@oracle-agent/oracle 0.2.1 → 0.2.3

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.2.1",
-  "description": "Oracle: prepare-only multichain agent control plane. Policy-bounded intents for a user-signed wallet. Self-custody by default \u2014 the public package never takes your key. Built for Hermes; no model key required.",
+  "version": "0.2.3",
+  "description": "Oracle: prepare-only multichain agent control plane. Policy-bounded intents for a user-signed wallet. Self-custody by default — the public package never takes your key. Built for Hermes; no model key required.",
   "license": "Apache-2.0",
   "type": "module",
   "publishConfig": {

package/src/data/providers/poly-clob.mjs

@@ -1,15 +1,13 @@
 import { stampPrepared } from "../../prepare-envelope.mjs";
-// Polymarket CLOB — prepare + local sign helpers for Oracle.
-// Prepare path builds unsigned EIP-712 order envelopes (no keys).
-// Sign/post is for @oracle-agent/operator poly-exec (local only, no VPS).
+// Polymarket CLOB — prepare-only for Oracle.
+// Builds unsigned EIP-712 order envelopes (no keys).
+// Sign/post live in @oracle-agent/operator poly-exec only.
+// Deep-import sign/post helpers hard-refuse here.
 
 import { createHmac, randomInt } from "node:crypto";
 import {
-  Wallet,
   keccak256,
   concat,
-  hexlify,
-  toUtf8Bytes,
   zeroPadValue,
   getCreate2Address,
   AbiCoder,
@@ -226,204 +224,29 @@ export function buildOrderV2Message(params = {}) {
   };
 }
 
-/** ERC-7739-wrapped POLY_1271 signature for deposit wallets (sigType=3). */
-export async function signOrderV2_1271(wallet, orderMessage, exchangeAddress) {
-  const ORDER_TYPE_STRING =
-    "Order(uint256 salt,address maker,address signer,uint256 tokenId," +
-    "uint256 makerAmount,uint256 takerAmount,uint8 side,uint8 signatureType," +
-    "uint256 timestamp,bytes32 metadata,bytes32 builder)";
-  const ORDER_TYPE_HASH = keccak256(toUtf8Bytes(ORDER_TYPE_STRING));
-  const DOMAIN_TYPE_HASH = keccak256(
-    toUtf8Bytes("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)")
+/** Deep-import refuse: signing lives in @oracle-agent/operator. */
+export async function signOrderV2_1271() {
+  throw new Error(
+    "poly-clob.signOrderV2_1271 refused: @oracle-agent/oracle is prepare-only. Sign via @oracle-agent/operator poly-exec."
   );
-  const NAME_HASH = keccak256(toUtf8Bytes(EIP712_DOMAIN_V2.name));
-  const VERSION_HASH = keccak256(toUtf8Bytes(EIP712_DOMAIN_V2.version));
-
-  const appDomainSep = keccak256(
-    AbiCoder.defaultAbiCoder().encode(
-      ["bytes32", "bytes32", "bytes32", "uint256", "address"],
-      [DOMAIN_TYPE_HASH, NAME_HASH, VERSION_HASH, BigInt(POLY_CHAIN_ID), exchangeAddress]
-    )
-  );
-
-  const contentsHash = keccak256(
-    AbiCoder.defaultAbiCoder().encode(
-      [
-        "bytes32",
-        "uint256",
-        "address",
-        "address",
-        "uint256",
-        "uint256",
-        "uint256",
-        "uint8",
-        "uint8",
-        "uint256",
-        "bytes32",
-        "bytes32",
-      ],
-      [
-        ORDER_TYPE_HASH,
-        BigInt(orderMessage.salt),
-        orderMessage.maker,
-        orderMessage.signer,
-        BigInt(orderMessage.tokenId),
-        BigInt(orderMessage.makerAmount),
-        BigInt(orderMessage.takerAmount),
-        orderMessage.side,
-        orderMessage.signatureType,
-        BigInt(orderMessage.timestamp),
-        orderMessage.metadata,
-        orderMessage.builder,
-      ]
-    )
-  );
-
-  const innerSig = await wallet.signTypedData(
-    { ...EIP712_DOMAIN_V2, verifyingContract: exchangeAddress },
-    {
-      TypedDataSign: [
-        { name: "contents", type: "Order" },
-        { name: "name", type: "string" },
-        { name: "version", type: "string" },
-        { name: "chainId", type: "uint256" },
-        { name: "verifyingContract", type: "address" },
-        { name: "salt", type: "bytes32" },
-      ],
-      Order: ORDER_TYPES_V2.Order,
-    },
-    {
-      contents: orderMessage,
-      name: "DepositWallet",
-      version: "1",
-      chainId: POLY_CHAIN_ID,
-      verifyingContract: orderMessage.maker, // deposit wallet (ERC-1271)
-      salt: BYTES32_ZERO,
-    }
-  );
-
-  const orderTypeHex = hexlify(toUtf8Bytes(ORDER_TYPE_STRING));
-  const lenHex = "0x" + (186).toString(16).padStart(4, "0");
-  return concat([innerSig, appDomainSep, contentsHash, orderTypeHex, lenHex]);
 }
 
 /**
- * Build + sign V2 order.
- * mode:
- *   - eoa (0): maker=funder or wallet
- *   - deposit (3): maker=signer=deriveDepositWallet(eoa)  [default auto for desk agent]
+ * Deep-import refuse: signed order build lives in @oracle-agent/operator.
  */
-export async function buildSignedOrderV2(wallet, params = {}) {
-  const eoa = wallet.address;
-  let signatureType = params.signatureType;
-  let funder = params.funderAddress || eoa;
-
-  // Auto deposit-wallet flow when requested or when env forces it
-  const preferDeposit =
-    params.useDepositWallet === true ||
-    process.env.MAD_POLY_USE_DEPOSIT_WALLET === "1" ||
-    signatureType === 3;
-
-  if (preferDeposit || signatureType === undefined) {
-    // default path for accounts that reject EOA maker: try deposit wallet
-    if (preferDeposit || process.env.MAD_POLY_USE_DEPOSIT_WALLET !== "0") {
-      const dw = deriveDepositWallet(eoa);
-      // if caller didn't force eoa-only, use deposit when useDepositWallet or auto
-      if (preferDeposit || params.autoDeposit !== false) {
-        // keep eoa as default unless deposit forced — placeLimitOrder sets useDepositWallet on retry
-      }
-    }
-  }
-
-  if (params.useDepositWallet || signatureType === 3) {
-    funder = deriveDepositWallet(eoa);
-    signatureType = 3;
-  } else {
-    signatureType = signatureType ?? 0;
-  }
-
-  // sigType 3: maker = deposit wallet; signer = EOA (must match API key address)
-  // (CLOB: "order signer address has to be the address of the API KEY")
-  const orderSigner = eoa;
-  const built = buildOrderV2Message({
-    ...params,
-    maker: funder,
-    signer: orderSigner,
-    signatureType,
-  });
-
-  const signature =
-    signatureType === 3
-      ? await signOrderV2_1271(wallet, built.value, built.exchange)
-      : await wallet.signTypedData(built.domain, built.types, built.value);
-
-  return {
-    order: {
-      salt: parseInt(built.value.salt, 10),
-      maker: built.value.maker,
-      signer: built.value.signer,
-      tokenId: built.value.tokenId,
-      makerAmount: built.value.makerAmount,
-      takerAmount: built.value.takerAmount,
-      side: built.side,
-      signatureType: built.value.signatureType,
-      timestamp: built.value.timestamp,
-      metadata: built.value.metadata,
-      builder: built.value.builder,
-      expiration: "0",
-      signature,
-    },
-    owner: null,
-    orderType: built.orderType,
-    _meta: {
-      exchange: built.exchange,
-      notionalUsdc: built.notionalUsdc,
-      domain: built.domain,
-      types: built.types,
-      value: built.value,
-      depositWallet: signatureType === 3 ? funder : null,
-      eoa,
-    },
-  };
+export async function buildSignedOrderV2() {
+  throw new Error(
+    "poly-clob.buildSignedOrderV2 refused: @oracle-agent/oracle is prepare-only. Sign via @oracle-agent/operator poly-exec."
+  );
 }
 
 /**
- * POST signed order to CLOB. Requires L2 creds.
+ * Deep-import refuse: CLOB submit lives in @oracle-agent/operator.
  */
-export async function postClobOrder({
-  payload,
-  creds,
-  address,
-  clobRest = POLY_CLOB_REST,
-  fetchImpl = globalThis.fetch,
-} = {}) {
-  if (!creds?.key || !creds?.secret || !creds?.passphrase) {
-    throw new Error("L2 creds required (key/secret/passphrase)");
-  }
-  const body = JSON.stringify(payload);
-  const path = "/order";
-  const headers = buildL2Headers(creds, address, "POST", path, body);
-  const res = await fetchImpl(`${clobRest.replace(/\/$/, "")}${path}`, {
-    method: "POST",
-    headers,
-    body,
-  });
-  const text = await res.text();
-  let data;
-  try {
-    data = JSON.parse(text);
-  } catch {
-    data = { raw: text };
-  }
-  if (!res.ok) {
-    const err = new Error(
-      `CLOB POST /order failed (${res.status}): ${text.slice(0, 300)}`
-    );
-    err.status = res.status;
-    err.body = data;
-    throw err;
-  }
-  return data;
+export async function postClobOrder() {
+  throw new Error(
+    "poly-clob.postClobOrder refused: @oracle-agent/oracle is prepare-only. Submit via @oracle-agent/operator poly-exec."
+  );
 }
 
 /** Max notional USDC for a single desk order (env MAD_POLY_MAX_NOTIONAL, default 25). */

package/src/data/providers/solana-rpc.mjs

@@ -27,10 +27,12 @@ export async function solanaRpc(method, params = [], opts = {}) {
   if (
     methodName === "sendTransaction" ||
     methodName === "sendRawTransaction" ||
-    methodName === "simulateBundle" && false ||
+    methodName === "requestAirdrop" ||
+    methodName === "requestAirDrop" ||
+    /airdrop/i.test(methodName) ||
     /^send/i.test(methodName)
   ) {
-    throw new Error(`solana-rpc: ${methodName} refused — @oracle-agent/oracle is prepare-only (no broadcast)`);
+    throw new Error(`solana-rpc: ${methodName} refused — @oracle-agent/oracle is prepare-only (no broadcast/airdrop)`);
   }
   const result = await httpJson(rpcUrl(opts), {
     method: "POST",