@astrasyncai/verification-gateway 3.1.0 → 3.2.0

package/dist/browser/browser-adapter.d.mts

@@ -1,7 +1,7 @@
 import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.mjs';
-import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-CyFwZ_Yu.mjs';
+import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-BNiLZY0i.mjs';
 import '../gateway/gateway.mjs';
-import '../types-Cuh7ELfr.mjs';
+import '../types-rFh4VMH4.mjs';
 
 /**
  * @astrasyncai/adapter-openclaw-browser

package/dist/browser/browser-adapter.d.ts

@@ -1,7 +1,7 @@
 import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.js';
-import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-WIRp_BP_.js';
+import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-DJi-u3fz.js';
 import '../gateway/gateway.js';
-import '../types-Cuh7ELfr.js';
+import '../types-rFh4VMH4.js';
 
 /**
  * @astrasyncai/adapter-openclaw-browser

package/dist/cli/index.d.mts

@@ -1,6 +1,6 @@
-import { b as LocalPurposeRule, d as LocalScope, c as LocalRiskThresholds, L as LocalPolicy, P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-CyFwZ_Yu.mjs';
+import { b as LocalPurposeRule, d as LocalScope, c as LocalRiskThresholds, L as LocalPolicy, P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-BNiLZY0i.mjs';
 import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.mjs';
-import '../types-Cuh7ELfr.mjs';
+import '../types-rFh4VMH4.mjs';
 import '../gateway/gateway.mjs';
 
 /**

package/dist/cli/index.d.ts

@@ -1,6 +1,6 @@
-import { b as LocalPurposeRule, d as LocalScope, c as LocalRiskThresholds, L as LocalPolicy, P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-WIRp_BP_.js';
+import { b as LocalPurposeRule, d as LocalScope, c as LocalRiskThresholds, L as LocalPolicy, P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-DJi-u3fz.js';
 import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.js';
-import '../types-Cuh7ELfr.js';
+import '../types-rFh4VMH4.js';
 import '../gateway/gateway.js';
 
 /**

package/dist/cursor/cursor-adapter.d.mts

@@ -1,7 +1,7 @@
 import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.mjs';
-import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-CyFwZ_Yu.mjs';
+import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-BNiLZY0i.mjs';
 import '../gateway/gateway.mjs';
-import '../types-Cuh7ELfr.mjs';
+import '../types-rFh4VMH4.mjs';
 
 /**
  * @astrasyncai/adapter-cursor

package/dist/cursor/cursor-adapter.d.ts

@@ -1,7 +1,7 @@
 import { PlatformAdapter, AdapterConfig } from '../adapter-interface/interface.js';
-import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-WIRp_BP_.js';
+import { P as PDLSSContext, V as VerificationDecision, A as AgentAction, I as InterceptResult } from '../types-DJi-u3fz.js';
 import '../gateway/gateway.js';
-import '../types-Cuh7ELfr.js';
+import '../types-rFh4VMH4.js';
 
 /**
  * @astrasyncai/adapter-cursor

package/dist/cursor/extension.d.mts

@@ -1,8 +1,8 @@
 import { VSCodeAPI } from './cursor-adapter.mjs';
 import '../adapter-interface/interface.mjs';
 import '../gateway/gateway.mjs';
-import '../types-CyFwZ_Yu.mjs';
-import '../types-Cuh7ELfr.mjs';
+import '../types-BNiLZY0i.mjs';
+import '../types-rFh4VMH4.mjs';
 
 /**
  * VS Code Extension entry point for AstraSync Local Guard (Cursor/VS Code).

package/dist/cursor/extension.d.ts

@@ -1,8 +1,8 @@
 import { VSCodeAPI } from './cursor-adapter.js';
 import '../adapter-interface/interface.js';
 import '../gateway/gateway.js';
-import '../types-WIRp_BP_.js';
-import '../types-Cuh7ELfr.js';
+import '../types-DJi-u3fz.js';
+import '../types-rFh4VMH4.js';
 
 /**
  * VS Code Extension entry point for AstraSync Local Guard (Cursor/VS Code).

package/dist/cursor/extension.js

@@ -3293,14 +3293,6 @@ function verifyLocal(evaluator, context) {
 }
 
 // src/access-levels.ts
-var ACCESS_LEVEL_HIERARCHY = {
-  none: 0,
-  restricted: 1,
-  "read-only": 2,
-  standard: 3,
-  full: 4,
-  internal: 5
-};
 function getTrustLevel(score) {
   if (score >= 80) return "PLATINUM";
   if (score >= 60) return "GOLD";
@@ -3309,7 +3301,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "3.1.0";
+var SDK_VERSION = "3.2.0";
 
 // src/well-known.ts
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -3362,7 +3354,7 @@ async function performInitCheck(apiBaseUrl, debug, strictInit) {
   }
 }
 var verificationCache = /* @__PURE__ */ new Map();
-function getCacheKey(request) {
+function getCacheKey(request, counterpartyId) {
   const c = request.credentials;
   return [
     c.astraId || "",
@@ -3375,6 +3367,14 @@ function getCacheKey(request) {
     request.jurisdiction || "",
     request.transactionValue ?? "",
     request.currency || "",
+    // SECURITY (cross-merchant cache leak): the merchant identity is sent via
+    // `config.counterpartyId`, NOT on the request, so it was previously absent
+    // from the key — two verifies for the SAME agent/purpose/action/value but
+    // DIFFERENT merchants collided, and a grant at a permissive merchant (low
+    // trust floor) was served for a stricter one. Same bug class as the
+    // duration omission (F-A1-07). counterpartyId affects the backend verdict
+    // (trust floor / per-route policy), so it MUST key the cache.
+    counterpartyId || "",
     request.counterpartyUrl || "",
     request.counterpartyType || "",
     request.isSubAgentRequest ? "1" : "0",
@@ -3398,8 +3398,8 @@ function getCacheKey(request) {
     request.callerMetadata?.agentCardUrl || ""
   ].join("|");
 }
-function getCachedResult(request) {
-  const key = getCacheKey(request);
+function getCachedResult(request, counterpartyId) {
+  const key = getCacheKey(request, counterpartyId);
   const cached = verificationCache.get(key);
   if (cached && cached.expiresAt > Date.now()) {
     return cached.result;
@@ -3411,9 +3411,9 @@ function getCachedResult(request) {
 }
 var DEFAULT_AUTONOMOUS_TTL_SECONDS = 60;
 var DEFAULT_STEP_UP_TTL_SECONDS = 300;
-function cacheResult(request, result, configuredTtl) {
+function cacheResult(request, result, configuredTtl, counterpartyId) {
   const ttlSeconds = configuredTtl && configuredTtl > 0 ? configuredTtl : result.requiresStepUp ? DEFAULT_STEP_UP_TTL_SECONDS : DEFAULT_AUTONOMOUS_TTL_SECONDS;
-  const key = getCacheKey(request);
+  const key = getCacheKey(request, counterpartyId);
   verificationCache.set(key, {
     result,
     expiresAt: Date.now() + ttlSeconds * 1e3
@@ -3571,7 +3571,7 @@ async function verify(config, request) {
     );
   }
   if (mergedConfig.cacheTtl !== 0) {
-    const cached = getCachedResult(request);
+    const cached = getCachedResult(request, mergedConfig.counterpartyId);
     if (cached) {
       if (mergedConfig.debug) {
         console.log("[VerificationGateway] Returning cached result");
@@ -3623,8 +3623,8 @@ async function verify(config, request) {
       verifiedAt: /* @__PURE__ */ new Date(),
       // Extract sessionId so decisions can be recorded for denials too
       sessionId: apiResponse.sessionId,
-      // v2.3.10 (defect #34, round-4): anonymous traffic has no session →
-      // correlationId is the linking key for paired local_override events.
+      // Anonymous traffic has no session → correlationId is the per-attempt
+      // linking key (the sessionId-equivalent for anonymous callers).
       correlationId: apiResponse.correlationId,
       recommendation: apiResponse.recommendation,
       recommendationReasons: apiResponse.recommendationReasons
@@ -3698,13 +3698,10 @@ async function verify(config, request) {
     };
   } else if (result.recommendation === "step_up_required") {
     result.requiresStepUp = true;
-    if (ACCESS_LEVEL_HIERARCHY[result.accessLevel] > ACCESS_LEVEL_HIERARCHY["read-only"]) {
-      result.accessLevel = "read-only";
-    }
     result.denialReasons = result.recommendationReasons || ["Step-up verification required"];
   }
   if (mergedConfig.cacheTtl !== 0 && result.recommendation !== "deny") {
-    cacheResult(request, result, mergedConfig.cacheTtl);
+    cacheResult(request, result, mergedConfig.cacheTtl, mergedConfig.counterpartyId);
   }
   return result;
 }