Repository navigation
Conversation
|
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds two read-only SpendPreflight screening tools to GOAT: OFAC wallet/name and domain screening, and an x402 payment preflight returning allow/hold/block with reasons and a receipt. We operate SpendPreflight; this contribution was prepared with AI assistance and reviewed/tested by the operator.
The shared trial is three calls per IP per UTC day. Exhausted trials fail without automatically paying. Paid screening requires an explicitly injected paying fetch and costs $0.01 for a check or $0.02 for preflight, in USDC on Base. The plugin never accesses the supplied GOAT wallet or pays the merchant under review. Callers must enforce hold/block in their actual payment path; adding a model tool alone does not intercept other wallet tools. Screening is informational, not legal advice or certification.
Validation: six tests exercise the real GOAT tool interface with mocked HTTP, including fail-closed decisions, quota/error handling, origin restrictions and an unused wallet. Typecheck, tsup ESM/CJS/declaration build and Biome all pass. No real payments, wallet keys or LLM calls were used. The package is not published. Includes an initial changeset and workspace lock entry. No existing issue is associated with this new plugin.
We reviewed CONTRIBUTING.md and explicitly approve its MIT contribution terms. Fork Actions are disabled. Maintainer review and upstream CI remain required.