@fidacy/mcp 0.1.7 → 0.1.8

package/dist/core.js

@@ -95,6 +95,50 @@ var FileAuditStore = class {
 };
 
 // ../firewall/dist/evaluate.js
+function fold(s) {
+  return s.toLowerCase().replace(/[4@]/g, "a").replace(/[0]/g, "o").replace(/[1|!]/g, "l").replace(/[3]/g, "e").replace(/[5$]/g, "s").replace(/[7]/g, "t").replace(/[^a-z0-9]/g, "");
+}
+function lev(a, b, max) {
+  if (Math.abs(a.length - b.length) > max)
+    return max + 1;
+  let prev = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1; i <= a.length; i++) {
+    const cur = [i];
+    let rowMin = i;
+    for (let j = 1; j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      const v = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
+      cur[j] = v;
+      if (v < rowMin)
+        rowMin = v;
+    }
+    if (rowMin > max)
+      return max + 1;
+    prev = cur;
+  }
+  return prev[b.length];
+}
+function lookalikePayee(payee, allowed) {
+  const exact = new Set(allowed);
+  if (exact.has(payee) || allowed.includes("*"))
+    return null;
+  const pf = fold(payee);
+  if (pf.length < 4)
+    return null;
+  for (const a of allowed) {
+    if (a === "*")
+      continue;
+    const af = fold(a);
+    if (af.length < 4)
+      continue;
+    if (pf === af)
+      return a;
+    const d = lev(pf, af, 2);
+    if (d > 0 && d <= 2)
+      return a;
+  }
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
@@ -112,8 +156,12 @@ function evaluate(mandate, req, spentSoFar) {
   if (spentSoFar + req.amount > mandate.allow.maxTotal)
     return `total_cap_exceeded:${spentSoFar + req.amount}>${mandate.allow.maxTotal}`;
   const payeeOk = mandate.allow.payees.includes("*") || mandate.allow.payees.includes(req.payee);
-  if (!payeeOk)
+  if (!payeeOk) {
+    const impersonated = lookalikePayee(req.payee, mandate.allow.payees);
+    if (impersonated)
+      return `payee_lookalike:${req.payee}~${impersonated}`;
     return `payee_not_in_allowlist:${req.payee}`;
+  }
   const catOk = mandate.allow.categories.includes("*") || mandate.allow.categories.includes(req.category);
   if (!catOk)
     return `category_not_allowed:${req.category}`;

package/dist/index.js

@@ -102,6 +102,50 @@ var FileAuditStore = class {
 };
 
 // ../firewall/dist/evaluate.js
+function fold(s) {
+  return s.toLowerCase().replace(/[4@]/g, "a").replace(/[0]/g, "o").replace(/[1|!]/g, "l").replace(/[3]/g, "e").replace(/[5$]/g, "s").replace(/[7]/g, "t").replace(/[^a-z0-9]/g, "");
+}
+function lev(a, b, max) {
+  if (Math.abs(a.length - b.length) > max)
+    return max + 1;
+  let prev = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1; i <= a.length; i++) {
+    const cur = [i];
+    let rowMin = i;
+    for (let j = 1; j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      const v = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
+      cur[j] = v;
+      if (v < rowMin)
+        rowMin = v;
+    }
+    if (rowMin > max)
+      return max + 1;
+    prev = cur;
+  }
+  return prev[b.length];
+}
+function lookalikePayee(payee, allowed) {
+  const exact = new Set(allowed);
+  if (exact.has(payee) || allowed.includes("*"))
+    return null;
+  const pf = fold(payee);
+  if (pf.length < 4)
+    return null;
+  for (const a of allowed) {
+    if (a === "*")
+      continue;
+    const af = fold(a);
+    if (af.length < 4)
+      continue;
+    if (pf === af)
+      return a;
+    const d = lev(pf, af, 2);
+    if (d > 0 && d <= 2)
+      return a;
+  }
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
@@ -119,8 +163,12 @@ function evaluate(mandate, req, spentSoFar) {
   if (spentSoFar + req.amount > mandate.allow.maxTotal)
     return `total_cap_exceeded:${spentSoFar + req.amount}>${mandate.allow.maxTotal}`;
   const payeeOk = mandate.allow.payees.includes("*") || mandate.allow.payees.includes(req.payee);
-  if (!payeeOk)
+  if (!payeeOk) {
+    const impersonated = lookalikePayee(req.payee, mandate.allow.payees);
+    if (impersonated)
+      return `payee_lookalike:${req.payee}~${impersonated}`;
     return `payee_not_in_allowlist:${req.payee}`;
+  }
   const catOk = mandate.allow.categories.includes("*") || mandate.allow.categories.includes(req.category);
   if (!catOk)
     return `category_not_allowed:${req.category}`;

package/dist/lib.js

@@ -190,6 +190,50 @@ var GrantEnforcingExecutor = class {
 };
 
 // ../firewall/dist/evaluate.js
+function fold(s) {
+  return s.toLowerCase().replace(/[4@]/g, "a").replace(/[0]/g, "o").replace(/[1|!]/g, "l").replace(/[3]/g, "e").replace(/[5$]/g, "s").replace(/[7]/g, "t").replace(/[^a-z0-9]/g, "");
+}
+function lev(a, b, max) {
+  if (Math.abs(a.length - b.length) > max)
+    return max + 1;
+  let prev = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1; i <= a.length; i++) {
+    const cur = [i];
+    let rowMin = i;
+    for (let j = 1; j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      const v = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
+      cur[j] = v;
+      if (v < rowMin)
+        rowMin = v;
+    }
+    if (rowMin > max)
+      return max + 1;
+    prev = cur;
+  }
+  return prev[b.length];
+}
+function lookalikePayee(payee, allowed) {
+  const exact = new Set(allowed);
+  if (exact.has(payee) || allowed.includes("*"))
+    return null;
+  const pf = fold(payee);
+  if (pf.length < 4)
+    return null;
+  for (const a of allowed) {
+    if (a === "*")
+      continue;
+    const af = fold(a);
+    if (af.length < 4)
+      continue;
+    if (pf === af)
+      return a;
+    const d = lev(pf, af, 2);
+    if (d > 0 && d <= 2)
+      return a;
+  }
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
@@ -207,8 +251,12 @@ function evaluate(mandate, req, spentSoFar) {
   if (spentSoFar + req.amount > mandate.allow.maxTotal)
     return `total_cap_exceeded:${spentSoFar + req.amount}>${mandate.allow.maxTotal}`;
   const payeeOk = mandate.allow.payees.includes("*") || mandate.allow.payees.includes(req.payee);
-  if (!payeeOk)
+  if (!payeeOk) {
+    const impersonated = lookalikePayee(req.payee, mandate.allow.payees);
+    if (impersonated)
+      return `payee_lookalike:${req.payee}~${impersonated}`;
     return `payee_not_in_allowlist:${req.payee}`;
+  }
   const catOk = mandate.allow.categories.includes("*") || mandate.allow.categories.includes(req.category);
   if (!catOk)
     return `category_not_allowed:${req.category}`;
@@ -515,6 +563,7 @@ export {
   canonInvoice,
   evaluate,
   loadOrGenerateKeyPair,
+  lookalikePayee,
   makeCore,
   publicKeyPem,
   requireHttpsBase,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",