@oracle-agent/oracle 0.7.0 → 0.9.0

package/src/data/catalog.mjs

@@ -3,19 +3,26 @@
 /** @typedef {{ id: string, venue: string, chainIds: number[], auth: 'none'|'apiKey'|'agentKey', ops: string[], baseEnv?: string[], description?: string }} ProviderMeta */
 
 const REGISTRY = new Map();
+const BUILTIN_PROVIDER_IDS = new Set();
+let BUILTINS_LOCKED = false;
 
 export function registerProvider(meta) {
   if (!meta?.id) throw new Error("registerProvider requires id");
   if (!meta.venue) throw new Error("registerProvider requires venue");
   if (!Array.isArray(meta.ops)) throw new Error("registerProvider requires ops[]");
-  REGISTRY.set(meta.id, {
+  const id = String(meta.id);
+  if (BUILTINS_LOCKED && BUILTIN_PROVIDER_IDS.has(id)) {
+    throw new Error(`registerProvider refuses to overwrite built-in provider: ${id}`);
+  }
+  REGISTRY.set(id, {
     chainIds: meta.chainIds || [],
     auth: meta.auth || "none",
     description: meta.description || "",
     baseEnv: meta.baseEnv || [],
     ...meta,
+    id,
   });
-  return REGISTRY.get(meta.id);
+  return REGISTRY.get(id);
 }
 
 export function getProvider(id) {
@@ -33,6 +40,12 @@ export function clearProvidersForTest() {
   REGISTRY.clear();
 }
 
+function lockBuiltinProviders() {
+  BUILTIN_PROVIDER_IDS.clear();
+  for (const id of REGISTRY.keys()) BUILTIN_PROVIDER_IDS.add(id);
+  BUILTINS_LOCKED = true;
+}
+
 // ── Built-in providers ──────────────────────────────────────────────────────
 
 registerProvider({
@@ -537,3 +550,5 @@ registerProvider({
   baseEnv: ["ZEROX_API_KEY", "ONEINCH_API_KEY"],
   description: "Cross-chain RFQ intent normalizer and firm-quote fanout over reviewed venues. Prepares artifacts only, never signs or broadcasts.",
 });
+
+lockBuiltinProviders();

package/src/public-api/http.mjs

@@ -41,6 +41,8 @@ export const DEFAULT_HOST = "127.0.0.1";
 export const DEFAULT_PORT = 8799;
 export const VERSION = pkg.version;
 
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1"]);
+
 const ROOT_DIR = join(dirname(fileURLToPath(import.meta.url)), "../..");
 const CONSOLE_DIR = join(ROOT_DIR, "public", "oracle-console");
 
@@ -136,6 +138,18 @@ function asPlainObject(v, code) {
   return v;
 }
 
+function normalizeHost(host) {
+  return String(host || "").trim().toLowerCase().replace(/^\[|\]$/g, "");
+}
+
+function assertLoopbackBindHost(host) {
+  const normalized = normalizeHost(host);
+  if (!LOOPBACK_HOSTS.has(normalized)) {
+    throw new TypeError(`oracle-public only binds loopback hosts; got ${String(host)}`);
+  }
+  return normalized === "::1" ? "::1" : String(host).trim();
+}
+
 // ---------------------------------------------------------------------------
 // Route handlers — each returns { status, body }; errors are thrown.
 // ---------------------------------------------------------------------------
@@ -354,9 +368,10 @@ export function createPublicServer() {
 /**
  * Resolve host/port: explicit args > ORACLE_PUBLIC_HOST/PORT env (via
  * oracle-env's env() helper) > loopback 127.0.0.1:8799 default.
+ * Non-loopback binds fail closed; this plane has no remote peer/origin guard.
  */
 export function resolvePublicBind({ host, port } = {}) {
-  const h = host ?? env("ORACLE_PUBLIC_HOST", "MAD_PUBLIC_HOST", DEFAULT_HOST);
+  const h = assertLoopbackBindHost(host ?? env("ORACLE_PUBLIC_HOST", "MAD_PUBLIC_HOST", DEFAULT_HOST));
   const rawPort = port ?? env("ORACLE_PUBLIC_PORT", "MAD_PUBLIC_PORT", String(DEFAULT_PORT));
   const p = Number(rawPort);
   if (!Number.isInteger(p) || p < 0 || p > 65535) {

package/src/public-control/runtime-config.mjs

@@ -107,6 +107,7 @@ const CHAIN_SEEDS = Object.freeze([
 export const DEFAULT_CHAIN_ID = 8453;
 export const DEFAULT_PUBLIC_HOST = "127.0.0.1";
 export const DEFAULT_PUBLIC_PORT = 8799;
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1"]);
 
 function buildChainEntry(seed, env) {
   const entry = {
@@ -143,6 +144,15 @@ function parsePort(raw, label) {
   return n;
 }
 
+function parsePublicHost(raw, label) {
+  const host = String(raw).trim();
+  const normalized = host.toLowerCase().replace(/^\[|\]$/g, "");
+  if (!LOOPBACK_HOSTS.has(normalized)) {
+    fail(`${label} must be a loopback host, got ${JSON.stringify(raw)}`);
+  }
+  return normalized === "::1" ? "::1" : host;
+}
+
 /**
  * Parse the public runtime config (chain/bundler/paymaster registry + public
  * HTTP bind) from an env-like object. Pure function, no I/O, no network.
@@ -182,7 +192,7 @@ export function loadPublicConfig(env = process.env) {
 
   const publicHost = (() => {
     const v = env.ORACLE_PUBLIC_HOST ?? env.MAD_PUBLIC_HOST;
-    return v != null && String(v).trim() !== "" ? String(v) : DEFAULT_PUBLIC_HOST;
+    return v != null && String(v).trim() !== "" ? parsePublicHost(v, "ORACLE_PUBLIC_HOST") : DEFAULT_PUBLIC_HOST;
   })();
 
   const publicPort = (() => {