@oracle-agent/oracle 0.35.24 → 0.35.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -275,7 +275,7 @@ known answer. This matters: the canonical QuoterV2 address also has bytecode on
275
275
  Base, but does not price that chain's pairs. A codesize check would have
276
276
  allowlisted the wrong contract.
277
277
 
278
- **125 provider modules** and **537 operations** in the read/quote catalog, covering **220 unique
278
+ **126 provider modules** and **543 operations** in the read/quote catalog, covering **220 unique
279
279
  protocols/venues** across EVM, Solana, and Bitcoin (115 EVM + cross-chain, 98
280
280
  Solana venues backed by 101 verified Jupiter program IDs, 6 Bitcoin surfaces).
281
281
  One module can cover many protocols: the Jupiter module alone routes 98 Solana
@@ -405,6 +405,15 @@ Oracle keeps capability and authorization separate:
405
405
  - `ORACLE_AUTONOMOUS_MINT=1` is a separate switch for fail-closed NFT mint
406
406
  one-shots only. It does not unlock swaps, bridges, or perps. Trading does not
407
407
  imply mint.
408
+ - `ORACLE_PINNED_SESSION_LIVE=1` cannot arm an on-chain session module. The
409
+ merge fuse `PINNED_SESSION_MODULE_LIVE` stays off until every desk chain is
410
+ pinned or explicit-unsupported and a privileged review issues GO. Default is
411
+ off. Setting the env var alone is a refuse, not an enable. The optional
412
+ session vault is per-user: they supply owner + recovery; Oracle prepares
413
+ unsigned deploy/initialize; their wallet signs. No house recovery default.
414
+ Native-only execute: user names EOA pay targets. Contracts and routers are refused.
415
+ After they opt in, `prepareOptInVaultSpend` builds unsigned vault.execute (agent signs).
416
+ Skip = Oracle unchanged. 7702 is not seed-theft protection.
408
417
  - A deployment may separately install a same-host, owner-gated EVM executor.
409
418
  Oracle must verify that executor before describing bounded EVM execution as
410
419
  available. Missing deployment capability means "unavailable here," not
@@ -97,7 +97,7 @@ does not prove npm users receive it. A locally hosted model/data/policy loop doe
97
97
  a bundled signer. A merged feature is not public until the npm artifact containing it is
98
98
  published and inspected.
99
99
 
100
- **Candidate release in this source tree:** public package `@oracle-agent/oracle@0.35.24`
100
+ **Candidate release in this source tree:** public package `@oracle-agent/oracle@0.35.26`
101
101
  ships the encrypted local vault + short-lived loopback signer. Hosted/keyless
102
102
  Oracle cannot hold keys or move funds. Self-hosting with `oracle sign init` or
103
103
  `oracle sign import --kind evm --key-file <0600 file>` writes an encrypted vault and marks