@astrasyncai/verification-gateway 2.0.1 → 2.2.0

package/dist/{types-CxQwJKbd.d.ts → types-CrVMq_Td.d.ts}

@@ -40,7 +40,7 @@ interface AgentCredentials {
 interface GatewayConfig {
     /** AstraSync API base URL */
     apiBaseUrl: string;
-    /** API key for authenticating with AstraSync (optional for public endpoints) */
+    /** API key for authenticating with AstraSync. */
     apiKey?: string;
     /** Default access level for unverified requests */
     defaultAccessLevel?: AccessLevel;
@@ -173,6 +173,26 @@ interface VerificationResult {
 /**
  * Request context for verification
  */
+/**
+ * Caller metadata forwarded from the agent's original HTTP request so the
+ * endpoint owner can see the real agent-side fingerprint in activity views.
+ * Without this, IP/UA recorded on platform_events would be the counterparty
+ * server's (useless for endpoint-side forensics).
+ */
+interface CallerMetadata {
+    /** Agent-side source IP (honours X-Forwarded-For if set). */
+    sourceIp?: string;
+    /** Agent's User-Agent header. */
+    userAgent?: string;
+    /** Referer header (where the agent navigated from, if applicable). */
+    referer?: string;
+    /** Host the agent called (this counterparty's public hostname). */
+    host?: string;
+    /** Raw X-Forwarded-For chain for audit. */
+    forwardedFor?: string;
+    /** Published agent card URL, if the agent advertised one (future: from agent headers). */
+    agentCardUrl?: string;
+}
 interface VerificationRequest {
     /** Agent credentials */
     credentials: AgentCredentials;
@@ -196,10 +216,17 @@ interface VerificationRequest {
     parentAgentId?: string;
     /** Depth of sub-agent chain */
     subAgentDepth?: number;
-    /** Client IP address */
+    /** Client IP address (deprecated — use callerMetadata.sourceIp) */
     clientIp?: string;
-    /** User agent string */
+    /** User agent string (deprecated — use callerMetadata.userAgent) */
     userAgent?: string;
+    /**
+     * Forwarded request metadata from the agent's original call.
+     * When the SDK is embedded in a counterparty server, these describe
+     * the agent-side fingerprint — not the counterparty server itself.
+     * The express/nextjs adapters auto-populate these from `req`.
+     */
+    callerMetadata?: CallerMetadata;
     /** Enable runtime challenge for this request */
     enableRuntimeChallenge?: boolean;
     /** Create a verification session (returns sessionId) */

package/dist/{types-jJnPXStc.d.mts → types-DE0ooQJ6.d.mts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, C as CounterpartyType, T as TokenGuidance } from './types-CxQwJKbd.mjs';
+import { a as AccessLevel, C as CounterpartyType, T as TokenGuidance } from './types-CrVMq_Td.mjs';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/{types-79qS7aON.d.ts → types-rigu2bH3.d.ts}

@@ -1,4 +1,4 @@
-import { a as AccessLevel, C as CounterpartyType, T as TokenGuidance } from './types-CxQwJKbd.js';
+import { a as AccessLevel, C as CounterpartyType, T as TokenGuidance } from './types-CrVMq_Td.js';
 
 /**
  * AstraSync Gateway - Types for gateway modes, local evaluation, and adapter interface.

package/dist/ui/index.d.mts

@@ -1,4 +1,4 @@
-import { d as CommerceShieldProps, V as VerificationResult, b as AgentCredentials, f as GuidanceInfo, i as TrustLevel } from '../types-CxQwJKbd.mjs';
+import { d as CommerceShieldProps, V as VerificationResult, b as AgentCredentials, f as GuidanceInfo, i as TrustLevel } from '../types-CrVMq_Td.mjs';
 
 /**
  * AstraSync Commerce Shield Component

package/dist/ui/index.d.ts

@@ -1,4 +1,4 @@
-import { d as CommerceShieldProps, V as VerificationResult, b as AgentCredentials, f as GuidanceInfo, i as TrustLevel } from '../types-CxQwJKbd.js';
+import { d as CommerceShieldProps, V as VerificationResult, b as AgentCredentials, f as GuidanceInfo, i as TrustLevel } from '../types-CrVMq_Td.js';
 
 /**
  * AstraSync Commerce Shield Component

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrasyncai/verification-gateway",
-  "version": "2.0.1",
+  "version": "2.2.0",
   "description": "Universal Verification Gateway for AstraSync KYA Platform - verify AI agents across any counterparty type",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -82,14 +82,15 @@
     "README.md"
   ],
   "scripts": {
-    "build": "tsup",
+    "build": "cross-env NODE_OPTIONS=--max-old-space-size=4096 tsup",
     "dev": "tsup --watch",
     "lint": "eslint src --ext .ts,.tsx",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest watch",
     "clean": "rm -rf dist extensions",
-    "package:extensions": "bash scripts/package-extensions.sh"
+    "package:extensions": "bash scripts/package-extensions.sh",
+    "prepublishOnly": "npm run clean && npm run typecheck && npm run build"
   },
   "keywords": [
     "astrasync",
@@ -107,6 +108,18 @@
     "url": "https://github.com/AstraSync-KYA/KYA-Platform.git",
     "directory": "packages/verification-gateway"
   },
+  "dependencies": {
+    "@sd-jwt/core": "^0.19.0",
+    "@sd-jwt/decode": "^0.19.0",
+    "@sd-jwt/utils": "^0.19.0",
+    "@x402/core": "^2.10.0",
+    "ajv": "^8.17.1",
+    "http-message-signatures": "^1.0.5",
+    "jose": "^5.9.6",
+    "mppx": "0.5.13",
+    "structured-headers": "^2.0.1",
+    "web-bot-auth": "^0.1.3"
+  },
   "peerDependencies": {
     "express": ">=4.0.0",
     "next": ">=13.0.0",
@@ -125,6 +138,7 @@
   },
   "devDependencies": {
     "@types/express": "^4.17.21",
+    "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.10.0",
     "@types/react": "^18.2.45",
     "eslint": "^8.56.0",

package/dist/index-B1ThcGZl.d.mts

@@ -1,89 +0,0 @@
-import { A as AstraSyncCredentials, g as ProtocolTransport } from './types-CxQwJKbd.mjs';
-
-/**
- * HTTP Transport Adapter
- *
- * Maps AstraSync credentials to/from HTTP headers (X-Astra-* convention).
- */
-
-/**
- * Inject AstraSync credentials into HTTP headers.
- */
-declare function setHttpHeaders(headers: Record<string, string>, credentials: AstraSyncCredentials): Record<string, string>;
-/**
- * Extract AstraSync credentials from HTTP headers.
- */
-declare function extractHttpCredentials(headers: Record<string, string | string[] | undefined>): AstraSyncCredentials | null;
-
-/**
- * A2A (Agent-to-Agent) Transport Adapter
- *
- * Maps AstraSync credentials to/from A2A task metadata.astrasync block.
- */
-
-interface A2ATask {
-    metadata?: Record<string, unknown>;
-    [key: string]: unknown;
-}
-/**
- * Add AstraSync credentials to an A2A task's metadata block.
- */
-declare function setA2AMetadata(task: A2ATask, credentials: AstraSyncCredentials): A2ATask;
-/**
- * Extract AstraSync credentials from an A2A task's metadata block.
- */
-declare function extractA2ACredentials(task: A2ATask): AstraSyncCredentials | null;
-
-/**
- * MCP (Model Context Protocol) Transport Adapter
- *
- * Maps AstraSync credentials to/from MCP params._meta.astrasync block.
- */
-
-interface McpParams {
-    _meta?: Record<string, unknown>;
-    [key: string]: unknown;
-}
-/**
- * Add AstraSync credentials to MCP params' _meta block.
- */
-declare function setMcpMeta(params: McpParams, credentials: AstraSyncCredentials): McpParams;
-/**
- * Extract AstraSync credentials from MCP params' _meta block.
- */
-declare function extractMcpCredentials(params: McpParams): AstraSyncCredentials | null;
-
-/**
- * Cross-Protocol Transport Module
- *
- * Provides adapters for injecting/extracting AstraSync credentials
- * across HTTP, A2A, and MCP protocols.
- */
-
-/**
- * Auto-detect protocol from request/context shape.
- */
-declare function detectProtocol(context: Record<string, unknown>): ProtocolTransport;
-/**
- * Apply credentials to any protocol target.
- */
-declare function applyCredentials(protocol: ProtocolTransport, target: Record<string, unknown>, credentials: AstraSyncCredentials): Record<string, unknown>;
-/**
- * Extract credentials from any protocol context.
- */
-declare function extractCredentialsFromProtocol(protocol: ProtocolTransport, context: Record<string, unknown>): AstraSyncCredentials | null;
-
-declare const index_applyCredentials: typeof applyCredentials;
-declare const index_detectProtocol: typeof detectProtocol;
-declare const index_extractA2ACredentials: typeof extractA2ACredentials;
-declare const index_extractCredentialsFromProtocol: typeof extractCredentialsFromProtocol;
-declare const index_extractHttpCredentials: typeof extractHttpCredentials;
-declare const index_extractMcpCredentials: typeof extractMcpCredentials;
-declare const index_setA2AMetadata: typeof setA2AMetadata;
-declare const index_setHttpHeaders: typeof setHttpHeaders;
-declare const index_setMcpMeta: typeof setMcpMeta;
-declare namespace index {
-  export { index_applyCredentials as applyCredentials, index_detectProtocol as detectProtocol, index_extractA2ACredentials as extractA2ACredentials, index_extractCredentialsFromProtocol as extractCredentialsFromProtocol, index_extractHttpCredentials as extractHttpCredentials, index_extractMcpCredentials as extractMcpCredentials, index_setA2AMetadata as setA2AMetadata, index_setHttpHeaders as setHttpHeaders, index_setMcpMeta as setMcpMeta };
-}
-
-export { applyCredentials as a, extractCredentialsFromProtocol as b, extractHttpCredentials as c, detectProtocol as d, extractA2ACredentials as e, extractMcpCredentials as f, setHttpHeaders as g, setMcpMeta as h, index as i, setA2AMetadata as s };

package/dist/index-DnoXfdFd.d.ts

@@ -1,89 +0,0 @@
-import { A as AstraSyncCredentials, g as ProtocolTransport } from './types-CxQwJKbd.js';
-
-/**
- * HTTP Transport Adapter
- *
- * Maps AstraSync credentials to/from HTTP headers (X-Astra-* convention).
- */
-
-/**
- * Inject AstraSync credentials into HTTP headers.
- */
-declare function setHttpHeaders(headers: Record<string, string>, credentials: AstraSyncCredentials): Record<string, string>;
-/**
- * Extract AstraSync credentials from HTTP headers.
- */
-declare function extractHttpCredentials(headers: Record<string, string | string[] | undefined>): AstraSyncCredentials | null;
-
-/**
- * A2A (Agent-to-Agent) Transport Adapter
- *
- * Maps AstraSync credentials to/from A2A task metadata.astrasync block.
- */
-
-interface A2ATask {
-    metadata?: Record<string, unknown>;
-    [key: string]: unknown;
-}
-/**
- * Add AstraSync credentials to an A2A task's metadata block.
- */
-declare function setA2AMetadata(task: A2ATask, credentials: AstraSyncCredentials): A2ATask;
-/**
- * Extract AstraSync credentials from an A2A task's metadata block.
- */
-declare function extractA2ACredentials(task: A2ATask): AstraSyncCredentials | null;
-
-/**
- * MCP (Model Context Protocol) Transport Adapter
- *
- * Maps AstraSync credentials to/from MCP params._meta.astrasync block.
- */
-
-interface McpParams {
-    _meta?: Record<string, unknown>;
-    [key: string]: unknown;
-}
-/**
- * Add AstraSync credentials to MCP params' _meta block.
- */
-declare function setMcpMeta(params: McpParams, credentials: AstraSyncCredentials): McpParams;
-/**
- * Extract AstraSync credentials from MCP params' _meta block.
- */
-declare function extractMcpCredentials(params: McpParams): AstraSyncCredentials | null;
-
-/**
- * Cross-Protocol Transport Module
- *
- * Provides adapters for injecting/extracting AstraSync credentials
- * across HTTP, A2A, and MCP protocols.
- */
-
-/**
- * Auto-detect protocol from request/context shape.
- */
-declare function detectProtocol(context: Record<string, unknown>): ProtocolTransport;
-/**
- * Apply credentials to any protocol target.
- */
-declare function applyCredentials(protocol: ProtocolTransport, target: Record<string, unknown>, credentials: AstraSyncCredentials): Record<string, unknown>;
-/**
- * Extract credentials from any protocol context.
- */
-declare function extractCredentialsFromProtocol(protocol: ProtocolTransport, context: Record<string, unknown>): AstraSyncCredentials | null;
-
-declare const index_applyCredentials: typeof applyCredentials;
-declare const index_detectProtocol: typeof detectProtocol;
-declare const index_extractA2ACredentials: typeof extractA2ACredentials;
-declare const index_extractCredentialsFromProtocol: typeof extractCredentialsFromProtocol;
-declare const index_extractHttpCredentials: typeof extractHttpCredentials;
-declare const index_extractMcpCredentials: typeof extractMcpCredentials;
-declare const index_setA2AMetadata: typeof setA2AMetadata;
-declare const index_setHttpHeaders: typeof setHttpHeaders;
-declare const index_setMcpMeta: typeof setMcpMeta;
-declare namespace index {
-  export { index_applyCredentials as applyCredentials, index_detectProtocol as detectProtocol, index_extractA2ACredentials as extractA2ACredentials, index_extractCredentialsFromProtocol as extractCredentialsFromProtocol, index_extractHttpCredentials as extractHttpCredentials, index_extractMcpCredentials as extractMcpCredentials, index_setA2AMetadata as setA2AMetadata, index_setHttpHeaders as setHttpHeaders, index_setMcpMeta as setMcpMeta };
-}
-
-export { applyCredentials as a, extractCredentialsFromProtocol as b, extractHttpCredentials as c, detectProtocol as d, extractA2ACredentials as e, extractMcpCredentials as f, setHttpHeaders as g, setMcpMeta as h, index as i, setA2AMetadata as s };