@oracle-agent/oracle 0.4.0 → 0.4.1

package/bin/oracle-data-mcp.mjs

@@ -263,7 +263,7 @@ const tools = [
   {
     name: "nft_prepare_list",
     description:
-      "Prepare an NFT listing for OpenSea EVM, Magic Eden Solana, or Satflow Bitcoin after explicit user review. Requires userConfirmed=true plus asset, marketplace, price, currency where applicable, and future expiry. Returns approval/signing actions, an unsigned Solana transaction, or an unsigned Bitcoin PSBT. Never signs, submits, or broadcasts.",
+      "Prepare an NFT listing for OpenSea EVM, Magic Eden Solana, or Satflow Bitcoin after explicit user review. Requires userConfirmed=true plus asset, marketplace, price, currency where applicable, and future expiry. Magic Eden Solana also requires confirmation exactly: list <tokenMint> on magiceden-sol for <priceSol> SOL until <expiry>. Returns approval/signing actions, an unsigned Solana transaction, or an unsigned Bitcoin PSBT. Never signs, submits, or broadcasts.",
     inputSchema: {
       type: "object",
       required: ["marketplace", "userConfirmed"],
@@ -284,7 +284,8 @@ const tools = [
         tokenATA: { type: "string" },
         auctionHouse: { type: "string" },
         priceSol: { type: "string" },
-        expiry: { description: "Future ISO 8601 timestamp or Unix seconds." },
+        expiry: { description: "Future ISO 8601 timestamp or Unix seconds. Magic Eden Solana listings require finite future expiry; no-expiry is refused." },
+        confirmation: { type: "string", description: "Required for Magic Eden Solana listings. Exact phrase: list <tokenMint> on magiceden-sol for <priceSol> SOL until <expiry>." },
         inscriptionId: { type: "string" },
         runesOutput: { type: "string" },
         ordAddress: { type: "string" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Oracle: prepare-only multichain agent control plane. Policy-bounded intents for a user-signed wallet. Self-custody by default — the public package never takes your key. Built for Hermes; no model key required.",
   "license": "Apache-2.0",
   "type": "module",

package/src/data/http.mjs

@@ -37,6 +37,35 @@ const IDENTITY_HEADERS = [
   "proxy-authorization",
 ];
 
+const REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);
+const MAX_REDIRECTS = 3;
+
+function credentialHeaderName(name) {
+  const h = String(name || "").toLowerCase();
+  return IDENTITY_HEADERS.includes(h) || /(^|-)(api[-_]?key|key|token|secret|auth|authorization|session|cookie|signature|access)(-|$)/.test(h);
+}
+
+function stripCredentialHeaders(headers) {
+  const safe = {};
+  for (const [name, value] of Object.entries(headers || {})) {
+    if (!credentialHeaderName(name)) safe[name] = value;
+  }
+  return safe;
+}
+
+function redirectedUrl(location, currentUrl) {
+  if (!location) throw new Error(`HTTP redirect from ${currentUrl} missing Location`);
+  const next = new URL(String(location), String(currentUrl));
+  if (next.protocol !== "http:" && next.protocol !== "https:") {
+    throw new Error(`HTTP redirect from ${currentUrl} used unsupported protocol ${next.protocol}`);
+  }
+  return next.toString();
+}
+
+function sameOrigin(a, b) {
+  return new URL(String(a)).origin === new URL(String(b)).origin;
+}
+
 const inflight = new Map();
 
 /**
@@ -77,24 +106,48 @@ async function once(url, { fetchImpl, method, headers, body, timeoutMs }) {
   const ac = new AbortController();
   const t = setTimeout(() => ac.abort(), timeoutMs);
   try {
-    const res = await fetchImpl(url, { method, headers, body, signal: ac.signal });
-    const text = await res.text();
-    let json = null;
-    if (text) {
-      try {
-        json = JSON.parse(text);
-      } catch {
-        json = null;
+    let currentUrl = String(url);
+    let currentHeaders = { ...(headers || {}) };
+    for (let redirects = 0; redirects <= MAX_REDIRECTS; redirects += 1) {
+      const res = await fetchImpl(currentUrl, {
+        method,
+        headers: currentHeaders,
+        body,
+        signal: ac.signal,
+        redirect: "manual",
+      });
+      const text = await res.text();
+      let json = null;
+      if (text) {
+        try {
+          json = JSON.parse(text);
+        } catch {
+          json = null;
+        }
       }
+      if (REDIRECT_STATUS.has(res.status)) {
+        if (method !== "GET" && method !== "HEAD") {
+          const err = new Error(`HTTP ${res.status} ${method} ${currentUrl} redirected non-idempotent request`);
+          err.status = res.status;
+          err.body = json ?? text.slice(0, 300);
+          throw err;
+        }
+        if (redirects === MAX_REDIRECTS) throw new Error(`HTTP redirect loop for ${url}`);
+        const nextUrl = redirectedUrl(res.headers?.get?.("location"), currentUrl);
+        if (!sameOrigin(nextUrl, currentUrl)) currentHeaders = stripCredentialHeaders(currentHeaders);
+        currentUrl = nextUrl;
+        continue;
+      }
+      if (!res.ok) {
+        const err = new Error(`HTTP ${res.status} ${method} ${currentUrl}`);
+        err.status = res.status;
+        err.retryAfter = res.headers?.get?.("retry-after") ?? null;
+        err.body = json ?? text.slice(0, 300);
+        throw err;
+      }
+      return json ?? text;
     }
-    if (!res.ok) {
-      const err = new Error(`HTTP ${res.status} ${method} ${url}`);
-      err.status = res.status;
-      err.retryAfter = res.headers?.get?.("retry-after") ?? null;
-      err.body = json ?? text.slice(0, 300);
-      throw err;
-    }
-    return json ?? text;
+    throw new Error(`HTTP redirect loop for ${url}`);
   } finally {
     clearTimeout(t);
   }

package/src/data/providers/magiceden-sol.mjs

@@ -90,17 +90,33 @@ function lamports(sol) {
 }
 
 function listingExpiry(value) {
-  if (value == null || value === "") return null;
+  if (value == null || value === "") throw new Error("magiceden: listing expiry is required and must be in the future");
   const expiry = Number(value);
-  if (!Number.isSafeInteger(expiry) || expiry < 0) {
-    throw new Error("magiceden: expiry must be a whole Unix timestamp in seconds or 0");
+  if (!Number.isSafeInteger(expiry) || expiry <= 0) {
+    throw new Error("magiceden: expiry must be a future Unix timestamp in seconds");
   }
-  if (expiry !== 0 && expiry <= Math.floor(Date.now() / 1000)) {
-    throw new Error("magiceden: expiry must be in the future or 0 for no expiry");
+  if (expiry <= Math.floor(Date.now() / 1000)) {
+    throw new Error("magiceden: expiry must be in the future");
   }
   return expiry;
 }
 
+function listConfirmation({ tokenMint, priceSol, expiry }) {
+  return `list ${tokenMint} on magiceden-sol for ${priceSol} SOL until ${expiry}`;
+}
+
+function requireListingConfirmation(args, fields) {
+  if (args.userConfirmed !== true) {
+    throw new Error("magiceden: listing requires userConfirmed=true after reviewing tokenMint, priceSol, and expiry");
+  }
+  const expected = listConfirmation(fields);
+  const actual = String(args.confirmation || args.confirmationPhrase || "").trim();
+  if (actual !== expected) {
+    throw new Error(`magiceden: confirmation must equal ${JSON.stringify(expected)}`);
+  }
+  return expected;
+}
+
 export async function magicEdenSolHealth(opts = {}) {
   try {
     const stats = await magicEdenSolStats({ symbol: "mad_lads" }, opts);
@@ -269,6 +285,7 @@ export async function magicEdenSolPrepareList(args = {}, opts = {}) {
   const auctionHouse = solanaPubkey(args.auctionHouse, "auctionHouse");
   const priceSol = positiveNumber(args.priceSol ?? args.price, "priceSol");
   const expiry = listingExpiry(args.expiry);
+  const confirmation = requireListingConfirmation(args, { tokenMint, priceSol, expiry });
   const url = new URL(`${base(opts)}/instructions/sell`);
   url.searchParams.set("seller", seller);
   url.searchParams.set("auctionHouseAddress", auctionHouse);
@@ -301,6 +318,7 @@ export async function magicEdenSolPrepareList(args = {}, opts = {}) {
     tokenMint,
     priceSol,
     expiry,
+    confirmation,
     transaction,
     transactionEncoding: "base64",
     raw,