUsage:()=>un,parseAnthropicUsage:()=>It,parseCodexUsage:()=>Lt});function Pt(e){let t=Number(e);return Number.isFinite(t)?t:null}function cn(e){let t=Pt(e);if(t==null)return null;let r=t<=1?t*100:t;return Math.max(0,Math.min(100,r))}function It(e){let t=[["five_hour","5h"],["seven_day","7d"],["seven_day_opus","Opus 7d"],["seven_day_sonnet","Sonnet 7d"]],r=[];for(let[n,o]of t){let s=e?.[n]||{},i=cn(s.utilization);i!=null&&r.push({label:o,usedPercent:i,resetAt:s.resets_at||s.reset_at||null})}return{source:"oauth_usage_api",windows:r}}function Lt(e){let t=e?.rate_limit||{},r=[["primary_window","5h"],["secondary_window","wk"]],n=[];for(let[o,s]of r){let i=t[o]||{},a=Pt(i.used_percent);a!=null&&n.push({label:s,usedPercent:Math.max(0,Math.min(100,a)),resetAt:i.reset_at||i.resets_at||null})}return{source:"usage_api",windows:n}}function ie({id:e,label:t,connected:r,windows:n=[],unavailable:o=null}){let s=n[0]||null;return{id:e,label:t,connected:r,usedPercent:s?s.usedPercent:null,windowLabel:s?s.label:null,resetAt:s?s.resetAt:null,windows:n,unavailable:o}}function it(e,t){try{return String(e?.get?.(t)?.accessToken||"").trim()}catch{return""}}async function Rt(e,t,r){let n=await e(t,{headers:r});if(!n?.ok)throw new Error(`HTTP ${n?.status||0}`);return n.json()}async function un(e,{fetchFn:t=globalThis.fetch}={}){let r=new Date().toISOString(),n=[],o=it(e,"anthropic-oauth");if(!o)n.push(ie({id:"anthropic-oauth",label:"Claude",connected:!1,unavailable:"not connected"}));else try{let a=await Rt(t,"https://api.anthropic.com/api/oauth/usage",{Authorization:`Bearer ${o}`,Accept:"application/json","anthropic-beta":"oauth-2025-04-20","User-Agent":"claude-code/2.1.0"}),c=It(a);n.push(ie({id:"anthropic-oauth",label:"Claude",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{n.push(ie({id:"anthropic-oauth",label:"Claude",connected:!0,unavailable:"quota unavailable"}))}let s=it(e,"openai-codex");if(!s)n.push(ie({id:"openai-codex",label:"Codex",connected:!1,unavailable:"not connected"}));else try{let a=await Rt(t,"https://chatgpt.com/backend-api/wham/usage",{Authorization:`Bearer ${s}`,Accept:"application/json","User-Agent":"codex-cli"}),c=Lt(a);n.push(ie({id:"openai-codex",label:"Codex",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{n.push(ie({id:"openai-codex",label:"Codex",connected:!0,unavailable:"quota unavailable"}))}let i=it(e,"xai-oauth");return n.push(ie({id:"xai-oauth",label:"Grok",connected:!!i,unavailable:i?"quota not published":"not connected"})),{fetchedAt:r,providers:n}}var an,Nt=ar(()=>{an=Object.freeze([{id:"anthropic-oauth",label:"Claude"},{id:"openai-codex",label:"Codex"},{id:"xai-oauth",label:"Grok"}])});import{spawnSync as In}from"node:child_process";import{stdin as Z,stdout as nr}from"node:process";var qe=Object.freeze([{key:"telegram",name:"telegram",hermes:["gateway","setup"],required:["TELEGRAM_BOT_TOKEN"],optional:["TELEGRAM_ALLOWED_USERS","TELEGRAM_PROXY"],note:"dms \xB7 groups \xB7 topics"},{key:"discord",name:"discord",hermes:["gateway","setup"],required:["DISCORD_BOT_TOKEN"],optional:["DISCORD_ALLOWED_USERS"],note:"dms \xB7 channels \xB7 threads"},{key:"slack",name:"slack",hermes:["gateway","setup"],required:["SLACK_BOT_TOKEN","SLACK_APP_TOKEN"],optional:["SLACK_ALLOWED_USERS"],note:"socket mode"},{key:"whatsapp",name:"whatsapp",hermes:["whatsapp"],required:[],optional:["WHATSAPP_ALLOWED_USERS","WHATSAPP_MODE"],note:"qr bridge"},{key:"whatsapp-cloud",name:"whatsapp cloud",hermes:["whatsapp-cloud"],required:[],optional:[],note:"business cloud api"},{key:"signal",name:"signal",hermes:["gateway","setup"],required:["SIGNAL_HTTP_URL","SIGNAL_ACCOUNT"],optional:["SIGNAL_ALLOWED_USERS"],note:"signal-cli rest bridge"},{key:"matrix",name:"matrix",hermes:["gateway","setup"],required:["MATRIX_HOMESERVER","MATRIX_ACCESS_TOKEN","MATRIX_USER_ID"],optional:["MATRIX_ALLOWED_USERS"],note:"rooms \xB7 dms"},{key:"mattermost",name:"mattermost",hermes:["gateway","setup"],required:["MATTERMOST_URL","MATTERMOST_TOKEN"],optional:["MATTERMOST_ALLOWED_USERS"],note:"channels \xB7 dms"},{key:"email",name:"email",hermes:["gateway","setup"],required:["EMAIL_ADDRESS","EMAIL_PASSWORD","EMAIL_IMAP_HOST","EMAIL_SMTP_HOST"],optional:[],note:"imap/smtp mailbox"},{key:"bluebubbles",name:"bluebubbles",hermes:["gateway","setup"],required:[],optional:[],note:"imessage via bluebubbles"},{key:"photon",name:"photon",hermes:["photon"],required:["PHOTON_PROJECT_ID","PHOTON_PROJECT_SECRET"],optional:["PHOTON_ALLOWED_USERS","PHOTON_HOME_CHANNEL"],note:"imessage via spectrum (no mac)"},{key:"homeassistant",name:"homeassistant",hermes:["gateway","setup"],required:["HASS_URL","HASS_TOKEN"],optional:[],note:"smart home"},{key:"webhook",name:"webhook",hermes:["gateway","setup"],required:[],optional:[],note:"http ingress"},{key:"api-server",name:"api server",hermes:["gateway","setup"],required:[],optional:[],note:"local http api"},{key:"dingtalk",name:"dingtalk",hermes:["gateway","setup"],required:[],optional:[],note:"dingtalk bot"},{key:"feishu",name:"feishu",hermes:["gateway","setup"],required:[],optional:[],note:"feishu / lark"},{key:"wecom",name:"wecom",hermes:["gateway","setup"],required:[],optional:[],note:"wecom"},{key:"weixin",name:"weixin",hermes:["gateway","setup"],required:[],optional:[],note:"weixin"},{key:"qqbot",name:"qqbot",hermes:["gateway","setup"],required:[],optional:[],note:"qq bot"}]);function mt(e){return String(e||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}function ae(){return qe.slice()}function ee(e){let t=mt(e);if(!t)return null;for(let r of qe)if(r.key===t||mt(r.name)===t)return r;return null}function ht({profile:e="oracle",statuses:t={}}={}){let r=["oracle setup","","one oracle. many models. every connected channel.",`profile: ${e}`,"","start here (most people):","  1. oracle setup model            connect Claude / Codex / Grok / API key","  2. oracle setup telegram         bot token \u2192 dm your bot","     oracle setup discord          bot token \u2192 channels / dms","     oracle setup whatsapp         qr bridge (or whatsapp-cloud)","  3. oracle setup gateway restart  apply channel config","","messaging platforms:",""];for(let n of qe){let o=t[n.key]||"unset";r.push(`  ${n.key.padEnd(16)} ${String(o).padEnd(8)}  ${n.note}`)}return r.push(""),r.push("commands:"),r.push("  oracle setup                 this menu"),r.push("  oracle setup model            standalone OAuth / API keys"),r.push("  oracle setup messaging       open hermes gateway setup wizard"),r.push("  oracle setup telegram        set TELEGRAM_BOT_TOKEN (stdin or --token)"),r.push("  oracle setup discord         set DISCORD_BOT_TOKEN"),r.push("  oracle setup whatsapp        qr link via hermes"),r.push("  oracle setup slack           bot + app tokens"),r.push("  oracle setup status          show configured platforms (no secrets)"),r.push("  oracle setup gateway         start/status/restart hermes gateway"),r.push("  /setup                       same menu inside the tui"),r.push("  /setup telegram|discord|whatsapp   channel how-to (no secrets)"),r.push(""),r.push("notes:"),r.push("  tokens stay in the hermes profile .env on this machine"),r.push("  oracle never prints bot tokens or app secrets"),r.push('  pipe tokens: echo "$TOKEN" | oracle setup telegram'),r.push("  after token setup: oracle setup gateway restart"),r.join(`
+var ar=Object.defineProperty;var cr=(e,t,r)=>()=>{if(r)throw r[0];try{return e&&(t=e(e=0)),t}catch(n){throw r=[n],n}};var ur=(e,t)=>{for(var r in t)ar(e,r,{get:t[r],enumerable:!0})};var Nt={};ur(Nt,{OAUTH_USAGE_PROVIDERS:()=>gn,collectOAuthUsage:()=>wn,parseAnthropicUsage:()=>Ct,parseCodexUsage:()=>Lt});function It(e){let t=Number(e);return Number.isFinite(t)?t:null}function yn(e){let t=It(e);if(t==null)return null;let r=t<=1?t*100:t;return Math.max(0,Math.min(100,r))}function Ct(e){let t=[["five_hour","5h"],["seven_day","7d"],["seven_day_opus","Opus 7d"],["seven_day_sonnet","Sonnet 7d"]],r=[];for(let[n,o]of t){let s=e?.[n]||{},i=yn(s.utilization);i!=null&&r.push({label:o,usedPercent:i,resetAt:s.resets_at||s.reset_at||null})}return{source:"oauth_usage_api",windows:r}}function Lt(e){let t=e?.rate_limit||{},r=[["primary_window","5h"],["secondary_window","wk"]],n=[];for(let[o,s]of r){let i=t[o]||{},a=It(i.used_percent);a!=null&&n.push({label:s,usedPercent:Math.max(0,Math.min(100,a)),resetAt:i.reset_at||i.resets_at||null})}return{source:"usage_api",windows:n}}function se({id:e,label:t,connected:r,windows:n=[],unavailable:o=null}){let s=n[0]||null;return{id:e,label:t,connected:r,usedPercent:s?s.usedPercent:null,windowLabel:s?s.label:null,resetAt:s?s.resetAt:null,windows:n,unavailable:o}}function at(e,t){try{return String(e?.get?.(t)?.accessToken||"").trim()}catch{return""}}async function Pt(e,t,r){let n=await e(t,{headers:r});if(!n?.ok)throw new Error(`HTTP ${n?.status||0}`);return n.json()}async function wn(e,{fetchFn:t=globalThis.fetch}={}){let r=new Date().toISOString(),n=[],o=at(e,"anthropic-oauth");if(!o)n.push(se({id:"anthropic-oauth",label:"Claude",connected:!1,unavailable:"not connected"}));else try{let a=await Pt(t,"https://api.anthropic.com/api/oauth/usage",{Authorization:`Bearer ${o}`,Accept:"application/json","anthropic-beta":"oauth-2025-04-20","User-Agent":"claude-code/2.1.0"}),c=Ct(a);n.push(se({id:"anthropic-oauth",label:"Claude",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{n.push(se({id:"anthropic-oauth",label:"Claude",connected:!0,unavailable:"quota unavailable"}))}let s=at(e,"openai-codex");if(!s)n.push(se({id:"openai-codex",label:"Codex",connected:!1,unavailable:"not connected"}));else try{let a=await Pt(t,"https://chatgpt.com/backend-api/wham/usage",{Authorization:`Bearer ${s}`,Accept:"application/json","User-Agent":"codex-cli"}),c=Lt(a);n.push(se({id:"openai-codex",label:"Codex",connected:!0,windows:c.windows,unavailable:c.windows.length?null:"quota unavailable"}))}catch{n.push(se({id:"openai-codex",label:"Codex",connected:!0,unavailable:"quota unavailable"}))}let i=at(e,"xai-oauth");return n.push(se({id:"xai-oauth",label:"Grok",connected:!!i,unavailable:i?"quota not published":"not connected"})),{fetchedAt:r,providers:n}}var gn,Dt=cr(()=>{gn=Object.freeze([{id:"anthropic-oauth",label:"Claude"},{id:"openai-codex",label:"Codex"},{id:"xai-oauth",label:"Grok"}])});import{spawnSync as Kn}from"node:child_process";import{stdin as Z,stdout as or}from"node:process";var qe=Object.freeze([{key:"telegram",name:"telegram",hermes:["gateway","setup"],required:["TELEGRAM_BOT_TOKEN"],optional:["TELEGRAM_ALLOWED_USERS","TELEGRAM_PROXY"],note:"dms \xB7 groups \xB7 topics"},{key:"discord",name:"discord",hermes:["gateway","setup"],required:["DISCORD_BOT_TOKEN"],optional:["DISCORD_ALLOWED_USERS"],note:"dms \xB7 channels \xB7 threads"},{key:"slack",name:"slack",hermes:["gateway","setup"],required:["SLACK_BOT_TOKEN","SLACK_APP_TOKEN"],optional:["SLACK_ALLOWED_USERS"],note:"socket mode"},{key:"whatsapp",name:"whatsapp",hermes:["whatsapp"],required:[],optional:["WHATSAPP_ALLOWED_USERS","WHATSAPP_MODE"],note:"qr bridge"},{key:"whatsapp-cloud",name:"whatsapp cloud",hermes:["whatsapp-cloud"],required:[],optional:[],note:"business cloud api"},{key:"signal",name:"signal",hermes:["gateway","setup"],required:["SIGNAL_HTTP_URL","SIGNAL_ACCOUNT"],optional:["SIGNAL_ALLOWED_USERS"],note:"signal-cli rest bridge"},{key:"matrix",name:"matrix",hermes:["gateway","setup"],required:["MATRIX_HOMESERVER","MATRIX_ACCESS_TOKEN","MATRIX_USER_ID"],optional:["MATRIX_ALLOWED_USERS"],note:"rooms \xB7 dms"},{key:"mattermost",name:"mattermost",hermes:["gateway","setup"],required:["MATTERMOST_URL","MATTERMOST_TOKEN"],optional:["MATTERMOST_ALLOWED_USERS"],note:"channels \xB7 dms"},{key:"email",name:"email",hermes:["gateway","setup"],required:["EMAIL_ADDRESS","EMAIL_PASSWORD","EMAIL_IMAP_HOST","EMAIL_SMTP_HOST"],optional:[],note:"imap/smtp mailbox"},{key:"bluebubbles",name:"bluebubbles",hermes:["gateway","setup"],required:[],optional:[],note:"imessage via bluebubbles"},{key:"photon",name:"photon",hermes:["photon"],required:["PHOTON_PROJECT_ID","PHOTON_PROJECT_SECRET"],optional:["PHOTON_ALLOWED_USERS","PHOTON_HOME_CHANNEL"],note:"imessage via spectrum (no mac)"},{key:"homeassistant",name:"homeassistant",hermes:["gateway","setup"],required:["HASS_URL","HASS_TOKEN"],optional:[],note:"smart home"},{key:"webhook",name:"webhook",hermes:["gateway","setup"],required:[],optional:[],note:"http ingress"},{key:"api-server",name:"api server",hermes:["gateway","setup"],required:[],optional:[],note:"local http api"},{key:"dingtalk",name:"dingtalk",hermes:["gateway","setup"],required:[],optional:[],note:"dingtalk bot"},{key:"feishu",name:"feishu",hermes:["gateway","setup"],required:[],optional:[],note:"feishu / lark"},{key:"wecom",name:"wecom",hermes:["gateway","setup"],required:[],optional:[],note:"wecom"},{key:"weixin",name:"weixin",hermes:["gateway","setup"],required:[],optional:[],note:"weixin"},{key:"qqbot",name:"qqbot",hermes:["gateway","setup"],required:[],optional:[],note:"qq bot"}]);function ht(e){return String(e||"").trim().toLowerCase().replace(/^\/+/,"").replace(/\s+/g,"-")}function ce(){return qe.slice()}function Q(e){let t=ht(e);if(!t)return null;for(let r of qe)if(r.key===t||ht(r.name)===t)return r;return null}function gt({profile:e="oracle",statuses:t={}}={}){let r=["oracle setup","","one oracle. many models. every connected channel.",`profile: ${e}`,"","start here (most people):","  1. oracle setup model            connect Claude / Codex / Grok / API key","  2. oracle setup telegram         bot token \u2192 dm your bot","     oracle setup discord          bot token \u2192 channels / dms","     oracle setup whatsapp         qr bridge (or whatsapp-cloud)","  3. oracle setup gateway restart  apply channel config","","messaging platforms:",""];for(let n of qe){let o=t[n.key]||"unset";r.push(`  ${n.key.padEnd(16)} ${String(o).padEnd(8)}  ${n.note}`)}return r.push(""),r.push("commands:"),r.push("  oracle setup                 this menu"),r.push("  oracle setup model            standalone OAuth / API keys"),r.push("  oracle setup messaging       open hermes gateway setup wizard"),r.push("  oracle setup telegram        set TELEGRAM_BOT_TOKEN (stdin or --token)"),r.push("  oracle setup discord         set DISCORD_BOT_TOKEN"),r.push("  oracle setup whatsapp        qr link via hermes"),r.push("  oracle setup slack           bot + app tokens"),r.push("  oracle setup status          show configured platforms (no secrets)"),r.push("  oracle setup gateway         start/status/restart hermes gateway"),r.push("  /setup                       same menu inside the tui"),r.push("  /setup telegram|discord|whatsapp   channel how-to (no secrets)"),r.push(""),r.push("notes:"),r.push("  tokens stay in the hermes profile .env on this machine"),r.push("  oracle never prints bot tokens or app secrets"),r.push('  pipe tokens: echo "$TOKEN" | oracle setup telegram'),r.push("  after token setup: oracle setup gateway restart"),r.join(`
 `)+`
-`}import z from"node:fs";import hr from"node:os";import We from"node:path";import we from"node:fs";import ur from"node:os";import G from"node:path";import{fileURLToPath as lr}from"node:url";var fr=G.dirname(lr(import.meta.url)),qn=G.resolve(fr,"../..");function J(){return process.env.ORACLE_FAKE_HOME||ur.homedir()}function dr(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function R(){return dr()?process.env.ORACLE_CONFIG_DIR||G.join(J(),".config","oracle"):G.join(J(),".config","oracle")}function pr(){return G.join(R(),"desk.json")}function mr(){return G.join(R(),"env")}function ce({force:e=!1}={}){if(ce._done&&!e)return ce._result||null;ce._done=!0;let t={},r=(o,s)=>{if(s==null)return;let i=String(s).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=mr();if(we.existsSync(o))for(let s of we.readFileSync(o,"utf8").split(/\r?\n/)){let i=s.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let a=i[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),r(i[1],a)}}catch{}try{let o=pr();if(we.existsSync(o)){let s=JSON.parse(we.readFileSync(o,"utf8"));s&&typeof s=="object"&&(r("ORACLE_DESK_URL",s.deskUrl||s.dataUrl||s.url),r("ORACLE_DATA_URL",s.dataUrl||s.deskUrl||s.url),r("ORACLE_API_URL",s.apiUrl||s.dataUrl||s.deskUrl),r("ORACLE_PUBLIC_URL",s.publicUrl||s.deskUrl||s.dataUrl),r("ORACLE_EXEC_URL",s.execUrl),r("MAD_DESK_URL",s.deskUrl||s.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),ce._result=Object.keys(t).length?t:null,ce._result}try{ce()}catch{}function be(){return process.env.HERMES_HOME?G.resolve(process.env.HERMES_HOME):G.join(J(),".hermes")}function U(e){return we.mkdirSync(e,{recursive:!0}),e}var gr=/(TOKEN|SECRET|PASSWORD|KEY|AUTH|PRIVATE|MNEMONIC|SEED)/i;function $e(e="oracle"){return We.join(be(),"profiles",e,".env")}function yr(e){let t={};for(let r of String(e||"").split(/\r?\n/)){let n=r.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),t[s]=i}return t}function yt(e="oracle"){let t=$e(e);return z.existsSync(t)?yr(z.readFileSync(t,"utf8")):{}}function gt(e,t,r){if(!t||gr.test(t)===!1&&/[^A-Z0-9_]/.test(t),!/^[A-Z][A-Z0-9_]*$/.test(t)){let l=new Error(`invalid env key '${t}'`);throw l.code="BAD_KEY",l}if(r==null||String(r).trim()===""){let l=new Error(`empty value for ${t}`);throw l.code="EMPTY",l}let n=$e(e);U(We.dirname(n));let o=z.existsSync(n)?z.readFileSync(n,"utf8"):"",s=o?o.split(/\r?\n/):[],i=[],a=!1,c=`${t}=${String(r)}`;for(let l of s)l.startsWith(`${t}=`)?(i.push(c),a=!0):(l.length||i.length)&&i.push(l);for(a||(i.length&&i[i.length-1]!==""&&i.push(""),i.push(c));i.length&&i[i.length-1]==="";)i.pop();i.push(""),z.writeFileSync(n,i.join(`
-`),{mode:384});try{z.chmodSync(n,384)}catch{}return{path:n,key:t,set:!0}}function ue(e="oracle"){let t=yt(e),r={};for(let n of ae()){if(!n.required.length){r[n.key]="manual";continue}let o=n.required.filter(s=>!String(t[s]||"").trim());r[n.key]=o.length?"unset":"ready"}return{profile:e,statuses:r,envPath:$e(e)}}function Te(e="oracle"){let{statuses:t}=ue(e);return ht({profile:e,statuses:t})}function Me(e,t,r,n={}){let o=ee(t);if(!o){let u=new Error(`unknown platform '${t}'`);throw u.code="UNKNOWN_PLATFORM",u}if(!o.required.length){let u=new Error(`${o.key} uses hermes interactive setup (oracle setup messaging)`);throw u.code="NEEDS_INTERACTIVE",u}let i=o.required.filter(u=>/(TOKEN|PASSWORD|SECRET)$/i.test(u))[0]||(o.required.length===1?o.required[0]:null);if(!i){let u=new Error(`${o.key} has no single token field; provide each of [${o.required.join(", ")}] explicitly`);throw u.code="NEEDS_EXPLICIT_KEYS",u}let a=new Set([i,...Object.keys(n||{}).filter(u=>n[u]!=null&&String(n[u]).trim())]),c=yt(e),l=o.required.filter(u=>!a.has(u)&&!String(c[u]||"").trim());if(l.length){let u=new Error(`${o.key} also requires [${l.join(", ")}]; pass them explicitly (setup would otherwise be marked ready while unusable)`);throw u.code="MISSING_REQUIRED",u}gt(e,i,r);for(let[u,w]of Object.entries(n||{}))w!=null&&String(w).trim()&&gt(e,u,w);return{platform:o.key,set:o.required,profile:e,path:$e(e)}}function wr(){return We.join(R(),"setup-state.json")}function te(e={}){U(R());let t=wr(),r={};if(z.existsSync(t))try{r=JSON.parse(z.readFileSync(t,"utf8"))}catch{r={}}let n={...r,...e,updatedAt:new Date().toISOString(),host:hr.hostname()};return z.writeFileSync(t,JSON.stringify(n,null,2)+`
-`,{mode:384}),n}import I from"node:fs";import P from"node:path";import{createHash as br}from"node:crypto";import{spawnSync as fe}from"node:child_process";var kr="0.19.0",wt=`hermes-agent==${kr}`,Ye=[3,11],Ge=[3,14],ke="3.13",Pe="0.12.1",Ie=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function xr(e,{windows:t=process.platform==="win32"}={}){let r=Buffer.isBuffer(e)?e:Buffer.from(e),n=t?Ie.windows:Ie.posix,o=br("sha256").update(r).digest("hex"),s=r.toString("utf8");return o===n.sha256&&s.length>=1e3&&s.includes(Pe)}function re(){return P.join(R(),"runtime")}function kt(){return P.join(re(),"venv")}function Ve(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return P.join(kt(),t,r)}function Re(){return Ve("hermes")}function Sr(){let e=Ve("python3");return I.existsSync(e)?e:Ve("python")}function xe(){return P.join(re(),"uv",process.platform==="win32"?"uv.exe":"uv")}function le(e){let t=process.platform==="win32"&&!P.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(P.delimiter))if(r)for(let n of t){let o=P.join(r,`${e}${n}`);try{if(I.existsSync(o))return o}catch{}}return null}function vr(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function _r(e){if(!e)return!1;let[t,r]=e;return!(t<Ye[0]||t===Ye[0]&&r<Ye[1]||t>Ge[0]||t===Ge[0]&&r>=Ge[1])}function Ar(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let r=P.isAbsolute(t)?I.existsSync(t)?t:null:le(t);if(!r)continue;let n=fe(r,["--version"],{encoding:"utf8",timeout:15e3}),o=vr(`${n.stdout||""}${n.stderr||""}`);if(_r(o))return{bin:r,version:o.join("."),source:"host"}}return null}function Er(){return process.env.ORACLE_UV_BIN||le("uv")||(I.existsSync(P.join(J(),".local","bin","uv"))?P.join(J(),".local","bin","uv"):null)||(I.existsSync(xe())?xe():null)}function Or(e,t){let r=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return fe(process.execPath,["-e",r,e,t],{encoding:"utf8",timeout:2*6e4})}function $r({quiet:e=!1}={}){let t=Er();if(t)return{ok:!0,bin:t,reused:!0};U(re());let r=process.platform==="win32",n=P.join(re(),r?"uv-install.ps1":"uv-install.sh"),o=r?Ie.windows:Ie.posix,s=Or(o.url,n);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=I.readFileSync(n);if(!xr(i,{windows:r}))return{ok:!1,reason:`uv ${Pe} installer checksum mismatch`};let a=P.dirname(xe());U(a);let c=r?le("powershell.exe")||le("powershell"):le("sh")||"/bin/sh";if(!c)return{ok:!1,reason:r?"PowerShell not found":"sh not found"};let u=fe(c,r?["-NoProfile","-ExecutionPolicy","Bypass","-File",n]:[n],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!I.existsSync(xe())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:xe(),reused:!1}}function bt({quiet:e=!1}={}){let t=$r({quiet:e});if(!t.ok)return t;let r=t.bin,n={...process.env,UV_PYTHON_INSTALL_DIR:P.join(re(),"python"),UV_CACHE_DIR:P.join(re(),"cache")},o=fe(r,["python","install","--no-bin",ke],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:n});if(o.status!==0)return{ok:!1,reason:`uv python install ${ke} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=fe(r,["python","find",ke],{encoding:"utf8",timeout:6e4,env:n}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!I.existsSync(i)?{ok:!1,reason:`uv could not locate python ${ke}`}:{ok:!0,bin:i,version:ke,source:"uv"}}function de(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Re();if(I.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=le("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Je(e,t,{quiet:r}){return fe(e,t,{stdio:r?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function xt({quiet:e=!1,upgrade:t=!1}={}){let r=Ar();if(!r){let l=bt({quiet:e});if(l.ok)r={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}U(re());let n=kt();if(I.existsSync(Re())&&!t)return{ok:!0,bin:Re(),reused:!0};if(!I.existsSync(P.join(n,"pyvenv.cfg"))){let l=Je(r.bin,["-m","venv",n],{quiet:e});if(l.status!==0&&r.source!=="uv"){I.rmSync(n,{recursive:!0,force:!0});let u=bt({quiet:e});if(u.ok)r={bin:u.bin,version:u.version,source:"uv"},l=Je(r.bin,["-m","venv",n],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=Sr();if(!I.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(wt);let a=Je(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${wt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=Re();return I.existsSync(c)?{ok:!0,bin:c,reused:!1,python:r.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as Fr,randomBytes as rt,timingSafeEqual as Dr}from"node:crypto";import D from"node:fs";import M from"node:path";import Ur from"node:readline/promises";import{spawn as Br,spawnSync as Kr}from"node:child_process";import K from"node:fs";import F from"node:path";var Xe=Object.freeze(["anthropic-oauth","openai-codex","xai-oauth"]);function St(e){let t=String(e||"").trim();if(!t||!F.isAbsolute(t))return"";try{return K.statSync(t).isFile()?t:""}catch{return""}}function Tr(e){try{return K.readdirSync(e,{withFileTypes:!0})}catch{return[]}}function Mr(e=process.env){return!(e.ORACLE_PUBLIC_DESKTOP==="1"&&e.ORACLE_OWNER_DESKTOP!=="1")}function Rr(e=process.env){let t=String(e.ORACLE_REAL_HOME||"").trim();return t&&F.isAbsolute(t)?t:J()}function Pr(e={}){let t=e.home||Rr(e.env),r={"anthropic-oauth":[],"openai-codex":[],"xai-oauth":[]},n=(s,i)=>{let a=St(i);a&&(r[s].includes(a)||r[s].push(a))};n("anthropic-oauth",F.join(t,".claude",".credentials.json"));for(let s of Tr(F.join(t,".claude-lanes")))!s.isDirectory()||s.name.startsWith(".")||n("anthropic-oauth",F.join(t,".claude-lanes",s.name,".credentials.json"));let o=F.join(t,".hermes","auth.json");for(let s of Xe)n(s,o);return n("anthropic-oauth",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("openai-codex",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("xai-oauth",F.join(t,".hermes","profiles","hermes-macbook","auth.json")),r}function Ir(e){if(!K.existsSync(e))return{providers:{}};try{let t=JSON.parse(K.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{providers:{}}:{providers:t.providers&&typeof t.providers=="object"&&!Array.isArray(t.providers)?t.providers:{}}}catch{return{providers:{}}}}function Lr(e,t){let r=[];for(let n of[...Array.isArray(e)?e:[],...t]){let o=St(n)||(F.isAbsolute(String(n||""))?String(n):"");!o||r.includes(o)||r.push(o)}return r}function vt(e={}){if(!Mr(e.env))return{wrote:!1,providers:{}};let t=e.linksFile||F.join(R(),"oauth-links.json"),r=Pr(e),o={providers:{...Ir(t).providers||{}}},s=!1;for(let l of Xe){let u=Lr(o.providers[l],r[l]);JSON.stringify(u)!==JSON.stringify(o.providers[l]||[])?(o.providers[l]=u,s=!0):u.length&&(o.providers[l]=u)}if(!Xe.some(l=>(o.providers[l]||[]).length))return{wrote:!1,providers:o.providers};if(!s&&K.existsSync(t))return{wrote:!1,providers:o.providers};let a=F.dirname(t);if(K.mkdirSync(a,{recursive:!0}),process.platform!=="win32")try{K.chmodSync(a,448)}catch{}let c=`${t}.${process.pid}.tmp`;return K.writeFileSync(c,`${JSON.stringify(o,null,2)}
-`,{mode:384}),K.renameSync(c,t),process.platform!=="win32"&&K.chmodSync(t,384),{wrote:!0,providers:o.providers}}import ne from"node:fs";import Et from"node:path";var _t=/access|refresh|idToken|id_token|token|secret|key|seed|mnemonic/i;function Cr(e=R()){return Et.join(e,"user-profile.json")}function Nr(e){if(!ne.existsSync(e))return{identities:{},wallets:{}};try{let t=JSON.parse(ne.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{identities:{},wallets:{}}:{identities:t.identities&&typeof t.identities=="object"?t.identities:{},wallets:t.wallets&&typeof t.wallets=="object"?t.wallets:{},updatedAt:t.updatedAt}}catch{return{identities:{},wallets:{}}}}function At(e){if(!e||typeof e!="object"||Array.isArray(e))return{};let t={};for(let[r,n]of Object.entries(e))if(!_t.test(r)){if(typeof n=="string"||typeof n=="number"||typeof n=="boolean"){t[r]=n;continue}if(n&&typeof n=="object"&&!Array.isArray(n)){let o={};for(let[s,i]of Object.entries(n))_t.test(s)||(typeof i=="string"||typeof i=="number"||typeof i=="boolean")&&(o[s]=i);t[r]=o}}return t}function jr(e,t){let r=Et.dirname(e);if(ne.mkdirSync(r,{recursive:!0}),process.platform!=="win32")try{ne.chmodSync(r,448)}catch{}let n={updatedAt:new Date().toISOString(),identities:At(t.identities),wallets:At(t.wallets)},o=`${e}.${process.pid}.tmp`;return ne.writeFileSync(o,`${JSON.stringify(n,null,2)}
-`,{mode:384}),ne.renameSync(o,e),process.platform!=="win32"&&ne.chmodSync(e,384),n}function Ze(e){let r=String(e||"").trim().split(".");if(r.length<2)return{};try{let n=JSON.parse(Buffer.from(r[1],"base64url").toString("utf8")),o=String(n.email||"").trim(),s=String(n.name||n.preferred_username||"").trim();return{...o?{email:o}:{},...s?{name:s}:{}}}catch{return{}}}function Qe(e,t={},r={}){let n=String(e||"").trim();if(!n)return null;let o=r.file||Cr(r.configDir),s=Nr(o),i=s.identities[n]&&typeof s.identities[n]=="object"?s.identities[n]:{};return s.identities[n]={...i,provider:n,source:String(t.source||i.source||"oracle"),loggedInAt:t.loggedInAt||new Date().toISOString(),...t.label?{label:String(t.label)}:{},...t.email?{email:String(t.email)}:{},...t.name?{name:String(t.name)}:{}},jr(o,s)}var me=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),Ot=12e4;function Hr(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function oe(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(me))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function X(e){let t=oe(e);return{id:t,...me[t]}}function L(e,t={}){if(!D.existsSync(e))return t;try{let r=JSON.parse(D.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${M.basename(e)}`)}}function Tt(e){U(e),process.platform!=="win32"&&D.chmodSync(e,448)}function V(e,t){Tt(M.dirname(e));let r=`${e}.${process.pid}.${rt(4).toString("hex")}.tmp`;D.writeFileSync(r,`${JSON.stringify(t,null,2)}
-`,{mode:384}),D.renameSync(r,e),process.platform!=="win32"&&D.chmodSync(e,384)}function zr(e){if(process.platform!=="linux")return!1;let t=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!t.error&&t.status===0}function et(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function pe(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=e.expires_at_ms!=null,o;if(n){let s=e.expires_at_ms;if(o=Number(s),typeof s!="number"&&typeof s!="string"||typeof s=="string"&&!s.trim()||!Number.isFinite(o)||o<=0)throw new Error("OAuth credential has invalid expires_at_ms")}else o=Number(e.expiresAt||e.expires_at||0),Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3);if(!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function qr(e={}){let t=e.file||M.join(R(),"oauth.json"),r=e.metadataFile||M.join(M.dirname(t),"oauth-meta.json"),n=e.linksFile||M.join(M.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Kr,i=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&zr(s),a=i?"linux-secret-service":"private-file",c=`${t}.lock`;async function l(y){Tt(M.dirname(c));let p;for(let f=0;f<400;f+=1)try{p=D.openSync(c,"wx",384);break}catch(m){if(m?.code!=="EEXIST")throw m;try{Date.now()-D.statSync(c).mtimeMs>3e5&&D.unlinkSync(c)}catch{}await new Promise(h=>setTimeout(h,25))}if(p===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await y()}finally{try{D.closeSync(p)}catch{}try{D.unlinkSync(c)}catch{}}}function u(y,p="oauth"){return["application","oracle","kind",p,"provider",y]}let w=!1;function g(){if(w)return;w=!0;let y=M.join(R(),"oauth-links.json");if(M.resolve(n)===M.resolve(y))try{vt({linksFile:n})}catch{}}function E(y){if(g(),!D.existsSync(n))return[];let f=L(n,{providers:{}}).providers?.[y];if(!Array.isArray(f))return[];let m=[];for(let h of f)if(M.isAbsolute(String(h||"")))try{let x=L(h,{});if(y==="anthropic-oauth"&&x.claudeAiOauth){let N=pe(x.claudeAiOauth);m.push({...N,refreshToken:"",source:"external-access-only",label:M.basename(M.dirname(h))||"claude-lane"});continue}let C=x.credential_pool&&typeof x.credential_pool=="object"?x.credential_pool:null;if(C){let N=C[y]||C[y.replace(/-oauth$/,"")]||[],ze=Array.isArray(N)?N:N?[N]:[];for(let Y of ze)if(!(!Y||typeof Y!="object"))try{let Oe=pe(Y);m.push({...Oe,refreshToken:"",source:"external-access-only",label:String(Y.label||Y.id||M.basename(M.dirname(h))||y)})}catch{}}}catch{}return m}function S(y){let p=E(y);return p.length?p.find(f=>!f.expiresAt||f.expiresAt>o()+Ot)||p[0]:null}function T(y){return y.map(p=>({label:String(p.label||"lane"),source:"external-access-only",expiresAt:Number(p.expiresAt||0),healthy:!p.expiresAt||p.expiresAt>o()+Ot}))}function v(y){let p=oe(y);if(i){let h=s("secret-tool",["lookup",...u(p)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!h.error&&h.status===0&&String(h.stdout||"").trim())try{return pe(JSON.parse(String(h.stdout).trim()))}catch{}return S(p)}let m=L(t,{providers:{}}).providers?.[p];if(m)try{return pe(m)}catch{}return S(p)}function A(y,p){let f=oe(y),m=pe(p);if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} OAuth`,...u(f)],{input:JSON.stringify(m),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected OAuth credential");let C=L(r,{providers:{}});C.providers||={},C.providers[f]={expiresAt:m.expiresAt,source:m.source},V(r,C);try{let N=Ze(m.idToken);Qe(f,{source:m.source,...N,label:N.name||N.email||f},{configDir:M.dirname(t)})}catch{}return m}let h=L(t,{providers:{}});h.providers||={},h.providers[f]=m,V(t,h);try{let x=Ze(m.idToken);Qe(f,{source:m.source,...x,label:x.name||x.email||f},{configDir:M.dirname(t)})}catch{}return m}function W(y){let p=oe(y);if(i){let h=s("secret-tool",["clear",...u(p)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{}});return x.providers&&delete x.providers[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{}}),m=!!f.providers?.[p];return f.providers&&delete f.providers[p],V(t,f),m}function B(y){let p=et(y);if(i){let f=s("secret-tool",["lookup",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return f.error||f.status!==0?"":String(f.stdout||"").trim()}return String(L(t,{apiKeys:{}}).apiKeys?.[p]||"").trim()}function Q(y,p){let f=et(y),m=String(p||"").trim();if(!m)throw new Error("API key is empty");if(i){let x=s("secret-tool",["store",`--label=Oracle ${f} API key`,...u(f,"api-key")],{input:m,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(x.error||x.status!==0)throw new Error("OS credential store rejected API key");let C=L(r,{providers:{},apiKeys:{}});return C.apiKeys||={},C.apiKeys[f]={configured:!0},V(r,C),!0}let h=L(t,{providers:{},apiKeys:{}});return h.apiKeys||={},h.apiKeys[f]=m,V(t,h),!0}function H(y){let p=et(y);if(i){let h=s("secret-tool",["clear",...u(p,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),x=L(r,{providers:{},apiKeys:{}});return x.apiKeys&&delete x.apiKeys[p],V(r,x),!h.error&&h.status===0}let f=L(t,{providers:{},apiKeys:{}}),m=!!f.apiKeys?.[p];return f.apiKeys&&delete f.apiKeys[p],V(t,f),m}function k(){g();let y={},p={};if(i){let f=L(r,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!v(m),expiresAt:Number(h.expiresAt||0),source:String(h.source||"oracle"),storage:a,lanes:T(E(m))};for(let m of Object.keys(f.apiKeys||{}))p[m]={configured:!!B(m),storage:a}}else{let f=L(t,{providers:{},apiKeys:{}});for(let[m,h]of Object.entries(f.providers||{}))y[m]={loggedIn:!!h?.accessToken,expiresAt:Number(h?.expiresAt||0),source:String(h?.source||"oracle"),storage:a,lanes:T(E(m))};for(let[m,h]of Object.entries(f.apiKeys||{}))p[m]={configured:!!h,storage:a}}for(let f of Object.keys(me)){let m=T(E(f));if(y[f]){y[f].lanes=m;continue}let h=S(f);h&&(y[f]={loggedIn:!0,expiresAt:h.expiresAt,source:h.source,storage:"external-access-source",lanes:m})}return{storage:a,providers:y,apiKeys:p}}return Object.freeze({file:t,storage:a,get:v,set:A,remove:W,getApiKey:B,setApiKey:Q,removeApiKey:H,status:k,withLock:l})}var $t;function q(){return $t||=qr(),$t}function tt(e){return Buffer.from(e).toString("base64url")}function Wr(){let e=tt(rt(32));return{verifier:e,challenge:tt(Fr("sha256").update(e).digest()),state:tt(rt(24))}}function Yr(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Dr(r,n)}function Gr(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return Br(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function nt(e){return new URLSearchParams(e).toString()}async function se(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function Jr(e){if(e)return String(await e()).trim();let t=Ur.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function ot(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return pe({accessToken:r,refreshToken:n,expiresAt:Hr(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function Vr(e){let t=me["anthropic-oauth"],r=e.pkce||Wr(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await Jr(e.inputFn),[i,a]=s.split("#",2);if(!i||!Yr(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return ot(await se(c,"Claude OAuth token exchange"),e)}async function Xr(e){let t=me["openai-codex"],r=await se(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await se(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:nt({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return ot(await se(i,"Codex OAuth token exchange"),e)}function Le(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function Zr(e){let t=me["xai-oauth"],r=await se(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Le(r.authorization_endpoint);let n=Le(r.token_endpoint),o=await se(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Le(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let w=await se(l,"xAI OAuth token exchange");return ot(w,{...e,discovery:{authorization_endpoint:Le(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Mt(e,t={}){let r=oe(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||Gr,output:t.output||(o=>process.stdout.write(`${o}
-`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?Vr(n):r==="openai-codex"?Xr(n):Zr(n)}import je from"node:fs";import st from"node:path";var Qr=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Ce(e){return String(e||"").trim()||void 0}function en(e,{required:t=!1}={}){let r=Ce(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!Qr.has(r))throw new Error(`unsupported provider: ${r}`);return r}function tn(e,{required:t=!1}={}){let r=Ce(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function rn(e){let t=Ce(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function Ne({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=en(e),s=tn(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:rn(r)};if(Ce(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var nn=new Set(["auto","standalone","hermes","remote","arch"]);function on(){return st.join(R(),"model.json")}function he(e){return String(e||"").trim()||void 0}function sn(e={}){let t=he(e.backend)?.toLowerCase()||"auto",r=Ne({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=he(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=Object.fromEntries(Object.entries(e.contextByModel||{}).filter(([,u])=>Number.isSafeInteger(u)&&u>0)),i=he(e.reasoningEffort),a=he(e.computeHost||e.remoteHost),c=he(e.computeUser||e.remoteUser),l=he(e.computePath||e.remotePath);if(!nn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!a)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...Object.keys(s).length?{contextByModel:s}:{},...i?{reasoningEffort:i}:{},...a?{computeHost:a}:{},...c?{computeUser:c}:{},...l?{computePath:l}:{}}}function Fe(e){let t=sn(e),r=on();U(st.dirname(r)),process.platform!=="win32"&&je.chmodSync(st.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return je.writeFileSync(n,`${JSON.stringify(t,null,2)}
-`,{mode:384}),je.renameSync(n,r),process.platform!=="win32"&&je.chmodSync(r,384),t}var jt=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},nous:{model:"moonshotai/kimi-k3"},qwen:{model:"qwen-plus"},glm:{model:"glm-4.5"},custom:{model:""}});function at(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function ln(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function fn(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",s),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
+`}import W from"node:fs";import gr from"node:os";import ze from"node:path";import be from"node:fs";import lr from"node:os";import J from"node:path";import{fileURLToPath as dr}from"node:url";var fr=J.dirname(dr(import.meta.url)),eo=J.resolve(fr,"../..");function V(){return process.env.ORACLE_FAKE_HOME||lr.homedir()}function pr(){return process.env.ORACLE_PUBLIC_DESKTOP==="1"}function R(){return pr()?process.env.ORACLE_CONFIG_DIR||J.join(V(),".config","oracle"):J.join(V(),".config","oracle")}function mr(){return J.join(R(),"desk.json")}function hr(){return J.join(R(),"env")}function ue({force:e=!1}={}){if(ue._done&&!e)return ue._result||null;ue._done=!0;let t={},r=(o,s)=>{if(s==null)return;let i=String(s).trim();i&&(process.env[o]!=null&&String(process.env[o]).trim()!==""||(process.env[o]=i,t[o]=i))};try{let o=hr();if(be.existsSync(o))for(let s of be.readFileSync(o,"utf8").split(/\r?\n/)){let i=s.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*?)\s*$/);if(!i||i[2].startsWith("#"))continue;let a=i[2];(a.startsWith('"')&&a.endsWith('"')||a.startsWith("'")&&a.endsWith("'"))&&(a=a.slice(1,-1)),r(i[1],a)}}catch{}try{let o=mr();if(be.existsSync(o)){let s=JSON.parse(be.readFileSync(o,"utf8"));s&&typeof s=="object"&&(r("ORACLE_DESK_URL",s.deskUrl||s.dataUrl||s.url),r("ORACLE_DATA_URL",s.dataUrl||s.deskUrl||s.url),r("ORACLE_API_URL",s.apiUrl||s.dataUrl||s.deskUrl),r("ORACLE_PUBLIC_URL",s.publicUrl||s.deskUrl||s.dataUrl),r("ORACLE_EXEC_URL",s.execUrl),r("MAD_DESK_URL",s.deskUrl||s.dataUrl))}}catch{}let n=process.env.ORACLE_DESK_URL||process.env.ORACLE_DATA_URL||"";return n&&(r("ORACLE_DESK_URL",n),r("ORACLE_DATA_URL",n),r("ORACLE_API_URL",n),r("ORACLE_PUBLIC_URL",n),r("MAD_DESK_URL",n)),ue._result=Object.keys(t).length?t:null,ue._result}try{ue()}catch{}function xe(){return process.env.HERMES_HOME?J.resolve(process.env.HERMES_HOME):J.join(V(),".hermes")}function U(e){return be.mkdirSync(e,{recursive:!0}),e}var yr=/(TOKEN|SECRET|PASSWORD|KEY|AUTH|PRIVATE|MNEMONIC|SEED)/i;function $e(e="oracle"){return ze.join(xe(),"profiles",e,".env")}function wr(e){let t={};for(let r of String(e||"").split(/\r?\n/)){let n=r.trim();if(!n||n.startsWith("#"))continue;let o=n.indexOf("=");if(o<=0)continue;let s=n.slice(0,o).trim(),i=n.slice(o+1).trim();(i.startsWith('"')&&i.endsWith('"')||i.startsWith("'")&&i.endsWith("'"))&&(i=i.slice(1,-1)),t[s]=i}return t}function wt(e="oracle"){let t=$e(e);return W.existsSync(t)?wr(W.readFileSync(t,"utf8")):{}}function yt(e,t,r){if(!t||yr.test(t)===!1&&/[^A-Z0-9_]/.test(t),!/^[A-Z][A-Z0-9_]*$/.test(t)){let l=new Error(`invalid env key '${t}'`);throw l.code="BAD_KEY",l}if(r==null||String(r).trim()===""){let l=new Error(`empty value for ${t}`);throw l.code="EMPTY",l}let n=$e(e);U(ze.dirname(n));let o=W.existsSync(n)?W.readFileSync(n,"utf8"):"",s=o?o.split(/\r?\n/):[],i=[],a=!1,c=`${t}=${String(r)}`;for(let l of s)l.startsWith(`${t}=`)?(i.push(c),a=!0):(l.length||i.length)&&i.push(l);for(a||(i.length&&i[i.length-1]!==""&&i.push(""),i.push(c));i.length&&i[i.length-1]==="";)i.pop();i.push(""),W.writeFileSync(n,i.join(`
+`),{mode:384});try{W.chmodSync(n,384)}catch{}return{path:n,key:t,set:!0}}function le(e="oracle"){let t=wt(e),r={};for(let n of ce()){if(!n.required.length){r[n.key]="manual";continue}let o=n.required.filter(s=>!String(t[s]||"").trim());r[n.key]=o.length?"unset":"ready"}return{profile:e,statuses:r,envPath:$e(e)}}function Te(e="oracle"){let{statuses:t}=le(e);return gt({profile:e,statuses:t})}function Me(e,t,r,n={}){let o=Q(t);if(!o){let u=new Error(`unknown platform '${t}'`);throw u.code="UNKNOWN_PLATFORM",u}if(!o.required.length){let u=new Error(`${o.key} uses hermes interactive setup (oracle setup messaging)`);throw u.code="NEEDS_INTERACTIVE",u}let i=o.required.filter(u=>/(TOKEN|PASSWORD|SECRET)$/i.test(u))[0]||(o.required.length===1?o.required[0]:null);if(!i){let u=new Error(`${o.key} has no single token field; provide each of [${o.required.join(", ")}] explicitly`);throw u.code="NEEDS_EXPLICIT_KEYS",u}let a=new Set([i,...Object.keys(n||{}).filter(u=>n[u]!=null&&String(n[u]).trim())]),c=wt(e),l=o.required.filter(u=>!a.has(u)&&!String(c[u]||"").trim());if(l.length){let u=new Error(`${o.key} also requires [${l.join(", ")}]; pass them explicitly (setup would otherwise be marked ready while unusable)`);throw u.code="MISSING_REQUIRED",u}yt(e,i,r);for(let[u,b]of Object.entries(n||{}))b!=null&&String(b).trim()&&yt(e,u,b);return{platform:o.key,set:o.required,profile:e,path:$e(e)}}function br(){return ze.join(R(),"setup-state.json")}function ee(e={}){U(R());let t=br(),r={};if(W.existsSync(t))try{r=JSON.parse(W.readFileSync(t,"utf8"))}catch{r={}}let n={...r,...e,updatedAt:new Date().toISOString(),host:gr.hostname()};return W.writeFileSync(t,JSON.stringify(n,null,2)+`
+`,{mode:384}),n}import L from"node:fs";import P from"node:path";import{createHash as xr}from"node:crypto";import{spawnSync as fe}from"node:child_process";var kr="0.19.0",bt=`hermes-agent==${kr}`,Ge=[3,11],Ye=[3,14],ke="3.13",Pe="0.12.1",Ie=Object.freeze({posix:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.sh`,sha256:"d3f5412d38c99f9d024901843bf98206f0d2c6dbe64df40d0b740e2751ca62c1"}),windows:Object.freeze({url:`https://github.com/astral-sh/uv/releases/download/${Pe}/uv-installer.ps1`,sha256:"b9ec035151bfbb11d616dbd69886498d885551489eddf095ea3c0ad59f640eb0"})});function Sr(e,{windows:t=process.platform==="win32"}={}){let r=Buffer.isBuffer(e)?e:Buffer.from(e),n=t?Ie.windows:Ie.posix,o=xr("sha256").update(r).digest("hex"),s=r.toString("utf8");return o===n.sha256&&s.length>=1e3&&s.includes(Pe)}function te(){return P.join(R(),"runtime")}function kt(){return P.join(te(),"venv")}function Ve(e){let t=process.platform==="win32"?"Scripts":"bin",r=process.platform==="win32"?`${e}.exe`:e;return P.join(kt(),t,r)}function Re(){return Ve("hermes")}function vr(){let e=Ve("python3");return L.existsSync(e)?e:Ve("python")}function Se(){return P.join(te(),"uv",process.platform==="win32"?"uv.exe":"uv")}function de(e){let t=process.platform==="win32"&&!P.extname(e)?["",".exe",".cmd",".bat"]:[""];for(let r of(process.env.PATH||"").split(P.delimiter))if(r)for(let n of t){let o=P.join(r,`${e}${n}`);try{if(L.existsSync(o))return o}catch{}}return null}function Ar(e){let t=/Python (\d+)\.(\d+)\.(\d+)/.exec(e||"");return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null}function _r(e){if(!e)return!1;let[t,r]=e;return!(t<Ge[0]||t===Ge[0]&&r<Ge[1]||t>Ye[0]||t===Ye[0]&&r>=Ye[1])}function Er(){let e=[process.env.ORACLE_PYTHON,"python3.13","python3.12","python3.11","python3","python"].filter(Boolean);for(let t of e){let r=P.isAbsolute(t)?L.existsSync(t)?t:null:de(t);if(!r)continue;let n=fe(r,["--version"],{encoding:"utf8",timeout:15e3}),o=Ar(`${n.stdout||""}${n.stderr||""}`);if(_r(o))return{bin:r,version:o.join("."),source:"host"}}return null}function Or(){return process.env.ORACLE_UV_BIN||de("uv")||(L.existsSync(P.join(V(),".local","bin","uv"))?P.join(V(),".local","bin","uv"):null)||(L.existsSync(Se())?Se():null)}function $r(e,t){let r=["const fs=require('node:fs');","const [url,dest]=process.argv.slice(1);","fetch(url).then(r=>{if(!r.ok)throw new Error('http '+r.status);return r.arrayBuffer()})",".then(b=>fs.writeFileSync(dest,Buffer.from(b)))",".catch(e=>{console.error(e.message);process.exit(1)});"].join("");return fe(process.execPath,["-e",r,e,t],{encoding:"utf8",timeout:2*6e4})}function Tr({quiet:e=!1}={}){let t=Or();if(t)return{ok:!0,bin:t,reused:!0};U(te());let r=process.platform==="win32",n=P.join(te(),r?"uv-install.ps1":"uv-install.sh"),o=r?Ie.windows:Ie.posix,s=$r(o.url,n);if(s.status!==0)return{ok:!1,reason:`could not download the uv installer (${s.status})`,stderr:(s.stderr||"").slice(-800)};let i=L.readFileSync(n);if(!Sr(i,{windows:r}))return{ok:!1,reason:`uv ${Pe} installer checksum mismatch`};let a=P.dirname(Se());U(a);let c=r?de("powershell.exe")||de("powershell"):de("sh")||"/bin/sh";if(!c)return{ok:!1,reason:r?"PowerShell not found":"sh not found"};let u=fe(c,r?["-NoProfile","-ExecutionPolicy","Bypass","-File",n]:[n],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:5*6e4,env:{...process.env,UV_INSTALL_DIR:a,UV_NO_MODIFY_PATH:"1"}});return u.status!==0||!L.existsSync(Se())?{ok:!1,reason:`uv install failed (${u.status})`,stderr:(u.stderr||"").slice(-800)}:{ok:!0,bin:Se(),reused:!1}}function xt({quiet:e=!1}={}){let t=Tr({quiet:e});if(!t.ok)return t;let r=t.bin,n={...process.env,UV_PYTHON_INSTALL_DIR:P.join(te(),"python"),UV_CACHE_DIR:P.join(te(),"cache")},o=fe(r,["python","install","--no-bin",ke],{stdio:e?"pipe":"inherit",encoding:"utf8",timeout:15*6e4,env:n});if(o.status!==0)return{ok:!1,reason:`uv python install ${ke} failed (${o.status})`,stderr:(o.stderr||"").slice(-800)};let s=fe(r,["python","find",ke],{encoding:"utf8",timeout:6e4,env:n}),i=(s.stdout||"").trim().split(/\r?\n/)[0];return s.status!==0||!i||!L.existsSync(i)?{ok:!1,reason:`uv could not locate python ${ke}`}:{ok:!0,bin:i,version:ke,source:"uv"}}function pe(){if(process.env.ORACLE_HERMES_BIN)return{ok:!0,bin:process.env.ORACLE_HERMES_BIN,source:"env"};let e=Re();if(L.existsSync(e))return{ok:!0,bin:e,source:"managed"};let t=de("hermes");return t?{ok:!0,bin:t,source:"path"}:{ok:!1,bin:null,source:null}}function Je(e,t,{quiet:r}){return fe(e,t,{stdio:r?"pipe":"inherit",encoding:"utf8",timeout:20*6e4})}function St({quiet:e=!1,upgrade:t=!1}={}){let r=Er();if(!r){let l=xt({quiet:e});if(l.ok)r={bin:l.bin,version:l.version,source:"uv"};else return{ok:!1,reason:`no supported python found (need 3.11-3.13) and uv could not provide one: ${l.reason}. install uv (https://docs.astral.sh/uv) or python 3.13, then re-run 'oracle bootstrap'`}}U(te());let n=kt();if(L.existsSync(Re())&&!t)return{ok:!0,bin:Re(),reused:!0};if(!L.existsSync(P.join(n,"pyvenv.cfg"))){let l=Je(r.bin,["-m","venv",n],{quiet:e});if(l.status!==0&&r.source!=="uv"){L.rmSync(n,{recursive:!0,force:!0});let u=xt({quiet:e});if(u.ok)r={bin:u.bin,version:u.version,source:"uv"},l=Je(r.bin,["-m","venv",n],{quiet:e});else return{ok:!1,reason:`python -m venv failed (${l.status}) and uv fallback failed: ${u.reason}`,stderr:(l.stderr||"").slice(-800)}}if(l.status!==0)return{ok:!1,reason:`isolated python -m venv failed (${l.status})`,stderr:(l.stderr||"").slice(-800)}}let s=vr();if(!L.existsSync(s))return{ok:!1,reason:`venv python missing at ${s}`};let i=["-m","pip","install","--disable-pip-version-check"];t&&i.push("--upgrade"),i.push(bt);let a=Je(s,i,{quiet:e});if(a.status!==0)return{ok:!1,reason:`pip install ${bt} failed (${a.status})`,stderr:(a.stderr||"").slice(-1200)};let c=Re();return L.existsSync(c)?{ok:!0,bin:c,reused:!1,python:r.version}:{ok:!1,reason:`hermes entrypoint not found after install (${c})`}}import{createHash as zr,randomBytes as rt,timingSafeEqual as Gr}from"node:crypto";import N from"node:fs";import O from"node:path";import Yr from"node:readline/promises";import{spawn as Jr,spawnSync as Vr}from"node:child_process";import K from"node:fs";import j from"node:path";var Xe=Object.freeze(["anthropic-oauth","openai-codex","xai-oauth"]);function vt(e){let t=String(e||"").trim();if(!t||!j.isAbsolute(t))return"";try{return K.statSync(t).isFile()?t:""}catch{return""}}function Mr(e){try{return K.readdirSync(e,{withFileTypes:!0})}catch{return[]}}function Rr(e=process.env){return!(e.ORACLE_PUBLIC_DESKTOP==="1"&&e.ORACLE_OWNER_DESKTOP!=="1")}function Pr(e=process.env){let t=String(e.ORACLE_REAL_HOME||"").trim();return t&&j.isAbsolute(t)?t:V()}function Ir(e={}){let t=e.home||Pr(e.env),r={"anthropic-oauth":[],"openai-codex":[],"xai-oauth":[]},n=(s,i)=>{let a=vt(i);a&&(r[s].includes(a)||r[s].push(a))};n("anthropic-oauth",j.join(t,".claude",".credentials.json"));for(let s of Mr(j.join(t,".claude-lanes")))!s.isDirectory()||s.name.startsWith(".")||n("anthropic-oauth",j.join(t,".claude-lanes",s.name,".credentials.json"));let o=j.join(t,".hermes","auth.json");for(let s of Xe)n(s,o);return n("anthropic-oauth",j.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("openai-codex",j.join(t,".hermes","profiles","hermes-macbook","auth.json")),n("xai-oauth",j.join(t,".hermes","profiles","hermes-macbook","auth.json")),r}function Cr(e){if(!K.existsSync(e))return{providers:{}};try{let t=JSON.parse(K.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{providers:{}}:{providers:t.providers&&typeof t.providers=="object"&&!Array.isArray(t.providers)?t.providers:{}}}catch{return{providers:{}}}}function Lr(e,t){let r=[];for(let n of[...Array.isArray(e)?e:[],...t]){let o=vt(n)||(j.isAbsolute(String(n||""))?String(n):"");!o||r.includes(o)||r.push(o)}return r}function At(e={}){if(!Rr(e.env))return{wrote:!1,providers:{}};let t=e.linksFile||j.join(R(),"oauth-links.json"),r=Ir(e),o={providers:{...Cr(t).providers||{}}},s=!1;for(let l of Xe){let u=Lr(o.providers[l],r[l]);JSON.stringify(u)!==JSON.stringify(o.providers[l]||[])?(o.providers[l]=u,s=!0):u.length&&(o.providers[l]=u)}if(!Xe.some(l=>(o.providers[l]||[]).length))return{wrote:!1,providers:o.providers};if(!s&&K.existsSync(t))return{wrote:!1,providers:o.providers};let a=j.dirname(t);if(K.mkdirSync(a,{recursive:!0}),process.platform!=="win32")try{K.chmodSync(a,448)}catch{}let c=`${t}.${process.pid}.tmp`;return K.writeFileSync(c,`${JSON.stringify(o,null,2)}
+`,{mode:384}),K.renameSync(c,t),process.platform!=="win32"&&K.chmodSync(t,384),{wrote:!0,providers:o.providers}}import re from"node:fs";import Ot from"node:path";var _t=/access|refresh|idToken|id_token|token|secret|key|seed|mnemonic/i;function Nr(e=R()){return Ot.join(e,"user-profile.json")}function Dr(e){if(!re.existsSync(e))return{identities:{},wallets:{}};try{let t=JSON.parse(re.readFileSync(e,"utf8"));return!t||typeof t!="object"||Array.isArray(t)?{identities:{},wallets:{}}:{identities:t.identities&&typeof t.identities=="object"?t.identities:{},wallets:t.wallets&&typeof t.wallets=="object"?t.wallets:{},updatedAt:t.updatedAt}}catch{return{identities:{},wallets:{}}}}function Et(e){if(!e||typeof e!="object"||Array.isArray(e))return{};let t={};for(let[r,n]of Object.entries(e))if(!_t.test(r)){if(typeof n=="string"||typeof n=="number"||typeof n=="boolean"){t[r]=n;continue}if(n&&typeof n=="object"&&!Array.isArray(n)){let o={};for(let[s,i]of Object.entries(n))_t.test(s)||(typeof i=="string"||typeof i=="number"||typeof i=="boolean")&&(o[s]=i);t[r]=o}}return t}function jr(e,t){let r=Ot.dirname(e);if(re.mkdirSync(r,{recursive:!0}),process.platform!=="win32")try{re.chmodSync(r,448)}catch{}let n={updatedAt:new Date().toISOString(),identities:Et(t.identities),wallets:Et(t.wallets)},o=`${e}.${process.pid}.tmp`;return re.writeFileSync(o,`${JSON.stringify(n,null,2)}
+`,{mode:384}),re.renameSync(o,e),process.platform!=="win32"&&re.chmodSync(e,384),n}function Ze(e){let r=String(e||"").trim().split(".");if(r.length<2)return{};try{let n=JSON.parse(Buffer.from(r[1],"base64url").toString("utf8")),o=String(n.email||"").trim(),s=String(n.name||n.preferred_username||"").trim();return{...o?{email:o}:{},...s?{name:s}:{}}}catch{return{}}}function Qe(e,t={},r={}){let n=String(e||"").trim();if(!n)return null;let o=r.file||Nr(r.configDir),s=Dr(o),i=s.identities[n]&&typeof s.identities[n]=="object"?s.identities[n]:{};return s.identities[n]={...i,provider:n,source:String(t.source||i.source||"oracle"),loggedInAt:t.loggedInAt||new Date().toISOString(),...t.label?{label:String(t.label)}:{},...t.email?{email:String(t.email)}:{},...t.name?{name:String(t.name)}:{}},jr(o,s)}import{spawnSync as Fr}from"node:child_process";import Ur from"node:path";var Br="S-1-5-18",Kr="S-1-5-32-544",Hr=["$ErrorActionPreference='Stop'","$sid=[Security.Principal.SecurityIdentifier]","$user=[Security.Principal.WindowsIdentity]::GetCurrent().User.Value","$items=foreach($p in ($env:ORACLE_ACL_PATHS -split [char]10)){if([IO.Directory]::Exists($p)){$a=[IO.Directory]::GetAccessControl($p,'Owner,Access')}else{$a=[IO.File]::GetAccessControl($p,'Owner,Access')};@{owner=$a.GetOwner($sid).Value;sddl=$a.GetSecurityDescriptorSddlForm('Owner,Access');aces=@($a.GetAccessRules($true,$true,$sid)|ForEach-Object{@{sid=$_.IdentityReference.Value;allow=($_.AccessControlType -eq 'Allow')}})}}","[Console]::Out.Write((ConvertTo-Json -Compress -Depth 5 @{user=$user;items=@($items)}))"].join(";");function Wr(e){let t=process.env.SystemRoot||process.env.SYSTEMROOT||"C:\\Windows",r=Ur.win32.join(t,"System32","WindowsPowerShell","v1.0","powershell.exe"),n=Fr(r,["-NoLogo","-NoProfile","-NonInteractive","-Command",Hr],{encoding:"utf8",env:{SystemRoot:t,ORACLE_ACL_PATHS:e.join(`
+`)},timeout:3e4,windowsHide:!0});if(n.error||n.status!==0)throw new Error("Windows security descriptor is unreadable");let o=JSON.parse(n.stdout);if(!Array.isArray(o.items)||o.items.length!==e.length)throw new Error("Windows security descriptor is unreadable");return o}function qr(e){let t=String(e?.user||"");if(!/^S-1-\d+(?:-\d+)+$/.test(t))return"current user SID is unknown";let r=new Set([t,Br,Kr]);for(let n of e.items||[]){if(!r.has(n?.owner))return"owned by another principal";let o=String(n.sddl||"");if(!/D:/.test(o)||/D:[A-Z]*NO_ACCESS_CONTROL/.test(o))return"no discretionary access control";let s=o.slice(o.indexOf("D:")+2).replace(/S:.*$/,"");for(let[,i]of s.matchAll(/\(([A-Z]+);/g))if(i!=="A"&&i!=="D")return"unsupported access control entry";if(!Array.isArray(n.aces))return"access rules are unreadable";for(let i of n.aces)if(i?.allow!==!1&&!r.has(i?.sid))return"grants access to another principal"}return null}function Ce(e,t=Wr){try{let r=t(e);return!Array.isArray(r?.items)||r.items.length!==e.length?!1:qr(r)===null}catch{return!1}}var he=Object.freeze({"anthropic-oauth":{aliases:["anthropic-oauth","anthropic","claude","claude-oauth"],clientId:"9d1c250a-e61b-44d9-88ed-5944d1962f5e",authorizeUrl:"https://claude.ai/oauth/authorize",tokenUrl:"https://platform.claude.com/v1/oauth/token",redirectUri:"https://console.anthropic.com/oauth/code/callback",scope:"org:create_api_key user:profile user:inference",baseUrl:"https://api.anthropic.com/v1",model:"claude-sonnet-4-6",protocol:"anthropic-messages"},"openai-codex":{aliases:["openai-codex","openai-oauth","codex","codex-oauth"],clientId:"app_EMoamEEZ73f0CkXaXp7hrann",issuer:"https://auth.openai.com",tokenUrl:"https://auth.openai.com/oauth/token",baseUrl:"https://chatgpt.com/backend-api/codex",model:"gpt-5.6-sol",protocol:"responses"},"xai-oauth":{aliases:["xai-oauth","xai","grok","grok-oauth"],clientId:"b1a00492-073a-47ea-816f-4c329264a828",issuer:"https://auth.x.ai",discoveryUrl:"https://auth.x.ai/.well-known/openid-configuration",deviceUrl:"https://auth.x.ai/oauth2/device/code",scope:"openid profile email offline_access grok-cli:access api:access",baseUrl:"https://api.x.ai/v1",model:"grok-4.6",protocol:"responses"}}),$t=12e4;function Xr(e={}){return typeof e.now=="function"?Number(e.now()):Date.now()}function ne(e){let t=String(e||"").trim().toLowerCase();for(let[r,n]of Object.entries(he))if(n.aliases.includes(t))return r;throw new Error(`unsupported OAuth provider: ${e||"(empty)"}`)}function X(e){let t=ne(e);return{id:t,...he[t]}}function q(e,t={}){if(!N.existsSync(e))return t;try{let r=JSON.parse(N.readFileSync(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))throw new Error("invalid object");return r}catch{throw new Error(`credential store is unreadable or corrupt: ${O.basename(e)}`)}}function Mt(e,t=process.platform,r=void 0){if(U(e),t!=="win32")N.chmodSync(e,448);else if(!Ce([e],r))throw ot(e)}function Zr(e,t,r=process.platform,n=void 0){Mt(O.dirname(e),r,n);let o=`${e}.${process.pid}.${rt(4).toString("hex")}.tmp`;if(N.writeFileSync(o,`${JSON.stringify(t,null,2)}
+`,{mode:384}),r==="win32"&&!Ce([o],n)){try{N.unlinkSync(o)}catch{}throw ot(e)}N.renameSync(o,e),r!=="win32"&&N.chmodSync(e,384)}function ot(e){return new Error(`credential store is not owner-only (allow only the current user, SYSTEM and Administrators): ${O.basename(e)}`)}function Qr(e,t=process.platform){if(t!=="linux")return!1;let r=e("secret-tool",["--version"],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return!r.error&&r.status===0}function et(e){let t=String(e||"").trim().toLowerCase();if(!/^[a-z0-9][a-z0-9._-]*$/.test(t))throw new Error(`invalid API-key provider: ${e||"(empty)"}`);return t}function me(e={}){let t=String(e.accessToken||e.access_token||"").trim(),r=String(e.refreshToken||e.refresh_token||"").trim(),n=e.expires_at_ms!=null,o;if(n){let s=e.expires_at_ms;if(o=Number(s),typeof s!="number"&&typeof s!="string"||typeof s=="string"&&!s.trim()||!Number.isFinite(o)||o<=0)throw new Error("OAuth credential has invalid expires_at_ms")}else o=Number(e.expiresAt||e.expires_at||0),Number.isFinite(o)&&o>=1e9&&o<1e12&&(o=o*1e3);if(!t)throw new Error("OAuth credential is missing access token");return{accessToken:t,refreshToken:r,expiresAt:Number.isFinite(o)?o:0,tokenType:String(e.tokenType||e.token_type||"Bearer"),source:String(e.source||"oracle"),...e.discovery?{discovery:e.discovery}:{},...e.scope?{scope:e.scope}:{},...e.idToken||e.id_token?{idToken:String(e.idToken||e.id_token)}:{}}}function en(e={}){let t=e.file||O.join(R(),"oauth.json"),r=e.metadataFile||O.join(O.dirname(t),"oauth-meta.json"),n=e.linksFile||O.join(O.dirname(t),"oauth-links.json"),o=()=>typeof e.now=="function"?Number(e.now()):Date.now(),s=e.spawnFn||Vr,i=e.platform||process.platform,a=e.windowsSecurity,c=e.keychain!==!1&&process.env.ORACLE_AUTH_FILE_STORE!=="1"&&Qr(s,i),l=c?"linux-secret-service":"private-file",u=`${t}.lock`;function b(m,f){if(i!=="win32")return q(m,f);if(!N.existsSync(m))return f;if(!Ce([O.dirname(m),m],a))throw ot(m);return q(m,f)}function h(m,f){Zr(m,f,i,a)}async function T(m){Mt(O.dirname(u),i,a);let f;for(let p=0;p<400;p+=1)try{f=N.openSync(u,"wx",384);break}catch(g){if(g?.code!=="EEXIST")throw g;try{Date.now()-N.statSync(u).mtimeMs>3e5&&N.unlinkSync(u)}catch{}await new Promise(w=>setTimeout(w,25))}if(f===void 0)throw new Error("timed out waiting for OAuth credential lock");try{return await m()}finally{try{N.closeSync(f)}catch{}try{N.unlinkSync(u)}catch{}}}function x(m,f="oauth"){return["application","oracle","kind",f,"provider",m]}let M=!1;function v(){if(M)return;M=!0;let m=O.join(R(),"oauth-links.json");if(O.resolve(n)===O.resolve(m))try{At({linksFile:n})}catch{}}function A(m){if(v(),!N.existsSync(n))return[];let p=q(n,{providers:{}}).providers?.[m];if(!Array.isArray(p))return[];let g=[];for(let w of p)if(O.isAbsolute(String(w||"")))try{let _=q(w,{});if(m==="anthropic-oauth"&&_.claudeAiOauth){let y=me(_.claudeAiOauth);g.push({...y,refreshToken:"",source:"external-access-only",label:O.basename(O.dirname(w))||"claude-lane"});continue}let C=_.credential_pool&&typeof _.credential_pool=="object"?_.credential_pool:null;if(C){let y=C[m]||C[m.replace(/-oauth$/,"")]||[],d=Array.isArray(y)?y:y?[y]:[];for(let S of d)if(!(!S||typeof S!="object"))try{let E=me(S);g.push({...E,refreshToken:"",source:"external-access-only",label:String(S.label||S.id||O.basename(O.dirname(w))||m)})}catch{}}}catch{}return g}function B(m){let f=A(m);return f.length?f.find(p=>!p.expiresAt||p.expiresAt>o()+$t)||f[0]:null}function F(m){return m.map(f=>({label:String(f.label||"lane"),source:"external-access-only",expiresAt:Number(f.expiresAt||0),healthy:!f.expiresAt||f.expiresAt>o()+$t}))}function G(m){let f=ne(m);if(c){let w=s("secret-tool",["lookup",...x(f)],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!w.error&&w.status===0&&String(w.stdout||"").trim())try{return me(JSON.parse(String(w.stdout).trim()))}catch{}return B(f)}let g=b(t,{providers:{}}).providers?.[f];if(g)try{return me(g)}catch{}return B(f)}function H(m,f){let p=ne(m),g=me(f);if(c){let _=s("secret-tool",["store",`--label=Oracle ${p} OAuth`,...x(p)],{input:JSON.stringify(g),encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(_.error||_.status!==0)throw new Error("OS credential store rejected OAuth credential");let C=q(r,{providers:{}});C.providers||={},C.providers[p]={expiresAt:g.expiresAt,source:g.source},h(r,C);try{let y=Ze(g.idToken);Qe(p,{source:g.source,...y,label:y.name||y.email||p},{configDir:O.dirname(t)})}catch{}return g}let w=b(t,{providers:{}});w.providers||={},w.providers[p]=g,h(t,w);try{let _=Ze(g.idToken);Qe(p,{source:g.source,..._,label:_.name||_.email||p},{configDir:O.dirname(t)})}catch{}return g}function k(m){let f=ne(m);if(c){let w=s("secret-tool",["clear",...x(f)],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),_=q(r,{providers:{}});return _.providers&&delete _.providers[f],h(r,_),!w.error&&w.status===0}let p=b(t,{providers:{}}),g=!!p.providers?.[f];return p.providers&&delete p.providers[f],h(t,p),g}function ie(m){let f=et(m);if(c){let p=s("secret-tool",["lookup",...x(f,"api-key")],{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return p.error||p.status!==0?"":String(p.stdout||"").trim()}return String(b(t,{apiKeys:{}}).apiKeys?.[f]||"").trim()}function Y(m,f){let p=et(m),g=String(f||"").trim();if(!g)throw new Error("API key is empty");if(c){let _=s("secret-tool",["store",`--label=Oracle ${p} API key`,...x(p,"api-key")],{input:g,encoding:"utf8",stdio:["pipe","ignore","pipe"]});if(_.error||_.status!==0)throw new Error("OS credential store rejected API key");let C=q(r,{providers:{},apiKeys:{}});return C.apiKeys||={},C.apiKeys[p]={configured:!0},h(r,C),!0}let w=b(t,{providers:{},apiKeys:{}});return w.apiKeys||={},w.apiKeys[p]=g,h(t,w),!0}function I(m){let f=et(m);if(c){let w=s("secret-tool",["clear",...x(f,"api-key")],{encoding:"utf8",stdio:["ignore","ignore","pipe"]}),_=q(r,{providers:{},apiKeys:{}});return _.apiKeys&&delete _.apiKeys[f],h(r,_),!w.error&&w.status===0}let p=b(t,{providers:{},apiKeys:{}}),g=!!p.apiKeys?.[f];return p.apiKeys&&delete p.apiKeys[f],h(t,p),g}function ae(){v();let m={},f={};if(c){let p=q(r,{providers:{},apiKeys:{}});for(let[g,w]of Object.entries(p.providers||{}))m[g]={loggedIn:!!G(g),expiresAt:Number(w.expiresAt||0),source:String(w.source||"oracle"),storage:l,lanes:F(A(g))};for(let g of Object.keys(p.apiKeys||{}))f[g]={configured:!!ie(g),storage:l}}else{let p=b(t,{providers:{},apiKeys:{}});for(let[g,w]of Object.entries(p.providers||{}))m[g]={loggedIn:!!w?.accessToken,expiresAt:Number(w?.expiresAt||0),source:String(w?.source||"oracle"),storage:l,lanes:F(A(g))};for(let[g,w]of Object.entries(p.apiKeys||{}))f[g]={configured:!!w,storage:l}}for(let p of Object.keys(he)){let g=F(A(p));if(m[p]){m[p].lanes=g;continue}let w=B(p);w&&(m[p]={loggedIn:!0,expiresAt:w.expiresAt,source:w.source,storage:"external-access-source",lanes:g})}return{storage:l,providers:m,apiKeys:f}}return Object.freeze({file:t,storage:l,get:G,set:H,remove:k,getApiKey:ie,setApiKey:Y,removeApiKey:I,status:ae,withLock:T})}var Tt;function z(){return Tt||=en(),Tt}function tt(e){return Buffer.from(e).toString("base64url")}function tn(){let e=tt(rt(32));return{verifier:e,challenge:tt(zr("sha256").update(e).digest()),state:tt(rt(24))}}function rn(e,t){let r=Buffer.from(String(e||"")),n=Buffer.from(String(t||""));return r.length===n.length&&Gr(r,n)}function nn(e){let t=String(e),r=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd.exe",["/d","/s","/c","start","",t]]:["xdg-open",[t]];try{return Jr(r[0],r[1],{detached:!0,stdio:"ignore"}).unref(),!0}catch{return!1}}function nt(e){return new URLSearchParams(e).toString()}async function oe(e,t){if(!e?.ok){let n="";try{n=String((await e.json())?.error||"")}catch{}throw new Error(`${t} failed (HTTP ${e?.status||"unknown"}${n?`, ${n}`:""})`)}let r=await e.json();if(!r||typeof r!="object")throw new Error(`${t} returned invalid JSON`);return r}async function on(e){if(e)return String(await e()).trim();let t=Yr.createInterface({input:process.stdin,output:process.stdout});try{return String(await t.question("Authorization code: ")).trim()}finally{t.close()}}function st(e,t={}){let r=String(e.access_token||"").trim(),n=String(e.refresh_token||t.refreshToken||"").trim();if(!r)throw new Error("OAuth token response is missing access token");let o=Number(e.expires_in||3600);return me({accessToken:r,refreshToken:n,expiresAt:Xr(t)+Math.max(1,o)*1e3,tokenType:e.token_type||"Bearer",idToken:e.id_token,source:"oracle",...t.discovery?{discovery:t.discovery}:{},...e.scope?{scope:e.scope}:{}})}async function sn(e){let t=he["anthropic-oauth"],r=e.pkce||tn(),n=new URLSearchParams({code:"true",client_id:t.clientId,response_type:"code",redirect_uri:t.redirectUri,scope:t.scope,code_challenge:r.challenge,code_challenge_method:"S256",state:r.state}),o=`${t.authorizeUrl}?${n}`;e.output(`Open: ${o}`),e.openFn(o);let s=await on(e.inputFn),[i,a]=s.split("#",2);if(!i||!rn(a,r.state))throw new Error("Claude OAuth state mismatch");let c=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/json","user-agent":"axios/1.7.9"},body:JSON.stringify({grant_type:"authorization_code",client_id:t.clientId,code:i,state:a,redirect_uri:t.redirectUri,code_verifier:r.verifier})});return st(await oe(c,"Claude OAuth token exchange"),e)}async function an(e){let t=he["openai-codex"],r=await oe(await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:t.clientId})}),"Codex device authorization");if(!r.user_code||!r.device_auth_id)throw new Error("Codex device authorization returned incomplete data");let n=`${t.issuer}/codex/device`;e.output(`Open: ${n}`),e.output(`Code: ${r.user_code}`),e.openFn(n);let o=Math.max(3,Number(r.interval||5)),s;for(let a=0;a<Math.ceil(900/o);a+=1){await e.sleepFn(o*1e3);let c=await e.fetchFn(`${t.issuer}/api/accounts/deviceauth/token`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({device_auth_id:r.device_auth_id,user_code:r.user_code})});if(c.ok){s=await oe(c,"Codex device authorization");break}if(![403,404].includes(c.status))throw new Error(`Codex device authorization failed (HTTP ${c.status})`)}if(!s)throw new Error("Codex device authorization timed out");let i=await e.fetchFn(t.tokenUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:nt({grant_type:"authorization_code",code:s.authorization_code,redirect_uri:`${t.issuer}/deviceauth/callback`,client_id:t.clientId,code_verifier:s.code_verifier})});return st(await oe(i,"Codex OAuth token exchange"),e)}function Le(e){let t=new URL(String(e)),r=t.hostname.toLowerCase();if(t.protocol!=="https:"||r!=="x.ai"&&!r.endsWith(".x.ai"))throw new Error("xAI OAuth discovery returned an untrusted endpoint");return t.toString()}async function cn(e){let t=he["xai-oauth"],r=await oe(await e.fetchFn(t.discoveryUrl,{headers:{accept:"application/json"}}),"xAI OAuth discovery");Le(r.authorization_endpoint);let n=Le(r.token_endpoint),o=await oe(await e.fetchFn(t.deviceUrl,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({client_id:t.clientId,scope:t.scope})}),"xAI device authorization");if(!o.device_code||!o.user_code||!o.verification_uri)throw new Error("xAI device authorization returned incomplete data");let s=Le(o.verification_uri_complete||o.verification_uri);e.output(`Open: ${s}`),e.output(`Code: ${o.user_code}`),e.openFn(s);let i=Math.max(1,Number(o.interval||5)),a=Math.ceil(Math.max(1,Number(o.expires_in||600))/i);for(let c=0;c<a;c+=1){let l=await e.fetchFn(n,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json"},body:nt({grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:t.clientId,device_code:o.device_code})});if(l.ok){let b=await oe(l,"xAI OAuth token exchange");return st(b,{...e,discovery:{authorization_endpoint:Le(r.authorization_endpoint),token_endpoint:n}})}let u="";try{u=String((await l.json())?.error||"")}catch{}if(u==="slow_down")await e.sleepFn((i+1)*1e3);else if(u==="authorization_pending")await e.sleepFn(i*1e3);else throw new Error(`xAI OAuth token exchange failed (HTTP ${l.status}${u?`, ${u}`:""})`)}throw new Error("xAI device authorization timed out")}async function Rt(e,t={}){let r=ne(e),n={fetchFn:t.fetchFn||globalThis.fetch,inputFn:t.inputFn,sleepFn:t.sleepFn||(o=>new Promise(s=>setTimeout(s,o))),openFn:t.openFn||nn,output:t.output||(o=>process.stdout.write(`${o}
+`)),now:t.now,pkce:t.pkce};return r==="anthropic-oauth"?sn(n):r==="openai-codex"?an(n):cn(n)}import je from"node:fs";import it from"node:path";var un=new Set(["openrouter","openai","anthropic","xai","deepseek","gemini","kimi","mistral","nous","qwen","glm","local","ollama","custom","anthropic-oauth","openai-codex","xai-oauth"]);function Ne(e){return String(e||"").trim()||void 0}function ln(e,{required:t=!1}={}){let r=Ne(e)?.toLowerCase();if(!r){if(t)throw new Error("model provider is required");return}if(!un.has(r))throw new Error(`unsupported provider: ${r}`);return r}function dn(e,{required:t=!1}={}){let r=Ne(e);if(!r){if(t)throw new Error("model is required");return}if(r.includes("..")||r.startsWith("/")||!/^[a-zA-Z0-9._:/-]{1,200}$/.test(r))throw new Error("invalid model id");return r}function fn(e){let t=Ne(e);if(!t||t.length>2048)throw new Error("invalid custom base URL");let r;try{r=new URL(t)}catch{throw new Error("invalid custom base URL")}let n=r.hostname.toLowerCase().replace(/^\[|\]$/g,""),o=n==="localhost"||n==="127.0.0.1"||n==="::1";if(r.protocol!=="https:"&&!(r.protocol==="http:"&&o)||r.username||r.password||r.search||r.hash)throw new Error("custom base URL must use HTTPS or loopback HTTP without credentials, query, or fragment");return r.toString().replace(/\/+$/,"")}function De({provider:e,model:t,baseUrl:r}={},{requireModel:n=!1}={}){let o=ln(e),s=dn(t,{required:n});if(o==="custom")return{provider:o,...s?{model:s}:{},baseUrl:fn(r)};if(Ne(r))throw new Error("baseUrl is only supported for the custom provider");return{...o?{provider:o}:{},...s?{model:s}:{}}}var pn=new Set(["auto","standalone","hermes","remote","arch"]);function mn(){return it.join(R(),"model.json")}function ge(e){return String(e||"").trim()||void 0}function hn(e={}){let t=ge(e.backend)?.toLowerCase()||"auto",r=De({provider:e.provider,model:e.model,baseUrl:e.baseUrl},{requireModel:t==="standalone"}),n=ge(e.apiKeyEnv),o=Number.parseInt(String(e.contextLength||""),10),s=Object.fromEntries(Object.entries(e.contextByModel||{}).filter(([,u])=>Number.isSafeInteger(u)&&u>0)),i=ge(e.reasoningEffort),a=ge(e.computeHost||e.remoteHost),c=ge(e.computeUser||e.remoteUser),l=ge(e.computePath||e.remotePath);if(!pn.has(t))throw new Error(`unsupported backend: ${t}`);if(process.env.ORACLE_PUBLIC_DESKTOP==="1"&&["remote","arch"].includes(t))throw new Error("remote compute backends are disabled in the public desktop");if(n&&!/^[A-Z][A-Z0-9_]*$/.test(n))throw new Error("api key env must be an uppercase environment variable name");if(t==="remote"&&!a)throw new Error("remote backend requires computeHost");return{backend:t,...r,...n?{apiKeyEnv:n}:{},...Number.isFinite(o)&&o>0?{contextLength:o}:{},...Object.keys(s).length?{contextByModel:s}:{},...i?{reasoningEffort:i}:{},...a?{computeHost:a}:{},...c?{computeUser:c}:{},...l?{computePath:l}:{}}}function Fe(e){let t=hn(e),r=mn();U(it.dirname(r)),process.platform!=="win32"&&je.chmodSync(it.dirname(r),448);let n=`${r}.${process.pid}.tmp`;return je.writeFileSync(n,`${JSON.stringify(t,null,2)}
+`,{mode:384}),je.renameSync(n,r),process.platform!=="win32"&&je.chmodSync(r,384),t}var jt=Object.freeze({openrouter:{model:"openrouter/auto"},openai:{model:"gpt-4.1-mini"},anthropic:{model:"claude-sonnet-4-6"},xai:{model:"grok-4.6"},deepseek:{model:"deepseek-chat"},gemini:{model:"gemini-2.5-flash"},kimi:{model:"kimi-k3"},mistral:{model:"mistral-large-latest"},nous:{model:"moonshotai/kimi-k3"},qwen:{model:"qwen-plus"},glm:{model:"glm-4.5"},custom:{model:""}});function ct(e,t){let r=e.indexOf(t);return r>=0&&e[r+1]?e[r+1]:""}async function bn(){let e="";for await(let t of process.stdin)e+=t;return e.trim()}function xn(e="API key: "){if(!process.stdin.isTTY||!process.stdin.setRawMode)throw new Error("non-interactive API-key input requires --stdin");return process.stdout.write(e),new Promise((t,r)=>{let n="",o=()=>{process.stdin.off("data",s),process.stdin.setRawMode(!1),process.stdin.pause(),process.stdout.write(`
 `)},s=i=>{let a=String(i);for(let c of a){if(c==="\r"||c===`
-`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function ct(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...Ne({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function Ft(e,t,r={}){return Fe(ct(e,t,r))}function dn(e){process.stdout.write(`storage: ${e.storage}
+`){o(),t(n.trim());return}if(c===""){o(),r(new Error("cancelled"));return}c==="\x7F"||c==="\b"?n=n.slice(0,-1):n+=c}};process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.on("data",s)})}function ut(e,t,{baseUrl:r=""}={}){if(e==="custom"&&!String(r||"").trim())throw new Error("custom provider requires --base-url");return{backend:"standalone",...De({provider:e,model:t,baseUrl:r},{requireModel:!0})}}function Ft(e,t,r={}){return Fe(ut(e,t,r))}function kn(e){process.stdout.write(`storage: ${e.storage}
 `);let t=Object.entries(e.providers||{}),r=Object.entries(e.apiKeys||{});if(!t.length&&!r.length){process.stdout.write(`no credentials configured
 `);return}for(let[n,o]of t){let s=o.expiresAt?new Date(o.expiresAt).toISOString():"unknown";process.stdout.write(`${n}: ${o.loggedIn?"logged in":"missing"}, expires ${s}
 `);for(let i of o.lanes||[])process.stdout.write(`  ${i.label}: ${i.healthy?"ready":"expired"}
 `)}for(let[n,o]of r)process.stdout.write(`${n}: API key ${o.configured?"configured":"missing"}
-`)}function pn(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]","    PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|nous|qwen|glm|custom",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth usage [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
-`)}var ge={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:pn(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=q();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
-`):dn(o),0}if(r==="usage"){let{collectOAuthUsage:o}=await Promise.resolve().then(()=>(Nt(),Ct)),s=await o(n);return process.stdout.write(`${JSON.stringify(s)}
-`),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=X(o),i=at(t,"--model")||s.model;ct(s.id,i);let a=await Mt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{Ft(s.id,i)}catch(l){throw c?n.set(s.id,c):n.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
-`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(jt,o))throw new Error(`unsupported API-key provider: ${o}`);let s=at(t,"--model")||jt[o].model,i=at(t,"--base-url");ct(o,s,{baseUrl:i});let a=t.includes("--stdin")?await ln():await fn();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{Ft(o,s,{baseUrl:i})}catch(l){throw c?n.setApiKey(o,c):n.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${n.storage}
-`),0}if(r==="logout"){let o=String(t.find(a=>!a.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let s=!1;try{s=n.remove(oe(o))}catch{}let i=n.removeApiKey(o);if(!s&&!i)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
+`)}function Sn(){return["oracle auth, configure OAuth or API-key authentication","","  oracle auth login claude|codex|grok [--model MODEL] [--no-browser]","  oracle auth api-key PROVIDER [--model MODEL] [--base-url URL]","    PROVIDER: openrouter|openai|anthropic|xai|deepseek|gemini|kimi|mistral|nous|qwen|glm|custom",`  printf '%s\\n' "$KEY" | oracle auth api-key PROVIDER --stdin`,"  oracle auth status [--json]","  oracle auth usage [--json]","  oracle auth logout PROVIDER","","OAuth and API keys are additive. Select any compatible model with oracle model --provider PROVIDER --model MODEL."].join(`
+`)}var ye={name:"auth",summary:"login with Claude, Codex, or Grok OAuth; store provider API keys",group:"read",usage:Sn(),async run(e){let t=[...e.argv],r=t.shift()||"status",n=z();try{if(r==="status"){let o=n.status();return t.includes("--json")?process.stdout.write(`${JSON.stringify(o,null,2)}
+`):kn(o),0}if(r==="usage"){let{collectOAuthUsage:o}=await Promise.resolve().then(()=>(Dt(),Nt)),s=await o(n);return process.stdout.write(`${JSON.stringify(s)}
+`),0}if(r==="login"){let o=t.find(c=>!c.startsWith("-"));if(!o)throw new Error("usage: oracle auth login claude|codex|grok");let s=X(o),i=ct(t,"--model")||s.model;ut(s.id,i);let a=await Rt(s.id,{openFn:t.includes("--no-browser")?()=>!1:void 0});return await n.withLock(async()=>{let c=n.get(s.id);n.set(s.id,a);try{Ft(s.id,i)}catch(l){throw c?n.set(s.id,c):n.remove(s.id),l}}),process.stdout.write(`${s.id}: logged in, stored in ${n.storage}
+`),0}if(r==="api-key"){let o=String(t.find(c=>!c.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth api-key PROVIDER [--stdin]");if(!Object.hasOwn(jt,o))throw new Error(`unsupported API-key provider: ${o}`);let s=ct(t,"--model")||jt[o].model,i=ct(t,"--base-url");ut(o,s,{baseUrl:i});let a=t.includes("--stdin")?await bn():await xn();return await n.withLock(async()=>{let c=n.getApiKey(o);n.setApiKey(o,a);try{Ft(o,s,{baseUrl:i})}catch(l){throw c?n.setApiKey(o,c):n.removeApiKey(o),l}}),process.stdout.write(`${o}: API key configured in ${n.storage}
+`),0}if(r==="logout"){let o=String(t.find(a=>!a.startsWith("-"))||"").trim().toLowerCase();if(!o)throw new Error("usage: oracle auth logout PROVIDER");let s=!1;try{s=n.remove(ne(o))}catch{}let i=n.removeApiKey(o);if(!s&&!i)throw new Error(`${o}: no local credential found`);return process.stdout.write(`${o}: local credential removed
 `),0}throw new Error(`unknown auth action: ${r}`)}catch(o){return process.stderr.write(`oracle auth: ${o.message}
-`),1}}};var mn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var Io=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var De=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),hn=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Dt=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),gn=Object.freeze(Dt[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function yn(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function Ut(e,t,r){let n=yn(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function ut({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>Ut(38,r,n),bg:(r,n)=>Ut(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var Co=ut();function Bt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as $n}from"node:child_process";var Se=Buffer.alloc(0);var wn={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},bn={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function j({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function qt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function kn(e){return e>=64&&e<=126}function Kt(e){let t=e.toLowerCase();return j({name:t,shift:e!==t,sequence:e})}function xn(e){return e===13?j({name:"return",sequence:"\r"}):e===10?j({name:"return",sequence:`
-`}):e===9?j({name:"tab",sequence:"	"}):e===127?j({name:"backspace",sequence:"\x7F"}):e===8?j({name:"backspace",sequence:"\b"}):e>=1&&e<=26?j({name:String.fromCharCode(e+96),ctrl:!0,sequence:String.fromCharCode(e)}):j({name:"unknown",sequence:String.fromCharCode(e)})}function Sn(e){let t=/^\u001b[\[O](\d*)(?:;(\d+))?(.)$/s.exec(e);if(!t)return j({name:"unknown",sequence:e});let r=t[1]===""?null:Number(t[1]),n=t[2]===void 0?null:Number(t[2]),o=t[3],s=null,i=n;if(o==="~"?s=bn[r]??null:(s=wn[o]??null,i===null&&r!==null&&r>1&&(i=r)),!s)return j({name:"unknown",sequence:e});let a=i===null?0:Math.max(0,i-1);return j({name:s,shift:(a&1)!==0,meta:(a&2)!==0,ctrl:(a&4)!==0,sequence:e})}function vn(e,t,r,n){let o=()=>(r.push(j({name:"escape",sequence:"\x1B"})),1);if(t+1>=e.length)return n?o():0;let s=e[t+1];if(s===91||s===79){let l=t+2;for(;l<e.length&&!kn(e[l]);)l+=1;return l>=e.length?n?o():0:(r.push(Sn(e.toString("utf8",t,l+1))),l+1-t)}if(s===27)return o();let i=qt(s);if(t+1+i>e.length)return n?o():0;let a=e.toString("utf8",t+1,t+1+i),c=a.toLowerCase();return r.push(j({name:c,meta:!0,shift:a!==c,sequence:`\x1B${a}`})),1+i}function Ht(e,t){let r=[],n=0;for(;n<e.length;){let o=e[n];if(o===27){let i=vn(e,n,r,t);if(i===0)return{keys:r,rest:Buffer.from(e.subarray(n))};n+=i;continue}if(o<32||o===127){r.push(xn(o)),n+=1;continue}let s=qt(o);if(n+s>e.length)return t?(r.push(Kt(e.toString("utf8",n))),{keys:r,rest:Se}):{keys:r,rest:Buffer.from(e.subarray(n))};r.push(Kt(e.toString("utf8",n,n+s))),n+=s}return{keys:r,rest:Se}}function zt(e){return Buffer.isBuffer(e)?e:e==null?Se:typeof e=="string"?Buffer.from(e,"utf8"):Buffer.from(e)}function Wt(){let e=Se;return{push(t){let r=e.length===0?zt(t):Buffer.concat([e,zt(t)]),{keys:n,rest:o}=Ht(r,!1);return e=o,n},flush(){if(e.length===0)return[];let{keys:t}=Ht(e,!0);return e=Se,t},get pending(){return e.length}}}var lt=/\u001B\[[0-9;]*m/g;function Yt(e){if(new RegExp("\\p{Mark}","u").test(e))return 0;let t=e.codePointAt(0);return t===8205||t===65039?0:t>=4352&&(t<=4447||t===9001||t===9002||t>=11904&&t<=42191&&t!==12351||t>=44032&&t<=55203||t>=63744&&t<=64255||t>=65040&&t<=65049||t>=65072&&t<=65135||t>=65280&&t<=65376||t>=65504&&t<=65510||t>=127744&&t<=129791||t>=131072&&t<=262141)?2:t<32||t>=127&&t<160?0:1}function _n(e){return[...Bt(e)].reduce((t,r)=>t+Yt(r),0)}function An(e,t){if(t<=0)return"";let r=String(e).split(/(\u001B\[[0-9;]*m)/g),n="",o=0,s=!1;for(let i of r)if(i){if(lt.test(i)){lt.lastIndex=0,n+=i,s=i!=="\x1B[0m";continue}lt.lastIndex=0;for(let a of i){let c=Yt(a);if(o+c>t)return s?`${n}\x1B[0m`:n;n+=a,o+=c}}return n}function Ue(e,t,r="left"){let n=Math.max(0,Math.floor(Number(t)||0)),o=An(String(e),n),s=Math.max(0,n-_n(o));if(r==="right")return`${" ".repeat(s)}${o}`;if(r==="center"){let i=Math.floor(s/2);return`${" ".repeat(i)}${o}${" ".repeat(s-i)}`}return`${o}${" ".repeat(s)}`}var Qo=Object.freeze(["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"]),es=Object.freeze({thinking:"Thinking",writing:"Writing",executing:"Executing",waiting:"Waiting"});async function Gt(e,{headers:t={}}={}){let r=new AbortController,n=setTimeout(()=>r.abort(),6e3);try{let o=await fetch(e,{headers:t,signal:r.signal}),s=null;try{s=await o.json()}catch{s=null}return{status:o.status,body:s}}finally{clearTimeout(n)}}async function En(e){let t=String(e||"").trim();if(!/^\d+:[\w-]{20,}$/.test(t))return{ok:!1,definitive:!0,error:"that does not look like a telegram bot token (123456:ABC\u2026)"};try{let{status:r,body:n}=await Gt(`https://api.telegram.org/bot${t}/getMe`);return r===200&&n?.ok&&n.result?.username?{ok:!0,definitive:!0,username:`@${n.result.username}`}:r===401||r===404?{ok:!1,definitive:!0,error:"telegram rejected this token (check BotFather)"}:{ok:!1,definitive:!1,error:`telegram returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function On(e){let t=String(e||"").trim();if(t.length<50)return{ok:!1,definitive:!0,error:"that does not look like a discord bot token"};try{let{status:r,body:n}=await Gt("https://discord.com/api/v10/users/@me",{headers:{Authorization:`Bot ${t}`}});return r===200&&n?.username?{ok:!0,definitive:!0,username:n.username}:r===401?{ok:!1,definitive:!0,error:"discord rejected this token (reset it in the developer portal)"}:{ok:!1,definitive:!1,error:`discord returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function Be(e,t){let r=String(e||"").toLowerCase();return r==="telegram"?En(t):r==="discord"?On(t):{ok:!1,definitive:!1}}var Tn=Object.freeze(["telegram","discord","whatsapp","slack","signal"]),Qt=Object.freeze([{id:"claude",label:"Claude",hint:"Anthropic OAuth",kind:"oauth"},{id:"codex",label:"Codex",hint:"OpenAI OAuth",kind:"oauth"},{id:"grok",label:"Grok",hint:"xAI OAuth",kind:"oauth"}]),er=Object.freeze([{id:"openrouter",label:"OpenRouter",hint:"API key",kind:"api-key"},{id:"openai",label:"OpenAI",hint:"API key",kind:"api-key"},{id:"anthropic",label:"Anthropic",hint:"API key",kind:"api-key"},{id:"deepseek",label:"DeepSeek",hint:"API key",kind:"api-key"},{id:"gemini",label:"Gemini",hint:"API key",kind:"api-key"},{id:"kimi",label:"Kimi",hint:"API key",kind:"api-key"},{id:"mistral",label:"Mistral",hint:"API key",kind:"api-key"},{id:"nous",label:"Nous Portal",hint:"API key",kind:"api-key"},{id:"qwen",label:"Qwen",hint:"API key",kind:"api-key"},{id:"glm",label:"GLM",hint:"API key",kind:"api-key"}]);function Mn(e,t){let r=String(t||"unset");return r==="ready"||r==="connected"||r==="configured"?e.fg($.ok,r):r==="manual"?e.fg($.warn,r):e.fg($.banner_dim,r||"unset")}function Jt({profile:e="oracle",statuses:t=null,oauthStatus:r=null,runtime:n=null}={}){let o=t;if(!o)try{o=ue(e).statuses||{}}catch{o={}}let s=r;if(!s)try{s=q().status()}catch{s={providers:{},apiKeys:{}}}let i=n;if(!i)try{i=de()}catch{i={ok:!1}}let a=Qt.some(w=>{let g=X(w.id);return s.providers?.[g.id]?.loggedIn===!0}),c=er.some(w=>s.apiKeys?.[w.id]?.configured===!0),l=[{id:"model",label:"model / sign-in",note:"Claude \xB7 Codex \xB7 Grok \xB7 API keys",status:a||c?"ready":"unset",action:"model"}];i.ok||l.push({id:"runtime",label:"messaging runtime",note:"one-time install \u2014 powers telegram/discord bridge",status:"missing",action:"bootstrap"});let u=new Map(ae().map(w=>[w.key,w]));for(let w of Tn){let g=u.get(w);if(!g)continue;let E=o[g.key]||(g.required?.length?"unset":"manual"),S=!i.ok&&E==="ready"?"token set":E;l.push({id:g.key,label:g.name,note:g.note||"",status:S,action:g.required?.length?"token":"hermes",platform:g})}return l.push({id:"gateway",label:"restart gateway",note:"apply channel config",status:"",action:"gateway"},{id:"gateway-install",label:"start on boot",note:"keep the bot alive after reboot",status:"",action:"gateway-install"},{id:"done",label:"done",note:"back to oracle",status:"",action:"done",skip:!0}),l}function Vt(e=null){let t=e;if(!t)try{t=q().status()}catch{t={providers:{},apiKeys:{}}}let r=[];for(let n of Qt){let o=X(n.id),s=t.providers?.[o.id]?.loggedIn===!0;r.push({id:n.id,label:n.label,note:n.hint,status:s?"connected":"OAuth",action:"oauth",kind:"oauth"})}for(let n of er){let o=t.apiKeys?.[n.id]?.configured===!0;r.push({id:n.id,label:n.label,note:n.hint,status:o?"configured":"API key",action:"api-key",kind:"api-key"})}return r.push({id:"back",label:"back",note:"setup menu",status:"",action:"back",skip:!0}),r}function Ke({width:e,palette:t,title:r,subtitle:n="",rows:o=[],index:s=0,footer:i="\u2191/\u2193 move   enter select   esc back"}={}){let a=Math.max(40,Math.floor(Number(e)||80)),c=Math.max(36,Math.min(a-4,72)),l=Math.max(0,Math.floor((a-c)/2)),u=Math.max(0,c-4),w=" ".repeat(l),g=A=>t.fg($.banner_border,A),E=A=>`${w}${A}`,S=(A="")=>E(`${g("\u2502")} ${Ue(A,u)} ${g("\u2502")}`),T="\u2500".repeat(Math.max(0,c-2)),v=[E(`${g("\u256D")}${g(T)}${g("\u256E")}`),S(t.bold(t.fg($.accent,r||"oracle setup"))),S(g("\u2500".repeat(u)))];return n&&(v.push(S(t.fg($.banner_dim,n))),v.push(S(""))),o.forEach((A,W)=>{let B=W===s,Q=B?"\u203A":" ",H=String(A.label||A.id||""),k=String(A.note||""),y=A.status?Mn(t,A.status):"",p=` ${Q} ${H}`,f=[y,k?t.fg($.banner_dim,k):""].filter(Boolean).join("  "),m=Math.max(1,u-Xt(p)-Xt(tr(f))-1),h=`${p}${" ".repeat(m)}${f}`;B?v.push(S(t.bg($.selection_bg,t.bold(t.fg($.banner_text,Ue(h,u)))))):v.push(S(h))}),v.push(S("")),v.push(S(t.fg($.banner_dim,i))),v.push(E(`${g("\u2570")}${g(T)}${g("\u256F")}`)),v}function Rn({width:e,palette:t,platformKey:r="telegram",tokenLength:n=0,error:o=""}={}){let s=Math.max(40,Math.floor(Number(e)||80)),i=Math.max(36,Math.min(s-4,72)),a=Math.max(0,Math.floor((s-i)/2)),c=Math.max(0,i-4),l=" ".repeat(a),u=v=>t.fg($.banner_border,v),w=v=>`${l}${v}`,g=(v="")=>w(`${u("\u2502")} ${Ue(v,c)} ${u("\u2502")}`),E="\u2500".repeat(Math.max(0,i-2)),S=n>0?"\u2022".repeat(Math.min(n,40)):t.fg($.banner_dim,"paste token here (hidden)");return[w(`${u("\u256D")}${u(E)}${u("\u256E")}`),g(t.bold(t.fg($.accent,`setup \xB7 ${r}`))),g(u("\u2500".repeat(c))),g(t.fg($.banner_dim,"token stays local \xB7 never echoed \xB7 never sent to chat")),g(""),g(`${t.fg($.banner_dim,"token")}  ${S}`),g(n?t.fg($.banner_dim,`       ${n} characters`):""),g(o?t.fg($.warn,o):""),g(t.fg($.banner_dim,"type or paste   backspace   enter save   esc cancel")),w(`${u("\u2570")}${u(E)}${u("\u256F")}`)]}function Pn({width:e,palette:t,title:r,subtitle:n,index:o=0,yesLabel:s="yes",noLabel:i="not now"}={}){return Ke({width:e,palette:t,title:r,subtitle:n,rows:[{id:"yes",label:s,note:"",status:""},{id:"no",label:i,note:"",status:""}],index:o,footer:"\u2191/\u2193 move   enter select   esc skip"})}function tr(e){return String(e||"").replace(/\u001b\[[0-9;]*m/g,"")}function Xt(e){return tr(e).length}function ye(e){e.write("\x1B[2J\x1B[H")}function ve(e,t){ye(e),e.write(`${t.join(`
+`),1}}};var vn=Object.freeze([["#D7F4FF","          \u2584\u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584\u2584          "],["#9CE7FF","      \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584      "],["#5BCBFF","     \u2584\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2584     "],["#BDEEFF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#369BFF","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#2577D8","   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#79D7FF","    \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588    "],["#1E5CA8","     \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580     "],["#64BFFF","       \u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580       "],["#B8EAFF","          \u2580\u2580\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2580\u2580          "]]);var zo=Object.freeze(["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]);var Ue=Object.freeze([["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571  \xB7\u2500\u2500\xB7  \u2572 ","\u2502  \xB7(\u2588\u2588)\xB7  \u2502"," \u2572  \xB7\u2500\u2500\xB7  \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571 \xB7\u2500\u2500\u2500\u2500\xB7 \u2572 ","\u2502 \xB7 (\u2588\u2588) \xB7 \u2502"," \u2572 \xB7\u2500\u2500\u2500\u2500\xB7 \u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "],["  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "," \u2571\xB7 \u2500\u2500\u2500\u2500 \xB7\u2572 ","\u2502   (\u2588\u2588)   \u2502"," \u2572\xB7 \u2500\u2500\u2500\u2500 \xB7\u2571 ","  \xB7\u2500\u2500\u2550\u2550\u2500\u2500\xB7  "]]),An=Object.freeze([["#EAF7FF","    \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    "],["#D8F2FF","   \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588   "],["#B8F0FF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591   \u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2591\u2591  \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "],["#ACDEEF","   \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588      \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588\u2588\u2588 \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2591    "],["#91C2D7","   \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588    \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588   "],["#7FA9BE","    \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591      \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591  \u2591\u2591\u2591\u2591\u2591\u2591    "]]);var Ut=Object.freeze([["    *        +        .                 '          *          ","        .          *          *               +        '      "],["    +        .        *                 +          '          ","        *          '          +               .        +      "],["    .        *        +                 *          +          ","        +          +          .               *        *      "],["    +        '        *                 .          *          ","        *          *          +               '        .      "]]),_n=Object.freeze(Ut[0]);var $=Object.freeze({accent:"#B8F0FF",prompt:"#B8F0FF",banner_title:"#B8F0FF",banner_accent:"#91C2D7",ui_label:"#A5D9EB",banner_text:"#EAF2F8",status_bar_strong:"#EAF2F8",banner_border:"#6A8496",input_rule:"#6A8496",session_border:"#6A8496",banner_dim:"#60717F",status_bar_dim:"#60717F",status_bar_bg:"#11161B",status_bar_text:"#91A2B1",ok:"#7EE7B5",error:"#FF7B7B",warn:"#F0C674",bad:"#FF9B71",selection_bg:"#1A2A35",tab_active:"#B8F0FF",tab_idle:"#91A2B1",gauge_fill:"#5CB8FF",gauge_track:"#455867",gauge_hot:"#F0C674",gauge_warn:"#FF9B71"});function En(e){if(typeof e!="string")return null;let t=e.startsWith("#")?e.slice(1):e;if(!/^(?:[\da-f]{3}|[\da-f]{6})$/i.test(t))return null;let r=t.length===3?[...t].map(n=>n.repeat(2)).join(""):t;return{r:Number.parseInt(r.slice(0,2),16),g:Number.parseInt(r.slice(2,4),16),b:Number.parseInt(r.slice(4,6),16)}}function Bt(e,t,r){let n=En(t);return n?`\x1B[${e};2;${n.r};${n.g};${n.b}m${String(r)}\x1B[0m`:String(r)}function lt({color:e=!0}={}){return e&&!Object.hasOwn(process.env,"NO_COLOR")?Object.freeze({fg:(r,n)=>Bt(38,r,n),bg:(r,n)=>Bt(48,r,n),bold:r=>`\x1B[1m${String(r)}\x1B[0m`,dim:r=>`\x1B[2m${String(r)}\x1B[0m`}):Object.freeze({fg:(r,n)=>String(n),bg:(r,n)=>String(n),bold:r=>String(r),dim:r=>String(r)})}var Yo=lt();function Kt(e){return String(e).replace(/\u001B\[[0-9;]*m/g,"")}import{spawnSync as Dn}from"node:child_process";var ve=Buffer.alloc(0);var On={A:"up",B:"down",C:"right",D:"left",H:"home",F:"end",P:"f1",Q:"f2",R:"f3",S:"f4"},$n={1:"home",2:"insert",3:"delete",4:"end",5:"pageup",6:"pagedown",7:"home",8:"end"};function D({name:e=null,ctrl:t=!1,meta:r=!1,shift:n=!1,sequence:o=""}){return{name:e,ctrl:t,meta:r,shift:n,sequence:o}}function zt(e){return e<128?1:e>=240?4:e>=224?3:e>=192?2:1}function Tn(e){return e>=64&&e<=126}function Ht(e){let t=e.toLowerCase();return D({name:t,shift:e!==t,sequence:e})}function Mn(e){return e===13?D({name:"return",sequence:"\r"}):e===10?D({name:"return",sequence:`
+`}):e===9?D({name:"tab",sequence:"	"}):e===127?D({name:"backspace",sequence:"\x7F"}):e===8?D({name:"backspace",sequence:"\b"}):e>=1&&e<=26?D({name:String.fromCharCode(e+96),ctrl:!0,sequence:String.fromCharCode(e)}):D({name:"unknown",sequence:String.fromCharCode(e)})}function Rn(e){let t=/^\u001b[\[O](\d*)(?:;(\d+))?(.)$/s.exec(e);if(!t)return D({name:"unknown",sequence:e});let r=t[1]===""?null:Number(t[1]),n=t[2]===void 0?null:Number(t[2]),o=t[3],s=null,i=n;if(o==="~"?s=$n[r]??null:(s=On[o]??null,i===null&&r!==null&&r>1&&(i=r)),!s)return D({name:"unknown",sequence:e});let a=i===null?0:Math.max(0,i-1);return D({name:s,shift:(a&1)!==0,meta:(a&2)!==0,ctrl:(a&4)!==0,sequence:e})}function Pn(e,t,r,n){let o=()=>(r.push(D({name:"escape",sequence:"\x1B"})),1);if(t+1>=e.length)return n?o():0;let s=e[t+1];if(s===91||s===79){let l=t+2;for(;l<e.length&&!Tn(e[l]);)l+=1;return l>=e.length?n?o():0:(r.push(Rn(e.toString("utf8",t,l+1))),l+1-t)}if(s===27)return o();let i=zt(s);if(t+1+i>e.length)return n?o():0;let a=e.toString("utf8",t+1,t+1+i),c=a.toLowerCase();return r.push(D({name:c,meta:!0,shift:a!==c,sequence:`\x1B${a}`})),1+i}function Wt(e,t){let r=[],n=0;for(;n<e.length;){let o=e[n];if(o===27){let i=Pn(e,n,r,t);if(i===0)return{keys:r,rest:Buffer.from(e.subarray(n))};n+=i;continue}if(o<32||o===127){r.push(Mn(o)),n+=1;continue}let s=zt(o);if(n+s>e.length)return t?(r.push(Ht(e.toString("utf8",n))),{keys:r,rest:ve}):{keys:r,rest:Buffer.from(e.subarray(n))};r.push(Ht(e.toString("utf8",n,n+s))),n+=s}return{keys:r,rest:ve}}function qt(e){return Buffer.isBuffer(e)?e:e==null?ve:typeof e=="string"?Buffer.from(e,"utf8"):Buffer.from(e)}function Gt(){let e=ve;return{push(t){let r=e.length===0?qt(t):Buffer.concat([e,qt(t)]),{keys:n,rest:o}=Wt(r,!1);return e=o,n},flush(){if(e.length===0)return[];let{keys:t}=Wt(e,!0);return e=ve,t},get pending(){return e.length}}}var dt=/\u001B\[[0-9;]*m/g;function Yt(e){if(new RegExp("\\p{Mark}","u").test(e))return 0;let t=e.codePointAt(0);return t===8205||t===65039?0:t>=4352&&(t<=4447||t===9001||t===9002||t>=11904&&t<=42191&&t!==12351||t>=44032&&t<=55203||t>=63744&&t<=64255||t>=65040&&t<=65049||t>=65072&&t<=65135||t>=65280&&t<=65376||t>=65504&&t<=65510||t>=127744&&t<=129791||t>=131072&&t<=262141)?2:t<32||t>=127&&t<160?0:1}function In(e){return[...Kt(e)].reduce((t,r)=>t+Yt(r),0)}function Cn(e,t){if(t<=0)return"";let r=String(e).split(/(\u001B\[[0-9;]*m)/g),n="",o=0,s=!1;for(let i of r)if(i){if(dt.test(i)){dt.lastIndex=0,n+=i,s=i!=="\x1B[0m";continue}dt.lastIndex=0;for(let a of i){let c=Yt(a);if(o+c>t)return s?`${n}\x1B[0m`:n;n+=a,o+=c}}return n}function Be(e,t,r="left"){let n=Math.max(0,Math.floor(Number(t)||0)),o=Cn(String(e),n),s=Math.max(0,n-In(o));if(r==="right")return`${" ".repeat(s)}${o}`;if(r==="center"){let i=Math.floor(s/2);return`${" ".repeat(i)}${o}${" ".repeat(s-i)}`}return`${o}${" ".repeat(s)}`}var fs=Object.freeze(["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"]),ps=Object.freeze({thinking:"Thinking",writing:"Writing",executing:"Executing",waiting:"Waiting"});async function Jt(e,{headers:t={}}={}){let r=new AbortController,n=setTimeout(()=>r.abort(),6e3);try{let o=await fetch(e,{headers:t,signal:r.signal}),s=null;try{s=await o.json()}catch{s=null}return{status:o.status,body:s}}finally{clearTimeout(n)}}async function Ln(e){let t=String(e||"").trim();if(!/^\d+:[\w-]{20,}$/.test(t))return{ok:!1,definitive:!0,error:"that does not look like a telegram bot token (123456:ABC\u2026)"};try{let{status:r,body:n}=await Jt(`https://api.telegram.org/bot${t}/getMe`);return r===200&&n?.ok&&n.result?.username?{ok:!0,definitive:!0,username:`@${n.result.username}`}:r===401||r===404?{ok:!1,definitive:!0,error:"telegram rejected this token (check BotFather)"}:{ok:!1,definitive:!1,error:`telegram returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function Nn(e){let t=String(e||"").trim();if(t.length<50)return{ok:!1,definitive:!0,error:"that does not look like a discord bot token"};try{let{status:r,body:n}=await Jt("https://discord.com/api/v10/users/@me",{headers:{Authorization:`Bot ${t}`}});return r===200&&n?.username?{ok:!0,definitive:!0,username:n.username}:r===401?{ok:!1,definitive:!0,error:"discord rejected this token (reset it in the developer portal)"}:{ok:!1,definitive:!1,error:`discord returned ${r} \u2014 saved anyway, verify later`}}catch{return{ok:!1,definitive:!1,error:"network unreachable \u2014 saved anyway, verify later"}}}async function Ke(e,t){let r=String(e||"").toLowerCase();return r==="telegram"?Ln(t):r==="discord"?Nn(t):{ok:!1,definitive:!1}}var jn=Object.freeze(["telegram","discord","whatsapp","slack","signal"]),er=Object.freeze([{id:"claude",label:"Claude",hint:"Anthropic OAuth",kind:"oauth"},{id:"codex",label:"Codex",hint:"OpenAI OAuth",kind:"oauth"},{id:"grok",label:"Grok",hint:"xAI OAuth",kind:"oauth"}]),tr=Object.freeze([{id:"openrouter",label:"OpenRouter",hint:"API key",kind:"api-key"},{id:"openai",label:"OpenAI",hint:"API key",kind:"api-key"},{id:"anthropic",label:"Anthropic",hint:"API key",kind:"api-key"},{id:"deepseek",label:"DeepSeek",hint:"API key",kind:"api-key"},{id:"gemini",label:"Gemini",hint:"API key",kind:"api-key"},{id:"kimi",label:"Kimi",hint:"API key",kind:"api-key"},{id:"mistral",label:"Mistral",hint:"API key",kind:"api-key"},{id:"nous",label:"Nous Portal",hint:"API key",kind:"api-key"},{id:"qwen",label:"Qwen",hint:"API key",kind:"api-key"},{id:"glm",label:"GLM",hint:"API key",kind:"api-key"}]);function Fn(e,t){let r=String(t||"unset");return r==="ready"||r==="connected"||r==="configured"?e.fg($.ok,r):r==="manual"?e.fg($.warn,r):e.fg($.banner_dim,r||"unset")}function Vt({profile:e="oracle",statuses:t=null,oauthStatus:r=null,runtime:n=null}={}){let o=t;if(!o)try{o=le(e).statuses||{}}catch{o={}}let s=r;if(!s)try{s=z().status()}catch{s={providers:{},apiKeys:{}}}let i=n;if(!i)try{i=pe()}catch{i={ok:!1}}let a=er.some(b=>{let h=X(b.id);return s.providers?.[h.id]?.loggedIn===!0}),c=tr.some(b=>s.apiKeys?.[b.id]?.configured===!0),l=[{id:"model",label:"model / sign-in",note:"Claude \xB7 Codex \xB7 Grok \xB7 API keys",status:a||c?"ready":"unset",action:"model"}];i.ok||l.push({id:"runtime",label:"messaging runtime",note:"one-time install \u2014 powers telegram/discord bridge",status:"missing",action:"bootstrap"});let u=new Map(ce().map(b=>[b.key,b]));for(let b of jn){let h=u.get(b);if(!h)continue;let T=o[h.key]||(h.required?.length?"unset":"manual"),x=!i.ok&&T==="ready"?"token set":T;l.push({id:h.key,label:h.name,note:h.note||"",status:x,action:h.required?.length?"token":"hermes",platform:h})}return l.push({id:"gateway",label:"restart gateway",note:"apply channel config",status:"",action:"gateway"},{id:"gateway-install",label:"start on boot",note:"keep the bot alive after reboot",status:"",action:"gateway-install"},{id:"done",label:"done",note:"back to oracle",status:"",action:"done",skip:!0}),l}function Xt(e=null){let t=e;if(!t)try{t=z().status()}catch{t={providers:{},apiKeys:{}}}let r=[];for(let n of er){let o=X(n.id),s=t.providers?.[o.id]?.loggedIn===!0;r.push({id:n.id,label:n.label,note:n.hint,status:s?"connected":"OAuth",action:"oauth",kind:"oauth"})}for(let n of tr){let o=t.apiKeys?.[n.id]?.configured===!0;r.push({id:n.id,label:n.label,note:n.hint,status:o?"configured":"API key",action:"api-key",kind:"api-key"})}return r.push({id:"back",label:"back",note:"setup menu",status:"",action:"back",skip:!0}),r}function He({width:e,palette:t,title:r,subtitle:n="",rows:o=[],index:s=0,footer:i="\u2191/\u2193 move   enter select   esc back"}={}){let a=Math.max(40,Math.floor(Number(e)||80)),c=Math.max(36,Math.min(a-4,72)),l=Math.max(0,Math.floor((a-c)/2)),u=Math.max(0,c-4),b=" ".repeat(l),h=A=>t.fg($.banner_border,A),T=A=>`${b}${A}`,x=(A="")=>T(`${h("\u2502")} ${Be(A,u)} ${h("\u2502")}`),M="\u2500".repeat(Math.max(0,c-2)),v=[T(`${h("\u256D")}${h(M)}${h("\u256E")}`),x(t.bold(t.fg($.accent,r||"oracle setup"))),x(h("\u2500".repeat(u)))];return n&&(v.push(x(t.fg($.banner_dim,n))),v.push(x(""))),o.forEach((A,B)=>{let F=B===s,G=F?"\u203A":" ",H=String(A.label||A.id||""),k=String(A.note||""),ie=A.status?Fn(t,A.status):"",Y=` ${G} ${H}`,I=[ie,k?t.fg($.banner_dim,k):""].filter(Boolean).join("  "),ae=Math.max(1,u-Zt(Y)-Zt(rr(I))-1),m=`${Y}${" ".repeat(ae)}${I}`;F?v.push(x(t.bg($.selection_bg,t.bold(t.fg($.banner_text,Be(m,u)))))):v.push(x(m))}),v.push(x("")),v.push(x(t.fg($.banner_dim,i))),v.push(T(`${h("\u2570")}${h(M)}${h("\u256F")}`)),v}function Un({width:e,palette:t,platformKey:r="telegram",tokenLength:n=0,error:o=""}={}){let s=Math.max(40,Math.floor(Number(e)||80)),i=Math.max(36,Math.min(s-4,72)),a=Math.max(0,Math.floor((s-i)/2)),c=Math.max(0,i-4),l=" ".repeat(a),u=v=>t.fg($.banner_border,v),b=v=>`${l}${v}`,h=(v="")=>b(`${u("\u2502")} ${Be(v,c)} ${u("\u2502")}`),T="\u2500".repeat(Math.max(0,i-2)),x=n>0?"\u2022".repeat(Math.min(n,40)):t.fg($.banner_dim,"paste token here (hidden)");return[b(`${u("\u256D")}${u(T)}${u("\u256E")}`),h(t.bold(t.fg($.accent,`setup \xB7 ${r}`))),h(u("\u2500".repeat(c))),h(t.fg($.banner_dim,"token stays local \xB7 never echoed \xB7 never sent to chat")),h(""),h(`${t.fg($.banner_dim,"token")}  ${x}`),h(n?t.fg($.banner_dim,`       ${n} characters`):""),h(o?t.fg($.warn,o):""),h(t.fg($.banner_dim,"type or paste   backspace   enter save   esc cancel")),b(`${u("\u2570")}${u(T)}${u("\u256F")}`)]}function Bn({width:e,palette:t,title:r,subtitle:n,index:o=0,yesLabel:s="yes",noLabel:i="not now"}={}){return He({width:e,palette:t,title:r,subtitle:n,rows:[{id:"yes",label:s,note:"",status:""},{id:"no",label:i,note:"",status:""}],index:o,footer:"\u2191/\u2193 move   enter select   esc skip"})}function rr(e){return String(e||"").replace(/\u001b\[[0-9;]*m/g,"")}function Zt(e){return rr(e).length}function we(e){e.write("\x1B[2J\x1B[H")}function Ae(e,t){we(e),e.write(`${t.join(`
 `)}
-`)}function Zt(e){let t=de();if(!t?.bin)return{code:1,error:"hermes not found \u2014 install hermes or run oracle bootstrap"};let r=$n(t.bin,e,{stdio:"inherit",env:process.env});return{code:typeof r.status=="number"?r.status:1}}async function rr({stdin:e=process.stdin,stdout:t=process.stdout,env:r=process.env,palette:n,profile:o="oracle",startAt:s="menu",runAuth:i=c=>ge.run({argv:c}),restartGateway:a=!0}={}){if(e?.isTTY!==!0||t?.isTTY!==!0)return{completed:!1,actions:[],reason:"non-tty"};let c=Math.max(40,Number(t.columns||80)),l=[],u="menu",w=0,g=0,E=0,S="",T="",v="",A=null,W=Jt({profile:o}),B=Vt();String(s).startsWith("token:")?(v=String(s).slice(6),u="token"):s==="model"&&(u="model");let Q=Wt(),H=e.isRaw===!0;typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume();let k=()=>{u==="menu"?ve(t,Ke({width:c,palette:n,title:"oracle setup",subtitle:"\u2191\u2193 enter \xB7 model + telegram/discord/whatsapp",rows:W,index:w})):u==="model"?ve(t,Ke({width:c,palette:n,title:"sign in",subtitle:"subscription OAuth or API key",rows:B,index:g})):u==="token"?ve(t,Rn({width:c,palette:n,platformKey:v,tokenLength:S.length,error:T})):u==="confirm-gateway"?ve(t,Pn({width:c,palette:n,title:A?.title||"restart gateway?",subtitle:A?.subtitle||"applies bot tokens to the live bridge",index:E,yesLabel:"restart gateway now",noLabel:"later \u2014 oracle setup gateway restart"})):u==="notice"&&ve(t,Ke({width:c,palette:n,title:A?.title||"setup",subtitle:A?.subtitle||"",rows:[{id:"ok",label:"continue",note:"",status:""}],index:0,footer:"enter continue   esc menu"}))};k();let y=async p=>(typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),p);return new Promise(p=>{let f=null,m=!1,h=b=>{m||(m=!0,f&&clearTimeout(f),e.off("data",Oe),Promise.resolve(y(b)).then(p))},x=()=>{W=Jt({profile:o}),B=Vt()},C=async()=>{let b=S.trim();if(!b){T="empty token",k();return}T="checking token\u2026",k();let d={ok:!1,definitive:!1};try{d=await Be(v,b)}catch{d={ok:!1,definitive:!1}}if(!d.ok&&d.definitive){S="",T=d.error||"platform rejected this token",k();return}try{let _=Me(o,v,b);te({lastPlatform:v,profile:o,ready:!0}),l.push(`token:${v}${d.ok?":verified":""}`),S="",T="";let O=!1;try{O=de().ok===!0}catch{O=!1}let pt=d.username?` \xB7 bot ${d.username}`:"";O?(A={title:`${v} saved${pt}`,subtitle:d.ok?`token verified live \xB7 ${_.path}`:`wrote credentials \xB7 ${_.path}`},E=0,u=a?"confirm-gateway":"menu"):(A={title:`${v} token saved${pt}`,subtitle:"next: install the messaging runtime (menu row) so the bot can answer"},E=0,u="notice"),x(),k()}catch(_){T=_?.message||"save failed",S="",k()}},N=async b=>{if(!b||b.action==="done"){h({completed:!0,actions:l});return}if(b.action==="model"){u="model",g=0,k();return}if(b.action==="token"){v=b.id,S="",T="",u="token",k();return}if(b.action==="bootstrap"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(`installing messaging runtime (one-time, a few minutes)\u2026
+`)}function Qt(e){let t=pe();if(!t?.bin)return{code:1,error:"hermes not found \u2014 install hermes or run oracle bootstrap"};let r=Dn(t.bin,e,{stdio:"inherit",env:process.env});return{code:typeof r.status=="number"?r.status:1}}async function nr({stdin:e=process.stdin,stdout:t=process.stdout,env:r=process.env,palette:n,profile:o="oracle",startAt:s="menu",runAuth:i=c=>ye.run({argv:c}),restartGateway:a=!0}={}){if(e?.isTTY!==!0||t?.isTTY!==!0)return{completed:!1,actions:[],reason:"non-tty"};let c=Math.max(40,Number(t.columns||80)),l=[],u="menu",b=0,h=0,T=0,x="",M="",v="",A=null,B=Vt({profile:o}),F=Xt();String(s).startsWith("token:")?(v=String(s).slice(6),u="token"):s==="model"&&(u="model");let G=Gt(),H=e.isRaw===!0;typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume();let k=()=>{u==="menu"?Ae(t,He({width:c,palette:n,title:"oracle setup",subtitle:"\u2191\u2193 enter \xB7 model + telegram/discord/whatsapp",rows:B,index:b})):u==="model"?Ae(t,He({width:c,palette:n,title:"sign in",subtitle:"subscription OAuth or API key",rows:F,index:h})):u==="token"?Ae(t,Un({width:c,palette:n,platformKey:v,tokenLength:x.length,error:M})):u==="confirm-gateway"?Ae(t,Bn({width:c,palette:n,title:A?.title||"restart gateway?",subtitle:A?.subtitle||"applies bot tokens to the live bridge",index:T,yesLabel:"restart gateway now",noLabel:"later \u2014 oracle setup gateway restart"})):u==="notice"&&Ae(t,He({width:c,palette:n,title:A?.title||"setup",subtitle:A?.subtitle||"",rows:[{id:"ok",label:"continue",note:"",status:""}],index:0,footer:"enter continue   esc menu"}))};k();let ie=async Y=>(typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),we(t),Y);return new Promise(Y=>{let I=null,ae=!1,m=y=>{ae||(ae=!0,I&&clearTimeout(I),e.off("data",C),Promise.resolve(ie(y)).then(Y))},f=()=>{B=Vt({profile:o}),F=Xt()},p=async()=>{let y=x.trim();if(!y){M="empty token",k();return}M="checking token\u2026",k();let d={ok:!1,definitive:!1};try{d=await Ke(v,y)}catch{d={ok:!1,definitive:!1}}if(!d.ok&&d.definitive){x="",M=d.error||"platform rejected this token",k();return}try{let S=Me(o,v,y);ee({lastPlatform:v,profile:o,ready:!0}),l.push(`token:${v}${d.ok?":verified":""}`),x="",M="";let E=!1;try{E=pe().ok===!0}catch{E=!1}let mt=d.username?` \xB7 bot ${d.username}`:"";E?(A={title:`${v} saved${mt}`,subtitle:d.ok?`token verified live \xB7 ${S.path}`:`wrote credentials \xB7 ${S.path}`},T=0,u=a?"confirm-gateway":"menu"):(A={title:`${v} token saved${mt}`,subtitle:"next: install the messaging runtime (menu row) so the bot can answer"},T=0,u="notice"),f(),k()}catch(S){M=S?.message||"save failed",x="",k()}},g=async y=>{if(!y||y.action==="done"){m({completed:!0,actions:l});return}if(y.action==="model"){u="model",h=0,k();return}if(y.action==="token"){v=y.id,x="",M="",u="token",k();return}if(y.action==="bootstrap"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),we(t),t.write(`installing messaging runtime (one-time, a few minutes)\u2026
 
-`);let d={ok:!1,reason:"unknown"};try{d=xt({})}catch(_){d={ok:!1,reason:_?.message||"install failed"}}l.push(`bootstrap:${d.ok?"ok":"fail"}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),A={title:d.ok?"messaging runtime ready":"runtime install failed",subtitle:d.ok?"pick telegram / discord next":d.reason||"see oracle bootstrap"},u="notice",k();return}if(b.action==="hermes"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(`opening ${b.id} setup\u2026
-`);let _=ee(b.id)?.hermes||["gateway","setup"],O=Zt(["-p",o,..._]);l.push(`hermes:${b.id}:${O.code}`),te({lastPlatform:b.id,profile:o}),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),A={title:`${b.id} setup finished`,subtitle:O.code===0?"restart gateway to apply":O.error||`exit ${O.code}`},E=0,u=a?"confirm-gateway":"menu",k();return}if(b.action==="gateway"||b.action==="gateway-install"){let d=b.action==="gateway-install"?"install":"restart";typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t),t.write(d==="install"?`installing boot service\u2026
+`);let d={ok:!1,reason:"unknown"};try{d=St({})}catch(S){d={ok:!1,reason:S?.message||"install failed"}}l.push(`bootstrap:${d.ok?"ok":"fail"}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),f(),A={title:d.ok?"messaging runtime ready":"runtime install failed",subtitle:d.ok?"pick telegram / discord next":d.reason||"see oracle bootstrap"},u="notice",k();return}if(y.action==="hermes"){typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),we(t),t.write(`opening ${y.id} setup\u2026
+`);let S=Q(y.id)?.hermes||["gateway","setup"],E=Qt(["-p",o,...S]);l.push(`hermes:${y.id}:${E.code}`),ee({lastPlatform:y.id,profile:o}),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),f(),A={title:`${y.id} setup finished`,subtitle:E.code===0?"restart gateway to apply":E.error||`exit ${E.code}`},T=0,u=a?"confirm-gateway":"menu",k();return}if(y.action==="gateway"||y.action==="gateway-install"){let d=y.action==="gateway-install"?"install":"restart";typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),we(t),t.write(d==="install"?`installing boot service\u2026
 `:`restarting gateway\u2026
-`);let _=Zt(["-p",o,"gateway",d]);l.push(`gateway:${d}:${_.code}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),A={title:_.code===0?d==="install"?"boot service installed":"gateway restarted":`gateway ${d} failed`,subtitle:_.code===0?d==="install"?"bot survives reboots now":"channels should be live":_.error||`exit ${_.code}`},u="notice",k()}},ze=async b=>{if(!b||b.action==="back"){u="menu",k();return}typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),ye(t);let d=b.kind==="oauth"?["login",b.id]:["api-key",b.id];t.write(`connecting ${b.label}\u2026
-`);let _=1;try{_=await i(d)}catch(O){t.write(`${O?.message||O}
-`),_=1}l.push(`model:${b.id}:${_}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),x(),u="menu",k()},Y=b=>{for(let d of b){if(d.ctrl&&d.name==="c"){h({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(d.name==="escape"){S="",T="",u="menu",k();continue}if(d.name==="return"){C();continue}if(d.name==="backspace"||d.sequence==="\x7F"||d.sequence==="\b"){S=S.slice(0,-1),T="",k();continue}let O=d.sequence||"";if(O&&!d.ctrl&&!d.meta&&O!=="\x1B"){if(O.startsWith("\x1B"))continue;S+=O,T="",k()}continue}if(u==="confirm-gateway"){if(d.name==="up"||d.name==="down"){E=E===0?1:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&(E===0?N({action:"gateway",id:"gateway"}):(u="menu",k()));continue}if(u==="notice"){(d.name==="return"||d.name==="escape")&&(u="menu",k());continue}if(u==="model"){let O=B.length;if(d.name==="up"){g=O?(g-1+O)%O:0,k();continue}if(d.name==="down"){g=O?(g+1)%O:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&ze(B[g]);continue}let _=W.length;if(d.name==="up"){w=_?(w-1+_)%_:0,k();continue}if(d.name==="down"){w=_?(w+1)%_:0,k();continue}if(d.name==="escape"){h({completed:!0,actions:l,reason:"esc"});continue}d.name==="return"&&N(W[w])}},Oe=b=>{Y(Q.push(b)),f&&(clearTimeout(f),f=null),Q.pending>0&&(f=setTimeout(()=>{f=null,Y(Q.flush())},30),typeof f.unref=="function"&&f.unref())};e.on("data",Oe)})}var _e=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),Ae=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),He=Object.freeze([..._e.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...Ae.map((e,t)=>({n:_e.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:_e.length+Ae.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:_e.length+Ae.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:_e.length+Ae.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function Ln(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=He.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function sr(e="sign in",t=0){let r=De[t]||De[0];return["",`${r[0]}      oracle`,`${r[1]}     ${e}`,r[2],r[3],r[4],""].join(`
-`)}async function Cn(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<De.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${sr("sign in",r)}
-`),await t(90)}async function $s({stdin:e=process.stdin,stdout:t=process.stdout,readLine:r,runAuth:n=o=>ge.run({argv:o})}={}){if(await Cn(t),t.write(`${Ee()}
+`);let S=Qt(["-p",o,"gateway",d]);l.push(`gateway:${d}:${S.code}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),A={title:S.code===0?d==="install"?"boot service installed":"gateway restarted":`gateway ${d} failed`,subtitle:S.code===0?d==="install"?"bot survives reboots now":"channels should be live":S.error||`exit ${S.code}`},u="notice",k()}},w=async y=>{if(!y||y.action==="back"){u="menu",k();return}typeof e.setRawMode=="function"&&e.setRawMode(H),e.pause(),we(t);let d=y.kind==="oauth"?["login",y.id]:["api-key",y.id];t.write(`connecting ${y.label}\u2026
+`);let S=1;try{S=await i(d)}catch(E){t.write(`${E?.message||E}
+`),S=1}l.push(`model:${y.id}:${S}`),typeof e.setRawMode=="function"&&e.setRawMode(!0),e.resume(),f(),u="menu",k()},_=y=>{for(let d of y){if(d.ctrl&&d.name==="c"){m({completed:!1,actions:l,reason:"cancel"});return}if(u==="token"){if(d.name==="escape"){x="",M="",u="menu",k();continue}if(d.name==="return"){p();continue}if(d.name==="backspace"||d.sequence==="\x7F"||d.sequence==="\b"){x=x.slice(0,-1),M="",k();continue}let E=d.sequence||"";if(E&&!d.ctrl&&!d.meta&&E!=="\x1B"){if(E.startsWith("\x1B"))continue;x+=E,M="",k()}continue}if(u==="confirm-gateway"){if(d.name==="up"||d.name==="down"){T=T===0?1:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&(T===0?g({action:"gateway",id:"gateway"}):(u="menu",k()));continue}if(u==="notice"){(d.name==="return"||d.name==="escape")&&(u="menu",k());continue}if(u==="model"){let E=F.length;if(d.name==="up"){h=E?(h-1+E)%E:0,k();continue}if(d.name==="down"){h=E?(h+1)%E:0,k();continue}if(d.name==="escape"){u="menu",k();continue}d.name==="return"&&w(F[h]);continue}let S=B.length;if(d.name==="up"){b=S?(b-1+S)%S:0,k();continue}if(d.name==="down"){b=S?(b+1)%S:0,k();continue}if(d.name==="escape"){m({completed:!0,actions:l,reason:"esc"});continue}d.name==="return"&&g(B[b])}},C=y=>{_(G.push(y)),I&&(clearTimeout(I),I=null),G.pending>0&&(I=setTimeout(()=>{I=null,_(G.flush())},30),typeof I.unref=="function"&&I.unref())};e.on("data",C)})}var _e=Object.freeze([{alias:"claude",label:"Claude",hint:"Anthropic subscription"},{alias:"codex",label:"Codex",hint:"OpenAI subscription"},{alias:"grok",label:"Grok",hint:"xAI subscription"}]),Ee=Object.freeze([{id:"openrouter",label:"OpenRouter"},{id:"openai",label:"OpenAI"},{id:"anthropic",label:"Anthropic"},{id:"xai",label:"xAI"},{id:"deepseek",label:"DeepSeek"},{id:"gemini",label:"Gemini"},{id:"kimi",label:"Kimi"},{id:"mistral",label:"Mistral"},{id:"nous",label:"Nous Portal"},{id:"qwen",label:"Qwen"},{id:"glm",label:"GLM"}]),We=Object.freeze([..._e.map((e,t)=>({n:t+1,id:e.alias,label:e.label,kind:"oauth",hint:e.hint})),...Ee.map((e,t)=>({n:_e.length+t+1,id:e.id,label:e.label,kind:"api-key",hint:"API key"})),{n:_e.length+Ee.length+1,id:"custom",label:"Custom",kind:"api-key",hint:"OpenAI-compatible"},{n:_e.length+Ee.length+2,id:"local",label:"Local",kind:"local",hint:"llama.cpp :8080"},{n:_e.length+Ee.length+3,id:"ollama",label:"Ollama",kind:"local",hint:"ollama :11434"}]);function Hn(e){let t=String(e||"").trim().toLowerCase();if(!t||t==="skip")return{skip:!0};let r=We.find(n=>String(n.n)===t||n.id===t);return r||{unknown:!0,choice:t}}function ir(e="sign in",t=0){let r=Ue[t]||Ue[0];return["",`${r[0]}      oracle`,`${r[1]}     ${e}`,r[2],r[3],r[4],""].join(`
+`)}async function Wn(e){if(e.isTTY!==!0||process.env.NODE_TEST_CONTEXT||process.env.ORACLE_INSTALL_PLAIN==="1")return;let t=r=>new Promise(n=>setTimeout(n,r));for(let r=0;r<Ue.length;r+=1)r>0&&e.write("\x1B[7A"),e.write(`${ir("sign in",r)}
+`),await t(90)}async function Bs({stdin:e=process.stdin,stdout:t=process.stdout,readLine:r,runAuth:n=o=>ye.run({argv:o})}={}){if(await Wn(t),t.write(`${Oe()}
 `),t.write(`number or name  \xB7  enter skips
-`),e.isTTY!==!0||t.isTTY!==!0)return{skipped:!0,reason:"non-tty"};t.write("> ");let o=r?await r():await new Promise(c=>{let l="",u=w=>{l+=String(w),(l.includes(`
-`)||l.includes("\r"))&&(e.off("data",u),c(l.trim()))};e.on("data",u)}),s=Ln(o);if(s.skip)return{skipped:!0,reason:"skipped"};if(s.unknown)return t.write(`unknown choice '${s.choice}'
-`),{skipped:!0,reason:"unknown"};let i=s.kind==="oauth"?["login",s.id]:["api-key",s.id],a=await n(i);return{skipped:!1,choice:s.id,code:a}}function Ee(e=q().status()){let t=[sr("sign in"),"sign in with a subscription",""];for(let r of He.filter(n=>n.kind==="oauth")){let n=X(r.id),o=e.providers?.[n.id]?.loggedIn===!0;t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} ${o?"connected":"OAuth"}`)}t.push("","or use an API key","");for(let r of He.filter(n=>n.kind==="api-key")){let n=r.id==="custom"?!1:e.apiKeys?.[r.id]?.configured===!0;t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} ${n?"configured":"not configured"}`)}t.push("","or a local loopback model","");for(let r of He.filter(n=>n.kind==="local"))t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} loopback`);return t.push("","Your key stays on this machine. Nothing is uploaded by Oracle.",""),t.join(`
+`),e.isTTY!==!0||t.isTTY!==!0)return{skipped:!0,reason:"non-tty"};t.write("> ");let o=r?await r():await new Promise(c=>{let l="",u=b=>{l+=String(b),(l.includes(`
+`)||l.includes("\r"))&&(e.off("data",u),c(l.trim()))};e.on("data",u)}),s=Hn(o);if(s.skip)return{skipped:!0,reason:"skipped"};if(s.unknown)return t.write(`unknown choice '${s.choice}'
+`),{skipped:!0,reason:"unknown"};let i=s.kind==="oauth"?["login",s.id]:["api-key",s.id],a=await n(i);return{skipped:!1,choice:s.id,code:a}}function Oe(e=z().status()){let t=[ir("sign in"),"sign in with a subscription",""];for(let r of We.filter(n=>n.kind==="oauth")){let n=X(r.id),o=e.providers?.[n.id]?.loggedIn===!0;t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} ${o?"connected":"OAuth"}`)}t.push("","or use an API key","");for(let r of We.filter(n=>n.kind==="api-key")){let n=r.id==="custom"?!1:e.apiKeys?.[r.id]?.configured===!0;t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} ${n?"configured":"not configured"}`)}t.push("","or a local loopback model","");for(let r of We.filter(n=>n.kind==="local"))t.push(`  ${String(r.n).padStart(2)}  ${r.label.padEnd(12)} loopback`);return t.push("","Your key stays on this machine. Nothing is uploaded by Oracle.",""),t.join(`
 `)}function ft(){return["oracle setup, configure standalone OAuth, messaging, and the local agent surface","","  oracle setup                      menu + platform status","  oracle setup status               same, machine-friendly with --json","  oracle setup model                show Claude, Codex, Grok, OpenRouter, Qwen, GLM, Nous Portal, ...","  oracle setup model claude         connect Anthropic OAuth + select standalone","  oracle setup model codex          connect OpenAI OAuth + select standalone","  oracle setup model grok           connect xAI OAuth + select standalone","  oracle setup model deepseek       securely add a provider API key","  oracle setup model kimi           securely add a Kimi API key","  oracle setup model qwen           securely add a Qwen / DashScope API key","  oracle setup model glm            securely add a GLM / Zhipu API key","  oracle setup model local          select llama.cpp on 127.0.0.1:8080 (no key)","  oracle setup model ollama         select Ollama on 127.0.0.1:11434 (no key)","  oracle setup model openrouter     securely add an OpenRouter API key","  oracle setup model nous           securely add a Nous Portal API key","  oracle setup messaging            open hermes gateway setup wizard","  oracle setup telegram             set TELEGRAM_BOT_TOKEN for profile","  oracle setup discord              set DISCORD_BOT_TOKEN for profile","  oracle setup slack                set slack tokens","  oracle setup <platform>           any supported hermes platform","  oracle setup gateway [status|restart|start|stop]","  oracle setup profile [name]       default: oracle","","chat:","  /setup                      arrow-key setup wizard (model + channels)","  /setup telegram             jump to telegram token entry","  /setup status               ready/unset (no secrets)","","model credentials stay in the OS keychain or private ~/.config/oracle storage.","messaging tokens stay local in ~/.hermes/profiles/<profile>/.env","oracle never prints secrets.","TTY default: oracle setup opens an \u2191\u2193 enter menu (ORACLE_SETUP_PLAIN=1 for text)."].join(`
-`)}function Nn(e){let t=e.indexOf("--profile");if(t>=0&&e[t+1])return e[t+1];let r=e.indexOf("-p");return r>=0&&e[r+1]?e[r+1]:process.env.ORACLE_PROFILE||"oracle"}function jn(e){let t=[];for(let r=0;r<e.length;r++){if(e[r]==="--profile"||e[r]==="-p"){r+=1;continue}t.push(e[r])}return t}function dt(e,{inherit:t=!0,env:r=process.env}={}){let n=de();if(!n.ok)return process.stderr.write(`oracle setup: Hermes not detected (opt-in only).
+`)}function qn(e){let t=e.indexOf("--profile");if(t>=0&&e[t+1])return e[t+1];let r=e.indexOf("-p");return r>=0&&e[r+1]?e[r+1]:process.env.ORACLE_PROFILE||"oracle"}function zn(e){let t=[];for(let r=0;r<e.length;r++){if(e[r]==="--profile"||e[r]==="-p"){r+=1;continue}t.push(e[r])}return t}function pt(e,{inherit:t=!0,env:r=process.env}={}){let n=pe();if(!n.ok)return process.stderr.write(`oracle setup: Hermes not detected (opt-in only).
 Native Oracle does not need Hermes.
 To use Hermes messaging/gateway: install Hermes, or run \`oracle bootstrap\`, then retry.
 Detect: oracle harness detect
-`),1;let o=In(n.bin,e,{stdio:t?"inherit":"pipe",encoding:"utf8",env:r});return o.error?(process.stderr.write(`oracle setup: failed to run hermes: ${o.error.message}
-`),1):(t||(o.stdout&&process.stdout.write(o.stdout),o.stderr&&process.stderr.write(o.stderr)),typeof o.status=="number"?o.status:1)}async function or(e){if(!Z.isTTY||typeof Z.setRawMode!="function"){let t=new Error("interactive token entry requires a tty");throw t.code="NO_TTY",t}return nr.write(`${e}: `),new Promise((t,r)=>{let n="",o=()=>{Z.off("data",s),Z.setRawMode(!1),Z.pause(),nr.write(`
+`),1;let o=Kn(n.bin,e,{stdio:t?"inherit":"pipe",encoding:"utf8",env:r});return o.error?(process.stderr.write(`oracle setup: failed to run hermes: ${o.error.message}
+`),1):(t||(o.stdout&&process.stdout.write(o.stdout),o.stderr&&process.stderr.write(o.stderr)),typeof o.status=="number"?o.status:1)}async function sr(e){if(!Z.isTTY||typeof Z.setRawMode!="function"){let t=new Error("interactive token entry requires a tty");throw t.code="NO_TTY",t}return or.write(`${e}: `),new Promise((t,r)=>{let n="",o=()=>{Z.off("data",s),Z.setRawMode(!1),Z.pause(),or.write(`
 `)},s=i=>{for(let a of String(i)){if(a==="\r"||a===`
-`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};Z.setRawMode(!0),Z.resume(),Z.on("data",s)})}async function Fn(e,t,r=[]){let n=ee(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
-`),process.stderr.write(`known: ${ae().map(c=>c.key).join(", ")}
+`){o(),t(n.trim());return}if(a===""){o(),r(new Error("cancelled"));return}a==="\x7F"||a==="\b"?n=n.slice(0,-1):n+=a}};Z.setRawMode(!0),Z.resume(),Z.on("data",s)})}async function Gn(e,t,r=[]){let n=Q(t);if(!n)return process.stderr.write(`oracle setup: unknown platform '${t}'
+`),process.stderr.write(`known: ${ce().map(c=>c.key).join(", ")}
 `),1;if(!n.required.length)return process.stdout.write(`opening hermes setup for ${n.key} (interactive)
-`),te({lastPlatform:n.key,profile:e}),dt(["-p",e,...n.hermes||["gateway","setup"]]);let o={},s=[];for(let c=0;c<r.length;c++){let l=r[c];if(l==="--token"&&r[c+1]){o.token=r[++c];continue}if(l==="--allowed-users"&&r[c+1]){o.allowedUsers=r[++c];continue}if(l==="--app-token"&&r[c+1]){o.appToken=r[++c];continue}if(l.startsWith("-"))return process.stderr.write(`oracle setup: unknown flag ${l}
-`),1;s.push(l)}let i=o.token||s[0]||"";if(!i&&!process.stdin.isTTY&&(i=await readStdinSecret()),!i)try{i=await or(`${n.key} bot token`)}catch(c){if(c?.code==="NO_TTY")return process.stderr.write(`oracle setup ${n.key}: pipe the token on stdin (echo "$TOKEN" | oracle setup ${n.key}) or pass --token <value>
+`),ee({lastPlatform:n.key,profile:e}),pt(["-p",e,...n.hermes||["gateway","setup"]]);let o={},s=[];for(let c=0;c<r.length;c++){let l=r[c];if(l==="--token"&&r[c+1]){o.token=r[++c];continue}if(l==="--allowed-users"&&r[c+1]){o.allowedUsers=r[++c];continue}if(l==="--app-token"&&r[c+1]){o.appToken=r[++c];continue}if(l.startsWith("-"))return process.stderr.write(`oracle setup: unknown flag ${l}
+`),1;s.push(l)}let i=o.token||s[0]||"";if(!i&&!process.stdin.isTTY&&(i=await readStdinSecret()),!i)try{i=await sr(`${n.key} bot token`)}catch(c){if(c?.code==="NO_TTY")return process.stderr.write(`oracle setup ${n.key}: pipe the token on stdin (echo "$TOKEN" | oracle setup ${n.key}) or pass --token <value>
 `),1;throw c}if(!i)return process.stderr.write(`aborted: empty token
-`),1;let a={};if(o.allowedUsers&&(n.key==="telegram"&&(a.TELEGRAM_ALLOWED_USERS=o.allowedUsers),n.key==="discord"&&(a.DISCORD_ALLOWED_USERS=o.allowedUsers),n.key==="slack"&&(a.SLACK_ALLOWED_USERS=o.allowedUsers)),o.appToken&&n.key==="slack"&&(a.SLACK_APP_TOKEN=o.appToken),n.key==="slack"&&!a.SLACK_APP_TOKEN){let c=o.appToken||s[1]||"";if(!c&&process.stdin.isTTY&&(c=await or("slack app token (xapp-...)")),!c)return process.stderr.write(`slack needs bot token + app token
-`),1;a.SLACK_APP_TOKEN=c}try{let c=await Be(n.key,i).catch(()=>({ok:!1,definitive:!1}));if(!c.ok&&c.definitive)return process.stderr.write(`oracle setup ${n.key}: ${c.error||"platform rejected this token"}
-`),1;let l=Me(e,n.key,i,a);te({lastPlatform:n.key,profile:e,ready:!0});let u=c.ok&&c.username?`bot: ${c.username} (token verified live)
-`:"",w=!c.ok&&c.error?`note: ${c.error}
+`),1;let a={};if(o.allowedUsers&&(n.key==="telegram"&&(a.TELEGRAM_ALLOWED_USERS=o.allowedUsers),n.key==="discord"&&(a.DISCORD_ALLOWED_USERS=o.allowedUsers),n.key==="slack"&&(a.SLACK_ALLOWED_USERS=o.allowedUsers)),o.appToken&&n.key==="slack"&&(a.SLACK_APP_TOKEN=o.appToken),n.key==="slack"&&!a.SLACK_APP_TOKEN){let c=o.appToken||s[1]||"";if(!c&&process.stdin.isTTY&&(c=await sr("slack app token (xapp-...)")),!c)return process.stderr.write(`slack needs bot token + app token
+`),1;a.SLACK_APP_TOKEN=c}try{let c=await Ke(n.key,i).catch(()=>({ok:!1,definitive:!1}));if(!c.ok&&c.definitive)return process.stderr.write(`oracle setup ${n.key}: ${c.error||"platform rejected this token"}
+`),1;let l=Me(e,n.key,i,a);ee({lastPlatform:n.key,profile:e,ready:!0});let u=c.ok&&c.username?`bot: ${c.username} (token verified live)
+`:"",b=!c.ok&&c.error?`note: ${c.error}
 `:"";return process.stdout.write(`saved ${n.key} credentials for profile '${e}'
-`+u+w+`path: ${l.path}
+`+u+b+`path: ${l.path}
 next: oracle setup gateway restart
 `),0}catch(c){return process.stderr.write(`oracle setup: ${c.message}
-`),1}}var Ts={name:"setup",summary:"configure standalone OAuth and messaging platforms",group:"read",usage:ft(),async run(e){let t=[...e.argv],r=t.includes("--json"),n=Nn(t),o=jn(t).filter(a=>a!=="--json"),s=(o[0]||"menu").toLowerCase(),i=o.slice(1);if(["-h","--help","help"].includes(s))return process.stdout.write(ft()+`
-`),0;if(["menu","list","ls"].includes(s)){if(r)return process.stdout.write(JSON.stringify({...ue(n),modelAuth:q().status()},null,2)+`
-`),0;if(process.stdin.isTTY===!0&&process.stdout.isTTY===!0&&!process.env.ORACLE_SETUP_PLAIN){let a=await rr({profile:n,palette:ut({color:process.stdout.isTTY!==!1})});return a?.completed===!1&&a?.reason==="non-tty"?1:0}return process.stdout.write(Ee()),process.stdout.write(Te(n)),0}if(["status","show"].includes(s)){let a=ue(n);return r?process.stdout.write(JSON.stringify({...a,modelAuth:q().status()},null,2)+`
-`):(process.stdout.write(Ee()),process.stdout.write(Te(n)),process.stdout.write(`hermes root: ${be()}
-`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(Ee()),0;if(a==="local"||a==="ollama"){let l=Fe({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
+`),1}}var Ks={name:"setup",summary:"configure standalone OAuth and messaging platforms",group:"read",usage:ft(),async run(e){let t=[...e.argv],r=t.includes("--json"),n=qn(t),o=zn(t).filter(a=>a!=="--json"),s=(o[0]||"menu").toLowerCase(),i=o.slice(1);if(["-h","--help","help"].includes(s))return process.stdout.write(ft()+`
+`),0;if(["menu","list","ls"].includes(s)){if(r)return process.stdout.write(JSON.stringify({...le(n),modelAuth:z().status()},null,2)+`
+`),0;if(process.stdin.isTTY===!0&&process.stdout.isTTY===!0&&!process.env.ORACLE_SETUP_PLAIN){let a=await nr({profile:n,palette:lt({color:process.stdout.isTTY!==!1})});return a?.completed===!1&&a?.reason==="non-tty"?1:0}return process.stdout.write(Oe()),process.stdout.write(Te(n)),0}if(["status","show"].includes(s)){let a=le(n);return r?process.stdout.write(JSON.stringify({...a,modelAuth:z().status()},null,2)+`
+`):(process.stdout.write(Oe()),process.stdout.write(Te(n)),process.stdout.write(`hermes root: ${xe()}
+`)),0}if(["model","oauth"].includes(s)){let a=String(i[0]||"").trim().toLowerCase();if(!a||["list","status","show"].includes(a))return process.stdout.write(Oe()),0;if(a==="local"||a==="ollama"){let l=Fe({backend:"standalone",provider:a,model:a==="local"?"Qwen3-8B-Q4_K_M":"llama3.2",contextLength:a==="local"?65536:131072});return process.stdout.write(`oracle model: ${l.backend} / ${l.provider} / ${l.model}
 loopback, no API key
-`),0}if(Ae.some(c=>c.id===a)||a==="custom")return ge.run({...e,argv:["api-key",a,...i.slice(1)]});try{return X(a),ge.run({...e,argv:["login",a,...i.slice(1)]})}catch(c){return process.stderr.write(`oracle setup model: ${c.message}
-`),process.stderr.write(Ee()),1}}if(["messaging","gateway-setup","platforms"].includes(s))return te({lastAction:"messaging",profile:n}),process.stdout.write(`opening hermes gateway setup wizard...
-`),dt(["-p",n,"gateway","setup"]);if(s==="gateway"){let a=(i[0]||"status").toLowerCase();return["status","start","stop","restart","run","install"].includes(a)?dt(["-p",n,"gateway",a]):(process.stderr.write(`usage: oracle setup gateway [status|start|stop|restart|run|install]
+`),0}if(Ee.some(c=>c.id===a)||a==="custom")return ye.run({...e,argv:["api-key",a,...i.slice(1)]});try{return X(a),ye.run({...e,argv:["login",a,...i.slice(1)]})}catch(c){return process.stderr.write(`oracle setup model: ${c.message}
+`),process.stderr.write(Oe()),1}}if(["messaging","gateway-setup","platforms"].includes(s))return ee({lastAction:"messaging",profile:n}),process.stdout.write(`opening hermes gateway setup wizard...
+`),pt(["-p",n,"gateway","setup"]);if(s==="gateway"){let a=(i[0]||"status").toLowerCase();return["status","start","stop","restart","run","install"].includes(a)?pt(["-p",n,"gateway",a]):(process.stderr.write(`usage: oracle setup gateway [status|start|stop|restart|run|install]
 `),1)}if(s==="profile"){let a=i[0]||n;return process.stdout.write(`profile: ${a}
-hermes: ${be()}/profiles/${a}
-`),process.stdout.write(Te(a)),0}return ee(s)?Fn(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
+hermes: ${xe()}/profiles/${a}
+`),process.stdout.write(Te(a)),0}return Q(s)?Gn(n,s,i):(process.stderr.write(`oracle setup: unknown verb '${s}'
 ${ft()}
-`),1)}};export{He as SETUP_CHOICES,Ts as default,Ee as renderModelSetup,Ln as resolveSetupChoice,$s as runFirstRunModelSetup};
+`),1)}};export{We as SETUP_CHOICES,Ks as default,Oe as renderModelSetup,Hn as resolveSetupChoice,Bs as runFirstRunModelSetup};