@astrasyncai/verification-gateway 2.0.1 → 2.2.0

package/dist/gateway/gateway.mjs

@@ -3126,21 +3126,33 @@ async function callVerifyAccessAPI(config, request) {
   if (requestData.isSubAgentRequest) body.isSubAgentRequest = requestData.isSubAgentRequest;
   if (requestData.parentAgentId) body.parentAgentId = requestData.parentAgentId;
   if (requestData.subAgentDepth !== void 0) body.subAgentDepth = requestData.subAgentDepth;
-  if (requestData.enableRuntimeChallenge) body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;
+  if (requestData.enableRuntimeChallenge)
+    body.enableRuntimeChallenge = requestData.enableRuntimeChallenge;
   if (requestData.createSession) body.createSession = requestData.createSession;
   if (requestData.durationRequired) body.durationRequired = requestData.durationRequired;
   if (requestData.counterpartyType) body.counterpartyType = requestData.counterpartyType;
   if (requestData.counterpartyUrl) body.counterpartyUrl = requestData.counterpartyUrl;
-  if (requestData.runtimeChallengeOptions) body.runtimeChallengeOptions = requestData.runtimeChallengeOptions;
+  if (requestData.runtimeChallengeOptions)
+    body.runtimeChallengeOptions = requestData.runtimeChallengeOptions;
+  if (requestData.callerMetadata || requestData.clientIp || requestData.userAgent) {
+    const meta = {
+      ...requestData.clientIp && { sourceIp: requestData.clientIp },
+      ...requestData.userAgent && { userAgent: requestData.userAgent },
+      ...requestData.callerMetadata
+    };
+    if (Object.keys(meta).length > 0) body.callerMetadata = meta;
+  }
   const headers = {
     "Content-Type": "application/json",
     ...config.customHeaders
   };
-  if (config.apiKey) {
-    headers["X-API-Key"] = config.apiKey;
-  }
   if (credentials.authorizationHeader) {
     headers["Authorization"] = credentials.authorizationHeader;
+  } else if (config.apiKey) {
+    headers["Authorization"] = `Bearer ${config.apiKey}`;
+  }
+  if (config.apiKey) {
+    headers["X-API-Key"] = config.apiKey;
   }
   try {
     const response = await fetch(`${config.apiBaseUrl}/agents/verify-access`, {
@@ -3241,16 +3253,11 @@ async function verify(config, request) {
   } : void 0;
   const trustScore = agent?.trustScore || 0;
   const isOrgMember = false;
-  const accessLevel = determineAccessLevel(
-    true,
-    trustScore,
-    isOrgMember,
-    {
-      "read-only": 20,
-      standard: mergedConfig.minTrustScore || 40,
-      full: mergedConfig.minTrustScoreForFull || 70
-    }
-  );
+  const accessLevel = determineAccessLevel(true, trustScore, isOrgMember, {
+    "read-only": 20,
+    standard: mergedConfig.minTrustScore || 40,
+    full: mergedConfig.minTrustScoreForFull || 70
+  });
   const result = {
     verified: true,
     accessLevel,
@@ -3272,7 +3279,9 @@ async function verify(config, request) {
   if (result.recommendation === "deny") {
     result.verified = false;
     result.accessLevel = "none";
-    result.denialReasons = result.recommendationReasons || ["Access denied by AstraSync recommendation"];
+    result.denialReasons = result.recommendationReasons || [
+      "Access denied by AstraSync recommendation"
+    ];
     if (result.runtimeChallenge) {
       result.guidance = {
         message: `Verification failed: ${result.runtimeChallenge.reason || "runtime challenge failed"}`,
@@ -3293,6 +3302,42 @@ async function verify(config, request) {
   return result;
 }
 
+// src/transport/rfc9421.ts
+import { parseDictionary } from "structured-headers";
+
+// src/transport/rfc9421-verify.ts
+import { httpbis } from "http-message-signatures";
+
+// src/transport/vi.ts
+import { splitSdJwt, decodeSdJwtSync } from "@sd-jwt/decode";
+import { createHash } from "crypto";
+
+// src/transport/stripe-webhook.ts
+import { createHmac, timingSafeEqual } from "crypto";
+
+// src/transport/ap2.ts
+import { decodeSdJwtSync as decodeSdJwtSync2 } from "@sd-jwt/decode";
+import { createHash as createHash2 } from "crypto";
+
+// src/transport/mpp.ts
+import { Challenge, Credential, Receipt } from "mppx";
+
+// src/transport/mpp-verify.ts
+import { BodyDigest } from "mppx";
+
+// src/transport/x402.ts
+import {
+  validatePaymentRequired,
+  validatePaymentPayload
+} from "@x402/core/schemas";
+import { safeBase64Decode } from "@x402/core/utils";
+
+// src/transport/vi-verify.ts
+import { createHash as createHash3, webcrypto } from "crypto";
+
+// src/transport/registry/visa.ts
+import { createRemoteJWKSet } from "jose";
+
 // src/gateway/modes/online.ts
 function toGatewayConfig(config) {
   return {