@oracle-agent/oracle 0.24.9 → 0.25.0

package/README.md

@@ -3,7 +3,8 @@
 ## Quickstart (standalone CLI)
 
 ```bash
-npm i -g @oracle-agent/oracle            # Node >= 20.19
+curl -fsSL https://oracle.demi.la/install.sh | bash   # preferred
+# or: npm i -g @oracle-agent/oracle                     # Node >= 20.19
 oracle --version
 oracle setup model                     # choose OAuth or API-key access
 oracle                                  # native Oracle chat
@@ -96,15 +97,16 @@ decides what may even be asked.
 
 Three properties define it:
 
-1. **Self-custody by default.** Hosted and default Oracle never accept your
-   private key. They build unsigned transactions and typed-data intents; your
-   wallet signs them. An explicit self-host setup may import a key into the
-   encrypted local vault and sign through `oracle signer`.
-2. **Bound grants.** A grant is a signed, scoped, expiring permission: max
-   value, chain, venue, destination allowlist, TTL. Oracle canonicalizes it,
-   renders it for review, and refuses to prepare anything outside it. Runtime
-   enforcement is the wallet's or smart account's job, or the optional local
-   signer's sealed policy when that signer is explicitly enabled.
+1. **Self-custody by default.** Hosted/keyless Oracle never accepts your
+   private key. Those surfaces build unsigned transactions and typed-data
+   intents; your wallet signs them. A self-host install may import a key into
+   the encrypted local vault and arm execution through `oracle signer`.
+2. **Bound grants.** A grant is a signed, scoped permission: max value,
+   chain, venue, destination allowlist, plus either a TTL or an explicit trigger
+   condition such as `mint-opens`. Oracle canonicalizes it, renders it for
+   review, and refuses to prepare anything outside it. Runtime enforcement is
+   the wallet's or smart account's job, or the optional local signer's sealed
+   policy when that signer is explicitly enabled.
 3. **Receipts or it didn't happen.** A claim without a transaction hash, a
    receipt is not a result. If a transport cannot verify a balance delta, the receipt must say `balanceDeltaVerified: false`.
 
@@ -151,8 +153,9 @@ Three planes, and the boundary between them is mechanically enforced:
   be asked to do.
 - **Exec plane** (self-hosted, optional) — signing and broadcast live only in an
   explicitly initialized loopback local signer using the user's keys, or in
-  separately operated owner infrastructure. Hosted/default Oracle has no active
-  signer. The local-signer module ships inert and grants no holder privilege.
+  separately operated owner infrastructure. Hosted/keyless Oracle has no active
+  signer. The local-signer module ships policy-bound and grants no holder
+  privilege.
 
 `test/custody-boundary.test.mjs` walks the import graph and fails if any public
 module reaches wallet key material or a house signer. The split is a test, not a
@@ -207,7 +210,7 @@ known answer. This matters: the canonical QuoterV2 address also has bytecode on
 Base, but does not price that chain's pairs. A codesize check would have
 allowlisted the wrong contract.
 
-**75 provider modules** in the read/quote catalog, covering **219 unique
+**80 provider modules** in the read/quote catalog, covering **220 unique
 protocols/venues** across EVM, Solana, and Bitcoin (115 EVM + cross-chain, 98
 Solana venues backed by 101 verified Jupiter program IDs, 6 Bitcoin surfaces).
 One module can cover many protocols: the Jupiter module alone routes 98 Solana
@@ -302,8 +305,9 @@ npm test
 owner-local source lane.** The short version:
 
 - Reads and quotes need **no keys**.
-- Hosted/default Oracle exposes no active signer, key vault, or broadcast path.
-- User wallets authorize prepared actions outside the public data plane.
+- Hosted/keyless Oracle exposes no cloud signer, key vault, or broadcast path.
+- User wallets authorize prepared actions outside the public data plane, or the
+  self-host local signer executes them under local policy.
 - The npm package includes an optional self-hosted loopback signer for the user's
   own keys. It stays inert until local initialization and sealed policy setup.
   Private Administrator modules remain separate and are not published on npm.
@@ -316,7 +320,8 @@ owner-local source lane.** The short version:
 
 Oracle keeps capability and authorization separate:
 
-- Public Oracle reads, quotes, simulates, and prepares unsigned artifacts.
+- Public Oracle reads, quotes, simulates, and prepares artifacts. Self-host
+  installs can execute supported artifacts through the local signer.
 - **Path A:** owner/main, browser, smart-account, hardware, or protocol-native
   wallets sign the prepared artifact. This is the default self-custody path.
 - **Path B:** the optional public local signer may sign on the same host after
@@ -537,8 +542,8 @@ oracle-data-mcp
 
 ## Security
 
-- Hosted/default Oracle never receives private keys. An explicit self-host
-  import writes only to the local encrypted vault.
+- Hosted/keyless Oracle cannot hold keys. Self-host imports write only to the
+  local encrypted vault.
 - The router can propose, simulate, explain, and draft. It cannot authorize.
 - Public default modules may not import house-signer or executor code
   (enforced by test). The optional `./local-signer` export is the self-host path.

package/SETUP.md

@@ -299,17 +299,39 @@ refer to signer setup, not hosted web. Hosted web never signs.
 
 ## Upgrade
 
+Re-run the same installer you used. Curl is the default:
+
+```bash
+curl -fsSL https://oracle.demi.la/install.sh | bash
+oracle --version
+oracle doctor
+```
+
+If you installed with npm:
+
 ```bash
 npm i -g @oracle-agent/oracle@latest
 oracle --version
 oracle doctor
 ```
 
+`oracle upgrade` updates installed Hermes agent lanes. It does not replace the
+CLI package.
+
 Review release notes before upgrading a machine that also runs private
 owner-operated infrastructure.
 
 ## Uninstall
 
+Curl install:
+
+```bash
+rm -f ~/.local/bin/oracle ~/.local/bin/oracle-data-mcp
+rm -rf ~/.local/share/oracle
+```
+
+npm install:
+
 ```bash
 npm rm -g @oracle-agent/oracle
 ```

package/dist/assets/skills/oracle-desk-product/SKILL.md

@@ -97,9 +97,9 @@ does not prove npm users receive it. A locally hosted model/data/policy loop doe
 a bundled signer. A merged feature is not public until the npm artifact containing it is
 published and inspected.
 
-**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.24.9`
-ships the optional encrypted local vault + short-lived loopback signer. Hosted/default
-Oracle stays prepare-only. Self-host after `oracle sign init|import` is **auto-armed**
+**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.25.0`
+ships the encrypted local vault + short-lived loopback signer. Hosted/keyless
+Oracle cannot hold keys or move funds. Self-host after `oracle sign init|import` is **auto-armed**
 for user-initiated actions. Public still charges the disclosed fee card; Administrator
 (`@oracle-agent/agent`, never on npm) stays zero-fee with DEMI's keys.