x402-surface-check 0.2.15

• Preserve OpenAPI servers[] base paths when probing documented gateway routes.\n- Send the configured Origin on no-payment probes and flag 402 challenge responses that do not expose payment requirements to browser agents.\n- Add regression coverage for gateway base paths that would otherwise resolve to an unguarded domain-root route.

x402-surface-check v0.2.14

Adds support for top-level resources[] catalogs in x402 discovery documents and flags browser preflights that omit Access-Control-Allow-Origin before payment headers can be sent.

x402 Surface Check v0.2.13

Follows manifest-level OpenAPI links and uses OpenAPI query/path examples plus JSON request-body examples for safer no-payment probes. Also cleans object-valued network metadata in reports.

x402-surface-check v0.2.12

Follows linked x402 discovery documents such as discovery_url/resources_url when the root manifest points to a resource catalog, enabling one-command checks from .well-known/x402.json surfaces.

x402-surface-check v0.2.11

Refines paid-endpoint CORS/preflight findings so health/status endpoints do not dilute launch-readiness reports. Adds public proof links for UZPROOF and HYRE Agent checks.

x402-surface-check v0.2.10

Adds OpenAPI-declared price drift detection by comparing operation x-payment-info.price.amount with the live no-payment 402 challenge price. Useful for catching documented USD prices that differ from on-chain USDC challenge amounts.

x402-surface-check v0.2.9

Adds support for x402 V2 challenge bodies that use schemes[] instead of accepts[], preserves decimal maxAmountRequired values such as 0.05 USDC, and avoids clobbering JSON challenge bodies when X-Payment-Required is a boolean marker header.

x402-surface-check v0.2.8

Supports legacy decimal-denominated x402 v1 challenges that use amount + token fields, while preserving atomic-unit handling for v2 asset challenges. This fixes public reports for services that advertise USDC amounts such as 10.0 in the challenge body and x-payment-amount header.

x402-surface-check v0.2.7

• Format object-valued document metadata, including facilitator objects, without [object Object] in Markdown reports.\n- Add smoke coverage for object facilitator metadata.\n- Verified npm trusted-publisher release and fresh public npx install.

x402-surface-check v0.2.6

Leaves protocol blank when a no-payment probe did not return a payment challenge, so validation-first/free-first rows do not imply an observed x402 challenge.