@oracle-agent/oracle 0.33.0 → 0.35.0

package/dist/assets/graphics/oracle_card.py

@@ -34,8 +34,28 @@ ORACLE = {
     "chip_ink": "#061018",
 }
 
-# Assets ship with the package, next to this module. ORACLE_CARD_ASSETS overrides.
-_ASSETS = Path(os.environ.get("ORACLE_CARD_ASSETS") or (Path(__file__).resolve().parent / "assets"))
+# Assets ship with the package. Search env, next to this file, then the
+# published npm graphics tree so a copied renderer still finds lockups.
+def _resolve_assets() -> Path:
+    env = os.environ.get("ORACLE_CARD_ASSETS")
+    if env:
+        p = Path(env)
+        if p.is_dir():
+            return p
+    here = Path(__file__).resolve().parent
+    candidates = [
+        here / "assets",
+        Path.home() / ".local/share/oracle-assets",
+        here.parent / "assets" / "graphics" / "assets",
+        here.parent / "graphics" / "assets",
+    ]
+    for cand in candidates:
+        if (cand / "robinhood-lockup.png").is_file() or (cand / "oracle-globe.png").is_file():
+            return cand
+    return here / "assets"
+
+
+_ASSETS = _resolve_assets()
 _WM = _ASSETS
 ORACLE_MARK = _ASSETS / "oracle-globe.png"
 CHAINS = {
@@ -224,6 +244,16 @@ def chain_meta(venue: str) -> dict:
     return CHAINS.get(key, {"label": key.upper() or "UNKNOWN", "accent": ORACLE["blue"], "logo": None, "kind": "ohlc"})
 
 
+def _logo_wh(lockup):
+    size = getattr(lockup, "size", None)
+    if isinstance(size, (tuple, list)) and len(size) >= 2:
+        return int(size[0] or 0), int(size[1] or 0)
+    shape = getattr(lockup, "shape", None)
+    if isinstance(shape, tuple) and len(shape) >= 2:
+        return int(shape[1] or 0), int(shape[0] or 0)
+    return 180, 28
+
+
 def _load_logo(path: Path | None):
     if not path or not Path(path).exists():
         return None
@@ -275,11 +305,12 @@ def _chrome(fig, *, venue: str, eyebrow: str, hero: str, hero_color: str, chip:
     drew_lockup = False
     if lockup is not None:
         try:
-            w, h = getattr(lockup, "size", (180, 28))
+            w, h = _logo_wh(lockup)
             aspect = (w / max(h, 1)) if w and h else 6.0
-            lh = 0.048
-            lw = min(lh * aspect * (6.3 / 11.2), 0.24)
-            lax = fig.add_axes([tag_x + 0.048, 0.922 - lh / 2, lw, lh], zorder=8)
+            lh = 0.062
+            lw = min(lh * aspect * (6.3 / 11.2), 0.30)
+            lax = fig.add_axes([tag_x + 0.052, 0.922 - lh / 2, lw, lh], zorder=8)
+            lax.set_facecolor("none")
             lax.imshow(lockup)
             lax.axis("off")
             drew_lockup = True

package/dist/assets/skills/oracle-desk-product/SKILL.md

@@ -97,7 +97,7 @@ does not prove npm users receive it. A locally hosted model/data/policy loop doe
 a bundled signer. A merged feature is not public until the npm artifact containing it is
 published and inspected.
 
-**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.33.0`
+**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.35.0`
 ships the encrypted local vault + short-lived loopback signer. Hosted/keyless
 Oracle cannot hold keys or move funds. Self-host after `oracle sign init|import` is **auto-armed**
 for user-initiated actions. Public still charges the disclosed fee card; Administrator

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "Oracle: standalone multichain agent control plane with an optional encrypted, loopback-only self-hosted signer.",
   "license": "BUSL-1.1",
   "type": "module",
@@ -96,12 +96,12 @@
     "@scure/base": "^2.2.0",
     "@scure/bip39": "^1.6.0",
     "@scure/btc-signer": "2.3.0",
-    "@solana/addresses": "^7.0.0",
-    "@solana/transaction-messages": "7.0.0",
+    "@solana/addresses": "^7.1.0",
+    "@solana/transaction-messages": "7.1.1",
     "ethers": "^6.16.0",
     "sharp": "^0.35.3",
-    "sql.js": "^1.13.0",
-    "undici": "7.29.0",
+    "sql.js": "^1.14.2",
+    "undici": "8.10.0",
     "viem": "^2.55.8"
   },
   "peerDependencies": {

package/public/agent-connect/app.js

@@ -4,6 +4,11 @@
   const PACKAGE = "@oracle-agent/oracle";
   const COMMAND = "npx";
   const ARGS = ["-y", "--package", PACKAGE, "oracle-data-mcp"];
+  // Artifact-card lane. Deepen and Refresh are read paths; Prepare emits an
+  // unsigned artifact and is OFF unless the operator sets
+  // ORACLE_TELEGRAM_CARD_GRANT=1 in their own environment. The page never
+  // emits that variable, so a copied config is read-only by default.
+  const CARD_ARGS = ["-y", "--package", PACKAGE, "oracle-telegram-mcp"];
   const INIT_COMMAND = "npx -y --package @oracle-agent/oracle oracle-init";
   const NATIVE_COMMAND = "curl -fsSL https://oracle.demi.la/install.sh | bash && oracle setup model && oracle chat";
 
@@ -27,8 +32,32 @@
   };
 
   const server = () => ({ command: COMMAND, args: [...ARGS], env: env() });
+  const cardServer = () => ({ command: COMMAND, args: [...CARD_ARGS] });
 
-  const jsonMcp = () => ({ mcpServers: { oracle: server() } });
+  const jsonMcp = () => ({ mcpServers: { oracle: server(), "oracle-cards": cardServer() } });
+
+  const yamlBlock = (name, entry) => {
+    const lines = [`  ${name}:`, `    command: ${JSON.stringify(entry.command)}`, "    args:"];
+    entry.args.forEach((arg) => lines.push(`      - ${JSON.stringify(arg)}`));
+    if (entry.env) {
+      lines.push("    env:");
+      Object.entries(entry.env).forEach(([key, value]) => lines.push(`      ${key}: ${JSON.stringify(value)}`));
+    }
+    return lines;
+  };
+
+  const tomlBlock = (name, entry) => {
+    const lines = [
+      `[mcp_servers.${name}]`,
+      `command = ${JSON.stringify(entry.command)}`,
+      `args = [${entry.args.map((arg) => JSON.stringify(arg)).join(", ")}]`,
+    ];
+    if (entry.env) {
+      lines.push("", `[mcp_servers.${name}.env]`);
+      Object.entries(entry.env).forEach(([key, value]) => lines.push(`${key} = ${JSON.stringify(value)}`));
+    }
+    return lines;
+  };
 
   const configs = {
     oracle: () => [
@@ -38,32 +67,18 @@
       "# Optional: still expose read MCP to other tools",
       JSON.stringify(jsonMcp(), null, 2),
     ].join("\n"),
-    hermes: () => {
-      const s = server();
-      const values = env();
-      return [
-        "mcp_servers:",
-        "  oracle:",
-        `    command: ${JSON.stringify(s.command)}`,
-        "    args:",
-        ...s.args.map((a) => `      - ${JSON.stringify(a)}`),
-        "    env:",
-        ...Object.entries(values).map(([k, v]) => `      ${k}: ${JSON.stringify(v)}`),
-        "",
-      ].join("\n");
-    },
+    hermes: () => [
+      "mcp_servers:",
+      ...yamlBlock("oracle", server()),
+      ...yamlBlock("oracle-cards", cardServer()),
+      "",
+    ].join("\n"),
     claude: () => jsonMcp(),
-    codex: () => {
-      const values = env();
-      return [
-        "[mcp_servers.oracle]",
-        `command = ${JSON.stringify(COMMAND)}`,
-        `args = [${ARGS.map((arg) => JSON.stringify(arg)).join(", ")}]`,
-        "",
-        "[mcp_servers.oracle.env]",
-        ...Object.entries(values).map(([key, value]) => `${key} = ${JSON.stringify(value)}`),
-      ].join("\n");
-    },
+    codex: () => [
+      ...tomlBlock("oracle", server()),
+      "",
+      ...tomlBlock("oracle-cards", cardServer()),
+    ].join("\n"),
     cursor: () => jsonMcp(),
     openclaw: () => jsonMcp(),
     perplexity: () => jsonMcp(),

package/public/agent-connect/index.html

@@ -14,6 +14,7 @@
       <p class="eyebrow">AGENT CONNECT</p>
       <h1>Give your agent market context.<br /><span>Keep custody local.</span></h1>
       <p class="lede">Use Oracle's native harness, or connect Oracle MCP into the agent you already run. Skills, quotes, swap cards, and prepare land in Claude or Codex. The model proposes actions; you review and authorize them through your local operator.</p>
+      <p class="lede">The config below wires two lanes: <code>oracle</code> for market reads, and <code>oracle-cards</code> for artifact cards your agent can deepen and refresh. Card Prepare emits an unsigned artifact only, is off unless you set <code>ORACLE_TELEGRAM_CARD_GRANT=1</code> yourself, and never broadcasts.</p>
     </header>
 
     <section class="card setup" aria-labelledby="connection-title">