@oracle-agent/oracle 0.24.9 → 0.24.10

package/README.md

@@ -96,15 +96,16 @@ decides what may even be asked.
 
 Three properties define it:
 
-1. **Self-custody by default.** Hosted and default Oracle never accept your
-   private key. They build unsigned transactions and typed-data intents; your
-   wallet signs them. An explicit self-host setup may import a key into the
-   encrypted local vault and sign through `oracle signer`.
-2. **Bound grants.** A grant is a signed, scoped, expiring permission: max
-   value, chain, venue, destination allowlist, TTL. Oracle canonicalizes it,
-   renders it for review, and refuses to prepare anything outside it. Runtime
-   enforcement is the wallet's or smart account's job, or the optional local
-   signer's sealed policy when that signer is explicitly enabled.
+1. **Self-custody by default.** Hosted/keyless Oracle never accepts your
+   private key. Those surfaces build unsigned transactions and typed-data
+   intents; your wallet signs them. A self-host install may import a key into
+   the encrypted local vault and arm execution through `oracle signer`.
+2. **Bound grants.** A grant is a signed, scoped permission: max value,
+   chain, venue, destination allowlist, plus either a TTL or an explicit trigger
+   condition such as `mint-opens`. Oracle canonicalizes it, renders it for
+   review, and refuses to prepare anything outside it. Runtime enforcement is
+   the wallet's or smart account's job, or the optional local signer's sealed
+   policy when that signer is explicitly enabled.
 3. **Receipts or it didn't happen.** A claim without a transaction hash, a
    receipt is not a result. If a transport cannot verify a balance delta, the receipt must say `balanceDeltaVerified: false`.
 
@@ -151,8 +152,9 @@ Three planes, and the boundary between them is mechanically enforced:
   be asked to do.
 - **Exec plane** (self-hosted, optional) — signing and broadcast live only in an
   explicitly initialized loopback local signer using the user's keys, or in
-  separately operated owner infrastructure. Hosted/default Oracle has no active
-  signer. The local-signer module ships inert and grants no holder privilege.
+  separately operated owner infrastructure. Hosted/keyless Oracle has no active
+  signer. The local-signer module ships policy-bound and grants no holder
+  privilege.
 
 `test/custody-boundary.test.mjs` walks the import graph and fails if any public
 module reaches wallet key material or a house signer. The split is a test, not a
@@ -302,8 +304,9 @@ npm test
 owner-local source lane.** The short version:
 
 - Reads and quotes need **no keys**.
-- Hosted/default Oracle exposes no active signer, key vault, or broadcast path.
-- User wallets authorize prepared actions outside the public data plane.
+- Hosted/keyless Oracle exposes no cloud signer, key vault, or broadcast path.
+- User wallets authorize prepared actions outside the public data plane, or the
+  self-host local signer executes them under local policy.
 - The npm package includes an optional self-hosted loopback signer for the user's
   own keys. It stays inert until local initialization and sealed policy setup.
   Private Administrator modules remain separate and are not published on npm.
@@ -316,7 +319,8 @@ owner-local source lane.** The short version:
 
 Oracle keeps capability and authorization separate:
 
-- Public Oracle reads, quotes, simulates, and prepares unsigned artifacts.
+- Public Oracle reads, quotes, simulates, and prepares artifacts. Self-host
+  installs can execute supported artifacts through the local signer.
 - **Path A:** owner/main, browser, smart-account, hardware, or protocol-native
   wallets sign the prepared artifact. This is the default self-custody path.
 - **Path B:** the optional public local signer may sign on the same host after
@@ -537,8 +541,8 @@ oracle-data-mcp
 
 ## Security
 
-- Hosted/default Oracle never receives private keys. An explicit self-host
-  import writes only to the local encrypted vault.
+- Hosted/keyless Oracle cannot hold keys. Self-host imports write only to the
+  local encrypted vault.
 - The router can propose, simulate, explain, and draft. It cannot authorize.
 - Public default modules may not import house-signer or executor code
   (enforced by test). The optional `./local-signer` export is the self-host path.

package/dist/assets/skills/oracle-desk-product/SKILL.md

@@ -97,9 +97,9 @@ does not prove npm users receive it. A locally hosted model/data/policy loop doe
 a bundled signer. A merged feature is not public until the npm artifact containing it is
 published and inspected.
 
-**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.24.9`
-ships the optional encrypted local vault + short-lived loopback signer. Hosted/default
-Oracle stays prepare-only. Self-host after `oracle sign init|import` is **auto-armed**
+**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.24.10`
+ships the encrypted local vault + short-lived loopback signer. Hosted/keyless
+Oracle cannot hold keys or move funds. Self-host after `oracle sign init|import` is **auto-armed**
 for user-initiated actions. Public still charges the disclosed fee card; Administrator
 (`@oracle-agent/agent`, never on npm) stays zero-fee with DEMI's keys.