@oracle-agent/oracle 0.35.24 → 0.35.25
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -0
- package/dist/assets/skills/oracle-desk-product/SKILL.md +1 -1
- package/dist/bin/desk-server.mjs +1 -1
- package/dist/bin/oracle.mjs +13 -12
- package/dist/cli/commands/chat.mjs +222 -222
- package/dist/cli/commands/eval.mjs +1 -1
- package/dist/cli/commands/farm.mjs +1 -1
- package/dist/cli/commands/model.mjs +225 -225
- package/dist/cli/commands/session-vault.mjs +15 -0
- package/dist/cli/commands/setup.mjs +4 -4
- package/dist/data/desk-data.mjs +1 -1
- package/dist/index.mjs +49 -49
- package/package.json +1 -1
- package/public/eval-report.json +1 -1
- package/server.json +2 -2
package/README.md
CHANGED
|
@@ -405,6 +405,15 @@ Oracle keeps capability and authorization separate:
|
|
|
405
405
|
- `ORACLE_AUTONOMOUS_MINT=1` is a separate switch for fail-closed NFT mint
|
|
406
406
|
one-shots only. It does not unlock swaps, bridges, or perps. Trading does not
|
|
407
407
|
imply mint.
|
|
408
|
+
- `ORACLE_PINNED_SESSION_LIVE=1` cannot arm an on-chain session module. The
|
|
409
|
+
merge fuse `PINNED_SESSION_MODULE_LIVE` stays off until every desk chain is
|
|
410
|
+
pinned or explicit-unsupported and a privileged review issues GO. Default is
|
|
411
|
+
off. Setting the env var alone is a refuse, not an enable. The optional
|
|
412
|
+
session vault is per-user: they supply owner + recovery; Oracle prepares
|
|
413
|
+
unsigned deploy/initialize; their wallet signs. No house recovery default.
|
|
414
|
+
Native-only execute: user names EOA pay targets. Contracts and routers are refused.
|
|
415
|
+
After they opt in, `prepareOptInVaultSpend` builds unsigned vault.execute (agent signs).
|
|
416
|
+
Skip = Oracle unchanged. 7702 is not seed-theft protection.
|
|
408
417
|
- A deployment may separately install a same-host, owner-gated EVM executor.
|
|
409
418
|
Oracle must verify that executor before describing bounded EVM execution as
|
|
410
419
|
available. Missing deployment capability means "unavailable here," not
|
|
@@ -97,7 +97,7 @@ does not prove npm users receive it. A locally hosted model/data/policy loop doe
|
|
|
97
97
|
a bundled signer. A merged feature is not public until the npm artifact containing it is
|
|
98
98
|
published and inspected.
|
|
99
99
|
|
|
100
|
-
**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.35.
|
|
100
|
+
**Candidate release in this source tree:** public package `@oracle-agent/oracle@0.35.25`
|
|
101
101
|
ships the encrypted local vault + short-lived loopback signer. Hosted/keyless
|
|
102
102
|
Oracle cannot hold keys or move funds. Self-hosting with `oracle sign init` or
|
|
103
103
|
`oracle sign import --kind evm --key-file <0600 file>` writes an encrypted vault and marks
|