@fidacy/mcp 0.1.7 → 0.1.9

package/dist/core.js

@@ -95,6 +95,50 @@ var FileAuditStore = class {
 };
 
 // ../firewall/dist/evaluate.js
+function fold(s) {
+  return s.toLowerCase().replace(/[4@]/g, "a").replace(/[0]/g, "o").replace(/[1|!]/g, "l").replace(/[3]/g, "e").replace(/[5$]/g, "s").replace(/[7]/g, "t").replace(/[^a-z0-9]/g, "");
+}
+function lev(a, b, max) {
+  if (Math.abs(a.length - b.length) > max)
+    return max + 1;
+  let prev = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1; i <= a.length; i++) {
+    const cur = [i];
+    let rowMin = i;
+    for (let j = 1; j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      const v = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
+      cur[j] = v;
+      if (v < rowMin)
+        rowMin = v;
+    }
+    if (rowMin > max)
+      return max + 1;
+    prev = cur;
+  }
+  return prev[b.length];
+}
+function lookalikePayee(payee, allowed) {
+  const exact = new Set(allowed);
+  if (exact.has(payee) || allowed.includes("*"))
+    return null;
+  const pf = fold(payee);
+  if (pf.length < 4)
+    return null;
+  for (const a of allowed) {
+    if (a === "*")
+      continue;
+    const af = fold(a);
+    if (af.length < 4)
+      continue;
+    if (pf === af)
+      return a;
+    const d = lev(pf, af, 2);
+    if (d > 0 && d <= 2)
+      return a;
+  }
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
@@ -112,8 +156,12 @@ function evaluate(mandate, req, spentSoFar) {
   if (spentSoFar + req.amount > mandate.allow.maxTotal)
     return `total_cap_exceeded:${spentSoFar + req.amount}>${mandate.allow.maxTotal}`;
   const payeeOk = mandate.allow.payees.includes("*") || mandate.allow.payees.includes(req.payee);
-  if (!payeeOk)
+  if (!payeeOk) {
+    const impersonated = lookalikePayee(req.payee, mandate.allow.payees);
+    if (impersonated)
+      return `payee_lookalike:${req.payee}~${impersonated}`;
     return `payee_not_in_allowlist:${req.payee}`;
+  }
   const catOk = mandate.allow.categories.includes("*") || mandate.allow.categories.includes(req.category);
   if (!catOk)
     return `category_not_allowed:${req.category}`;

package/dist/index.js

@@ -102,6 +102,50 @@ var FileAuditStore = class {
 };
 
 // ../firewall/dist/evaluate.js
+function fold(s) {
+  return s.toLowerCase().replace(/[4@]/g, "a").replace(/[0]/g, "o").replace(/[1|!]/g, "l").replace(/[3]/g, "e").replace(/[5$]/g, "s").replace(/[7]/g, "t").replace(/[^a-z0-9]/g, "");
+}
+function lev(a, b, max) {
+  if (Math.abs(a.length - b.length) > max)
+    return max + 1;
+  let prev = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1; i <= a.length; i++) {
+    const cur = [i];
+    let rowMin = i;
+    for (let j = 1; j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      const v = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
+      cur[j] = v;
+      if (v < rowMin)
+        rowMin = v;
+    }
+    if (rowMin > max)
+      return max + 1;
+    prev = cur;
+  }
+  return prev[b.length];
+}
+function lookalikePayee(payee, allowed) {
+  const exact = new Set(allowed);
+  if (exact.has(payee) || allowed.includes("*"))
+    return null;
+  const pf = fold(payee);
+  if (pf.length < 4)
+    return null;
+  for (const a of allowed) {
+    if (a === "*")
+      continue;
+    const af = fold(a);
+    if (af.length < 4)
+      continue;
+    if (pf === af)
+      return a;
+    const d = lev(pf, af, 2);
+    if (d > 0 && d <= 2)
+      return a;
+  }
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
@@ -119,8 +163,12 @@ function evaluate(mandate, req, spentSoFar) {
   if (spentSoFar + req.amount > mandate.allow.maxTotal)
     return `total_cap_exceeded:${spentSoFar + req.amount}>${mandate.allow.maxTotal}`;
   const payeeOk = mandate.allow.payees.includes("*") || mandate.allow.payees.includes(req.payee);
-  if (!payeeOk)
+  if (!payeeOk) {
+    const impersonated = lookalikePayee(req.payee, mandate.allow.payees);
+    if (impersonated)
+      return `payee_lookalike:${req.payee}~${impersonated}`;
     return `payee_not_in_allowlist:${req.payee}`;
+  }
   const catOk = mandate.allow.categories.includes("*") || mandate.allow.categories.includes(req.category);
   if (!catOk)
     return `category_not_allowed:${req.category}`;

package/dist/lib.js

@@ -146,13 +146,34 @@ var ReferenceRail = class {
     return { railRef };
   }
 };
+function httpRedeem(coreUrl, apiKey) {
+  const base = String(coreUrl ?? "").replace(/\/+$/, "");
+  const u = new URL(base);
+  if (u.protocol !== "https:" && !(u.protocol === "http:" && (u.hostname === "localhost" || u.hostname === "127.0.0.1"))) {
+    throw new Error("core URL must be https:// (the API key is sent to it)");
+  }
+  return async (grant) => {
+    const res = await fetch(`${base}/v1/grant/redeem`, {
+      method: "POST",
+      headers: { "content-type": "application/json", authorization: `Bearer ${apiKey}` },
+      body: JSON.stringify({ grant })
+    });
+    if (res.status === 200)
+      return true;
+    if (res.status === 409)
+      return false;
+    throw new Error(`redeem -> ${res.status}`);
+  };
+}
 var GrantEnforcingExecutor = class {
   rail;
   used = /* @__PURE__ */ new Set();
   pub;
-  constructor(publicKeyPem2, rail) {
+  redeem;
+  constructor(publicKeyPem2, rail, opts) {
     this.rail = rail;
     this.pub = createPublicKey(publicKeyPem2);
+    this.redeem = opts?.redeem;
   }
   async execute(req, grant) {
     if (!grant)
@@ -183,6 +204,16 @@ var GrantEnforcingExecutor = class {
     if (req.invoiceRef != null && req.invoiceRef !== (p.invoiceRef ?? null)) {
       return { status: "REFUSED", reason: "invoice_mismatch" };
     }
+    if (this.redeem) {
+      let first;
+      try {
+        first = await this.redeem(grant);
+      } catch {
+        return { status: "REFUSED", reason: "redeem_unavailable" };
+      }
+      if (!first)
+        return { status: "REFUSED", reason: "grant_replayed" };
+    }
     this.used.add(p.decisionId);
     const { railRef } = await this.rail.execute(req);
     return { status: "EXECUTED", railRef, decisionId: p.decisionId };
@@ -190,6 +221,50 @@ var GrantEnforcingExecutor = class {
 };
 
 // ../firewall/dist/evaluate.js
+function fold(s) {
+  return s.toLowerCase().replace(/[4@]/g, "a").replace(/[0]/g, "o").replace(/[1|!]/g, "l").replace(/[3]/g, "e").replace(/[5$]/g, "s").replace(/[7]/g, "t").replace(/[^a-z0-9]/g, "");
+}
+function lev(a, b, max) {
+  if (Math.abs(a.length - b.length) > max)
+    return max + 1;
+  let prev = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1; i <= a.length; i++) {
+    const cur = [i];
+    let rowMin = i;
+    for (let j = 1; j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      const v = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
+      cur[j] = v;
+      if (v < rowMin)
+        rowMin = v;
+    }
+    if (rowMin > max)
+      return max + 1;
+    prev = cur;
+  }
+  return prev[b.length];
+}
+function lookalikePayee(payee, allowed) {
+  const exact = new Set(allowed);
+  if (exact.has(payee) || allowed.includes("*"))
+    return null;
+  const pf = fold(payee);
+  if (pf.length < 4)
+    return null;
+  for (const a of allowed) {
+    if (a === "*")
+      continue;
+    const af = fold(a);
+    if (af.length < 4)
+      continue;
+    if (pf === af)
+      return a;
+    const d = lev(pf, af, 2);
+    if (d > 0 && d <= 2)
+      return a;
+  }
+  return null;
+}
 function evaluate(mandate, req, spentSoFar) {
   const now = Date.now();
   if (mandate.revoked)
@@ -207,8 +282,12 @@ function evaluate(mandate, req, spentSoFar) {
   if (spentSoFar + req.amount > mandate.allow.maxTotal)
     return `total_cap_exceeded:${spentSoFar + req.amount}>${mandate.allow.maxTotal}`;
   const payeeOk = mandate.allow.payees.includes("*") || mandate.allow.payees.includes(req.payee);
-  if (!payeeOk)
+  if (!payeeOk) {
+    const impersonated = lookalikePayee(req.payee, mandate.allow.payees);
+    if (impersonated)
+      return `payee_lookalike:${req.payee}~${impersonated}`;
     return `payee_not_in_allowlist:${req.payee}`;
+  }
   const catOk = mandate.allow.categories.includes("*") || mandate.allow.categories.includes(req.category);
   if (!catOk)
     return `category_not_allowed:${req.category}`;
@@ -514,7 +593,9 @@ export {
   ReferenceRail,
   canonInvoice,
   evaluate,
+  httpRedeem,
   loadOrGenerateKeyPair,
+  lookalikePayee,
   makeCore,
   publicKeyPem,
   requireHttpsBase,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidacy/mcp",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Fidacy action firewall for AI agents. Mandate-gated payment authorization as an MCP server.",
   "license": "Apache-2.0",
   "homepage": "https://fidacy.com",
@@ -54,5 +54,10 @@
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2"
+  },
+  "mcpName": "com.fidacy/mcp",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lucaslubi/fidacy-mcp.git"
   }
 }