@oracle-agent/oracle 0.11.0 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (308) hide show
  1. package/LICENSE +115 -201
  2. package/README.md +66 -84
  3. package/SECURITY.md +37 -12
  4. package/SETUP.md +207 -272
  5. package/dist/action-receipts.mjs +1 -0
  6. package/dist/action-semantics.mjs +1 -0
  7. package/dist/address-book.mjs +2 -0
  8. package/dist/bin/desk-server.mjs +14 -0
  9. package/dist/bin/oracle-data-mcp.mjs +8 -0
  10. package/dist/bin/oracle-init.mjs +24 -0
  11. package/dist/bin/oracle-public-server.mjs +5 -0
  12. package/dist/bin/oracle-route.mjs +22 -0
  13. package/dist/bin/oracle-scan.mjs +18 -0
  14. package/dist/bin/oracle-upgrade.mjs +21 -0
  15. package/dist/bin/oracle.mjs +68 -0
  16. package/dist/chains.mjs +1 -0
  17. package/dist/cli/commands/auth.mjs +16 -0
  18. package/dist/cli/commands/bootstrap.mjs +18 -0
  19. package/dist/cli/commands/chain.mjs +21 -0
  20. package/dist/cli/commands/chat.mjs +35 -0
  21. package/dist/cli/commands/credential.mjs +1 -0
  22. package/dist/cli/commands/data-mcp.mjs +2 -0
  23. package/dist/cli/commands/data.mjs +12 -0
  24. package/dist/cli/commands/doctor.mjs +5 -0
  25. package/dist/cli/commands/gate.mjs +13 -0
  26. package/dist/cli/commands/help.mjs +1 -0
  27. package/dist/cli/commands/init.mjs +3 -0
  28. package/dist/cli/commands/mcp.mjs +33 -0
  29. package/dist/cli/commands/model.mjs +44 -0
  30. package/dist/cli/commands/prepare.mjs +2 -0
  31. package/dist/cli/commands/public.mjs +3 -0
  32. package/dist/cli/commands/route.mjs +2 -0
  33. package/dist/cli/commands/runner.mjs +1 -0
  34. package/dist/cli/commands/scan.mjs +2 -0
  35. package/dist/cli/commands/setup.mjs +34 -0
  36. package/dist/cli/commands/sign.mjs +4 -0
  37. package/dist/cli/commands/signer.mjs +1 -0
  38. package/dist/cli/commands/upgrade.mjs +2 -0
  39. package/dist/cli/commands/vault.mjs +1 -0
  40. package/dist/cli/commands/version.mjs +2 -0
  41. package/dist/data/desk-data.mjs +12 -0
  42. package/dist/index.mjs +17 -0
  43. package/dist/nft-gas-war-guard.mjs +1 -0
  44. package/dist/onboarding/harness-configs.mjs +4 -0
  45. package/dist/portfolio-risk.mjs +1 -0
  46. package/dist/prepare-envelope.mjs +1 -0
  47. package/dist/public-control/policy-schema.mjs +1 -0
  48. package/dist/router/index.mjs +2 -0
  49. package/dist/scanner/index.mjs +4 -0
  50. package/dist/signals/index.mjs +1 -0
  51. package/dist/watch-preferences.mjs +1 -0
  52. package/package.json +27 -65
  53. package/public/oracle-splash/index.html +11 -1
  54. package/CONTRIBUTING.md +0 -98
  55. package/bin/desk-server.mjs +0 -440
  56. package/bin/oracle-data-mcp.mjs +0 -1019
  57. package/bin/oracle-init.mjs +0 -496
  58. package/bin/oracle-public-server.mjs +0 -36
  59. package/bin/oracle-route.mjs +0 -254
  60. package/bin/oracle-scan.mjs +0 -192
  61. package/bin/oracle-upgrade.mjs +0 -42
  62. package/bin/oracle.mjs +0 -33
  63. package/docs/adding-a-chain.md +0 -229
  64. package/docs/architecture.md +0 -138
  65. package/docs/cli.md +0 -47
  66. package/docs/connectors.md +0 -13
  67. package/docs/oracle-pack-standard.md +0 -29
  68. package/docs/profiles.md +0 -151
  69. package/docs/public-surface.md +0 -133
  70. package/examples/add-a-chain.mjs +0 -65
  71. package/examples/oracle-pack-template.mjs +0 -38
  72. package/examples/research-a-token.mjs +0 -70
  73. package/plugins/oracle-owner-gate/__init__.py +0 -227
  74. package/plugins/oracle-owner-gate/plugin.yaml +0 -9
  75. package/profiles/_template/SOUL.md +0 -54
  76. package/profiles/_template/profile.json +0 -22
  77. package/profiles/bitcoin-agent/SOUL.md +0 -31
  78. package/profiles/bitcoin-agent/profile.json +0 -32
  79. package/profiles/hyperliquid-agent/SOUL.md +0 -34
  80. package/profiles/hyperliquid-agent/profile.json +0 -37
  81. package/profiles/oracle/SOUL.md +0 -107
  82. package/profiles/oracle/profile.json +0 -39
  83. package/profiles/polymarket-agent/SOUL.md +0 -35
  84. package/profiles/polymarket-agent/profile.json +0 -34
  85. package/profiles/profile.schema.json +0 -90
  86. package/profiles/protocol-builder/SOUL.md +0 -57
  87. package/profiles/protocol-builder/profile.json +0 -39
  88. package/profiles/robinhood-agent/SOUL.md +0 -53
  89. package/profiles/robinhood-agent/profile.json +0 -40
  90. package/profiles/solana-agent/SOUL.md +0 -37
  91. package/profiles/solana-agent/profile.json +0 -37
  92. package/profiles/stable-agent/SOUL.md +0 -43
  93. package/profiles/stable-agent/profile.json +0 -37
  94. package/protocols/templates/safe-erc20/SECURITY.md +0 -16
  95. package/protocols/templates/safe-erc20/foundry.toml +0 -12
  96. package/protocols/templates/safe-erc20/remappings.txt +0 -2
  97. package/protocols/templates/safe-erc20/src/SafeERC20.sol +0 -53
  98. package/protocols/templates/safe-erc20/test/SafeERC20.t.sol +0 -72
  99. package/scripts/adversarial-bench.mjs +0 -114
  100. package/scripts/build-inscription.py +0 -230
  101. package/scripts/check-doc-drift.mjs +0 -123
  102. package/scripts/check-test-count.mjs +0 -105
  103. package/scripts/e2e-hl-markets.mjs +0 -21
  104. package/scripts/e2e-hl-perps.mjs +0 -48
  105. package/scripts/e2e-hypercore-staking.mjs +0 -128
  106. package/scripts/e2e-solana-bitcoin.mjs +0 -183
  107. package/scripts/protocol-template-gate.mjs +0 -15
  108. package/scripts/public-api-scan.mjs +0 -23
  109. package/scripts/secret-scan.mjs +0 -181
  110. package/scripts/verify-v3-venues.mjs +0 -192
  111. package/skills/balance/SKILL.md +0 -176
  112. package/skills/oracle-action-semantics/SKILL.md +0 -40
  113. package/skills/oracle-best-execution/SKILL.md +0 -127
  114. package/skills/oracle-bitcoin/SKILL.md +0 -53
  115. package/skills/oracle-chain-graphs-telegram-cards/SKILL.md +0 -59
  116. package/skills/oracle-chat/SKILL.md +0 -61
  117. package/skills/oracle-chat/chain.SKILL.md +0 -31
  118. package/skills/oracle-chat/setup.SKILL.md +0 -37
  119. package/skills/oracle-circuit-breaker/SKILL.md +0 -51
  120. package/skills/oracle-contract-research/SKILL.md +0 -55
  121. package/skills/oracle-desk/SKILL.md +0 -58
  122. package/skills/oracle-dex-launch/SKILL.md +0 -38
  123. package/skills/oracle-grants/SKILL.md +0 -69
  124. package/skills/oracle-hypercore-staking/SKILL.md +0 -57
  125. package/skills/oracle-hyperliquid/SKILL.md +0 -56
  126. package/skills/oracle-meme-token-sniper/SKILL.md +0 -73
  127. package/skills/oracle-multichain-nft-launch/SKILL.md +0 -338
  128. package/skills/oracle-multichain-token-launch/SKILL.md +0 -300
  129. package/skills/oracle-nft-gacha-launch/SKILL.md +0 -48
  130. package/skills/oracle-nft-mint-gas-war/SKILL.md +0 -63
  131. package/skills/oracle-polymarket/SKILL.md +0 -60
  132. package/skills/oracle-protocol-builder/SKILL.md +0 -59
  133. package/skills/oracle-protocol-security/SKILL.md +0 -60
  134. package/skills/oracle-public-product/SKILL.md +0 -44
  135. package/skills/oracle-receipts/SKILL.md +0 -52
  136. package/skills/oracle-rfq-tokenized-assets/SKILL.md +0 -69
  137. package/skills/oracle-smart-wallet-scanner/SKILL.md +0 -49
  138. package/skills/oracle-solana/SKILL.md +0 -65
  139. package/skills/oracle-solana-nft/SKILL.md +0 -54
  140. package/skills/oracle-token-research/SKILL.md +0 -67
  141. package/skins/oracle.yaml +0 -56
  142. package/src/action-receipts.mjs +0 -265
  143. package/src/action-semantics.mjs +0 -62
  144. package/src/address-book.mjs +0 -208
  145. package/src/agent-auth.mjs +0 -206
  146. package/src/approval-guard.mjs +0 -282
  147. package/src/attestation-secret.mjs +0 -88
  148. package/src/audit-log.mjs +0 -196
  149. package/src/auth/oauth.mjs +0 -672
  150. package/src/auto-slippage.mjs +0 -378
  151. package/src/capability-posture.mjs +0 -125
  152. package/src/chains.mjs +0 -62
  153. package/src/cli/chain-catalog.mjs +0 -215
  154. package/src/cli/chain-state.mjs +0 -74
  155. package/src/cli/commands/auth.mjs +0 -193
  156. package/src/cli/commands/bootstrap.mjs +0 -87
  157. package/src/cli/commands/chain.mjs +0 -143
  158. package/src/cli/commands/chat.mjs +0 -434
  159. package/src/cli/commands/credential.mjs +0 -9
  160. package/src/cli/commands/data-mcp.mjs +0 -18
  161. package/src/cli/commands/data.mjs +0 -75
  162. package/src/cli/commands/doctor.mjs +0 -136
  163. package/src/cli/commands/help.mjs +0 -7
  164. package/src/cli/commands/init.mjs +0 -27
  165. package/src/cli/commands/mcp.mjs +0 -142
  166. package/src/cli/commands/model.mjs +0 -99
  167. package/src/cli/commands/prepare.mjs +0 -12
  168. package/src/cli/commands/public.mjs +0 -20
  169. package/src/cli/commands/route.mjs +0 -12
  170. package/src/cli/commands/runner.mjs +0 -9
  171. package/src/cli/commands/scan.mjs +0 -12
  172. package/src/cli/commands/setup.mjs +0 -275
  173. package/src/cli/commands/sign.mjs +0 -21
  174. package/src/cli/commands/signer.mjs +0 -9
  175. package/src/cli/commands/upgrade.mjs +0 -12
  176. package/src/cli/commands/vault.mjs +0 -9
  177. package/src/cli/commands/version.mjs +0 -22
  178. package/src/cli/first-run.mjs +0 -23
  179. package/src/cli/kernel.mjs +0 -239
  180. package/src/cli/mcp-targets/chatgpt.mjs +0 -51
  181. package/src/cli/mcp-targets/claude-code.mjs +0 -39
  182. package/src/cli/mcp-targets/claude-desktop.mjs +0 -24
  183. package/src/cli/mcp-targets/codex.mjs +0 -41
  184. package/src/cli/mcp-targets/shared.mjs +0 -61
  185. package/src/cli/messaging-platforms.mjs +0 -209
  186. package/src/cli/model-config.mjs +0 -70
  187. package/src/cli/operator-dispatch.mjs +0 -258
  188. package/src/cli/oracle-harness.py +0 -415
  189. package/src/cli/paths.mjs +0 -83
  190. package/src/cli/runtime.mjs +0 -351
  191. package/src/cli/setup-state.mjs +0 -168
  192. package/src/cli/spawn-child.mjs +0 -43
  193. package/src/data/catalog.mjs +0 -585
  194. package/src/data/desk-data.mjs +0 -695
  195. package/src/data/http.mjs +0 -253
  196. package/src/data/provider-endpoint.mjs +0 -94
  197. package/src/data/providers/aerodrome.mjs +0 -245
  198. package/src/data/providers/balancer.mjs +0 -209
  199. package/src/data/providers/bitcoin-esplora.mjs +0 -216
  200. package/src/data/providers/bitcoin-meta.mjs +0 -378
  201. package/src/data/providers/blockscout.mjs +0 -14
  202. package/src/data/providers/bridges.mjs +0 -242
  203. package/src/data/providers/cowswap.mjs +0 -415
  204. package/src/data/providers/curve.mjs +0 -201
  205. package/src/data/providers/defillama.mjs +0 -88
  206. package/src/data/providers/dexscreener.mjs +0 -43
  207. package/src/data/providers/evm-rpc.mjs +0 -225
  208. package/src/data/providers/geckoterminal.mjs +0 -34
  209. package/src/data/providers/gmx.mjs +0 -496
  210. package/src/data/providers/hl-assets.mjs +0 -165
  211. package/src/data/providers/hl-info.mjs +0 -108
  212. package/src/data/providers/hl-markets.mjs +0 -210
  213. package/src/data/providers/hl-outcome.mjs +0 -61
  214. package/src/data/providers/hl-perps.mjs +0 -387
  215. package/src/data/providers/hl-staking.mjs +0 -353
  216. package/src/data/providers/hl-ws.mjs +0 -119
  217. package/src/data/providers/hyperevm-dex.mjs +0 -49
  218. package/src/data/providers/jupiter-venues.mjs +0 -119
  219. package/src/data/providers/jupiter.mjs +0 -315
  220. package/src/data/providers/lifi.mjs +0 -151
  221. package/src/data/providers/magiceden-sol.mjs +0 -406
  222. package/src/data/providers/morpho.mjs +0 -177
  223. package/src/data/providers/nft-gallery.mjs +0 -163
  224. package/src/data/providers/nft-portfolio.mjs +0 -494
  225. package/src/data/providers/odos.mjs +0 -156
  226. package/src/data/providers/oneinch.mjs +0 -174
  227. package/src/data/providers/opensea-multichain.mjs +0 -136
  228. package/src/data/providers/opensea-nft.mjs +0 -371
  229. package/src/data/providers/paraswap.mjs +0 -118
  230. package/src/data/providers/pendle.mjs +0 -188
  231. package/src/data/providers/poly-clob.mjs +0 -283
  232. package/src/data/providers/poly-public.mjs +0 -96
  233. package/src/data/providers/poly-ws.mjs +0 -103
  234. package/src/data/providers/portfolio-history.mjs +0 -394
  235. package/src/data/providers/portfolio.mjs +0 -594
  236. package/src/data/providers/rfq.mjs +0 -15
  237. package/src/data/providers/rh-agent.mjs +0 -59
  238. package/src/data/providers/satflow.mjs +0 -341
  239. package/src/data/providers/signed-material-guard.mjs +0 -108
  240. package/src/data/providers/solana-rpc.mjs +0 -197
  241. package/src/data/providers/uniswap-v3.mjs +0 -349
  242. package/src/data/providers/uniswap-v4.mjs +0 -414
  243. package/src/data/providers/zerox.mjs +0 -167
  244. package/src/data/public-api-scan.mjs +0 -61
  245. package/src/data/quote-placeholder.mjs +0 -31
  246. package/src/exact-integer.mjs +0 -72
  247. package/src/exec-policy.mjs +0 -455
  248. package/src/flags.mjs +0 -15
  249. package/src/fresh-window.mjs +0 -76
  250. package/src/gmx-attestation.mjs +0 -176
  251. package/src/index.mjs +0 -100
  252. package/src/nft-gas-war-guard.mjs +0 -139
  253. package/src/onboarding/agent-keys.mjs +0 -161
  254. package/src/onboarding/harness-configs.mjs +0 -102
  255. package/src/onboarding/index.mjs +0 -18
  256. package/src/onboarding/tiers.mjs +0 -139
  257. package/src/oracle-env.mjs +0 -47
  258. package/src/portfolio-risk.mjs +0 -170
  259. package/src/prepare-envelope.mjs +0 -204
  260. package/src/profile-upgrade.mjs +0 -277
  261. package/src/protocol-execution.mjs +0 -84
  262. package/src/protocol-templates/gate.mjs +0 -179
  263. package/src/protocol-templates/prepare-deploy.mjs +0 -81
  264. package/src/public-api/buzz-integration.mjs +0 -256
  265. package/src/public-api/connect-agent.mjs +0 -416
  266. package/src/public-api/grants.mjs +0 -142
  267. package/src/public-api/http.mjs +0 -389
  268. package/src/public-control/aa-adapter.mjs +0 -402
  269. package/src/public-control/build-registry.mjs +0 -227
  270. package/src/public-control/bundler-client.mjs +0 -357
  271. package/src/public-control/grant-indexer.mjs +0 -296
  272. package/src/public-control/policy-render.mjs +0 -69
  273. package/src/public-control/policy-schema.mjs +0 -318
  274. package/src/public-control/runtime-config.mjs +0 -275
  275. package/src/public-control/session-key-model.mjs +0 -374
  276. package/src/public-control/session-orchestrator.mjs +0 -412
  277. package/src/rfq/intent.mjs +0 -180
  278. package/src/rfq/sources.mjs +0 -181
  279. package/src/route-attestation.mjs +0 -132
  280. package/src/router/best-execution.mjs +0 -326
  281. package/src/router/index.mjs +0 -226
  282. package/src/router/prepare-bridge.mjs +0 -289
  283. package/src/router/prepare-route.mjs +0 -398
  284. package/src/router/proposal.mjs +0 -311
  285. package/src/router/risk-classifier.mjs +0 -119
  286. package/src/router/route-sources.mjs +0 -364
  287. package/src/scanner/chains.config.mjs +0 -430
  288. package/src/scanner/contract.mjs +0 -270
  289. package/src/scanner/evm-scanner.mjs +0 -394
  290. package/src/scanner/index.mjs +0 -9
  291. package/src/scanner/v2-venue.mjs +0 -335
  292. package/src/scanner/v3-venue.mjs +0 -290
  293. package/src/scopes.mjs +0 -44
  294. package/src/sell-simulation.mjs +0 -167
  295. package/src/signals/engine.mjs +0 -146
  296. package/src/signals/index.mjs +0 -1
  297. package/src/token-transfer-guard.mjs +0 -188
  298. package/src/tui/app.mjs +0 -438
  299. package/src/tui/backend.mjs +0 -145
  300. package/src/tui/format.mjs +0 -272
  301. package/src/tui/gateway-client.mjs +0 -177
  302. package/src/tui/input.mjs +0 -501
  303. package/src/tui/renderer.mjs +0 -443
  304. package/src/tui/standalone-client.mjs +0 -666
  305. package/src/tui/theme.mjs +0 -81
  306. package/src/vault-attestation.mjs +0 -146
  307. package/src/venues.mjs +0 -206
  308. package/src/watch-preferences.mjs +0 -85
package/LICENSE CHANGED
@@ -1,202 +1,116 @@
1
+ Business Source License 1.1
1
2
 
2
- Apache License
3
- Version 2.0, January 2004
4
- http://www.apache.org/licenses/
5
-
6
- TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
7
-
8
- 1. Definitions.
9
-
10
- "License" shall mean the terms and conditions for use, reproduction,
11
- and distribution as defined by Sections 1 through 9 of this document.
12
-
13
- "Licensor" shall mean the copyright owner or entity authorized by
14
- the copyright owner that is granting the License.
15
-
16
- "Legal Entity" shall mean the union of the acting entity and all
17
- other entities that control, are controlled by, or are under common
18
- control with that entity. For the purposes of this definition,
19
- "control" means (i) the power, direct or indirect, to cause the
20
- direction or management of such entity, whether by contract or
21
- otherwise, or (ii) ownership of fifty percent (50%) or more of the
22
- outstanding shares, or (iii) beneficial ownership of such entity.
23
-
24
- "You" (or "Your") shall mean an individual or Legal Entity
25
- exercising permissions granted by this License.
26
-
27
- "Source" form shall mean the preferred form for making modifications,
28
- including but not limited to software source code, documentation
29
- source, and configuration files.
30
-
31
- "Object" form shall mean any form resulting from mechanical
32
- transformation or translation of a Source form, including but
33
- not limited to compiled object code, generated documentation,
34
- and conversions to other media types.
35
-
36
- "Work" shall mean the work of authorship, whether in Source or
37
- Object form, made available under the License, as indicated by a
38
- copyright notice that is included in or attached to the work
39
- (an example is provided in the Appendix below).
40
-
41
- "Derivative Works" shall mean any work, whether in Source or Object
42
- form, that is based on (or derived from) the Work and for which the
43
- editorial revisions, annotations, elaborations, or other modifications
44
- represent, as a whole, an original work of authorship. For the purposes
45
- of this License, Derivative Works shall not include works that remain
46
- separable from, or merely link (or bind by name) to the interfaces of,
47
- the Work and Derivative Works thereof.
48
-
49
- "Contribution" shall mean any work of authorship, including
50
- the original version of the Work and any modifications or additions
51
- to that Work or Derivative Works thereof, that is intentionally
52
- submitted to Licensor for inclusion in the Work by the copyright owner
53
- or by an individual or Legal Entity authorized to submit on behalf of
54
- the copyright owner. For the purposes of this definition, "submitted"
55
- means any form of electronic, verbal, or written communication sent
56
- to the Licensor or its representatives, including but not limited to
57
- communication on electronic mailing lists, source code control systems,
58
- and issue tracking systems that are managed by, or on behalf of, the
59
- Licensor for the purpose of discussing and improving the Work, but
60
- excluding communication that is conspicuously marked or otherwise
61
- designated in writing by the copyright owner as "Not a Contribution."
62
-
63
- "Contributor" shall mean Licensor and any individual or Legal Entity
64
- on behalf of whom a Contribution has been received by Licensor and
65
- subsequently incorporated within the Work.
66
-
67
- 2. Grant of Copyright License. Subject to the terms and conditions of
68
- this License, each Contributor hereby grants to You a perpetual,
69
- worldwide, non-exclusive, no-charge, royalty-free, irrevocable
70
- copyright license to reproduce, prepare Derivative Works of,
71
- publicly display, publicly perform, sublicense, and distribute the
72
- Work and such Derivative Works in Source or Object form.
73
-
74
- 3. Grant of Patent License. Subject to the terms and conditions of
75
- this License, each Contributor hereby grants to You a perpetual,
76
- worldwide, non-exclusive, no-charge, royalty-free, irrevocable
77
- (except as stated in this section) patent license to make, have made,
78
- use, offer to sell, sell, import, and otherwise transfer the Work,
79
- where such license applies only to those patent claims licensable
80
- by such Contributor that are necessarily infringed by their
81
- Contribution(s) alone or by combination of their Contribution(s)
82
- with the Work to which such Contribution(s) was submitted. If You
83
- institute patent litigation against any entity (including a
84
- cross-claim or counterclaim in a lawsuit) alleging that the Work
85
- or a Contribution incorporated within the Work constitutes direct
86
- or contributory patent infringement, then any patent licenses
87
- granted to You under this License for that Work shall terminate
88
- as of the date such litigation is filed.
89
-
90
- 4. Redistribution. You may reproduce and distribute copies of the
91
- Work or Derivative Works thereof in any medium, with or without
92
- modifications, and in Source or Object form, provided that You
93
- meet the following conditions:
94
-
95
- (a) You must give any other recipients of the Work or
96
- Derivative Works a copy of this License; and
97
-
98
- (b) You must cause any modified files to carry prominent notices
99
- stating that You changed the files; and
100
-
101
- (c) You must retain, in the Source form of any Derivative Works
102
- that You distribute, all copyright, patent, trademark, and
103
- attribution notices from the Source form of the Work,
104
- excluding those notices that do not pertain to any part of
105
- the Derivative Works; and
106
-
107
- (d) If the Work includes a "NOTICE" text file as part of its
108
- distribution, then any Derivative Works that You distribute must
109
- include a readable copy of the attribution notices contained
110
- within such NOTICE file, excluding those notices that do not
111
- pertain to any part of the Derivative Works, in at least one
112
- of the following places: within a NOTICE text file distributed
113
- as part of the Derivative Works; within the Source form or
114
- documentation, if provided along with the Derivative Works; or,
115
- within a display generated by the Derivative Works, if and
116
- wherever such third-party notices normally appear. The contents
117
- of the NOTICE file are for informational purposes only and
118
- do not modify the License. You may add Your own attribution
119
- notices within Derivative Works that You distribute, alongside
120
- or as an addendum to the NOTICE text from the Work, provided
121
- that such additional attribution notices cannot be construed
122
- as modifying the License.
123
-
124
- You may add Your own copyright statement to Your modifications and
125
- may provide additional or different license terms and conditions
126
- for use, reproduction, or distribution of Your modifications, or
127
- for any such Derivative Works as a whole, provided Your use,
128
- reproduction, and distribution of the Work otherwise complies with
129
- the conditions stated in this License.
130
-
131
- 5. Submission of Contributions. Unless You explicitly state otherwise,
132
- any Contribution intentionally submitted for inclusion in the Work
133
- by You to the Licensor shall be under the terms and conditions of
134
- this License, without any additional terms or conditions.
135
- Notwithstanding the above, nothing herein shall supersede or modify
136
- the terms of any separate license agreement you may have executed
137
- with Licensor regarding such Contributions.
138
-
139
- 6. Trademarks. This License does not grant permission to use the trade
140
- names, trademarks, service marks, or product names of the Licensor,
141
- except as required for reasonable and customary use in describing the
142
- origin of the Work and reproducing the content of the NOTICE file.
143
-
144
- 7. Disclaimer of Warranty. Unless required by applicable law or
145
- agreed to in writing, Licensor provides the Work (and each
146
- Contributor provides its Contributions) on an "AS IS" BASIS,
147
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
148
- implied, including, without limitation, any warranties or conditions
149
- of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
150
- PARTICULAR PURPOSE. You are solely responsible for determining the
151
- appropriateness of using or redistributing the Work and assume any
152
- risks associated with Your exercise of permissions under this License.
153
-
154
- 8. Limitation of Liability. In no event and under no legal theory,
155
- whether in tort (including negligence), contract, or otherwise,
156
- unless required by applicable law (such as deliberate and grossly
157
- negligent acts) or agreed to in writing, shall any Contributor be
158
- liable to You for damages, including any direct, indirect, special,
159
- incidental, or consequential damages of any character arising as a
160
- result of this License or out of the use or inability to use the
161
- Work (including but not limited to damages for loss of goodwill,
162
- work stoppage, computer failure or malfunction, or any and all
163
- other commercial damages or losses), even if such Contributor
164
- has been advised of the possibility of such damages.
165
-
166
- 9. Accepting Warranty or Additional Liability. While redistributing
167
- the Work or Derivative Works thereof, You may choose to offer,
168
- and charge a fee for, acceptance of support, warranty, indemnity,
169
- or other liability obligations and/or rights consistent with this
170
- License. However, in accepting such obligations, You may act only
171
- on Your own behalf and on Your sole responsibility, not on behalf
172
- of any other Contributor, and only if You agree to indemnify,
173
- defend, and hold each Contributor harmless for any liability
174
- incurred by, or claims asserted against, such Contributor by reason
175
- of your accepting any such warranty or additional liability.
176
-
177
- END OF TERMS AND CONDITIONS
178
-
179
- APPENDIX: How to apply the Apache License to your work.
180
-
181
- To apply the Apache License to your work, attach the following
182
- boilerplate notice, with the fields enclosed by brackets "[]"
183
- replaced with your own identifying information. (Don't include
184
- the brackets!) The text should be enclosed in the appropriate
185
- comment syntax for the file format. We also recommend that a
186
- file or class name and description of purpose be included on the
187
- same "printed page" as the copyright notice for easier
188
- identification within third-party archives.
189
-
190
- Copyright 2026 Oracle Agent contributors
191
-
192
- Licensed under the Apache License, Version 2.0 (the "License");
193
- you may not use this file except in compliance with the License.
194
- You may obtain a copy of the License at
195
-
196
- http://www.apache.org/licenses/LICENSE-2.0
197
-
198
- Unless required by applicable law or agreed to in writing, software
199
- distributed under the License is distributed on an "AS IS" BASIS,
200
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
201
- See the License for the specific language governing permissions and
202
- limitations under the License.
3
+ License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
4
+ "Business Source License" is a trademark of MariaDB Corporation Ab.
5
+
6
+ -----------------------------------------------------------------------------
7
+
8
+ Parameters
9
+
10
+ Licensor: Christopher Gervais
11
+
12
+ Licensed Work: @oracle-agent/oracle
13
+ The Licensed Work is (c) 2026 Christopher Gervais
14
+
15
+ Additional Use Grant: You may make use of the Licensed Work, provided that
16
+ you do not use the Licensed Work for a Competing
17
+ Offering.
18
+
19
+ A "Competing Offering" is a product or service offered
20
+ to third parties, on a paid or unpaid basis, that
21
+ provides the whole or substantially the whole of the
22
+ functionality of the Licensed Work, including but not
23
+ limited to any hosted, managed, or embedded service
24
+ that exposes the Licensed Work's protocol catalog,
25
+ prepare plane, or transaction-preparation interfaces
26
+ to third parties.
27
+
28
+ Internal use, evaluation, research, personal use, and
29
+ use within your own organization that is not offered
30
+ to third parties are expressly permitted.
31
+
32
+ Change Date: 2030-08-03
33
+
34
+ Change License: Apache License, Version 2.0
35
+
36
+ -----------------------------------------------------------------------------
37
+
38
+ Terms
39
+
40
+ The Licensor hereby grants you the right to copy, modify, create derivative
41
+ works, redistribute, and make non-production use of the Licensed Work. The
42
+ Licensor may make an Additional Use Grant, above, permitting limited
43
+ production use.
44
+
45
+ Effective on the Change Date, or the fourth anniversary of the first publicly
46
+ available distribution of a specific version of the Licensed Work under this
47
+ License, whichever comes first, the Licensor hereby grants you rights under
48
+ the terms of the Change License, and the rights granted in the paragraph
49
+ above terminate.
50
+
51
+ If your use of the Licensed Work does not comply with the requirements
52
+ currently in effect as described in this License, you must purchase a
53
+ commercial license from the Licensor, its affiliated entities, or authorized
54
+ resellers, or you must refrain from using the Licensed Work.
55
+
56
+ All copies of the original and modified Licensed Work, and derivative works
57
+ of the Licensed Work, are subject to this License. This License applies
58
+ separately for each version of the Licensed Work and the Change Date may vary
59
+ for each version of the Licensed Work released by Licensor.
60
+
61
+ You must conspicuously display this License on each original or modified copy
62
+ of the Licensed Work. If you receive the Licensed Work in original or
63
+ modified form from a third party, the terms and conditions set forth in this
64
+ License apply to your use of that work.
65
+
66
+ Any use of the Licensed Work in violation of this License will automatically
67
+ terminate your rights under this License for the current and all other
68
+ versions of the Licensed Work.
69
+
70
+ This License does not grant you any right in any trademark or logo of
71
+ Licensor or its affiliates (provided that you may use a trademark or logo of
72
+ Licensor as expressly required by this License).
73
+
74
+ TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
75
+ AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
76
+ EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
77
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
78
+ TITLE.
79
+
80
+ MariaDB hereby grants you permission to use this License's text to license
81
+ your works, and to refer to it using the trademark "Business Source License",
82
+ as long as you comply with the Covenants of Licensor below.
83
+
84
+ -----------------------------------------------------------------------------
85
+
86
+ Covenants of Licensor
87
+
88
+ In consideration of the right to use this License's text and the "Business
89
+ Source License" name and trademark, Licensor covenants to MariaDB, and to all
90
+ other recipients of the licensed work to be provided by Licensor:
91
+
92
+ 1. To specify as the Change License the GPL Version 2.0 or any later version,
93
+ or a license that is compatible with GPL Version 2.0 or a later version,
94
+ where "compatible" means that software provided under the Change License
95
+ can be included in a program with software provided under GPL Version 2.0
96
+ or a later version. Licensor may specify additional Change Licenses
97
+ without limitation.
98
+
99
+ 2. To either: (a) specify an additional grant of rights to use that does not
100
+ impose any additional restriction on the right granted in this License, as
101
+ the Additional Use Grant; or (b) insert the text "None".
102
+
103
+ 3. To specify a Change Date.
104
+
105
+ 4. Not to modify this License in any other way.
106
+
107
+ -----------------------------------------------------------------------------
108
+
109
+ Notice
110
+
111
+ The Business Source License (this document, or the "License") is not an Open
112
+ Source license. However, the Licensed Work will eventually be made available
113
+ under an Open Source License, as stated in this License.
114
+
115
+ For information about alternative licensing arrangements for the Licensed
116
+ Work, contact the Licensor.
package/README.md CHANGED
@@ -1,18 +1,19 @@
1
1
  # Oracle
2
2
 
3
- ## Quickstart (unified CLI)
3
+ ## Quickstart (standalone CLI)
4
4
 
5
5
  ```bash
6
- npm i -g @oracle-agent/oracle
7
- oracle # first run sets up its isolated runtime + model
8
- oracle init --apply # lanes + read plane only, no keys
9
- oracle data serve # loopback read/prepare plane on 127.0.0.1:8787
10
- oracle doctor # verify
11
- # optional, explicit second step — signing stays a separate local package:
12
- npm i -g @oracle-agent/operator
13
- oracle sign init
6
+ npm i -g @oracle-agent/oracle@latest # Node >= 20.19
7
+ oracle --version
8
+ oracle auth login claude # or codex / grok
9
+ oracle # native Oracle chat
10
+ oracle doctor # verify local posture
14
11
  ```
15
12
 
13
+ Prefer an API key instead? `oracle auth api-key openrouter` accepts hidden
14
+ interactive input. `oracle auth status` reports providers without printing
15
+ credentials. Linux, Windows, and macOS apps are in beta.
16
+
16
17
 
17
18
  **Prepare-only multichain agent control plane.** Policy-bounded intents; your wallet signs.
18
19
 
@@ -28,68 +29,43 @@ and Grok OAuth. OAuth credentials use the OS keychain when available, with a
28
29
  private `0600` local fallback when keychain storage is unavailable.
29
30
 
30
31
  This package is **prepare-only**: it never takes a private key and never
31
- broadcasts. For agentic trading with **your** keys on **your** machine, install
32
- the companion [`@oracle-agent/operator`](https://github.com/demi-hl/oracle-operator)
33
- alongside it — same split we run ourselves.
32
+ broadcasts. The owner-operated signer/executor is private infrastructure, is
33
+ not published on npm, and is not part of holder onboarding. Never paste a seed,
34
+ private key, vault passphrase, or signer token into Oracle chat.
34
35
 
35
36
  ---
36
37
 
37
- ## Start in 5 steps
38
+ ## Start safely
38
39
 
39
- Source tree: **oracle `0.11.0`** · **operator `0.7.0`**
40
+ 1. Install the public CLI and authenticate a model provider as shown above.
41
+ 2. Run `oracle chain list`, then `oracle chain use <name>`.
42
+ 3. Use reads, research, quotes, simulations, and unsigned preparation.
43
+ 4. Review every prepared artifact in the wallet that will sign it.
44
+ 5. Treat only a confirmed transaction hash plus receipt as execution.
40
45
 
41
- ```bash
42
- # 1) install Oracle's public prepare plane
43
- npm i @oracle-agent/oracle@latest
44
- ```
45
-
46
- ```js
47
- // 2) prepare an artifact (no keys)
48
- import { data } from "@oracle-agent/oracle";
49
- const prepared = await data.call("hl-perps", "prepareOrder", { /* coin, side, size... */ });
50
- ```
51
-
52
- **Path A — self-custody first:** review the prepared artifact and sign it with
53
- the owner/main wallet, browser wallet, smart account, hardware wallet, or
54
- protocol-native wallet. Oracle's public package stops at prepare: your wallet
55
- authorizes and broadcasts.
46
+ Hermes is optional. To add its isolated runtime, specialist profiles, and local
47
+ read plane later:
56
48
 
57
49
  ```bash
58
- # 3) optional owner-local operator package for unattended signing on YOUR machine
59
- npm i @oracle-agent/operator@latest
60
-
61
- # 4) put operator keys ONLY on your machine (example: HL/EVM hex key file)
62
- mkdir -p ~/.config/oracle/keys && chmod 700 ~/.config/oracle/keys
63
- # write key, then: npx oracle-vault encrypt ~/.config/oracle/keys/evm.key
64
- export HL_KEY_FILE=~/.config/oracle/keys/evm.key.vault.json
65
- export ORACLE_VAULT_PASSPHRASE='...' # signer shell only — never in the agent chat
50
+ oracle bootstrap
51
+ oracle init --apply # writes profiles + local HMAC attestation config; no wallet key
52
+ oracle data serve # loopback only: 127.0.0.1:8787
53
+ oracle doctor
66
54
  ```
67
55
 
56
+ Library users can prepare directly:
57
+
68
58
  ```js
69
- // Path B — owner-local operator key signs after your app confirms the action
70
- // (same host, your key, your policy; no model or remote agent custody)
71
- import { hlSignAndSubmit } from "@oracle-agent/operator";
72
- await hlSignAndSubmit(prepared, {
73
- keyFile: process.env.HL_KEY_FILE,
74
- userInitiated: true,
59
+ import { data } from "@oracle-agent/oracle";
60
+ const prepared = await data.call("hl-perps", "prepareOrder", {
61
+ /* coin, side, size, owner wallet address */
75
62
  });
63
+ // Oracle stops here. The user's wallet reviews, signs, and submits.
76
64
  ```
77
65
 
78
- ```bash
79
- # 5) recommended agent-process path: run the signer daemon so the agent sees
80
- # only ORACLE_SIGNER_URL + ORACLE_SIGNER_TOKEN, never the vault passphrase.
81
- npx oracle-signer
82
- #
83
- # Daemon signing requires the SAME HMAC secret in the preparer and the signer,
84
- # otherwise every sign fails with "ORACLE_STAMP_HMAC_SECRET missing in signer":
85
- export ORACLE_STAMP_HMAC_SECRET='long-random-secret'
86
- ```
87
-
88
- `ORACLE_AUTONOMOUS_TRADING=1` is only for trusted, owner-controlled direct-exec
89
- code running locally with your policy and caps. It is not a permission bit for a
90
- model or remote agent process; use `oracle-signer` for the agent-facing path.
91
-
92
- Full vault / multi-chain / daemon detail → operator [SETUP](https://github.com/demi-hl/oracle-operator/blob/main/SETUP.md).
66
+ See [SETUP.md](SETUP.md) for clean installation and troubleshooting,
67
+ [docs/holder-beta.md](docs/holder-beta.md) for the Locals-only launch gate, and
68
+ [docs/buzz-integration.md](docs/buzz-integration.md) for the Buzz HTTP contract.
93
69
 
94
70
  ---
95
71
 
@@ -125,7 +101,7 @@ loop.
125
101
  | Authority | prompt-level "be careful" | signed grant: chain, spend, targets, TTL — enforced by your wallet, not by us |
126
102
  | Destinations | whatever the model emits | reviewed per-chain allowlist, fail-closed |
127
103
  | Slippage | fixed % | live guard recomputed per leg, hard 100 bps cap |
128
- | Proof | model says "done" | hash + receipt + balance delta or it failed |
104
+ | Proof | model says "done" | hash + verified successful on-chain receipt + expected balance delta or it failed |
129
105
  | Surface | swap only | swaps, bridges, perps, vaults, yield, NFTs, intents |
130
106
 
131
107
  ## Architecture
@@ -153,9 +129,9 @@ Three planes, and the boundary between them is mechanically enforced:
153
129
  - **Policy plane** (public) — destination allowlists, slippage guards, route and
154
130
  vault attestations, grant schema. Holds no keys; constrains what a signer may
155
131
  be asked to do.
156
- - **Exec plane** (optional companion) - signing and broadcast live in
157
- [`@oracle-agent/operator`](https://github.com/demi-hl/oracle-operator) on
158
- your machine with your key. Not in this package or its npm artifact.
132
+ - **Exec plane** (private, optional) — signing and broadcast live only in
133
+ separately operated owner infrastructure. It is not published on npm, not in
134
+ this artifact, and not available to holder installs.
159
135
 
160
136
  `test/custody-boundary.test.mjs` walks the import graph and fails if any public
161
137
  module reaches wallet key material or a house signer. The split is a test, not a
@@ -298,10 +274,11 @@ owner-local source lane.** The short version:
298
274
  - Reads and quotes need **no keys**.
299
275
  - The public package exposes no signer, key vault, or broadcast path.
300
276
  - User wallets authorize prepared actions outside the public data plane.
301
- - Owner-local signing is shipped separately as `@oracle-agent/operator`; the
302
- recommended agent-process path is `oracle-signer`. Its daemon exposes six
303
- policy-bounded surfaces: `hl`, `poly`, `evm-swap`, `evm-bridge`, `btc`, and
304
- `sol`, with explicit caps and fail-closed allowlists.
277
+ - Owner-local signing exists only in separately operated private infrastructure;
278
+ it is not published on npm and is not a holder capability. When installed by
279
+ the owner, its generic signer exposes six policy-bounded surfaces: `hl`,
280
+ `poly`, `evm-swap`, `evm-bridge`, `btc`, and `sol`, with explicit caps and
281
+ fail-closed allowlists.
305
282
 
306
283
  ### Action vocabulary and execution planes
307
284
 
@@ -310,9 +287,10 @@ Oracle keeps capability and authorization separate:
310
287
  - Public Oracle reads, quotes, simulates, and prepares unsigned artifacts.
311
288
  - **Path A:** owner/main, browser, smart-account, hardware, or protocol-native
312
289
  wallets sign the prepared artifact. This is the default self-custody path.
313
- - **Path B:** owner-local operator infrastructure may sign on the same host with
314
- your key and your policy. For agent processes, prefer `oracle-signer` so the
315
- agent receives only a signer URL/token and never the vault passphrase.
290
+ - **Path B:** private owner-local infrastructure may sign on the same host with
291
+ the owner's key and policy. It is deployment-specific, unavailable to holder
292
+ installs, and must never expose a vault passphrase or signer credential to the
293
+ agent process.
316
294
  - The generic unattended signer exposes six bounded surfaces: `hl`, `poly`,
317
295
  `evm-swap`, `evm-bridge`, `btc`, `sol`. Each surface decodes its own
318
296
  envelope, enforces its caps, and refuses while its allowlists are empty.
@@ -344,6 +322,10 @@ npm run start:public
344
322
  # http://127.0.0.1:8799/
345
323
  ```
346
324
 
325
+ This is an unauthenticated loopback development server, not a holder gate or a
326
+ public deployment. Keep it off LAN/tailnet/public interfaces and place a tested
327
+ admission gateway in front of any hosted beta.
328
+
347
329
  ## Model providers
348
330
 
349
331
  Oracle is a library. Drive it with Claude, GPT, Gemini, Grok, a local model, or
@@ -354,7 +336,7 @@ npx oracle-data # local read plane on 127.0.0.1:8787
354
336
  npx oracle-data-mcp # MCP stdio server (any MCP client); needs oracle-data up
355
337
  ```
356
338
 
357
- It is better under [Hermes](https://claude-code.nousresearch.com/docs), because
339
+ It is better under [Hermes](https://hermes-agent.nousresearch.com/docs), because
358
340
  a trading stack is several workloads with opposite needs and **per-profile
359
341
  routing** gives each its own model, tools, and key scope: cheap wide context for
360
342
  research, a fast model for execution where latency is money, the strongest model
@@ -396,9 +378,9 @@ only read, simulate, and prepare — and a test enforces that so widening custod
396
378
  can't pass review quietly. An existing `SOUL.md` is never overwritten without
397
379
  `--force`, and `--force` writes a timestamped backup first.
398
380
 
399
- No Oracle account, no Oracle API key, no separate model billing. Oracle inherits
400
- whichever provider your Hermes already uses (Anthropic, OpenAI, Nous Portal, xAI,
401
- a local GGUF — anything Hermes supports).
381
+ Oracle does not issue its own model credential. Standalone chat uses the OAuth
382
+ login or API key the user configured; Hermes mode uses whichever provider that
383
+ Hermes installation already supports.
402
384
 
403
385
  **Why "built for Hermes" and not just "works anywhere":** Oracle's read plane is
404
386
  an MCP server, so any MCP client can call it. But the *mesh* — per-lane memory,
@@ -509,18 +491,18 @@ oracle-data-mcp
509
491
 
510
492
  ## License
511
493
 
512
- [Apache-2.0](LICENSE).
513
-
514
- The code is open source. The **Oracle** name and marks are reserved; please
515
- don't imply endorsement by an official deployment when shipping a fork.
494
+ [Business Source License 1.1](LICENSE) — source-available, not open source.
516
495
 
517
- ### Operator hardening (0.4+)
496
+ You may read, modify, self-host, and use Oracle freely for internal use,
497
+ evaluation, research, and personal use. What you may not do is offer Oracle,
498
+ or substantially its functionality, to third parties as a competing product
499
+ or hosted service without a commercial license.
518
500
 
519
- Prefer the local signer daemon so the agent never sees the vault passphrase:
501
+ Each version converts to **Apache-2.0** on its Change Date (four years after
502
+ release). Versions `0.1.0` through `0.11.0` were published under Apache-2.0
503
+ and remain under those terms.
520
504
 
521
- ```bash
522
- npx oracle-signer # reads the passphrase from the OS credential store
523
- # agent: ORACLE_SIGNER_URL + ORACLE_SIGNER_TOKEN only
524
- ```
505
+ The **Oracle** name and marks are reserved; please don't imply endorsement by
506
+ an official deployment when shipping a fork.
525
507
 
526
- See [oracle-operator SETUP](https://github.com/demi-hl/oracle-operator/blob/main/SETUP.md).
508
+ For commercial licensing, contact the maintainer.