@kushbitx/sdk 0.1.3 → 0.1.5

package/README.md

@@ -12,7 +12,7 @@ Zero-dependency ESM client and runnable Node.js example for the complete KushBit
 | Token-risk report | 0.001 USDC | Receive structured token-risk evidence with missing checks identified. |
 | Transaction preflight | 0.001 USDC | Inspect an unsigned Base transaction before signing. |
 | Payment verification | 0.00288 USDC | Verify an existing Base USDC payment against the expected recipient and amount. |
-| KushBitx Preflight | 0.005 USDC | One verdict (ALLOW, REVIEW, BLOCK) before money moves, fail-closed: transaction simulation, approval and transfer decoding, token and recipient screening, optional protected SpendGuard policy. Does not detect prompt injection (use Protected SpendGuard). Service name `kushbitx-preflight`. |
+| KushBitx Preflight | 0.005 USDC | One verdict (ALLOW, REVIEW, BLOCK) before money moves, fail-closed: transaction simulation, approval and transfer decoding, token and recipient screening, optional protected SpendGuard policy. Does not detect prompt injection; Protected SpendGuard can cap what an agent pays if your signer enforces it, but does not detect prompt injection either. Service name `kushbitx-preflight`. |
 
 Paid endpoints use x402 and require explicit payment. There is no subscription. A delivered report can be `INCOMPLETE` when evidence is unavailable and may still incur the displayed fee.
 
@@ -48,17 +48,17 @@ const { challenge } = await kushbitx.getPaymentChallenge('kushbitx-preflight', i
 
 ### Preflight 1.1: sign only the transaction that was checked
 
-Send `from`; without it the verdict is REVIEW. Each response has `transactionDigest` and `expiresAt` (60 seconds). For swaps, add `expectedTokenOut`, and optionally `minAmountOut` and `expectedRecipient`.
+Send `from`; without it the verdict is REVIEW. `canSign` needs the transaction to state `chainId: 8453`; a missing or other chainId is never accepted. Each response has `transactionDigest` and `expiresAt` (60 seconds). For swaps, add `expectedTokenOut`, and optionally `minAmountOut` and `expectedRecipient`.
 
 ```js
 import { canSign } from '@kushbitx/sdk';
 
-const tx = { from: wallet, to, value: '0', data };   // the exact unsigned transaction
+const tx = { chainId: 8453, from: wallet, to, value: '0', data };   // the exact unsigned transaction
 // ... pay for POST /api/preflight with your x402 client, get `report` ...
 if (await canSign(report, tx)) {
   // ALLOW, same digest, not expired: sign now
 } else {
-  // REVIEW, BLOCK, changed transaction or expired: do not sign
+  // REVIEW, BLOCK, another network, changed transaction or expired: do not sign
 }
 ```
 

package/kushbitx.d.ts

@@ -123,9 +123,9 @@ export interface PaymentChallenge {
 export interface RecoveryCredentials { id: string; key: string; [k: string]: unknown }
 
 /** The digest KushBitx Preflight returns in transactionDigest, computed locally from the transaction you will sign. */
-export declare function preflightDigest(transaction: { from?: Address | null; to: Address; value?: string; data?: string }): Promise<`0x${string}`>;
-/** True only for ALLOW on this exact transaction before expiresAt. */
-export declare function canSign(report: PreflightReport | Record<string, unknown>, transaction: { from?: Address | null; to: Address; value?: string; data?: string }, now?: number): Promise<boolean>;
+export declare function preflightDigest(transaction: { chainId?: number | string | bigint; from?: Address | null; to: Address; value?: string; data?: string }): Promise<`0x${string}`>;
+/** True only for ALLOW on this exact Base transaction before expiresAt. chainId must be stated and be 8453; a missing or other chainId, or any changed field, is false. */
+export declare function canSign(report: PreflightReport | Record<string, unknown>, transaction: { chainId: number | string | bigint; from?: Address | null; to: Address; value?: string; data?: string }, now?: number): Promise<boolean>;
 
 export declare class KushBitxClient {
   constructor(options?: ClientOptions);

package/kushbitx.mjs

@@ -129,16 +129,38 @@ export const paidServices = PAID_SERVICES;
 // Preflight 1.1: the digest the service returns in transactionDigest. Compute it from the transaction you are about
 // to sign; sign only when it matches an ALLOW verdict that has not expired.
 // sha256 of JSON {chainId,from,to,value,data} in that key order; from, to and data lowercase; value a decimal wei string.
-export async function preflightDigest({ from = null, to, value = '0', data = '0x' }) {
-  const canonical = JSON.stringify({ chainId: 8453, from: from ? String(from).toLowerCase() : null, to: required(to, 'to').toLowerCase(), value: BigInt(value || '0').toString(), data: String(data || '0x').toLowerCase() });
+// The transaction's own chainId goes into the digest (default 8453 when absent), so a report for Base never
+// matches the same fields on another network.
+const BASE_CHAIN_ID = 8453;
+function chainIdOf(transaction) {
+  const raw = transaction?.chainId;
+  if (raw === undefined || raw === null) return BASE_CHAIN_ID;
+  if (typeof raw === 'bigint') return Number(raw);
+  if (typeof raw === 'string' && /^0x[0-9a-f]+$/i.test(raw)) return Number(BigInt(raw));
+  if (typeof raw === 'string' && /^[0-9]+$/.test(raw)) return Number(raw);
+  if (typeof raw === 'number' && Number.isInteger(raw)) return raw;
+  return NaN;
+}
+export async function preflightDigest(transaction) {
+  const { from = null, to, value = '0', data = '0x' } = transaction || {};
+  const chainId = chainIdOf(transaction);
+  if (!Number.isInteger(chainId)) throw new Error('chainId must be an integer');
+  const canonical = JSON.stringify({ chainId, from: from ? String(from).toLowerCase() : null, to: required(to, 'to').toLowerCase(), value: BigInt(value || '0').toString(), data: String(data || '0x').toLowerCase() });
   const subtle = globalThis.crypto?.subtle ?? (await import('node:crypto')).webcrypto.subtle;
   const hash = await subtle.digest('SHA-256', new TextEncoder().encode(canonical));
   return '0x' + Array.from(new Uint8Array(hash), b => b.toString(16).padStart(2, '0')).join('');
 }
 
-/** True only for an ALLOW verdict on this exact transaction, before expiresAt. Anything else: do not sign. */
+/** True only for an ALLOW verdict on this exact Base transaction (chainId 8453, stated), before expiresAt. Anything else: do not sign. */
 export async function canSign(report, transaction, now = Date.now()) {
-  if (!report || report.verdict !== 'ALLOW' || typeof report.transactionDigest !== 'string') return false;
+  if (!report || typeof report !== 'object' || report.verdict !== 'ALLOW' || typeof report.transactionDigest !== 'string') return false;
+  // The transaction must state chainId 8453; a missing chainId is never assumed to be Base.
+  if (!transaction || typeof transaction !== 'object' || transaction.chainId === undefined || transaction.chainId === null || chainIdOf(transaction) !== BASE_CHAIN_ID) return false;
+  if (report.chainId !== undefined && Number(report.chainId) !== BASE_CHAIN_ID) return false;
   if (!report.expiresAt || !(Date.parse(report.expiresAt) > now)) return false;
-  return report.transactionDigest === await preflightDigest(transaction);
+  try {
+    return report.transactionDigest.toLowerCase() === await preflightDigest(transaction);
+  } catch {
+    return false;
+  }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kushbitx/sdk",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Zero-dependency ESM client for KushBitx AgentProof services on Base",
   "type": "module",
   "exports": {