agentadmit 1.10.0 → 1.10.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ccda6bad890712e5c6060b2c33d02df1b1245ff48918a267cede579acf3f0d84
-  data.tar.gz: 5ef222b57006bcba2bd589c2b6276117abcfac031230263a8063ef56449cf355
+  metadata.gz: 305d2a2680095a277efd613bbc48dc1c0e948109f05ce01aa995dbff99c172bc
+  data.tar.gz: 559cae430ea15ea9c66fb7e758efdab50fa652625d67f31bf7dab06d4606842d
 SHA512:
-  metadata.gz: a703d18e7a9a55ed4a34b07d2ed295ddfbc49fabdba0caef6b49ef0a57cb670097b78ef5a53849035e22cc3a29709977836df8b8bdd4f660fc09bb20adaac84e
-  data.tar.gz: 06a8b43f3a18b696df4ddccb6abb0130c62addff9d4ab948b51ea6ea1d2b0e2bf2cdb11b5cd1da90734fc94d9b6f7e3512f9fae536563418d4d8a361fc058a8b
+  metadata.gz: 145b55beeabfec1d0860f8d2bdf772b28e2a4a8ca0926c814aac49c3f516bee31f1a66f4dd26c894803452a178bfd296083ec89143185e4c3925aa8d4ae7ac07
+  data.tar.gz: f1e2e43b3ea29c1f59a67d2b8791050d8058cac7210edac2cab8b9ef5f6915b35e91479d30ea3cd44709b1ccaaab16c855dc38851f8aab0ce567e1a693b7914f

data/README.md

@@ -388,7 +388,7 @@ use AgentAdmit::Middleware, scope_for: ->(env) { SCOPES[env["PATH_INFO"]] }
 use AgentAdmit::Middleware, scope_for: "read:orders"
 ```
 
-`AgentAdmit::CallerConsent` never sends `scope_used` (its consent gate precedes any scope disclosure; the scope check stays local, after consent) but still reports endpoint and method. Direct client calls pass the same optional keyword arguments:
+`AgentAdmit::CallerConsent` reports its configured scope too and sets the hosted `consent_first` guard automatically, so denied caller classes receive no scope-state disclosure. Direct client calls pass the same optional keyword arguments:
 
 ```ruby
 result = AgentAdmit::IntrospectionClient.new.verify(

data/lib/agentadmit/caller_consent.rb

@@ -134,21 +134,17 @@ module AgentAdmit
       token = (env["HTTP_AUTHORIZATION"] || "").sub(/\Abearer /i, "")
 
       begin
-        # The verify body carries endpoint/method audit telemetry only.
-        # scope_used is deliberately NOT sent from this middleware: the
-        # hosted refusal body carries no consent verdict and no user_id, so
-        # a hosted scope refusal here could not be consent-resolved -- and
-        # consent must precede any scope disclosure (Patent FIG. 3). The
-        # scope check stays local, after the consent gate, exactly as the
-        # other AgentAdmit SDKs do.
+        # Declare the exact exercised scope in the same hosted round trip.
+        # consent_first guarantees a denied caller class cannot learn scope
+        # state before this middleware returns its consent 403.
         result = @client.verify(token,
+                                scope_used: @required_scope,
                                 endpoint: env["PATH_INFO"],
-                                method: env["REQUEST_METHOD"])
+                                method: env["REQUEST_METHOD"],
+                                consent_first: true)
       rescue InsufficientScopeError
-        # Unreachable when this middleware performs the verify (scope_used
-        # is never sent, so the hosted service cannot refuse on scope).
-        # Kept as a fail-closed guard that reveals no scope state to a
-        # caller class whose consent was never evaluated.
+        # Hosted consent-first ordering guarantees this refusal is reachable
+        # only after consent was granted.
         return [403, { "Content-Type" => "application/json" },
                 [{ error: "insufficient_scope",
                    message: "Call refused by the authorization service." }.to_json]]

data/lib/agentadmit/introspection_client.rb

@@ -91,7 +91,7 @@ module AgentAdmit
     # @raise [IntrospectionError] if the service is unreachable
     # @raise [RateLimitError] if rate-limited and retries exhausted
     #
-    def verify(token, scope_used: nil, endpoint: nil, method: nil)
+    def verify(token, scope_used: nil, endpoint: nil, method: nil, consent_first: false)
       unless token.start_with?(@config.token_prefix_access)
         raise InvalidTokenError, "Not an AgentAdmit access token"
       end
@@ -105,7 +105,8 @@ module AgentAdmit
 
       (0..max_retries).each do |attempt|
         request = build_request(uri, token, scope_used: scope_used,
-                                endpoint: endpoint, method: method)
+                                endpoint: endpoint, method: method,
+                                consent_first: consent_first)
 
         begin
           response = http.request(request)
@@ -371,7 +372,8 @@ module AgentAdmit
     # 20). Unknown fields are OMITTED, never sent as null or empty string --
     # the hosted audit row then honestly records "not reported".
     #
-    def build_request(uri, token, scope_used: nil, endpoint: nil, method: nil)
+    def build_request(uri, token, scope_used: nil, endpoint: nil, method: nil,
+                      consent_first: false)
       req = Net::HTTP::Post.new(uri.path)
       req["Authorization"] = "Bearer #{@config.api_key}"
       req["Content-Type"]  = "application/json"
@@ -383,6 +385,7 @@ module AgentAdmit
       body[:endpoint] = path if path
       verb = presence_of(method)
       body[:method] = verb.upcase[0, 20] if verb
+      body[:consent_first] = true if consent_first
 
       req.body = JSON.generate(body)
       req

data/lib/agentadmit/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AgentAdmit
-  VERSION = "1.10.0"
+  VERSION = "1.10.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: agentadmit
 version: !ruby/object:Gem::Version
-  version: 1.10.0
+  version: 1.10.1
 platform: ruby
 authors:
 - Christopher Emerson