@oracle-agent/oracle 0.35.34 → 0.35.36

package/README.md

@@ -247,11 +247,13 @@ be checked per route. This is not a claim of universal signing, broadcasting,
 or end-to-end execution readiness.
 
 **11 EVM chains** built in: Ethereum, Optimism, BNB, Polygon, Stable, HyperEVM,
-Abstract, Robinhood Chain, Base, Arbitrum, Avalanche. Plus Solana and Bitcoin L1
-lanes. Solana covers Jupiter quote/prepare, SPL account research, live
+Abstract, Robinhood Chain, Base, Arbitrum, Avalanche. Plus Solana, Bitcoin L1,
+and a read-only Canton Coin (CC) lane. Solana covers Jupiter quote/prepare, SPL account research, live
 simulation of the prepared swap, and Magic Eden NFT reads with unsigned
 buy/list/mint tickets. Bitcoin covers Esplora fee/UTXO reads, Ordinals/runes
-research, Satflow PSBT intents, and inscription PSBT preparation. Hyperliquid
+research, Satflow PSBT intents, and inscription PSBT preparation. Canton is not
+EVM: Oracle reads Canton Coin via Scan and explains onboarding; quote/prepare stay
+fail-closed. Hyperliquid
 adds HyperCore HYPE staking: validator reads plus EIP-712 stake, delegate,
 undelegate, and unstake preparation. User wallets sign.
 
@@ -293,15 +295,15 @@ known answer. This matters: the canonical QuoterV2 address also has bytecode on
 Base, but does not price that chain's pairs. A codesize check would have
 allowlisted the wrong contract.
 
-**127 provider modules** and **548 operations** in the read/quote catalog, covering **220 unique
-protocols/venues** across EVM, Solana, and Bitcoin (115 EVM + cross-chain, 98
+**134 provider modules** and **594 operations** in the read/quote catalog, covering **221 unique
+protocols/venues** across EVM, Solana, Bitcoin, and Canton (115 EVM + cross-chain, 98
 Solana venues backed by 101 verified Jupiter program IDs, 6 Bitcoin surfaces).
 One module can cover many protocols: the Jupiter module alone routes 98 Solana
 venues, so provider-module count and protocol count are different numbers.
 
 | Class | Providers |
 |---|---|
-| Chain / explorer | EVM JSON-RPC, Blockscout, Solana RPC, Bitcoin Esplora |
+| Chain / explorer | EVM JSON-RPC, Blockscout, Solana RPC, Bitcoin Esplora, Canton Scan (CC) |
 | Market data | DexScreener, GeckoTerminal, DeFiLlama |
 | DEX / aggregator | Uniswap V3/V4, Aerodrome, Curve, Balancer, LI.FI, ParaSwap, Odos, 0x, 1inch, HyperEVM DEXes |
 | Solana | Jupiter (98 venue labels, 101 verified program IDs) |
@@ -484,7 +486,7 @@ model reviewing its own work would have shipped three of them.
 
 ## Agent profiles
 
-Oracle ships an installable 8-lane mesh for Hermes:
+Oracle ships an installable 9-lane mesh for Hermes:
 
 ```bash
 oracle-init            # dry run -- shows exactly what it would do
@@ -503,7 +505,7 @@ loopback-only public local signer after independent local confirmation and
 sealed-policy checks. Private Administrator execution remains separate.
 
 Lanes: `oracle` (router), `polymarket-agent`, `hyperliquid-agent`,
-`robinhood-agent`, `solana-agent`, `bitcoin-agent`, `stable-agent`,
+`robinhood-agent`, `solana-agent`, `bitcoin-agent`, `canton-agent`, `stable-agent`,
 `protocol-builder`, plus `_template` for your own. Details in
 [`docs/profiles.md`](docs/profiles.md).
 
@@ -523,6 +525,39 @@ skills, sessions, and a separate model choice per specialist — is profile
 machinery from a multi-profile harness such as Hermes. Use Oracle from any
 agent, or on its own; add a profile mesh only if you want that topology.
 
+## Teams
+
+A team is a compiled, hash-pinned pipeline of specialist agents that turns public
+evidence into an operator handoff. It never signs and never broadcasts.
+
+```js
+import { TEAM_TEMPLATES, compileTeamDefinition } from "@oracle-agent/oracle";
+
+const compiled = compileTeamDefinition(TEAM_TEMPLATES[0], { nowMs: Date.now() });
+compiled.team.agents.map((a) => a.role);
+// scanner -> sentiment -> strategy -> risk -> executor
+```
+
+Seven templates ship in the box (`hyperliquid-alpha`, `perp-market-breadth`,
+`perp-technical-strategy`, `basket-relative-value`, `wallet-watch`,
+`evm-launch-radar`, `nft-mint-guard`) across six modes: `draft`, `shadow`,
+`confirm`, `armed`, `autonomous`, `halted`.
+
+The shape is enforced at compile time. A definition is refused if the executor is
+not the terminal agent, if any non-executor holds executor tools, if the policy
+omits wallet confirmation or a kill switch, if the chain allowlist is unbounded,
+if the policy has already expired, or if `autonomous` is requested without an
+explicit opt-in. Secret-like values and DAG cycles are rejected outright.
+
+Compilation is deterministic: key insertion order does not change the `teamHash`,
+so the same team is the same identity across machines. Every handoff reports
+`executionAllowed: false`, `backendSigner: false`, `signingReady: false`, and
+`broadcastReady: false`.
+
+Teams are a library surface. They run in the **Oracle desktop app** — the CLI
+stays a single-agent shell. Drive them from the desktop, your own harness, or a
+service. Full reference in [`docs/teams.md`](docs/teams.md).
+
 ## Best-execution routing
 
 The highest quote is not the cheapest swap. Oracle ranks on **net received after

package/artifacts/specialist-packs/oracle-full-crypto.json

@@ -193,6 +193,16 @@
       "label": "bitcoin agent",
       "description": "Bitcoin L1, Ordinals/runes research, Satflow PSBTs, and inscription preparation."
     },
+    {
+      "id": "canton-agent",
+      "skills": [
+        "oracle-canton",
+        "oracle-receipts",
+        "oracle-circuit-breaker"
+      ],
+      "label": "canton agent",
+      "description": "Canton Network read-only Canton Coin (CC) Scan reads and onboarding. Not EVM."
+    },
     {
       "id": "stable-agent",
       "skills": [
@@ -264,6 +274,7 @@
     "analyzer",
     "solana-jupiter",
     "bitcoin-inscriptions",
+    "canton-cc-reads",
     "nft-project-launch",
     "gacha-launch",
     "dex-launch",

package/dist/address-book.mjs

@@ -1,2 +1,2 @@
-import c from"node:fs";import l from"node:path";import{homedir as m}from"node:os";import{join as p}from"node:path";var k=process.env.ORACLE_PUBLIC_DESKTOP==="1",S=k?process.env.ORACLE_CONFIG_DIR||p(m(),".config","oracle"):p(m(),".config","oracle"),z=k?S:p(m(),".config","mad-desk");function A(e,r,t=""){let o=process.env[e];if(o!=null&&String(o).trim()!=="")return o;let s=r?process.env[r]:void 0;return s!=null&&String(s).trim()!==""?s:t}var E=/^0x[0-9a-fA-F]{40}$/,x=new Set(["privatekey","private_key","secret","seed","mnemonic","passphrase","signature","keystore"]),D=["privatekey","privkey","secretkey","secret","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","signature","wif","xprv","xpriv","apikey","bearer","credential"],I=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/,/\b(?:[a-z]{3,8}\s+){11,}[a-z]{3,8}\b/i],L=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/;function y(e){return String(e).toLowerCase().replace(/[^a-z0-9]/g,"")}function R(e,r){let t=y(e);if(x.has(String(e).toLowerCase())||D.some(o=>t.includes(o)))throw new Error(`address-book: ${r} is forbidden; the book stores labels, never key material`)}function N(e,r){if(typeof e=="string"&&(I.some(t=>t.test(e))||L.test(e)))throw new Error(`address-book: ${r} looks like key material; the book stores labels, never key material`)}function C(){let e=A("ORACLE_ADDRESS_BOOK","MAD_ADDRESS_BOOK","");if(e)return l.resolve(e);let r=A("ORACLE_CONFIG_DIR","MAD_CONFIG_DIR",S);return l.join(r,"address-book.json")}function b(e,r="field"){if(Array.isArray(e)){e.forEach((t,o)=>b(t,`${r}[${o}]`));return}if(!e||typeof e!="object"){N(e,r);return}for(let[t,o]of Object.entries(e))R(t,t),b(o,t)}function h(e){let r=String(e||"").trim();if(!E.test(r))throw new Error("address-book: address must be 0x + 40 hex characters");return r.toLowerCase()}function a(e,r){return e==null||e===""?null:String(e).slice(0,r)}function g(){return{version:1,updatedAt:null,entries:[]}}function _(e){return{address:String(e.address).toLowerCase(),label:a(e.label,80)||"unknown",who:a(e.who,120),role:a(e.role,40),chainIds:Array.isArray(e.chainIds)?e.chainIds.map(Number).filter(Number.isFinite):[],notes:a(e.notes,500),source:a(e.source,80),firstSeenAt:e.firstSeenAt||null,lastSeenAt:e.lastSeenAt||null}}function d(){try{let e=JSON.parse(c.readFileSync(C(),"utf8"));if(!e||typeof e!="object")return g();let r=Array.isArray(e.entries)?e.entries:[];return{version:1,updatedAt:e.updatedAt||null,entries:r.filter(t=>t&&typeof t=="object"&&E.test(String(t.address||""))).map(_)}}catch{return g()}}function O(e){let r=C();c.mkdirSync(l.dirname(r),{recursive:!0,mode:448});let t={...e,version:1,updatedAt:new Date().toISOString()},o=l.join(l.dirname(r),`.address-book.${process.pid}.tmp`);c.writeFileSync(o,`${JSON.stringify(t,null,2)}
-`,{mode:384}),c.renameSync(o,r);try{c.chmodSync(r,384)}catch{}return t}function G(e={}){let r=d(),t=r.entries;if(e.role&&(t=t.filter(o=>o.role===String(e.role))),e.who){let o=String(e.who).toLowerCase();t=t.filter(s=>(s.who||"").toLowerCase().includes(o)||(s.label||"").toLowerCase().includes(o))}if(e.q){let o=String(e.q).toLowerCase();t=t.filter(s=>s.address.includes(o)||(s.label||"").toLowerCase().includes(o)||(s.who||"").toLowerCase().includes(o)||(s.notes||"").toLowerCase().includes(o))}return{updatedAt:r.updatedAt,count:t.length,entries:t}}function q(e){let r=h(e),t=d().entries.filter(o=>o.address===r);return{address:r,found:t.length>0,entries:t}}function T(e={}){b(e);let r=h(e.address),t=a(e.label??e.role,80)||"wallet",o=new Date().toISOString(),s=d(),i=s.entries.findIndex(n=>n.address===r&&n.label===t),u=_({address:r,label:t,who:e.who,role:e.role,chainIds:e.chainIds,notes:e.notes,source:e.source||"agent",firstSeenAt:i>=0&&s.entries[i].firstSeenAt||o,lastSeenAt:o});i>=0?s.entries[i]=u:s.entries.push(u);let w=n=>n==="agent"?0:n==="owner"?1:2;s.entries.sort((n,f)=>w(n.role)-w(f.role)||n.label.localeCompare(f.label)||n.address.localeCompare(f.address));let v=O(s);return{ok:!0,entry:u,count:v.entries.length}}function Y(e,r=null){let t=h(e),o=d(),s=o.entries.length;return o.entries=o.entries.filter(i=>i.address!==t?!0:r==null?!1:i.label!==String(r)),O(o),{ok:!0,removed:s-o.entries.length,count:o.entries.length}}export{C as addressBookPath,Y as forgetAddress,G as listAddresses,q as lookupAddress,d as readAddressBook,T as rememberAddress};
+import c from"node:fs";import l from"node:path";import{homedir as m}from"node:os";import{join as p}from"node:path";var k=process.env.ORACLE_PUBLIC_DESKTOP==="1",S=k?process.env.ORACLE_CONFIG_DIR||p(m(),".config","oracle"):p(m(),".config","oracle"),z=k?S:p(m(),".config","mad-desk");function A(e,r,t=""){let o=process.env[e];if(o!=null&&String(o).trim()!=="")return o;let n=r?process.env[r]:void 0;return n!=null&&String(n).trim()!==""?n:t}var E=/^0x[0-9a-fA-F]{40}$/,x=new Set(["privatekey","private_key","secret","seed","mnemonic","passphrase","signature","keystore"]),D=["privatekey","privkey","secretkey","secret","seedphrase","seed","mnemonic","passphrase","password","keystore","keymaterial","signature","wif","xprv","xpriv","apikey","bearer","credential"],I=[/\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/,/\bxprv[0-9A-Za-z]{50,}\b/,/\b(?:[a-z]{3,8}\s+){11,}[a-z]{3,8}\b/i],L=/^\s*(?:0x)?[0-9a-fA-F]{64}\s*$/;function y(e){return String(e).toLowerCase().replace(/[^a-z0-9]/g,"")}function R(e,r){let t=y(e);if(x.has(String(e).toLowerCase())||D.some(o=>t.includes(o)))throw new Error(`address-book: ${r} is forbidden; the book stores labels, never key material`)}function N(e,r){if(typeof e=="string"&&(I.some(t=>t.test(e))||L.test(e)))throw new Error(`address-book: ${r} looks like key material; the book stores labels, never key material`)}function v(){let e=A("ORACLE_ADDRESS_BOOK","MAD_ADDRESS_BOOK","");if(e)return l.resolve(e);let r=A("ORACLE_CONFIG_DIR","MAD_CONFIG_DIR",S);return l.join(r,"address-book.json")}function b(e,r="field"){if(Array.isArray(e)){e.forEach((t,o)=>b(t,`${r}[${o}]`));return}if(!e||typeof e!="object"){N(e,r);return}for(let[t,o]of Object.entries(e))R(t,t),b(o,t)}function h(e){let r=String(e||"").trim();if(!E.test(r))throw new Error("address-book: address must be 0x + 40 hex characters");return r.toLowerCase()}function a(e,r){return e==null||e===""?null:String(e).slice(0,r)}function g(){return{version:1,updatedAt:null,entries:[]}}function C(e){return{address:String(e.address).toLowerCase(),label:a(e.label,80)||"unknown",who:a(e.who,120),role:a(e.role,40),chainIds:Array.isArray(e.chainIds)?e.chainIds.map(Number).filter(Number.isFinite):[],notes:a(e.notes,500),source:a(e.source,80),firstSeenAt:e.firstSeenAt||null,lastSeenAt:e.lastSeenAt||null}}function d(){try{let e=JSON.parse(c.readFileSync(v(),"utf8"));if(!e||typeof e!="object")return g();let r=Array.isArray(e.entries)?e.entries:[];return{version:1,updatedAt:e.updatedAt||null,entries:r.filter(t=>t&&typeof t=="object"&&E.test(String(t.address||""))).map(C)}}catch{return g()}}function _(e){let r=v();c.mkdirSync(l.dirname(r),{recursive:!0,mode:448});let t={...e,version:1,updatedAt:new Date().toISOString()},o=l.join(l.dirname(r),`.address-book.${process.pid}.tmp`);c.writeFileSync(o,`${JSON.stringify(t,null,2)}
+`,{mode:384}),c.renameSync(o,r);try{c.chmodSync(r,384)}catch{}return t}function G(e={}){let r=d(),t=r.entries;if(e.role&&(t=t.filter(o=>o.role===String(e.role))),e.who){let o=String(e.who).toLowerCase();t=t.filter(n=>(n.who||"").toLowerCase().includes(o)||(n.label||"").toLowerCase().includes(o))}if(e.q){let o=String(e.q).toLowerCase();t=t.filter(n=>n.address.includes(o)||(n.label||"").toLowerCase().includes(o)||(n.who||"").toLowerCase().includes(o)||(n.notes||"").toLowerCase().includes(o))}return{updatedAt:r.updatedAt,count:t.length,entries:t}}function q(e){let r=h(e),t=d().entries.filter(o=>o.address===r);return{address:r,found:t.length>0,entries:t}}function T(e={}){b(e);let r=h(e.address),t=a(e.label??e.role,80)||"wallet",o=new Date().toISOString(),n=d(),i=n.entries.findIndex(s=>s.address===r&&s.label===t),u=C({address:r,label:t,who:e.who,role:e.role,chainIds:e.chainIds,notes:e.notes,source:e.source||"agent",firstSeenAt:i>=0&&n.entries[i].firstSeenAt||o,lastSeenAt:o});i>=0?n.entries[i]=u:n.entries.push(u);let w=s=>s==="agent"?0:s==="owner"?1:2;n.entries.sort((s,f)=>w(s.role)-w(f.role)||s.label.localeCompare(f.label)||s.address.localeCompare(f.address));let O=_(n);return{ok:!0,entry:u,count:O.entries.length}}function Y(e,r=null){let t=h(e),o=d(),n=o.entries.length;return o.entries=o.entries.filter(i=>i.address!==t?!0:r==null?!1:i.label!==String(r)),_(o),{ok:!0,removed:n-o.entries.length,count:o.entries.length}}export{v as addressBookPath,Y as forgetAddress,G as listAddresses,q as lookupAddress,d as readAddressBook,T as rememberAddress};