@oracle-agent/oracle 0.21.0 → 0.22.1

package/README.md

@@ -5,14 +5,15 @@
 ```bash
 npm i -g @oracle-agent/oracle            # Node >= 20.19
 oracle --version
-oracle auth login claude               # or codex / grok
+oracle setup model                     # choose OAuth or API-key access
 oracle                                  # native Oracle chat
 oracle doctor                           # verify local posture
 ```
 
-Prefer an API key instead? `oracle auth api-key openrouter` accepts hidden
-interactive input. `oracle auth status` reports providers without printing
-credentials. Linux, Windows, and macOS apps are in beta.
+`oracle setup model` offers Anthropic, OpenAI Codex, and Grok OAuth plus secure
+API-key setup for OpenRouter, OpenAI, Anthropic, xAI, DeepSeek, Gemini, Kimi,
+Mistral, and custom OpenAI-compatible providers. `oracle auth status` reports
+providers without printing credentials. Linux, Windows, and macOS apps are in beta.
 
 The CLI, source, and desktop beta are public to everyone. Locals Only holders
 receive a 0% Oracle integrator fee; the NFT does not gate product access.
@@ -202,7 +203,7 @@ known answer. This matters: the canonical QuoterV2 address also has bytecode on
 Base, but does not price that chain's pairs. A codesize check would have
 allowlisted the wrong contract.
 
-**73 provider modules** in the read/quote catalog, covering **219 unique
+**72 provider modules** in the read/quote catalog, covering **219 unique
 protocols/venues** across EVM, Solana, and Bitcoin (115 EVM + cross-chain, 98
 Solana venues backed by 101 verified Jupiter program IDs, 6 Bitcoin surfaces).
 One module can cover many protocols: the Jupiter module alone routes 98 Solana

package/SETUP.md

@@ -39,13 +39,19 @@ configuration enables strict engine checks, so verify `node --version` yourself.
 
 ## 2. Authenticate a model provider
 
+List every standalone choice with safe status and copyable setup commands:
+
+```bash
+oracle setup model
+```
+
 ### OAuth
 
 ```bash
-oracle auth login claude
+oracle setup model claude
 # or
-oracle auth login codex
-oracle auth login grok
+oracle setup model codex
+oracle setup model grok
 ```
 
 The command opens the provider's authorization flow and selects its default
@@ -54,8 +60,8 @@ model. Use `--no-browser` when the browser must be opened manually.
 ### API key
 
 ```bash
-oracle auth api-key openrouter
-# also supported: openai, xai, deepseek, gemini, custom
+oracle setup model openrouter
+# also supported: openai, anthropic, xai, deepseek, gemini, kimi, mistral, custom
 ```
 
 Interactive API-key entry is hidden. Do not put a key directly in the command

package/dist/assets/skills/xurl.md

@@ -0,0 +1,40 @@
+---
+name: xurl
+description: Use when reading or posting on X/Twitter via the official xurl CLI through Oracle's bounded xurl tool.
+---
+
+# xurl (Oracle-bounded)
+
+Oracle has no shell. Talk to X only through the `xurl` tool.
+
+## Preconditions
+- `ORACLE_XURL_ENABLED=true` in `~/.config/oracle/env`
+- Local `xurl` binary on PATH (or `ORACLE_XURL_BIN`)
+- Operator already ran `xurl auth oauth2` outside the agent; tokens live in `~/.xurl`
+- Never read `~/.xurl` into context. Never pass `--verbose` or inline secrets.
+
+## Read (default)
+```
+xurl command=whoami
+xurl command=user handle=demi_hl
+xurl command=read id=https://x.com/user/status/123
+xurl command=search query="from:demi_hl" limit=5
+xurl command=timeline limit=10
+xurl command=mentions limit=10
+xurl command=auth args=["status"]
+```
+
+## Write (requires ORACLE_XURL_ALLOW_WRITE=true)
+```
+xurl command=post text="gm"
+xurl command=reply id=123 text="agreed"
+xurl command=like id=123
+xurl command=follow handle=someone
+```
+
+Confirm target + wording with the user before any write.
+
+## Failures
+- `CreditsDepleted` / free-tier: reads need Basic; use browser_navigate on x.com as fallback for public pages.
+- Auth errors: tell the user to re-run `xurl auth oauth2 --app <app> <user>` in their own terminal.
+- Never attempt `auth apps add` or oauth from the agent.