x402-safe-fetch 0.11.0 → 0.11.1

package/README.md

@@ -142,11 +142,11 @@ With `shareOutcomes: true`, safe-fetch tells x402 Doctor what happened after it
 When safe-fetch does **not** pay (a `no_go`, or a `caution` that `onCaution` stops), it reports `refused` with the reason code that stopped it (for example `payto_changed`, `price_changed` or `payee_mismatch`). That is the seller's signal back: Doctor shows sellers how often agents refused to pay their endpoint and why (in the free web check and `GET https://x402-doctor.fizzl.eu/api/v1/refusals?url=…`), as counts only, never who.
 
 With `tellSellers: true`, a refusal also goes straight to the seller, when its 402 names a refusal url on its own site (the draft refusal extension, [x402-foundation/x402#4087](https://github.com/x402-foundation/x402/issues/4087)). safe-fetch posts the ready report from Doctor's preflight:
-- the reason code (for example `screening_hit` or `price_above_limit`);
+- the reason code (for example `price_above_limit`, `network_unsupported` or `trust_low`);
 - the sha256 of the refused offer;
 - the endpoint without its query.
 
-No keys, no amounts from your wallet, nothing about you. It goes only to the endpoint's own site, with redirects refused, at most once a day per endpoint and reason, and never delays the error you get. It works with or without `shareOutcomes`.
+No keys, no amounts from your wallet, nothing about you, and no `by` naming safe-fetch, so buyers aren't grouped by the client they use. A `screening_hit` (sanctioned payout address) isn't sent: the draft (0.2) takes it only signed, and safe-fetch holds no key to sign with. It goes only to the endpoint's own site, with redirects refused, at most once a day per endpoint and reason, and never delays the error you get. It works with or without `shareOutcomes`.
 
 ## Signed verdicts
 

package/index.js

@@ -22,8 +22,8 @@
 // or response content are sent.
 // With tellSellers, a refusal also goes to the seller itself when its 402 names a refusal url on its own site (the
 // draft refusal extension, x402-foundation/x402#4087): the ready report from Doctor's preflight (reason code and the
-// hash of the refused offer; no query, no keys, nothing about the buyer), once a day per endpoint and reason. Off by
-// default.
+// hash of the refused offer; no query, no keys, nothing about the buyer or this client), once a day per endpoint and
+// reason. A screening_hit isn't sent: the draft takes it only signed. Off by default.
 // Every preflight must carry Doctor's signed receipt for exactly this request
 // (endpoint, method, budget, network), checked against Doctor's pinned signer:
 // a missing, changed or forged verdict is never a payment (receipt.js).
@@ -41,7 +41,7 @@ export { verifyReceipt, recoverSigner, canonicalJson, inputHash, certMessage, DO
 export const DOCTOR_URL = "https://x402-doctor.fizzl.eu";
 export const PREFLIGHT_CAP = "$0.002"; // the preflight costs $0.001; never more than twice that
 export const DIAGNOSE_CAP = "$0.02"; // the diagnosis costs $0.01; never more than twice that
-export const VERSION = "0.11.0";
+export const VERSION = "0.11.1";
 // Doctor sees which calls come from this package (in its usage counts), nothing more.
 const DOCTOR_HEADERS = { accept: "application/json", "user-agent": `x402-safe-fetch/${VERSION}` };
 export const BASE = "eip155:8453";
@@ -391,6 +391,8 @@ export function createSafeFetch({
     if (target.protocol !== "https:" && !["localhost", "127.0.0.1"].includes(target.hostname)) return;
     if (!sameSite(target.hostname, endpoint.hostname)) return;
     if (refusal.report.resource !== `${endpoint.origin}${endpoint.pathname}`) return;
+    // The draft (0.2) takes a screening_hit only signed, and this client holds no key to sign with.
+    if (refusal.signature_required || (refusal.report.reason === "screening_hit" && !refusal.report.signature)) return;
     const key = `${refusal.report.resource} ${refusal.report.reason}`;
     if (now() - (toldSellers.get(key) ?? -Infinity) < 24 * 60 * 60 * 1000) return;
     toldSellers.set(key, now());
@@ -399,7 +401,8 @@ export function createSafeFetch({
       .then(() => baseFetch(target.href, {
         method: "POST",
         headers: { "content-type": "application/json" },
-        body: JSON.stringify({ ...refusal.report, by: `x402-safe-fetch/${VERSION}` }),
+        // No "by": buyers aren't grouped by the client they use.
+        body: JSON.stringify(refusal.report),
         redirect: "error",
       }))
       .then((r) => r?.body?.cancel?.())

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "x402-safe-fetch",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "A fetch for AI agents that checks an unknown x402 endpoint ($0.001 x402 Doctor preflight) before paying it, and never pays above your budget.",
   "type": "module",
   "exports": {