foil-server 0.3.3

data/spec/fixtures/api/fingerprints/detail.json

@@ -0,0 +1,70 @@
+{
+  "data": {
+    "object": "visitor_fingerprint",
+    "id": "vid_456789abcdefghjkmnpqrstvwx",
+    "lifecycle": {
+      "first_seen_at": "2026-03-24T19:58:00.000Z",
+      "last_seen_at": "2026-03-24T20:00:05.000Z",
+      "seen_count": 3,
+      "expires_at": "2026-06-22T20:00:05.000Z"
+    },
+    "latest_request": {
+      "user_agent": "Mozilla/5.0",
+      "ip_address": "203.0.113.9"
+    },
+    "storage": {
+      "cookies": true,
+      "local_storage": true,
+      "indexed_db": true,
+      "service_worker": false,
+      "window_name": false
+    },
+    "anchors": {
+      "webgl_hash": null,
+      "parameters_hash": null,
+      "audio_hash": null
+    },
+    "components": {
+      "vector": [
+        1,
+        0,
+        1
+      ]
+    },
+    "activity": {
+      "sessions": [
+        {
+          "session_id": "sid_0123456789abcdefghjkmnpqrs",
+          "decision": {
+            "event_id": "evt_23456789abcdefghjkmnpqrstv",
+            "verdict": "human",
+            "risk_score": 9,
+            "phase": "behavioral",
+            "is_provisional": false,
+            "manipulation": {
+              "score": 0,
+              "verdict": "none"
+            },
+            "evaluation_duration_ms": 142,
+            "evaluated_at": "2026-03-24T20:00:05.000Z"
+          },
+          "request": {
+            "url": "https://example.com/signup",
+            "user_agent": "Mozilla/5.0",
+            "ip_address": "203.0.113.9",
+            "screen_size": "1440x900",
+            "is_touch_capable": false
+          },
+          "score_breakdown": {
+            "categories": {
+              "behavioral": 9
+            }
+          }
+        }
+      ]
+    }
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/fingerprints/list.json

@@ -0,0 +1,37 @@
+{
+  "data": [
+    {
+      "object": "visitor_fingerprint",
+      "id": "vid_456789abcdefghjkmnpqrstvwx",
+      "lifecycle": {
+        "first_seen_at": "2026-03-24T19:58:00.000Z",
+        "last_seen_at": "2026-03-24T20:00:05.000Z",
+        "seen_count": 3,
+        "expires_at": "2026-06-22T20:00:05.000Z"
+      },
+      "latest_request": {
+        "user_agent": "Mozilla/5.0",
+        "ip_address": "203.0.113.9"
+      },
+      "storage": {
+        "cookies": true,
+        "local_storage": true,
+        "indexed_db": true,
+        "service_worker": false,
+        "window_name": false
+      },
+      "anchors": {
+        "webgl_hash": null,
+        "parameters_hash": null,
+        "audio_hash": null
+      }
+    }
+  ],
+  "pagination": {
+    "limit": 50,
+    "has_more": false
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/agent-token-revoke.json

@@ -0,0 +1,3 @@
+{
+  "status": 204
+}

data/spec/fixtures/api/gate/agent-token-verify.json

@@ -0,0 +1,12 @@
+{
+  "data": {
+    "valid": true,
+    "gate_account_id": "gacct_0123456789abcdefghjkmnpqrs",
+    "status": "active",
+    "created_at": "2026-04-01T12:00:00.000Z",
+    "expires_at": "2026-06-30T12:00:00.000Z"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/login-session-consume.json

@@ -0,0 +1,10 @@
+{
+  "data": {
+    "object": "gate_dashboard_login",
+    "gate_account_id": "gacct_0123456789abcdefghjkmnpqrs",
+    "account_name": "my-project"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/login-session-create.json

@@ -0,0 +1,12 @@
+{
+  "data": {
+    "object": "gate_login_session",
+    "id": "gate_1123456789abcdefghjkmnpqrs",
+    "status": "pending",
+    "consent_url": "https://usefoil.com/gate?session=gate_1123456789abcdefghjkmnpqrs",
+    "expires_at": "2026-04-04T20:20:00.000Z"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/registry-detail.json

@@ -0,0 +1,45 @@
+{
+  "data": {
+    "id": "foil",
+    "status": "active",
+    "discoverable": true,
+    "name": "Foil",
+    "description": "Detect AI agents and malicious users",
+    "website": "https://usefoil.com",
+    "dashboard_login_url": "https://dashboard.usefoil.com/auth/gate",
+    "env_vars": [
+      {
+        "name": "Publishable key",
+        "key": "FOIL_PUBLISHABLE_KEY",
+        "secret": false
+      },
+      {
+        "name": "Secret key",
+        "key": "FOIL_SECRET_KEY",
+        "secret": true
+      }
+    ],
+    "docs_url": "https://usefoil.com/docs",
+    "sdks": [
+      {
+        "label": "Node",
+        "install": "npm install @abxy/foil-server",
+        "url": "https://www.npmjs.com/package/@abxy/foil-server"
+      }
+    ],
+    "branding": {
+      "logo_url": "https://usefoil.com/logo.png",
+      "primary_color": "#117BE7",
+      "secondary_color": "#0B5CAD",
+      "ascii_art": "FOIL",
+      "verified": true
+    },
+    "consent": {
+      "terms_url": "https://usefoil.com/terms",
+      "privacy_url": "https://usefoil.com/privacy"
+    }
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/registry-list.json

@@ -0,0 +1,47 @@
+{
+  "data": [
+    {
+      "id": "foil",
+      "status": "active",
+      "discoverable": true,
+      "name": "Foil",
+      "description": "Detect AI agents and malicious users",
+      "website": "https://usefoil.com",
+      "dashboard_login_url": "https://dashboard.usefoil.com/auth/gate",
+      "env_vars": [
+        {
+          "name": "Publishable key",
+          "key": "FOIL_PUBLISHABLE_KEY",
+          "secret": false
+        },
+        {
+          "name": "Secret key",
+          "key": "FOIL_SECRET_KEY",
+          "secret": true
+        }
+      ],
+      "docs_url": "https://usefoil.com/docs",
+      "sdks": [
+        {
+          "label": "Node",
+          "install": "npm install @abxy/foil-server",
+          "url": "https://www.npmjs.com/package/@abxy/foil-server"
+        }
+      ],
+      "branding": {
+        "logo_url": "https://usefoil.com/logo.png",
+        "primary_color": "#117BE7",
+        "secondary_color": "#0B5CAD",
+        "ascii_art": "FOIL",
+        "verified": true
+      },
+      "consent": {
+        "terms_url": "https://usefoil.com/terms",
+        "privacy_url": "https://usefoil.com/privacy"
+      }
+    }
+  ],
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/service-create.json

@@ -0,0 +1,49 @@
+{
+  "data": {
+    "object": "gate_service",
+    "id": "acme_prod",
+    "status": "active",
+    "discoverable": false,
+    "name": "Acme Production",
+    "description": "Acme production signup flow",
+    "website": "https://acme.example.com",
+    "dashboard_login_url": "https://dashboard.acme.example.com/auth/gate",
+    "env_vars": [
+      {
+        "name": "Publishable key",
+        "key": "ACME_PUBLISHABLE_KEY",
+        "secret": false
+      },
+      {
+        "name": "Secret key",
+        "key": "ACME_SECRET_KEY",
+        "secret": true
+      }
+    ],
+    "docs_url": "https://docs.acme.example.com/signup",
+    "sdks": [
+      {
+        "label": "Node",
+        "install": "npm install @acme/sdk",
+        "url": "https://www.npmjs.com/package/@acme/sdk"
+      }
+    ],
+    "branding": {
+      "logo_url": "https://acme.example.com/logo.png",
+      "primary_color": "#117BE7",
+      "secondary_color": "#0B5CAD",
+      "ascii_art": "ACME",
+      "verified": false
+    },
+    "consent": {
+      "terms_url": "https://acme.example.com/terms",
+      "privacy_url": "https://acme.example.com/privacy"
+    },
+    "created_at": "2026-04-03T20:00:00.000Z",
+    "updated_at": "2026-04-03T20:00:00.000Z",
+    "webhook_endpoint_id": "we_0123456789abcdef0123456789abcdef"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/service-detail.json

@@ -0,0 +1,49 @@
+{
+  "data": {
+    "object": "gate_service",
+    "id": "acme_prod",
+    "status": "active",
+    "discoverable": false,
+    "name": "Acme Production",
+    "description": "Acme production signup flow",
+    "website": "https://acme.example.com",
+    "dashboard_login_url": "https://dashboard.acme.example.com/auth/gate",
+    "env_vars": [
+      {
+        "name": "Publishable key",
+        "key": "ACME_PUBLISHABLE_KEY",
+        "secret": false
+      },
+      {
+        "name": "Secret key",
+        "key": "ACME_SECRET_KEY",
+        "secret": true
+      }
+    ],
+    "docs_url": "https://docs.acme.example.com/signup",
+    "sdks": [
+      {
+        "label": "Node",
+        "install": "npm install @acme/sdk",
+        "url": "https://www.npmjs.com/package/@acme/sdk"
+      }
+    ],
+    "branding": {
+      "logo_url": "https://acme.example.com/logo.png",
+      "primary_color": "#117BE7",
+      "secondary_color": "#0B5CAD",
+      "ascii_art": "ACME",
+      "verified": false
+    },
+    "consent": {
+      "terms_url": "https://acme.example.com/terms",
+      "privacy_url": "https://acme.example.com/privacy"
+    },
+    "created_at": "2026-04-03T20:00:00.000Z",
+    "updated_at": "2026-04-03T20:05:00.000Z",
+    "webhook_endpoint_id": "we_0123456789abcdef0123456789abcdef"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/service-disable.json

@@ -0,0 +1,49 @@
+{
+  "data": {
+    "object": "gate_service",
+    "id": "acme_prod",
+    "status": "disabled",
+    "discoverable": false,
+    "name": "Acme Production",
+    "description": "Acme production signup flow",
+    "website": "https://acme.example.com",
+    "dashboard_login_url": "https://dashboard.acme.example.com/auth/gate",
+    "env_vars": [
+      {
+        "name": "Publishable key",
+        "key": "ACME_PUBLISHABLE_KEY",
+        "secret": false
+      },
+      {
+        "name": "Secret key",
+        "key": "ACME_SECRET_KEY",
+        "secret": true
+      }
+    ],
+    "docs_url": "https://docs.acme.example.com/signup",
+    "sdks": [
+      {
+        "label": "Node",
+        "install": "npm install @acme/sdk",
+        "url": "https://www.npmjs.com/package/@acme/sdk"
+      }
+    ],
+    "branding": {
+      "logo_url": "https://acme.example.com/logo.png",
+      "primary_color": "#117BE7",
+      "secondary_color": "#0B5CAD",
+      "ascii_art": "ACME",
+      "verified": false
+    },
+    "consent": {
+      "terms_url": "https://acme.example.com/terms",
+      "privacy_url": "https://acme.example.com/privacy"
+    },
+    "created_at": "2026-04-03T20:00:00.000Z",
+    "updated_at": "2026-04-03T20:15:00.000Z",
+    "webhook_endpoint_id": "we_0123456789abcdef0123456789abcdef"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/service-update.json

@@ -0,0 +1,49 @@
+{
+  "data": {
+    "object": "gate_service",
+    "id": "acme_prod",
+    "status": "active",
+    "discoverable": true,
+    "name": "Acme Production",
+    "description": "Acme production signup flow",
+    "website": "https://acme.example.com",
+    "dashboard_login_url": "https://dashboard.acme.example.com/auth/gate",
+    "env_vars": [
+      {
+        "name": "Publishable key",
+        "key": "ACME_PUBLISHABLE_KEY",
+        "secret": false
+      },
+      {
+        "name": "Secret key",
+        "key": "ACME_SECRET_KEY",
+        "secret": true
+      }
+    ],
+    "docs_url": "https://docs.acme.example.com/signup",
+    "sdks": [
+      {
+        "label": "Node",
+        "install": "npm install @acme/sdk",
+        "url": "https://www.npmjs.com/package/@acme/sdk"
+      }
+    ],
+    "branding": {
+      "logo_url": "https://acme.example.com/logo.png",
+      "primary_color": "#117BE7",
+      "secondary_color": "#0B5CAD",
+      "ascii_art": "ACME",
+      "verified": false
+    },
+    "consent": {
+      "terms_url": "https://acme.example.com/terms",
+      "privacy_url": "https://acme.example.com/privacy"
+    },
+    "created_at": "2026-04-03T20:00:00.000Z",
+    "updated_at": "2026-04-03T20:10:00.000Z",
+    "webhook_endpoint_id": "we_0123456789abcdef0123456789abcdef"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/services-list.json

@@ -0,0 +1,51 @@
+{
+  "data": [
+    {
+      "object": "gate_service",
+      "id": "acme_prod",
+      "status": "active",
+      "discoverable": false,
+      "name": "Acme Production",
+      "description": "Acme production signup flow",
+      "website": "https://acme.example.com",
+      "dashboard_login_url": "https://dashboard.acme.example.com/auth/gate",
+      "env_vars": [
+        {
+          "name": "Publishable key",
+          "key": "ACME_PUBLISHABLE_KEY",
+          "secret": false
+        },
+        {
+          "name": "Secret key",
+          "key": "ACME_SECRET_KEY",
+          "secret": true
+        }
+      ],
+      "docs_url": "https://docs.acme.example.com/signup",
+      "sdks": [
+        {
+          "label": "Node",
+          "install": "npm install @acme/sdk",
+          "url": "https://www.npmjs.com/package/@acme/sdk"
+        }
+      ],
+      "branding": {
+        "logo_url": "https://acme.example.com/logo.png",
+        "primary_color": "#117BE7",
+        "secondary_color": "#0B5CAD",
+        "ascii_art": "ACME",
+        "verified": false
+      },
+      "consent": {
+        "terms_url": "https://acme.example.com/terms",
+        "privacy_url": "https://acme.example.com/privacy"
+      },
+      "created_at": "2026-04-03T20:00:00.000Z",
+      "updated_at": "2026-04-03T20:05:00.000Z",
+      "webhook_endpoint_id": "we_0123456789abcdef0123456789abcdef"
+    }
+  ],
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/session-ack.json

@@ -0,0 +1,10 @@
+{
+  "data": {
+    "object": "gate_session_delivery",
+    "gate_session_id": "gate_0123456789abcdefghjkmnpqrs",
+    "status": "acknowledged"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/session-create.json

@@ -0,0 +1,13 @@
+{
+  "data": {
+    "object": "gate_session",
+    "id": "gate_0123456789abcdefghjkmnpqrs",
+    "status": "pending",
+    "poll_token": "gtpoll_0123456789abcdefghjkmnpqrs",
+    "consent_url": "https://usefoil.com/gate?session=gate_0123456789abcdefghjkmnpqrs",
+    "expires_at": "2026-04-04T20:15:00.000Z"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/gate/session-poll.json

@@ -0,0 +1,36 @@
+{
+  "data": {
+    "object": "gate_session",
+    "id": "gate_0123456789abcdefghjkmnpqrs",
+    "status": "approved",
+    "expires_at": "2026-04-04T20:15:00.000Z",
+    "gate_account_id": "gacct_0123456789abcdefghjkmnpqrs",
+    "account_name": "my-project",
+    "delivery_bundle": {
+      "integrator": {
+        "version": 1,
+        "algorithm": "x25519-hkdf-sha256/aes-256-gcm",
+        "key_id": "kid_integrator_0123456789abcdefgh",
+        "ephemeral_public_key": "ephemeral_public_key_integrator",
+        "salt": "salt_integrator",
+        "iv": "iv_integrator",
+        "ciphertext": "ciphertext_integrator",
+        "tag": "tag_integrator"
+      },
+      "gate": {
+        "version": 1,
+        "algorithm": "x25519-hkdf-sha256/aes-256-gcm",
+        "key_id": "kid_gate_0123456789abcdefghjkm",
+        "ephemeral_public_key": "ephemeral_public_key_gate",
+        "salt": "salt_gate",
+        "iv": "iv_gate",
+        "ciphertext": "ciphertext_gate",
+        "tag": "tag_gate"
+      }
+    },
+    "docs_url": "https://usefoil.com/docs/gate"
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/organizations/api-key-create.json

@@ -0,0 +1,27 @@
+{
+  "data": {
+    "object": "api_key",
+    "id": "key_2y4grs8zpxb7n1q3dm5kc9wfta",
+    "type": "secret",
+    "name": "Production Backend",
+    "environment": "live",
+    "status": "active",
+    "allowed_origins": null,
+    "scopes": [
+      "sessions:list",
+      "sessions:read",
+      "api_keys:read"
+    ],
+    "rate_limit": null,
+    "key_preview": "sk_live_[example]...",
+    "revealed_key": "sk_live_[example_secret_key]",
+    "last_used_at": null,
+    "created_at": "2026-03-24T19:00:00.000Z",
+    "rotated_at": null,
+    "revoked_at": null,
+    "grace_expires_at": null
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/organizations/api-key-list.json

@@ -0,0 +1,31 @@
+{
+  "data": [
+    {
+      "object": "api_key",
+      "id": "key_6789abcdefghjkmnpqrstvwxyz",
+      "type": "publishable",
+      "name": "Acme Web App",
+      "environment": "live",
+      "status": "active",
+      "allowed_origins": [
+        "https://example.com"
+      ],
+      "scopes": null,
+      "rate_limit": null,
+      "key_preview": "pk_live_[example]...",
+      "display_key": "pk_live_[example_publishable_key]",
+      "last_used_at": "2026-03-24T19:30:00.000Z",
+      "created_at": "2026-03-24T19:00:00.000Z",
+      "rotated_at": null,
+      "revoked_at": null,
+      "grace_expires_at": null
+    }
+  ],
+  "pagination": {
+    "limit": 50,
+    "has_more": false
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/organizations/api-key-revoke.json

@@ -0,0 +1,25 @@
+{
+  "data": {
+    "object": "api_key",
+    "id": "key_6789abcdefghjkmnpqrstvwxyz",
+    "type": "publishable",
+    "name": "Acme Web App",
+    "environment": "live",
+    "status": "revoked",
+    "allowed_origins": [
+      "https://example.com"
+    ],
+    "scopes": null,
+    "rate_limit": null,
+    "key_preview": "pk_live_[example]...",
+    "display_key": "pk_live_[example_publishable_key]",
+    "last_used_at": "2026-03-24T19:30:00.000Z",
+    "created_at": "2026-03-24T19:00:00.000Z",
+    "rotated_at": null,
+    "revoked_at": "2026-03-24T20:05:00.000Z",
+    "grace_expires_at": null
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}

data/spec/fixtures/api/organizations/api-key-rotate.json

@@ -0,0 +1,27 @@
+{
+  "data": {
+    "object": "api_key",
+    "id": "key_789abcdefghjkmnpqrstvwxyz0",
+    "type": "secret",
+    "name": "Production Backend",
+    "environment": "live",
+    "status": "active",
+    "allowed_origins": null,
+    "scopes": [
+      "sessions:list",
+      "sessions:read",
+      "api_keys:manage"
+    ],
+    "rate_limit": null,
+    "key_preview": "sk_live_[rotated_example]...",
+    "revealed_key": "sk_live_[rotated_example_secret_key]",
+    "last_used_at": null,
+    "created_at": "2026-03-24T19:00:00.000Z",
+    "rotated_at": null,
+    "revoked_at": null,
+    "grace_expires_at": null
+  },
+  "meta": {
+    "request_id": "req_0123456789abcdef0123456789abcdef"
+  }
+}