@oracle-agent/oracle 0.10.0 → 0.11.0

package/src/data/providers/magiceden-sol.mjs

@@ -9,6 +9,7 @@ import { httpJson } from "../http.mjs";
 import { solanaPubkey } from "./solana-rpc.mjs";
 import { resolveProviderEndpoint, credentialedHeaders } from "../provider-endpoint.mjs";
 import { stampPrepared } from "../../prepare-envelope.mjs";
+import { assertNoSignedMaterial } from "./signed-material-guard.mjs";
 
 export const MAGICEDEN_SOL_API = "https://api-mainnet.magiceden.dev/v2";
 export const LAMPORTS_PER_SOL = 1_000_000_000;
@@ -242,6 +243,10 @@ export async function magicEdenSolPrepareBuy(args = {}, opts = {}) {
     fetchImpl: opts.fetchImpl,
     timeoutMs: opts.timeoutMs ?? 15_000,
   });
+  // Refuse pre-signed material by PRESENCE, before selecting unsigned bytes.
+  // A mixed payload (valid unsigned bytes plus a signed sibling) previously
+  // skipped this check entirely and bound the signed field into the envelope.
+  assertNoSignedMaterial("magiceden", raw);
   const data = raw?.v0?.tx?.data ?? raw?.tx?.data ?? null;
   // Accept ONLY the documented unsigned instruction field. A pre-signed payload
   // (txSigned) from a compromised or impersonated API must never be laundered
@@ -299,6 +304,10 @@ export async function magicEdenSolPrepareList(args = {}, opts = {}) {
     fetchImpl: opts.fetchImpl,
     timeoutMs: opts.timeoutMs ?? 15_000,
   });
+  // Refuse pre-signed material by PRESENCE, before selecting unsigned bytes.
+  // A mixed payload (valid unsigned bytes plus a signed sibling) previously
+  // skipped this check entirely and bound the signed field into the envelope.
+  assertNoSignedMaterial("magiceden", raw);
   const data = raw?.v0?.tx?.data ?? raw?.tx?.data ?? null;
   if (!Array.isArray(data)) {
     if (raw?.txSigned) throw new Error("magiceden: refused a pre-signed transaction payload from the API");
@@ -365,6 +374,10 @@ export async function magicEdenSolPrepareMint(args = {}, opts = {}) {
     );
   }
 
+  // Refuse pre-signed material by PRESENCE, before selecting unsigned bytes.
+  // A mixed payload (valid unsigned bytes plus a signed sibling) previously
+  // skipped this check entirely and bound the signed field into the envelope.
+  assertNoSignedMaterial("magiceden", raw);
   const data = raw?.v0?.tx?.data ?? raw?.tx?.data ?? null;
   if (!Array.isArray(data)) {
     if (raw?.txSigned) throw new Error("magiceden: refused a pre-signed transaction payload from the API");

package/src/data/providers/morpho.mjs

@@ -5,6 +5,7 @@
 import { Interface, getAddress, isAddress, keccak256, toUtf8Bytes } from "ethers";
 import { httpJson } from "../http.mjs";
 import { rpcCall as defaultRpcCall } from "./evm-rpc.mjs";
+import { stampPrepared } from "../../prepare-envelope.mjs";
 
 export const MORPHO_API = "https://api.morpho.org/graphql";
 
@@ -146,11 +147,14 @@ export async function morphoPrepareVault(args = {}, opts = {}) {
   };
   vaultGuard.guardHash = keccak256(toUtf8Bytes(canonicalJson(vaultGuard)));
 
-  return {
+  return stampPrepared({
     provider: "morpho",
     protocol: "erc4626-vault",
     vaultReady: true,
     executionReady: false,
+    signingReady: false,
+    broadcastReady: false,
+    requiresUserSignature: true,
     chainId,
     action,
     vault,
@@ -169,5 +173,5 @@ export async function morphoPrepareVault(args = {}, opts = {}) {
       value: "0x0",
       madVault: vaultGuard,
     },
-  };
+  }, { provider: "morpho", kind: "erc4626-vault" });
 }

package/src/data/providers/pendle.mjs

@@ -2,6 +2,7 @@
 import { getAddress } from "ethers";
 import { httpJson } from "../http.mjs";
 import { attachAutoSlippage, bindAutoSlippageGuardToCall, resolveAutoSlippage } from "../../auto-slippage.mjs";
+import { stampPrepared } from "../../prepare-envelope.mjs";
 
 export const PENDLE_API = "https://api-v2.pendle.finance/core";
 
@@ -154,7 +155,7 @@ export async function pendlePrepare(q = {}, opts = {}) {
     priceChange5m: q.priceChange5m,
     requestedCapBps: q.maxSlippageBps ?? q.slippageBps,
   });
-  return {
+  return stampPrepared({
     provider: "pendle",
     calldataReady: true,
     // NOT executable authority. The bytes are assembled but nothing is signed:
@@ -177,7 +178,7 @@ export async function pendlePrepare(q = {}, opts = {}) {
       value: tx.value ?? "0x0",
       slippageGuard: bindAutoSlippageGuardToCall(quote.autoSlippage, { chainId, venue: tx.to, data: tx.data }),
     },
-  };
+  }, { provider: "pendle", kind: "pendle-swap" });
 }
 
 export async function pendleQuote(q = {}, opts = {}) {

package/src/data/providers/satflow.mjs

@@ -8,6 +8,7 @@
 import { btcAddress } from "./bitcoin-esplora.mjs";
 import { resolveProviderEndpoint, credentialedHeaders } from "../provider-endpoint.mjs";
 import { stampPrepared } from "../../prepare-envelope.mjs";
+import { assertNoSignedMaterial } from "./signed-material-guard.mjs";
 
 export const SATFLOW_BASE = "https://api.satflow.com/v1";
 
@@ -295,6 +296,8 @@ export async function satflowPreparePurchase(args = {}, opts = {}) {
     throw new Error(`satflow: purchase price ${settled} sats exceeds maxSats cap ${maxSats} — PSBT withheld`);
   }
 
+  assertNoSignedMaterial("satflow", data);
+
   return stampPrepared({
     provider: "satflow",
     kind: "purchase-intent",
@@ -312,7 +315,6 @@ export async function satflowPreparePurchase(args = {}, opts = {}) {
       data?.unsignedPSBTBase64 ||
       data?.unsignedPsbtBase64 ||
       data?.unsigned_psbt ||
-      data?.psbt ||
       null,
     note: "Sign PSBT in a Bitcoin wallet. Broadcast only through the user's wallet or an explicitly armed Bitcoin execution plane.",
   });
@@ -325,6 +327,7 @@ export async function satflowPrepareList(args = {}, opts = {}) {
     throw new Error("satflow: list requires inscription_id or runes_output");
   }
   const data = await sfFetch("/intent/sell", { method: "POST", body, opts });
+  assertNoSignedMaterial("satflow", data);
   return stampPrepared({
     provider: "satflow",
     kind: "list-intent",

package/src/data/providers/signed-material-guard.mjs

@@ -0,0 +1,108 @@
+// Shared refusal for pre-signed material returned by an upstream marketplace or
+// aggregator API. Every prepare path calls this before selecting unsigned bytes
+// or binding the upstream response into a stamped envelope.
+
+const MAX_DEPTH = 16;
+const MAX_NODES = 2048;
+
+const UNSIGNED_PREFIXES = ["unsigned", "notsigned", "tosign", "signable"];
+
+const STATUS_KEYS = new Set([
+  "requiresusersignature",
+  "requiressignature",
+  "needssignature",
+  "signaturerequired",
+  "signaturesrequired",
+  "signingready",
+  "signaturecount",
+  "signaturethreshold",
+  "requiredsignatures",
+  "signatureneeded",
+  "hassignature",
+  "allowsignatures",
+  "requestsignature",
+  "multisig",
+  "cosig",
+  "msig",
+]);
+
+const MATERIAL_KEYS = new Set([
+  "sig",
+  "sigs",
+  "scriptsig",
+  "witness",
+  "psbt",
+  "finalizedpsbt",
+  "completepsbt",
+  "finalpsbt",
+  "psbtfinalized",
+  "serializedtransaction",
+]);
+
+function normalizeKey(key) {
+  return String(key).toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+
+function isUnsignedField(norm) {
+  return UNSIGNED_PREFIXES.some((prefix) => norm.startsWith(prefix)) || STATUS_KEYS.has(norm);
+}
+
+function isSignedMaterialKey(key) {
+  const raw = String(key);
+  if (!/^[\x20-\x7e]+$/.test(raw)) return true;
+  const norm = normalizeKey(raw);
+  if (isUnsignedField(norm)) return false;
+  if (MATERIAL_KEYS.has(norm)) return true;
+  return norm.includes("signed") || norm.includes("signature") || norm.endsWith("sig") || norm.endsWith("sigs");
+}
+
+function isSignatureTuple(value) {
+  const v = Number(value?.v);
+  const r = String(value?.r || "");
+  const s = String(value?.s || "");
+  return [0, 1, 27, 28].includes(v) && /^0x[0-9a-f]{2,64}$/i.test(r) && /^0x[0-9a-f]{2,64}$/i.test(s);
+}
+
+/** Find signed-material field names anywhere in an upstream response. */
+export function findSignedFields(value, depth = 0, seen = new Set(), state = { nodes: 0 }) {
+  if (value == null || typeof value !== "object") return [];
+  if (depth > MAX_DEPTH) return ["<max-depth>"];
+  if (seen.has(value)) return [];
+  state.nodes += 1;
+  if (state.nodes > MAX_NODES) return ["<max-nodes>"];
+  seen.add(value);
+
+  if (Array.isArray(value)) {
+    return value.flatMap((item) => findSignedFields(item, depth + 1, seen, state));
+  }
+
+  const hits = [];
+  for (const [key, child] of Object.entries(value)) {
+    if (isSignedMaterialKey(key)) {
+      hits.push(key);
+      continue;
+    }
+    hits.push(...findSignedFields(child, depth + 1, seen, state));
+  }
+
+  const keys = Object.keys(value).map(normalizeKey);
+  const hasPsbt = keys.some((key) => key.endsWith("psbt") || key.endsWith("psbtbase64"));
+  const claimsComplete = Object.entries(value).some(
+    ([key, child]) => /complete|finalized|isfinal/.test(normalizeKey(key)) && child === true,
+  );
+  if (hasPsbt && claimsComplete) hits.push("psbt(complete)");
+  if (isSignatureTuple(value)) hits.push("v/r/s");
+
+  return hits;
+}
+
+/** Refuse an upstream response that carries pre-signed material. */
+export function assertNoSignedMaterial(provider, raw) {
+  const hits = findSignedFields(raw);
+  if (hits.length) {
+    throw new Error(
+      `${provider}: refused a pre-signed transaction payload from the API (fields: ${[...new Set(hits)].join(", ")}) — ` +
+        `@oracle-agent/oracle is prepare-only and will not bind signed material into a prepared envelope`,
+    );
+  }
+}

package/src/data/providers/uniswap-v3.mjs

@@ -1,5 +1,5 @@
 // Uniswap V3 QuoterV2 — exact-input quotes via eth_call (no API key).
-// Chains: Ethereum, Base, Arbitrum. Read-only; never signs or swaps.
+// Chains: Ethereum, Optimism, BNB, Polygon, Base, Arbitrum, Avalanche, Robinhood. Read-only; never signs or swaps.
 
 import { Interface, getAddress, isAddress } from "ethers";
 import { rpcCall } from "./evm-rpc.mjs";
@@ -34,10 +34,8 @@ export const UNI_V3_CHAINS = {
   // eth_chainId == 4663, eth_getCode non-empty for every address below, and a real
   // quoteExactInputSingle returned 1 WETH -> 1866.58 USDG at fee 100 (2026-07-31).
   //
-  // Why this entry matters: LI.FI / ParaSwap / CoW do not index 4663, so the router's
-  // aggregator-only candidate list returned "no usable route" for every RH swap. The
-  // on-chain QuoterV2 is the only source that can price this chain. `usdc` is USDG
-  // (Global Dollar, 6-dec) — the stable quote RH pools actually use.
+  // The router-level price-impact guard is what blocks dead RH V3 shells from being
+  // treated as executable routes.
   4663: {
     name: "robinhood",
     quoter: "0x33e885ed0ec9bf04ecfb19341582aadcb4c8a9e7",
@@ -45,6 +43,37 @@ export const UNI_V3_CHAINS = {
     weth: "0x0bd7d308f8e1639fab988df18a8011f41eacad73",
     usdc: "0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168",
   },
+  // Optimism / BNB / Polygon / Avalanche. Official Uniswap v3 deployments,
+  // each proved on-chain in the MAD PR #16 lane: eth_getCode non-empty for
+  // quoter, router, wrapped-native and stable, plus a decimals-correct quote.
+  10: {
+    name: "optimism",
+    quoter: "0x61fFE014bA17989E743c5F6cB21bF9697530B21e",
+    router: "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",
+    weth: "0x4200000000000000000000000000000000000006",
+    usdc: "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
+  },
+  56: {
+    name: "bsc",
+    quoter: "0x78D78E420Da98ad378D7799bE8f4AF69033EB077",
+    router: "0xB971eF87ede563556b2ED4b1C0b0019111Dd85d2",
+    weth: "0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c",
+    usdc: "0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",
+  },
+  137: {
+    name: "polygon",
+    quoter: "0x61fFE014bA17989E743c5F6cB21bF9697530B21e",
+    router: "0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45",
+    weth: "0x0d500B1d8E8eF31E21C99d1Db9A6444d3ADf1270",
+    usdc: "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
+  },
+  43114: {
+    name: "avalanche",
+    quoter: "0xbe0F5544EC67e9B3b2D979aaA43f18Fd87E6257F",
+    router: "0xbb00FF08d01D300023C629E8fFfFcb65A5a578cE",
+    weth: "0xB31f66AA3C1e785363F0875A1B74E27b85FD66c7",
+    usdc: "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",
+  },
 };
 
 export const UNI_V3_FEE_TIERS = [100, 500, 3000, 10000];