@oracle-agent/oracle 0.34.0 → 0.35.0

package/dist/assets/graphics/oracle_card.py

@@ -45,6 +45,7 @@ def _resolve_assets() -> Path:
     here = Path(__file__).resolve().parent
     candidates = [
         here / "assets",
+        Path.home() / ".local/share/oracle-assets",
         here.parent / "assets" / "graphics" / "assets",
         here.parent / "graphics" / "assets",
     ]

package/dist/assets/skills/oracle-desk-product/SKILL.md

@@ -97,7 +97,7 @@ does not prove npm users receive it. A locally hosted model/data/policy loop doe
 a bundled signer. A merged feature is not public until the npm artifact containing it is
 published and inspected.
 
-**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.34.0`
+**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.35.0`
 ships the encrypted local vault + short-lived loopback signer. Hosted/keyless
 Oracle cannot hold keys or move funds. Self-host after `oracle sign init|import` is **auto-armed**
 for user-initiated actions. Public still charges the disclosed fee card; Administrator

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.34.0",
+  "version": "0.35.0",
   "description": "Oracle: standalone multichain agent control plane with an optional encrypted, loopback-only self-hosted signer.",
   "license": "BUSL-1.1",
   "type": "module",

package/public/agent-connect/app.js

@@ -4,6 +4,11 @@
   const PACKAGE = "@oracle-agent/oracle";
   const COMMAND = "npx";
   const ARGS = ["-y", "--package", PACKAGE, "oracle-data-mcp"];
+  // Artifact-card lane. Deepen and Refresh are read paths; Prepare emits an
+  // unsigned artifact and is OFF unless the operator sets
+  // ORACLE_TELEGRAM_CARD_GRANT=1 in their own environment. The page never
+  // emits that variable, so a copied config is read-only by default.
+  const CARD_ARGS = ["-y", "--package", PACKAGE, "oracle-telegram-mcp"];
   const INIT_COMMAND = "npx -y --package @oracle-agent/oracle oracle-init";
   const NATIVE_COMMAND = "curl -fsSL https://oracle.demi.la/install.sh | bash && oracle setup model && oracle chat";
 
@@ -27,8 +32,32 @@
   };
 
   const server = () => ({ command: COMMAND, args: [...ARGS], env: env() });
+  const cardServer = () => ({ command: COMMAND, args: [...CARD_ARGS] });
 
-  const jsonMcp = () => ({ mcpServers: { oracle: server() } });
+  const jsonMcp = () => ({ mcpServers: { oracle: server(), "oracle-cards": cardServer() } });
+
+  const yamlBlock = (name, entry) => {
+    const lines = [`  ${name}:`, `    command: ${JSON.stringify(entry.command)}`, "    args:"];
+    entry.args.forEach((arg) => lines.push(`      - ${JSON.stringify(arg)}`));
+    if (entry.env) {
+      lines.push("    env:");
+      Object.entries(entry.env).forEach(([key, value]) => lines.push(`      ${key}: ${JSON.stringify(value)}`));
+    }
+    return lines;
+  };
+
+  const tomlBlock = (name, entry) => {
+    const lines = [
+      `[mcp_servers.${name}]`,
+      `command = ${JSON.stringify(entry.command)}`,
+      `args = [${entry.args.map((arg) => JSON.stringify(arg)).join(", ")}]`,
+    ];
+    if (entry.env) {
+      lines.push("", `[mcp_servers.${name}.env]`);
+      Object.entries(entry.env).forEach(([key, value]) => lines.push(`${key} = ${JSON.stringify(value)}`));
+    }
+    return lines;
+  };
 
   const configs = {
     oracle: () => [
@@ -38,32 +67,18 @@
       "# Optional: still expose read MCP to other tools",
       JSON.stringify(jsonMcp(), null, 2),
     ].join("\n"),
-    hermes: () => {
-      const s = server();
-      const values = env();
-      return [
-        "mcp_servers:",
-        "  oracle:",
-        `    command: ${JSON.stringify(s.command)}`,
-        "    args:",
-        ...s.args.map((a) => `      - ${JSON.stringify(a)}`),
-        "    env:",
-        ...Object.entries(values).map(([k, v]) => `      ${k}: ${JSON.stringify(v)}`),
-        "",
-      ].join("\n");
-    },
+    hermes: () => [
+      "mcp_servers:",
+      ...yamlBlock("oracle", server()),
+      ...yamlBlock("oracle-cards", cardServer()),
+      "",
+    ].join("\n"),
     claude: () => jsonMcp(),
-    codex: () => {
-      const values = env();
-      return [
-        "[mcp_servers.oracle]",
-        `command = ${JSON.stringify(COMMAND)}`,
-        `args = [${ARGS.map((arg) => JSON.stringify(arg)).join(", ")}]`,
-        "",
-        "[mcp_servers.oracle.env]",
-        ...Object.entries(values).map(([key, value]) => `${key} = ${JSON.stringify(value)}`),
-      ].join("\n");
-    },
+    codex: () => [
+      ...tomlBlock("oracle", server()),
+      "",
+      ...tomlBlock("oracle-cards", cardServer()),
+    ].join("\n"),
     cursor: () => jsonMcp(),
     openclaw: () => jsonMcp(),
     perplexity: () => jsonMcp(),

package/public/agent-connect/index.html

@@ -14,6 +14,7 @@
       <p class="eyebrow">AGENT CONNECT</p>
       <h1>Give your agent market context.<br /><span>Keep custody local.</span></h1>
       <p class="lede">Use Oracle's native harness, or connect Oracle MCP into the agent you already run. Skills, quotes, swap cards, and prepare land in Claude or Codex. The model proposes actions; you review and authorize them through your local operator.</p>
+      <p class="lede">The config below wires two lanes: <code>oracle</code> for market reads, and <code>oracle-cards</code> for artifact cards your agent can deepen and refresh. Card Prepare emits an unsigned artifact only, is off unless you set <code>ORACLE_TELEGRAM_CARD_GRANT=1</code> yourself, and never broadcasts.</p>
     </header>
 
     <section class="card setup" aria-labelledby="connection-title">