@paystage/preflight 0.2.0 → 0.2.2

package/README.md

@@ -87,8 +87,24 @@ CAIP-2 identifiers.
 | `review`      | Allowed but above a human threshold — ask a human before paying.        |
 | `do_not_pay`  | Violates policy (network, asset, payTo, amount, timeout, or malformed). |
 
+## Supply chain and access
+
+Socket.dev scores this package on what it *can* do, not what it does with it, so the
+flags it raises are worth explaining rather than removing:
+
+| Flag | Why it is there |
+| --- | --- |
+| Filesystem access | Reads the policy JSON you point it at (`policy_path` / `PAYSTAGE_POLICY_PATH`). Nothing is written. |
+| Environment variable access | `PAYSTAGE_POLICY_PATH` only (and `PAYSTAGE_RPC_URL` via `auth-watch`). |
+| Network access, URL strings | None in this package. The RPC endpoints you may see in the tree belong to `@paystage/auth-watch`. |
+
+No shell, no `eval`, no telemetry, no key custody. The full table is in
+[SECURITY.md](../../SECURITY.md); the deny list is published with a citation per
+entry in [KNOWN_DRAINERS.md](./KNOWN_DRAINERS.md).
+
 ## Links
 
 - Website: <https://paystage.xyz>
+- X: <https://x.com/paystage_xyz>
 - Source: <https://github.com/base-buzz/paystage>
 - License: MIT

package/dist/evaluate.d.ts

@@ -34,5 +34,12 @@ export interface EvaluateResult {
     summary: string;
     dailyCapNote?: string;
 }
-export declare function evaluatePayment(pr: PaymentRequest, policy: Policy): EvaluateResult;
+export interface EvaluateOptions {
+    /**
+     * Which agent is asking. Required when the policy declares per-agent budgets:
+     * a policy with agents must never fall back to the loosest rules in the file.
+     */
+    agentId?: string;
+}
+export declare function evaluatePayment(pr: PaymentRequest, policy: Policy, options?: EvaluateOptions): EvaluateResult;
 //# sourceMappingURL=evaluate.d.ts.map

package/dist/evaluate.js

@@ -1,4 +1,4 @@
-import { humanToAtomic, atomicToHuman, } from "@paystage/policy";
+import { humanToAtomic, atomicToHuman, resolveAgentPolicy, } from "@paystage/policy";
 import { isKnownDrainer } from "./known-drainers.js";
 function eq(a, b) {
     return a.toLowerCase() === b.toLowerCase();
@@ -88,7 +88,20 @@ function cheapest(accepts) {
         return a.maxTimeoutSeconds - b.maxTimeoutSeconds;
     })[0];
 }
-export function evaluatePayment(pr, policy) {
+export function evaluatePayment(pr, policy, options = {}) {
+    // Rule 0: per-agent budgets. Resolve first — every later rule must run against the
+    // narrowed policy, not the global one, or a cheap agent could be judged by the
+    // expensive agent's ceiling.
+    const resolution = resolveAgentPolicy(policy, options.agentId);
+    if (!resolution.ok) {
+        return {
+            decision: "do_not_pay",
+            acceptResults: [],
+            reasons: [resolution.reason],
+            summary: "Agent identity could not be resolved against the policy.",
+        };
+    }
+    const effective = resolution.policy;
     // Rule 1: malformed
     if (!pr || pr.x402Version !== 2) {
         return {
@@ -106,7 +119,7 @@ export function evaluatePayment(pr, policy) {
             summary: "Payment request has no acceptable payment options.",
         };
     }
-    const acceptResults = pr.accepts.map((a) => evaluateAccept(a, policy));
+    const acceptResults = pr.accepts.map((a) => evaluateAccept(a, effective));
     const payAccepts = acceptResults
         .filter((r) => r.status === "pay")
         .map((r) => r.accept);

package/dist/known-drainers.js

@@ -46,6 +46,16 @@ export const SOURCES = [
         url: "https://www.0xcert.com/advisory/0xCERT-2026-0303",
         retrieved: "2026-11-05",
     },
+    {
+        name: "0xCERT advisory 0xCERT-2026-0314 (Loopscale attack campaign; EVM addresses named by Loopscale)",
+        url: "https://www.0xcert.com/advisory/0xCERT-2026-0314",
+        retrieved: "2026-11-07",
+    },
+    {
+        name: "0xCERT advisory 0xCERT-2026-0309 (CoreVault exploit; attacker EOA and exploit contract, BNB Chain per CertiK)",
+        url: "https://www.0xcert.com/advisory/0xCERT-2026-0309",
+        retrieved: "2026-11-07",
+    },
 ];
 /**
  * Small curated subset. Do not add addresses without a public citation.
@@ -101,6 +111,16 @@ export const KNOWN_DRAINERS = Object.freeze([
     // also flagged on Base/Arbitrum/Optimism (0xCERT-2026-0308, per Bitquery)
     // https://www.0xcert.com/advisory/0xCERT-2026-0303
     "0xe485e7a70b1131216cb47ca4555c4bbb2c742478",
+    // --- Added 2026-11-07 NZDT ---
+    // Loopscale attack campaign, EVM addresses named by Loopscale (0xCERT-2026-0314; chain not stated by the feed)
+    // https://www.0xcert.com/advisory/0xCERT-2026-0314
+    "0xb7ec7ef24fd73f3000c651ca9d0fa45b61dcf854",
+    "0xb8959aca4e4c796a3bada66833eae60b1bc0bfb2",
+    // CoreVault exploit, BNB Chain: attacker EOA (sender) and the exploit contract it created
+    // (0xCERT-2026-0309; CertiK-cited transaction, on-chain)
+    // https://www.0xcert.com/advisory/0xCERT-2026-0309
+    "0xd3565b191b28b49cc517189b984dacdb1ff05304",
+    "0xc28cfeee046e1421e9dbfb2cf689074bf9f387e2",
 ]);
 const SET = new Set(KNOWN_DRAINERS.map((a) => a.toLowerCase()));
 export function isKnownDrainer(addr) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paystage/preflight",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Evaluate x402 PaymentRequired against a local spending policy before an agent pays",
   "license": "MIT",
   "type": "module",
@@ -13,7 +13,7 @@
     }
   },
   "bin": {
-    "paystage-preflight": "./dist/cli.js"
+    "paystage-preflight": "dist/cli.js"
   },
   "files": [
     "dist",
@@ -53,7 +53,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/server": "^2.4.0",
-    "@paystage/policy": "0.2.0",
+    "@paystage/policy": "0.2.1",
     "zod": "^4.6.7"
   },
   "devDependencies": {

package/server.json

@@ -3,7 +3,7 @@
   "name": "xyz.paystage/preflight",
   "title": "PayStage Preflight",
   "description": "Evaluate x402 PaymentRequired against a local spending policy before an agent pays",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "websiteUrl": "https://paystage.xyz",
   "repository": {
     "url": "https://github.com/base-buzz/paystage",
@@ -15,7 +15,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@paystage/preflight",
-      "version": "0.2.0",
+      "version": "0.2.2",
       "transport": {
         "type": "stdio"
       },