docs(build-an-oracle): document the oracle-payments bundled plugin

build-an-oracle/develop/enable-bundled-plugins.mdx

@@ -1,6 +1,6 @@
 ---
 title: "Enable bundled plugins"
-description: "Toggle the 16 bundled QiForge plugins via the features map — opt out, force on, or let auto-detect handle it — and retune their manifests."
+description: "Toggle the 14 bundled QiForge plugins via the features map — opt out, force on, or let auto-detect handle it — and retune their manifests."
 icon: "boxes-stacked"
 ---
 
@@ -16,7 +16,7 @@
   config,
   features: {
     composio: true,       // force on (set COMPOSIO_API_KEY)
-    slack: false,         // force off
+    'matrix-group-chats': false,  // force off
     firecrawl: 'auto',    // same as omitting — runs autoDetect
   },
   plugins: [],            // your own plugins go here
@@ -31,9 +31,9 @@
 
 <Steps>
   <Step title="The runtime starts with the bundled list">
-    [`BUNDLED_PLUGINS`](https://github.com/ixoworld/ixo-oracles-boilerplate/blob/main/packages/oracle-runtime/src/plugins/index.ts) is a fixed 16-plugin tuple — memory, portal, firecrawl, domain-indexer, composio, sandbox, skills, editor, agui, slack, tasks, credits, calls, user-preferences, matrix-group-chats, vfs.
+    [`BUNDLED_PLUGINS`](https://github.com/ixoworld/ixo-oracles-boilerplate/blob/main/packages/oracle-runtime/src/plugins/index.ts) is a fixed 14-plugin tuple — memory, portal, firecrawl, domain-indexer, composio, sandbox, skills, editor, agui, tasks, user-preferences, matrix-group-chats, vfs, oracle-payments.
 
-    You do not import or instantiate the plugins you want at defaults — they are already there.
+    You do not import or instantiate the plugins you want at defaults — they are already there. `credits`, `slack`, `calls`, and `flows` are **not** in the tuple: `features` never reaches them, so you construct each one and pass it in [`plugins`](#plugins-that-are-not-bundled).
   </Step>
 
   <Step title="Each plugin gets a feature decision">
@@ -53,11 +53,11 @@
   </Step>
 
   <Step title="Your own plugins are added next">
     Plugins from the `plugins: []` array are always loaded — they're not gated by `features`. If a name collides with a bundled plugin, your instance wins (the loader dedupes by `name`).
   </Step>
 
   <Step title="Hard-dep cascades resolve transitively">
     If a loaded plugin has `dependsOn: ['removed-plugin']` and that dep ended up excluded, the dependent cascades off too. Soft deps (`softDependsOn`) only log a warning.
   </Step>
 </Steps>
 
@@ -70,19 +70,17 @@
 | `memory` | `MEMORY_MCP_URL` set | Visibility `always` |
 | `portal` | always on | Visibility `on-demand` |
 | `firecrawl` | `FIRECRAWL_MCP_URL` set | Visibility `on-demand` |
-| `domain-indexer` | always on | Visibility `always` |
+| `domain-indexer` | always on | Visibility `on-demand` |
 | `composio` | `COMPOSIO_API_KEY` set | Visibility `on-demand` |
 | `sandbox` | `SANDBOX_MCP_URL` set | Visibility `always` |
 | `skills` | always on | Visibility `always`; depends on `sandbox` |
-| `editor` | always on | Needs `matrixClient` — instantiate explicitly |
+| `editor` | always on | Visibility `on-demand` — auto-loaded whenever the request carries an active editor session (`editorRoomId`/`spaceId`), no `load_capability` step needed. Needs `matrixClient` — instantiate explicitly |
 | `agui` | always on | Visibility `on-demand` |
-| `slack` | `SLACK_BOT_OAUTH_TOKEN` set | Visibility `silent` (transport) |
 | `tasks` | `REDIS_URL` set | Visibility `on-demand`; BullMQ-backed async tasks (needs `REDIS_URL`) |
-| `credits` | always on | Visibility `silent`; pass `redis` for production |
-| `calls` | always on | Visibility `silent`; placeholder stub (no tools yet) |
 | `user-preferences` | always on | Visibility `always` |
 | `matrix-group-chats` | always on | Visibility `on-demand`; gating middleware + tools fire only in Matrix group rooms (`memberCount > 2`) |
-| `vfs` | always on | Visibility `always`; worker URLs derived from `NETWORK`. Contributes tools only when the oracle has a UCAN signing key and the user granted filesystem access |
+| `vfs` | always on | Visibility `on-demand`, except `vfs_search` + `vfs_read` which are per-tool `always` so file recall needs no load step. Worker URLs derived from `NETWORK`. Contributes tools only when the oracle has a UCAN signing key and the user granted filesystem access |
+| `oracle-payments` | unless `ORACLE_PAYMENTS_DISABLED=true` | Visibility `always`; Matrix-only commerce lane. A no-op until the oracle publishes an Agent Card, and paid work needs `EVAL_ENGINE_URL` |
 
 Full per-plugin env vars: [plugin catalog](/build-an-oracle/reference/bundled-plugins/overview) and [environment variables reference](/build-an-oracle/reference/environment-variables).
 
@@ -136,9 +134,11 @@
   </Step>
 </Steps>
 
-## Plugins that need constructor args
+## Plugins that are not bundled
 
-Two bundled plugins take a live runtime object you provide — instantiate explicitly and pass them via `plugins`:
+`credits`, `slack`, `calls`, and `flows` ship inside `@ixo/oracle-runtime` but are absent from `BUNDLED_PLUGINS`, so `features` never reaches them. Load one by constructing it and passing it in `plugins` — anything in that array loads unconditionally.
+
+The same array is how you replace a bundled plugin with a custom-constructed instance (the loader dedupes by `name`, and yours wins). `editor` is the usual case: the bundled instance builds its own Matrix client from the `MATRIX_*` admin env vars, so pass `matrixClient` only to reuse a client your app already keeps synced.
 
 ```ts
 import { createOracleApp, EditorPlugin, CreditsPlugin } from '@ixo/oracle-runtime';
@@ -156,16 +156,16 @@
 const app = await createOracleApp({
   config,
   plugins: [
-    new EditorPlugin({ matrixClient }),
-    ...(redis ? [new CreditsPlugin({ redis, network: 'devnet' })] : []),
+    new EditorPlugin({ matrixClient }),                              // overrides the bundled instance
+    ...(redis ? [new CreditsPlugin({ redis, network: 'devnet' })] : []), // not bundled — this is the only way it loads
   ],
 });
 ```
 
 Live example: [apps/qiforge-example/src/main.ts](https://github.com/ixoworld/ixo-oracles-boilerplate/blob/main/apps/qiforge-example/src/main.ts).
 
 <Note>
-The bundled `editorPlugin` and `creditsPlugin` instances boot in stub form (for testing). For production behaviour, instantiate them yourself and pass the live objects in.
+`credits` without a Redis client loads in pass-through mode and skips the settlement cron. Since it is also where LLM token metering lives, an oracle that never wires it has no metering at all.
 </Note>
 
 ## Retune a bundled plugin's manifest
@@ -176,8 +176,9 @@
 const app = await createOracleApp({
   config,
   manifestOverrides: {
-    // Take a noisy `always` bundled plugin out of the Tier-1 prompt.
-    'domain-indexer': { visibility: 'on-demand' },
+    // Promote an `on-demand` bundled plugin into the Tier-1 prompt so the
+    // agent sees it without a `load_capability` step.
+    'domain-indexer': { visibility: 'always' },
     // Hide a transport plugin entirely; its tools still bind.
     portal: { visibility: 'silent' },
   },
@@ -196,7 +197,7 @@
     //   loaded: ['memory', 'domain-indexer', 'editor', 'user-preferences', 'weather'],
     //   excluded: [
     //     { plugin: 'composio', reason: 'auto-detect precondition not met (COMPOSIO_API_KEY)' },
-    //     { plugin: 'slack',    reason: 'feature flag set to false' },
+    //     { plugin: 'tasks',    reason: 'feature flag set to false' },
     //   ],
     //   softDepGaps: [],
     // }

build-an-oracle/develop/plugin-recipes/add-config-and-env.mdx

@@ -1,6 +1,6 @@
 ---
 title: "Add config and env vars"
 description: "Declare your plugin's env vars with a Zod configSchema; read typed values from ctx.config."
 icon: "key"
 ---
 
@@ -70,7 +70,7 @@
       config,
       features: {
         weather: true,    // force on, skip autoDetect
-        slack: false,     // force off
+        tasks: false,     // force off
         composio: 'auto', // explicit auto (the default)
       },
     });
@@ -92,7 +92,7 @@
 
 <CardGroup cols={2}>
   <Card title="Enable bundled plugins" icon="boxes-stacked" href="/build-an-oracle/develop/enable-bundled-plugins">
     Features map, autoDetect, and the bundled set's defaults.
   </Card>
   <Card title="Environment variables reference" icon="key" href="/build-an-oracle/reference/environment-variables">
     Every base var and per-plugin var.

build-an-oracle/develop/plugin-recipes/declare-dependencies.mdx

@@ -1,6 +1,6 @@
 ---
 title: "Declare dependencies"
 description: "Use dependsOn for hard requirements (fails boot if missing) and softDependsOn for optional enrichment."
 icon: "link"
 ---
 
@@ -8,7 +8,7 @@
 
 <Steps>
   <Step title="Declare hard dependencies via dependsOn">
     Use this when the plugin literally cannot function without the other. The runtime topologically sorts plugins by `dependsOn` and aborts boot on missing deps or cycles.
 
     ```ts
     import { OraclePlugin } from '@ixo/oracle-runtime';
@@ -70,7 +70,7 @@
       features: {
         sandbox: true,    // force on
         skills: 'auto',   // load when its autoDetect (and deps) pass
-        slack: false,     // force off
+        firecrawl: false, // force off
       },
     });
     ```
@@ -82,8 +82,8 @@
 ## What to know before shipping
 
 - Names are kebab-case plugin identifiers, not titles. `'memory'`, not `'Memory'`.
 - The topo sort order drives middleware ordering and tool ordering in the prompt — encode ordering via `dependsOn` when it matters.
 - Cycles in `dependsOn` fail boot with a clear error. Soft deps don't participate in the cycle check.
 - Dependencies don't introspect what the other plugin contributes — only that it loaded. Check for specific tools at request time.
 - There's no version constraint and no late-arriving plugins. Plugin resolution is a single boot-time step.
 

build-an-oracle/for-ai-agents.mdx

@@ -6,15 +6,15 @@
 
 This page is for AI tools (Cursor, Claude Code, Codex, …) scaffolding a QiForge oracle. Humans should read [Quickstart](/build-an-oracle/quickstart) and [Build a plugin](/build-an-oracle/develop/write-a-plugin) instead.
 
 If you are an AI agent: read top-to-bottom once. Every signature you need is inlined. Source paths cite the canonical files on the QiForge runtime ([`packages/oracle-runtime`](https://github.com/ixoworld/ixo-oracles-boilerplate/tree/main/packages/oracle-runtime)) and the reference oracle ([`apps/qiforge-example`](https://github.com/ixoworld/ixo-oracles-boilerplate/tree/main/apps/qiforge-example)).
 
 <Note>
 **If you are working inside a scaffolded oracle project** (one created with `qiforge-cli new`), there is already a Claude Code skill at `.claude/skills/qiforge-oracle/SKILL.md` with project-local guidance: adding plugins, adding tools, wiring env, writing tests with `createTestRuntime`. Load it first — it carries denser, scenario-specific references than this page.
 </Note>
 
 ## TL;DR — what you produce
 
-A QiForge oracle is **one `main.ts`** that calls `createOracleApp({ config, plugins, … })` plus **one folder per plugin** under `src/plugins/<name>/`. The runtime handles HTTP, auth, the agent graph, the checkpointer, Matrix, and bundles 16 plugins by default. You ship glue code, not infrastructure.
+A QiForge oracle is **one `main.ts`** that calls `createOracleApp({ config, plugins, … })` plus **one folder per plugin** under `src/plugins/<name>/`. The runtime handles HTTP, auth, the agent graph, the checkpointer, Matrix, and bundles 14 plugins by default. You ship glue code, not infrastructure.
 
 ## main.ts shape
 
@@ -180,7 +180,7 @@
 
 `silent` means *not advertised* — the tools are still bound and the agent can call them; they're just kept out of the Tier-1 prompt and `list_capabilities`. It is not a security boundary.
 
-## Bundled plugins (15)
+## Bundled plugins (14)
 
 From [`packages/oracle-runtime/src/plugins/index.ts`](https://github.com/ixoworld/ixo-oracles-boilerplate/blob/main/packages/oracle-runtime/src/plugins/index.ts):
 
@@ -195,22 +195,23 @@
 | `skills` | always | on (needs `sandbox`) | — |
 | `editor` | on-demand | on (needs Matrix) | — |
 | `agui` | on-demand | on | — |
-| `slack` | silent | auto-detect | `SLACK_BOT_OAUTH_TOKEN` |
 | `tasks` | on-demand | auto-detect | `REDIS_URL` |
-| `credits` | silent | on unless `DISABLE_CREDITS=true` | — |
-| `calls` | silent | on (placeholder stub — no tools) | — |
 | `user-preferences` | always | on | — |
 | `matrix-group-chats` | on-demand | on (opt out via `features`) | — (optional `CHANNEL_MEMORY_*`) |
+| `vfs` | always | on | — (worker URLs from `NETWORK`) |
+| `oracle-payments` | always | on unless `ORACLE_PAYMENTS_DISABLED=true` | — (`EVAL_ENGINE_URL` for the paid lane) |
 
 Toggle via `features` in `createOracleApp`: `true` forces on, `false` forces off, `'auto'` runs `autoDetect`.
 
+**Not in `BUNDLED_PLUGINS`** — these ship in the package but `features` never reaches them; construct each one and pass it in `plugins`: `credits` (`new CreditsPlugin({ redis, network })` — also where LLM token metering lives), `slack` (`new SlackPlugin()`), `calls` (stub), `flows` (`new FlowsPlugin({ matrixClient })`).
+
 Per-plugin reference pages: [`/build-an-oracle/reference/bundled-plugins/overview`](/build-an-oracle/reference/bundled-plugins/overview).
 
 ## Core (Tier-0) env vars
 
 From [`packages/oracle-runtime/src/config/base-env-schema.ts`](https://github.com/ixoworld/ixo-oracles-boilerplate/blob/main/packages/oracle-runtime/src/config/base-env-schema.ts):
 
 These are the exact names the runtime validates — set them character-for-character or the boot-time Zod check fails.
 
 | Var | Required | Description |
 | --- | --- | --- |
@@ -220,15 +221,15 @@
 | `ORACLE_ENTITY_DID` | yes | The oracle's on-chain entity DID (`did:ixo:entity:...`). |
 | `SECP_MNEMONIC` | yes | Wallet mnemonic used to sign UCAN invocations to downstream services. |
 | `RPC_URL` | yes | IXO chain RPC endpoint. |
 | `BLOCKSYNC_GRAPHQL_URL` | yes | Blocksync GraphQL endpoint (UCAN validation reads it). |
 | `MATRIX_BASE_URL` | yes | Matrix homeserver URL. |
 | `MATRIX_RECOVERY_PHRASE` | yes | Recovery phrase for the oracle's Matrix encryption. |
 | `MATRIX_ORACLE_ADMIN_USER_ID` | yes | Matrix user ID the bot logs in as. |
 | `MATRIX_ORACLE_ADMIN_PASSWORD` | yes | Matrix bot password. |
 | `MATRIX_ORACLE_ADMIN_ACCESS_TOKEN` | yes | Matrix bot access token. |
 | `MATRIX_ACCOUNT_ROOM_ID` | yes | Oracle's Matrix account room (holds signing key + secrets). |
 | `MATRIX_VALUE_PIN` | yes | PIN for the oracle's Matrix value store / vault. |
 | `SQLITE_DATABASE_PATH` | yes | Path for the per-user SQLite checkpointer DB. |
 | `LLM_PROVIDER` | optional | `openrouter` (default) \| `nebius`. Selects the per-role model map. |
 | `OPEN_ROUTER_API_KEY` | conditional | Required when `LLM_PROVIDER=openrouter` (the default). |
 | `NEBIUS_API_KEY` | conditional | Required when `LLM_PROVIDER=nebius`. |
@@ -245,7 +246,7 @@
 | `LANGSMITH_PROJECT` | optional | LangSmith project name. |
 | `LANGSMITH_ENDPOINT` | optional | LangSmith endpoint override. |
 
-There is no `ANTHROPIC_API_KEY` — the agent's model id is fixed per role in the provider model map; switch the provider with `LLM_PROVIDER` + its key, or override the main model via the `resolveModel` hook. Plugin-specific env vars (`MEMORY_MCP_URL`, `FIRECRAWL_MCP_URL`, `SANDBOX_MCP_URL`, `COMPOSIO_API_KEY`, `SLACK_BOT_OAUTH_TOKEN`, `REDIS_URL`, …) merge in via each plugin's `configSchema`.
+There is no `ANTHROPIC_API_KEY` — the agent's model id is fixed per role in the provider model map; switch the provider with `LLM_PROVIDER` + its key, or override the main model via the `resolveModel` hook. Plugin-specific env vars (`MEMORY_MCP_URL`, `FIRECRAWL_MCP_URL`, `SANDBOX_MCP_URL`, `COMPOSIO_API_KEY`, `REDIS_URL`, `EVAL_ENGINE_URL`, `AGENT_CARD_PATH`, …) merge in via each plugin's `configSchema`.
 
 ## Copy-pasteable plugin template
 

build-an-oracle/index.mdx

@@ -1,12 +1,12 @@
 ---
 title: "Build an Oracle"
 description: "QiForge is the framework for shipping Agentic Oracles — governed AI evaluators and workflow actors with verifiable identity, encrypted per-user storage, and a plugin runtime you wire up in ~30 lines of TypeScript."
 icon: "compass"
 ---
 
 An **Agentic Oracle** is a governed AI evaluator and workflow actor. It performs **P-Functions** over verifiable state—turning claims, evidence, models, and context into accountable intelligence: typed facts, predictions, recommendations, attestations, determinations, risk signals, compliance checks, payment triggers, and permitted workflow actions.
 
 Unlike a generic AI agent, an oracle is identity-bound, authority-scoped, evidence-grounded, protocol-governed, and audit-producing. Unlike a blockchain or data oracle, it does not merely relay information; it evaluates what information means, which rules apply, which actions are allowed, and what proof must be left behind.
 
 **QiForge** ships the runtime for that pattern: verifiable identity (IXO entity DID), UCAN delegation, encrypted per-user Matrix storage, and typed plugins ([`@ixo/oracle-runtime`](https://github.com/ixoworld/ixo-oracles-boilerplate/tree/main/packages/oracle-runtime)). Your oracle is a `main.ts` plus the plugins you want. For the full concept model, see [Agentic Oracles](/articles/agentic-oracles).
 
@@ -38,8 +38,8 @@
   <Card title="A LangGraph agent" icon="diagram-project">
     Per-request agent build, dynamic tool loading via meta-tools, four always-on middleware (capability gating, tool validation, repetition guard, retry).
   </Card>
-  <Card title="16 bundled plugins" icon="boxes-stacked">
-    `memory`, `skills`, `sandbox`, `portal`, `firecrawl`, `composio`, `editor`, `agui`, `slack`, `credits`, `user-preferences`, and more — toggle them via the `features` map.
+  <Card title="14 bundled plugins" icon="boxes-stacked">
+    `memory`, `skills`, `sandbox`, `portal`, `firecrawl`, `composio`, `editor`, `agui`, `vfs`, `oracle-payments`, `user-preferences`, and more — toggle them via the `features` map.
   </Card>
   <Card title="A plugin API for your code" icon="puzzle-piece">
     9 typed hooks let your plugin contribute tools, sub-agents, middleware, HTTP routes, shared state, and env vars. Boot-time and per-request flavours.

build-an-oracle/quickstart.mdx

@@ -14,7 +14,7 @@
 
 A live oracle on `localhost:3000` with:
 
-- The 16 bundled plugins resolved at boot.
+- The 14 bundled plugins resolved at boot.
 - A custom Weather plugin loading on demand.
 - A `GET /weather/now?city=X` public HTTP route.
 - A streaming chat endpoint over SSE.
@@ -183,7 +183,7 @@
 
 | You saw | What it proves |
 | --- | --- |
 | Boot log listing plugins | Loader + topo sort + manifest validation worked. |
 | `excluded plugins:` line with reasons | Env-driven opt-in (`autoDetect`) is wired correctly. |
 | `GET /weather/now` returning JSON | Plugin Nest modules mount + auth exclusions apply. |
 | Agent calling `load_capability` then `get_current_weather` | Dynamic discovery and `loadedPlugins` state work end-to-end. |
@@ -202,10 +202,10 @@
     Every option you can pass — config, plugins, features, hooks.
   </Card>
   <Card title="Bundled plugins" icon="boxes-stacked" href="/build-an-oracle/reference/bundled-plugins/overview">
-    The 16 plugins shipped with the runtime.
+    The 14 plugins that load by default, plus the four you wire in yourself.
   </Card>
   <Card title="For AI agents" icon="robot" href="/build-an-oracle/for-ai-agents">
     Dense one-pager with every signature inlined.
   </Card>
   <Card title="Understand the model" icon="lightbulb" href="/build-an-oracle/understand/what-is-qiforge">
     Optional. The mental model, runtime layers, plugins vs skills.

build-an-oracle/reference/bundled-plugins/calls.mdx

@@ -12,24 +12,15 @@ icon: "phone"
 | Version | `0.0.0` |
 | Visibility | `silent` |
 | Stability | `experimental` |
-| Default state | Loaded by default (stub — contributes nothing) |
+| Default state | Opt-in — not in `BUNDLED_PLUGINS` (stub — contributes nothing) |
 
 <Warning>
-`calls` is a **placeholder stub**, not a shipped feature. It is the only bundled entry created via `stub('calls', 'Calls')` in `plugins/index.ts` — version `0.0.0`, no tools, no sub-agents, no middleware, no Nest modules. Don't rely on it.
+`calls` is a **placeholder stub**, not a shipped feature. It is created via `stub('calls', 'Calls')` in `plugins/index.ts` — version `0.0.0`, no tools, no sub-agents, no middleware, no Nest modules. Don't rely on it.
 </Warning>
 
 ## Status: deferred
 
-`calls` exists in `BUNDLED_PLUGINS` only so the `features` toggle key resolves. Because it declares no `autoDetect`, the loader loads it by default — but it contributes nothing, so loading it has no effect. The legacy `apps/app` codebase had a `@Controller('calls')` for LiveKit integration; the `getNestModules` API hook would technically unblock a real implementation. Deferred for now.
-
-It contributes nothing, so there is nothing to enable. You can keep it from loading at all with:
-
-```ts
-const app = await createOracleApp({
-  config,
-  features: { calls: false }, // skip the stub entirely
-});
-```
+`calls` is exported from the package but is not in `BUNDLED_PLUGINS`, so nothing loads it. It contributes nothing, so there is nothing to enable either. The legacy `apps/app` codebase had a `@Controller('calls')` for LiveKit integration; the `getNestModules` API hook would technically unblock a real implementation. Deferred for now.
 
 See the framework's [follow-ups](https://github.com/ixoworld/ixo-oracles-boilerplate/blob/main/docs/spec-and-roadmap/follow-ups.md) for the rebuild plan.
 

build-an-oracle/reference/bundled-plugins/credits.mdx

@@ -1,6 +1,6 @@
 ---
 title: "credits"
 description: "Enforces per-user credit budgets and settles held credits to the chain on a cron."
 icon: "coins"
 ---
 
@@ -12,7 +12,7 @@
 | Visibility | `silent` |
 | Stability | `stable` |
 | Category | `core` |
-| Default state | On unless `DISABLE_CREDITS=true` |
+| Default state | Opt-in — not in `BUNDLED_PLUGINS`. Construct it and pass it in `plugins`. |
 | Depends on | — |
 
 ## Summary
@@ -20,7 +20,7 @@
 Owns the full credit lifecycle:
 
 - **Enforcement** — per-request middleware that aborts model calls when the user is out of credits (`createCreditsMiddleware` + `TokenLimiter`).
 - **Settlement** — background cron that converts held credits into on-chain claims, shipped via `ClaimProcessingModule`.
 
 Silent (no agent-visible tools). When loaded, this plugin also activates the runtime's Tier-0 `SubscriptionMiddleware`, which gates the HTTP request before the graph even runs.
 
@@ -29,9 +29,9 @@
 | Var | Required | Description |
 | --- | --- | --- |
 | `SUBSCRIPTION_URL` | no | Subscription API URL. |
 | `SUBSCRIPTION_ORACLE_MCP_URL` | no | Subscription Agentic Oracles MCP server URL. |
 | `DISABLE_CREDITS` | no | Set to `'true'` to skip the plugin entirely. |
 | `NETWORK` | no | Read but not owned (declared by the core base env schema). Required by the cron module. |
 
 ## What it contributes
 
@@ -39,7 +39,7 @@
 - **Sub-agents:** none.
 - **Middleware:** `createCreditsMiddleware` (aborts the agent run when the user is out of credits).
 - **Nest modules** (when Redis is configured at construct time):
   - `ClaimProcessingModule` — cron that settles held credits on chain.
   - `FileProcessingSinkModule` — `FILE_PROCESSING_CREDIT_SINK` so pre-flight file-processing LLM usage bills the per-user budget.
   - `SubscriptionSinkModule` — `SUBSCRIPTION_CREDIT_SINK` so the subscription middleware mirrors per-DID subscription payload + balance into Redis on every authenticated request.
 - **HTTP routes:** none directly.
@@ -61,18 +61,15 @@
 });
 ```
 
 Without a Redis client the middleware loads in pass-through mode and the cron modules are skipped.
 
 ## Opt out / Opt in
 
-```ts
-const app = await createOracleApp({
-  config,
-  features: { credits: false }, // never load
-});
+`credits` is not in `BUNDLED_PLUGINS`, so nothing loads it unless you pass an instance in `plugins` (see [Production constructor](#production-constructor) above). Once wired, `DISABLE_CREDITS=true` still turns it off via `autoDetect` without touching the code.
 
-// Or via env: DISABLE_CREDITS=true
-```
+<Warning>
+LLM token metering **is** this plugin. An oracle that never wires it has no metering at all — worth knowing before you leave it out, especially alongside [`oracle-payments`](/build-an-oracle/reference/bundled-plugins/oracle-payments), where "free support" means "no work claim", not "free LLM".
+</Warning>
 
 ## Where to read next