@astrasyncai/verification-gateway 2.0.1 → 2.2.0

package/dist/git-trigger/git-hooks.d.mts

@@ -1,6 +1,6 @@
 import { AstraSyncGateway } from '../gateway/gateway.mjs';
-import { V as VerificationDecision, P as PDLSSContext } from '../types-jJnPXStc.mjs';
-import '../types-CxQwJKbd.mjs';
+import { V as VerificationDecision, P as PDLSSContext } from '../types-DE0ooQJ6.mjs';
+import '../types-CrVMq_Td.mjs';
 
 /**
  * Git Trigger — Enterprise git push / PR verification

package/dist/git-trigger/git-hooks.d.ts

@@ -1,6 +1,6 @@
 import { AstraSyncGateway } from '../gateway/gateway.js';
-import { V as VerificationDecision, P as PDLSSContext } from '../types-79qS7aON.js';
-import '../types-CxQwJKbd.js';
+import { V as VerificationDecision, P as PDLSSContext } from '../types-rigu2bH3.js';
+import '../types-CrVMq_Td.js';
 
 /**
  * Git Trigger — Enterprise git push / PR verification

package/dist/{index-BY8yQ8N8.d.mts → index-BMZdjGT4.d.mts}

@@ -1,4 +1,4 @@
-import { A as AstraSyncCredentials, g as ProtocolTransport, G as GatewayConfig } from './types-CxQwJKbd.mjs';
+import { A as AstraSyncCredentials, g as ProtocolTransport, G as GatewayConfig } from './types-CrVMq_Td.mjs';
 
 /**
  * AgentClient — Credential Presentation
@@ -12,6 +12,10 @@ interface AgentClientConfig {
     verifyUrl?: string;
     challengeUrl?: string;
     pdlss?: AstraSyncCredentials['pdlss'];
+    /** Base URL for AstraSync API (used for ownership check). Defaults to api.astrasync.ai */
+    apiBaseUrl?: string;
+    /** API key used to authenticate ownership check + other authenticated calls. */
+    apiKey?: string;
 }
 interface FetchOptions extends RequestInit {
     purpose?: string;
@@ -19,7 +23,25 @@ interface FetchOptions extends RequestInit {
 }
 declare class AgentClient {
     private credentials;
+    private apiBaseUrl;
+    private apiKey;
     constructor(config: AgentClientConfig);
+    /**
+     * Async factory that validates the API key's account owns the configured
+     * ASTRA-id before returning a usable client. Refuses to initialise on
+     * mismatch so a stolen ASTRA-id cannot be paired with a valid (different)
+     * API key.
+     *
+     * Set env `ASTRASYNC_SKIP_OWNERSHIP_CHECK=true` to bypass — intended for
+     * test environments only.
+     */
+    static create(config: AgentClientConfig): Promise<AgentClient>;
+    /**
+     * Calls GET /api/agents/:astraId/ownership with the configured API key.
+     * Returns true only when the backend confirms this API key's account
+     * owns the configured agent.
+     */
+    private verifyOwnership;
     /**
      * Make an HTTP request with AstraSync headers automatically injected.
      */
@@ -183,6 +205,23 @@ interface RecordDecisionResult {
  */
 declare function recordDecision(config: GatewayConfig, params: RecordDecisionParams): Promise<RecordDecisionResult>;
 
+/**
+ * Agent-side SDK errors.
+ */
+declare class AstraSyncSdkError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Thrown when the API key used to initialise AgentClient is not owned by
+ * the same account that registered the configured ASTRA-id. Blocks the
+ * client from doing anything under a mismatched identity.
+ */
+declare class OwnershipMismatchError extends AstraSyncSdkError {
+    readonly astraId: string;
+    constructor(astraId: string);
+}
+
 /**
  * Agent-Side SDK Module
  *
@@ -192,15 +231,19 @@ declare function recordDecision(config: GatewayConfig, params: RecordDecisionPar
 
 type index_AgentClient = AgentClient;
 declare const index_AgentClient: typeof AgentClient;
+type index_AstraSyncSdkError = AstraSyncSdkError;
+declare const index_AstraSyncSdkError: typeof AstraSyncSdkError;
 type index_ChallengeHandler = ChallengeHandler;
 declare const index_ChallengeHandler: typeof ChallengeHandler;
+type index_OwnershipMismatchError = OwnershipMismatchError;
+declare const index_OwnershipMismatchError: typeof OwnershipMismatchError;
 type index_PDLSSConfig = PDLSSConfig;
 type index_TransportPDLSS = TransportPDLSS;
 declare const index_formatPDLSSForTransport: typeof formatPDLSSForTransport;
 declare const index_parsePDLSSFromTransport: typeof parsePDLSSFromTransport;
 declare const index_recordDecision: typeof recordDecision;
 declare namespace index {
-  export { index_AgentClient as AgentClient, index_ChallengeHandler as ChallengeHandler, type index_PDLSSConfig as PDLSSConfig, type index_TransportPDLSS as TransportPDLSS, index_formatPDLSSForTransport as formatPDLSSForTransport, index_parsePDLSSFromTransport as parsePDLSSFromTransport, index_recordDecision as recordDecision };
+  export { index_AgentClient as AgentClient, index_AstraSyncSdkError as AstraSyncSdkError, index_ChallengeHandler as ChallengeHandler, index_OwnershipMismatchError as OwnershipMismatchError, type index_PDLSSConfig as PDLSSConfig, type index_TransportPDLSS as TransportPDLSS, index_formatPDLSSForTransport as formatPDLSSForTransport, index_parsePDLSSFromTransport as parsePDLSSFromTransport, index_recordDecision as recordDecision };
 }
 
-export { AgentClient as A, ChallengeHandler as C, type PDLSSConfig as P, type TransportPDLSS as T, formatPDLSSForTransport as f, index as i, parsePDLSSFromTransport as p, recordDecision as r };
+export { AgentClient as A, ChallengeHandler as C, OwnershipMismatchError as O, type PDLSSConfig as P, type TransportPDLSS as T, AstraSyncSdkError as a, formatPDLSSForTransport as f, index as i, parsePDLSSFromTransport as p, recordDecision as r };