@oracle-agent/oracle 0.31.0 → 0.33.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -43,6 +43,12 @@ cards.
43
43
  prepares an unsigned artifact for the local signer / owner wallet.
44
44
  - Approve cards (Photon-style Allow/Deny) are Telegram-first. They appear when
45
45
  the local signer is running and a pending artifact exists.
46
+ - Interactive artifact cards (TrueNorth-style) are a separate layer:
47
+ `src/telegram/interactive-cards.mjs`. Desktop issues
48
+ `https://t.me/<bot>?start=<32-hex>` via `issueTelegramLink`. `/start <token>`
49
+ redeems once, owner-bound, expiring. The card itself has Deepen / Refresh /
50
+ optional unsigned Prepare. Follow-up text in the same DM continues that
51
+ artifact thread. Execute/broadcast stay on Allow/Deny only. No Mini App.
46
52
  - `/approve` / `/deny` are owner-only fallbacks for WhatsApp, Discord, Signal,
47
53
  and any chat that cannot render inline buttons. Do not prefer them on Telegram
48
54
  when the card is available.
@@ -97,7 +97,7 @@ does not prove npm users receive it. A locally hosted model/data/policy loop doe
97
97
  a bundled signer. A merged feature is not public until the npm artifact containing it is
98
98
  published and inspected.
99
99
 
100
- **Candidate release in this source tree:** public package `@oracle-agent/oracle@0.31.0`
100
+ **Candidate release in this source tree:** public package `@oracle-agent/oracle@0.33.0`
101
101
  ships the encrypted local vault + short-lived loopback signer. Hosted/keyless
102
102
  Oracle cannot hold keys or move funds. Self-host after `oracle sign init|import` is **auto-armed**
103
103
  for user-initiated actions. Public still charges the disclosed fee card; Administrator