@oracle-agent/oracle 0.11.0 → 0.13.0

package/scripts/secret-scan.mjs

@@ -1,181 +0,0 @@
-#!/usr/bin/env node
-// Pre-publication secret scan. Fails CLOSED: any hit is an error.
-//
-// Checks the working tree AND every blob in git history, because a secret
-// removed in a later commit is still public the moment the repo is.
-
-import { execFileSync } from "node:child_process";
-
-const ROOT = execFileSync("git", ["rev-parse", "--show-toplevel"], { cwd: process.cwd(), encoding: "utf8" }).trim();
-
-// Live values that must never appear. Sourced from the environment at scan
-// time so the scanner itself contains no secrets.
-function liveSecrets() {
-  const out = [];
-  const push = (label, value) => {
-    const v = String(value || "").trim();
-    if (v.length >= 8) out.push({ label, value: v });
-  };
-  for (const k of Object.keys(process.env)) {
-    if (/(_KEY|_SECRET|_TOKEN|_PASSPHRASE|_WIF|PRIVATE_KEY)$/i.test(k)) {
-      push(`env:${k}`, process.env[k]);
-    }
-  }
-  return out;
-}
-
-// A representative slice of the BIP39 English wordlist. Full coverage is not
-// required: a real mnemonic is 12 or 24 words drawn ENTIRELY from the list, so
-// any genuine phrase will hit these common entries, while English prose will
-// not have every one of its words in the list.
-const BIP39_SAMPLE = new Set(
-  ("abandon ability able about above absent absorb abstract absurd abuse access accident account accuse achieve acid " +
-   "across act action actor actress actual adapt add addict address adjust admit adult advance advice aerobic affair " +
-   "afford afraid again age agent agree ahead aim air airport aisle alarm album alcohol alert alien all alley allow " +
-   "almost alone alpha already also alter always amateur amazing among amount amused analyst anchor ancient anger " +
-   "angle angry animal ankle announce annual another answer antenna antique anxiety any apart apology appear apple " +
-   "approve april arch arctic area arena argue arm armed armor army around arrange arrest arrive arrow art artefact " +
-   "artist artwork ask aspect assault asset assist assume asthma athlete atom attack attend attitude attract auction " +
-   "audit august aunt author auto autumn average avocado avoid awake aware away awesome awful awkward axis baby " +
-   "bachelor bacon badge bag balance balcony ball bamboo banana banner bar barely bargain barrel base basic basket " +
-   "battle beach bean beauty because become beef before begin behave behind believe below belt bench benefit best " +
-   "betray better between beyond bicycle bid bike bind biology bird birth bitter black blade blame blanket blast " +
-   "bleak bless blind blood blossom blouse blue blur blush board boat body boil bomb bone bonus book boost border " +
-   "boring borrow boss bottom bounce box boy bracket brain brand brass brave bread breeze brick bridge brief bright " +
-   "bring brisk broccoli broken bronze broom brother brown brush bubble buddy budget buffalo build bulb bulk bullet " +
-   "bundle bunker burden burger burst bus business busy butter buyer buzz cabbage cabin cable cactus cage cake call " +
-   "calm camera camp can canal cancel candy cannon canoe canvas canyon capable capital captain car carbon card cargo " +
-   "carpet carry cart case cash casino castle casual cat catalog catch category cattle caught cause caution cave " +
-   "ceiling celery cement census century cereal certain chair chalk champion change chaos chapter charge chase chat " +
-   "cheap check cheese chef cherry chest chicken chief child chimney choice choose chronic chuckle chunk churn cigar " +
-   "cinnamon circle citizen city civil claim clap clarify claw clay clean clerk clever click client cliff climb " +
-   "clinic clip clock clog close cloth cloud clown club clump cluster clutch coach coast coconut code coffee coil " +
-   "coin collect color column combine come comfort comic common company concert conduct confirm congress connect " +
-   "consider control convince cook cool copper copy coral core corn correct cost cotton couch country couple course " +
-   "cousin cover coyote crack cradle craft cram crane crash crater crawl crazy cream credit creek crew cricket crime " +
-   "crisp critic crop cross crouch crowd crucial cruel cruise crumble crunch crush cry crystal cube culture cup " +
-   "cupboard curious current curtain curve cushion custom cute cycle zoo zone zero youth young you yellow year " +
-   "wrong write wrist wrap worth world work word wood wonder woman wolf wire winter wing wine window wind wild wife " +
-   "why whisper white where when wheat what wet west welcome weird weekend week wedding web wealth wear weapon " +
-   "weasel wear wave water watch waste wash warrior warm want walnut wall walk wait wagon void voice vote volume " +
-   "vocal vivid virus violin virtual vintage view video vicious vibrant vessel very verify version verb vendor " +
-   "vehicle vegetable vault various vast vase vanish valve valley valid vacuum vacant").split(/\s+/)
-);
-
-const PATTERNS = [
-  { name: "private key (hex 64)", re: /\b(?:0x)?[0-9a-fA-F]{64}\b/, refine: (m, line) =>
-      /priv|secret|wif|seed|mnemonic|signer|wallet/i.test(line) && !/hash|digest|sha256|txid|commit|blob|sha1|0x0{40,}/i.test(line) },
-  { name: "BTC WIF", re: /\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/ },
-  { name: "BIP39 seed phrase", re: /\b(?:[a-z]{3,8} ){11,23}[a-z]{3,8}\b/, refine: (m) => {
-      // Ordinary English prose trivially matches "12-24 short lowercase words".
-      // A scanner that cries wolf on comments is a scanner people switch off,
-      // so require the words to actually be in the BIP39 wordlist.
-      const words = m[0].trim().split(/\s+/);
-      if (words.length !== 12 && words.length !== 24) return false;
-      return words.every((w) => BIP39_SAMPLE.has(w));
-    } },
-  { name: "AWS access key", re: /\bAKIA[0-9A-Z]{16}\b/ },
-  { name: "OpenAI key", re: /\bsk-[A-Za-z0-9_-]{20,}\b/ },
-  { name: "Anthropic key", re: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/ },
-  { name: "GitHub token", re: /\bgh[pousr]_[A-Za-z0-9]{36,}\b/ },
-  { name: "Slack token", re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/ },
-  { name: "Telegram bot token", re: /\b\d{8,10}:[A-Za-z0-9_-]{35}\b/ },
-  { name: "PEM private key", re: /-----BEGIN (?:RSA |EC |OPENSSH |PGP )?PRIVATE KEY-----/ },
-  { name: "Solana keypair array", re: /\[\s*(?:\d{1,3}\s*,\s*){63}\d{1,3}\s*\]/ },
-];
-
-// Paths whose matches are known-safe test fixtures.
-const ALLOWED_PATHS = [
-  /^scripts\/secret-scan\.mjs$/,
-  /^package-lock\.json$/,
-];
-
-// Literal strings that are documented, synthetic, or public by nature.
-const ALLOWED_VALUES = [
-  "0x0123456789012345678901234567890123456789012345678901234567890123", // HL SDK public test vector
-  "L1aW4aubDFB7yfras2S1mN3bqg9nwySY8nkoLmJebSLD5BWv3ENZ",
-  "/-----BEGIN[A-Z ]*PRIVATE KEY-----/",
-  '{ value: "-----BEGIN EC PRIVATE KEY-----" }',
-  "0x0000000000000000000000000000000000000000",
-];
-
-function sh(cmd, args) {
-  return execFileSync(cmd, args, { cwd: ROOT, encoding: "utf8", maxBuffer: 256 * 1024 * 1024 });
-}
-
-function scanText(text, origin, findings) {
-  const lines = text.split("\n");
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    if (line.length > 4000) continue;
-    for (const p of PATTERNS) {
-      const m = p.re.exec(line);
-      if (!m) continue;
-      if (ALLOWED_VALUES.some((v) => line.includes(v))) continue;
-      if (p.refine && !p.refine(m, line)) continue;
-      findings.push({ origin, line: i + 1, kind: p.name, sample: line.trim().slice(0, 100) });
-    }
-    for (const s of LIVE) {
-      if (line.includes(s.value)) {
-        findings.push({ origin, line: i + 1, kind: `LIVE SECRET ${s.label}`, sample: "[REDACTED — real credential]" });
-      }
-    }
-  }
-}
-
-const LIVE = liveSecrets();
-const findings = [];
-
-// --- 1. working tree (tracked files only) ---
-const tracked = sh("git", ["ls-files"]).split("\n").filter(Boolean);
-for (const rel of tracked) {
-  if (ALLOWED_PATHS.some((r) => r.test(rel))) continue;
-  let content;
-  try {
-    content = sh("git", ["show", `:${rel}`]);
-  } catch {
-    continue; // binary or unreadable
-  }
-  if (content.includes("\u0000")) continue;
-  scanText(content, rel, findings);
-}
-
-// --- 2. every blob in history ---
-const revs = sh("git", ["rev-list", "--all"]).split("\n").filter(Boolean);
-const seen = new Set();
-let historyBlobs = 0;
-for (const rev of revs) {
-  const entries = sh("git", ["ls-tree", "-r", rev]).split("\n").filter(Boolean);
-  for (const entry of entries) {
-    const [meta, path] = entry.split("\t");
-    const sha = meta.split(/\s+/)[2];
-    if (!sha || seen.has(sha)) continue;
-    seen.add(sha);
-    if (ALLOWED_PATHS.some((r) => r.test(path))) continue;
-    let content;
-    try {
-      content = sh("git", ["cat-file", "-p", sha]);
-    } catch {
-      continue;
-    }
-    if (content.includes("\u0000")) continue;
-    historyBlobs++;
-    scanText(content, `history:${rev.slice(0, 8)}:${path}`, findings);
-  }
-}
-
-// --- 3. author identity leakage ---
-const authors = new Set(sh("git", ["log", "--all", "--format=%an <%ae>|%cn <%ce>"]).split(/[\n|]/).filter(Boolean));
-
-console.log(`scanned ${tracked.length} tracked files, ${historyBlobs} historical blobs, ${revs.length} commits`);
-console.log(`live env secrets checked: ${LIVE.length}`);
-console.log(`git identities: ${[...authors].join(", ") || "(none)"}`);
-
-if (findings.length) {
-  console.error(`\nFAIL — ${findings.length} finding(s):`);
-  for (const f of findings.slice(0, 40)) {
-    console.error(`  ${f.origin}:${f.line}  [${f.kind}]  ${f.sample}`);
-  }
-  process.exit(1);
-}
-console.log("\nPASS — no secrets found in tree or history");

package/scripts/verify-v3-venues.mjs

@@ -1,192 +0,0 @@
-#!/usr/bin/env node
-// Functionally verify Uniswap V3 venue addresses on every chain.
-//
-// Codesize alone is NOT verification -- an unrelated contract also has bytecode, and
-// on Base the canonical mainnet addresses returned 2109 bytes for two different
-// contracts, which is exactly the kind of false positive a size check waves through.
-//
-// The real test is behavioural: ask the candidate quoter to price a pair we already
-// know the answer to. A contract that returns a sane WETH->USDC quote at a standard
-// fee tier IS a working V3 quoter, regardless of what any doc claims.
-//
-// Output is a provenance record per chain, ready to paste into chains.config.mjs.
-
-import { rpcCall } from "../src/data/providers/evm-rpc.mjs";
-
-// Candidates. Most chains share the canonical deployment; Base, BSC and Avalanche
-// have their own. All of these are CANDIDATES until the probe passes.
-const CANONICAL_QUOTER = "0x61fFE014bA17989E743c5F6cB21bF9697530B21e";
-const CANONICAL_ROUTER = "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45";
-
-const CANDIDATES = {
-  1: {
-    name: "ethereum",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2", // WETH
-    tokenOut: "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48", // USDC
-    decIn: 18,
-    decOut: 6,
-  },
-  10: {
-    name: "optimism",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0x4200000000000000000000000000000000000006",
-    tokenOut: "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
-    decIn: 18,
-    decOut: 6,
-  },
-  56: {
-    name: "bsc",
-    quoter: "0x78D78E420Da98ad378D7799bE8f4AF69033EB077",
-    router: "0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",
-    tokenIn: "0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c", // WBNB
-    tokenOut: "0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d", // USDC (18dp on BSC)
-    decIn: 18,
-    decOut: 18,
-  },
-  137: {
-    name: "polygon",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270", // WMATIC
-    tokenOut: "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359", // USDC native
-    decIn: 18,
-    decOut: 6,
-  },
-  8453: {
-    name: "base",
-    quoter: "0x3d4e44Eb1374240CE5F1B871ab261CD16335B76a",
-    router: "0x2626664c2603336E57B271c5C0b26F421741e481",
-    tokenIn: "0x4200000000000000000000000000000000000006",
-    tokenOut: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
-    decIn: 18,
-    decOut: 6,
-  },
-  42161: {
-    name: "arbitrum",
-    quoter: CANONICAL_QUOTER,
-    router: CANONICAL_ROUTER,
-    tokenIn: "0x82aF49447D8a07e3bd95BD0d56f35241523fBab1",
-    tokenOut: "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
-    decIn: 18,
-    decOut: 6,
-  },
-  43114: {
-    name: "avalanche",
-    quoter: "0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",
-    router: "0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",
-    tokenIn: "0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7", // WAVAX
-    tokenOut: "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E", // USDC
-    decIn: 18,
-    decOut: 6,
-  },
-};
-
-const FEE_TIERS = [500, 3000, 10000];
-
-const word = (v) => BigInt(v).toString(16).padStart(64, "0");
-const addrWord = (a) => a.slice(2).toLowerCase().padStart(64, "0");
-
-// QuoterV2.quoteExactInputSingle((address,address,uint256,uint24,uint160))
-// selector 0xc6a5026a -- struct is encoded inline as 5 words.
-function encodeQuote({ tokenIn, tokenOut, amountIn, fee }) {
-  return (
-    "0xc6a5026a" +
-    addrWord(tokenIn) +
-    addrWord(tokenOut) +
-    word(amountIn) +
-    word(fee) +
-    word(0) // sqrtPriceLimitX96 = 0 (no limit)
-  );
-}
-
-async function codesize(chainId, address) {
-  const r = await rpcCall(chainId, "eth_getCode", [address, "latest"]).catch(() => null);
-  const raw = r?.result ?? r;
-  return raw && raw !== "0x" ? (raw.length - 2) / 2 : 0;
-}
-
-async function probe(chainId, cfg) {
-  const result = {
-    chainId: Number(chainId),
-    name: cfg.name,
-    quoter: cfg.quoter,
-    router: cfg.router,
-    quoterCodesize: 0,
-    routerCodesize: 0,
-    workingFeeTier: null,
-    quotedOut: null,
-    humanPrice: null,
-    verdict: "FAIL",
-    reason: "",
-  };
-
-  result.quoterCodesize = await codesize(chainId, cfg.quoter);
-  result.routerCodesize = await codesize(chainId, cfg.router);
-
-  if (!result.quoterCodesize || !result.routerCodesize) {
-    result.reason = "no bytecode at candidate address on this chain";
-    return result;
-  }
-
-  // Behavioural probe: does it actually price a pair we can sanity-check?
-  const amountIn = 10n ** BigInt(cfg.decIn);
-  for (const fee of FEE_TIERS) {
-    const data = encodeQuote({
-      tokenIn: cfg.tokenIn,
-      tokenOut: cfg.tokenOut,
-      amountIn,
-      fee,
-    });
-    const r = await rpcCall(chainId, "eth_call", [{ to: cfg.quoter, data }, "latest"]).catch(
-      () => null,
-    );
-    const raw = r?.result ?? r;
-    if (!raw || raw === "0x" || raw.length < 66) continue;
-
-    const out = BigInt(`0x${raw.slice(2, 66)}`);
-    if (out === 0n) continue;
-
-    result.workingFeeTier = fee;
-    result.quotedOut = out.toString();
-    result.humanPrice = Number(out) / 10 ** cfg.decOut;
-    break;
-  }
-
-  if (result.workingFeeTier == null) {
-    result.reason = "bytecode present but no fee tier returned a quote -- not a working V3 quoter";
-    return result;
-  }
-
-  // Sanity band. A working quoter on a major pair should land in a plausible range;
-  // a wildly wrong number means we are talking to the wrong contract or decoding it
-  // wrong, and either way it must not be allowlisted.
-  if (result.humanPrice <= 0 || !Number.isFinite(result.humanPrice)) {
-    result.reason = `implausible quote ${result.humanPrice}`;
-    return result;
-  }
-
-  result.verdict = "PASS";
-  result.reason =
-    `quoteExactInputSingle at fee ${result.workingFeeTier} returned ` +
-    `${result.humanPrice} for 1 unit in -- a live, working V3 quote`;
-  return result;
-}
-
-const out = [];
-for (const [chainId, cfg] of Object.entries(CANDIDATES)) {
-  const r = await probe(chainId, cfg);
-  out.push(r);
-  const line =
-    `${r.name.padEnd(10)} ${r.verdict.padEnd(5)} ` +
-    `quoter=${String(r.quoterCodesize).padStart(6)} router=${String(r.routerCodesize).padStart(6)} ` +
-    (r.workingFeeTier ? `fee=${String(r.workingFeeTier).padStart(5)} price=${r.humanPrice}` : r.reason);
-  console.log(line);
-}
-
-console.log(`\n${out.filter((r) => r.verdict === "PASS").length}/${out.length} chains verified`);
-if (process.argv.includes("--json")) {
-  console.log(JSON.stringify(out, null, 2));
-}

package/skills/balance/SKILL.md

@@ -1,176 +0,0 @@
----
-name: balance
-description: Use when the user says balance, holdings, portfolio, wallet balance, or invokes /balance. Call the deterministic read-only multichain portfolio tool and report coverage honestly.
----
-
-# Balance
-
-Use `portfolio_snapshot` for every fresh balance request. It runs the deterministic
-multichain balance and NFT inventory reads once, then records one compact local
-observation so the user can build history without a separate tracker.
-
-Use `portfolio_history` for balance-history requests and `portfolio_value_graph`
-for charts. Use `portfolio_balance` only when the user explicitly asks for a
-non-recorded read or when local history storage is unavailable.
-
-This skill is read-only. Public addresses are identifiers, not signing rights.
-Never request a private key, seed phrase, wallet export, session key, or signature.
-
-## Trigger
-
-Run this workflow when the user:
-
-- invokes `/balance`;
-- says `balance` by itself;
-- asks for holdings, wallet balance, portfolio, net assets, or assets across chains;
-- supplies one or more public wallet addresses and asks what they hold.
-
-## Address routing
-
-Parse only public addresses supplied with the request:
-
-- `0x...` maps to `addresses.evm` and `addresses.hyperliquid` unless the user
-  explicitly assigns different addresses;
-- a Solana base58 public key maps to `addresses.solana`;
-- a Bitcoin `bc1`, `1`, or `3` address maps to `addresses.bitcoin`;
-- explicit labels such as `evm:`, `solana:`, `bitcoin:`, and `hyperliquid:` win.
-
-If no addresses are in the request, call `portfolio_snapshot` with an empty object.
-The tool uses configured public-address defaults:
-
-- `ORACLE_EVM_ADDRESS`, with legacy fallback `ORACLE_DEFAULT_ADDRESS`;
-- `ORACLE_SOLANA_ADDRESS`;
-- `ORACLE_BITCOIN_ADDRESS`;
-- `ORACLE_HYPERLIQUID_ADDRESS`, with EVM fallback.
-
-If every family returns `not-configured`, ask only for the missing public addresses.
-Do not call a zero address a user wallet and do not report missing families as zero.
-
-## Mandatory call
-
-Call `portfolio_snapshot`:
-
-```json
-{
-  "addresses": {
-    "evm": "optional public address",
-    "solana": "optional public key",
-    "bitcoin": "optional public address",
-    "hyperliquid": "optional public address"
-  },
-  "includeTokens": true,
-  "includeCollectibles": true,
-  "includePrices": true,
-  "includeNfts": true
-}
-```
-
-Omit address fields the user did not supply. Omit `evmChainIds` unless the user
-asks for a subset. The default queries every configured EVM chain. Read fungible
-and chain details from `result.balance`, NFT holdings from `result.nfts`, and the
-combined historical observation from `result.snapshot`.
-
-Never call a chain write, prepare, sign, send, submit, execute, or broadcast tool
-while answering a balance request. The compact profile-local history append made
-by `portfolio_snapshot` is allowed and contains no keys or executable payloads.
-
-## Coverage contract
-
-The current aggregator covers:
-
-- native balances on every configured EVM chain;
-- Solana SOL plus SPL Token and Token-2022 accounts;
-- Bitcoin BTC plus Runes and inscriptions when an address indexer is configured;
-- Hyperliquid HyperCore spot balances and perp account state;
-- OpenSea-supported EVM/Solana NFT inventory and Bitcoin inscriptions where the
-  configured providers expose owner data;
-- profile-local snapshots and an SVG known-value history graph.
-
-It must explicitly report unsupported or unavailable surfaces:
-
-- EVM token and NFT enumeration is unavailable without an address indexer;
-- Solana token accounts are unverified until metadata confirms symbol and spam
-  status;
-- a Solana amount of one with zero decimals is only a collectible candidate;
-- Bitcoin Runes and inscriptions require an address-indexed provider;
-- Cosmos requires a chain-specific bech32 address and LCD/RPC adapter;
-- Sui and Aptos remain unsupported until their balance adapters are installed;
-- any provider failure is `unavailable`, never a zero balance;
-- NFT prices are provider estimates, not executable bids.
-
-## History and graph
-
-For “balance history”, “portfolio history”, or a date range, call
-`portfolio_history` with the same public addresses and the requested `since`,
-`until`, and `limit`. Keep `null` values unavailable. Do not interpolate them.
-
-For “graph”, “chart”, or “show me performance”, call `portfolio_value_graph`.
-State the returned `summary.changeUsd`, `summary.changePct`, point count, and
-whether any plotted snapshots were incomplete. The image plots known priced
-value, not guaranteed liquidation value or net worth.
-
-## Response format
-
-Start with:
-
-```text
-Balance, <queriedAt>
-Known priced value: $<knownUsd>  (not a complete total)
-Coverage: <ok>/<requestedSurfaces> surfaces live
-```
-
-If `valuation.complete` is true, you may remove the parenthetical. Do not rename
-`knownUsd` to `total`, `net worth`, or `portfolio value` when coverage is partial.
-
-Then show nonzero assets first, grouped by family:
-
-```text
-EVM
-Ethereum: 0.42 ETH  $...
-Base: 18.1 ETH  $...
-
-Solana
-SOL: ...
-SPL: <mint>  <amount>  unverified
-
-Bitcoin
-BTC: ...
-Runes: ...
-Inscriptions: ...
-
-Hyperliquid
-Spot: ...
-Perps account value: $...
-Positions: ...
-```
-
-Collapse successful zero-native EVM chains into one line:
-
-```text
-Zero native: Polygon, Optimism, Arbitrum
-```
-
-End with concise exceptions:
-
-```text
-Unavailable: <failed providers or unconfigured addresses>
-Unpriced: <nonzero assets without a price>
-Warnings: <spam, stale, unknown-not-empty, or incomplete discovery warnings>
-```
-
-Do not dump raw RPC payloads unless the user asks. Keep exact public addresses in
-the response only when the user supplied multiple addresses and disambiguation is
-necessary.
-
-## Truth rules
-
-- `0` means a provider successfully returned zero.
-- `unavailable` means the provider failed or the adapter is absent.
-- `not-configured` means the public address is missing.
-- `unknownNotEmpty` means the provider cannot tell whether assets exist. Never
-  convert it to an empty portfolio.
-- Every USD figure must carry a price source and query timestamp in the tool
-  result.
-- Do not sum Stable Mainnet native USDT0 with its mirrored ERC-20 representation.
-- Do not price unverified or spam tokens by symbol alone.
-- Do not hide failed chains to make the summary look complete.

package/skills/oracle-action-semantics/SKILL.md

@@ -1,40 +0,0 @@
----
-name: oracle-action-semantics
-description: Use for watch, ping, prepare, arm, sign, send, or execution-capability questions.
----
-
-# Oracle action semantics
-
-Keep these planes distinct:
-
-1. **Public prepare plane**: reads, quotes, simulates, and prepares unsigned artifacts. It never signs or broadcasts.
-2. **Generic Oracle signer**: the unattended daemon exposes six *bounded* surfaces — `hl`, `poly`, `evm-swap`, `evm-bridge`, `btc`, `sol`. Bounded is not generic chain authority: each surface decodes and validates its own envelope shape and refuses while its allowlists are empty. Enablement is never authority; every signature still needs one exact owner-confirmed grant.
-3. **User-wallet EVM**: ordinary EVM preparations require the user's wallet signature.
-4. **Optional bounded EVM execution**: a deployment may expose a separate same-host, owner-gated EVM executor such as MAD. Verify its status and policy before saying it is available. Never infer it from the public package or the generic signer.
-
-Do not turn a deployment fact into a universal claim. If no bounded EVM executor is installed or healthy, say the current deployment cannot execute EVM. Do not say Oracle can never execute EVM.
-
-## Binding vocabulary
-
-- `watch`, `watch this`, `ping`, `ping me`, `alert`, and `notify` mean notification only.
-- Persist them as `active: true` and `actionMode: alert_only`.
-- `arm` means authorization intent for one exact bounded action.
-- Persist it as `active: true` and `actionMode: execute` only after the exact action and owner authorization are present.
-- Never convert `watch` into execution.
-- Never convert `arm` into a watch.
-- A status field such as `armed` is not action authority. Current records require explicit `active` and `actionMode` fields.
-
-Before accepting `arm`, require the exact chain, token pair, amount or fraction, trigger, recipient, router, deadline, slippage bound, and approval bound. Require the owner-gated executor to be healthy and disarmed until that exact action is authorized. Refuse global, implied, or reusable authorization.
-
-## Execution states
-
-Report each state separately:
-
-- `executionReady`
-- `requiresUserSignature`
-- `signingReady`
-- `broadcastReady`
-
-A quote is not a preparation. A preparation is not a signature. A signature is not a broadcast. A broadcast is not mined execution. Claim success only after a transaction hash, successful receipt, and expected balance delta.
-
-ERC-20 approval is a separate transaction. Use an exact bounded amount unless the user explicitly authorizes another cap. Never silently create an unlimited approval.