@vallum/policy-gateway 0.0.0-prerelease → 0.0.1-prerelease.0

package/README.md

@@ -11,7 +11,7 @@ npm install @vallum/policy-gateway@next
 ```
 
 See
-https://github.com/0xCozart/agentic-gaskit/blob/main/docs/vallum/package-integration-guide.md
+https://github.com/0xCozart/vallum/blob/main/docs/vallum/package-integration-guide.md
 for package selection, configuration, and when to use the gateway package
 instead of the SDK.
 
@@ -41,3 +41,13 @@ if (!decision.allowed) {
 ```
 
 The evaluator is deterministic and local. It does not reserve gas, execute transactions, call IOTA RPC, or enforce quotas beyond the request context values supplied by the caller.
+
+## Mock Agent Gateway
+
+`createAgentMockGatewayServer()` is a local/test helper for deterministic
+manifest and SDK flows. It is not the production policy gateway and does not
+enforce production app API authentication or Gas Station sponsorship.
+
+The server refuses non-loopback listen hosts by default. Bind it to
+`127.0.0.1`, `::1`, or `localhost`; setting `allowUnsafeNonLoopback: true` is
+an explicit unsafe opt-in for controlled test harnesses only.

package/dist/server.d.ts

@@ -8,5 +8,6 @@ export interface AgentMockGatewayServerConfig {
     readonly now?: () => Date;
     readonly eventSink?: (event: AgentGatewayEvent) => void | Promise<void>;
     readonly maxBodyBytes?: number;
+    readonly allowUnsafeNonLoopback?: boolean;
 }
 export declare function createAgentMockGatewayServer(config: AgentMockGatewayServerConfig): Server;

package/dist/server.js

@@ -3,7 +3,7 @@ import { createMockGasStationAdapter } from "./mockGasStationAdapter.js";
 import { handleAgentGatewayRequest } from "./routes.js";
 export function createAgentMockGatewayServer(config) {
     const mockGasStation = config.mockGasStation ?? createMockGasStationAdapter();
-    return createServer((request, response) => {
+    const server = createServer((request, response) => {
         void handleAgentGatewayRequest(request, response, {
             policy: config.policy,
             mockGasStation,
@@ -12,4 +12,35 @@ export function createAgentMockGatewayServer(config) {
             maxBodyBytes: config.maxBodyBytes,
         });
     });
+    guardMockGatewayListen(server, Boolean(config.allowUnsafeNonLoopback));
+    return server;
+}
+function guardMockGatewayListen(server, allowUnsafeNonLoopback) {
+    const listen = server.listen.bind(server);
+    server.listen = ((...args) => {
+        if (!allowUnsafeNonLoopback) {
+            const host = listenHost(args);
+            if (!isLoopbackListenHost(host)) {
+                throw new Error("Agent mock gateway must bind to 127.0.0.1, ::1, or localhost unless allowUnsafeNonLoopback is true.");
+            }
+        }
+        return listen(...args);
+    });
+}
+function listenHost(args) {
+    const first = args[0];
+    const second = args[1];
+    if (typeof first === "object" && first !== null && "host" in first) {
+        const host = first.host;
+        return typeof host === "string" ? host : undefined;
+    }
+    if (typeof first === "string")
+        return "local-socket";
+    return typeof second === "string" ? second : undefined;
+}
+function isLoopbackListenHost(host) {
+    if (host === "local-socket")
+        return true;
+    const normalized = host?.trim().toLowerCase();
+    return normalized === "127.0.0.1" || normalized === "::1" || normalized === "localhost";
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vallum/policy-gateway",
-  "version": "0.0.0-prerelease",
+  "version": "0.0.1-prerelease.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -12,10 +12,10 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@vallum/contracts-metadata": "0.0.0-prerelease",
-    "@vallum/manifest": "0.0.0-prerelease",
-    "@vallum/registry": "0.0.0-prerelease",
-    "@vallum/shared-types": "0.0.0-prerelease"
+    "@vallum/contracts-metadata": "0.0.1-prerelease.0",
+    "@vallum/manifest": "0.0.1-prerelease.0",
+    "@vallum/registry": "0.0.1-prerelease.0",
+    "@vallum/shared-types": "0.0.1-prerelease.0"
   },
   "description": "Fail-closed policy decision engine scaffold for Vallum sponsorship gateways.",
   "files": [