@oracle-agent/oracle 0.24.8 → 0.24.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.24.8",
+  "version": "0.24.10",
   "description": "Oracle: standalone multichain agent control plane with an optional encrypted, loopback-only self-hosted signer.",
   "license": "BUSL-1.1",
   "type": "module",
@@ -66,18 +66,21 @@
     "@noble/curves": "^2.2.0",
     "@noble/hashes": "^2.2.0",
     "@scure/base": "^2.2.0",
+    "@scure/btc-signer": "2.3.0",
+    "@solana/addresses": "^7.0.0",
+    "@solana/transaction-messages": "7.0.0",
     "ethers": "^6.16.0",
     "sharp": "^0.35.3",
     "sql.js": "^1.13.0",
     "viem": "^2.55.8"
   },
   "peerDependencies": {
+    "@browserbasehq/stagehand": "*",
     "discord.js": "*",
     "grammy": "*",
     "playwright-core": "*",
     "qrcode-terminal": "*",
-    "whatsapp-web.js": "*",
-    "@browserbasehq/stagehand": "*"
+    "whatsapp-web.js": "*"
   },
   "peerDependenciesMeta": {
     "grammy": {

package/public/install.ps1

@@ -92,7 +92,7 @@ function Install-Desktop {
     Fail "SHA-256 mismatch (got $got want $want). Refusing to run."
   }
   Log "checksum ok"
-  Log "launching desktop installer (Oracle never asks for a private key or seed)"
+  Log "launching desktop installer (this installer never asks for a private key or seed)"
   Start-Process -FilePath $exe -ArgumentList "/S" -Wait
 }
 

package/public/install.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Oracle public installer — prepare-only crypto agent control plane.
+# Oracle public installer — hosted/default stays prepare-only.
 #
 #   curl -fsSL https://oracle.demi.la/install.sh | bash
 #   curl -fsSL https://oracle.demi.la/install.sh | bash -s -- --version latest
@@ -10,10 +10,11 @@
 #   - puts `oracle` on PATH via ~/.local/bin (or --prefix/bin)
 #   - never asks for keys, seeds, or wallet approval
 #
-# What this never does:
+# What this installer never does:
 #   - sign or broadcast transactions
-#   - install a private signer/executor
+#   - start a signer or import a key
 #   - require Hermes or any other agent harness
+# An explicit later `oracle signer` setup is a separate operator step.
 set -euo pipefail
 
 ORACLE_INSTALL_VERSION="${ORACLE_INSTALL_VERSION:-latest}"
@@ -259,7 +260,7 @@ verify() {
 print_next() {
   cat <<EOF
 
-Oracle ready (prepare-only · your wallet signs).
+Oracle ready (hosted/default prepare-only · your wallet signs).
 
   oracle --version
   oracle setup model

package/public/oracle-splash/_variants/ice.html

@@ -1281,13 +1281,13 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   </article>
   <article class="moat-card">
    <div class="n">bounded surfaces</div>
-   <h3>Six lanes, each with its own decoder</h3>
-   <p>hl, poly, evm-swap, evm-bridge, btc, sol. Each decodes its own envelope, proves every value-moving field, and refuses while its allowlists are empty.</p>
+   <h3>Three local-signer lanes, each with its own decoder</h3>
+   <p>evm, btc, sol transfers. Hyperliquid, Polymarket, swaps, and bridges stay wallet-signed. Each local-signer lane decodes its own envelope, proves every value-moving field, and refuses while its allowlists are empty.</p>
   </article>
   <article class="moat-card">
    <div class="n">evidence</div>
    <h3>Decoded before you sign, receipted after</h3>
-   <p>minOut, impact, spender, and decoded calldata before approval; tx hash, receipt status, balance delta, and allowance state after. Unsigned artifacts export to hardware wallets. No “looks filled.”</p>
+   <p>minOut, impact, spender, and decoded calldata before approval; tx hash, receipt status, balance delta when verified, and allowance state after. Unsigned artifacts export to hardware wallets. No “looks filled.”</p>
   </article>
   <article class="moat-card">
    <div class="n">fail closed</div>

package/public/oracle-splash/_variants/ivory.html

@@ -1283,13 +1283,13 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   </article>
   <article class="moat-card">
    <div class="n">bounded surfaces</div>
-   <h3>Six lanes, each with its own decoder</h3>
-   <p>hl, poly, evm-swap, evm-bridge, btc, sol. Each decodes its own envelope, proves every value-moving field, and refuses while its allowlists are empty.</p>
+   <h3>Three local-signer lanes, each with its own decoder</h3>
+   <p>evm, btc, sol transfers. Hyperliquid, Polymarket, swaps, and bridges stay wallet-signed. Each local-signer lane decodes its own envelope, proves every value-moving field, and refuses while its allowlists are empty.</p>
   </article>
   <article class="moat-card">
    <div class="n">evidence</div>
    <h3>Decoded before you sign, receipted after</h3>
-   <p>minOut, impact, spender, and decoded calldata before approval; tx hash, receipt status, balance delta, and allowance state after. Unsigned artifacts export to hardware wallets. No “looks filled.”</p>
+   <p>minOut, impact, spender, and decoded calldata before approval; tx hash, receipt status, balance delta when verified, and allowance state after. Unsigned artifacts export to hardware wallets. No “looks filled.”</p>
   </article>
   <article class="moat-card">
    <div class="n">fail closed</div>

package/public/oracle-splash/downloads/index.html

@@ -25,17 +25,17 @@ section{padding-top:72px;scroll-margin-top:90px}.sub{color:var(--muted);line-hei
 <body>
 <nav class="nav"><div class="nav-inner"><a class="brand" href="/"><span class="mark" aria-hidden="true"></span>oracle</a><a class="back" href="/">Back to site</a></div></nav>
 <main class="wrap">
-<header><p class="eyebrow">Public release</p><h1>Install Oracle.<br><em>Your wallet signs.</em></h1><p class="lede">The CLI, desktop beta, source, research tools, and unsigned transaction preparation are public to everyone. No wallet connection or NFT is required to download or run Oracle.</p></header>
-<aside class="policy"><h2>Locals Only means 0% Oracle fees</h2><p>A Locals Only NFT waives the <b>Oracle integrator fee</b>. It does not unlock the product, arm execution, waive provider or network costs, or change the keyless prepare-only custody boundary.</p></aside>
-<section id="cli"><p class="eyebrow">Oracle CLI</p><h2>Install with curl</h2><p class="sub">One line. Linux and macOS. Requires Node 20.19+ (the script checks and tells you how to get it). Installs into <code>~/.local</code> — no sudo, no global npm.</p><div class="install"><div class="cmd"><code id="cmd">curl -fsSL https://oracle.demi.la/install.sh | bash</code><button class="copy" id="copy" type="button">Copy</button></div><div class="meta"><span>curl install</span><span>keyless</span><span>prepare-only</span><span>user prefix</span></div></div><p class="sub" style="margin-top:18px">npm still works if you prefer: <code>npm i -g @oracle-agent/oracle</code></p></section>
+<header><p class="eyebrow">Public release</p><h1>Install Oracle.<br><em>Hosted wallets sign outside Oracle.</em></h1><p class="lede">The CLI, desktop beta, source, research tools, and unsigned transaction preparation are public to everyone. No wallet connection or NFT is required to download or run Oracle.</p></header>
+<aside class="policy"><h2>Locals Only means 0% Oracle fees</h2><p>A Locals Only NFT waives the <b>Oracle integrator fee</b>. It does not unlock the product, waive provider or network costs, or change the hosted/keyless custody boundary. Self-host execution uses the local signer.</p></aside>
+<section id="cli"><p class="eyebrow">Oracle CLI</p><h2>Install with curl</h2><p class="sub">One line. Linux and macOS. Requires Node 20.19+ (the script checks and tells you how to get it). Installs into <code>~/.local</code> — no sudo, no global npm.</p><div class="install"><div class="cmd"><code id="cmd">curl -fsSL https://oracle.demi.la/install.sh | bash</code><button class="copy" id="copy" type="button">Copy</button></div><div class="meta"><span>curl install</span><span>hosted keyless</span><span>hosted wallet signs</span><span>user prefix</span></div></div><p class="sub" style="margin-top:18px">npm still works if you prefer: <code>npm i -g @oracle-agent/oracle</code></p></section>
 <section id="windows"><p class="eyebrow">Oracle app · Windows</p><h2>Install with PowerShell</h2><p class="sub">Same shape as Hermes: one line. Installs the CLI (<code>npm i -g @oracle-agent/oracle</code>) and the desktop NSIS build. SHA-256 checked. Never asks for a key or seed.</p><div class="install"><div class="cmd"><code id="cmd-win">iex (irm https://oracle.demi.la/install.ps1)</code><button class="copy" id="copy-win" type="button">Copy</button></div><div class="meta"><span>irm | iex</span><span>desktop app</span><span>SHA-256 checked</span></div></div></section>
 <section id="desktop"><p class="eyebrow">Desktop beta · 0.4.3</p><h2>Native installers</h2><p class="sub">Each installer bundles the same public runtime. Download directly, then verify it against the published SHA-256 manifest.</p><div class="artifacts">
 <div class="artifact" data-artifact="Oracle-0.4.3.AppImage"><div><h3>Linux</h3><small>AppImage · x64</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.3 beta</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-0.4.3.AppImage" download>Download</a></div>
 <div class="artifact" data-artifact="Oracle-0.4.3-arm64.dmg"><div><h3>macOS</h3><small>DMG · Apple silicon</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.3 beta</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-0.4.3-arm64.dmg" download>Download</a></div>
 <div class="artifact" data-artifact="Oracle-Setup-0.4.3.exe"><div><h3>Windows</h3><small>NSIS installer · x64</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.3 beta</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-Setup-0.4.3.exe" download>Download</a></div>
-</div><p class="platform-note">Checksums: <a class="checksum" href="/downloads/artifacts/SHA256SUMS.txt">SHA256SUMS.txt</a>. Beta installers may trigger macOS Gatekeeper or Windows SmartScreen when a build is not notarized or CA-signed. Oracle never asks for a private key, seed phrase, or wallet approval.</p></section>
+</div><p class="platform-note">Checksums: <a class="checksum" href="/downloads/artifacts/SHA256SUMS.txt">SHA256SUMS.txt</a>. Beta installers may trigger macOS Gatekeeper or Windows SmartScreen when a build is not notarized or CA-signed. The installer never asks for a private key or seed. Hosted/keyless cannot hold keys. Self-host signer setup is a separate command.</p></section>
 </main>
-<footer><div class="nav-inner"><span>oracle · locals only labs</span><span>public / self-custody / prepare-only</span></div></footer>
+<footer><div class="nav-inner"><span>oracle · locals only labs</span><span>public / self-custody / local signer</span></div></footer>
 <script>
 document.getElementById("copy").addEventListener("click",async function(){try{await navigator.clipboard.writeText(document.getElementById("cmd").textContent.trim());this.textContent="Copied";var button=this;setTimeout(function(){button.textContent="Copy"},1400)}catch(_){this.textContent="Select command"}});
 document.getElementById("copy-win").addEventListener("click",async function(){try{await navigator.clipboard.writeText(document.getElementById("cmd-win").textContent.trim());this.textContent="Copied";var button=this;setTimeout(function(){button.textContent="Copy"},1400)}catch(_){this.textContent="Select command"}});

package/public/oracle-splash/index.html

@@ -1475,8 +1475,8 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   </article>
   <article class="moat-card">
    <div class="n">bounded surfaces</div>
-   <h3>Six lanes, each with its own decoder</h3>
-   <p>hl, poly, evm-swap, evm-bridge, btc, sol. Each decodes its own envelope, proves every value-moving field, and refuses while its allowlists are empty.</p>
+   <h3>Three local-signer lanes, each with its own decoder</h3>
+   <p>evm, btc, sol transfers. Hyperliquid, Polymarket, swaps, and bridges stay wallet-signed. Each local-signer lane decodes its own envelope, proves every value-moving field, and refuses while its allowlists are empty.</p>
   </article>
   <article class="moat-card">
    <div class="n">evidence</div>
@@ -1552,7 +1552,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    <noscript><p class="agent-ask">move 5k usdc into weth, cheapest route</p></noscript>
   </figure>
  </div>
-<p class="agent-caption rv">Same tool from the terminal, the desktop app, any MCP client, or your agent on Telegram, Discord, WhatsApp and Signal. Buzz integration shipped. Prepare-only everywhere: Oracle never holds your keys.</p>
+<p class="agent-caption rv">Same tool from the terminal, the desktop app, any MCP client, or your agent on Telegram, Discord, WhatsApp and Signal. Buzz integration shipped. Hosted/keyless cannot hold keys. Self-host execution runs through the local signer.</p>
 <div class="agent-icons rv" style="display:flex;flex-wrap:wrap;gap:10px;justify-content:center;margin-top:14px"><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm4.64 6.8c-.15 1.58-.8 5.42-1.13 7.19-.14.75-.42 1-.68 1.03-.58.05-1.02-.38-1.58-.75-.88-.58-1.38-.94-2.23-1.5-.99-.65-.35-1.01.22-1.59.15-.15 2.71-2.48 2.76-2.69.01-.03.01-.14-.07-.2-.08-.06-.19-.04-.27-.02-.12.03-1.96 1.25-5.54 3.66-.52.36-1 .53-1.42.52-.47-.01-1.37-.26-2.03-.48-.82-.27-1.47-.42-1.41-.87.03-.24.36-.49.99-.74 3.87-1.69 6.45-2.8 7.74-3.34 3.69-1.53 4.45-1.8 4.95-1.81.11 0 .36.03.52.17.14.12.18.28.2.4.02.11.04.37.01.56z" fill="#229ED9"/></svg>Telegram</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M19.27 5.33C17.94 4.71 14.48 3.26 10.68 4.77a27.98 27.98 0 0 0-6.02 3.13c-.87.51-1.3.9-1.23 1.44.07.46.57.73 1.42 1.12l.33.15c.85.38 1.28.57 1.43 1.01.08.23.07.6-.08 1.1-.15.51-.5 1.15-1.02 2.02-.34.57-.5.85-.37.99.14.15.48.11 1.09-.26 1.76-1.07 3.18-1.93 4.23-2.59 3.22-2.06 5.08-2.82 5.55-2.28.18.21.06.84-.34 1.85-.39 1.01-1.05 2.32-1.51 3.13-.24.43-.37.64-.45.74-.11.14-.2.16-.3.15-.3-.03-.73-.45-1.41-1.3-.5-.62-.94-1.08-1.26-1.25-.64-.34-1.08-.13-1.14.26-.05.29.14.61.56 1.02.43.41 1.15 1.06 1.56 1.5.53.58.82.98.85 1.28.02.24-.04.47-.46.75-.42.27-.86.41-1.34.41-.41 0-.86-.1-1.35-.29-1.7-.68-3.25-1.94-4.64-3.79a18.7 18.7 0 0 1-3.13-5.08c-.38-.79-.16-1.31.41-1.63.47-.27 1.12-.22 1.96.14a10.26 10.26 0 0 1 3.74 2.28c.36.35.68.52.96.52.21 0 .44-.07.69-.22.37-.22.65-.6.86-1.13.21-.53.34-1.14.34-1.57 0-.5-.15-.88-.45-1.12-.52-.42-1.44-.52-2.76-.3-1.71.28-3.62 1.03-5.72 2.24l-.86.49a6.72 6.72 0 0 1-1.02.51c-.37.14-.64.17-.81.09-.18-.1-.24-.29-.2-.58.04-.3.16-.56.36-.76z" fill="#5865F2"/></svg>Discord</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M17.472 14.382c-.297-.149-1.758-.867-2.03-.967-.273-.099-.471-.148-.67.15-.197.297-.767.966-.94 1.164-.173.199-.347.223-.644.075-.297-.15-1.255-.463-2.39-1.475-.883-.788-1.48-1.761-1.653-2.059-.173-.297-.018-.458.13-.606.134-.133.298-.347.446-.52.149-.174.198-.298.298-.497.099-.198.05-.371-.025-.52-.075-.149-.669-1.612-.916-2.207-.242-.579-.487-.5-.669-.51-.173-.008-.371-.01-.57-.01-.198 0-.52.074-.792.372-.272.297-1.04 1.016-1.04 2.479 0 1.462 1.065 2.875 1.213 3.074.149.198 2.096 3.2 5.077 4.487.709.306 1.262.489 1.694.625.712.227 1.36.195 1.871.118.571-.085 1.758-.719 2.006-1.413.248-.694.248-1.289.173-1.413-.074-.124-.272-.198-.57-.347m-5.421 7.403-.008-.005h.008l.005-.002h-.005V19.5c0-.248.009-.498.005-.746l.003-.003c.009 0 .018.001.027.002h-.02l-.011.008-.004.024zm-.006-.225h-.003l-.008.003.003.011.003-.005a.018.018 0 0 1 .005-.009zm-.004.17h.003l-.005-.002.002.001v.001zm.02-.003.003.003-.002-.002-.001-.001zM12 0C5.373 0 0 5.373 0 12s5.373 12 12 12 12-5.373 12-12S18.627 0 12 0z" fill="#25D366"/></svg>WhatsApp</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zM7.64 15.52c-.38-.66-.6-1.41-.6-2.2 0-2.63 2.14-4.77 4.77-4.77 1.27 0 2.47.5 3.37 1.4.9.9 1.4 2.1 1.4 3.37 0 2.63-2.14 4.77-4.77 4.77-.79 0-1.54-.22-2.2-.6L7.5 18l.14-2.48z" fill="#3B82F6"/></svg>Signal</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M12 2L2 7l10 5 10-5-10-5zM2 17l10 5 10-5M2 12l10 5 10-5" stroke="#7C4DFF" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/></svg>Buzz</span></div>
  <div class="venues rv">
   <div class="venues-head"><span>models // harnesses</span><span><b>bring your own model</b> · oracle is the control plane</span></div>
@@ -1567,12 +1567,12 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
     <p>The CLI and the desktop app are the whole product. There is no Oracle account, no hosted wallet, and no server that brokers your trades. Reads go straight from your machine to public RPCs and venue APIs.</p>
    </div>
    <div>
-    <h4>Your keys never reach Oracle</h4>
-    <p>The shipped package contains no signer, no vault, and no key material. Whatever key you use stays where you already keep it, in your wallet extension or on your hardware device, under that tool&rsquo;s own protection. A boundary test walks the real import graph on every build and fails if a public module so much as reaches toward signer code.</p>
+    <h4>Hosted keys never reach Oracle</h4>
+    <p>Hosted/keyless Oracle has no hosted wallet and no cloud key. A self-host setup keeps the user's key in an encrypted local vault and executes through a short-lived loopback signer. Public modules still cannot import private Administrator house-signer code; a boundary test fails the build if they do.</p>
    </div>
    <div>
-    <h4>Your wallet signs, not Oracle</h4>
-    <p>Oracle prepares an unsigned transaction and hands it to your browser extension or hardware wallet. It cannot broadcast. If you close the prompt, nothing happened.</p>
+    <h4>Hosted wallets sign outside Oracle</h4>
+    <p>Hosted/keyless Oracle prepares an artifact for your browser extension or hardware wallet. Self-host Oracle can execute supported artifacts through the loopback signer under sealed local policy. If you close the prompt, nothing happened.</p>
    </div>
    <div>
     <h4>Nothing to seize, nothing to leak</h4>

package/public/oracle-splash/install.ps1

@@ -92,7 +92,7 @@ function Install-Desktop {
     Fail "SHA-256 mismatch (got $got want $want). Refusing to run."
   }
   Log "checksum ok"
-  Log "launching desktop installer (Oracle never asks for a private key or seed)"
+  Log "launching desktop installer (this installer never asks for a private key or seed)"
   Start-Process -FilePath $exe -ArgumentList "/S" -Wait
 }
 

package/public/oracle-splash/install.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Oracle public installer — prepare-only crypto agent control plane.
+# Oracle public installer — hosted/default stays prepare-only.
 #
 #   curl -fsSL https://oracle.demi.la/install.sh | bash
 #   curl -fsSL https://oracle.demi.la/install.sh | bash -s -- --version latest
@@ -10,10 +10,11 @@
 #   - puts `oracle` on PATH via ~/.local/bin (or --prefix/bin)
 #   - never asks for keys, seeds, or wallet approval
 #
-# What this never does:
+# What this installer never does:
 #   - sign or broadcast transactions
-#   - install a private signer/executor
+#   - start a signer or import a key
 #   - require Hermes or any other agent harness
+# An explicit later `oracle signer` setup is a separate operator step.
 set -euo pipefail
 
 ORACLE_INSTALL_VERSION="${ORACLE_INSTALL_VERSION:-latest}"
@@ -259,7 +260,7 @@ verify() {
 print_next() {
   cat <<EOF
 
-Oracle ready (prepare-only · your wallet signs).
+Oracle ready (hosted/default prepare-only · your wallet signs).
 
   oracle --version
   oracle setup model