@oracle-agent/oracle 0.35.0 → 0.35.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.35.0",
+  "version": "0.35.1",
   "description": "Oracle: standalone multichain agent control plane with an optional encrypted, loopback-only self-hosted signer.",
   "license": "BUSL-1.1",
   "type": "module",

package/public/install.ps1

@@ -1,4 +1,4 @@
-# Oracle installer for Windows — CLI + desktop app.
+# Oracle installer for Windows — CLI (desktop app: private beta, opt-in).
 #
 #   iex (irm https://oracle.demi.la/install.ps1)
 #
@@ -12,7 +12,7 @@ $Base = if ($env:ORACLE_INSTALL_BASE) { $env:ORACLE_INSTALL_BASE.TrimEnd("/") }
 $Pkg = if ($env:ORACLE_NPM_PACKAGE) { $env:ORACLE_NPM_PACKAGE } else { "@oracle-agent/oracle" }
 $Ver = if ($env:ORACLE_INSTALL_VERSION) { $env:ORACLE_INSTALL_VERSION } else { "latest" }
 $SkipCli = $env:ORACLE_INSTALL_SKIP_CLI -eq "1"
-$SkipDesktop = $env:ORACLE_INSTALL_SKIP_DESKTOP -eq "1"
+$SkipDesktop = $env:ORACLE_INSTALL_DESKTOP -ne "1"
 $SumsUrl = "$Base/downloads/artifacts/SHA256SUMS.txt"
 $Work = Join-Path $env:TEMP ("oracle-setup-" + [guid]::NewGuid().ToString("n"))
 
@@ -98,5 +98,5 @@ function Install-Desktop {
 
 if (-not $SkipCli) { Install-Cli }
 if (-not $SkipDesktop) { Install-Desktop }
-Log "done. CLI: oracle --version   App: Start menu → Oracle   then: oracle setup model"
+Log "done. CLI: oracle --version   then: oracle setup model   (desktop app: private beta)"
 if (-not $SkipCli) { Log "Telegram: set ORACLE_OWNER_TELEGRAM to your numeric id, then oracle gateway" }

package/public/oracle-splash/downloads/index.html

@@ -28,27 +28,13 @@ section{padding-top:72px;scroll-margin-top:90px}.sub{color:var(--muted);line-hei
 <header><p class="eyebrow">Public release</p><h1>Install Oracle.<br><em>Hosted wallets sign outside Oracle.</em></h1><p class="lede">The CLI, desktop beta, source, research tools, and unsigned transaction preparation are public to everyone. No wallet connection or NFT is required to download or run Oracle.</p></header>
 <aside class="policy"><h2>Locals Only means 0% Oracle fees</h2><p>A Locals Only NFT waives the <b>Oracle integrator fee</b>. It does not unlock the product, waive provider or network costs, or change the hosted/keyless custody boundary. Self-host execution uses the local signer.</p></aside>
 <section id="cli"><p class="eyebrow">Oracle CLI</p><h2>Install with curl</h2><p class="sub">One line. Linux and macOS. Requires Node 20.19+ (the script checks and tells you how to get it). Installs into <code>~/.local</code> — no sudo, no global npm.</p><div class="install"><div class="cmd"><code id="cmd">curl -fsSL https://oracle.demi.la/install.sh | bash</code><button class="copy" id="copy" type="button">Copy</button></div><div class="meta"><span>curl install</span><span>hosted keyless</span><span>hosted wallet signs</span><span>user prefix</span></div></div><p class="sub" style="margin-top:18px">npm still works if you prefer: <code>npm i -g @oracle-agent/oracle</code></p></section>
-<section id="windows"><p class="eyebrow">Oracle app · Windows</p><h2>Install with PowerShell</h2><p class="sub">Same shape as Hermes: one line. Installs the CLI (<code>npm i -g @oracle-agent/oracle</code>) and the desktop NSIS build. SHA-256 checked. Never asks for a key or seed.</p><div class="install"><div class="cmd"><code id="cmd-win">iex (irm https://oracle.demi.la/install.ps1)</code><button class="copy" id="copy-win" type="button">Copy</button></div><div class="meta"><span>irm | iex</span><span>desktop app</span><span>SHA-256 checked</span></div></div></section>
-<section id="desktop"><p class="eyebrow">Desktop beta</p><h2>Native installers</h2><p class="sub">macOS, Linux, and Windows 0.4.10 bundle Oracle 0.28.7. These beta installers are not CA-signed, so platform warnings are expected. Download directly, then verify against the published SHA-256 manifest.</p><div class="artifacts">
-<div class="artifact" data-artifact="Oracle-0.4.10.AppImage"><div><h3>Linux</h3><small>AppImage · x64</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.10 beta · runtime 0.28.7</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-0.4.10.AppImage" download>Download</a></div>
-<div class="artifact" data-artifact="Oracle-0.4.10-arm64.dmg"><div><h3>macOS</h3><small>DMG · Apple silicon</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.10 beta · runtime 0.28.7</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-0.4.10-arm64.dmg" download>Download</a></div>
-<div class="artifact" data-artifact="Oracle-Setup-0.4.10.exe"><div><h3>Windows</h3><small>NSIS installer · x64</small></div><div class="artifact-meta"><span class="build">Oracle 0.4.10 beta · runtime 0.28.7</span></div><code class="hash" data-hash>checksum loading</code><a class="dl-btn" href="/downloads/artifacts/Oracle-Setup-0.4.10.exe" download>Download</a></div>
-</div><p class="platform-note">Checksums: <a class="checksum" href="/downloads/artifacts/SHA256SUMS.txt">SHA256SUMS.txt</a>. Beta installers may trigger macOS Gatekeeper or Windows SmartScreen when a build is not notarized or CA-signed. The installer never asks for a private key or seed. Hosted/keyless cannot hold keys. Self-host signer setup is a separate command.</p></section>
+<section id="windows"><p class="eyebrow">Oracle CLI · Windows</p><h2>Install with PowerShell</h2><p class="sub">Same shape as Hermes: one line. Installs the CLI (<code>npm i -g @oracle-agent/oracle</code>). Never asks for a key or seed.</p><div class="install"><div class="cmd"><code id="cmd-win">iex (irm https://oracle.demi.la/install.ps1)</code><button class="copy" id="copy-win" type="button">Copy</button></div><div class="meta"><span>irm | iex</span><span>CLI only</span><span>no keys ever</span></div></div></section>
+<section id="desktop"><p class="eyebrow">Desktop beta</p><h2>Private beta</h2><p class="sub">Desktop builds are in private beta while we finish the app. Public downloads return when it ships. The CLI above is the full product today.</p></section>
 </main>
 <footer><div class="nav-inner"><span>oracle · locals only labs</span><span>public / self-custody / local signer</span></div></footer>
 <script>
 document.getElementById("copy").addEventListener("click",async function(){try{await navigator.clipboard.writeText(document.getElementById("cmd").textContent.trim());this.textContent="Copied";var button=this;setTimeout(function(){button.textContent="Copy"},1400)}catch(_){this.textContent="Select command"}});
 document.getElementById("copy-win").addEventListener("click",async function(){try{await navigator.clipboard.writeText(document.getElementById("cmd-win").textContent.trim());this.textContent="Copied";var button=this;setTimeout(function(){button.textContent="Copy"},1400)}catch(_){this.textContent="Select command"}});
-(async function(){
-  var rows=Array.from(document.querySelectorAll("[data-artifact]"));
-  function unavailable(row){row.querySelector("[data-hash]").textContent="checksum unavailable";row.querySelector(".dl-btn").setAttribute("aria-disabled","true")}
-  try{
-    var response=await fetch("/downloads/artifacts/SHA256SUMS.txt",{cache:"no-store"});
-    if(!response.ok)throw new Error("manifest unavailable");
-    var sums=new Map((await response.text()).trim().split(/\r?\n/).map(function(line){var match=line.match(/^([a-f0-9]{64})\s+\*?(.+)$/i);return match?[match[2],match[1].toLowerCase()]:null}).filter(Boolean));
-    rows.forEach(function(row){var sum=sums.get(row.dataset.artifact);if(!sum){unavailable(row);return}row.querySelector("[data-hash]").textContent=sum});
-  }catch(_){rows.forEach(unavailable)}
-})();
 </script>
 </body>
 </html>

package/public/oracle-splash/index.html

@@ -1041,14 +1041,13 @@ a.chip:hover{border-color:rgba(124,196,255,.3);background:rgba(21,32,49,.6);tran
  .hero-shot-orb video{display:none}
  .hero-shot-orb #orb-still{position:static;opacity:1}
 }
-/* CLI section leads with the filled active-surface still. */
+/* CLI section leads with a real TUI capture; poster is the reduced-motion fallback. */
 .cli-proof{position:relative;aspect-ratio:auto;height:auto;min-height:0;padding:0;
  max-width:868px;margin-inline:auto;line-height:0;display:block}
-.cli-proof #cli-still{display:block;width:100%;height:auto}
-.cli-proof video.ready ~ #cli-still{position:absolute;inset:0;opacity:0;pointer-events:none}
+.cli-proof picture,.cli-proof img{display:block;width:100%;height:auto}
+.cli-proof figcaption{line-height:1.4}
 @media (prefers-reduced-motion:reduce){
- .cli-proof video{display:none}
- .cli-proof #cli-still{position:static;opacity:1}
+ .cli-proof img{position:static;opacity:1}
 }
 
 /* Recorded session leads; the still is the fallback underneath it. */
@@ -1200,7 +1199,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
     <circle class="core" cx="50" cy="50" r="11"/>
    </svg>
   </span>
-  oracle</a>
+  oracle <span class="nav-chip">beta</span></a>
  <nav class="nav-links" aria-label="Primary">
   <a class="hide-sm" href="#cli">CLI</a>
   <a class="hide-sm" href="#orchestration">Profiles</a>
@@ -1251,42 +1250,35 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
 
   <div class="hero-installer" data-install-tabs>
    <div class="hero-install-tabs" role="tablist" aria-label="Install Oracle">
-    <button class="hero-install-tab" id="install-tab-macos" type="button" role="tab" aria-selected="true" aria-controls="install-panel-macos" tabindex="0" data-install-tab="macos">macOS</button>
-    <button class="hero-install-tab" id="install-tab-linux" type="button" role="tab" aria-selected="false" aria-controls="install-panel-linux" tabindex="-1" data-install-tab="linux">Linux</button>
+    <button class="hero-install-tab" id="install-tab-unix" type="button" role="tab" aria-selected="true" aria-controls="install-panel-unix" tabindex="0" data-install-tab="unix">macOS / Linux</button>
     <button class="hero-install-tab" id="install-tab-windows" type="button" role="tab" aria-selected="false" aria-controls="install-panel-windows" tabindex="-1" data-install-tab="windows">Windows</button>
    </div>
-   <div class="hero-install-panel" id="install-panel-macos" role="tabpanel" aria-labelledby="install-tab-macos" data-install-panel="macos">
-    <button class="hero-install-command" type="button" data-copy-install="curl -fsSL https://oracle.demi.la/install.sh | bash" aria-label="Copy the macOS install command">
+   <div class="hero-install-panel" id="install-panel-unix" role="tabpanel" aria-labelledby="install-tab-unix" data-install-panel="unix">
+    <button class="hero-install-command" type="button" data-copy-install="curl -fsSL https://oracle.demi.la/install.sh | bash" aria-label="Copy the macOS or Linux install command">
      <code>curl -fsSL https://oracle.demi.la/install.sh | bash</code><span class="hero-install-copy">Copy</span>
     </button>
-    <div class="hero-install-meta"><span>macOS · CLI</span><a href="/downloads/artifacts/Oracle-0.4.10-arm64.dmg">Download Oracle app · DMG</a></div>
-   </div>
-   <div class="hero-install-panel" id="install-panel-linux" role="tabpanel" aria-labelledby="install-tab-linux" data-install-panel="linux" hidden>
-    <button class="hero-install-command" type="button" data-copy-install="curl -fsSL https://oracle.demi.la/install.sh | bash" aria-label="Copy the Linux install command">
-     <code>curl -fsSL https://oracle.demi.la/install.sh | bash</code><span class="hero-install-copy">Copy</span>
-    </button>
-    <div class="hero-install-meta"><span>Linux · CLI</span><a href="/downloads/artifacts/Oracle-0.4.10.AppImage">Download Oracle app · AppImage</a></div>
+    <div class="hero-install-meta"><span>macOS + Linux · CLI</span></div>
    </div>
    <div class="hero-install-panel" id="install-panel-windows" role="tabpanel" aria-labelledby="install-tab-windows" data-install-panel="windows" hidden>
     <button class="hero-install-command" type="button" data-copy-install="iex (irm https://oracle.demi.la/install.ps1)" aria-label="Copy the Windows install command">
      <code>iex (irm https://oracle.demi.la/install.ps1)</code><span class="hero-install-copy">Copy</span>
     </button>
-    <div class="hero-install-meta"><span>Windows · CLI + Oracle app</span><a href="/downloads/artifacts/Oracle-Setup-0.4.10.exe">Download installer · EXE</a></div>
+    <div class="hero-install-meta"><span>Windows · CLI</span></div>
    </div>
   </div>
 
   <div class="home-stats rv" aria-label="Oracle surface metrics">
-   <div class="home-stat"><b id="hero-protocol-count" data-count="110">110</b><span>protocol entries wired</span></div>
-   <div class="home-stat"><b id="hero-provider-count" data-count="70">70</b><span>data providers</span></div>
-   <div class="home-stat"><b id="hero-op-count" data-count="322">322</b><span>data operations</span></div>
-   <div class="home-stat"><b id="hero-chain-count">13 + EVM</b><span>chains wired</span></div>
+   <div class="home-stat"><b id="hero-protocol-count" data-count="220">220</b><span>protocols / venues wired</span></div>
+   <div class="home-stat"><b id="hero-provider-count" data-count="109">109</b><span>data providers</span></div>
+   <div class="home-stat"><b id="hero-op-count" data-count="467">467</b><span>data operations</span></div>
+   <div class="home-stat"><b id="hero-chain-count">14 + EVM</b><span>chains wired</span></div>
   </div>
  </div>
 </section>
 <section class="section" id="orchestration">
  <p class="section-label rv">Profiles</p>
  <h2 class="section-title rv">Multi-profile. <em>Customizable.</em></h2>
- <p class="section-lede rv">Input / Command hits the Oracle control plane, then routes across venue profiles, multi-chain EVM, Bitcoin, Solana, and the protocol builder. Any MCP harness can drive a single agent.</p>
+ <p class="section-lede rv">Input hits the Oracle control plane and routes across venue profiles, multi-chain EVM, Bitcoin, Solana, and the protocol builder. Any MCP harness drives a single agent.</p>
 
  <div class="graph-shell rv">
   <div class="graph-top">
@@ -1358,7 +1350,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
      <div class="node route p-hl">
       <div class="tag">profile</div>
       <div class="name">hyperliquid agent</div>
-      <div class="sub">perps · hip-3/4 · ta</div>
+      <div class="sub">perps · hip-3/4 · funding</div>
       <div class="chains"><span class="ch">Hyperliquid <img src="https://icons.llamao.fi/icons/protocols/hyperliquid?w=24&h=24" alt="" loading="lazy"></span><span class="ch">Hyperliquid 999 <img src="https://icons.llamao.fi/icons/chains/rsz_hyperliquid?w=24&h=24" alt="" loading="lazy"></span></div>
      </div>
      <div class="node route p-rh">
@@ -1440,7 +1432,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    <article class="route-card p-hl">
     <div class="where">hyperliquid agent →</div>
     <h3>Hyperliquid <img src="https://icons.llamao.fi/icons/protocols/hyperliquid?w=40&h=40" alt="Hyperliquid" loading="lazy"></h3>
-    <p>Native perps, HIP-3/4 asset resolve, TA, event risk, and Hyperliquid when you need HL's EVM surface.</p>
+    <p>Native perps, HIP-3/4 asset resolve, funding, event risk, and Hyperliquid when you need HL's EVM surface.</p>
     <div class="chips">
      <span class="chip-s">perps</span>
      <span class="chip-s">HIP-3/4</span>
@@ -1461,7 +1453,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    <article class="route-card p-sol">
     <div class="where">solana agent →</div>
     <h3>Solana <img src="https://icons.llamao.fi/icons/chains/rsz_solana?w=40&h=40" alt="Solana" loading="lazy"></h3>
-    <p>Jupiter routes, Sanctum liquid-staking tokens, Solend lending, Kamino strategies, Meteora DLMM, Jito MEV, and Pyth feeds. The bounded lane decodes every instruction and bans delegation ops outright.</p>
+    <p>Jupiter routes and one-shot swaps, Sanctum LSTs, Solend, Kamino, Meteora DLMM, Jito MEV, and Pyth feeds. The bounded lane decodes every instruction and bans delegation ops.</p>
     <div class="chips">
      <span class="chip-s">Jupiter</span>
      <span class="chip-s">swaps</span>
@@ -1471,7 +1463,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    <article class="route-card p-btc">
     <div class="where">bitcoin agent →</div>
     <h3>Bitcoin <img src="https://icons.llamao.fi/icons/chains/rsz_bitcoin?w=40&h=40" alt="Bitcoin" loading="lazy"></h3>
-    <p>Ordinals, runes, Babylon staking, Lightning topology, mining economics, and the Liquid and Stacks sidechains. Every PSBT input carries proven provenance, so fees are computed, not asserted.</p>
+    <p>Ordinals, runes, Babylon staking, Lightning, mining economics, Liquid and Stacks. Every PSBT input carries proven provenance — fees are computed, not asserted.</p>
     <div class="chips">
      <span class="chip-s">ordinals</span>
      <span class="chip-s">runes</span>
@@ -1481,7 +1473,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    <article class="route-card p-evm">
     <div class="where">evm / bridge agent →</div>
     <h3>Multi-chain EVM <img src="https://icons.llamao.fi/icons/chains/rsz_ethereum?w=40&h=40" alt="Ethereum" loading="lazy"></h3>
-    <p>Multi-chain routes, LI.FI and Relay bridges, Aave lending, Spark, Beefy, Symbiotic restaking, and CoW solver auctions. Bounded evm-swap and evm-bridge lanes.</p>
+    <p>Multi-chain routes, LI.FI and Relay bridges, Aave, Spark, Beefy, Symbiotic restaking. 1inch limit posts, CoW posting, ERC-8004 agent identity, EIP-7702 last-mile execute and options typed-data. Bounded evm-swap and evm-bridge lanes.</p>
     <div class="chips">
      <span class="chip-s">evm-swap</span>
      <span class="chip-s">evm-bridge</span>
@@ -1491,7 +1483,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    <article class="route-card p-nft">
     <div class="where">nft agent →</div>
     <h3>Cross-chain NFTs <img src="assets/protocols/opensea.png" alt="OpenSea" loading="lazy"></h3>
-    <p>List across 22 EVM chains and Solana via OpenSea. Buy and list Ordinals through Satflow with proven PSBT provenance. Solana listings via Magic Eden. Floors, holdings and PnL are read first, then prepared for your signature.</p>
+    <p>List across 22 EVM chains and Solana via OpenSea, Ordinals via Satflow with proven PSBT provenance, Solana via Magic Eden. Floors, holdings and PnL read first, then prepared for your signature.</p>
     <div class="chips">
      <span class="chip-s">list</span>
      <span class="chip-s">buy</span>
@@ -1521,7 +1513,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    </article>
   </div>
   <div class="why-band">
-   <p>The model proposes. Policy bounds. You own signatures. Multi-profile desks route each request to the right surface. Vaults, perps, bridges, and protocol scaffolds, not just swaps. Empty allowlists refuse everything until you configure them.</p>
+   <p>The model proposes. Policy bounds. You own signatures. Profiles route each request to the right surface — vaults, perps, bridges, and protocol scaffolds. Empty allowlists refuse everything.</p>
   </div>
  </div>
 
@@ -1533,29 +1525,29 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   <article class="moat-card">
    <div class="n">bound grants</div>
    <h3>Wallet with temporary agent permission</h3>
-   <p>Max value, chain, venue, destinations, and TTL. Outside the grant = hard refuse, not an agent with a free wallet.</p>
+   <p>Max value, chain, venue, destinations, and TTL. Local x402 budgets cap what an agent may spend. Outside the grant = hard refuse, not an agent with a free wallet.</p>
   </article>
   <article class="moat-card">
    <div class="n">bounded surfaces</div>
    <h3>Three local-signer lanes, each with its own decoder</h3>
-   <p>evm, btc, sol transfers. Hyperliquid, Polymarket, swaps, and bridges stay wallet-signed. Each local-signer lane decodes its own envelope, proves every value-moving field, and refuses while its allowlists are empty.</p>
+   <p>evm, btc, sol transfers. Hyperliquid, Polymarket, swaps, and bridges stay wallet-signed. Each lane decodes its own envelope and proves every value-moving field. CEX execution ships sealed — order routing with Coinbase order paths pinned.</p>
   </article>
   <article class="moat-card">
    <div class="n">evidence</div>
    <h3>See it before you approve. Prove it after.</h3>
-   <p>Before you approve, Oracle shows what you will receive, the expected cost, and which app gets permission to move your tokens. Afterward, it shows whether the transaction succeeded, what changed in your wallet, and whether any permission is still active. You can review unsigned transactions on a hardware wallet. Nothing is marked complete without proof.</p>
+   <p>Before you approve: what you receive, the expected cost, and which app gets permission. After: whether it succeeded, what changed, and whether any permission is still active. Exact tax-lot records and observe-only finality reconciliation keep the ledger honest. Review unsigned transactions on a hardware wallet.</p>
   </article>
   <article class="moat-card">
    <div class="n">fail closed</div>
    <h3>Unconfigured means refused</h3>
-   <p>A fresh install signs nothing. Destination allowlists stop silent router drift, and every lane refuses while its allowlists are empty, so new contracts stay blocked until you add them.</p>
+   <p>A fresh install signs nothing. Destination allowlists stop silent router drift; empty allowlists refuse everything until you add entries. Tenant RBAC scopes who may prepare what; governance votes prepare unsigned.</p>
   </article>
  </div>
 
  <div class="selfcustody rv">
   <p class="section-label rv">Works in any harness</p>
  <h2 class="section-title rv" data-split>Ask in <em>your</em> agent.</h2>
- <p class="section-lede rv">Oracle installs as an MCP server, so Claude, Codex, Cursor and the rest get Oracle skills, live swap cards, quotes, and prepare. Type the request the way you would say it. With <code>oracle signer</code> running on this machine they can also fill through the local signer — same path as Telegram Allow. Keys stay here. You authorize.</p>
+ <p class="section-lede rv">Oracle installs as an MCP server — Claude, Codex, Cursor and the rest get Oracle skills, live swap cards, quotes, and prepare. With <code>oracle signer</code> armed, fills queue for your ack and clear through the local signer, same path as Telegram Allow. Keys stay here. You authorize.</p>
  <div class="agent-install rv">
   <span>Add Oracle to your agent:</span>
   <div class="install-cmds">
@@ -1614,7 +1606,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
    <noscript><p class="agent-ask">move 5k usdc into weth, cheapest route</p></noscript>
   </figure>
  </div>
-<p class="agent-caption rv">Same tool from the terminal, the desktop app, any MCP client, or your agent on Telegram, Discord, WhatsApp and Signal. Buzz integration shipped. Hosted/keyless cannot hold keys. Self-host fill is MCP <code>signer_queue</code> then <code>signer_ack</code> on the local signer.</p>
+<p class="agent-caption rv">Same tool from the terminal, the desktop app, any MCP client, or your agent on Telegram, Discord, WhatsApp, Signal, Photon and Buzz. A multi-bot gateway runs role- and chain-scoped bots over an A2A bus, and Allow/Deny approval cards render natively on Telegram, Discord, WhatsApp and Photon. Hosted/keyless cannot hold keys; self-host fills through the local signer.</p>
 <div class="agent-icons rv" style="display:flex;flex-wrap:wrap;gap:10px;justify-content:center;margin-top:14px"><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm4.64 6.8c-.15 1.58-.8 5.42-1.13 7.19-.14.75-.42 1-.68 1.03-.58.05-1.02-.38-1.58-.75-.88-.58-1.38-.94-2.23-1.5-.99-.65-.35-1.01.22-1.59.15-.15 2.71-2.48 2.76-2.69.01-.03.01-.14-.07-.2-.08-.06-.19-.04-.27-.02-.12.03-1.96 1.25-5.54 3.66-.52.36-1 .53-1.42.52-.47-.01-1.37-.26-2.03-.48-.82-.27-1.47-.42-1.41-.87.03-.24.36-.49.99-.74 3.87-1.69 6.45-2.8 7.74-3.34 3.69-1.53 4.45-1.8 4.95-1.81.11 0 .36.03.52.17.14.12.18.28.2.4.02.11.04.37.01.56z" fill="#229ED9"/></svg>Telegram</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M19.27 5.33C17.94 4.71 14.48 3.26 10.68 4.77a27.98 27.98 0 0 0-6.02 3.13c-.87.51-1.3.9-1.23 1.44.07.46.57.73 1.42 1.12l.33.15c.85.38 1.28.57 1.43 1.01.08.23.07.6-.08 1.1-.15.51-.5 1.15-1.02 2.02-.34.57-.5.85-.37.99.14.15.48.11 1.09-.26 1.76-1.07 3.18-1.93 4.23-2.59 3.22-2.06 5.08-2.82 5.55-2.28.18.21.06.84-.34 1.85-.39 1.01-1.05 2.32-1.51 3.13-.24.43-.37.64-.45.74-.11.14-.2.16-.3.15-.3-.03-.73-.45-1.41-1.3-.5-.62-.94-1.08-1.26-1.25-.64-.34-1.08-.13-1.14.26-.05.29.14.61.56 1.02.43.41 1.15 1.06 1.56 1.5.53.58.82.98.85 1.28.02.24-.04.47-.46.75-.42.27-.86.41-1.34.41-.41 0-.86-.1-1.35-.29-1.7-.68-3.25-1.94-4.64-3.79a18.7 18.7 0 0 1-3.13-5.08c-.38-.79-.16-1.31.41-1.63.47-.27 1.12-.22 1.96.14a10.26 10.26 0 0 1 3.74 2.28c.36.35.68.52.96.52.21 0 .44-.07.69-.22.37-.22.65-.6.86-1.13.21-.53.34-1.14.34-1.57 0-.5-.15-.88-.45-1.12-.52-.42-1.44-.52-2.76-.3-1.71.28-3.62 1.03-5.72 2.24l-.86.49a6.72 6.72 0 0 1-1.02.51c-.37.14-.64.17-.81.09-.18-.1-.24-.29-.2-.58.04-.3.16-.56.36-.76z" fill="#5865F2"/></svg>Discord</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M17.472 14.382c-.297-.149-1.758-.867-2.03-.967-.273-.099-.471-.148-.67.15-.197.297-.767.966-.94 1.164-.173.199-.347.223-.644.075-.297-.15-1.255-.463-2.39-1.475-.883-.788-1.48-1.761-1.653-2.059-.173-.297-.018-.458.13-.606.134-.133.298-.347.446-.52.149-.174.198-.298.298-.497.099-.198.05-.371-.025-.52-.075-.149-.669-1.612-.916-2.207-.242-.579-.487-.5-.669-.51-.173-.008-.371-.01-.57-.01-.198 0-.52.074-.792.372-.272.297-1.04 1.016-1.04 2.479 0 1.462 1.065 2.875 1.213 3.074.149.198 2.096 3.2 5.077 4.487.709.306 1.262.489 1.694.625.712.227 1.36.195 1.871.118.571-.085 1.758-.719 2.006-1.413.248-.694.248-1.289.173-1.413-.074-.124-.272-.198-.57-.347m-5.421 7.403-.008-.005h.008l.005-.002h-.005V19.5c0-.248.009-.498.005-.746l.003-.003c.009 0 .018.001.027.002h-.02l-.011.008-.004.024zm-.006-.225h-.003l-.008.003.003.011.003-.005a.018.018 0 0 1 .005-.009zm-.004.17h.003l-.005-.002.002.001v.001zm.02-.003.003.003-.002-.002-.001-.001zM12 0C5.373 0 0 5.373 0 12s5.373 12 12 12 12-5.373 12-12S18.627 0 12 0z" fill="#25D366"/></svg>WhatsApp</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zM7.64 15.52c-.38-.66-.6-1.41-.6-2.2 0-2.63 2.14-4.77 4.77-4.77 1.27 0 2.47.5 3.37 1.4.9.9 1.4 2.1 1.4 3.37 0 2.63-2.14 4.77-4.77 4.77-.79 0-1.54-.22-2.2-.6L7.5 18l.14-2.48z" fill="#3B82F6"/></svg>Signal</span><span style="display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border:1px solid var(--line);border-radius:999px;font-family:var(--mono);font-size:10px;color:var(--cool);letter-spacing:.08em"><svg width="14" height="14" viewBox="0 0 24 24" fill="none"><path d="M12 2L2 7l10 5 10-5-10-5zM2 17l10 5 10-5M2 12l10 5 10-5" stroke="#7C4DFF" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/></svg>Buzz</span></div>
  <div class="venues rv">
   <div class="venues-head"><span>models // harnesses</span><span><b>bring your own model</b> · oracle is the control plane</span></div>
@@ -1626,19 +1618,19 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   <div class="selfcustody-grid">
    <div>
     <h4>Everything runs on your machine</h4>
-    <p>The CLI and the desktop app are the whole product. There is no Oracle account, no hosted wallet, and no server that brokers your trades. Reads go straight from your machine to public RPCs and venue APIs.</p>
+    <p>The CLI and the desktop app are the whole product. No Oracle account, no hosted wallet, no broker server. Reads go straight to public RPCs and venue APIs.</p>
    </div>
    <div>
     <h4>Hosted keys never reach Oracle</h4>
-    <p>Hosted/keyless Oracle has no hosted wallet and no cloud key. A self-host setup keeps the user's key in an encrypted local vault and executes through a short-lived loopback signer. Public modules still cannot import private Administrator house-signer code; a boundary test fails the build if they do.</p>
+    <p>Hosted/keyless Oracle holds no cloud key. Self-host keeps your key in an encrypted local vault behind a short-lived loopback signer. Public modules cannot import house-signer code — a boundary test fails the build if they do.</p>
    </div>
    <div>
     <h4>Hosted wallets sign outside Oracle</h4>
-    <p>Hosted/keyless Oracle prepares an artifact for your browser extension or hardware wallet. Self-host Oracle can execute supported artifacts through the loopback signer under sealed local policy. If you close the prompt, nothing happened.</p>
+    <p>Hosted/keyless Oracle prepares an artifact for your extension or hardware wallet; self-host executes through the loopback signer under sealed local policy. If you close the prompt, nothing happened.</p>
    </div>
    <div>
     <h4>Nothing to seize, nothing to leak</h4>
-    <p>No custody means no honeypot. There is no server holding user keys to breach, no operator who can freeze you, and no counterparty risk from Oracle itself. Delete the app and your funds never moved.</p>
+    <p>No custody means no honeypot. No server of user keys to breach, no operator who can freeze you, no counterparty risk from Oracle itself. Delete the app and your funds never moved.</p>
    </div>
   </div>
  </div>
@@ -1690,7 +1682,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
     <div class="strategy-kicker">Agentic strategies</div>
     <h3 id="strategies-title">Move liquidity. Bound the risk.</h3>
    </div>
-   <p>Oracle reads the position, models the route and costs, then prepares only the steps the selected lane can actually support.</p>
+   <p>Oracle reads live markets, checks policy, and prepares unsigned actions. The cards below are the main shipped surfaces, not a roadmap.</p>
   </div>
    <figure class="route-proof rv">
    <video id="route-session" width="868" height="456"
@@ -1751,75 +1743,94 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
 
   <div class="strategy-grid">
    <article class="strategy-card">
-    <div class="mode">read · model · prepare</div>
-    <h4>LP rebalancing</h4>
-    <p>Read concentrated-liquidity positions, model new ranges and fee drag, then prepare collect, swap and redeploy steps on supported venues. You sign each step.</p>
+    <div class="mode">quote · route · prepare</div>
+    <h4>Route engine</h4>
+    <p>Price swaps across Paraswap, Cow, Uniswap, LI.FI and more. Oracle ranks net cost and returns unsigned steps.</p>
+   </article>
+   <article class="strategy-card">
+    <div class="mode">bridge · revoke · sign</div>
+    <h4>Cross-chain bridges</h4>
+    <p>deBridge, ChangeNOW, LI.FI, Squid, Stargate, THORChain, Bungee, Connext, Wormhole and Across, with approval checks first.</p>
+   </article>
+   <article class="strategy-card">
+    <div class="mode">perps · funding · hedge</div>
+    <h4>Perps and funding</h4>
+    <p>Hyperliquid, GMX, dYdX, Drift and Vertex. Funding, books, positions and unsigned order prep in one lane.</p>
+   </article>
+   <article class="strategy-card">
+    <div class="mode">LP · vault · stake</div>
+    <h4>LP and yield</h4>
+    <p>Read positions, compare vaults, model fees and lockups, then prepare deposits, exits or range changes.</p>
+   </article>
+   <article class="strategy-card">
+    <div class="mode">farm · hedge · exit</div>
+    <h4>Farming playbooks</h4>
+    <p>Stable loops, collateral-plus-perp hedges and LP incentives, each with exposure, monitor and exit rules.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">monitor · shadow · simulate</div>
-    <h4>MEV</h4>
-    <p>Monitor cross-venue divergence and simulate net edge after gas, slippage and lender costs. Public mode is shadow analysis, not autonomous execution.</p>
+    <div class="mode">split · limit · dca</div>
+    <h4>TWAP and limit orders</h4>
+    <p>Split buys or sells into child orders, cap participation, or stage limit/DCA plans from live depth.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">simulate · policy-check</div>
-    <h4>Flash loans</h4>
-    <p>Build bounded atomic loan routes and test premium, calldata, gas and minimum-profit gates. Public live execution remains disabled.</p>
+    <div class="mode">portfolio · history · pnl</div>
+    <h4>Portfolio memory</h4>
+    <p>Wallet balances, NFTs, known value, historical snapshots and typed workspace records persist locally.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">read · quote · prepare</div>
-    <h4>Staking</h4>
-    <p>Compare validators, staking vaults, rewards and unlock periods, then prepare supported stake, withdraw and delegate actions for your signature.</p>
+    <div class="mode">scan · approve · revoke</div>
+    <h4>Approval safety</h4>
+    <p>Find risky allowances, bind exact approval digests, and prepare revokes without treating a scoped scan as full safety.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">discover · compare · prepare</div>
-    <h4>Yield</h4>
-    <p>Rank staking, vault and LP opportunities by net APY after fees, liquidity, lockups and smart-contract risk, then prepare supported deposits or migrations for your signature.</p>
+    <div class="mode">source · flag · gate</div>
+    <h4>Contract risk</h4>
+    <p>Heuristic source checks flag access control, reentrancy shape, unlimited approvals, oracle risk and replay hazards.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">model · hedge · prepare</div>
-    <h4>Farming methods</h4>
-    <p>Six delta-aware playbooks, from stablecoin loops to collateral-plus-perp hedges and LP incentive hedges. Each one carries explicit exposure, hedge, monitoring and exit rules rather than a bare APR.</p>
+    <div class="mode">snipe · nft · ordinals</div>
+    <h4>Token and NFT radar</h4>
+    <p>EVM token sniper, OpenSea, Magic Eden, Solana NFTs, Bitcoin ordinals and runes feed prepare-only plans.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">hedge · fund · rebalance</div>
-    <h4>Delta neutral</h4>
-    <p>Pair a spot or LP leg against a short perp so the position earns funding and fees without directional exposure. Oracle reads both legs, models funding, borrow and rebalance drag, then prepares each leg for your signature.</p>
+    <div class="mode">events · clob · outcomes</div>
+    <h4>Polymarket and outcomes</h4>
+    <p>Polymarket CLOB, Kalshi data and Hyperliquid HIP-4 outcomes share one event-market research lane.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">split · schedule · prepare</div>
-    <h4>TWAP accumulate &amp; distribute</h4>
-    <p>Buy or sell over time instead of in one print. Oracle splits the notional into scheduled child orders, prices each against live venue depth, and prepares them individually so a single fill never moves the market against you. Same engine for distribution — size each tranche, cap participation, keep every child order unsigned.</p>
+    <div class="mode">budget · pay · cap</div>
+    <h4>x402 budgets</h4>
+    <p>Decode payment requests and prepare exact capped spend. No signature, header or facilitator call is created by default.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">route · revoke · bridge</div>
-    <h4>deBridge · ChangeNOW · LI.FI · revoke.cash</h4>
-    <p>Bridge and cross-chain integration with deBridge, ChangeNOW, LI.FI, Squid, Stargate, THORChain, Bungee, Connext, Wormhole, and Across. Every route checks revoke.cash before execution — Oracle prepares the unsigned tx, you sign.</p>
+    <div class="mode">mcp · plugins · tools</div>
+    <h4>Agent harnesses</h4>
+    <p>Claude, Codex, Cursor, ChatGPT and VS Code get the same Oracle tools through MCP and plugin installs.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">discover · score · rank</div>
-    <h4>Live farm discovery</h4>
-    <p>Scan live pools across chains and score each candidate on net APR after estimated borrow, funding and gas, minus a risk haircut for thin TVL. Ranked candidates feed straight into a prepare plan.</p>
+    <div class="mode">xurl · vision · fence</div>
+    <h4>Fenced web tools</h4>
+    <p>xurl, vision and web helpers run through explicit allowlists. The public tool policy still has no shell tool.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">alert · shadow · notify</div>
-    <h4>Custom alerts + shadow trading</h4>
-    <p>Follow favorite chains, wallets, funds and deployer addresses, then get notified when one opens, rotates or exits. Run the playbook in shadow mode against live prices before you arm it for live execution.</p>
+    <div class="mode">session · rename · fanout</div>
+    <h4>Saved sessions</h4>
+    <p>New chats are remembered, older chats resume from the picker, and selected sessions can rename, delete or fan out.</p>
    </article>
    <article class="strategy-card">
-    <div class="mode">shadow · simulate · execute</div>
-    <h4>Paper-trade until you go live</h4>
-    <p>Simulate every strategy against live venue data without committing capital. Track P&L, slippage, and fill quality in shadow mode — then arm it with one flag when you're ready. No gas, no exposure, no regret trades.</p>
+    <div class="mode">chat · approve · notify</div>
+    <h4>Chat approvals</h4>
+    <p>Telegram, Discord, WhatsApp, Photon and Buzz receive scoped prompts, alerts and Allow/Deny approval cards.</p>
    </article>
-   
   </div>
-  <div class="strategy-posture"><b>Public posture:</b> research, simulation and unsigned preparation. MEV and flash-loan broadcast stays off; supported staking, LP, yield and farming actions require the user wallet to sign. Farm discovery reads live third-party yield data. Custom alerts and shadow loops notify or simulate first; live execution still requires arming and a user signature.</div>
+  <div class="strategy-posture"><b>Public posture:</b> read, simulate, alert and prepare unsigned actions. Anything that moves value still needs explicit arming, local signer approval and your wallet signature.</div>
 
   </div>
 
  <section class="section" id="chains">
  <p class="section-label rv">Chains</p>
  <h2 class="section-title rv">Where you can <em>operate.</em></h2>
- <p class="section-lede rv">Every built-in EVM chain exposes the full scanner capability set. <b>Route</b> means Oracle can price and prepare a swap there. Any additional EVM chain can be registered with a chain id and an RPC; unsupported paths fail closed rather than guessing a router.</p>
+ <p class="section-lede rv">Every built-in EVM chain exposes the full scanner set. <b>Route</b> means Oracle can price and prepare a swap there. Register any extra EVM chain with a chain id and an RPC; unsupported paths fail closed.</p>
  <div class="chain-grid" id="chain-grid"></div>
  <div class="hl-surface rv">
   <div class="venues-head"><span>hyperliquid // what oracle actually does</span></div>
@@ -1839,28 +1850,34 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
  <div class="cli-install rv">
   <div class="cli-install-cmd"><code>curl -fsSL https://oracle.demi.la/install.sh | bash</code> <span class="cli-install-hint">then oracle setup model && oracle chat</span></div>
  </div>
- <p class="section-lede rv">The real Oracle shell, isolated from desktop chrome. No accounts, no servers. The CLI runs on your machine and reads straight from public RPCs.</p>
- <p class="section-lede rv">Pin the active surface with <code style="color:var(--blue2)">/chain hyperliquid</code>, switch models, ask naturally. Oracle reads, prices, and prepares — you sign.</p>
+ <p class="section-lede rv">The real Oracle shell, isolated from desktop chrome. No accounts, no servers — it runs on your machine and reads straight from public RPCs. Session start greets you, file writes need explicit approval, and there is no shell tool at all.</p>
+ <p class="section-lede rv">Pin the active surface with <code style="color:var(--blue2)">/chain hyperliquid</code>, pick any model with <code style="color:var(--blue2)">/model</code> — Qwen and GLM included — switch sessions in place, ask naturally. A guided setup wizard takes a fresh install to first quote. Oracle reads, prices, and prepares — you sign.</p>
  <div class="convert-grid rv">
   <div>
    <figure class="cli-frame cli-proof">
-    <img id="cli-still" src="assets/cli-chain-hyperliquid.jpg?v=cli-visible" alt="Oracle CLI selecting Hyperliquid with the /chain hyperliquid command, showing the active surface: chain, chain id, agent, HyperCore and HyperEVM" width="1600" height="900" loading="eager" fetchpriority="high" />
+    <picture>
+     <source srcset="assets/oracle-cli-v035.gif?v=20260823" type="image/gif" media="(prefers-reduced-motion: no-preference)">
+     <img id="cli-still" src="assets/oracle-cli-v035-poster.jpg?v=20260823" alt="Oracle CLI TUI v0.35.0 with starfield, Hyperliquid context, and the ←/→ sessions picker affordance" width="1600" height="1282" loading="eager" fetchpriority="high" />
+    </picture>
    </figure>
    <p class="cli-cap">actual oracle shell</p>
   </div>
   <div class="convert-copy">
-   <p>The active chain follows each read, quote, prepare, and bounded execution path.</p>
+   <p>The active chain follows each read, quote, prepare, and bounded execution path. <code style="color:var(--blue2)">oracle doctor</code> checks the read plane before you trade, <code style="color:var(--blue2)">oracle equities</code> opens the HIP-3, Arcus, Robinhood Chain and Solana equities crossbook, and <code style="color:var(--blue2)">oracle plugins</code> installs Agent Plugins into any harness.</p>
    <div class="convert-pills">
     <span>HyperCore + HyperEVM</span>
     <span>multichain routing</span>
     <span>self-custody</span>
+    <span>equities crossbook</span>
+    <span>agent plugins</span>
+    <span>read-plane doctor</span>
    </div>
     <h2 class="section-title app-shot-title">Oracle Desktop App <sup style="font-size:14px;color:var(--blue);font-weight:400">beta</sup></h2>
     <figure class="app-shot">
      <img src="assets/desktop-app.jpg" width="1736" height="959" loading="lazy" decoding="async" alt="Oracle desktop app showing the specialist mesh, with Portfolio, Approvals, Prepare, CLI, Farming Methods, Agent Connect, Receipts, Campaigns and Routes panes.">
      <figcaption>Portfolio, approvals, prepare, farming, receipts and routes in one pane.</figcaption>
     </figure>
-    <div class="os-dl"><a class="os-link" href="/downloads/artifacts/Oracle-0.4.10-arm64.dmg">macOS</a><a class="os-link" href="/downloads/artifacts/Oracle-0.4.10.AppImage">Linux</a><a class="os-link" href="/downloads/artifacts/Oracle-Setup-0.4.10.exe">Windows</a></div>
+    <p class="platform-beta"><b>Private beta</b> Desktop builds are in private beta while we finish the app. Public downloads return when it ships. The CLI above is the full product today.</p>
     </div>
  </div>
 </section>
@@ -1868,7 +1885,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
 <section class="section" id="fees">
  <p class="section-label rv">Fees</p>
  <h2 class="section-title rv">5 bps. <em>Holders zero.</em></h2>
- <p class="section-lede rv">Oracle charges 5 basis points (0.05%) on swaps it routes. Eligible Hyperliquid orders can separately include a 1–2 bps builder fee after wallet approval. Both are shown before you sign.</p>
+ <p class="section-lede rv">5 basis points (0.05%) on swaps Oracle routes. Eligible Hyperliquid orders can add a 1–2 bps builder fee after wallet approval. Both show before you sign.</p>
  <div class="moat-grid rv" style="margin-top:28px">
   <article class="moat-card">
    <div class="n">swap fee</div>

package/public/oracle-splash/install.ps1

@@ -1,4 +1,4 @@
-# Oracle installer for Windows — CLI + desktop app.
+# Oracle installer for Windows — CLI (desktop app: private beta, opt-in).
 #
 #   iex (irm https://oracle.demi.la/install.ps1)
 #
@@ -12,7 +12,7 @@ $Base = if ($env:ORACLE_INSTALL_BASE) { $env:ORACLE_INSTALL_BASE.TrimEnd("/") }
 $Pkg = if ($env:ORACLE_NPM_PACKAGE) { $env:ORACLE_NPM_PACKAGE } else { "@oracle-agent/oracle" }
 $Ver = if ($env:ORACLE_INSTALL_VERSION) { $env:ORACLE_INSTALL_VERSION } else { "latest" }
 $SkipCli = $env:ORACLE_INSTALL_SKIP_CLI -eq "1"
-$SkipDesktop = $env:ORACLE_INSTALL_SKIP_DESKTOP -eq "1"
+$SkipDesktop = $env:ORACLE_INSTALL_DESKTOP -ne "1"
 $SumsUrl = "$Base/downloads/artifacts/SHA256SUMS.txt"
 $Work = Join-Path $env:TEMP ("oracle-setup-" + [guid]::NewGuid().ToString("n"))
 
@@ -98,5 +98,5 @@ function Install-Desktop {
 
 if (-not $SkipCli) { Install-Cli }
 if (-not $SkipDesktop) { Install-Desktop }
-Log "done. CLI: oracle --version   App: Start menu → Oracle   then: oracle setup model"
+Log "done. CLI: oracle --version   then: oracle setup model   (desktop app: private beta)"
 if (-not $SkipCli) { Log "Telegram: set ORACLE_OWNER_TELEGRAM to your numeric id, then oracle gateway" }