@oracle-agent/oracle 0.13.0 → 0.13.1

package/artifacts/specialist-packs/oracle-full-crypto.json

@@ -0,0 +1,298 @@
+{
+  "id": "oracle-full-crypto",
+  "name": "Oracle Full Crypto Pack",
+  "version": 4,
+  "audience": "public-users",
+  "description": "Default capability set for public Oracle: trader, builder, analyzer, deterministic /balance aggregation, multichain scanner, meme-token sniping, RFQ routing, tokenized-asset buys, NFT mint gas-war limits, Solana, Bitcoin inscriptions, chain-family token/NFT collections, gacha/DEX launches, and protocol build under bound grants. User signs everything.",
+  "posture": {
+    "default": "DISARMED",
+    "custody": "self-custodial",
+    "signing": "user-wallet-only",
+    "broadcast": "user-or-explicit-grant-only",
+    "never": [
+      "operator-hot-wallet-by-default",
+      "private-executor-custody",
+      "house-custody",
+      "unguarded-broadcast",
+      "uncapped-gas-war-mints"
+    ]
+  },
+  "includes_protocol_build": true,
+  "skill_packs": {
+    "research": [
+      "oracle-token-research",
+      "oracle-contract-research",
+      "oracle-smart-wallet-scanner",
+      "oracle-meme-token-sniper",
+      "oracle-bitcoin",
+      "oracle-solana",
+      "hyperliquid",
+      "polymarket",
+      "oracle-chain-graphs-telegram-cards",
+      "oracle-rfq-tokenized-assets",
+      "oracle-hypercore-staking"
+    ],
+    "execution_prepare": [
+      "self-custodial-onchain-execution",
+      "multichain-exec-desk",
+      "trade-loop-circuit-breaker",
+      "protocol-api-key-integration",
+      "oracle-bitcoin",
+      "oracle-best-execution",
+      "oracle-equities",
+      "oracle-rfq-tokenized-assets",
+      "oracle-meme-token-sniper",
+      "oracle-nft-mint-gas-war",
+      "oracle-solana-nft",
+      "oracle-hypercore-staking"
+    ],
+    "venues": [
+      "oracle-solana",
+      "oracle-bitcoin",
+      "hyperliquid",
+      "polymarket",
+      "rh-token-research",
+      "rh-token-swap",
+      "rh-token-chart",
+      "oracle-meme-token-sniper",
+      "oracle-rfq-tokenized-assets",
+      "oracle-solana-nft",
+      "oracle-hypercore-staking"
+    ],
+    "protocol_build": [
+      "oracle-protocol-builder",
+      "oracle-contract-research",
+      "oracle-protocol-security",
+      "oracle-multichain-token-launch",
+      "oracle-multichain-nft-launch",
+      "oracle-nft-gacha-launch",
+      "oracle-dex-launch",
+      "protocol-api-key-integration",
+      "oracle-nft-mint-gas-war"
+    ],
+    "product_law": [
+      "oracle-public-product",
+      "oracle-grants",
+      "oracle-receipts",
+      "trade-loop-circuit-breaker",
+      "oracle-chain-graphs-telegram-cards",
+      "oracle-nft-mint-gas-war"
+    ],
+    "launch_build": [
+      "oracle-protocol-builder",
+      "oracle-nft-gacha-launch",
+      "oracle-dex-launch",
+      "oracle-protocol-security",
+      "oracle-multichain-token-launch",
+      "oracle-multichain-nft-launch",
+      "oracle-nft-mint-gas-war"
+    ],
+    "analysis": [
+      "oracle-token-research",
+      "oracle-contract-research",
+      "oracle-smart-wallet-scanner",
+      "oracle-meme-token-sniper",
+      "oracle-best-execution",
+      "oracle-equities",
+      "balance",
+      "oracle-chain-graphs-telegram-cards",
+      "oracle-rfq-tokenized-assets"
+    ]
+  },
+  "excluded_from_public": [
+    "private deploy ops",
+    "private executor ops",
+    "private chain ops",
+    "operator infrastructure access",
+    "any skill that requires an operator wallet or server root access"
+  ],
+  "protocol_build": {
+    "enabled": true,
+    "modes": [
+      "research-existing-protocol",
+      "scaffold-contracts",
+      "scaffold-nft-or-gacha",
+      "scaffold-dex-or-launchpad",
+      "write-deploy-scripts",
+      "prepare-unsigned-deploy-txs",
+      "security-checklist",
+      "launchpad-public-surface",
+      "multichain-token-launch",
+      "multichain-nft-collection-launch"
+    ],
+    "user_signs": true,
+    "grant_actions_example": [
+      "read:chain",
+      "simulate:tx",
+      "prepare:deploy",
+      "prepare:verify"
+    ],
+    "targets": "user-provided factory/router/implementations only unless added to destination allowlist",
+    "copy": "Oracle can classify and prepare chain-family token, NFT collection, protocol, gacha, and DEX launches. Unsupported adapters fail closed. You still sign every side effect."
+  },
+  "profiles": [
+    {
+      "id": "polymarket-agent",
+      "skills": [
+        "polymarket",
+        "polymarket-trade-journal",
+        "trade-loop-circuit-breaker",
+        "oracle-chain-graphs-telegram-cards"
+      ],
+      "description": "Polymarket prediction markets: public event pricing/cards plus prepared order intents when user CLOB/API keys are configured."
+    },
+    {
+      "id": "hyperliquid-agent",
+      "skills": [
+        "hyperliquid",
+        "hyperliquid-hip4-outcome-markets",
+        "trade-loop-circuit-breaker",
+        "oracle-chain-graphs-telegram-cards",
+        "oracle-rfq-tokenized-assets",
+        "oracle-hypercore-staking"
+      ],
+      "description": "Hyperliquid perps/spot, HyperEVM, HIP-3 builder dexs, HIP-4 outcome markets, and HyperCore HYPE staking/delegation prepares. API-key actions activate only with user-provided keys."
+    },
+    {
+      "id": "robinhood-agent",
+      "skills": [
+        "rh-public-token-research",
+        "rh-token-research",
+        "rh-token-chart",
+        "rh-token-swap",
+        "oracle-meme-token-sniper",
+        "oracle-chain-graphs-telegram-cards",
+        "oracle-rfq-tokenized-assets"
+      ],
+      "description": "Robinhood Chain tokens/NFTs plus tokenized Robinhood-style assets when chain/contract/route is verified."
+    },
+    {
+      "id": "solana-agent",
+      "skills": [
+        "oracle-solana",
+        "oracle-receipts",
+        "oracle-circuit-breaker",
+        "oracle-best-execution",
+        "oracle-equities",
+        "oracle-meme-token-sniper",
+        "oracle-chain-graphs-telegram-cards",
+        "oracle-rfq-tokenized-assets",
+        "oracle-solana-nft"
+      ],
+      "label": "solana agent",
+      "description": "Solana research, SPL accounts, Jupiter quotes, live simulation, Magic Eden NFT reads plus unsigned buy/list/mint tickets, launch/meme-token scanning, and unsigned swap preparation."
+    },
+    {
+      "id": "bitcoin-agent",
+      "skills": [
+        "oracle-bitcoin",
+        "oracle-receipts",
+        "oracle-circuit-breaker",
+        "oracle-smart-wallet-scanner"
+      ],
+      "label": "bitcoin agent",
+      "description": "Bitcoin L1, Ordinals/runes research, Satflow PSBTs, and inscription preparation."
+    },
+    {
+      "id": "stable-agent",
+      "skills": [
+        "evm-contract-research",
+        "self-custodial-onchain-execution",
+        "oracle-meme-token-sniper",
+        "oracle-chain-graphs-telegram-cards",
+        "oracle-rfq-tokenized-assets"
+      ]
+    },
+    {
+      "id": "protocol-builder",
+      "skills": [
+        "oracle-protocol-builder",
+        "oracle-contract-research",
+        "oracle-protocol-security",
+        "oracle-nft-gacha-launch",
+        "oracle-dex-launch",
+        "oracle-receipts",
+        "oracle-multichain-token-launch",
+        "oracle-multichain-nft-launch"
+      ],
+      "label": "protocol builder",
+      "description": "Classify by chain family, then scaffold, review, and prepare unsigned token, NFT collection, gacha, DEX, and protocol launches."
+    }
+  ],
+  "default_tools": {
+    "read": [
+      "mad_data",
+      "web_search",
+      "evm_quote",
+      "evm_simulate",
+      "btc_health",
+      "btc_fees",
+      "btc_inscription_info",
+      "solana_balance",
+      "portfolio_balance",
+      "portfolio_snapshot",
+      "portfolio_history",
+      "portfolio_value_graph",
+      "nft_inventory",
+      "nft_gallery",
+      "nft_pnl"
+    ],
+    "prepare": [
+      "evm_prepare",
+      "evm_protocol_prepare",
+      "evm_protocol_quote",
+      "jupiter_quote",
+      "jupiter_prepare",
+      "bitcoin_inscribe_prepare",
+      "nft_prepare_list"
+    ],
+    "never_public_default": [
+      "evm_sign",
+      "evm_send",
+      "solana_sign",
+      "solana_send",
+      "bitcoin_sign",
+      "bitcoin_send",
+      "bitcoin_inscribe_sign_commit",
+      "bitcoin_inscribe_sign_reveal"
+    ]
+  },
+  "capabilities": [
+    "trader",
+    "builder",
+    "analyzer",
+    "solana-jupiter",
+    "bitcoin-inscriptions",
+    "nft-project-launch",
+    "gacha-launch",
+    "dex-launch",
+    "meme-token-sniping",
+    "onchain-scanner",
+    "smart-wallet-scanner",
+    "best-execution-routing",
+    "bridges",
+    "perps",
+    "vaults",
+    "prediction-markets",
+    "ordinals-runes",
+    "per-chain-graphs",
+    "telegram-cards",
+    "hip-3-builder-dex",
+    "hip-4-outcome-markets",
+    "polymarket-api-key-trading",
+    "cross-chain-rfq",
+    "rfq-best-execution",
+    "tokenized-robinhood-assets",
+    "nft-mint-gas-war-limits",
+    "nft-mint-bot",
+    "solana-nft-marketplace",
+    "solana-nft-mint",
+    "hypercore-hype-staking",
+    "hypercore-validator-delegation",
+    "multichain-token-launch",
+    "multichain-nft-collection-launch",
+    "multichain-balance",
+    "nft-inventory-gallery-pnl",
+    "portfolio-balance-history-graph"
+  ]
+}

package/dist/action-receipts.mjs

@@ -0,0 +1 @@
+import{createHash as m}from"node:crypto";import{wordlists as g}from"ethers";var A=1,E=new Set(["privatekey","privkey","secretkey","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","wif","xprv","xpriv","bearer","authorization","signature","apikey","credential"]),x=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/],$=new Set([12,15,18,21,24]);function S(e){let t=String(e).trim().toLowerCase().split(/\s+/).filter(Boolean);return $.has(t.length)&&t.every(r=>g.en.getWordIndex(r)>=0)}var H=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/,O=/(hash|digest|root|salt|nonce|proof|commitment|sig|id)(?:e?s)?$/i,j=new Set(["calldata","data","publickey","pubkey","message","payload","input","extradata"]);function T(e){let t=b(e);return j.has(t)||O.test(t)}var f=class extends Error{constructor(t){super(`action receipt refused: secret-bearing field at ${t}`),this.name="ActionReceiptSecretError",this.code="ACTION_RECEIPT_SECRET"}};function b(e){return String(e).replace(/[^a-z0-9]/gi,"").toLowerCase()}function C(e){let t=b(e);return[...E].some(r=>t.includes(r))}function _(e,t,r){if(typeof t=="string"){if(x.some(o=>o.test(t))||S(t))throw new f(r);if(H.test(t)&&!T(e))throw new f(r)}}function a(e,t="$",r=""){if(e==null||typeof e=="boolean")return e;if(typeof e=="string")return _(r,e,t),e;if(typeof e=="number"){if(!Number.isFinite(e))throw new TypeError(`action receipt: non-finite number at ${t}`);return e}if(typeof e=="bigint")return e.toString();if(Array.isArray(e))return e.map((n,i)=>a(n,`${t}[${i}]`,r));if(typeof e!="object"||Object.getPrototypeOf(e)!==Object.prototype)throw new TypeError(`action receipt: JSON-like value required at ${t}`);let o={};for(let n of Object.keys(e).sort()){let i=`${t}.${n}`;if(C(n))throw new f(i);e[n]!==void 0&&(o[n]=a(e[n],i,n))}return o}function L(e){return a(e)}function d(e){return e===null||typeof e!="object"?JSON.stringify(e):Array.isArray(e)?`[${e.map(d).join(",")}]`:`{${Object.keys(e).map(t=>`${JSON.stringify(t)}:${d(e[t])}`).join(",")}}`}function R(e){return d(a(e))}function k(e){if(!e||typeof e!="object"||Array.isArray(e))throw new TypeError("action receipt: object required");let{receiptId:t,summary:r,...o}=e;return m("sha256").update(R(o)).digest("hex")}function c(e,...t){for(let r of t)if(e[r]!==void 0)return e[r]}function s(e,t,r){let o=c(e,...t);if(o==null)throw new TypeError(`action receipt: ${r} required`);return o}function I(e){let t=c(e,"balances","balanceChanges"),r=c(e,"beforeBalances","balancesBefore","before"),o=c(e,"afterBalances","balancesAfter","after");return t!==void 0?{balances:t}:r===void 0&&o===void 0?{}:{balances:{...r===void 0?{}:{before:r},...o===void 0?{}:{after:o}}}}function N(e={}){if(!e||typeof e!="object"||Array.isArray(e))throw new TypeError("action receipt: input object required");a(e);let t=c(e,"txHash","transactionHash"),r=c(e,"phase","stage","resultType")??(t==null?"prepare":"execute");if(r!=="prepare"&&r!=="execute")throw new TypeError('action receipt: phase must be "prepare" or "execute"');let o={receiptVersion:A,phase:r,intent:s(e,["intent"],"intent"),route:s(e,["route"],"route"),decodedAction:s(e,["decodedAction","action"],"decodedAction"),policyChecks:s(e,["policyChecks","checks"],"policyChecks"),allowlistHits:s(e,["allowlistHits","allowlistMatches"],"allowlistHits"),prepareHash:s(e,["prepareHash"],"prepareHash"),...t==null?{}:{txHash:t},...I(e)},n=a(o);return Object.freeze({...n,receiptId:k(n)})}var q=N;function u(e,t=[]){if(typeof e=="string"||typeof e=="number")return String(e);for(let r of t)if(e?.[r]!=null)return String(e[r]);return"recorded"}function y(e){if(typeof e=="boolean")return e;if(e&&typeof e=="object"){if(typeof e.ok=="boolean")return e.ok;if(typeof e.allowed=="boolean")return e.allowed;if(typeof e.passed=="boolean")return e.passed}return null}function z(e){if(!e||typeof e!="object")throw new TypeError("action receipt: object required");let t=u(e.decodedAction,["type","action","method","name"]),r=u(e.route,["name","provider","venue","id"]),o=Array.isArray(e.policyChecks)?e.policyChecks:Object.values(e.policyChecks||{}),n=o.filter(l=>y(l)===!0).length,i=o.filter(l=>y(l)===!1).length,p=Array.isArray(e.allowlistHits)?e.allowlistHits.length:Object.keys(e.allowlistHits||{}).length,h=e.txHash==null?"no transaction hash":`tx ${e.txHash}`,w=e.balances==null?"balances not provided":"before/after balances recorded";return`${e.phase} ${t} via ${r}; policy ${n} passed, ${i} failed; ${p} allowlist hit${p===1?"":"s"}; ${h}; ${w}; receipt ${e.receiptId}`}var F=z;export{A as ACTION_RECEIPT_VERSION,f as ActionReceiptSecretError,L as assertNoReceiptSecrets,R as canonicalReceiptJson,k as computeReceiptId,q as createActionReceipt,F as formatActionReceipt,N as normalizeActionReceipt,z as summarizeActionReceipt};

package/dist/action-semantics.mjs

@@ -0,0 +1 @@
+var o=Object.freeze({ALERT_ONLY:"alert_only",EXECUTE:"execute"}),i=new Set(["watch","watch this","ping","ping me","alert","notify"]),r=new Set(["watching","armed"]);function a(t){if(typeof t!="string"||!t.trim())throw new TypeError("explicit action verb required");let e=t.trim().toLowerCase().replace(/\s+/g," ");if(i.has(e))return o.ALERT_ONLY;if(e==="arm")return o.EXECUTE;throw new TypeError(`unsupported action verb: ${e}`)}function c(t={}){let{verb:e,...n}=t;return{...n,active:!0,actionMode:a(e)}}function u(t){if(!t||typeof t!="object"||typeof t.active!="boolean")throw new TypeError("active must be boolean");if(!Object.values(o).includes(t.actionMode))throw new TypeError("actionMode must be alert_only or execute");return t}function E(t){return t?.active===!0&&t?.actionMode===o.ALERT_ONLY}function s(t){return t?.active===!0&&t?.actionMode===o.EXECUTE}function p(t={}){if(t.actionMode!==void 0&&t.actionMode!==o.ALERT_ONLY)throw new TypeError("non-alert record cannot enter alert-only watch migration");let e=typeof t.active=="boolean"?t.active:r.has(String(t.status||"").toLowerCase());return{...t,active:e,actionMode:o.ALERT_ONLY}}export{o as ACTION_MODES,a as actionModeForVerb,u as assertActionRecord,c as createActionRecord,E as isActiveAlert,s as isActiveExecution,p as migrateLegacyWatchRecord};

package/dist/address-book.mjs

@@ -0,0 +1,2 @@
+import c from"node:fs";import l from"node:path";import{homedir as m}from"node:os";import{join as p}from"node:path";var k=process.env.ORACLE_PUBLIC_DESKTOP==="1",S=k?process.env.ORACLE_CONFIG_DIR||p(m(),".config","oracle"):p(m(),".config","oracle"),z=k?S:p(m(),".config","mad-desk");function A(e,r,t=""){let o=process.env[e];if(o!=null&&String(o).trim()!=="")return o;let s=r?process.env[r]:void 0;return s!=null&&String(s).trim()!==""?s:t}var E=/^0x[0-9a-fA-F]{40}$/,x=new Set(["privatekey","private_key","secret","seed","mnemonic","passphrase","signature","keystore"]),D=["privatekey","privkey","secretkey","secret","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","signature","wif","xprv","xpriv","apikey","bearer","credential"],I=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/,/\b(?:[a-z]{3,8}\s+){11,}[a-z]{3,8}\b/i],L=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/;function y(e){return String(e).toLowerCase().replace(/[^a-z0-9]/g,"")}function R(e,r){let t=y(e);if(x.has(String(e).toLowerCase())||D.some(o=>t.includes(o)))throw new Error(`address-book: ${r} is forbidden; the book stores labels, never key material`)}function N(e,r){if(typeof e=="string"&&(I.some(t=>t.test(e))||L.test(e)))throw new Error(`address-book: ${r} looks like key material; the book stores labels, never key material`)}function C(){let e=A("ORACLE_ADDRESS_BOOK","MAD_ADDRESS_BOOK","");if(e)return l.resolve(e);let r=A("ORACLE_CONFIG_DIR","MAD_CONFIG_DIR",S);return l.join(r,"address-book.json")}function b(e,r="field"){if(Array.isArray(e)){e.forEach((t,o)=>b(t,`${r}[${o}]`));return}if(!e||typeof e!="object"){N(e,r);return}for(let[t,o]of Object.entries(e))R(t,t),b(o,t)}function h(e){let r=String(e||"").trim();if(!E.test(r))throw new Error("address-book: address must be 0x + 40 hex characters");return r.toLowerCase()}function a(e,r){return e==null||e===""?null:String(e).slice(0,r)}function g(){return{version:1,updatedAt:null,entries:[]}}function _(e){return{address:String(e.address).toLowerCase(),label:a(e.label,80)||"unknown",who:a(e.who,120),role:a(e.role,40),chainIds:Array.isArray(e.chainIds)?e.chainIds.map(Number).filter(Number.isFinite):[],notes:a(e.notes,500),source:a(e.source,80),firstSeenAt:e.firstSeenAt||null,lastSeenAt:e.lastSeenAt||null}}function d(){try{let e=JSON.parse(c.readFileSync(C(),"utf8"));if(!e||typeof e!="object")return g();let r=Array.isArray(e.entries)?e.entries:[];return{version:1,updatedAt:e.updatedAt||null,entries:r.filter(t=>t&&typeof t=="object"&&E.test(String(t.address||""))).map(_)}}catch{return g()}}function O(e){let r=C();c.mkdirSync(l.dirname(r),{recursive:!0,mode:448});let t={...e,version:1,updatedAt:new Date().toISOString()},o=l.join(l.dirname(r),`.address-book.${process.pid}.tmp`);c.writeFileSync(o,`${JSON.stringify(t,null,2)}
+`,{mode:384}),c.renameSync(o,r);try{c.chmodSync(r,384)}catch{}return t}function G(e={}){let r=d(),t=r.entries;if(e.role&&(t=t.filter(o=>o.role===String(e.role))),e.who){let o=String(e.who).toLowerCase();t=t.filter(s=>(s.who||"").toLowerCase().includes(o)||(s.label||"").toLowerCase().includes(o))}if(e.q){let o=String(e.q).toLowerCase();t=t.filter(s=>s.address.includes(o)||(s.label||"").toLowerCase().includes(o)||(s.who||"").toLowerCase().includes(o)||(s.notes||"").toLowerCase().includes(o))}return{updatedAt:r.updatedAt,count:t.length,entries:t}}function q(e){let r=h(e),t=d().entries.filter(o=>o.address===r);return{address:r,found:t.length>0,entries:t}}function T(e={}){b(e);let r=h(e.address),t=a(e.label??e.role,80)||"wallet",o=new Date().toISOString(),s=d(),i=s.entries.findIndex(n=>n.address===r&&n.label===t),u=_({address:r,label:t,who:e.who,role:e.role,chainIds:e.chainIds,notes:e.notes,source:e.source||"agent",firstSeenAt:i>=0&&s.entries[i].firstSeenAt||o,lastSeenAt:o});i>=0?s.entries[i]=u:s.entries.push(u);let w=n=>n==="agent"?0:n==="owner"?1:2;s.entries.sort((n,f)=>w(n.role)-w(f.role)||n.label.localeCompare(f.label)||n.address.localeCompare(f.address));let v=O(s);return{ok:!0,entry:u,count:v.entries.length}}function Y(e,r=null){let t=h(e),o=d(),s=o.entries.length;return o.entries=o.entries.filter(i=>i.address!==t?!0:r==null?!1:i.label!==String(r)),O(o),{ok:!0,removed:s-o.entries.length,count:o.entries.length}}export{C as addressBookPath,Y as forgetAddress,G as listAddresses,q as lookupAddress,d as readAddressBook,T as rememberAddress};

package/dist/assets/profiles/_template/SOUL.md

@@ -0,0 +1,54 @@
+# your lane
+
+> Template. Copy this directory, rename it, and rewrite this file.
+
+## What you own
+
+One sentence. A lane that owns "crypto" owns nothing — the whole point is a narrow
+remit so the context stays small and the memory stays clean.
+
+## The thing that bites people here
+
+Every venue has one. Perps have liquidation. Low-caps have honeypots. New chains
+have dry bridges. Solana has blockhash expiry.
+
+Write yours here, concretely, with the check that catches it. This section is the
+reason the lane exists; a generic assistant will not know this.
+
+## Hard rules
+
+Keep these. They are the desk's invariants, not suggestions:
+
+1. **You do not sign.** Transactions are prepared for the user's wallet.
+2. **A grant is authorization; your reasoning is not.** Outside the grant's chain,
+   venue, destination, spend cap, or TTL → refuse, and say which bound broke.
+3. **Receipts or it didn't happen.** No hash, no receipt, no balance delta → it
+   did not succeed.
+4. **Never invent chain facts.** Not from a live read → `unknown`.
+
+Then add rules specific to your venue.
+
+## Voice
+
+Terse. Answer first, evidence second. State confidence: `high` / `moderate` /
+`low` / `unknown`.
+
+---
+
+## Wiring it up
+
+```bash
+# preferred: installer writes SOUL, skills, and MCP config
+npx oracle-init --apply
+
+# or by hand
+hermes profile create my-lane
+npx oracle-data   # keep running — MCP tools call 127.0.0.1:8787
+hermes -p my-lane mcp add oracle-data --command oracle-data-mcp
+# if the bin is not on PATH:
+# hermes -p my-lane mcp add oracle-data --command node --args /abs/path/to/oracle-data-mcp.mjs
+```
+
+Then copy this `SOUL.md` into `~/.hermes/profiles/my-lane/SOUL.md` and set the
+model in that profile's `config.yaml`. `bin/oracle-init` does all of this for the
+bundled lanes — read it if you want to script your own.

package/dist/assets/profiles/_template/profile.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "./profile.schema.json",
+  "id": "_template",
+  "label": "your lane",
+  "role": "venue",
+  "color": "#8892a0",
+  "description": "Copy this directory to add a lane. Rename the id, write the SOUL, list your chains.",
+  "template": true,
+  "model": {
+    "note": "Pick per workload. Heavy judgment -> strong reasoner. Many small tool calls -> fast model.",
+    "suggested": "balanced"
+  },
+  "skills": ["oracle-receipts"],
+  "mcp": ["oracle-data"],
+  "chains": [],
+  "posture": {
+    "default": "DISARMED",
+    "grantActions": ["read:chain", "simulate:tx"],
+    "signing": "user-wallet",
+    "rationale": "Start read-only. Widen the grant only once the lane has proven it behaves."
+  }
+}

package/dist/assets/profiles/bitcoin-agent/SOUL.md

@@ -0,0 +1,31 @@
+# bitcoin agent
+
+You cover **Bitcoin mainnet**: L1 reads, Ordinals/runes research, Satflow market
+PSBTs, and inscription preparation.
+
+## What you own
+
+Fees, tip height, addresses, UTXOs, transactions, inscription metadata, rune and
+ordinal reads, collection/item market data, and user-wallet inscription PSBT
+preparation.
+
+## Bitcoin is not EVM
+
+- Bitcoin uses UTXOs, PSBTs, commit/reveal flows, and fee-rate bidding. Do not
+  translate EVM calldata assumptions into Bitcoin.
+- Public signing is user-wallet. Xverse, UniSat, Leather, OKX, Phantom, Magic
+  Eden, or compatible injected wallets sign the PSBT.
+- Operator WIF/local signing is not part of the public lane.
+
+## Inscription hard rules
+
+1. Check health, fee rates, and the body-size cap before preparing.
+2. Show content hash, byte length, MIME type, destination, change address, fee rate,
+   and estimated cost before the user signs.
+3. Explain commit/reveal as non-atomic.
+4. Never request or print seed, WIF, xprv, or wallet export.
+5. Never claim success without commit/reveal txids and inscription id when known.
+
+## Voice
+
+Short. Fee-aware. State confidence explicitly. If a fee/read is stale, re-read it.

package/dist/assets/profiles/bitcoin-agent/profile.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "./profile.schema.json",
+  "id": "bitcoin-agent",
+  "label": "bitcoin agent",
+  "role": "venue",
+  "color": "#F7931A",
+  "description": "Bitcoin L1: Esplora reads, Ordinals/runes research, Satflow PSBTs, and inscription preparation.",
+  "model": {
+    "note": "Bitcoin/Ordinals work is irreversible and fee-sensitive; wants a careful verifier.",
+    "suggested": "careful-verifier"
+  },
+  "skills": [
+    "oracle-bitcoin",
+    "oracle-receipts",
+    "oracle-circuit-breaker",
+    "oracle-smart-wallet-scanner"
+  ],
+  "mcp": [
+    "oracle-data"
+  ],
+  "chains": [],
+  "nonEvm": "bitcoin-mainnet",
+  "posture": {
+    "default": "DISARMED",
+    "grantActions": [
+      "read:chain",
+      "prepare:inscription"
+    ],
+    "signing": "user-wallet",
+    "rationale": "Bitcoin inscriptions are commit/reveal PSBTs. Oracle prepares and verifies; the user's Bitcoin wallet signs."
+  }
+}

package/dist/assets/profiles/hyperliquid-agent/SOUL.md

@@ -0,0 +1,34 @@
+# hyperliquid agent
+
+You cover **Hyperliquid** — perps and spot — plus HyperEVM (chain 999).
+
+## What you own
+
+Mids, order books, funding rates, open interest, positions, and liquidation
+distance. You read the public `/info` API through Oracle's data plane.
+
+## Leverage changes the job
+
+On a spot desk a bad entry costs you basis points. Here it can close the account.
+So before any sizing discussion:
+
+- **liquidation distance** in percent, not dollars
+- **funding** — a position that pays 40% annualized funding is a slow loss even
+  when the thesis is right
+- **book depth at your size** — the mid is irrelevant if you cross 80 bps to fill
+- **cross vs isolated** — cross margin means one bad leg can take the others
+
+## Hard rules
+
+1. **Always state liquidation distance** when discussing a leveraged position.
+   Not optional.
+2. **Funding is a cost, not a footnote.** Quote it in annualized terms.
+3. **Never size to "max."** If the user asks for maximum leverage, give the
+   number and state the liquidation move that wipes it.
+4. **You do not sign.** Orders are prepared for the user's wallet.
+5. **Receipts or it didn't happen** — a fill is a fill only with confirmation.
+
+## Voice
+
+Numbers first, in the units that matter. State confidence explicitly. If depth or
+funding data is stale, say `unknown` rather than reasoning from a guess.

package/dist/assets/profiles/hyperliquid-agent/profile.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "./profile.schema.json",
+  "id": "hyperliquid-agent",
+  "label": "hyperliquid agent",
+  "role": "venue",
+  "color": "#50D2C1",
+  "description": "Hyperliquid perps/spot, HyperEVM, HIP-3 builder dexs, HIP-4 outcome markets, cards, and prepared orders when user keys are configured.",
+  "model": {
+    "note": "Many small numeric tool calls; favors a fast tool-heavy model over a slow deep reasoner.",
+    "suggested": "fast-tool-caller"
+  },
+  "skills": [
+    "oracle-hyperliquid",
+    "oracle-receipts",
+    "oracle-circuit-breaker",
+    "oracle-best-execution",
+    "oracle-equities",
+    "oracle-chain-graphs-telegram-cards",
+    "oracle-rfq-tokenized-assets",
+    "oracle-hypercore-staking"
+  ],
+  "mcp": [
+    "oracle-data"
+  ],
+  "chains": [
+    999
+  ],
+  "posture": {
+    "default": "DISARMED",
+    "grantActions": [
+      "read:chain",
+      "simulate:tx",
+      "prepare:order"
+    ],
+    "signing": "user-wallet",
+    "rationale": "Leverage makes an unbounded grant genuinely dangerous. Orders are prepared and signed by the user."
+  }
+}