@oracle-agent/oracle 0.22.15 → 0.22.16

package/SETUP.md

@@ -1,8 +1,10 @@
 # Oracle setup
 
-Oracle's public CLI is a standalone, prepare-only multichain agent. It can read,
-research, quote, simulate, and build unsigned artifacts. It does not need Hermes,
-it does not accept wallet private keys, and it does not broadcast transactions.
+Oracle's public CLI is a standalone multichain agent. By default it can read,
+research, quote, simulate, and build unsigned artifacts. Anyone can also self-host
+Oracle on their own machine, import their own key into an encrypted local vault,
+arm capped policy, and sign locally. It does not need Hermes and Oracle's hosted
+public HTTP plane never receives private keys or broadcasts transactions.
 
 The owner-operated signer/executor is private infrastructure. It is not published
 on npm and is not part of public onboarding.
@@ -12,7 +14,8 @@ on npm and is not part of public onboarding.
 - Node.js `20.19.0` or newer
 - npm
 - A supported model login or API key for chat
-- A user-controlled wallet only when reviewing and signing a prepared artifact
+- A user-controlled wallet for manual signing, or an optional local encrypted
+  vault when self-hosting local execution
 
 Linux, Windows, and macOS apps are in beta.
 
@@ -321,3 +324,26 @@ as a workaround.
 - [Buzz integration](docs/buzz-integration.md)
 - [Architecture](docs/architecture.md)
 - [Security policy](SECURITY.md)
+
+## Local self-custody vault
+
+Anyone can host Oracle on their own machine and sign locally:
+
+```bash
+oracle vault import --key-file ./oracle-key.txt --pass-env ORACLE_LOCAL_VAULT_PASS
+oracle vault unlock --pass-env ORACLE_LOCAL_VAULT_PASS
+oracle arm --max 0.05 --chain base --ttl-min 30 --destination 0x2626664c2603336e57b271c5c0b26f421741e481 --spender 0x000000000022d473030f116ddee9f6b43ac78ba3 --selector 0x095ea7b3
+oracle snipe 0x1111111111111111111111111111111111111111 --chain base --execute --pass-env ORACLE_LOCAL_VAULT_PASS
+oracle revoke emergency --type nft --collection 0x3333333333333333333333333333333333333333 --operator 0x9999999999999999999999999999999999999999 --chain base
+oracle arm --off
+oracle vault lock
+```
+
+Keys stay encrypted under `~/.config/oracle/keys/`. Unlock writes only non-secret
+session metadata; signing decrypts from the passphrase-protected vault in the
+local process. `oracle arm` stores local chain, destination, spender/operator,
+selector, and spend caps; the signer checks them before any transaction is sent.
+Emergency revoke/cancel can prepare same-nonce cancel transactions and approval
+revokes, but it is a race tool, not a guarantee against mined atomic drains. The
+public HTTP plane never receives key material. Default CLI remains prepare-only
+until you unlock + arm.

package/artifacts/specialist-packs/oracle-full-crypto.json

@@ -244,7 +244,8 @@
       "jupiter_quote",
       "jupiter_prepare",
       "bitcoin_inscribe_prepare",
-      "nft_prepare_list"
+      "nft_prepare_list",
+      "nft_trait_snipe"
     ],
     "never_public_default": [
       "evm_sign",
@@ -293,6 +294,7 @@
     "multichain-nft-collection-launch",
     "multichain-balance",
     "nft-inventory-gallery-pnl",
+    "nft-trait-sniping",
     "portfolio-balance-history-graph"
   ]
 }