@oracle-agent/oracle 0.2.0 → 0.2.2

package/public/oracle-splash/mesh-graph.svg

@@ -0,0 +1,216 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1400 900" width="1400" height="900">
+  <defs>
+    <style>
+      @import url('https://fonts.googleapis.com/css2?family=Cormorant+Garamond:ital,wght@0,400;0,500;1,400;1,500&amp;family=Outfit:wght@300;400;500&amp;family=IBM+Plex+Mono:wght@400;500&amp;display=swap');
+    </style>
+    <radialGradient id="bg" cx="50%" cy="35%" r="70%">
+      <stop offset="0%" stop-color="#111925"/>
+      <stop offset="45%" stop-color="#0B1018"/>
+      <stop offset="100%" stop-color="#070b10"/>
+    </radialGradient>
+    <radialGradient id="orb1" cx="50%" cy="50%" r="50%">
+      <stop offset="0%" stop-color="#7CC4FF" stop-opacity="0.18"/>
+      <stop offset="55%" stop-color="#7CC4FF" stop-opacity="0.04"/>
+      <stop offset="100%" stop-color="#7CC4FF" stop-opacity="0"/>
+    </radialGradient>
+    <radialGradient id="orb2" cx="50%" cy="50%" r="50%">
+      <stop offset="0%" stop-color="#50D2C1" stop-opacity="0.10"/>
+      <stop offset="100%" stop-color="#50D2C1" stop-opacity="0"/>
+    </radialGradient>
+    <pattern id="grid" width="48" height="48" patternUnits="userSpaceOnUse">
+      <path d="M 48 0 L 0 0 0 48" fill="none" stroke="rgba(124,196,255,0.06)" stroke-width="1"/>
+    </pattern>
+    <linearGradient id="panelStroke" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="rgba(124,196,255,0.28)"/>
+      <stop offset="100%" stop-color="rgba(124,196,255,0.08)"/>
+    </linearGradient>
+    <linearGradient id="cardFill" x1="0%" y1="0%" x2="0%" y2="100%">
+      <stop offset="0%" stop-color="#152031"/>
+      <stop offset="100%" stop-color="#111925"/>
+    </linearGradient>
+    <filter id="softGlow" x="-50%" y="-50%" width="200%" height="200%">
+      <feGaussianBlur stdDeviation="8" result="b"/>
+      <feMerge>
+        <feMergeNode in="b"/>
+        <feMergeNode in="SourceGraphic"/>
+      </feMerge>
+    </filter>
+    <filter id="nodeGlow" x="-40%" y="-40%" width="180%" height="180%">
+      <feGaussianBlur stdDeviation="4" result="b"/>
+      <feMerge>
+        <feMergeNode in="b"/>
+        <feMergeNode in="SourceGraphic"/>
+      </feMerge>
+    </filter>
+    <marker id="ah-blue" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#7CC4FF"/>
+    </marker>
+    <marker id="ah-poly" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#3B82F6"/>
+    </marker>
+    <marker id="ah-hl" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#50D2C1"/>
+    </marker>
+    <marker id="ah-rh" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#d7ff4d"/>
+    </marker>
+    <marker id="ah-sol" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#9945FF"/>
+    </marker>
+    <marker id="ah-btc" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#F0B90B"/>
+    </marker>
+    <marker id="ah-mute" markerWidth="8" markerHeight="8" refX="6" refY="4" orient="auto">
+      <path d="M0,0 L8,4 L0,8 Z" fill="#5B738F"/>
+    </marker>
+  </defs>
+
+  <!-- page bg -->
+  <rect width="1400" height="900" fill="url(#bg)"/>
+  <rect width="1400" height="900" fill="url(#grid)"/>
+  <ellipse cx="700" cy="420" rx="520" ry="280" fill="url(#orb1)"/>
+  <ellipse cx="980" cy="620" rx="280" ry="180" fill="url(#orb2)"/>
+
+  <!-- ========== brand top-left (oracle) ========== -->
+  <g id="brand">
+    <circle cx="52" cy="48" r="7" fill="#7CC4FF" filter="url(#softGlow)"/>
+    <circle cx="52" cy="48" r="3.2" fill="#0B1018"/>
+    <text x="70" y="54" fill="#E8F1FA" font-family="Outfit, system-ui, sans-serif" font-size="26" font-weight="400" letter-spacing="-0.3">oracle</text>
+    <text x="52" y="78" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.8">MULTI-PROFILE MESH  ·  POWERED BY HERMES</text>
+  </g>
+
+  <!-- right meta -->
+  <text x="1350" y="48" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="end" letter-spacing="1.5">FOR USERS</text>
+  <text x="1350" y="68" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="13" text-anchor="end">graph · customizable · add agents</text>
+
+  <!-- ========== main glass panel ========== -->
+  <rect x="48" y="110" width="1304" height="730" rx="22" fill="#111925" fill-opacity="0.72" stroke="url(#panelStroke)" stroke-width="1.2"/>
+  <!-- panel header bar -->
+  <rect x="48" y="110" width="1304" height="52" rx="22" fill="#152031" fill-opacity="0.9"/>
+  <rect x="48" y="140" width="1304" height="22" fill="#152031" fill-opacity="0.9"/>
+  <text x="72" y="142" fill="#7CC4FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="11" letter-spacing="1.6">FOR USERS</text>
+  <text x="700" y="142" fill="#9BB6D1" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="11" text-anchor="middle" letter-spacing="1.6">MULTI-PROFILE // CUSTOMIZABLE</text>
+  <text x="1328" y="142" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="11" text-anchor="end" letter-spacing="1.4">POWERED BY HERMES</text>
+
+  <!-- pills -->
+  <g font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.2">
+    <rect x="72" y="182" width="128" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="136" y="200" fill="#A7D8FF" text-anchor="middle">MULTI PROFILES</text>
+    <rect x="210" y="182" width="128" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="274" y="200" fill="#A7D8FF" text-anchor="middle">CUSTOMIZABLE</text>
+    <rect x="348" y="182" width="112" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="404" y="200" fill="#A7D8FF" text-anchor="middle">ADD AGENTS</text>
+    <rect x="470" y="182" width="118" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="529" y="200" fill="#A7D8FF" text-anchor="middle">MORE CHAINS</text>
+    <rect x="598" y="182" width="148" height="28" rx="14" fill="none" stroke="rgba(124,196,255,0.28)" stroke-width="1"/>
+    <text x="672" y="200" fill="#A7D8FF" text-anchor="middle">POWERED BY HERMES</text>
+  </g>
+
+  <!-- ========== connectors (behind nodes) ========== -->
+  <!-- input -> oracle -->
+  <line x1="700" y1="310" x2="700" y2="360" stroke="#7CC4FF" stroke-width="2.5" marker-end="url(#ah-blue)" filter="url(#nodeGlow)"/>
+  <line x1="700" y1="310" x2="700" y2="360" stroke="#7CC4FF" stroke-width="10" stroke-opacity="0.12"/>
+
+  <!-- oracle hub fan-out to profiles -->
+  <!-- poly left -->
+  <path d="M620 450 C560 450 420 450 280 520" fill="none" stroke="#3B82F6" stroke-width="2" marker-end="url(#ah-poly)"/>
+  <path d="M620 450 C560 450 420 450 280 520" fill="none" stroke="#3B82F6" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- hl center-left -->
+  <path d="M660 470 C640 500 560 520 500 560" fill="none" stroke="#50D2C1" stroke-width="2" marker-end="url(#ah-hl)"/>
+  <path d="M660 470 C640 500 560 520 500 560" fill="none" stroke="#50D2C1" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- rh center -->
+  <line x1="700" y1="470" x2="700" y2="560" stroke="#d7ff4d" stroke-width="2" marker-end="url(#ah-rh)"/>
+  <line x1="700" y1="470" x2="700" y2="560" stroke="#d7ff4d" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- sol center-right -->
+  <path d="M740 470 C760 500 840 520 900 560" fill="none" stroke="#9945FF" stroke-width="2" marker-end="url(#ah-sol)"/>
+  <path d="M740 470 C760 500 840 520 900 560" fill="none" stroke="#9945FF" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- btc right -->
+  <path d="M780 450 C860 450 1000 450 1120 520" fill="none" stroke="#F0B90B" stroke-width="2" marker-end="url(#ah-btc)"/>
+  <path d="M780 450 C860 450 1000 450 1120 520" fill="none" stroke="#F0B90B" stroke-width="8" stroke-opacity="0.10"/>
+  <!-- builder bottom -->
+  <path d="M700 470 C700 510 700 640 700 680" fill="none" stroke="#5B738F" stroke-width="1.5" stroke-dasharray="4 4" marker-end="url(#ah-mute)"/>
+
+  <!-- ========== 01 INPUT / COMMAND ========== -->
+  <g filter="url(#nodeGlow)">
+    <rect x="575" y="230" width="250" height="80" rx="14" fill="url(#cardFill)" stroke="rgba(124,196,255,0.35)" stroke-width="1.2"/>
+    <text x="700" y="258" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="middle" letter-spacing="1.6">YOU</text>
+    <text x="700" y="282" fill="#E8F1FA" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500" text-anchor="middle">Input / Command</text>
+    <text x="700" y="300" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300" text-anchor="middle">what you type or ask</text>
+  </g>
+
+  <!-- ========== 02 CONTROL PLANE · oracle ========== -->
+  <g filter="url(#nodeGlow)">
+    <rect x="520" y="360" width="360" height="110" rx="16" fill="url(#cardFill)" stroke="rgba(124,196,255,0.45)" stroke-width="1.4"/>
+    <rect x="520" y="360" width="360" height="110" rx="16" fill="rgba(124,196,255,0.04)"/>
+    <text x="700" y="392" fill="#7CC4FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="middle" letter-spacing="1.8">CONTROL PLANE</text>
+    <text x="700" y="424" fill="#E8F1FA" font-family="Cormorant Garamond, Georgia, serif" font-size="34" font-weight="500" font-style="italic" text-anchor="middle">oracle</text>
+    <text x="700" y="450" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300" text-anchor="middle">route  ·  bound  ·  evolve</text>
+  </g>
+
+  <!-- ========== 03 PROFILE CARDS ========== -->
+  <!-- polymarket -->
+  <g>
+    <rect x="80" y="520" width="260" height="130" rx="16" fill="#111925" stroke="rgba(59,130,246,0.45)" stroke-width="1.2"/>
+    <rect x="80" y="520" width="260" height="130" rx="16" fill="rgba(59,130,246,0.06)"/>
+    <text x="100" y="548" fill="#3B82F6" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="100" y="578" fill="#A7D8FF" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">polymarket agent</text>
+    <text x="100" y="600" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">events · arb · markets</text>
+    <rect x="100" y="618" width="100" height="20" rx="10" fill="none" stroke="rgba(59,130,246,0.35)"/>
+    <text x="150" y="632" fill="#7CC4FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Polymarket</text>
+  </g>
+
+  <!-- hyperliquid -->
+  <g>
+    <rect x="370" y="560" width="260" height="130" rx="16" fill="#111925" stroke="rgba(80,210,193,0.45)" stroke-width="1.2"/>
+    <rect x="370" y="560" width="260" height="130" rx="16" fill="rgba(80,210,193,0.06)"/>
+    <text x="390" y="588" fill="#50D2C1" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="390" y="618" fill="#A8F0E6" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">hyperliquid agent</text>
+    <text x="390" y="640" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">perps · hip-3/4 · ta</text>
+    <rect x="390" y="658" width="170" height="20" rx="10" fill="none" stroke="rgba(80,210,193,0.35)"/>
+    <text x="475" y="672" fill="#50D2C1" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Hyperliquid · HyperEVM 999</text>
+  </g>
+
+  <!-- robinhood -->
+  <g>
+    <rect x="660" y="560" width="260" height="130" rx="16" fill="#111925" stroke="rgba(215,255,77,0.40)" stroke-width="1.2"/>
+    <rect x="660" y="560" width="260" height="130" rx="16" fill="rgba(215,255,77,0.05)"/>
+    <text x="680" y="588" fill="#d7ff4d" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="680" y="618" fill="#EAF7B0" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">robinhood agent</text>
+    <text x="680" y="640" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">markets · nfts · names</text>
+    <rect x="680" y="658" width="150" height="20" rx="10" fill="none" stroke="rgba(215,255,77,0.35)"/>
+    <text x="755" y="672" fill="#d7ff4d" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Robinhood Chain 4663</text>
+  </g>
+
+  <!-- solana -->
+  <g>
+    <rect x="950" y="560" width="200" height="130" rx="16" fill="#111925" stroke="rgba(153,69,255,0.45)" stroke-width="1.2"/>
+    <rect x="950" y="560" width="200" height="130" rx="16" fill="rgba(153,69,255,0.06)"/>
+    <text x="970" y="588" fill="#9945FF" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="970" y="618" fill="#D4B3FF" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">solana agent</text>
+    <text x="970" y="640" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">jup · nfts · dexs</text>
+    <rect x="970" y="658" width="70" height="20" rx="10" fill="none" stroke="rgba(153,69,255,0.35)"/>
+    <text x="1005" y="672" fill="#c4a0ff" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">Solana</text>
+  </g>
+
+  <!-- bitcoin (top-right of profile row) -->
+  <g>
+    <rect x="1160" y="520" width="160" height="130" rx="16" fill="#111925" stroke="rgba(240,185,11,0.40)" stroke-width="1.2"/>
+    <rect x="1160" y="520" width="160" height="130" rx="16" fill="rgba(240,185,11,0.05)"/>
+    <text x="1180" y="548" fill="#F0B90B" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" letter-spacing="1.6">PROFILE</text>
+    <text x="1180" y="578" fill="#F8E29A" font-family="Outfit, system-ui, sans-serif" font-size="18" font-weight="500">bitcoin</text>
+    <text x="1180" y="600" fill="#9BB6D1" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">ord · runes</text>
+    <rect x="1180" y="618" width="50" height="20" rx="10" fill="none" stroke="rgba(240,185,11,0.35)"/>
+    <text x="1205" y="632" fill="#F0B90B" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="9" text-anchor="middle">BTC</text>
+  </g>
+
+  <!-- protocol builder -->
+  <g>
+    <rect x="520" y="710" width="360" height="72" rx="14" fill="#111925" stroke="rgba(124,196,255,0.22)" stroke-width="1" stroke-dasharray="5 4"/>
+    <text x="700" y="738" fill="#5B738F" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="middle" letter-spacing="1.6">BUILDER</text>
+    <text x="700" y="762" fill="#E8F1FA" font-family="Outfit, system-ui, sans-serif" font-size="16" font-weight="400" text-anchor="middle">protocol builder  ·  gated templates  ·  user-signed deploy</text>
+  </g>
+
+  <!-- footer -->
+  <text x="72" y="870" fill="#5B738F" font-family="Outfit, system-ui, sans-serif" font-size="12" font-weight="300">oracle routes input/command across a live multi-profile desk. profiles evolve. chains get added. not one bot.</text>
+  <text x="1328" y="870" fill="#3a6f99" font-family="IBM Plex Mono, ui-monospace, monospace" font-size="10" text-anchor="end">self-custody · prepare → local sign</text>
+</svg>

package/scripts/protocol-template-gate.mjs

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { listProtocolTemplates, runProtocolTemplateGate } from "../src/protocol-templates/gate.mjs";
+
+const id = process.argv[2];
+if (!id || id === "list") {
+  console.log(JSON.stringify(listProtocolTemplates(), null, 2));
+  process.exit(0);
+}
+try {
+  const r = runProtocolTemplateGate(id, { allowSkipStatic: process.env.REQUIRE_SLITHER !== "1" });
+  console.log(JSON.stringify(r, null, 2));
+} catch (e) {
+  console.error(String(e.message || e));
+  process.exit(1);
+}

package/skills/oracle-protocol-builder/SKILL.md

@@ -1,38 +1,59 @@
 ---
 name: oracle-protocol-builder
-description: Use when the user wants Oracle to act as a builder: scaffold contracts/apps, prepare unsigned deploys, and create launch runbooks.
+description: Use when the user wants Oracle to scaffold/deploy protocol templates. Gated Foundry templates; prepare-only deploy; not a firm audit.
 ---
 
 # Protocol builder
 
-Oracle can be a builder, not only a trader/analyzer. The boundary stays the same:
-it writes and prepares; the user signs and deploys.
+Oracle scaffolds and **prepares unsigned deploys**. The user signs. Custody boundary unchanged.
 
-## Builder modes
+## Security gate (v1)
 
-- scaffold contracts and tests
-- scaffold mint/gacha/claim pages
-- build DEX/pool/router integrations
-- write deploy and verify scripts
-- produce unsigned deploy or admin transactions
-- create launch runbooks and monitoring dashboards
-- audit authority, upgradeability, fees, and emergency controls
+Before any template deploy prepare:
 
-## Required order
+1. `forge test` must pass on the template
+2. Slither runs when installed (optional skip if missing; set `REQUIRE_SLITHER=1` to hard-require)
+3. JS `runProtocolTemplateGate` / `prepareTemplateDeploy` refuse otherwise
 
-1. Authority model: owner, admin, upgrader, pauser, treasury, withdrawer.
-2. Threat model: what can go wrong and who can rug or halt.
-3. Tests: caps, payments, roles, upgrades, withdrawals, randomness, routing.
-4. Simulation: deploy, initialize, and first user action.
-5. Prepare: unsigned artifact only, bound to chain and destination.
-6. Receipt: deployed address, source verification, event logs, and state readback.
+```js
+// list
+data.call("protocol-templates", "list")
+// gate
+data.call("protocol-templates", "gate", { templateId: "safe-erc20" })
+// unsigned deploy prepare (stamped)
+data.call("protocol-templates", "prepareDeploy", {
+  templateId: "safe-erc20",
+  chainId: 8453,
+  args: [name, symbol, supply, initialHolder, initialOwner],
+})
+```
 
-## Refusal line
+CLI: `npm run protocol:gate -- safe-erc20`
+
+## Shipped template: `safe-erc20`
+
+- Fixed supply, mint once in constructor (no hidden mint)
+- Ownable2Step + pause
+- No tax / blacklist / max-tx / upgrade proxy
+- Foundry tests included
+
+## Honesty
 
-Refuse hidden drains, honeypots, wash-trading systems, undisclosed tax switches,
-fake TVL, or any contract whose main purpose is deceiving buyers.
+**Reviewed templates + automated tests ≠ paid Solidity audit.**
 
-## Output standard
+Docs and prepare envelopes always set `firmAudit: false` and carry the disclaimer.
+Mainnet TVL → independent firm audit.
+
+## Required order (custom work)
+
+1. Authority model  
+2. Threat model  
+3. Tests (Foundry)  
+4. Static analysis when available  
+5. Gate green  
+6. Prepare unsigned only  
+7. User signs + verify source  
+
+## Refusal line
 
-Lead with the authority model and irreversible choices. Then the file plan or
-artifact. End with the exact tests/simulations run and what remains unverified.
+Refuse hidden drains, honeypots, wash-trading systems, undisclosed tax switches, fake TVL, or any contract whose main purpose is deceiving buyers.

package/src/data/catalog.mjs

@@ -59,6 +59,15 @@ registerProvider({
   description: "Hyperliquid public /info",
 });
 
+registerProvider({
+  id: "protocol-templates",
+  venue: "protocol-builder",
+  chainIds: [],
+  auth: "none",
+  ops: ["health", "list", "gate", "prepareDeploy"],
+  description: "Gated Safe* Solidity templates: forge test required before unsigned deploy prepare. NOT a firm audit.",
+});
+
 registerProvider({
   id: "poly-public",
   venue: "poly",

package/src/data/desk-data.mjs

@@ -29,6 +29,8 @@ import * as hlstake from "./providers/hl-staking.mjs";
 import * as hlmarkets from "./providers/hl-markets.mjs";
 import * as hloutcome from "./providers/hl-outcome.mjs";
 import * as polyclob from "./providers/poly-clob.mjs";
+import * as protoTpl from "../protocol-templates/prepare-deploy.mjs";
+import { listProtocolTemplates, runProtocolTemplateGate } from "../protocol-templates/gate.mjs";
 import * as hlperps from "./providers/hl-perps.mjs";
 import * as gecko from "./providers/geckoterminal.mjs";
 import * as curve from "./providers/curve.mjs";
@@ -218,6 +220,12 @@ const OPS = {
     prepareOrder: (o, a = {}) => hloutcome.hlPrepareOutcomeOrder(a, o),
     prepareCancel: (o, a = {}) => hloutcome.hlPrepareOutcomeCancel(a, o),
   },
+  "protocol-templates": {
+    health: () => ({ ok: true, templates: listProtocolTemplates().map((t) => t.id), firmAudit: false }),
+    list: () => listProtocolTemplates(),
+    gate: (o, a = {}) => runProtocolTemplateGate(a.templateId || a.id, o),
+    prepareDeploy: (o, a = {}) => protoTpl.prepareTemplateDeploy(a, o),
+  },
   "poly-clob": {
     prepareOrder: (o, a = {}) => {
       // prepare is sync; wrap for dataCall

package/src/data/providers/poly-clob.mjs

@@ -1,15 +1,13 @@
 import { stampPrepared } from "../../prepare-envelope.mjs";
-// Polymarket CLOB — prepare + local sign helpers for Oracle.
-// Prepare path builds unsigned EIP-712 order envelopes (no keys).
-// Sign/post is for @oracle-agent/operator poly-exec (local only, no VPS).
+// Polymarket CLOB — prepare-only for Oracle.
+// Builds unsigned EIP-712 order envelopes (no keys).
+// Sign/post live in @oracle-agent/operator poly-exec only.
+// Deep-import sign/post helpers hard-refuse here.
 
 import { createHmac, randomInt } from "node:crypto";
 import {
-  Wallet,
   keccak256,
   concat,
-  hexlify,
-  toUtf8Bytes,
   zeroPadValue,
   getCreate2Address,
   AbiCoder,
@@ -226,204 +224,29 @@ export function buildOrderV2Message(params = {}) {
   };
 }
 
-/** ERC-7739-wrapped POLY_1271 signature for deposit wallets (sigType=3). */
-export async function signOrderV2_1271(wallet, orderMessage, exchangeAddress) {
-  const ORDER_TYPE_STRING =
-    "Order(uint256 salt,address maker,address signer,uint256 tokenId," +
-    "uint256 makerAmount,uint256 takerAmount,uint8 side,uint8 signatureType," +
-    "uint256 timestamp,bytes32 metadata,bytes32 builder)";
-  const ORDER_TYPE_HASH = keccak256(toUtf8Bytes(ORDER_TYPE_STRING));
-  const DOMAIN_TYPE_HASH = keccak256(
-    toUtf8Bytes("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)")
+/** Deep-import refuse: signing lives in @oracle-agent/operator. */
+export async function signOrderV2_1271() {
+  throw new Error(
+    "poly-clob.signOrderV2_1271 refused: @oracle-agent/oracle is prepare-only. Sign via @oracle-agent/operator poly-exec."
   );
-  const NAME_HASH = keccak256(toUtf8Bytes(EIP712_DOMAIN_V2.name));
-  const VERSION_HASH = keccak256(toUtf8Bytes(EIP712_DOMAIN_V2.version));
-
-  const appDomainSep = keccak256(
-    AbiCoder.defaultAbiCoder().encode(
-      ["bytes32", "bytes32", "bytes32", "uint256", "address"],
-      [DOMAIN_TYPE_HASH, NAME_HASH, VERSION_HASH, BigInt(POLY_CHAIN_ID), exchangeAddress]
-    )
-  );
-
-  const contentsHash = keccak256(
-    AbiCoder.defaultAbiCoder().encode(
-      [
-        "bytes32",
-        "uint256",
-        "address",
-        "address",
-        "uint256",
-        "uint256",
-        "uint256",
-        "uint8",
-        "uint8",
-        "uint256",
-        "bytes32",
-        "bytes32",
-      ],
-      [
-        ORDER_TYPE_HASH,
-        BigInt(orderMessage.salt),
-        orderMessage.maker,
-        orderMessage.signer,
-        BigInt(orderMessage.tokenId),
-        BigInt(orderMessage.makerAmount),
-        BigInt(orderMessage.takerAmount),
-        orderMessage.side,
-        orderMessage.signatureType,
-        BigInt(orderMessage.timestamp),
-        orderMessage.metadata,
-        orderMessage.builder,
-      ]
-    )
-  );
-
-  const innerSig = await wallet.signTypedData(
-    { ...EIP712_DOMAIN_V2, verifyingContract: exchangeAddress },
-    {
-      TypedDataSign: [
-        { name: "contents", type: "Order" },
-        { name: "name", type: "string" },
-        { name: "version", type: "string" },
-        { name: "chainId", type: "uint256" },
-        { name: "verifyingContract", type: "address" },
-        { name: "salt", type: "bytes32" },
-      ],
-      Order: ORDER_TYPES_V2.Order,
-    },
-    {
-      contents: orderMessage,
-      name: "DepositWallet",
-      version: "1",
-      chainId: POLY_CHAIN_ID,
-      verifyingContract: orderMessage.maker, // deposit wallet (ERC-1271)
-      salt: BYTES32_ZERO,
-    }
-  );
-
-  const orderTypeHex = hexlify(toUtf8Bytes(ORDER_TYPE_STRING));
-  const lenHex = "0x" + (186).toString(16).padStart(4, "0");
-  return concat([innerSig, appDomainSep, contentsHash, orderTypeHex, lenHex]);
 }
 
 /**
- * Build + sign V2 order.
- * mode:
- *   - eoa (0): maker=funder or wallet
- *   - deposit (3): maker=signer=deriveDepositWallet(eoa)  [default auto for desk agent]
+ * Deep-import refuse: signed order build lives in @oracle-agent/operator.
  */
-export async function buildSignedOrderV2(wallet, params = {}) {
-  const eoa = wallet.address;
-  let signatureType = params.signatureType;
-  let funder = params.funderAddress || eoa;
-
-  // Auto deposit-wallet flow when requested or when env forces it
-  const preferDeposit =
-    params.useDepositWallet === true ||
-    process.env.MAD_POLY_USE_DEPOSIT_WALLET === "1" ||
-    signatureType === 3;
-
-  if (preferDeposit || signatureType === undefined) {
-    // default path for accounts that reject EOA maker: try deposit wallet
-    if (preferDeposit || process.env.MAD_POLY_USE_DEPOSIT_WALLET !== "0") {
-      const dw = deriveDepositWallet(eoa);
-      // if caller didn't force eoa-only, use deposit when useDepositWallet or auto
-      if (preferDeposit || params.autoDeposit !== false) {
-        // keep eoa as default unless deposit forced — placeLimitOrder sets useDepositWallet on retry
-      }
-    }
-  }
-
-  if (params.useDepositWallet || signatureType === 3) {
-    funder = deriveDepositWallet(eoa);
-    signatureType = 3;
-  } else {
-    signatureType = signatureType ?? 0;
-  }
-
-  // sigType 3: maker = deposit wallet; signer = EOA (must match API key address)
-  // (CLOB: "order signer address has to be the address of the API KEY")
-  const orderSigner = eoa;
-  const built = buildOrderV2Message({
-    ...params,
-    maker: funder,
-    signer: orderSigner,
-    signatureType,
-  });
-
-  const signature =
-    signatureType === 3
-      ? await signOrderV2_1271(wallet, built.value, built.exchange)
-      : await wallet.signTypedData(built.domain, built.types, built.value);
-
-  return {
-    order: {
-      salt: parseInt(built.value.salt, 10),
-      maker: built.value.maker,
-      signer: built.value.signer,
-      tokenId: built.value.tokenId,
-      makerAmount: built.value.makerAmount,
-      takerAmount: built.value.takerAmount,
-      side: built.side,
-      signatureType: built.value.signatureType,
-      timestamp: built.value.timestamp,
-      metadata: built.value.metadata,
-      builder: built.value.builder,
-      expiration: "0",
-      signature,
-    },
-    owner: null,
-    orderType: built.orderType,
-    _meta: {
-      exchange: built.exchange,
-      notionalUsdc: built.notionalUsdc,
-      domain: built.domain,
-      types: built.types,
-      value: built.value,
-      depositWallet: signatureType === 3 ? funder : null,
-      eoa,
-    },
-  };
+export async function buildSignedOrderV2() {
+  throw new Error(
+    "poly-clob.buildSignedOrderV2 refused: @oracle-agent/oracle is prepare-only. Sign via @oracle-agent/operator poly-exec."
+  );
 }
 
 /**
- * POST signed order to CLOB. Requires L2 creds.
+ * Deep-import refuse: CLOB submit lives in @oracle-agent/operator.
  */
-export async function postClobOrder({
-  payload,
-  creds,
-  address,
-  clobRest = POLY_CLOB_REST,
-  fetchImpl = globalThis.fetch,
-} = {}) {
-  if (!creds?.key || !creds?.secret || !creds?.passphrase) {
-    throw new Error("L2 creds required (key/secret/passphrase)");
-  }
-  const body = JSON.stringify(payload);
-  const path = "/order";
-  const headers = buildL2Headers(creds, address, "POST", path, body);
-  const res = await fetchImpl(`${clobRest.replace(/\/$/, "")}${path}`, {
-    method: "POST",
-    headers,
-    body,
-  });
-  const text = await res.text();
-  let data;
-  try {
-    data = JSON.parse(text);
-  } catch {
-    data = { raw: text };
-  }
-  if (!res.ok) {
-    const err = new Error(
-      `CLOB POST /order failed (${res.status}): ${text.slice(0, 300)}`
-    );
-    err.status = res.status;
-    err.body = data;
-    throw err;
-  }
-  return data;
+export async function postClobOrder() {
+  throw new Error(
+    "poly-clob.postClobOrder refused: @oracle-agent/oracle is prepare-only. Submit via @oracle-agent/operator poly-exec."
+  );
 }
 
 /** Max notional USDC for a single desk order (env MAD_POLY_MAX_NOTIONAL, default 25). */