@astrasyncai/verification-gateway 1.0.0 → 1.1.0

package/dist/index.mjs

@@ -229,6 +229,7 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.enableRuntimeChallenge) body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;
   if (requestData.createSession) body.createSession = requestData.createSession;
   if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;
+  if (requestData.counterpartyUrl) body.counterpartyUrl = requestData.counterpartyUrl;
   if (requestData.runtimeChallengeOptions) body.runtimeChallengeOptions = requestData.runtimeChallengeOptions;
   const headers = {
     "Content-Type": "application/json",
@@ -276,10 +277,17 @@ async function verify(config, request) {
       return cached;
     }
   }
+  const enrichedRequest = { ...request };
+  if (!enrichedRequest.counterpartyUrl && mergedConfig.counterpartyUrl) {
+    enrichedRequest.counterpartyUrl = mergedConfig.counterpartyUrl;
+  }
+  if (!enrichedRequest.counterpartyType && mergedConfig.counterpartyType) {
+    enrichedRequest.counterpartyType = mergedConfig.counterpartyType;
+  }
   if (mergedConfig.debug) {
     console.log("[VerificationGateway] Calling verify-access API");
   }
-  const apiResponse = await callVerifyAccessAPI(mergedConfig, request);
+  const apiResponse = await callVerifyAccessAPI(mergedConfig, enrichedRequest);
   if (!apiResponse.success) {
     return createGuidanceResponse(mergedConfig, apiResponse.error);
   }
@@ -295,7 +303,11 @@ async function verify(config, request) {
         registrationUrl: `${mergedConfig.apiBaseUrl?.replace("/api", "")}/register`,
         documentationUrl: `${mergedConfig.apiBaseUrl?.replace("/api", "")}/docs/pdlss`
       },
-      verifiedAt: /* @__PURE__ */ new Date()
+      verifiedAt: /* @__PURE__ */ new Date(),
+      // Extract sessionId so decisions can be recorded for denials too
+      sessionId: apiResponse.sessionId,
+      recommendation: apiResponse.recommendation,
+      recommendationReasons: apiResponse.recommendationReasons
     };
     return result2;
   }
@@ -379,6 +391,16 @@ async function verify(config, request) {
   }
   return result;
 }
+async function recordDecision(config, sessionId, decision, reason) {
+  const headers = { "Content-Type": "application/json" };
+  if (config.apiKey) headers["X-API-Key"] = config.apiKey;
+  await fetch(`${config.apiBaseUrl}/agents/verify-access/${sessionId}/decision`, {
+    method: "POST",
+    headers,
+    body: JSON.stringify({ decision, reason })
+  }).catch(() => {
+  });
+}
 async function quickVerify(config, credentials) {
   const result = await verify(config, {
     credentials,
@@ -523,6 +545,7 @@ function createMiddleware(options) {
     extractPurpose: customExtractPurpose,
     skipPaths = [],
     onDenied = defaultOnDenied,
+    recordDecisions,
     ...config
   } = options;
   return async (req, res, next) => {
@@ -556,16 +579,23 @@ function createMiddleware(options) {
         return;
       }
       const purpose = customExtractPurpose ? customExtractPurpose(req) : defaultExtractPurpose(req);
+      const shouldRecordDecisions = recordDecisions !== false;
       const result = await verify(config, {
         credentials,
         purpose,
         action: req.method.toLowerCase(),
         resource: req.path,
         clientIp: req.ip,
-        userAgent: req.headers["user-agent"]
+        userAgent: req.headers["user-agent"],
+        createSession: shouldRecordDecisions
       });
       req.agentVerification = result;
+      const sessionId = result.sessionId;
       if (!hasMinimumAccess(result.accessLevel, routeConfig.minAccessLevel)) {
+        if (shouldRecordDecisions && sessionId) {
+          recordDecision(config, sessionId, "denied", result.denialReasons?.[0]).catch(() => {
+          });
+        }
         onDenied(result, req, res);
         return;
       }
@@ -574,10 +604,18 @@ function createMiddleware(options) {
           result.denialReasons = [
             `Trust score ${result.agent.trustScore} is below required ${routeConfig.minTrustScore}`
           ];
+          if (shouldRecordDecisions && sessionId) {
+            recordDecision(config, sessionId, "denied", result.denialReasons[0]).catch(() => {
+            });
+          }
           onDenied(result, req, res);
           return;
         }
       }
+      if (shouldRecordDecisions && sessionId) {
+        recordDecision(config, sessionId, "granted").catch(() => {
+        });
+      }
       next();
     } catch (error) {
       console.error("[VerificationGateway] Middleware error:", error);
@@ -1173,7 +1211,7 @@ __export(agent_exports, {
   ChallengeHandler: () => ChallengeHandler,
   formatPDLSSForTransport: () => formatPDLSSForTransport,
   parsePDLSSFromTransport: () => parsePDLSSFromTransport,
-  recordDecision: () => recordDecision
+  recordDecision: () => recordDecision2
 });
 
 // src/agent/client.ts
@@ -1385,7 +1423,7 @@ function parsePDLSSFromTransport(transport) {
 }
 
 // src/agent/decision-client.ts
-async function recordDecision(config, params) {
+async function recordDecision2(config, params) {
   const { sessionId, ...body } = params;
   const baseUrl = config.apiBaseUrl.replace(/\/$/, "");
   const url = `${baseUrl}/agents/verify-access/${encodeURIComponent(sessionId)}/decision`;
@@ -1438,7 +1476,7 @@ export {
   hasMinimumAccess,
   nextjs_exports as nextjs,
   quickVerify,
-  recordDecision,
+  recordDecision2 as recordDecision,
   sdk_exports as sdk,
   transport_exports as transport,
   verify