@oracle-agent/oracle 0.7.0 → 0.8.0

package/bin/desk-server.mjs

@@ -10,7 +10,7 @@ import { randomBytes } from "node:crypto";
 import { verifyMessage } from "ethers";
 import { data, dataCall, dataHealth, dataCatalog, isExecutionProvider } from "../src/data/desk-data.mjs";
 import { getProvider } from "../src/data/catalog.mjs";
-import { csvEnv, env, envEnabled, envFlag } from "../src/oracle-env.mjs";
+import { csvEnv, env, envFlag } from "../src/oracle-env.mjs";
 import {
   listTiers,
   onboardUser,
@@ -21,7 +21,7 @@ import {
 
 const HOST = env("ORACLE_DATA_HOST", "MAD_DESK_HOST", "127.0.0.1");
 const PORT = Number(env("ORACLE_DATA_PORT", "MAD_DESK_PORT", 8787));
-const ONBOARD_ENABLED = envEnabled("ORACLE_ONBOARD_HTTP", "MAD_ONBOARD_HTTP", false);
+const ONBOARD_ENABLED = envFlag("ORACLE_ONBOARD_HTTP", "MAD_ONBOARD_HTTP", false);
 const PUBLIC_API_MODE = envFlag("ORACLE_PUBLIC_API_MODE", "MAD_PUBLIC_API_MODE", false);
 const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
 const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1", "[::1]"]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oracle-agent/oracle",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Oracle: prepare-only multichain agent control plane. Policy-bounded intents for a user-signed wallet. Self-custody by default — the public package never takes your key. Built for Hermes; no model key required.",
   "license": "Apache-2.0",
   "type": "module",

package/profiles/oracle/SOUL.md

@@ -57,8 +57,8 @@ the data plane). If it stays ambiguous, ask. Do not guess a chain.
    owner identity, the venue/destination allowlist, and the exact-grant bind.
 
    **Autonomous trading is the one opt-in.** A trigger that fires a trade with
-   nobody watching requires `ORACLE_AUTONOMOUS=1`. Until then such an action
-   alerts instead of executing. Say that plainly rather than pretending it fired.
+   nobody watching requires `ORACLE_AUTONOMOUS_TRADING=1`. Until then such an
+   action alerts instead of executing. Say that plainly rather than pretending it fired.
 2. **RFQ is a route source, not a permission bypass.** Compare solver/RFQ
    quotes net of gas/spread where configured, enforce expiry, and keep exact
    artifact kinds separate.

package/public/oracle-splash/assets/llms/codex-icon.svg

@@ -0,0 +1 @@
+<svg width="24" height="24" fill="#fff" fill-rule="evenodd" style="flex:none;line-height:1" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Codex</title><path clip-rule="evenodd" d="M8.086.457a6.105 6.105 0 013.046-.415c1.333.153 2.521.72 3.564 1.7a.117.117 0 00.107.029c1.408-.346 2.762-.224 4.061.366l.063.03.154.076c1.357.703 2.33 1.77 2.918 3.198.278.679.418 1.388.421 2.126a5.655 5.655 0 01-.18 1.631.167.167 0 00.04.155 5.982 5.982 0 011.578 2.891c.385 1.901-.01 3.615-1.183 5.14l-.182.22a6.063 6.063 0 01-2.934 1.851.162.162 0 00-.108.102c-.255.736-.511 1.364-.987 1.992-1.199 1.582-2.962 2.462-4.948 2.451-1.583-.008-2.986-.587-4.21-1.736a.145.145 0 00-.14-.032c-.518.167-1.04.191-1.604.185a5.924 5.924 0 01-2.595-.622 6.058 6.058 0 01-2.146-1.781c-.203-.269-.404-.522-.551-.821a7.74 7.74 0 01-.495-1.283 6.11 6.11 0 01-.017-3.064.166.166 0 00.008-.074.115.115 0 00-.037-.064 5.958 5.958 0 01-1.38-2.202 5.196 5.196 0 01-.333-1.589 6.915 6.915 0 01.188-2.132c.45-1.484 1.309-2.648 2.577-3.493.282-.188.55-.334.802-.438.286-.12.573-.22.861-.304a.129.129 0 00.087-.087A6.016 6.016 0 015.635 2.31C6.315 1.464 7.132.846 8.086.457zm-.804 7.85a.848.848 0 00-1.473.842l1.694 2.965-1.688 2.848a.849.849 0 001.46.864l1.94-3.272a.849.849 0 00.007-.854l-1.94-3.393zm5.446 6.24a.849.849 0 000 1.695h4.848a.849.849 0 000-1.696h-4.848z"></path></svg>

package/public/oracle-splash/assets/wordmarks/markets.svg

@@ -0,0 +1 @@
+<svg width="240" height="228" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240 228"><path fill="#fdfdfd" d="M240 221.115c-.524 1.679-3.536.705-4.715.72-14.483.134-28.986-.263-43.45.288l-1.648-1.093.924-138.355-1.254-.293C149.349 145.255 87.34 195.486 17.09 222.233c-3.635 1.381-12.15 5.121-15.472 5.499-.604.07-1.618-.129-1.618-.661v-51.119c7.811-3.974 16.122-6.995 24.057-10.815 48.345-23.245 91.356-60.33 121.551-104.425 2.088-3.05 5.009-7.064 6.658-10.248.264-.512 1.438-2.315.169-2.315H16.961V.745L17.71 0h221.54l.749.745z"/></svg>

package/public/oracle-splash/assets/wordmarks/opensea-icon.svg

@@ -0,0 +1,17 @@
+<svg width="360" height="360" viewBox="0 0 360 360" fill="none" xmlns="http://www.w3.org/2000/svg">
+<g clip-path="url(#clip0_2_57)">
+<g clip-path="url(#clip1_2_57)">
+<path d="M252.072 212.292C245.826 220.662 232.686 234.558 225.378 234.558H191.412V212.274H218.466C222.336 212.274 226.026 210.708 228.69 207.954C242.586 193.554 250.614 176.418 250.614 158.04C250.614 126.684 227.178 98.964 191.394 82.26V67.284C191.394 60.84 186.174 55.62 179.73 55.62C173.286 55.62 168.066 60.84 168.066 67.284V73.494C158.04 70.56 147.42 68.328 136.332 67.05C154.692 86.994 165.906 113.67 165.906 142.92C165.906 169.146 156.942 193.23 141.876 212.31H168.066V234.63H129.726C124.542 234.63 120.33 230.436 120.33 225.234V215.478C120.33 213.768 118.944 212.364 117.216 212.364H66.672C65.682 212.364 64.836 213.174 64.836 214.164C64.8 254.088 96.39 284.058 134.172 284.058H240.822C266.382 284.058 277.812 251.298 292.788 230.454C298.602 222.39 312.552 215.91 316.782 214.11C317.556 213.786 318.006 213.066 318.006 212.22V199.26C318.006 197.946 316.71 196.956 315.432 197.316C315.432 197.316 253.782 211.482 253.062 211.68C252.342 211.896 252.072 212.31 252.072 212.31V212.292Z" fill="white"/>
+<path d="M146.16 142.83C146.16 122.724 139.266 104.22 127.746 89.586L69.732 189.972H132.138C141.012 176.436 146.178 160.236 146.178 142.848L146.16 142.83Z" fill="white"/>
+<path d="M181.566 -5.19844e-06C80.91 -0.828005 -0.82799 80.91 1.00604e-05 181.566C0.84601 279.306 80.694 359.172 178.416 359.982C279.072 360.846 360.846 279.072 359.982 178.416C359.172 80.712 279.306 0.845995 181.566 -5.19844e-06ZM127.746 89.586C139.266 104.22 146.16 122.742 146.16 142.83C146.16 160.236 140.994 176.436 132.12 189.954H69.714L127.728 89.568L127.746 89.586ZM318.006 199.242V212.202C318.006 213.048 317.556 213.768 316.782 214.092C312.552 215.892 298.602 222.372 292.788 230.436C277.812 251.28 266.382 284.04 240.822 284.04H134.172C96.408 284.04 64.818 254.07 64.836 214.146C64.836 213.156 65.682 212.346 66.672 212.346H117.216C118.962 212.346 120.33 213.75 120.33 215.46V225.216C120.33 230.4 124.524 234.612 129.726 234.612H168.066V212.292H141.876C156.942 193.212 165.906 169.128 165.906 142.902C165.906 113.652 154.692 86.976 136.332 67.032C147.438 68.328 158.058 70.542 168.066 73.476V67.266C168.066 60.822 173.286 55.602 179.73 55.602C186.174 55.602 191.394 60.822 191.394 67.266V82.242C227.178 98.946 250.614 126.666 250.614 158.022C250.614 176.418 242.568 193.536 228.69 207.936C226.026 210.69 222.336 212.256 218.466 212.256H191.412V234.54H225.378C232.704 234.54 245.844 220.644 252.072 212.274C252.072 212.274 252.342 211.86 253.062 211.644C253.782 211.428 315.432 197.28 315.432 197.28C316.728 196.92 318.006 197.91 318.006 199.224V199.242Z" fill="#0086FF"/>
+</g>
+</g>
+<defs>
+<clipPath id="clip0_2_57">
+<rect width="360" height="360" fill="white"/>
+</clipPath>
+<clipPath id="clip1_2_57">
+<rect width="360" height="360" fill="white"/>
+</clipPath>
+</defs>
+</svg>

package/public/oracle-splash/index.html

@@ -37,7 +37,7 @@
  --max:1100px;
 }
 *{box-sizing:border-box;margin:0;padding:0}
-html{scroll-behavior:smooth;-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility}
+html{scroll-behavior:smooth;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;text-rendering:optimizeLegibility}
 body{
  min-height:100dvh;background:var(--bg);color:var(--ink);position:relative;isolation:isolate;
  font-family:var(--sans);font-weight:400;overflow-x:hidden;
@@ -64,7 +64,9 @@ img{display:inline-block}
 .orbital .core{fill:var(--blue);animation:core-pulse 3.2s var(--ease) infinite}
 .orbital .halo{fill:none;stroke:rgba(124,196,255,.22);stroke-width:5;filter:blur(3px)}
 @keyframes orb-spin{to{transform:rotate(360deg)}}
-@keyframes core-pulse{0%,100%{opacity:1}50%{opacity:.55}}
+@keyframes core-pulse{0%,100%{opacity:1;transform:scale(1)}50%{opacity:.6;transform:scale(1.06)}}
+@keyframes core-billboard{from{transform:rotateY(0deg) rotateX(-18deg) rotateZ(8deg)}to{transform:rotateY(-360deg) rotateX(-18deg) rotateZ(8deg)}}
+@keyframes orbit-travel{from{transform:rotateX(76deg) rotateZ(0deg) translateX(clamp(170px,23vw,280px))}to{transform:rotateX(76deg) rotateZ(360deg) translateX(clamp(170px,23vw,280px))}}
 
 .loader{
  position:fixed;inset:0;z-index:50;background:var(--bg);
@@ -153,23 +155,39 @@ main{position:relative;z-index:2;padding-top:84px}
  width:clamp(380px,50vw,640px);aspect-ratio:1;position:relative;transform-style:preserve-3d;
  animation:orb-slew 22s linear infinite;
 }
-.hero-orb .lat{position:absolute;inset:0;border-radius:50%;border:1.4px solid rgba(124,196,255,.5);transform-style:preserve-3d;box-shadow:0 0 26px rgba(124,196,255,.12)}
-.hero-orb .lat.l1{transform:rotateY(0deg)}
+.hero-orb .lat{position:absolute;inset:0;border-radius:50%;border:1.2px solid rgba(124,196,255,.42);transform-style:preserve-3d;box-shadow:0 0 26px rgba(124,196,255,.1), inset 0 0 34px rgba(124,196,255,.07)}
+.hero-orb .lat.l1{transform:rotateY(0deg);border-color:rgba(167,216,255,.62)}
 .hero-orb .lat.l2{transform:rotateY(45deg)}
-.hero-orb .lat.l3{transform:rotateY(90deg)}
+.hero-orb .lat.l3{transform:rotateY(90deg);border-color:rgba(167,216,255,.58)}
 .hero-orb .lat.l4{transform:rotateY(135deg)}
-.hero-orb .par{position:absolute;left:50%;top:50%;border-radius:50%;border:1.2px solid rgba(124,196,255,.38);transform-style:preserve-3d}
+.hero-orb .par{position:absolute;left:50%;top:50%;border-radius:50%;border:1px solid rgba(124,196,255,.3);transform-style:preserve-3d;box-shadow:inset 0 0 24px rgba(124,196,255,.06)}
 .hero-orb .par.p1{width:96%;height:96%;transform:translate(-50%,-50%) rotateX(90deg)}
 .hero-orb .par.p2{width:78%;height:78%;transform:translate(-50%,-50%) rotateX(90deg) translateZ(calc(clamp(380px,50vw,640px) * .31))}
 .hero-orb .par.p3{width:78%;height:78%;transform:translate(-50%,-50%) rotateX(90deg) translateZ(calc(clamp(380px,50vw,640px) * -.31))}
-.hero-orb .eq{position:absolute;inset:-4%;border-radius:50%;border:2px solid rgba(167,216,255,.75);transform:rotateX(76deg);box-shadow:0 0 40px rgba(124,196,255,.35)}
+.hero-orb .eq{position:absolute;inset:-4%;border-radius:50%;border:1.8px solid rgba(190,228,255,.82);transform:rotateX(76deg);box-shadow:0 0 44px rgba(124,196,255,.4), inset 0 0 30px rgba(167,216,255,.14)}
 .hero-orb .core-glow{
- position:absolute;inset:33%;border-radius:50%;
- background:radial-gradient(circle at 40% 36%, rgba(232,241,250,.9), rgba(124,196,255,.65) 34%, rgba(124,196,255,.12) 68%, transparent);
- box-shadow:0 0 46px rgba(124,196,255,.45), 0 0 110px rgba(124,196,255,.18);
+ position:absolute;inset:38%;border-radius:50%;
+ transform:rotateZ(8deg) rotateX(-18deg);
+ animation:core-billboard 22s linear infinite;
+ background:
+  radial-gradient(circle at 36% 30%, rgba(255,255,255,.95) 0%, rgba(214,238,255,.8) 12%, rgba(140,204,255,.55) 32%, rgba(74,150,214,.34) 56%, rgba(28,74,124,.22) 78%, rgba(14,34,62,.12) 100%);
+ box-shadow:
+  inset -12px -15px 34px rgba(6,16,32,.5),
+  inset 8px 10px 26px rgba(210,238,255,.2),
+  0 0 60px rgba(124,196,255,.5),
+  0 0 140px rgba(124,196,255,.2);
+}
+.hero-orb .core-glow::before{
+ content:"";position:absolute;left:22%;top:16%;width:26%;height:20%;border-radius:50%;
+ background:radial-gradient(ellipse at 50% 50%, rgba(255,255,255,.9), rgba(255,255,255,.28) 44%, transparent 74%);
+ transform:rotate(-24deg);
+}
+.hero-orb .core-glow::after{
+ content:"";position:absolute;inset:-6%;border-radius:50%;pointer-events:none;
+ background:radial-gradient(circle at 50% 50%, rgba(124,196,255,.3) 0%, rgba(124,196,255,.09) 46%, transparent 68%);
  animation:core-pulse 3.4s var(--ease) infinite;
 }
-.hero-orb .orbit-dot{position:absolute;width:10px;height:10px;border-radius:50%;background:var(--blue2);box-shadow:0 0 20px rgba(167,216,255,.9);left:calc(50% - 5px);top:calc(50% - 5px);transform:rotateX(76deg) translateX(clamp(170px,23vw,280px));animation:none}
+.hero-orb .orbit-dot{position:absolute;width:9px;height:9px;border-radius:50%;background:radial-gradient(circle at 38% 34%, #fff, var(--blue2) 55%, rgba(124,196,255,.5));box-shadow:0 0 22px rgba(167,216,255,.95), 0 0 44px rgba(124,196,255,.4);left:calc(50% - 4.5px);top:calc(50% - 4.5px);transform-style:preserve-3d;animation:orbit-travel 14s linear infinite}
 .home-title{
  position:relative;z-index:2;
  font-family:var(--display);font-weight:300;font-size:clamp(96px,17vw,230px);line-height:.9;letter-spacing:-.045em;
@@ -250,9 +268,9 @@ main{position:relative;z-index:2;padding-top:84px}
 .node{
  border:1px solid rgba(124,196,255,.42);border-radius:14px;background:rgba(21,32,49,.92);
  padding:14px 12px;text-align:center;
- transition:border-color .3s,transform .3s var(--ease),box-shadow .3s;
+ transition:border-color .4s var(--ease),transform .4s var(--ease),box-shadow .4s var(--ease);
 }
-.node:hover{transform:translateY(-2px);box-shadow:0 12px 30px rgba(0,0,0,.28)}
+.node:hover{transform:translate3d(0,-3px,0);box-shadow:0 14px 34px rgba(0,0,0,.32)}
 .node.hub{
  width:min(300px,100%);
  border-color:rgba(124,196,255,.5);
@@ -453,9 +471,9 @@ main{position:relative;z-index:2;padding-top:84px}
  border:1px solid var(--line);border-radius:14px;padding:16px;
  background:linear-gradient(180deg, rgba(124,196,255,.06), transparent 55%), rgba(17,25,37,.94);
  min-height:100px;display:flex;flex-direction:column;justify-content:space-between;gap:12px;
- transition:border-color .3s,transform .3s var(--ease);
+ transition:border-color .4s var(--ease),transform .4s var(--ease),box-shadow .4s var(--ease);
 }
-.chain:hover{border-color:rgba(124,196,255,.35);transform:translateY(-2px)}
+.chain:hover{border-color:rgba(124,196,255,.45);transform:translate3d(0,-3px,0)}
 .chain-top{display:flex;justify-content:space-between;gap:8px;align-items:flex-start}
 .chain .nm{font-family:var(--display);font-size:20px;display:flex;align-items:center;gap:8px}
 .chain .nm img{width:18px;height:18px;border-radius:50%;object-fit:cover;background:rgba(255,255,255,.06)}
@@ -475,21 +493,24 @@ main{position:relative;z-index:2;padding-top:84px}
  display:flex;justify-content:space-between;gap:10px;flex-wrap:wrap;
 }
 .venues-head b{color:var(--blue);font-weight:500}
-.marquee{overflow:hidden;white-space:nowrap;mask-image:linear-gradient(90deg,transparent,#000 6%,#000 94%,transparent)}
+.marquee{overflow:hidden;white-space:nowrap;mask-image:linear-gradient(90deg,transparent,#000 6%,#000 94%,transparent);-webkit-mask-image:linear-gradient(90deg,transparent,#000 6%,#000 94%,transparent)}
+.marquee:hover .track{animation-play-state:paused}
 .marquee + .marquee{border-top:1px solid rgba(124,196,255,.08)}
-.track{display:inline-flex;gap:26px;padding:12px 0;animation:scroll 48s linear infinite;will-change:transform}
-.marquee.rev .track{animation-direction:reverse;animation-duration:56s}
+.track{display:inline-flex;gap:26px;padding:12px 0;animation:scroll 75s linear infinite;will-change:transform;transform:translate3d(0,0,0);backface-visibility:hidden;perspective:1000px}
+.marquee.rev .track{animation-direction:reverse;animation-duration:88s}
 a.chip{text-decoration:none;color:inherit}
 .chip{
  display:inline-flex;align-items:center;gap:10px;
  font-size:15px;letter-spacing:-.015em;text-transform:none;color:var(--proto-color,var(--cool));
  padding:8px 13px;border:1px solid rgba(124,196,255,.1);border-radius:999px;background:rgba(11,16,24,.38);
  box-shadow:inset 0 0 0 1px rgba(255,255,255,.025);
+ transition:border-color .35s var(--ease),background .35s var(--ease),transform .35s var(--ease);
 }
+a.chip:hover{border-color:rgba(124,196,255,.3);background:rgba(21,32,49,.6);transform:translate3d(0,-2px,0)}
 .chip img{width:18px;height:18px;border-radius:50%;object-fit:cover;background:rgba(255,255,255,.06)}
-.chip.wm-chip{padding:10px 16px}
-.chip img.wm{width:auto;height:20px;max-width:150px;border-radius:0;object-fit:contain;background:none;opacity:1}
-.chip img.wm.tall{height:22px;max-width:26px}
+.chip.wm-chip{padding:11px 18px}
+.chip img.wm{width:auto;height:27px;max-width:190px;border-radius:0;object-fit:contain;background:none;opacity:1}
+.chip img.wm.tall{height:28px;max-width:32px}
 
 .chip .wordmark{font-family:var(--proto-font,var(--sans));font-weight:var(--proto-weight,750);font-style:var(--proto-style,normal);text-transform:var(--proto-transform,none);letter-spacing:var(--proto-track,-.025em);line-height:1.2}
 .proto-uniswap{--proto-font:"Inter",var(--sans);--proto-color:#ff4dcb;--proto-weight:850}
@@ -515,7 +536,7 @@ a.chip{text-decoration:none;color:inherit}
 .proto-across{--proto-font:"Manrope",var(--sans);--proto-color:#ff6b9b;--proto-weight:800}
 .proto-stargate{--proto-font:"Sora",var(--sans);--proto-color:#9ddcff;--proto-weight:700}
 .proto-magic-eden{--proto-font:"Archivo Black",var(--sans);--proto-color:#dfc7ff;--proto-weight:800;--proto-track:.01em}
-@keyframes scroll{from{transform:translateX(0)}to{transform:translateX(-50%)}}
+@keyframes scroll{from{transform:translate3d(0,0,0)}to{transform:translate3d(-50%,0,0)}}
 
 .wallet-grid{
  display:grid;grid-template-columns:repeat(3,minmax(0,1fr));
@@ -561,8 +582,8 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
  font-family:var(--mono);font-size:10px;letter-spacing:.16em;text-transform:uppercase;color:var(--mute);
 }
 
-.js .rv{opacity:0;transform:translateY(18px)}
-.js .rv.in{opacity:1;transform:none;transition:opacity .9s var(--ease),transform .9s var(--ease)}
+.js .rv{opacity:0;transform:translate3d(0,22px,0);will-change:opacity,transform}
+.js .rv.in{opacity:1;transform:translate3d(0,0,0);transition:opacity 1.05s var(--ease),transform 1.05s var(--ease)}
 .js .rv.done{transform:none;will-change:auto}
 
 @media (max-width:960px){
@@ -1061,7 +1082,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   { n: "Hyperliquid", wm: "hyperliquid.svg", u: "https://hyperliquid.xyz" },
   { n: "Outcome",     wm: "outcome.svg", u: "https://outcome.xyz" },
   { n: "XYZ",         wm: "xyz.svg", u: "https://trade.xyz" },
-  { n: "Markets By Kinetiq", wm: "kinetiq.svg", tall: 1, u: "https://kinetiq.xyz" },
+  { n: "Markets",     wm: "markets.svg", tall: 1, u: "https://markets.xyz" },
   { n: "HyENA",       wm: "hyena.svg", u: "https://hyena.trade" },
   { n: "Paragon",     wm: "paragon.svg", tall: 1, u: "https://paragon.trade" },
   { n: "HyperSwap",   wm: "hyperswap.svg", u: "https://hyperswap.exchange" },
@@ -1084,11 +1105,11 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   { n: "Velora",     wm: "paraswap.svg", u: "https://velora.xyz" },
   { n: "Odos",       wm: "odos.svg", u: "https://odos.xyz" },
   { n: "CoW Swap",   wm: "cowswap.svg", u: "https://cow.fi" },
-  { n: "1inch",      wm: "oneinch.svg", u: "https://1inch.io" },
+  { n: "1inch",      wm: "oneinch-icon.webp", tall: 1, u: "https://1inch.io" },
   { n: "Jupiter",    wm: "jupiter.svg", u: "https://jup.ag" },
-  { n: "OpenSea",    wm: "opensea.svg", u: "https://opensea.io" },
-  { n: "Across",     wm: "across.svg", u: "https://across.to" },
-  { n: "Stargate",   wm: "stargate.svg", u: "https://stargate.finance" },
+  { n: "OpenSea",    wm: "opensea-icon.svg", tall: 1, u: "https://opensea.io" },
+  { n: "Across",     wm: "across-icon.webp", tall: 1, u: "https://across.to" },
+  { n: "Stargate",   wm: "stargate-icon.webp", tall: 1, u: "https://stargate.finance" },
   { n: "Magic Eden", wm: "magic-eden.svg", u: "https://magiceden.io" }
  ];
 
@@ -1110,7 +1131,7 @@ footer{margin-top:clamp(72px,12vh,120px);border-top:1px solid var(--line);paddin
   { n: "Hermes Agent", wm: "hermes.png", tall: 1, u: "https://hermes.nousresearch.com" },
   { n: "Claude",       wm: "claude.svg", u: "https://claude.ai" },
   { n: "Grok",         wm: "grok.svg", u: "https://grok.com" },
-  { n: "Codex",        wm: "codex.svg", u: "https://openai.com/codex" },
+  { n: "Codex",        wm: "codex-icon.svg", tall: 1, u: "https://openai.com/codex" },
   { n: "Gemini",       wm: "gemini.svg", u: "https://gemini.google.com" },
   { n: "OpenClaw",     wm: "openclaw.svg", tall: 1, u: "https://openclaw.ai" },
   { n: "Perplexity",   wm: "perplexity.svg", u: "https://perplexity.ai" },

package/scripts/check-doc-drift.mjs

@@ -39,6 +39,7 @@ const STALE_CLAIMS = [
   { re: /ORACLE_SIGNER_SURFACES=hl,poly\s*$/i, why: "quickstart freezes ORACLE_SIGNER_SURFACES at hl,poly" },
   { re: /ORACLE_AUTONOMOUS_TRADING=1.*(?:or\s+run\s+the\s+signer\s+daemon|same(?:-tier)?).*oracle-signer/i, why: "frames direct exec and oracle-signer as equivalent agent paths" },
   { re: /(?:or\s+run\s+the\s+signer\s+daemon|same(?:-tier)?).*oracle-signer.*ORACLE_AUTONOMOUS_TRADING=1/i, why: "frames direct exec and oracle-signer as equivalent agent paths" },
+  { re: /ORACLE_AUTONOMOUS=1/i, why: "names the dead autonomous env var instead of ORACLE_AUTONOMOUS_TRADING" },
 ];
 
 // Version pins that go stale the moment a release ships. The audit found the

package/src/data/catalog.mjs

@@ -3,19 +3,26 @@
 /** @typedef {{ id: string, venue: string, chainIds: number[], auth: 'none'|'apiKey'|'agentKey', ops: string[], baseEnv?: string[], description?: string }} ProviderMeta */
 
 const REGISTRY = new Map();
+const BUILTIN_PROVIDER_IDS = new Set();
+let BUILTINS_LOCKED = false;
 
 export function registerProvider(meta) {
   if (!meta?.id) throw new Error("registerProvider requires id");
   if (!meta.venue) throw new Error("registerProvider requires venue");
   if (!Array.isArray(meta.ops)) throw new Error("registerProvider requires ops[]");
-  REGISTRY.set(meta.id, {
+  const id = String(meta.id);
+  if (BUILTINS_LOCKED && BUILTIN_PROVIDER_IDS.has(id)) {
+    throw new Error(`registerProvider refuses to overwrite built-in provider: ${id}`);
+  }
+  REGISTRY.set(id, {
     chainIds: meta.chainIds || [],
     auth: meta.auth || "none",
     description: meta.description || "",
     baseEnv: meta.baseEnv || [],
     ...meta,
+    id,
   });
-  return REGISTRY.get(meta.id);
+  return REGISTRY.get(id);
 }
 
 export function getProvider(id) {
@@ -33,6 +40,12 @@ export function clearProvidersForTest() {
   REGISTRY.clear();
 }
 
+function lockBuiltinProviders() {
+  BUILTIN_PROVIDER_IDS.clear();
+  for (const id of REGISTRY.keys()) BUILTIN_PROVIDER_IDS.add(id);
+  BUILTINS_LOCKED = true;
+}
+
 // ── Built-in providers ──────────────────────────────────────────────────────
 
 registerProvider({
@@ -537,3 +550,5 @@ registerProvider({
   baseEnv: ["ZEROX_API_KEY", "ONEINCH_API_KEY"],
   description: "Cross-chain RFQ intent normalizer and firm-quote fanout over reviewed venues. Prepares artifacts only, never signs or broadcasts.",
 });
+
+lockBuiltinProviders();

package/src/public-api/http.mjs

@@ -41,6 +41,8 @@ export const DEFAULT_HOST = "127.0.0.1";
 export const DEFAULT_PORT = 8799;
 export const VERSION = pkg.version;
 
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1"]);
+
 const ROOT_DIR = join(dirname(fileURLToPath(import.meta.url)), "../..");
 const CONSOLE_DIR = join(ROOT_DIR, "public", "oracle-console");
 
@@ -136,6 +138,18 @@ function asPlainObject(v, code) {
   return v;
 }
 
+function normalizeHost(host) {
+  return String(host || "").trim().toLowerCase().replace(/^\[|\]$/g, "");
+}
+
+function assertLoopbackBindHost(host) {
+  const normalized = normalizeHost(host);
+  if (!LOOPBACK_HOSTS.has(normalized)) {
+    throw new TypeError(`oracle-public only binds loopback hosts; got ${String(host)}`);
+  }
+  return normalized === "::1" ? "::1" : String(host).trim();
+}
+
 // ---------------------------------------------------------------------------
 // Route handlers — each returns { status, body }; errors are thrown.
 // ---------------------------------------------------------------------------
@@ -354,9 +368,10 @@ export function createPublicServer() {
 /**
  * Resolve host/port: explicit args > ORACLE_PUBLIC_HOST/PORT env (via
  * oracle-env's env() helper) > loopback 127.0.0.1:8799 default.
+ * Non-loopback binds fail closed; this plane has no remote peer/origin guard.
  */
 export function resolvePublicBind({ host, port } = {}) {
-  const h = host ?? env("ORACLE_PUBLIC_HOST", "MAD_PUBLIC_HOST", DEFAULT_HOST);
+  const h = assertLoopbackBindHost(host ?? env("ORACLE_PUBLIC_HOST", "MAD_PUBLIC_HOST", DEFAULT_HOST));
   const rawPort = port ?? env("ORACLE_PUBLIC_PORT", "MAD_PUBLIC_PORT", String(DEFAULT_PORT));
   const p = Number(rawPort);
   if (!Number.isInteger(p) || p < 0 || p > 65535) {

package/src/public-control/runtime-config.mjs

@@ -107,6 +107,7 @@ const CHAIN_SEEDS = Object.freeze([
 export const DEFAULT_CHAIN_ID = 8453;
 export const DEFAULT_PUBLIC_HOST = "127.0.0.1";
 export const DEFAULT_PUBLIC_PORT = 8799;
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1"]);
 
 function buildChainEntry(seed, env) {
   const entry = {
@@ -143,6 +144,15 @@ function parsePort(raw, label) {
   return n;
 }
 
+function parsePublicHost(raw, label) {
+  const host = String(raw).trim();
+  const normalized = host.toLowerCase().replace(/^\[|\]$/g, "");
+  if (!LOOPBACK_HOSTS.has(normalized)) {
+    fail(`${label} must be a loopback host, got ${JSON.stringify(raw)}`);
+  }
+  return normalized === "::1" ? "::1" : host;
+}
+
 /**
  * Parse the public runtime config (chain/bundler/paymaster registry + public
  * HTTP bind) from an env-like object. Pure function, no I/O, no network.
@@ -182,7 +192,7 @@ export function loadPublicConfig(env = process.env) {
 
   const publicHost = (() => {
     const v = env.ORACLE_PUBLIC_HOST ?? env.MAD_PUBLIC_HOST;
-    return v != null && String(v).trim() !== "" ? String(v) : DEFAULT_PUBLIC_HOST;
+    return v != null && String(v).trim() !== "" ? parsePublicHost(v, "ORACLE_PUBLIC_HOST") : DEFAULT_PUBLIC_HOST;
   })();
 
   const publicPort = (() => {