@oracle-agent/oracle 0.22.10 → 0.22.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.22.10",
+  "version": "0.22.12",
   "description": "Oracle: standalone prepare-only multichain agent control plane. Runs its own agent loop, or plugs into any MCP-compatible harness. Policy-bounded intents for a user-signed wallet; the public package never takes your key.",
   "license": "BUSL-1.1",
   "type": "module",

package/public/agent-connect/app.js

@@ -5,7 +5,7 @@
   const COMMAND = "npx";
   const ARGS = ["-y", "--package", PACKAGE, "oracle-data-mcp"];
   const INIT_COMMAND = "npx -y --package @oracle-agent/oracle oracle-init";
-  const NATIVE_COMMAND = "npm i -g @oracle-agent/oracle && oracle setup model && oracle chat";
+  const NATIVE_COMMAND = "curl -fsSL https://oracle.demi.la/install.sh | bash && oracle setup model && oracle chat";
 
   const apiUrl = document.querySelector("#api-url");
   const apiKey = document.querySelector("#api-key");

package/public/install.sh

@@ -0,0 +1,300 @@
+#!/usr/bin/env bash
+# Oracle public installer — prepare-only crypto agent control plane.
+#
+#   curl -fsSL https://oracle.demi.la/install.sh | bash
+#   curl -fsSL https://oracle.demi.la/install.sh | bash -s -- --version latest
+#   curl -fsSL https://oracle.demi.la/install.sh | bash -s -- --prefix "$HOME/.local"
+#
+# What this does:
+#   - installs @oracle-agent/oracle into a user prefix (no root, no global npm -g)
+#   - puts `oracle` on PATH via ~/.local/bin (or --prefix/bin)
+#   - never asks for keys, seeds, or wallet approval
+#
+# What this never does:
+#   - sign or broadcast transactions
+#   - install a private signer/executor
+#   - require Hermes or any other agent harness
+set -euo pipefail
+
+ORACLE_INSTALL_VERSION="${ORACLE_INSTALL_VERSION:-latest}"
+ORACLE_INSTALL_PREFIX="${ORACLE_INSTALL_PREFIX:-}"
+ORACLE_INSTALL_FORCE_NODE="${ORACLE_INSTALL_FORCE_NODE:-0}"
+ORACLE_NPM_PACKAGE="${ORACLE_NPM_PACKAGE:-@oracle-agent/oracle}"
+MIN_NODE_MAJOR=20
+MIN_NODE_MINOR=19
+NONINTERACTIVE=1
+DO_SETUP=0
+DO_DOCTOR=1
+PRINT_ONLY=0
+
+log()  { printf 'oracle-install: %s\n' "$*"; }
+err()  { printf 'oracle-install: ERROR: %s\n' "$*" >&2; }
+die()  { err "$*"; exit 1; }
+have() { command -v "$1" >/dev/null 2>&1; }
+
+usage() {
+  cat <<'EOF'
+Oracle install (curl)
+
+  curl -fsSL https://oracle.demi.la/install.sh | bash
+  curl -fsSL https://oracle.demi.la/install.sh | bash -s -- [options]
+
+Options:
+  --version <ver|latest>   Package version (default: latest)
+  --prefix <dir>           Install root (default: ~/.local)
+  --home <dir>             Package home (default: ~/.local/share/oracle)
+  --no-doctor              Skip post-install doctor
+  --setup                  Run `oracle setup model` after install (interactive)
+  --print                  Print plan only
+  -h, --help               Show help
+
+Env:
+  ORACLE_INSTALL_VERSION   same as --version
+  ORACLE_INSTALL_PREFIX    same as --prefix
+  ORACLE_HOME              package data dir override
+  npm_config_registry      custom npm registry
+EOF
+}
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --version) ORACLE_INSTALL_VERSION="${2:-}"; shift 2 ;;
+    --prefix)  ORACLE_INSTALL_PREFIX="${2:-}"; shift 2 ;;
+    --home)    ORACLE_HOME_OVERRIDE="${2:-}"; shift 2 ;;
+    --no-doctor) DO_DOCTOR=0; shift ;;
+    --setup) DO_SETUP=1; shift ;;
+    --print) PRINT_ONLY=1; shift ;;
+    -h|--help) usage; exit 0 ;;
+    *) die "unknown arg: $1 (see --help)" ;;
+  esac
+done
+
+# --- platform ---------------------------------------------------------------
+OS="$(uname -s 2>/dev/null || echo unknown)"
+ARCH="$(uname -m 2>/dev/null || echo unknown)"
+case "$OS" in
+  Linux|Darwin) ;;
+  MINGW*|MSYS*|CYGWIN*)
+    die "Windows: use PowerShell installer or npm i -g @oracle-agent/oracle. See https://oracle.demi.la/downloads/"
+    ;;
+  *) die "unsupported OS: $OS" ;;
+esac
+
+PREFIX="${ORACLE_INSTALL_PREFIX:-$HOME/.local}"
+BIN_DIR="${PREFIX}/bin"
+SHARE_DIR="${ORACLE_HOME_OVERRIDE:-${ORACLE_HOME:-$HOME/.local/share/oracle}}"
+PKG_DIR="${SHARE_DIR}/package"
+
+need_cmds() {
+  for c in curl tar mkdir ln chmod; do
+    have "$c" || die "missing required command: $c"
+  done
+}
+
+node_ok() {
+  have node || return 1
+  # node -p 'process.versions.node'
+  local ver major minor
+  ver="$(node -p 'process.versions.node' 2>/dev/null || true)"
+  [ -n "$ver" ] || return 1
+  major="${ver%%.*}"
+  minor="${ver#*.}"; minor="${minor%%.*}"
+  if [ "$major" -gt "$MIN_NODE_MAJOR" ]; then return 0; fi
+  if [ "$major" -eq "$MIN_NODE_MAJOR" ] && [ "${minor:-0}" -ge "$MIN_NODE_MINOR" ]; then return 0; fi
+  return 1
+}
+
+ensure_node() {
+  if node_ok; then
+    log "node $(node -p 'process.versions.node') OK"
+    return 0
+  fi
+  if have node; then
+    err "node $(node -p 'process.versions.node' 2>/dev/null || echo '?') is too old (need >= ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR})"
+  else
+    err "node not found (need >= ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR})"
+  fi
+
+  # Best-effort: nvm if already present
+  if [ -s "$HOME/.nvm/nvm.sh" ]; then
+    # shellcheck disable=SC1091
+    . "$HOME/.nvm/nvm.sh"
+    log "trying nvm install ${MIN_NODE_MAJOR}"
+    nvm install "$MIN_NODE_MAJOR" >/dev/null
+    nvm use "$MIN_NODE_MAJOR" >/dev/null
+    node_ok && { log "node $(node -p 'process.versions.node') via nvm"; return 0; }
+  fi
+
+  cat >&2 <<EOF
+oracle-install: install Node.js ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR}+ then re-run:
+
+  # macOS (Homebrew)
+  brew install node@${MIN_NODE_MAJOR}
+
+  # Ubuntu/Debian
+  curl -fsSL https://deb.nodesource.com/setup_${MIN_NODE_MAJOR}.x | sudo -E bash -
+  sudo apt-get install -y nodejs
+
+  # or nvm
+  curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
+  nvm install ${MIN_NODE_MAJOR}
+
+Then:
+  curl -fsSL https://oracle.demi.la/install.sh | bash
+EOF
+  exit 1
+}
+
+ensure_npm() {
+  have npm || die "npm not found (ships with Node). Reinstall Node ${MIN_NODE_MAJOR}+."
+  log "npm $(npm -v 2>/dev/null || echo '?')"
+}
+
+resolve_version() {
+  local want="$ORACLE_INSTALL_VERSION"
+  if [ "$want" = "latest" ] || [ -z "$want" ]; then
+    want="$(npm view "$ORACLE_NPM_PACKAGE" version --prefer-online 2>/dev/null || true)"
+    [ -n "$want" ] || die "could not resolve latest version of $ORACLE_NPM_PACKAGE (network/npm?)"
+  fi
+  ORACLE_RESOLVED_VERSION="$want"
+  log "target ${ORACLE_NPM_PACKAGE}@${ORACLE_RESOLVED_VERSION}"
+}
+
+install_package() {
+  mkdir -p "$PKG_DIR" "$BIN_DIR" "$SHARE_DIR"
+  # Isolated prefix install — no sudo, no global pollution
+  cat >"$PKG_DIR/package.json" <<EOF
+{
+  "name": "oracle-user-install",
+  "private": true,
+  "description": "Oracle curl-install root (do not publish)"
+}
+EOF
+  log "installing into $PKG_DIR"
+  (
+    cd "$PKG_DIR"
+    npm install "${ORACLE_NPM_PACKAGE}@${ORACLE_RESOLVED_VERSION}" \
+      --no-fund \
+      --no-audit \
+      --prefer-online \
+      --loglevel=error
+  )
+
+  local oracle_bin=""
+  if [ -x "$PKG_DIR/node_modules/.bin/oracle" ]; then
+    oracle_bin="$PKG_DIR/node_modules/.bin/oracle"
+  elif [ -f "$PKG_DIR/node_modules/@oracle-agent/oracle/bin/oracle.mjs" ]; then
+    oracle_bin="$PKG_DIR/node_modules/@oracle-agent/oracle/bin/oracle.mjs"
+  else
+    die "install finished but oracle binary missing under $PKG_DIR"
+  fi
+
+  # Stable launcher in BIN_DIR
+  cat >"$BIN_DIR/oracle" <<EOF
+#!/usr/bin/env bash
+# Generated by oracle.demi.la/install.sh — do not edit; re-run installer to upgrade.
+set -euo pipefail
+export ORACLE_INSTALL_ROOT="$PKG_DIR"
+exec "$oracle_bin" "\$@"
+EOF
+  chmod 755 "$BIN_DIR/oracle"
+
+  # Convenience: also expose oracle-data-mcp if present
+  if [ -x "$PKG_DIR/node_modules/.bin/oracle-data-mcp" ]; then
+    cat >"$BIN_DIR/oracle-data-mcp" <<EOF
+#!/usr/bin/env bash
+set -euo pipefail
+exec "$PKG_DIR/node_modules/.bin/oracle-data-mcp" "\$@"
+EOF
+    chmod 755 "$BIN_DIR/oracle-data-mcp"
+  fi
+
+  # Record install metadata
+  cat >"$SHARE_DIR/install.json" <<EOF
+{
+  "package": "${ORACLE_NPM_PACKAGE}",
+  "version": "${ORACLE_RESOLVED_VERSION}",
+  "prefix": "${PREFIX}",
+  "bin": "${BIN_DIR}/oracle",
+  "home": "${PKG_DIR}",
+  "installedAt": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
+  "method": "curl-install.sh"
+}
+EOF
+}
+
+path_hint() {
+  case ":$PATH:" in
+    *":$BIN_DIR:"*) return 0 ;;
+  esac
+  cat <<EOF
+
+Add Oracle to your PATH (one-time):
+
+  # bash
+  echo 'export PATH="$BIN_DIR:\$PATH"' >> ~/.bashrc && source ~/.bashrc
+
+  # zsh
+  echo 'export PATH="$BIN_DIR:\$PATH"' >> ~/.zshrc && source ~/.zshrc
+
+  # fish
+  fish_add_path $BIN_DIR
+EOF
+}
+
+verify() {
+  export PATH="$BIN_DIR:$PATH"
+  hash -r 2>/dev/null || true
+  if ! have oracle; then
+    die "oracle not on PATH after install. Expected $BIN_DIR/oracle"
+  fi
+  local ver
+  ver="$(oracle --version 2>/dev/null | head -1 || true)"
+  log "installed: ${ver:-oracle (version unknown)}"
+  if [ "$DO_DOCTOR" = 1 ]; then
+    oracle doctor 2>/dev/null | head -20 || true
+  fi
+}
+
+print_next() {
+  cat <<EOF
+
+Oracle ready (prepare-only · your wallet signs).
+
+  oracle --version
+  oracle setup model
+  oracle chat
+  oracle doctor --agentic
+  oracle harness detect
+
+Upgrade later:
+  curl -fsSL https://oracle.demi.la/install.sh | bash
+
+Install root: $PKG_DIR
+Binary:       $BIN_DIR/oracle
+EOF
+  path_hint
+}
+
+main() {
+  need_cmds
+  log "os=$OS arch=$ARCH"
+  log "prefix=$PREFIX home=$SHARE_DIR"
+  if [ "$PRINT_ONLY" = 1 ]; then
+    resolve_version
+    log "would install ${ORACLE_NPM_PACKAGE}@${ORACLE_RESOLVED_VERSION} → $PKG_DIR"
+    exit 0
+  fi
+  ensure_node
+  ensure_npm
+  resolve_version
+  install_package
+  verify
+  if [ "$DO_SETUP" = 1 ]; then
+    export PATH="$BIN_DIR:$PATH"
+    oracle setup model || true
+  fi
+  print_next
+}
+
+main

package/public/oracle-splash/downloads/index.html

@@ -27,7 +27,7 @@ section{padding-top:72px;scroll-margin-top:90px}.sub{color:var(--muted);line-hei
 <main class="wrap">
 <header><p class="eyebrow">Public release</p><h1>Install Oracle.<br><em>Your wallet signs.</em></h1><p class="lede">The CLI, desktop beta, source, research tools, and unsigned transaction preparation are public to everyone. No wallet connection or NFT is required to download or run Oracle.</p></header>
 <aside class="policy"><h2>Locals Only means 0% Oracle fees</h2><p>A Locals Only NFT waives the <b>Oracle integrator fee</b>. It does not unlock the product, arm execution, waive provider or network costs, or change the keyless prepare-only custody boundary.</p></aside>
-<section id="cli"><p class="eyebrow">Oracle CLI</p><h2>Install from npm</h2><p class="sub">Requires Node 20.19 or newer. npm <code>latest</code> contains the full public runtime.</p><div class="install"><div class="cmd"><code id="cmd">npm i -g @oracle-agent/oracle</code><button class="copy" id="copy" type="button">Copy</button></div><div class="meta"><span>public npm package</span><span>keyless</span><span>prepare-only</span></div></div></section>
+<section id="cli"><p class="eyebrow">Oracle CLI</p><h2>Install with curl</h2><p class="sub">One line. Linux and macOS. Requires Node 20.19+ (the script checks and tells you how to get it). Installs into <code>~/.local</code> — no sudo, no global npm.</p><div class="install"><div class="cmd"><code id="cmd">curl -fsSL https://oracle.demi.la/install.sh | bash</code><button class="copy" id="copy" type="button">Copy</button></div><div class="meta"><span>curl install</span><span>keyless</span><span>prepare-only</span><span>user prefix</span></div></div><p class="sub" style="margin-top:18px">npm still works if you prefer: <code>npm i -g @oracle-agent/oracle</code></p></section>
 <section id="desktop"><p class="eyebrow">Desktop beta · 0.4.0</p><h2>Native installers</h2><p class="sub">Each installer bundles the same public runtime. Download directly, then verify it against the published SHA-256 manifest.</p><div class="artifacts">
 <div class="artifact" data-artifact="Oracle-0.4.0.AppImage"><div><h3>Linux</h3><small>AppImage · x64</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.0 beta</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-0.4.0.AppImage" download>Download</a></div>
 <div class="artifact" data-artifact="Oracle-0.4.0-arm64.dmg"><div><h3>macOS</h3><small>DMG · Apple silicon</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.0 beta</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-0.4.0-arm64.dmg" download>Download</a></div>

package/public/oracle-splash/index.html

@@ -1775,7 +1775,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
  <p class="section-label rv">Oracle CLI</p>
  <h2 class="section-title rv">One surface. <em>Every chain.</em></h2>
  <div class="cli-install rv">
-  <div class="cli-install-cmd"><code>oracle</code> <span class="cli-install-hint">npm install -g @oracle-agent/oracle</span></div>
+  <div class="cli-install-cmd"><code>curl -fsSL https://oracle.demi.la/install.sh | bash</code> <span class="cli-install-hint">then oracle setup model && oracle chat</span></div>
  </div>
  <p class="section-lede rv">The real Oracle shell, isolated from desktop chrome. No accounts, no servers. The CLI runs on your machine and reads straight from public RPCs.</p>
  <p class="section-lede rv">Pin the active surface with <code style="color:var(--blue2)">/chain hyperliquid</code>, switch models, ask naturally. Oracle reads, prices, and prepares — you sign.</p>

package/public/oracle-splash/install.sh

@@ -0,0 +1,300 @@
+#!/usr/bin/env bash
+# Oracle public installer — prepare-only crypto agent control plane.
+#
+#   curl -fsSL https://oracle.demi.la/install.sh | bash
+#   curl -fsSL https://oracle.demi.la/install.sh | bash -s -- --version latest
+#   curl -fsSL https://oracle.demi.la/install.sh | bash -s -- --prefix "$HOME/.local"
+#
+# What this does:
+#   - installs @oracle-agent/oracle into a user prefix (no root, no global npm -g)
+#   - puts `oracle` on PATH via ~/.local/bin (or --prefix/bin)
+#   - never asks for keys, seeds, or wallet approval
+#
+# What this never does:
+#   - sign or broadcast transactions
+#   - install a private signer/executor
+#   - require Hermes or any other agent harness
+set -euo pipefail
+
+ORACLE_INSTALL_VERSION="${ORACLE_INSTALL_VERSION:-latest}"
+ORACLE_INSTALL_PREFIX="${ORACLE_INSTALL_PREFIX:-}"
+ORACLE_INSTALL_FORCE_NODE="${ORACLE_INSTALL_FORCE_NODE:-0}"
+ORACLE_NPM_PACKAGE="${ORACLE_NPM_PACKAGE:-@oracle-agent/oracle}"
+MIN_NODE_MAJOR=20
+MIN_NODE_MINOR=19
+NONINTERACTIVE=1
+DO_SETUP=0
+DO_DOCTOR=1
+PRINT_ONLY=0
+
+log()  { printf 'oracle-install: %s\n' "$*"; }
+err()  { printf 'oracle-install: ERROR: %s\n' "$*" >&2; }
+die()  { err "$*"; exit 1; }
+have() { command -v "$1" >/dev/null 2>&1; }
+
+usage() {
+  cat <<'EOF'
+Oracle install (curl)
+
+  curl -fsSL https://oracle.demi.la/install.sh | bash
+  curl -fsSL https://oracle.demi.la/install.sh | bash -s -- [options]
+
+Options:
+  --version <ver|latest>   Package version (default: latest)
+  --prefix <dir>           Install root (default: ~/.local)
+  --home <dir>             Package home (default: ~/.local/share/oracle)
+  --no-doctor              Skip post-install doctor
+  --setup                  Run `oracle setup model` after install (interactive)
+  --print                  Print plan only
+  -h, --help               Show help
+
+Env:
+  ORACLE_INSTALL_VERSION   same as --version
+  ORACLE_INSTALL_PREFIX    same as --prefix
+  ORACLE_HOME              package data dir override
+  npm_config_registry      custom npm registry
+EOF
+}
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --version) ORACLE_INSTALL_VERSION="${2:-}"; shift 2 ;;
+    --prefix)  ORACLE_INSTALL_PREFIX="${2:-}"; shift 2 ;;
+    --home)    ORACLE_HOME_OVERRIDE="${2:-}"; shift 2 ;;
+    --no-doctor) DO_DOCTOR=0; shift ;;
+    --setup) DO_SETUP=1; shift ;;
+    --print) PRINT_ONLY=1; shift ;;
+    -h|--help) usage; exit 0 ;;
+    *) die "unknown arg: $1 (see --help)" ;;
+  esac
+done
+
+# --- platform ---------------------------------------------------------------
+OS="$(uname -s 2>/dev/null || echo unknown)"
+ARCH="$(uname -m 2>/dev/null || echo unknown)"
+case "$OS" in
+  Linux|Darwin) ;;
+  MINGW*|MSYS*|CYGWIN*)
+    die "Windows: use PowerShell installer or npm i -g @oracle-agent/oracle. See https://oracle.demi.la/downloads/"
+    ;;
+  *) die "unsupported OS: $OS" ;;
+esac
+
+PREFIX="${ORACLE_INSTALL_PREFIX:-$HOME/.local}"
+BIN_DIR="${PREFIX}/bin"
+SHARE_DIR="${ORACLE_HOME_OVERRIDE:-${ORACLE_HOME:-$HOME/.local/share/oracle}}"
+PKG_DIR="${SHARE_DIR}/package"
+
+need_cmds() {
+  for c in curl tar mkdir ln chmod; do
+    have "$c" || die "missing required command: $c"
+  done
+}
+
+node_ok() {
+  have node || return 1
+  # node -p 'process.versions.node'
+  local ver major minor
+  ver="$(node -p 'process.versions.node' 2>/dev/null || true)"
+  [ -n "$ver" ] || return 1
+  major="${ver%%.*}"
+  minor="${ver#*.}"; minor="${minor%%.*}"
+  if [ "$major" -gt "$MIN_NODE_MAJOR" ]; then return 0; fi
+  if [ "$major" -eq "$MIN_NODE_MAJOR" ] && [ "${minor:-0}" -ge "$MIN_NODE_MINOR" ]; then return 0; fi
+  return 1
+}
+
+ensure_node() {
+  if node_ok; then
+    log "node $(node -p 'process.versions.node') OK"
+    return 0
+  fi
+  if have node; then
+    err "node $(node -p 'process.versions.node' 2>/dev/null || echo '?') is too old (need >= ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR})"
+  else
+    err "node not found (need >= ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR})"
+  fi
+
+  # Best-effort: nvm if already present
+  if [ -s "$HOME/.nvm/nvm.sh" ]; then
+    # shellcheck disable=SC1091
+    . "$HOME/.nvm/nvm.sh"
+    log "trying nvm install ${MIN_NODE_MAJOR}"
+    nvm install "$MIN_NODE_MAJOR" >/dev/null
+    nvm use "$MIN_NODE_MAJOR" >/dev/null
+    node_ok && { log "node $(node -p 'process.versions.node') via nvm"; return 0; }
+  fi
+
+  cat >&2 <<EOF
+oracle-install: install Node.js ${MIN_NODE_MAJOR}.${MIN_NODE_MINOR}+ then re-run:
+
+  # macOS (Homebrew)
+  brew install node@${MIN_NODE_MAJOR}
+
+  # Ubuntu/Debian
+  curl -fsSL https://deb.nodesource.com/setup_${MIN_NODE_MAJOR}.x | sudo -E bash -
+  sudo apt-get install -y nodejs
+
+  # or nvm
+  curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
+  nvm install ${MIN_NODE_MAJOR}
+
+Then:
+  curl -fsSL https://oracle.demi.la/install.sh | bash
+EOF
+  exit 1
+}
+
+ensure_npm() {
+  have npm || die "npm not found (ships with Node). Reinstall Node ${MIN_NODE_MAJOR}+."
+  log "npm $(npm -v 2>/dev/null || echo '?')"
+}
+
+resolve_version() {
+  local want="$ORACLE_INSTALL_VERSION"
+  if [ "$want" = "latest" ] || [ -z "$want" ]; then
+    want="$(npm view "$ORACLE_NPM_PACKAGE" version --prefer-online 2>/dev/null || true)"
+    [ -n "$want" ] || die "could not resolve latest version of $ORACLE_NPM_PACKAGE (network/npm?)"
+  fi
+  ORACLE_RESOLVED_VERSION="$want"
+  log "target ${ORACLE_NPM_PACKAGE}@${ORACLE_RESOLVED_VERSION}"
+}
+
+install_package() {
+  mkdir -p "$PKG_DIR" "$BIN_DIR" "$SHARE_DIR"
+  # Isolated prefix install — no sudo, no global pollution
+  cat >"$PKG_DIR/package.json" <<EOF
+{
+  "name": "oracle-user-install",
+  "private": true,
+  "description": "Oracle curl-install root (do not publish)"
+}
+EOF
+  log "installing into $PKG_DIR"
+  (
+    cd "$PKG_DIR"
+    npm install "${ORACLE_NPM_PACKAGE}@${ORACLE_RESOLVED_VERSION}" \
+      --no-fund \
+      --no-audit \
+      --prefer-online \
+      --loglevel=error
+  )
+
+  local oracle_bin=""
+  if [ -x "$PKG_DIR/node_modules/.bin/oracle" ]; then
+    oracle_bin="$PKG_DIR/node_modules/.bin/oracle"
+  elif [ -f "$PKG_DIR/node_modules/@oracle-agent/oracle/bin/oracle.mjs" ]; then
+    oracle_bin="$PKG_DIR/node_modules/@oracle-agent/oracle/bin/oracle.mjs"
+  else
+    die "install finished but oracle binary missing under $PKG_DIR"
+  fi
+
+  # Stable launcher in BIN_DIR
+  cat >"$BIN_DIR/oracle" <<EOF
+#!/usr/bin/env bash
+# Generated by oracle.demi.la/install.sh — do not edit; re-run installer to upgrade.
+set -euo pipefail
+export ORACLE_INSTALL_ROOT="$PKG_DIR"
+exec "$oracle_bin" "\$@"
+EOF
+  chmod 755 "$BIN_DIR/oracle"
+
+  # Convenience: also expose oracle-data-mcp if present
+  if [ -x "$PKG_DIR/node_modules/.bin/oracle-data-mcp" ]; then
+    cat >"$BIN_DIR/oracle-data-mcp" <<EOF
+#!/usr/bin/env bash
+set -euo pipefail
+exec "$PKG_DIR/node_modules/.bin/oracle-data-mcp" "\$@"
+EOF
+    chmod 755 "$BIN_DIR/oracle-data-mcp"
+  fi
+
+  # Record install metadata
+  cat >"$SHARE_DIR/install.json" <<EOF
+{
+  "package": "${ORACLE_NPM_PACKAGE}",
+  "version": "${ORACLE_RESOLVED_VERSION}",
+  "prefix": "${PREFIX}",
+  "bin": "${BIN_DIR}/oracle",
+  "home": "${PKG_DIR}",
+  "installedAt": "$(date -u +%Y-%m-%dT%H:%M:%SZ)",
+  "method": "curl-install.sh"
+}
+EOF
+}
+
+path_hint() {
+  case ":$PATH:" in
+    *":$BIN_DIR:"*) return 0 ;;
+  esac
+  cat <<EOF
+
+Add Oracle to your PATH (one-time):
+
+  # bash
+  echo 'export PATH="$BIN_DIR:\$PATH"' >> ~/.bashrc && source ~/.bashrc
+
+  # zsh
+  echo 'export PATH="$BIN_DIR:\$PATH"' >> ~/.zshrc && source ~/.zshrc
+
+  # fish
+  fish_add_path $BIN_DIR
+EOF
+}
+
+verify() {
+  export PATH="$BIN_DIR:$PATH"
+  hash -r 2>/dev/null || true
+  if ! have oracle; then
+    die "oracle not on PATH after install. Expected $BIN_DIR/oracle"
+  fi
+  local ver
+  ver="$(oracle --version 2>/dev/null | head -1 || true)"
+  log "installed: ${ver:-oracle (version unknown)}"
+  if [ "$DO_DOCTOR" = 1 ]; then
+    oracle doctor 2>/dev/null | head -20 || true
+  fi
+}
+
+print_next() {
+  cat <<EOF
+
+Oracle ready (prepare-only · your wallet signs).
+
+  oracle --version
+  oracle setup model
+  oracle chat
+  oracle doctor --agentic
+  oracle harness detect
+
+Upgrade later:
+  curl -fsSL https://oracle.demi.la/install.sh | bash
+
+Install root: $PKG_DIR
+Binary:       $BIN_DIR/oracle
+EOF
+  path_hint
+}
+
+main() {
+  need_cmds
+  log "os=$OS arch=$ARCH"
+  log "prefix=$PREFIX home=$SHARE_DIR"
+  if [ "$PRINT_ONLY" = 1 ]; then
+    resolve_version
+    log "would install ${ORACLE_NPM_PACKAGE}@${ORACLE_RESOLVED_VERSION} → $PKG_DIR"
+    exit 0
+  fi
+  ensure_node
+  ensure_npm
+  resolve_version
+  install_package
+  verify
+  if [ "$DO_SETUP" = 1 ]; then
+    export PATH="$BIN_DIR:$PATH"
+    oracle setup model || true
+  fi
+  print_next
+}
+
+main